Problem Note 58733: Patches required due to important changes to USPS Address Verification and National Change of Address (NCOA)
 |  |  |  |  |
Due to changes announced recently by USPS, patches must be installed in order to continue to use monthly USPS address updates (also known as "DataPacks") with SAS® Data Management Products beyond July 2017.
If your organization does not license United States address verification functionality as part of your SAS Data Management deployment, you do not need to take any action.
Details
To improve the security levels of all of its products, the USPS is changing the digital signatures on USPS address reference data in 2017. The USPS is moving from a digital signature of SHA-1 to SHA-256. SHA stands for secure hash algorithm, and 256 indicates the more secure standard.
Because SAS licenses address data from the USPS to support United States address verification functionality in several products, USPS address verification in SAS Data Management offerings will no longer work with older DataPacks after July 2017.
What SAS Data Management functions will be affected?
Here is a list of affected functionality found in offerings that include DataFlux® Data Management Studio and DataFlux® Data Management Server:
- Address Verification and Address Update nodes using USPS data packs
- National Change of Address (NCOALink) from USPS
- Residential Delivery Indicator (RDI) data from USPS
If you use these features and are on version 2.3 or later, you must install patches as described in this document to all DataFlux Data Management Studio and DataFlux Data Management Server installations.
When will the patches become available?
The patches are available now.
Where are the patches located?
For DataFlux Data Management Studio and DataFlux Data Management Server version 2.7, the recommended approach is to apply Update 1 for v2.7 (see Installation Note 61294). Click the Hot Fix tab in this note to access the specific hot fix instead.
For DataFlux Data Management Studio and DataFlux Data Management Server versions 2.6, or 2.5.1, click the Hot Fix tab in this note to access the hot fix.
For DataFlux Data Management Studio and DataFlux Data Management Server versions 2.3 or 2.4, downloads are available on the SAS Data Management / DataFlux Path Downloads for products with B & C Support Levels page. Search using the following fix numbers:
- DataFlux Data Management Studio 2.3 - 21184
- DataFlux Data Management Server 2.3 - 21185
- DataFlux Data Management Studio 2.4 - 21186
- DataFlux Data Management Server 2.4 - 21190
Note: For customers using National Change of Address (NCOALink) from USPS, open a support track to request an additional NCOA-specific patch.
What about the older Data Management Products such as DataFlux® dfPower® Studio 8.2.3 or SAS® Data Management Platform 2.2?
No patches are planned for Support Level C Data Management products. This is consistent with SAS Technical Support Services and Policies. These products will no longer be able to use monthly USPS data pack updates newer than July 2017. USPS data packs from July 2017 or earlier might continue to be used with older products but results will degrade over time as actual USPS address information starts to deviate from the information contained in the older data packs. Customers who find themselves in this situation must upgrade their DataFlux Data Management Studio and DataFlux Data Management Server environments to version 2.3 at a minimum. Preferably, customers will upgrade to the latest version of SAS Data Management software, which is currently version 2.7.
Will there be a transition period?
In July 2017, the USPS data packs will be made available in either type of digital signature: SHA-256 or SHA-1. Patches are needed in order to use the USPS data packs with the SHA-256 digital signature. Apply the relevant patches and perform any desired testing during this transition period. Starting on August 1, 2017, new USPS data packs cannot be used without the patches in place on affected software.
Note: Only the encoding of the USPS data packs is being changed, so there are no accuracy or performance impacts although there might be a small number of differences when comparing SHA-1 and SHA-256 results. These differences will either produce a match on the SHA-1 data and a no-match on the SHA-256 data, or vice versa. The number of differences should be minimal and are not cause for concern. For more details, see this announcement from USPS.
Operating System and Release Information
| Product Family | Product | System | SAS Release | |
| Reported | Fixed* | |||
| Dataflux | N/A | Microsoft Windows Server 2008 for x64 | ||
| Microsoft Windows Server 2012 Datacenter | ||||
| Microsoft Windows Server 2008 R2 | ||||
| Microsoft Windows Server 2008 | ||||
| Microsoft Windows Server 2003 for x64 | ||||
| Microsoft Windows Server 2003 Enterprise Edition | ||||
| Microsoft Windows Server 2003 Standard Edition | ||||
| Microsoft Windows Server 2003 Datacenter Edition | ||||
| Microsoft Windows NT Workstation | ||||
| Microsoft Windows 2000 Server | ||||
| Microsoft Windows 2000 Professional | ||||
| Microsoft Windows 2000 Datacenter Server | ||||
| Microsoft Windows 95/98 | ||||
| Microsoft Windows 2000 Advanced Server | ||||
| Microsoft Windows 10 | ||||
| Microsoft Windows 8.1 Pro 32-bit | ||||
| Microsoft Windows 8.1 Pro x64 | ||||
| Microsoft Windows 8.1 Enterprise x64 | ||||
| Microsoft Windows 8 Pro x64 | ||||
| Microsoft Windows 8.1 Enterprise 32-bit | ||||
| Microsoft Windows 8 Pro 32-bit | ||||
| Microsoft Windows 8 Enterprise 32-bit | ||||
| Microsoft Windows 8 Enterprise x64 | ||||
| OS/2 | ||||
| SAS Cloud | ||||
| Microsoft® Windows® for x64 | ||||
| Microsoft Windows XP 64-bit Edition | ||||
| Microsoft Windows Server 2003 Enterprise 64-bit Edition | ||||
| Microsoft® Windows® for 64-Bit Itanium-based Systems | ||||
| Microsoft Windows Server 2003 Datacenter 64-bit Edition | ||||
| Macintosh | ||||
| Macintosh on x64 | ||||
| Chrome Web Browser | ||||
| Android Operating System | ||||
| Apple Mobile Operating System | ||||
| N/A | ||||
| IBM AS/400 | ||||
| OpenVMS VAX | ||||
| z/OS | ||||
| z/OS 64-bit | ||||
| Teradata on Linux | ||||
| Netezza TwinFin 64-bit S-Blades | ||||
| Netezza TwinFin 64-bit SMP Hosts | ||||
| Netezza TwinFin 32bit blade | ||||
| Netezza TwinFin 32-bit SMP Hosts | ||||
| DB2 Universal Database on AIX | ||||
| DB2 Universal Database on Linux x64 | ||||
| Aster Data nCluster on Linux x64 | ||||
| Microsoft Windows Server 2012 R2 Datacenter | ||||
| Microsoft Windows Server 2012 R2 Std | ||||
| Microsoft Windows Server 2012 Std | ||||
| Microsoft Windows XP Professional | ||||
| Windows 7 Enterprise 32 bit | ||||
| Windows 7 Enterprise x64 | ||||
| Windows 7 Home Premium 32 bit | ||||
| Windows 7 Home Premium x64 | ||||
| Windows 7 Professional 32 bit | ||||
| Windows 7 Professional x64 | ||||
| Windows 7 Ultimate 32 bit | ||||
| Windows 7 Ultimate x64 | ||||
| Windows Millennium Edition (Me) | ||||
| Windows Vista | ||||
| Windows Vista for x64 | ||||
| 64-bit Enabled AIX | ||||
| 64-bit Enabled HP-UX | ||||
| 64-bit Enabled Solaris | ||||
| ABI+ for Intel Architecture | ||||
| AIX | ||||
| HP-UX | ||||
| HP-UX IPF | ||||
| IRIX | ||||
| Linux | ||||
| Linux for x64 | ||||
| Linux on Itanium | ||||
| OpenVMS Alpha | ||||
| OpenVMS on HP Integrity | ||||
| Solaris | ||||
| Solaris for x64 | ||||
| Tru64 UNIX | ||||
A fix for this issue for DataFlux Data Management Studio 2.7 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/Z88.html#58733A fix for this issue for DataFlux Data Management Server 2.7 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/Z90.html#58733A fix for this issue for DataFlux Data Management Studio 2.6 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/T29.html#58733A fix for this issue for DataFlux Data Management Server 2.6 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/T28.html#58733A fix for this issue for DataFlux Data Management Studio 2.5_M1 is available at (search for 58733):
http://ftp.sas.com/techsup/download/hotfix/HF2/DataFlux_Patches.html#dmstudio2.5A fix for this issue for DataFlux Data Management Server 2.5_M1 is available at (search for 58733):
http://ftp.sas.com/techsup/download/hotfix/HF2/DataFlux_Patches.html#dmserver2.5| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2017-04-06 16:00:44 |
| Date Created: | 2016-08-04 13:53:12 |