UNCLASSIFIED US BICES-X TNE Introduction and Services 2 June 2015.

UNCLASSIFIED

UNCLASSIFIED

US BICES-X TNE Introduction and Services

2 June 2015

UNCLASSIFIED

UNCLASSIFIED 2

Training Overview

• Introduction

• Account Request Process

• Support Documents and Help Process

• Summary

UNCLASSIFIED

UNCLASSIFIED 3

US BICES-X Mission and Purpose

• The DoD requires an enduring, secure information sharing capability with partners around the world

• US BICES-X provides a system capable of conducting planning through execution of any mission or operation

• US BICES-X is capable of bilateral and multinational communications and ensures the security and the releasable aspect of all information

UNCLASSIFIED

UNCLASSIFIED 4

What is US BICES-X

• US BICES-X is not a traditional network but rather across-domain solution that connects multiple networks

• The United States and several partner networks are connected via US BICES-X:– US SIPRNet– United States Battlefield Information Collection and Exploitation

System (US BICES) Network • 28 NATO Countries + 7 Non-NATO Countries

– Bilateral connections to various single country networks

UNCLASSIFIED

UNCLASSIFIED 5

Trusted Network Environment® (TNE)

• The Trusted Network Environment (TNE) is an environment within US BICES-X that controls access to data sent via 3 services (Email, Chat, and File Share)– Separate accounts are required for access to TNE Chat and File

Share services– TNE is a classification-based environment based on the network the

user is gaining access from

Trusted Network Environment (TNE)

TNE Services Available:

Email ChatFile Manager

US BICES-X

UNCLASSIFIED

UNCLASSIFIED 6

TNE Method

• The 3 TNE services have 2 common features:– Items are marked with classification markings

(email message, chat room, and files)– Classification markings determine who has access to it

• TNE files are posted to one data repository where all users can view the information if it contains a classification commensurate with their connected network

• A classification marking of Secret dominates TNE

EXAMPLE:File A labeled “Rel to Zz” and File B labeled “Rel to Yy” can be in the same database

Users from the Zz network can only see file A, but not file B

UNCLASSIFIED

UNCLASSIFIED 7

TNE Account Request

• Users will contacts the Coalition Support Service Desk (CSSD)

• The CSSD will email users an Account Request form to be completed and returned to the CSSD

• The CSSD will submit a ticket for the new account– Attach the completed Account Request form to the ticket– A TNE Administrator will create the account– Users will receive their new account user name and initial password

via an email message once their account is created

UNCLASSIFIED

UNCLASSIFIED 8

User Support

• User can contact the CSSD for help with:– New Account Requests– Account Lock Out/Password reset support– System outage help– Slow system help– Contact numbers provided at the end of this presentation

UNCLASSIFIED

UNCLASSIFIED 9

Help Documents and Training

• Numerous help documents are available– User Guides– Manuals

• Training– Training slides– Training classes

• Presented by US BICES trainers

UNCLASSIFIED

UNCLASSIFIED 10

Workstation Access

• Log onto your participating workstation using the credentials (user ID and password) provided when your account was created

• Your workstation has been configured to allow you access to TNE workstation based services– Email– File sharing*– Chat*

• If your workstation is not configured to access the TNE services contact your local network administrator

*TNE User Accounts Required for Access

UNCLASSIFIED

UNCLASSIFIED

Email

11

UNCLASSIFIED

UNCLASSIFIED 12

Email Overview

• Most common communications tool used to transmit messages or information across a network between two or more individuals or groups

• Use the Email application available on your local network

• All Emails transiting TNE must contain a classification line as the first line in your email

UNCLASSIFIED

UNCLASSIFIED 13

Email Requirements

• All messages must meet these requirements:– Contain a classification and caveats text line above and below the

body of the message– Formatted in plain text vs. html– There currently is no size limits in TNE, but your local network may

have limits

UNCLASSIFIED

UNCLASSIFIED 14

Classifications and Caveats

• All messages must contain a classification and caveat identifier at the top and bottom of the body of the message

• There are 3 classifications for CPN messages:– Unclassified– Confidential– Secret

• There are many caveats (stipulations) to select from– Refer to your local security classification guide for details– See the classification tool on the next slide for details

UNCLASSIFIED

UNCLASSIFIED 15

Classifications and Caveats (cont)

• All messages must have a caveat• Classification//REL Caveats, (Caveats)

SECRET//REL TO USA, XXX

CONFIDENTIAL//REL TO USA, XXX

UNCLASSIFIED//REL TO USA, XXX

• Classification Tool– Most Windows workstations have a

classification program to classify andcaveat messages

– EUCOM SIPRnet uses Classify forWindows and EUCOM bilats andBICES use MW Classify

• No Classification Tool– If a classification tool is not available, you

can manually enter a classification line atthe top of your email

• Make sure it is in the appropriate format• Example: SECRET//REL TO USA, CAN

Classify for Windows

*When sending an attachment, you must select the same classification for class with and without an attachment!

UNCLASSIFIED

UNCLASSIFIED 16

Rejected Emails

• Messages that are incorrectly classified will be rejected by the system

• Rejection message is the same for any issue– HTML vs. Plain text– Classification error– Release statement error

UNCLASSIFIED

UNCLASSIFIED 17

Plain Text Format

• All messages that travel acrossTNE are required to be formattedin plain text and not HTML

• Format and write your message* in plain text or your htmlmessage will lose its meaningwhen viewed in plain text

• To select plain text click the Format Text tab

• Click the Plain Text button and verify it stays enabled (yellow color)

• Type your message

UNCLASSIFIED

UNCLASSIFIED 18

HTML to Plain Text

• If you fail to type your message in plain text but realize it before you send: switch it to plain text

• Click the Plain Text button and then click the Continue button to change the format

• Note – messages sent within a country maybe sent formatted in HTML. In country messages do not crossTNE thus plain textis not a requirement

UNCLASSIFIED

UNCLASSIFIED 19

Addressing Messages

• There are two options to address a message– Click the To button and use your in-country list– Type the address of the individual in the text box next to the

To button• Separate multiple addresses with a semicolon (;)• There is no Global Address Listing (GAL)

or directory to show all email addressesacross the networks and all countries

• Your local network GAL will only lookupother uses on your network

• It is recommended that users find andcontact key counterparts to buildpersonalized email listings in order toconduct business

• A global address list is under development and will be available on the TNE web

UNCLASSIFIED

UNCLASSIFIED 20

Addresses

• Email address extensions for EUCOM connected networks

Network @ Address

SIPRNet mail.smil.mil

US BICES bices.orgEC-01 xxxx.srel.milEC-02 usxx.srel.milEC-03 usxx.srel.mil

UNCLASSIFIED

UNCLASSIFIED 21

Send

• When all aspects of the message have been addressed press the Send button to transmit the message

UNCLASSIFIED

UNCLASSIFIED 22

Email Dirty Words

• Email has a feature that checks for text in an attachment or body of the message that are considered “dirty”

• A dirty word could be an indicator the message classification should be kept Secret

• Dirty words will be stripped from attachments by TNE • If a dirty word is in the body of a message it will be rejected by

TNE• Dirty Word Examples

– Secret – “SECRETary” or “The secret to success is planning…”

• In both examples the dirty words feature will not allow an email message to be classified as confidential or unclassified

• If a message you think is not Secret will not reach you intended recipient please submit a ticket to request administrator assistance with trouble shooting and possibly placing a word like “secretary” on the clean word list

UNCLASSIFIED

UNCLASSIFIED

File Manager

23

UNCLASSIFIED

UNCLASSIFIED 24

File Manager Overview

• Users who want to share information (files) will be able to access/share authoritative data and finished Intelligence, Operations, and Plans products

• All finished products can be accessed or posted within the TNE File Manager

• Uploaded files are automatically labeled at the HIGH of their network connection

• Within this established framework, a logical folder structure will be set up by subject area, to facilitate easier access to shared and posted finished products:– Category 1 User = Download/Upload/Relabel permissions– Category 2 User = Download/Upload permissions– Category 3 User = Download permissions

UNCLASSIFIED

UNCLASSIFIED 25

Levels of Access and Responsibilities

Users will be granted permission to operate within three user categories, or levels of access:Category 3 (Download files in shared folders) – Majority of Category 3 users must identify any inappropriately marked products to a Category 1 user

Category 2 (Download and Upload files to shared folders) – Users will be allowed to:

1. Manage content on assigned folders

2. Upload documents on behalf of Category 3 users, as required

Category 1 (Download, Upload, and Relabel) – Users will be allowed to change classification and releasable information in the shared folders

3. Accounts will be restricted to Foreign Disclosure Officers, Disseminators, nationally appointed release authorities, and administrators only

4. Only authorized to relabel files they own and cannot relabel files uploaded by other users.

UNCLASSIFIED

UNCLASSIFIED 26

Verify Your Access Category

• The title bar of your browser will verify your level of access

• It will state “CATX”, where the “X” is a 1, 2 or 3 indicating access category

UNCLASSIFIED

UNCLASSIFIED 27

Access File Manager

• Open a browser and enter the address provided in your account creation message

• The first time you access the TNEweb you may be required to acceptthe TNE certificate

• Accept the consent notice

• Enter your credentials and click OK

• First time users must reset their password

UNCLASSIFIED

UNCLASSIFIED 28

Reset Password

• First time users must reset their password after initial log in

• All users must reset theirpassword every60 days

• Please note therestrictions of the newpassword on the changepassword page

UNCLASSIFIED

UNCLASSIFIED 29

Welcome Screen

• The Welcome Screen shows when your password expires

UNCLASSIFIED

UNCLASSIFIED 30

Access File Share (cont)

• On the Welcome Page look for theApplications menu and click theNew Explorer Library link

• It opens a Windows Explorer typepage where files and directoriesare listed

UNCLASSIFIED

UNCLASSIFIED 31

Download and View Files

View files by downloading them first:

1. Click the file you wish to viewTwo file viewing options:

• Click the Down Arrow button• Right-click then click Download a File option

2. Click either Open, Save, or Cancel on the pop up dialog as desired

3. View or use the file as desired

UNCLASSIFIED

UNCLASSIFIED 32

File Naming Convention

• All users should follow a set of file namingstandards to ensure easy access andretrieval of information

• All content that requires recurringinformation products should be dated using the YYYYMMDD format and the file name (Example: 20140510-OIR-Reports)

• File names should be short and succinct, but provide enough information on the product contents to be discoverable

• Note: The only characters authorized in the naming convention are as follows: 0-9, A-Z, a-z, hyphen (-), period (.), underscore (_), and open and close parentheses ()

• Failure to follow these naming conventions will result in the file not being uploaded– Spaces in the file name will automatically be replaced with

underscores (_)

.bmp .gif .ppt .txt

.bz2 .gz .pptm .wmf

.doc .jpeg .pptx .xls

.docm .jpg .tar .xlsx

.docx .pdf .tif .xlsm

.emf .png .tiff .zip

Supported File Types

UNCLASSIFIED

UNCLASSIFIED 33

Uploading (Posting) Files

• Users (Category 2 or 1) will have permission to upload files into folders

• Two file upload options:– Click the Up Arrow button– Right-click and select

Upload File

UNCLASSIFIED

UNCLASSIFIED 34

Uploading (Posting) Files (Cont.)

• From the File Uploader window click on Select a File

• Select the file using theChoose a File to Uploaddialog

• The file name selectedwill appear in the File 1 text box

• To upload click the Uploadbutton

• Click the OK button on theUpload Status dialog– The Upload Status box will

display the classification levelyour file will be labeled

UNCLASSIFIED

UNCLASSIFIED 35

Finalize the Upload

• After a short period(1 to 5 mins) after fileupload click the Finalization Queue button

• In the window that appearsclick the check box to selectthe file then click the Accept Change button

– If you file is not yet available you may have to hit refresh until the file appears. The larger the file the longer it takes.

• Click Yes on the Accept Changes dialog

• Close the Finalization Queue dialog

• The file is ready for use

UNCLASSIFIED

UNCLASSIFIED 36

Create/Delete Folders

Category 1 users can create folders:• Right click on any folder for a list of

options– Create a New Folder (sub-folder)

• Select the New Folder Name• Select the Security Level• Select the Compartments (release)

– Delete an Existing Folder– Make Folder Private/Public if required

(folder owner only)– Folder mangers

(View the manager of a folder)

UNCLASSIFIED

UNCLASSIFIED 37

Relabel Items

• Category 1 users can change the classification or releasable aspect of a file or folder

• Files are uploaded at your connection high with no release statement

• Click on the file to relabel it• Click the Change File/Folder Label button• Click the Yes button to confirm the desire to change

UNCLASSIFIED

UNCLASSIFIED 38

Relabel Items (cont)

• Select the new Security Level• Select the new Compartments (release statements)• Click the Change Classification button• Click the Yes to confirm your change• Click the OK in side car response window once change is made

UNCLASSIFIED

UNCLASSIFIED 39

Finalize the Change

• After a shortperiod (1 to 5 mins) after the change clickon the FinalizationQueue button

• In the window that appears click the check box to select the file then click the Accept Change button

• Click Yes on the Accept changes dialog

• Close theFinalization Queue dialog

• The file securityclassification is changed

UNCLASSIFIED

UNCLASSIFIED 40

File Manager Dirty Words

• File Manager also has a Dirty Words feature for posted files• A dirty word could be an indicator the message classification

should be kept Secret• File Uploads that contain a dirty word will not be uploaded by

TNE • If a dirty word is in the body of a message during a re-label, the

re-label will not be allowed.• Dirty Word Examples

– Secret – “SECRETary” or “The secret to success is planning…”

• In both examples the dirty words feature will not allow an file to be uploaded at any level other than “Secret”

• If a message you think is not Secret will not reach you intended recipient please submit a ticket to request administrator assistance with trouble shooting and possibly placing a word like “secretary” on the clean word list

UNCLASSIFIED

UNCLASSIFIED 41

Email and File Manager Transfer Issues

• TNE inspects files for classification content and verifies the content is in accordance with the assigned classification before it passes through TNE (posts or email attachments)

• The system rejects some files based on technical issues or user error

• The workarounds or solutions to these known issues are listed in the next three slides

UNCLASSIFIED

UNCLASSIFIED 42

PowerPoint File Fixes

• Remove unnecessary Slide Master Formats (only keep the ones you're using)

• Check Slide Masters to ensure there are no embedded classification markings higher than the classification of your document

• Look at the content of each slide. If you have boxes overlapping, touching, or extending off the slide, any of those reasons will cause the file to not pass through the TNE successfully.

UNCLASSIFIED

UNCLASSIFIED 43

MS Office Files Fixes (PowerPoint, Excel, Word)

• Inspect the file for issues (remove Header/Footer (not in word otherwise it will strip your classification marking), Embedded documents, Macros, forms, ActiveX controls, Custom XML Data, Invisible Content, Off Slide Content, Comments and Annotations, and Notes just to name a few)

– The steps to do this is covered on next slide• Fix classification markings (comply with CAPCO i.e. SECRET//REL TO USA,

MESF, not SECRET//REL MESF)• Ensure classification markings are correct (a common mistake is when a period

vs. a comma is used or putting an extra space in; e.g., SECRET// REL TO USA. MESF

• Dirty Words. Do not use the words UNCLASSIFIED, CONFIDENTIAL, or SECRET anywhere in your document unless it’s a classification marking. This will cause it to fail. Do a keyword search for those terms to ensure they are not present.

• Ensure your document has a REL TO classification marking (you cannot send a regular UNCLASSIFIED document/emails between networks, it has to be releasable to someone)

• Save your product as an Office 2003 Format (.doc, .xls, .ppt), instead of the normal 2007 or newer format (.docx, .xlsx, .pptx)

• If all else fails, save your product as a PDF.

UNCLASSIFIED

UNCLASSIFIED 44

Check File For Issues

• To check a file for issues such as hidden properties or personal information that may cause TNE to reject the file follow these steps:1. Click File

2. Click Info

3. Click Check for Issues

4. Click Inspect Document

5. Check the items toinspect

6. Click Inspect

7. Remove issues that exist

8. Re-inspect as needed

9. Save the file

UNCLASSIFIED

UNCLASSIFIED 45

Chat

UNCLASSIFIED

UNCLASSIFIED 46

Chat Overview

• (U) Common uses of Chat– Relaying time sensitive information (troop contact; threat tippers,

indications & warnings)– Collaboration between US BICES-X participating users– Command and Control (C2) of ISR platforms

• Users must have a TNE account to use this service

• TNE uses an XMPP chat server that is compatible with the TransVerse Chat Application

• User are required to have the TransVerse chat application installed on their local workstation.

UNCLASSIFIED

UNCLASSIFIED

Configure TransVerse

• Click the Start menu and type Transverse to find the TransVerse program.

• Click the application name to launch it

• Configure the New Account dialog that open as follows:– Login & password provided by

account creation message– Click the check-boxes next to Save

Password and Auto Login– My Chat Server: Enter xmpp146– Click the Options button to expand the

dialog box

47

UNCLASSIFIED

UNCLASSIFIED 48

Configuration (continued)

• Cross Domain tab – verify Disabled is selected for Cross Domain Mode

• Advanced tab– Connection Host: Enter the IP

address of your network as provided by a TNE administrator

– Port: Enter 5222– Leave all other fields as

defaulted

• Click Login

UNCLASSIFIED

UNCLASSIFIED 49

Change Password

• You are required to change your initialpassword when TransVerse opens or youraccount will be locked/disabled

• You are also required to change yourpassword every 60 days

• Click Edit then Change Password• Password rules: Minimum of 14 characters, contain at least one

uppercase letter, one lower case letter, one special character (! @ # $ % ^ ( ) & *), one number, and cannot have any characters repeat more than three times

• Click Change• Exit TransVerse• Reopen TransVerse (if you

checked the Save Password and Auto Login you will be automatically logged in)

UNCLASSIFIED

UNCLASSIFIED 50

Creating a Chat Room

• Chatting takes place within rooms

• Create a room as follows:– Click the My Places tab– Right click on the My Server folder– Select Add Room

• Room naming convention– Room names are constructed in three (3) parts and all spaces “ ” will

be replaced with an underline “_”:• Part 1 will be the abbreviated name of the operation (e.g., OIR).• Part 2 will start the country of the subject area• Part 3 will state the subject area, subject group/organization, or subject

asset callsign the room is intended to be used for (e.g., Mosul_Dam, TF-92, or MQ1_Hackney01).

• Click OK to create the room

UNCLASSIFIED

UNCLASSIFIED 51

Room Set Up

• The Configuration dialog appears automatically:– Set the classification and releasability

for the room—default is the maximum level of the connection (cannot be changed once set)

– Set the maximum number of room occupants (0=unlimited).

– Ensure Make Room Publicly Searchable? and Make Room Persistent? are the only two boxes checked in the list.

– These are the only features available in our environment

• Click OK

UNCLASSIFIED

UNCLASSIFIED 52

Chatting

• Double click on the desired room to communicate via chatting in it

• Number in parenthesis is the number of people in the chat room

• Type your information in the text box and press the Enter key

• Click the close button to leave the room

• New message notifications; system tray, Group chat tab, icon color changes

1. Message History2. Enter new text and press the Enter key

UNCLASSIFIED

UNCLASSIFIED 53

Chat Buttons and Participants

• Chat Room Buttons– Undock– Scroll Lock– Session History– Disable Enter = Send– Find– Filter

• Participants– User Name format– FirstInitialLastNameCountry

IE - jsmithusa

Chat Participants

UNCLASSIFIED

UNCLASSIFIED 54

TransVerse Menu

• Edit– Change Password– Accounts – see set up of your account– Other items – not relevant

• View– My Places– Group Chat – a tab that contains all chat rooms

you are active in– My Chat Sessions – a window that shows all

open chat rooms

• Other Menu items are not relevant and not used in our environment

UNCLASSIFIED

UNCLASSIFIED 55

Destroy a Chat Room

When the room is no longer needed - destroy it (only the room creator can destroy the room)

1. Enter the room you created

2. Click the Red X icon to destroy the room

3. Click Yes to confirm the destruction of it, then OK

4. The room will be gone the next time you log in

UNCLASSIFIED

UNCLASSIFIED 56

Disabled Features• Invite others to chat

• User Search• 160 character maximum per chat line

(not a user preference but a system setting)

Issues• There are a few issues that will log you

out if attempted. Issues will slowly be resolved over time.

Issues, Features and Preferences

Preferences• Click the Edit menu then click

Preferences– Adjust your preferences as

desired– Suggest you click on Display

then uncheck the Show HTML… checkbox

UNCLASSIFIED

UNCLASSIFIED 57

Reminders and Tips

• Reminder– US BICES-X allows users the ability to share information within a

multi-domain environment as well as segregate and protect data based upon user profiles settings and access

– Even with this type of safeguards in place, users must remain vigilant when it comes to network security

– It is the individual user’s responsibility to adhere to instructions and regulations on Cybersecurity/Information Assurance set forth in host nation user agreements and by appointed security officers

• Tip– Suggest you create shortcuts on your workstation or browser for

• TransVerse Chat

UNCLASSIFIED

UNCLASSIFIED 58

Coalition Support Service Desk Contacts

• Phone– DSN: 314-268-2815– Commercial: + 44 1480 84 2815– VoIP: 001-311-2000– VoSIP: 302-428-3501

• Email– Classified:

osd.molesworth.osd.mbx.USBICES-coalition-servicedesk@mail.smil.mil

– Unclassified:

[email protected]

– Unclassified:

[email protected]

UNCLASSIFIED

UNCLASSIFIED 59

TNE Summary

• Services– Chat– File Share– Email

• Users on networks connected via US BICES-X can now communicate in a secure manner to support operations

• Information shared is only available to those they share it with

• User names and passwords required for:• Chat• File Share

• Email and File Share require the user to set the classification and caveats of the file or message

• Email requirements:• Classification and caveat• Plain text• No size limit