NetDMR National Installation Regulatory Authority User Guide May 2011


      NetDMR
National Installation
Regulatory Authority User
         Guide
         May 2011

-------
                        NetDMR Regulatory Authority User Guide
                                      May 2011

                                Table of Contents
Chapter 1. Introduction	1
  1.1. Structure of this Guide	1
     1.1.1. Organization	1
     1.1.2. User Guide Notation and Conventions	1
       1.1.2.1. Tips	1
  1.2. Background-What is the National Installation of NetDMR?	1
  1.3. System Requirements	2
     1.3.1. Enabling Session Cookies	2
  1.4. Types of Users and Their Roles	3
  1.5. S ecurity	6
     1.5.1. System Access	6
       1.5.1.1. System Time-Out	9
       1.5.1.2. Logging Out	9
       1.5.1.3. Suspect Analysis Log	9
  1.6. Look and Feel	10
     1.6.1. General System Navigation	10
     1.6.2. NetDMR Pages	10
     1.6.3. Entry of Data	12
       1.6.3.1. Text Boxes	12
       1.6.3.2. Checkboxes	12
       1.6.3.3. Radio Buttons	12
       1.6.3.4. Pick lists	12
       1.6.3.5. Multi-Select Lists	13
       1.6.3.6. Calendar Icons	14
     1.6.4. Page Types	14
       1.6.4.1. Search Pages	14
       1.6.4.2. List Pages	15
  1.7. Resources for More Information	16
Chapter 2. Managing Your Account	17
  2.1. Creating an Account	17
     2.1.1. General Information Rules	20
  2.2. Searching for Available Permit Ids	21
  2.3. Requesting View or Edit Access	22
  2.4. Viewing an Account	23
  2.5. Editing an Account	25
     2.5.1. Request Access Rights Change	27
     2.5.2. Security Questions and Answers	27
       2.5.2.1. Reset Security Questions	27
     2.5.3. Change Password	28
       2.5.3.1. Reset Password	29
     2.5.4. Lock Account	30
  2.6. Unlocking Your Account	30
  2.7. Resetting a Password	31
  2.8. Retrieving a Forgotten User Name	31
  2.9. Retrieving a Forgotten Password	33
  2.10. Disabled Accounts	34

-------
                        NetDMR Regulatory Authority User Guide
                                       May 2011

Chapter 3. Regulatory Administrators Procedures	35
  3.1. Managing Access Requests	37
    3.1.1. Approve/Deny Signatory Requests	38
    3.1.2. Managing Regulatory User Access Requests	41
    3.1.3. Managing External Permittee and Data Provider User Access Requests	42
  3.2. Managing Your NetDMR Instance	43
    3.2.1. View Instance	44
       3.2.1.1. General Information Details	44
       3.2.1.2. Agency Mappings	44
       3.2.1.3. System Administrators	44
       3.2.1.4. Custom Email Message	45
       3.2.1.5. DMR Submission and Attachment Notifications	45
       3.2.1.6. Custom News and Messages	45
    3.2.2. Edit Instance	45
       3.2.2.1. Editing General Instance Information	47
       3.2.2.2. Editing the Custom Email Message	47
       3.2.2.3. Editing DMR Submission and Attachment Notifications	47
       3.2.2.4. Edit Custom News and Notices	48
  3.3. Manage Agreements	49
  3.4. COR Functionality	51
    3.4.1. Search CORs	52
    3.4.2. Viewing COR  Search Results	54
    3.4.3. Refining the COR Search	54
    3.4.4. Performing a New COR Search	55
    3.4.5. Downloading a COR	55
    3.4.6. Viewing a COR	58
       3.4.6.1. Viewing the COR Certification Statement	59
       3.4.6.2. Downloading the COR	60
       3.4.6.3. Viewing the COR Signature	60
       3.4.6.4. Downloading the COR Public Signature Key	60
       3.4.6.5. Verifying the CORPublic Signature	62
       3.4.6.6. Returning to the COR Search Results Page	63
  3.5. Repudiating the COR	63
  3.6. Searching and Viewing Permits	64
    3.6.1. Search for Permits	64
    3.6.2. View Permit Details	65
  3.7. Searching for Users	66
    3.7.1. User Search	66
    3.7.2. User Search Results	67
    3.7.3. View User Account Details	68
  3.8. Editing and Managing User Accounts	70
    3.8.1. Edit General User Information	72
    3.8.2. Lock User Account	73
    3.8.3. Unlock User Account	73
    3.8.4. Reset User Password	73
    3.8.5. Reset User Security Questions and Answers	74
    3.8.6. Approve User Access Requests	75

                                          ii

-------
                       NetDMR Regulatory Authority User Guide
                                      May 2011

    3.8.7. Deny User Access Requests	75
    3.8.8. Revoke User Access Requests	75
  3.9. View Logs	75
    3.9.1. Viewing Suspect Logs	75
    3.9.2. Viewing Raw Logs	77
  3.10. View Network Activity	79
    3.10.1. View Exchange Network Activity	80
    3.10.2. Request Basic Permit Data Flow	82
    3.10.3. DMR Data Refreshes from ICIS-NPDES	83
    3.10.4. Request DMR Information by Date Range	83
    3.10.5. Request Information for One DMR	85
  3.11. Requesting Access to Partial DMRs	86
    3.11.1. View Partial DMRs	87
  3.12. Validate CORs	88
Chapter 4. Regulatory View User Procedures	90
  4.1. Searching CORs	92
    4.1.1. Viewing COR Search Results	93
    4.1.2. Refining the COR Search	93
    4.1.3. Performing a New COR Search	94
    4.1.4. Downloading a COR	94
    4.1.5. Viewing a  COR	97
      4.1.5.1. Viewing the COR Certification Statement	97
      4.1.5.2. Downloading the COR	98
      4.1.5.3. Viewing the COR Signature	100
      4.1.5.4. Downloading the COR Public Signature Key	100
      4.1.5.5. Returning to the COR Search Results Page	102
  4.2. Search and View Permits	102
  4.3. Search and View Users	104
  4.4. Requesting Partial DMR and Regulatory Administrator Access	106
    4.4.1. Regulatory Administrators Access Requests	107
    4.4.2. Partial DMR Access Request	108
    4.4.3. View Partial DMRs	109
  Appendix A - Subscriber Agreement	110
  Appendix B  - Fraud Analysis	117
  Appendix C  - Validating CORs with Digital Signatures	118
  Appendix D  - Agency Maps	121
  Appendix E - Basic Permit and DMR Refresh	123
  Appendix F - Job Processing Schedule	128
  Appendix G - Troubleshooting Missing DMRs	129
  Appendix H - Frequently Asked Questions	132
  Appendix I - Requesting Assistance	142
                                 List of Figures

-------
                       NetDMR Regulatory Authority User Guide
                                      May 2011

Figure 1 -1:  NetDMR User Categories and Their Roles	5
Figure 1-2:  Functions of the Various NetDMR Roles	6
Figure 1 -3: NetDMR Welcome Page	7
Figure 1-4: NetDMR Login Page	8
Figure 1 -5: NetDMR Permittee User Home Page	8
Figure 1-6: Example of Text Boxes	12
Figure 1 -7: Example of Checkboxes	12
Figure 1 -8: Example of Radio Buttons	12
Figure 1 -9: Example of a Pick list	13
Figure 1-10: Example of Multi-Select List	13
Figure 1-11: Calendar Pop-up Window	14
Figure 1-12: Sample Search Page	15
Figure 1-13: Sample List Page	16
Figure 2-1: NetDMR Create Account Page	18
Figure 2-2: NetDMR Complete Account Creation Process Page	20
Figure 2-3: New Account Data  Checking Rules	21
Figure 2-4: Request Access to Permits and Associated DMRs Page	22
Figure 2-5: My Account Page	24
Figure 2-6: My Account Page	26
Figure 2-7: Locked Account Notification Page	30
Figure 2-8: Regulatory Authority Contact Page	30
Figure 3-1: Regulatory Administrator Home Page	36
Figure 3-2: View User Account Details Page	37
Figure 3-3: Process Subscriber Agreement Details Page	39
Figure 3-4: Manage Instance Page	43
Figure 3-5: Edit Instance Page	46
Figure 3-6: COR Search Results Page	54
Figure 3-7: View COR Details Page	59
Figure 3-8: Search Permit ID Page	64
Figure 3-9: View Permit Details Page	65
Figure 3-10: Search Users Page	66
Figure 3-11: User Search Results Page	68
Figure 3-12: View User Account Details Page	69
Figure 3-13: Edit User Account Page	71
Figure 3-14: Suspect Logs Page	76
Figure 3-15: View Raw Logs Page	78
Figure 3-16: View Network Activity Page	80
Figure 3-17: Partial DMRs Page	88
Figure 4-1: Regulatory User Home Page	91
Figure 4-2: Search CORs Page	91
Figure 4-3: COR Search Results Page	93
Figure 4-4: View COR Details Page	97
Figure 4-5: Search Permt ID Page	102
Figure 4-6: Search Users Page	104
Figure 4-7: Internal User Access Page	107
Figure 4-8: Partial DMRs Page	109
                                         IV

-------
NetDMR Regulatory Authority User Guide
              May 2011
                  v

-------
NetDMR Regulatory Authority User Guide
May 2011
Chapter 1. Introduction

1.1. Structure of this Guide

1.1.1. Organization
The intent of this guide is to provide step-by-step instructions, guidance, and pertinent
information on how to use the National Installation of NetDMR.

This guide addresses the technical basics of administering accounts and providing assistance to
permittees and data providers entering data into the National Installation of NetDMR. For the
most part, it does not deal with policy regarding what data should be entered in particular
circumstances. Descriptions and information are written to provide clarity to the average User,
not for regulatory precision. Finally, this guide is not exhaustive. Data elements and other
aspects of the system that are reasonably self-explanatory are not discussed.

1.1.2. User Guide Notation and Conventions
The bulk of this guide consists of step-by-step guides to performing various tasks. Within each
task, steps are enumerated and screen shots are included to illustrate the steps.
1.1.2.1. Tips
Throughout the Guide you will find text boxes
containing Tips. Tip boxes contain information that
should make your job easier. They include ideas for
streamlining data entry or information pertaining to
particular situations.
Tips include ideas for
streamlining data entry or information
pertaining to particular situations.
1.2. Background- What Is the National Installation of NetDMR?
The National Installation of NetDMR is a web-based application that will allow National
Pollutant Discharge Elimination System (NPDES) permittees to electronically submit discharge
monitoring reports (DMRs) to EPA's data system for discharge information, the Integrated
Compliance Information System (ICIS)-NPDES database. NPDES permits are issued under the
authority of the Clean Water Act.

The NetDMR application, or "installation", resides at CDX and allows each State Agency, Tribe
or EPA Regional office to have their own separate working environment, or "Instance" that can
be customized with their own logos, permits, DMRs, new alerts and contact information.

NetDMR includes the following key components:

• Common Functionality: Create an account, request access to a permit and associated
DMRs/and copies of record (CORs), edit account information, retrieve a forgotten user
name or reset a forgotten password, and unlock a locked account.

-------
                        NetDMR Regulatory Authority User Guide
                                       May 2011

   •   System Administrator: Configure a NetDMR installation and customize settings for
       each Instance associated with an installation.
   •   Regulatory Administrator: Manage user accounts; set additional customization options
       for an Instance; approve signatories; and search, view, and download DMRs and CORs
       submitted for permits administered by the regulatory authority associated with the
       Instance.
   •   Permit Administrator: Manage user read and write access to DMRs for a specific
       permit.
   •   Search Functionality: Search and view permit details.
   •   DMR Functionality: Search, view, edit, sign and submit DMRs; import DMR data.
   •   COR Functionality:  Search, view, and download copies of record for DMRs.
   •   Interaction with ICIS: NetDMR retrieves permit and expected DMR data from ICIS and
       submits reported DMR data to ICIS automatically.
   •   Database: Store information needed by NetDMR or generated by NetDMR users.
   •   Help System: Provide on-line instruction on how to use specific elements of NetDMR
       functionality.

Descriptions for all key components except the System Administrator are described in
subsequent sections of this document. Details on NetDMR functionality available to System
Administrator are provided in the NetDMR System Administrator User Guide

1.3. System Requirements
The following are the minimum PC requirements to  access and use the National Installation of
NetDMR:

       >  Pentium III/IV or equivalent processor
       >  128 MB RAM (512 MB recommended)
       >  Monitor with resolution of at least 800 x
          600
       >  Internet access
       >  Microsoft Internet Explorer 6.0 or above,
          with settings:                             browser is used.
TIP
     NetDMR was designed for use
with Internet Explorer.  Unexpected
results may occur if any other Web
          •  JavaScript enabled
             Session cookies enabled
          •  Pop-up blockers disabled

1.3.1. Enabling Session Cookies
NetDMR requires that you enable session cookies to function properly. A cookie is a small text
file containing information that a Web site copies to your computer. NetDMR will automatically
detect whether you have cookies enabled after login and provide instructions on how to enable
cookies if needed. All cookies generated by NetDMR are removed once you close your browser.

After you enable cookies, log into NetDMR again. The following cookies will be used by
NetDMR:

-------
NetDMR Regulatory Authority User Guide
May 2011
• JSESSIONIID - A number generated by the NetDMR to identify your browser. This
cookie is removed once you close your browser and contains no personal identifying
information.
• COOKIETEST - A cookie that has the value of 1. This cookie is set only to test that your
browser allows cookies. This cookie contains no personal identifying information.

To enable cookies using Internet Explorer 6.0 or 7.0:

1.4. Types of Users and Their Roles
The ability to view and modify data within the National Installation of NetDMR is controlled by
the organization a User is affiliated with (a facility, a lab or contractor, a state, an EPA region, or
EPA headquarters) and the roles to which a User can be assigned. Regulatory Users are assigned
either a Regulatory Administrator role or a Regulatory View role. Figure 1-1 lists the different
Roles and User Categories NetDMR offers:
Role
User Category
Functions
System
Administrator
EPA Headquarters
Create and manage an installation
Create and manage downtimes and
settings
Create and manage Instances:
o Create the first Regulatory
Administrators for a new
Instance
o Manage General Information
o Manage Regulatory
Administrators requests
o Manage Agency Maps
Regulatory
Administrator
EPA Region or State
(Internal)
Customize an Instance:
o Manage some General
Information
o View System Administrators
o Manage Subscriber Agreements
o View Agency Maps
o Manage e-mail messages
o Manage DMR submission and
attachment notifications
o Manage news and notices
Manage Regulatory Administrators,
Signatory and Regulatory View requests
Create the first Permit Administrator for
a new Instance
Assist Permit Administrators with

-------
NetDMR Regulatory Authority User Guide
              May 2011
Role

Signatory
Permit
Administrator
Edit
Edit
View
View
User Category

Permittee or Facility
(External)
Permittee or Facility
(External)
Permittee or Facility
(External)
Data Provider -
Contractor or Lab
(External)
EPA Region or State
(Internal)
Permittee or Facility
Functions
managing Permit Administrator,
External Permitte and Data Provider
Edit and View Requests
> View permits and users
> View, validate, download and repudiate
CORs
> Manage user accounts
> View logs and network activity
> Request access to View Partially
completed DMRs
> Request access to view, modify, sign or
submit DMRs/CORs for a permit
> Import DMRs
> Sign and submit Subscriber Agreements
> Download blank DMRs
> Download CORs
> Manage Permit Administrator, External
Permittee and Data Provider Edit and
View requests, and Regulatory View
Partial DMR Requests to view or
modify DMRs and CORs
> Manage Regulatory View access to
partially completed DMRs
> Request access to view, modify, sign or
submit DMRs/CORs for a permit
> Import DMRs
> Sign and submit Subscriber Agreements
> Download blank DMRs
> Download CORs
> Request access to view and modify a
permit and its DMRs/CORs
> View users
> Download blank DMRs
> Download CORs
> Request access to view and modify a
permit and its DMRs/CORs
> View users
> Download blank DMRs
> Download CORs
> Request access to view a permit and its
DMRs/CORs
> Request Regulatory Administrators
access
> View users
> Download blank DMRs
> Request access to view a permit and its

-------
                         NetDMR Regulatory Authority User Guide
                                        May 2011
Role

View
User Category
(External)
Data Provider -
Contractor or Lab
(External)
Functions
DMRs/CORs
> View users
> Download blank DMRs
> Request access to view a permit
DMRs/CORs
> View users
> Download blank DMRs
and its
                       Figure 1-1:  NetDMR User Categories and Their Roles
       System Administrator - EPA Headquarters staff responsible for configuring and
       performing routine maintenance on the National NetDMR Installation, establishing state
       Instances of NetDMR within the National Installation, and creating the first Regulatory
       Administrators.

       Regulatory Administrator - State and EPA Regional (Regulatory Authority) staff
       responsible for managing User accounts, customizing their own Instance within the
       National Installation, approving DMR signatories, and searching, viewing and
       downloading DMRs and their Copies of Record (CORs) submitted for permits
       administered by the regulatory authority associated with the Instance,  and provide
       Technical Support of NetDMR for Permittees and Data Providers

       Permit Administrator - Facility or permittee staff responsible for approving all COR and
       DMR view requests, and DMR edit requests for the Permit. Permit Administrators may
       edit DMRs only if they have been granted Edit access to a permit.
       Signatory - Facility or permittee staff
       responsible for signing and submitting
       DMRs on behalf of an organization. A
       request for the signatory privilege requires
       submission of a Subscriber Agreement to
       the Regulatory Authority that administers
       a particular NPDES permit
TIP
       Until the first Signatory Privilege is
granted for a permit, no accesses or
privileges can be requested for that permit
by other users.
       Permitee User - Facility or permittee staff responsible for viewing, entering, editing or
       uploading Discharge Monitoring Reports (DMRs) into a state Instance.

       Data Provider - Contractor or laboratory staff responsible for viewing, entering, editing
       or uploading Discharge Monitoring Reports (DMRs) into  a state Instance.  Data
       Providers are not allowed to sign and submit DMRs or approve access to permits.
Figure 1-2 illustrates the functions available to each role within NetDMR.

-------
NetDMR Regulatory Authority User Guide
May 2011

oystem Install and
Administrator Customize -* ,n™an^
(EPA HQ User) NetDMR

Create nitial
— * Internal
Administrator
I

Regulatoryl
Administrator Role Customize
(Regulatory lnstance
Authority User)
Permit
Administrator
Role
(Permittee User)
Signatory1 Role
(Permittee User)
Edit Role
(Permittee or Data Provider User)
Read-Only Role
(Permittee or Data Provider User)

Monitor and Maintain Hosted Version of NetDMR

Forward URL &
Other Information
to Permittees
1 F
Create
Account

.-, • Approve
J\eVle" Signatory
Subscriber -» Usi aNe,DMR
Agreement ^^

— *
— »•
— *•

Create ^
Account
Request
Signatory
Access

Create fc
Account
Request
Edit
Access

Create ^
Account
Request
View- Only
Access

-------
NetDMR Regulatory Authority User Guide
May 2011
AWU.MR
Welcome
Welcome to NetDMR! If vou are a permittee, you mav be able to use
this web site to complete and submit DMRs electronically for your
facility.
Warning Notice

The registration procedure for trie National Installation of NetDMR is part of the United States Environmental Protection
Agency's (EPA) Central Data Exchange, which is for authorized use only. Unauthorized access or use of this computer
system may subject violators to criminal, civil, and/or administrative action. AH information on this computer system may
be monitored, recorded, read, copied, and disclosed by and to authorized personnel for official purposes, including law
enforcement. Access or use of this computer system by any person, whether authorized or unauthorized, censuses
consent to tnese terms.

Privacy Statement

EPA will use the persona! identifying information which you provide for the expressed purpose of registration to the National
Installation of NetDMR site at the Central Data Exchange and for updating and correcting information in internal EPA
databases as necessary. The Agency will not make this information available for other purposes unless required by law. EPA
does not sell or otherwise transfer personal Information to an outside third party. [Federal Register: March 18, 2002
(Volume 67, Number 52)][Page 12010-12013]
Figure 1-3: NetDMR Welcome Page
If your permit is administered by a State Environmental Agency or an EPA Region, click on the
Select Regulatory Authority pick list and
highlight appropriate agency's state name or EPA
Region.
Select
Regulatory
Authority:
Click on Gol to proceed to the NetDMR Login
page for the NetDMR Instance of the Regulatory
Authority you selected from the list box.
CT-KY-PR-RI-SR
ERG Test-NY
R10 Parti al-AK-ID-OR-WA
R3 Parti al-DC-MD-VA
R6 Partial - LA-GM
Texas
At the NetDMR Login page shown in Figure 1-3, existing NetDMR users enter their NetDMR
User Name and Password as shown in Figure 1-4, then click on
Submit
New users must
click on register for a new account to gain access to NetDMR before being able to log into
NetDMR.
-------
NetDMR Regulatory Authority User Guide
May 2011
Login | FAQs | Getting Started | Contact the NetDMR Te.
JVerl
Welcome

Welcome to the Tennessee installation of NetDMR! If you are a
permittee, you may be able to use this Web site to complete and
submit DMRs electronically for your facility.

New to NetDMR?
IBani
x>ut NetDMRr please contact
Jser Name |rjoe.jane@site.com I Submit
I7
Forgot User Name? / Forgot Password? /
• NetDMR Regulator,1 Authority A^c^unt5 Demo on Monday, March 9, Create a NetDMR Account
2009 10:00 AM Eastern Time. It covers Regulatory Authority User
Guide, DMR Data Entry.

t First time users should check to see if yoi
permit is available in NetDMR yet by
Checking your Permit ID
Warning Notice

The registration procedure for the National Installation of NetDMR is part of the United States Environmental Protection
Agency's (EPA) Central Data Exchange, which is for authorized use only. Unauthorized access or use of this computer
system may subject violators to criminal, civil, and/or administrative action. All information on this computer system may
be monitored, recorded, read, copied, and disclosed by and to authorized personnel for official purposes, including law
enforcement. Access or use of this computer system by any person, whether authorized or unauthorized, constitutes
consent to these terms.

Privacy Statement

EPA will use the personal identifying information which you provide for the expressed purpose of registration to the National
Installation of NetDMR site at the Central Data Exchange and for updating and correcting information in internal EPA
databases as necessary. The Agency will not make this information available for other purposes unless required by law. EPA
- ----- - --•••'' • "
Figure 1-4: NetDMR Login Page

You are only permitted one NetDMR login at a time (a single active session). If you attempt to
log into NetDMR from the same or more than one computer simultaneously NetDMR will
terminate the previous session and establish the most recent login attempt.

After a successful login, NetDMR will display the Permittee User, Signatory Administrator,
Permit Administrator, Regulatory Administrators or System Administrator home page depending
upon your Role and access level. Figure 1-5 is an example of the Permittee User Home page
for a Regulatory Authority User with View access.

^Search: All DMRs & CORs

All DMRs & Copies of Record (CORs)
Use the following fields to se
Permit #:
Facility:
Permitted Feature:
Discharge:
Monitoring Period End
Date Range:
Edited or Submitted
BV:
arch for DMRs and CORs. Leafing a field blank will instruct NetDMR
[AlTE] Update |
|AII jj Update |
[AlljJ Update
ra
3 | H (mm/dd/mv)
ra

Last 10 Logins
5/30/08 2:33 PM

Figure 1-5: NetDMR Permittee User Home Page
-------
NetDMR Regulatory Authority User Guide
May 2011
A list of up to 10 previous logins are always displayed on the right side of Last 1° Logins
each home page. 7/i/os 5:26 PM
7/1/08 5:19 PM
1.5.1.1. System Time-Out
NetDMR will automatically log you out and prompt you to log back in if the page is left idle for
30 minutes.
Home | FAQs | Getting Started
NetDMR
Session Timeout

Your session has expired. To continue using NetDMR you must main to the application again.
The Session Lockout Timer, which is a countdown from 30
minutes, is displayed at the top right corner of every page.
The timer resets to 30 minutes every time you perform an action that refreshes the page (e.g.
save, submit, cancel, etc). Once you are logged out you may sign back in immediately. Any
unsaved information will be lost.
1.5.1.2. Logging Out
Log out of NetDMR by clicking on I L°9°ut
^Q^ of any NetDMR page.
1.5.1.3. Suspect Analysis Log
The Suspect Analysis log is a tool used by Regulatory
Administrators to detect illegal activity to determine if an account
has been compromised. If it is determined that a compromising
situation has occurred, the affected account will need to be locked
to prevent the user from logging into NetDMR until the illegal
activity has been addressed and the account is unlocked by a
Regulatory Administrator.

The NetDMR Suspect Analysis log tracks the following activities
within a specified frequency of time:

> inconsistent login IPs - more than 10 originating IPs.
> overlapping login attempts - more than 10 overlapping
login attempts in 3 days.
> overlapping login attempts with different originating IPs -
more than 5 overlapping login attempts from different IPs
within 3 days.
> irregular DMR submission pattern - calculates the mean
number of submissions per month and standard deviation,
and then flags anything greater than two standard deviations.
A Signatory with a
locked account will be
unable to sign and submit
DMRs until a Regulatory
Authority Administrator
unlocks the account.
tin
View the Suspect logs
periodically to make sure no
illegal activity is occurring
for your Instance.
-------
NetDMR Regulatory Authority User Guide
May 2011
The System Administrator sets the frequency of the suspect analysis log runs for the installation
through the settings functionality. The default is set to quarterly. Section 3.9 explains how to
generate and view contents of the suspect logs.

1.6. Look and Feel
1.6.1. General System Navigation
Hyperlinks take you to a particular page. By
convention, hyperlinks are indicated by an arrow or
hand icon when hovering your cursor over them. A
standard set of hyperlinks are found at the top of all
NetDMR pages and customized hyperlinks are
sprinkled in the body of certain pages as necessary.
Home | FAQs | Getting Started
A
Submit
arch
Update
Buttons cause the system to perform some action, such as searching, saving, or
deleting. Buttons are generally found near the bottom of the page or next to a
block of data, and the actions they perform are dependent on information you have
entered on the page.
1.6.2. NetDMR Pages
The NetDMR Welcome page has hyperlinks at the top that provide answers to Frequently Asked
Questions (FAQs) and explain how to get started in NetDMR. The body of the page displays
news items and has a drop down list box for choosing a Regulatory Authority interface or
NetDMR Instance.
The series of hyperlinks on the top of the NetDMR
Login page provide answers to Frequently Asked
Questions (FAQs), explain how to get started in
NetDMR, and provide contact information. In the
body of the NetDMR Login page are hyperlinks to
register for a new NetDMR account, create a NetDMR
account, retrieve a User Name, retrieve a forgotten
password, and check if your permit is in NetDMR.
You can set up separate
accounts in NetDMR for each
Regulatory Authority that you have
permit(s) on file with.
After you have logged in, the NetDMR pages have hyperlinks at the top that return to the main
NetDMR home page, navigate to your account, allow you to request access, provide help and
display the Logout page. A brief description of each hyperlink is given below.

Home
This option returns a User or Administrator to the appropriate NetDMR home page from any
page within NetDMR.

FAQs
10
-------
NetDMR Regulatory Authority User Guide
May 2011

The FAQ page lists topics of interest to most Users of NetDMR. Click on to expand the list
of questions, and click on " I to collapse the list.

Getting Started
The Getting Started page displays information Users and Administrations need to know when
first starting to use NetDMR.

Contact the NetDMR Team
This page displays information on whom to contact with NetDMR questions and assistance.
Register for a New Account
New Users and Administrators must create an
account before they can use NetDMR. Clicking on ___ ,r Tr , ,, ,. , ,
,,.,., . V f .. New Users should click on the
this link presents the page tor creating new „„, ,. nr-r>»^^^"
^ Checking your PERMITID
accounts. , ,. , , ,r „, rr.
hyperlink to make sure NetDMR stores
„ , TT „ your permit before clicking on the
Forgot Username? J ^ , , ,
This option presents a page that allows Users and | registration hyperlink.
Administrators to retrieve their forgotten NetDMR
User Name.

Forgot Password?
This option presents a page that allows Users and Administrators to reset a forgotten NetDMR
password.

Create a NetDMR Account
New Users and Administrators must create an account before they can use NetDMR. Clicking
on this link presents the page for creating new accounts.

Checking Your Permit ID
This option allows Users to find out if any of their permits are available within NetDMR for
reporting their DMRs.

Help
This option provides step-by-step instructions and guidance on how to use NetDMR.

Logout
This option logs a User or Administrator out of NetDMR.

To remind you of how you logged into NetDMR, all
NetDMR pages display your User ID, your user type and the :' User!U!eramk' Permittee user
name and/or logo of the NetDMR Instance you are currently CT-KY-PR-RI-SR
working with in the upper right corner.
11
-------
NetDMR Regulatory Authority User Guide
May 2011

1.6.3. Entry of Data
A variety of tools, including text boxes, radio buttons and pick lists designed for different types
of data entry appear throughout NetDMR. These tools are similar to those found on many web
pages. The purpose and use of these tools is described below.

1.6.3.1. Text Boxes
Text boxes appear as blank rectangles. Examples are shown in Figure 1-6. They allow free
entry of letters and/or numbers. All text boxes have a set limit on the number of characters that
can be entered. The size of the text box is generally related to the number of characters that may
be entered. If you attempt to enter more characters than are allowed, the extra characters will not
show up in the text box or be stored in NetDMR.
User Name

Password
Figure 1-6: Example of Text Boxes

1.6.3.2. Checkboxes
Checkboxes appear as small squares. Clicking on a check box toggles the appearance of a check
mark. Checkboxes often appear along with groupings of items, such as the months of the year,
and allow you to select any number or all of the items. An example of a group of checkboxes is
shown in Figure 1-7. Checkboxes are also used to indicate yes or no answers to questions.

Approve Deny

r n

Figure 1-7: Example of Checkboxes

1.6.3.3. Radio Buttons
Radio buttons appear as small circles, typically next to lists of items. An example of a list with
radio buttons is shown in Figure 1-8. From any group of items with radio buttons, only one item
may be selected. Clicking on a radio button selects that item, and the selection is indicated by a
dot in the circle. If a different item in the list had been selected, the dot and the selection are
removed from that item. In many cases, once an item is selected, a button elsewhere on the page
must then be clicked to execute a particular action (e.g. edit or delete the selected item in the
list).

User Name:*
(* Use my email address as my user name
f Create my own user name
Figure 1-8: Example of Radio Buttons

1.6.3.4. Pick lists
Pick lists appear similar to text boxes, but with a button with a downward pointing arrow at the
right side of the rectangle. Clicking on this button, or in the box, causes a list to appear, from
12
-------
NetDMR Regulatory Authority User Guide
May 2011

which a single item may be selected. Figure 1-9 shows the Select Regulatory Authority pick
list box and the options for the top box displayed after clicking on the arrow button or within the
list. The desired text is selected by clicking on it.
Select
Regulatory
Authority:
CA-HI-NE-SD-UT
I CA-HI-NE-SD-UT
CT-KY-PR-RI-SR
ERG Test-NY
R10 Parti al-AK-ID-OR-WA
R3 Partial -DC-MD-VA
R6 Parti al-LA-GM
Texas
Figure 1-9: Example of a Pick list

The list then disappears and the selected item appears in the text box:
Select
Regulatory
Authority:
CA-HI-NE-SD-UT
1.6.3.5. Multi-Select Lists
Multi-select lists appear as boxes containing a list of items. These lists allow you to select more
than one item from the list by holding down the Ctrl key and clicking on the desired item(s).
Selected items are marked with dark blue highlighting. An example of a multi-select list with
two of the visible items selected is shown in Figure 1-10.
Type of User:1
Select One
Select One
Permittee User
Figure 1-10: Example of Multi-Select List
TIP
Selection of multiple items is controlled through the use of the Ctrl and Shift keys.
While holding the Ctrl key, clicking on items in the list toggles their selection. Holding the
Shift key while clicking an item will select all items between that item and the previously
clicked item (any other items will become unselected). Clicking on an item while holding
neither the Ctrl nor Shift key will reset the selection, with only that item now selected. As
with pick lists, you can move through the list by using the letter keys. Doing so also resets
the selection.
13
-------
NetDMR Regulatory Authority User Guide
May 20 11
1.6.3.6. Calendar Icons
Calendar icons C j appear to the right of text boxes for date fields. Dates can be entered either by
typing directly into the text box or by clicking -I and choosing a date from the calendar that is
displayed. Figure 1-11 shows the calendar pop-up window that appears after clicking on the
calendar icon.
a http://netdmrtst.... BSD
Figure 1-11: Calendar Pop-up Window
The calendar will appear with the current month and
day displayed. Above the calendar are a pick list for
choosing a month and a set of right and left arrow
buttons. Clicking on — will move backward one
month. Clicking on — moves forward one month. The
individual dates are shown as hyperlinks. Clicking on
a date will return you to the data entry page with that
date entered in the appropriate text box.
TIP
When typing dates directly into
text boxes, they must be entered in the
format: mm/dd/yyyy. For example,
November 6, 2008 would be entered as
11/06/2008.
1.6.4. Page Types
There are three major types of pages in NetDMR: search pages, list pages, and add/edit pages.
There are various versions of these pages for the various business areas, but all pages of a given
type share a number of features. These common features are described below.

1.6.4.1. Search Pages
Search pages are a common starting point for many tasks in NetDMR, allowing you to search for
an activity you wish to edit or determine if a particular activity already exists in the system
before adding it. Search pages also appear in the sequence of pages you are guided through
while adding certain activities. A sample search page is shown in Figure 1-12.
14
-------
NetDMR Regulatory Authority User Guide
May 2011
Permit ID
Monitoring Period End Date Range [

Signatory First Name [

Signatory Last Name [

Signatory User Name [

Signatory Email

Facility Name [

Permitted Feature Number [

Discharge Number [

Discharge Description [

Confirmation Number [

Include repudiated CORs?
l (mm/dd/yyyy)

Search Close
Figure 1-12: Sample Search Page
Note that fields are organized in groups or related
data elements. You may enter information in as
many fields across as many groups as you wish.
If information is entered in more than one field,
NetDMR combines the information with an
'AND' operation. In other words, it will find
records that meet all of the criteria you entered.
Therefore, the more information you enter, the
fewer results you will receive.
To search for text that may
occur in the middle of the data
element, use % at the beginning as a
wildcard. For example, entering
"%ers" in the owner's last name field
on a search page will return all
records where the owner's last name is
Peters. Peterson. Anderson, etc.
In most cases, you will want to enter as much
information as you know about the record you are
looking for in order to narrow your search results. In other cases you may want to enter fewer
search criteria to cast a broader net. One Instance calling for a more general search is when you
are searching to ensure that a record does not already exist before adding it.

Search text entered in text boxes can be either full or partial and is not case sensitive. NetDMR
will return all records with text that starts with the text entered in the corresponding search field.
For example, entering "peters" in the owner's last name field on a search page will return all
records where the owner's last name is Peters, Peterson, Petersen, etc.

1.6.4.2. List Pages
List pages are used to display the results of a search. You can choose an item from the displayed
list to perform an action on. A sample list page is shown in Figure 1-13.
15
-------
NetDMR Regulatory Authority User Guide
May 2011
Search
CORs I DMRs
Permits I
Users
0. View Permit Details

Perm it ID

Facility Name

Permittee Address

Users and Roles

Showing 10 of 10 Users/Roles .
User Name Organization User Type
amkinternaluser OECA
IL0029424

LASALLE STP, CITY OF
400 RIVER ROAD
LASALLE IL, 61301
T^kinternalu-er
Role Status View Subscriber Agreement

P.nding
Figure 1-13: Sample List Page

Search results are normally presented in a table that lists up to ten records in most cases. If more
than 10 records are returned, you can navigate through the list by:

> Clicking I'- to display the next page of records.
> Clicking ( to view the previous page of records.
> Clicking to display the last 10 records.
> Clicking to display the first 10 records.
> Clicking the View All link to show all records in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
records at a time.

You can click on any underlined column title to sort the records by that column in ascending or
descending order.

1.7. Resources for More Information
For more information, contact ICIS User Support by telephone or e-mail at:

Phone: 202-564-7756
e-mail: netdmr(o)epa.gov
16
-------
NetDMR Regulatory Authority User Guide
May 2011
Chapter 2. Managing Your Account
This section provides information on how to manage your NetDMR account. Topics include:

> Creating an account
> Searching for available permits
> Requesting view or edit access
> Viewing an account
> Editing an account
> Unlocking an account
> Resetting a password
> Retrieving a forgotten User name
> Retrieving a forgotten password

2.1. Creating an Account

Figure 2-1 shows the NetDMR page for creating a new account. Note that Regulatory
Administrators accounts will be set up by the NetDMR System Administrator, and Permit
Administrator accounts are established by Regulatory Administrators or other Permit
Administrators.
WetDMR
^ Create a NetDMR Account

General Account Information

Please provide the information requested below to create a NetDMR account. A '*' indicates a required entry.
Email Address:4*

Enter Email Address Again: *

User Name:*
c Use my email address as my user name
f*" Create my own user name

First Name:*

Last Name:*

Telephone Number:* (###-###-####)

Organization:*

Type of User:*

Selected Security Questions
|john. doe@facility.com

|john.doeOfacility.com
(johndoe

(John

(Doe

(800-555-1212

(Acme
(Permittee UserjJ
Please provide responses for the security questions below. Select each question only one time, Note that answers are
case-sensitive.
17
-------
NetDMR Regulatory Authority User Guide
May 2011
Question 1*
| Who was your childhood hero?
hero
Question 2*
| What is your mother's maiden name?
(name
Question 3*
| What is the name of the high school you attended? _j
(attended

Question 4*
| What is the name of the street where you grew up? j
|up
Question 5*
| What is your favorite city?
Submit I Reset I Cancel
Figure 2-1: NetDMR Create Account Page

First time users can access the NetDMR Create Account page to create their own accounts by
following these steps:
1 .
From the NetDMR Welcome page, click on the pick list to select the Regulatory
Authority for your Permit:
Select Regulatory
Authority:
|
BAH DC
BAH Delaware
BAH Hawaii-HI
BAH Michigan
BAH-DC-Tribal
New York-NY
personnel for official purpc\ Samplelnstance
Tennessee
Texas
of the United States Envii
Unauthorized access or ui
tn. All information on this
•ther authorized or unauti
2.
3 .
Click on Go
At the NetDMR Login page, click on register for a new account or
Create a NetDMR Account .
Fill out the required information on the Create a NetDMR Account page:
> Enter your e-mail address, and re-enter the e-mail address to confirm
> Choose whether to use your e-mail address as your User name (recommended) or
create your own User name and enter
that User name
> Enter your first name
> Enter your last name
Enter your 10 digit telephone number
as xxx-xxx-xxxx
Enter the name of the organization you
TiP
Refer to Section 1.4 for a
description of NetDMR User Types
and the functionality available to them.
18
-------
9.
10.
NetDMR Regulatory Authority User Guide
May 2011
are affiliated with
Choose your User Type ("Permittee Users" are permitted facility staff; "Data
Provider Users" are lab or contractor staff; and "Regulatory Users" are state, tribe,
or EPA staff.)
Select 5 or more security questions from the drop down list and enter an answer
for each question selected.
Click on
to process your account request, click on
I to blank out all
fields on this page, or click on
Cancel
to return to the NetDMR Login page.
If NetDMR notifies you that data errors were found:
Create a NetDMR Account
There were errors processing your request.
Fix the problem indicated in red text next to the field with problems.
The Verify NetDMR Account Request page will appear:
Verify NetDMR Account Request
Please verify the information you entered below to create a NetDMR!
account. '
Confirm that the information is correct on this page, then click on
to establish
the account or click on
Cancel
to return to the Create New Account page.
OKI
At the Confirm NetDMR Account Request page click on _ J to finalize the request.
OK
A confirmation page will appear. Read the message, then Click on _ .
You will receive an e-mail from NetDMR
to the e-mail account you provided
requesting you to complete your account
which will activate it. Click on the
hyperlink provided in this e-mail to open
the Complete NetDMR Account Creation
Process page shown in Figure 2-2.
TIP
You have only 60 days from
the day you request your account
to activate your account.
Login | FAQs | Getting Started | Contact the NetDMR Tearr
& Complete NetDMR Account Creation Process

Hello adminuser. To finish creating your NetDMR account, provide a response to the security question and create a
password for your account.
What is the name of the street where you \
grew up?
Create Password:
case-sensitive)

" (Case sensitive,
8-20 characters,
include letters
Enter Password Again:
Submit Cancel |
19
-------
11.

12.

13.
14.
15.
NetDMR Regulatory Authority User Guide
May 2011

Figure 2-2: NetDMR Complete Account Creation Process Page
Answer the security question, create a password for your account, and enter the
password a second time.

Click on ^^1 J to complete the account creation process and activate your

account, or click on ——! 1 to return to the NetDMR Welcome page.
If the answer to your secret question is wrong, the password does not meet the rules
or the two passwords differ, NetDMR will display an error message indicating what
the problem was.
There were errors processing your request.
What is your father's middle name? |name
(Answers are
case-sensitiye)
The information
you entered does
not match our
records. Please
try again. Note:
answers are
case-sensitive.
Re-enter the correct information and click on
Submit |
to complete the account
creation process and activate your account, or click on
NetDMR Welcome page.
The NetDMR Account Created page will appear.
Cancel
to return to the
Login | FAQs | Getting Started | Contact the NetDMR Team

A
JVefDMR
* NetDMR Account Created

Your NetDMR Account has been created. Click here to access the login page and begin using NetDMR.
16. Click on Login ' in the upper left corner or here to access the login page on this
page to log into NetDMR.

2.1.1. General Information Rules
When entering account information, NetDMR applies data checking rules. A summary of these
account rules is provided in Figure 2-3 below.
Account Information
E-mail address
Username
First Name
Last Name
Organization
Rules
Only letters, numbers, "@", ".", and
Must contain the "@" symbol.
Must be unique.
You must have access to this e-mail
Only letters, numbers, "@", ".", and
Only letters, numbers, "@", ".", and
Only letters, numbers, "@", ".", and
Only letters, numbers, "@", ".", and
" " are allowed.
account.
"_" are allowed.
"_" are allowed.
" " are allowed.
" " are allowed.
20
-------
NetDMR Regulatory Authority User Guide
May 2011
Account Information
User Type
Telephone Number
Security Questions and
Answers
Rules
Permittee User = permitted facility or lab staff
Data Provider = organization that provides DMR data to
NetDMR
Regulatory User = state, tribe, EPA Regional or EPA HQ
staff
Must be in xxx-xxx-xxxx format.
All security questions must be different.
All security answers must be different.
Security Answers are case sensitive.
Choose security answers that are easy to remember as you
will need to know them to create an account, edit your
account, and retrieve forgotten passwords and User names,
and sign DMRs.
Figure 2-3: New Account Data Checking Rules
2.2. Searching for Available Permit Ids
In order to view or enter DMR data for a permit into the National Installation of NetDMR, the
permit must be present within the system. You can check whether any of your permits are
available for DMR reporting by following the instructions below. You do not have to create a
NetDMR account before you can check on the status of your permits.

1. Click on checking your PERNITID on the NetDMR Login page.
2. Enter the permit Id to search for:
NerDMR
d Check Whether a Permit is Available for Reporting in NetDMR

Enter a Permit ID*
r
Check F'eimit ID
- ^,. , Check Permit ID
3. Click on
4. NetDMR will display a message if the permit does not exist. Reenter the permit ID if it was
incorrectly entered or contact the NetDMR Regulatory Administrators for your Regulatory
Authority to request the permit be added to NetDMR:
The permitID 'ZZOOOOOOl' is not available for reporting in NetDMR.
Check another permitID or return to the Login page.
5. If the permit exists in NetDMR, you will see a message telling you it is available for
reporting:
J The permitID SR0026417 is available for reporting in NetDMR. You
may check another permitID or proceed directly to Creating an
Account. If you already have a NetDMR account, Login now.
21
-------
NetDMR Regulatory Authority User Guide
May 2011
2.3. Requesting View or Edit Access
After a Permittee or Data Provider account has
been created, they are able to request access to view
permit, DMR and COR information stored within
NetDMR using the Request Access to Permits and
Associated DMRs page shown in Figure 2-4. Only
Permittees or Data Providers with an Edit Role may
edit DMRs, only Permittee Users may request a
Permit Administrator or Signatory Role and only
Permittee Users with a Signatory role may submit DMRs for a permit within NetDMR.
Until the first Signatory
Privilege is granted for a permit, no
view/edit access or privileges can be
requested for that permit.
tf Request Access to Permits and Associated DMRs

Enter the ID for the permit whose DMRs you would like to access and click the Update button to see the roles that you can request.
PermitlD:

Role:
cf Access Requests

A summary of the current access requests is presented below.
Figure 2-4: Request Access to Permits and Associated DMRs Page
The steps for a Permittee requesting a view, edit, Permit Administrator or Signatory role for a
permit, or a Data Provider requesting a view or edit role for a permit using this page are:

1. Log into NetDMR by selecting the NetDMR Instance, then entering your User ID and
password for that Instance.
2. Click on I Request Access I at the top of any NetDMR Home page and the Request Access to
Permits and Associated DMRs page will appear.
3. Enter the 9 character Permit Id that you would like to have access to.
4. Click on uPdate I.
5. If the Permit Id is for a permit that is not stored in NetDMR Instance an error message is
displayed.
There were errors processing your request.
PermitlD:
|PR0000353
Update | The perrnitID is not available for reporting
in NfitDMR.
6. Check to make sure what you entered is a valid Permit ID and re-enter it. If it is a valid
Permit ID this message indicates that the permit is not stored in NetDMR. Log out of
22
-------
NetDMR Regulatory Authority User Guide
May 2011

NetDMR, contact your NetDMR Instance Administrator and have he or she add the permit
into NetDMR, then perform the steps above after the NetDMR Instance Administrator
notifies you the Permit ID is now in NetDMR.
7. If you have already requested access to this permit NetDMR will display this message on the
page. Enter another permit ID that you do not currently have access for.
You have already requested or received all available roles for this
permit
8. Click in the box next to Roles, then click on View:
(Select Qne_i]
ISelect One
View
9. Click on Add
10. If you did not choose a Role an error message is displayed. Repeat steps 6 and 7 above.
There were errors processing your request.
PermitID:
|PR0000353
Update | The perrnitID is not available for reporting
in NfitDMR.
11. Check to make sure the request has been added to the Access Requests table at the bottom of
the page, then click on Submit I.
df Access Requests

A summary of the current access requests is presented below.
Permit ID Requested Role Remove Access
Request

SR0026417 Signatory
12. If the wrong Permit ID or Role was selected on this table, click on *t next to the Permit ID
to delete request from this table.
13. Repeat steps 3-11 above for each different Permit ID you need access for.
14. Review the information displayed on the page, then click on Submit I.

Your view and edit access requests will be forwarded to the appropriate Administrator for
approval. NetDMR will send a notification message to the e-mail address associated with your
account after the Administrator approves or denies your request.

2.4. Viewing an Account
You can access the data that you provided when you created your NetDMR account including
your security questions and all permits you have access to by logging into NetDMR and clicking
23
-------
NetDMR Regulatory Authority User Guide
May 2011

on I Hv Account | m the upper left corner of the page. The My Account page is shown in Figure
2-5.
NetDMR
CT-KY-PR-RI-SR
& My Account

User Name:

First Name:

Last Name:

Telephone Number:

Organization:

Type of User:
elected Security Questions
Kittle

804-333-7660

Test User
- c
One Permit found
Permit ID rtcce!
. Rights Access Status Request Date
9
Figure 2-5: My Account Page

The five security questions you selected when you created your account can be displayed by
clicking on S in the Selected Security Questions section. The answers to these questions are
not displayed but they can be changed when editing your account. You can hide the questions by
clicking onH.

At the bottom of the page is the My Permits section. My Permits includes a list of all permits
that a user has requested access to, the access rights and status of the access requests, the date of
the request for when an action was taken as well as the ability to print the Subscriber Agreements
associated with the permit. Up to ten permits will be displayed by default. If more than 10
permits are associated with your account, you can navigate through the list by:

> Clicking s: to display the next page of permits.
> Clicking I to view the previous page of permits.
> Clicking to display the last 10 permits.
> Clicking to display the first 10 permits.
> Clicking the View All link to show all permits in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
permits at a time.
24
-------
NetDMR Regulatory Authority User Guide
May 2011

You can click on the Permit column title to sort the Permits in ascending or descending order.
To view the Subscriber Agreement for a Signatory request listed in this table, click on ® within
the Signatory's row to display the Subscriber Agreement in a separate window.

2.5. Editing an Account
All NetDMR Users are able to revise their e-mail address, NetDMR user name, first name, last
name, telephone number and organization on the Edit Account page as shown in Figure 2-6. In
addition, you can request changes to your permit access rights, modify your security questions
and answers, and lock your accounts using the steps that follow. Any changes must be
confirmed and saved.
25
-------
1.
2.
3.
NetDMR Regulatory Authority User Guide
May 2011
i* Edit My Account
a I Account Informatio
Email Address:*

Enter Email Ad tin
Again:11

User Name:*

<~ Use my email a

ff Create mv own

First Name:*

Last Name:*
|alison_kittle@yahoc.co

|alison_kittle@yahoo.co
|user.aml<

[Alison
Organization:4

Type of User:*
(Test User
My Permit?

One Permit found.
Permit Id Access Rights Access Status Subscriber Agreement Request Date
Delete Access Rights
r
Security Questions and Answers

[*] CT k t d'
Change Your Password

Your password must be 8-20 character
Enter a new
password:
Enter your password
again:
,
3-20 characters.
both letters 3rd
numbers]
Lock Your Account

Locked accounts can not acces; Ne-tC'MP,
Figure 2-6: My Account Page

Log into NetDMR and click on I MV Account | m the upper left corner of the page.
Click on Edit Account within the My Account page.
Make changes by entering data in any of the General Account Information fields
except User Type and Delete Access Rights in the My Permits section, changing
security questions and answers, changing your password, or locking your account in
the Lock Your Account section (refer to subsections below for details). Although
there is a Delete Access Rights column, only a Permit Administrator may delete
access rights to their permit(s).
Review your changes to confirm they are correct.
26
-------
5.

6.
NetDMR Regulatory Authority User Guide
May 20 11
to cancel changes and return to the My Account
Click on Save I, or click on
page.
Answer the Security Question and provide your current password.
2.5.1. Request Access Rights Change
You can delete access rights to the permits you currently
have access to by clicking on the f~ empty checkboxes in
the Delete Access Rights column within the My Permits
table next to the permits to delete. Click on a checked box
E to unselect a permit.
Click any underlined column
title to sort the permits in ascending or
descending order by the information in
that column.

2.5.2. Security Questions and Answers
You can change your Security Questions and Answers by clicking on to display your
security questions or ~ to hide the list of security questions. To change a question, click on the
drop down arrow and click on the question. To change an answer, simply type the answer in the
box under the question.

2.5.2.1. Reset Security Questions
A Regulatory Authority Administrator may have you reset your security questions and answers if
they discover your account has been compromised. If this is the case, your account will be
suspended and you will receive an email notifying you of the change. If you try to log into
NetDMR you will be prompted to reset your password or security questions:
Login | FAQs | Getting Started | Contact the NetDMR Te.
Netl
<2 Reset Credential via Verification Key

You must change your password and/or security questions before you can continue using this account. You should
have received instructions on how to perform this via email. If you did not receive this email, please contact your
Regulatory Authority for assistance.
£2003 NetDMR
Contact your Administrator to get the secret answer to use for resetting your questions, then
follow these steps to change your security questions and answers:

1. Click on the hyperlink within your security reset email notification:
To Reset your security Questions, please click on the following link:

httpg : //netdmrtest. epacdx. net/netdmr-web/public/verification . htm?
key=79bfe4S77d9Qd5ffQd7cQacl722b41Q9cdSS219d4e539f43Qc62dc41af3bcf71&u3erId=162

The answer to the security question will be communicated to you via a phone call by the internal admin.
Thank you.
2. The Reset Account Credentials page will appear:
27
-------
NetDMR Regulatory Authority User Guide
May 2011
Vt-fDMR
^ Reset Account Credentials

In i -.• '. .IN.' -.• -:iilv :|ii. .h.::ir.. |]|r.rii- I'lticT till1 .inriWil tn Illi- :ii'i\\tHf CpJi'iJIinri i [invi-yiHl tu yCHJ lly I
administrator at your regulatory authority and select new security questions and answers.
to force B reset of the security questions.:

Security CJuastions

nroMidc ir!^:irn;i-; Jn MtuiiLy
I h c|L tinii nrJy i:rn- tnnr. Ncili- IKK .
QuestFon 1'
| Select On?
I
Save | Cancel |
Type the secret answer provided to you by your Regulatory Administrator into the Enter
a temporary question answer box.
3. Select the first question from the Question 1 drop down box and type in an answer for the
question.
4. Repeat Step 3 for each of the remaining questions.
5. Click on !^?J to save your security questions and answers.
6. If you did not provide the correct answer, select security questions or provide answers an
error message will appear:
I T
I ^ There were errors processing your request.

Repeat steps 2 through 5.
7. You will receive confirmation that your security questions have been reset:
Login | FAQs | Getting Started | Contact ttie NetDMR Teai

NetDMR
^* NetDMR Account Reset Security Questions and Password

Your NetDMR security questions and password are now reset. Click here to access the login page and begin using
NetDMR.
8. Click on the here to access the login page hyperlink to log into NetDMR.

You will receive an email notifying you that your account has been reset:
Your NetDMR account crediantials are reset. You may now log into NetDMR.
Thank you.
2.5.3. Change Password
You can change your password by entering a new
password and then reentering it in the space
provided.
28
Be sure to enter a new password
that is not the same as the 10 most
recent passwords you 've used.
-------
NetDMR Regulatory Authority User Guide
May 2011
2.5.3.1. Reset Password
A Regulatory Authority Administrator may have you reset your password if you are having
problems logging in or if they discover your account has been compromised. If this is the case,
your account will be suspended and you will receive an email notifying you of the change. If
you try to log into NetDMR you will be prompted to reset your password or security questions:
Login | FAQs | Getting Started | Contact the NetDMR Team
Reset Credential via Verification Key
You must change your password and/or security questions before you can continue using this account. You should
have received instructions on how to perform this via email. If you did not receive this email, please contact your
Regulatory Authority for assistance.
©2003 NetDMR
Follow these steps to change your password:

1. Click on the hyperlink within your security reset email notification:
To reset your password, please click on the following link:

https://netdmrtest.epacdx.net/netdir-r-web/publlc/verificatlon.htm?

Thank you.

2. The Complete NetDMR Password Reset Request page will appear:
Login | FAQs | Getting Started | Contact the NetDMR Team

DMR

* Complete NetDMR Password Reset Request
Hello alison_kittle@yahoo.com. To reset your NetDMR password, provide a response to the
security question and create a new password for your account.
What is the name of the | (answers are case-sensitive)
street where you grew up?

Enter Password | include^etterrand^umbe^6"5'
Enter Password again
Submit | Cancel |

3. Type in the secret answer for the question displayed.

4. Enter a new password that is not the same as the previous password.

5. Re-enter the new password.

/- /->!• i Submit , ,
6. Click on to save your new password.

7. If you did not provide the correct answer to the question or your password is invalid an

error message will appear:
i n
I * There were errors processing your request.
p

Repeat steps 3 through 6.

8. You will receive confirmation that your password has been reset:
Login | FAQs | Getting Started | Contact the NetDMR Team

AtoDMR
* Password Reset Completed

Your password has been changed. Click here to =
and begin using NetDMR.
£2008 NetDMR
29
-------
NetDMR Regulatory Authority User Guide
May 2011

9. Click on the here to access the login page hyperlink to log into NetDMR.

2.5.4. Lock Account
If you need to inactivate your account for a period of time you can lock your account by clicking
on the I empty checkbox in the Lock Your Account section. If you do not want to lock your
account and the box is ^ checked, click on the checked box to avoid locking your account.

If you lock your account, the next time you attempt to log into the National Instance of NetDMR
the Locked Account page will display. Follow these steps to unlock a locked account:

1. Answer the security question that is displayed.
2. Click on I
If you respond correctly to the security question you will be directed back to the NetDMR Login
page to log into your account.

2.6. Unlocking Your Account
If you have locked your account in order to inactivate it for a period of time or a Regulatory
Administrator locked your account due to security issues, you will receive an e-mail notifying
you that your account is locked. The next time you attempt to log into the National Instance of
NetDMR the Locked Account page will display as shown in Figure 2-7.
Login | FAQs | Getting Started | Contact the NetDMR Tearr
NetDMR
Locked Account
Your account has been locked. To unlock your account, you must contact your Regulatory
authority .
Figure 2-7: Locked Account Notification Page
Contact your Regulatory Authority by clicking on Regulatory authority an(j caiiing the
telephone number or sending an e-mail to the address specified in the Regulatory Authority
Contact page Figure 2-8.

^
NetDMR
Contact the NetDMR Team
If you need assistance, please contact NetDMR at:
Phone: 555-555-5555
Email: netdmr@erg.com
Figure 2-8: Regulatory Authority Contact Page
30
-------
NetDMR Regulatory Authority User Guide
^^ May 2011

After the Regulatory Authority unlocks your account NetDMR will notify you with an email
containing a link. Navigate to the link to display a page confirming your account has been
unlocked and follow these steps:

1. Answer the security question that is displayed.
2. Click on
Submit
If you respond correctly to the security question you will be directed back to the NetDMR Login
page to log into your account.

2.7. Resetting a Password
NetDMR passwords expire after 6 months and will display
the Expired Password page after you log in with an expired
password. Use this page to reset your expired password by:

1. Answering the security question.
2. Entering your current password.
3. Entering a new password twice.
4. Clicking on
Be sure to enter a new password
that is not the same as the 10 most
recent passwords you 've used.
Submit
You may also reset your password at any time by using the My Account page. To do this:
1.
2.
3.

6.
Log into NetDMR and click on I MV Account | m the upper left corner of the page.
Click on Edit Account within the My Account page.
Enter a new password and then reenter it in the spaces provided within the Change
Your Password section
The Confirm Account Edits page will appear. Answer the Security Question and
provide your old password.
Click on Save I to proceed, or click on Cancel I to cancel changes and return to the
My Account page.
If the security question answer or old password is incorrect, NetDMR will display the
error message shown below. Enter your answer and old password again.
\ There were errors processing your request.
7.
If the security answer and old password are correct, NetDMR will display this
confirmation message:
A Your account changes have been saved.
2.8. Retrieving a Forgotten User Name
If you have forgotten your User Name, follow these steps to recover it:

1. Navigate to the NetDMR Welcome page, select your Regulatory Authority, and click on
Go |
31
-------
NetDMR Regulatory Authority User Guide
May 2011

2. Click on For90t User Hame? on the NetDMR Login page.
3. Enter the e-mail address you used to create your NetDMR account in the box provided:
Login | FAQs | Getting Started | Contact the NetDMR Tearr
NetDMR

-------
NetDMR Regulatory Authority User Guide
May 2011
2.9. Retrieving a Forgotten Password
If you have forgotten your NetDMR password, follow these steps to recover it:

1. Navigate to the NetDMR Welcome page, select your Regulatory Authority, and click on
2. Click on Forgot Password? on the NetDMR Login page
3. Enter the e-mail address you used to create your NetDMR account in the box provided:
JVerDMR
•8 Forgot Password

Step 1: To reset a password that you forgot, please enter the e-mail address you specified when
you created your NetDMR account:
Email Address*:
Submit Cancel
4. Click on I Subm|1: | to continue, or click on Cancel I to return to the NetDMR Login page.
5. If you provided an e-mail address that NetDMR does not recognize NetDMR will display a
message that your e-mail address could not be found:
A user with the specified email address was not found.
Perform steps 3-4 again making sure to use the correct e-mail address for the Regulatory
Authority you selected. Otherwise, one of your security questions will be displayed:
Login | FAQs | Getting Started | Contact the NetDMR Tearr
NetDMR
•tf Forgot Password

Step 2: Please respond to the security question you specified when you created your NetDMR
account.
Email Address:

What was your high school mascot?
alls on_kittleio|y ahoo.com
r~
Submit Cancel
6. Answer the security question that is displayed.
7. Click on I Submit I to continue, or click on Cancel I to return to the NetDMR Login page.
8. If the answer to your secret question is incorrect, NetDMR will display an error message:
There were errors processing your request.
Otherwise, you will receive an e-mail from NetDMR to the e-mail account you provided.
Click on the hyperlink provided in this e-mail to access the Complete the NetDMR Password
Reset Request page.
9. Answer the security question.
33
-------
NetDMR Regulatory Authority User Guide
May 2011

10. Enter a new password that is different than the last 10 passwords you specified for your
account.
11. Enter the new password again.
12. Click on I SubmitJ .

2.10. Disabled Accounts
A locked account is different than a disabled account. A user's account is disabled if he/she
enters their password incorrectly three times or enters three incorrect responses to security
questions.

If a user disables their account by entering their password incorrectly three times, the user can
enable their account and request a password reset by responding correctly to a security question,
then logging into NetDMR. If a user forgets the responses to his/her security question, he/she
must contact the Regulatory Administrators directly and request a reset of the security questions.
34
-------
NetDMR Regulatory Authority User Guide
May 2011
Chapter 3. Regulatory Administrators Procedures
Regulatory Administrators manage a single NetDMR Instance containing DMRs for one State
agency, one Tribe, or one EPA Region comprising multiple states. A System Administrator
must assign one or more Regulatory Administrators for the Instance when it is created, then
Regulatory Administrators can approve other new Regulatory Administrators requests from
Regulatory Users using the Manage Access Request functionality.

Regulatory Administrators are responsible for:
> managing Regulatory User requests and user accounts
> assisting Permit Administrators with managing External Permittee and Data Provider
User requests
> requesting basic permit and empty slot DMR requests from ICIS
> viewing, validating, repudiating and downloading CORS
> viewing permits, users, suspect and raw logs, network activity
> requesting access to view partially completed DMRs to assist Permittee and Data
Providers as needed.

Figure 3-1 shows the Regulatory Administrators Home page. Details for Regulatory
Administrators on how to perform tasks using this page are provided in the next sections.
35
-------
NetDMR Regulatory Authority User Guide
May 2011
SHKft I VtoW
I I
P«™ti I Raw LDOI
a.;-ci-iim-*!, I Utm
" OMRi
CORS Permit ID use
P.'nrul ][>:

Sttpuitarv nrsl Home: f"
L tf v^vcst* vim AI or v>n. •»!««, ir» i.ia. «ii b
Figure 3-1: Regulatory Administrator Home Page

Up to ten User Requests will be displayed by default in each of these tables. If more than 10
User Requests are associated with this permit or have pending requests, you can navigate
through the list by:

> Clicking a page number link to go to a specific page of results.
> Clicking the ^ green forward arrow to display the next page of User Requests.
> Clicking the -0 green back arrow to view the previous page of User Requests.
> Clicking the ^ double green forward arrow icon to display the last 10 User Requests.
> Clicking the 1 double green back arrow icon to display the first 10 User Requests.
> Clicking the View All link to show all Users in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
Users at a time.

You can click any underlined column title to sort the User Requests in ascending or descending
order by the information in that column.
36
-------
NetDMR Regulatory Authority User Guide
May 2011

3.1. Managing Access Requests
You can approve or deny NetDMR access requests for your Instance using the Manage Access
Requests functionality on the Regulatory Administrators Home page. The types of access
requests you can approve or deny include:

> Signatory Access Requests
> Regulatory Administrators Access Requests
> Regulatory User View Access Requests

You can also approve or deny Permittee and Data Provider Edit and View requests; however
these requests should only be managed if a Permit Administrator asks for your assistance.

If a Permittee or Data Provider needs assistance filling out a DMR, you can request "Partial
DMR" access to the DMR from your Request Access page. However, only Permit
Administrators may approve partial DMR requests.

When managing access requests, details on the User can be viewed on the View User Account
Details page shown in Figure 3-2 by clicking on - in the View Details column next to the User.
Click on Edit to modify the user's account information or click on Cancel I to return to the
Pending Access Requests tables of the Regulatory Administrators Home page.
a User:ia4mi, Internal User

Michigan- MI
Manage
Access Requests
Instance
Agreements

Search
CORs
Permits
Users

View
Suspect Logs
Raw Logs
Network Activity
DMRs
Validate
CORs

•3. View User Account Details
General Account Info

First Name

Last Name

User Name

Telephone Number

Organization
User Type
kittle.alisonPepa.gov

202-564-6233

U.S. EPA

External
Selected Security Questions

What was your high school mascot?
What is the name of the high school you attended?
What is your favorite city?
What is the name of the street where you grew up?
Roles
One Role found
Permit ID Facility Name

MIUU54003 ISABELLfl CO LAI>

Signatory Role History
Figure 3-2: View User Account Details Page
37
-------
NetDMR Regulatory Authority User Guide
May 2011
3.1.1. Approve/Deny Signatory Requests
In order to submit DMRs to ICIS using NetDMR, a
Permittee must print off the Subscriber Agreement
form generated by NetDMR at the time they
request a Signatory role for one or more permits,
sign the Subscriber Agreement in ink, and mail it to
your Agency. You should never approve a
Signatory request before you have the requestor's
signed Subscriber Agreement.
tip
Signatories should not be
approved until your Agency has
received the Subscriber Agreement.
There may be times when you have a change in your Agency's mailing address or the person
who should receive Subscriber Agreements at your Agency is reassigned. The System
Administrator can make these changes to your Instance so future Subscriber Agreements will
display the new mailing information for new Signatory requests in your Instance.

Once you have a signed Subscriber Agreement, follow the directions below to approve or deny
permit signatory access requests from Permittee and Data Provider users:

1. Log into your NetDMR account as a Regulatory Administrator. The Regulatory
Administrators Home page will be displayed with pending Internal and External User
Access Requests displayed.
> If you are already logged in as a Regulatory Administrator and the Access Requests
are not displayed, click on Access Requests under the Manage tab
> OR
> Search by Permit ID (See Section 3.6 for instruction of searching permits).
2. Scroll down to the Pending Access Requests - External Signatory table at the bottom
of the page.
3. Click on " in the Respond to Request column next to the desired user. You can click
any underlined column title to sort the users in ascending or descending order by the
information in that column. The Process Subscriber Agreement page is displayed:
Manage I Search
Access Requests I CORs
Instance I Permits
Agreements I Users
Process Subscriber Agreements
Subscriber Agreement \
Number:
38
-------
NetDMR Regulatory Authority User Guide
May 2011
4. Enter the Subscriber Agreement Number for this permit and click Submit. The Process
Subscriber Agreement Details page (Figure 3-3) is displayed:
Jnslance
Agreements
runes a 4Jubsuibei Agreement
.:'..UliAie-i'.•_'*-JJ. Li•i
Number

hirst Nine

Lift Name

LKrr Ninin
Signatory Requests
MCQOM019 K/.HE uEHEfiM-IH'-i STftTlOM 89 9OO FARRINGTOM H
*«MMIH*»JBV *M"-«. n—<•,
MI. ?6792 F«lbtv S«tf p p
Figure 3-3: Process Subscriber Agreement Details Page
6.
7.
If you would like to view an electronic version of the
Subscriber Agreement and Agreement number, click on
Print Subscriber Agreement | ]\[ote that the
Agreement that you see will differ from the same
document signed by the Signatory if you changed any of
your Subscriber Agreement contact information for your
Instance recently. Because this electronic document may
slightly differ from the original and is missing the
Signatory's signature it cannot be used as a substitute for
the original.
Close the Print Subscriber Agreement page by clicking to
On the Process Subscriber Agreement Details page, scroll
Requests table and locate the permit that you would like to
> To approve signatory access for the user, locate the
and click on D to place a check the
box under the Approve column.
> To deny signatory access for the user,
locate the row for the permit of
interest and click on l~ to check the
box under the Deny column. After
denying an access request, you must
enter a reason in the text box under the
Comment column for that permit.
TIP
The electronic version of a
Subscriber Agreement is not a
substitute for the original, signed
Subscriber Agreement mailed in
by a Signatory.
close the window or tab.
down to the Signatory
approve or deny for this user.
row for the permit of interest
TIP
You may enter a comment when
approving a request, but you must
enter a comment when you deny a
request.
39
-------
NetDMR Regulatory Authority User Guide
May 2011

8. Click on Save to save your changes, or click on Cance| I to cancel your changes and
return to the Regulatory Administrators Home page.
9. Review your access changes on the Confirm Subscriber Agreement Responses page to
verify they are correct:
Manage I Search I View I Validate
Access Requests I CORs I Suspect Logs | COR:
Instance I Permits I Raw Logs
Agreements I Users I Network Activity
I DMRs
Confirm Subscriber Agreement Responses
Number

First Name

Last Name

User Name

Organization
Kittle

pmt4hi

U.S. EPA

alison_kittle@ya

202-564-6233
Responses to Signatory Requests
Permit ID Facility N
Facility Address
Relationship Authorized By Status Comment
Confirm | Cancel |
10. Click on c rm— to save your changes, or click on Can I to cancel your chang
and return to the Process Subscriber Agreement Details page.
11. The Subscriber Agreement Confirmation page will appear:
;es
A
NetDMR
CA-HI-NE-SD-UT
Manage I Search I View I Validate
Access Requests I CORs I SuspGct Logs I CORs
Instance I Permits I Raw Logs
Agreements I Users I Network Activity I
I DMRs
Subscriber Agreement Confirmation

; J The requests have been processed.
12. You will be returned to the Regulatory Administrators Home page and the Users you
approved or denied will no longer appear in the Pending Access Requests - External
Signatory table

Instead of typing in a Subscriber Agreement Number you can copy it from the electronic version
of the requestor's subscriber agreement and paste it into the Subscriber Agreement Number on
the Process Subscriber Agreements page. To do this, search for the permit and click on the
printer icon in the Subscriber Agreement column of the requestor within the Users and Roles
table. The Subscriber Agreement will appear in a separate window with the Subscriber
Agreement Number listed in the upper right corner.
40
-------
NetDMR Regulatory Authority User Guide
May 2011

3.1.2. Managing Regulatory User Access Requests
Regulatory User staff at your Agency with a View role may request to become a Regulatory
Administrator to your NetDMR Instance. Follow the directions below to approve or deny access
requests from your Regulatory Users.
1. Log into your NetDMR account as a Regulatory Administrator. The Regulatory
Administrators Home page will be displayed with pending Internal and External User
Access Requests displayed.
> If you are already logged in as a Regulatory Administrator and the Access Requests
are not displayed, click on Access Requests under the Manage tab
OR
> Locate the user of interest in the table (see Section 3.7 for instructions on Searching
Users). You can click any underlined column title to sort the users in ascending or
descending order by the information in that column.
2. Scroll down to the Pending Access Requests - Internal table at the bottom of the page
3. To approve signatory access for the user, locate the row for the permit of interest and
click on I™ to checkmark it under the
Approve column.
4. To deny access for the user, locate the row
for the permit of interest and click on l~
to checkmark it under the Deny column.
After denying an access request, you must
enter a reason in the text box under the
Comment column for that permit.
5. Click on Save I to save your changes, or
click on Cance| I to cancel your changes and return to the Regulatory Administrators
Home page.
6. Review your access changes on the Confirm Access Requests page to verify they are
correct:
fin
You may enter a comment when
approving a request, but you must
enter a comment when you deny a
request.
J Confirm Acxc*nr. Hr-qunr.tr;
-"
1. Click on.
to save your changes, or click on
Cancel
to cancel your changes.
You will be returned to the Regulatory Administrators Home page and the Users you
approved or denied will no longer appear in the Pending Access Requests - Internal
table.
41
-------
NetDMR Regulatory Authority User Guide
May 2011

3.1.3. Managing External Permittee and Data Provider User Access
Requests
If requested by a Permit Administrator, you can approve or deny Permit Administrator role
requests, and Permittee and Data Provider Edit or View role requests. Note that these requests
should only be managed if a Permit Administrator requests assistance.

Follow the directions below to approve or deny Permittee and Data Provider User role access
requests:

1. Log into your NetDMR account as a Regulatory Administrator. The Regulatory
Administrators Home page will be displayed with pending Internal and External User
Access Requests displayed.
> If you are already logged in as a Regulatory Administrator and the Access Requests
are not displayed, click on Access Requests under the Manage tab
OR
> Search by Permit ID (see Section 3.6 for instructions on searching permits).
2. Scroll down to the Pending Access Requests - External table at the bottom of the page
3. To approve signatory access for the user, locate the row for the permit of interest and
click on i~ to checkmark it under the
Approve column.
4. To deny access for the user, locate the row
for the permit of interest and click on l~"
to checkmark it under the Deny column.
After denying an access request, you must
enter a reason in the text box under the
Comment column for that permit.
5. Click on Save I to save your changes, or
click on Cance| I to cancel your changes and return to the Regulatory Administrators
Home page.
6. Review your access changes on the Confirm Access Requests page to verify they are
correct:
TIP
You may enter a comment when
approving a request, but you must
enter a comment when you deny a
request.
•c ft)H]iiflt1t - I Krrirn.ll
7. Click on.
to save your changes, or click on
Cancel
to cancel your changes.
You will be returned to the Regulatory Administrators Home page and the Users you
approved or denied will no longer appear in the Pending Access Requests - External
table.
42
-------
NetDMR Regulatory Authority User Guide
May 2011

3.2. Managing Your NetDMR Instance
You can use the Manage Instance page (Figure 3-4) to view or customize the following settings
associated with your Instance:

> General Information
> Agency Mappings
> System Administrator(s)
> Email Messages
> DMR Submission and Attachment Notification Recipients
> News and Notices
Manage
Access Requests
Instance
Agreements
Manage Instance
General Information

Instance Name

user must answer:

Frequency of Password Change:

Allow multiple signatory requests in a
subscriber agreement?

Are Permit Administrators required to
have signatory roles for their permit?

Instance Status41

Submittal Postal
Code*

Contact Name

Contact Email

Contact Phone

Agency Mappings

IL TR6, EP6, TR3, ST6

System Administrator(s)

Name Affiliation Email address
tonasrinlo)yahoo.c<

202-564-5013
Custom Email Message

Message to append to end of all instance emails test m

DMR Submission and Attachment Notifications
Email addresses that are sent submission acknowlegements any tin-

No email addresses entered.

Custom News and Notices

The following News/Notice items are displayed on the NetDMR Login Page.

News/Notices

2- NetDMP will be down on 7/31/200S.

Release 3 testing started,
a DMR is submitted for this instance
Figure 3-4: Manage Instance Page
43
-------
NetDMR Regulatory Authority User Guide
May 2011
3.2.1. View Instance
You can view detailed information about your NetDMR Instance by clicking on the Instance
option under the Manage menu. The Manage Instance page will display information about
your Instance as described in the next subsections.

3.2.1.1. General Information Details
The General Information section displays the information that you specified when you created
this Instance, including:

> Instance Name.
> Time Zone.
> Number of secret questions a user must answer.
> Password change frequency requirements.
> Whether the Instance allows multiple signatory requests in a Subscriber
Agreement
> Whether Permit Administrators are required to have signatory roles for their
permits.
> Current status of the Instance.
> Postal code to be used for submittals.
> Instance contact information.

3.2.1.2. Agency Mappings
Refer to Appendix D for detailed information on Agency Maps. The Agency Mappings table on
the Manage Instance page displays the selected Permit Prefixes and associated Agency Type
Codes. Up to six Agency Maps will be displayed by default. If more than six Agency Maps are
associated with your Instance, you can navigate through the list by:

> Clicking \ to display the next page of Agency Maps.
> Clicking 4 to view the previous page of Agency Maps.
> Clicking to display the last 6 Agency Maps.
> Clicking 1 to display the first 6 Agency Maps.
> Clicking the View All link to show all Agency Maps in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 6
Agency Maps at a time.

You can click the Permit Prefix of Agency type code column title to sort the Agency Mapping
rows in ascending or descending order.

3.2.1.3. System Administrators
The System Administrators table displays the User Name, Affiliation, Email Address, and Phone
Number of each System Administrator.
44
-------
NetDMR Regulatory Authority User Guide
May 2011
3.2.1.4. Custom Email Message
The contents of the message to be appended to all emails sent to accounts by the NetDMR
regarding the Instance.

3.2.1.5. DMR Submission and Attachment Notifications
A table listing email addresses that are to be sent
submission acknowledgements any time a DMR
is submitted by NetDMR on behalf of the
Instance and whether attachments were included
with the DMR.
3.2.1.6. Custom News and Messages
A table containing one or more news items
displayed on the home page of the Instance.
fid
If a recipient is not receiving DMR
submission and attachment notifications
and their address in this table is accurate.
3.2.2. Edit Instance
As a Regulatory Administrator you can set up or change the following settings for your Instance:
u" Edit Instance

Edit the instance settings below, Note that some settings

General Information

Instance Name

Time Zone

Number of secret questions a
user must answer:

Frequency of Password Change:

Allow multiple signatory reguests in a
subscriber agreement?

Are Permit Administrators required to
have signatory roles for their permit?

Instance Status*

Submittal Postal Code*

Contact Name

Contact Email

Contact Phone

Agency Mappings

Permit Prefix Agency Type Codes
shown for informational purpo^
Illinois - IL

US/Central
ind can only be edited by your System Administrator,
tonasrin@yahoo.corr

202-564-5013
System Administrator

Name Affiliation I
Michael Beatty TCEQ

Michael Beatty TCEQ

NetDMR Userl Agency
mbe.attvioltceq. state.t
512-239-5180

512-239-5118

512-239-5118
202-564-5013
45
-------
NetDMR Regulatory Authority User Guide
May 2011
Custom Email Message

Message to append to end of all Jnstai
DMR Submission and Attachment Notifications
Enter another email
address:
Custom News and Notices

The following News/Notice items are displayed on the NetDMR Login Page,
News/Notice
Save and Add Another |
News and Notices
Order News/Notices

Q Release 3 testing started,

0 H 2' NetDMR will be down on 7/31/2008,

• This is a test
Figure 3-5: Edit Instance Page

> Whether Permit Administrators are required to have signatory roles for their permits
> Email Messages
> DMR Submission and Attachment Notification Recipients
> News and Notices
To do this, access the Edit Instance page shown in
Figure 3-5 by:

1. Logging into your NetDMR account as a
Regulatory Administrator.
2. Clicking on Instances under the Manage tab.
3. Clicking on Edit Instance I
TIP
Some Instance settings displayed on
the Edit Instance page can only be edited
by the System Administrator and are
displayed to the Regulatory Administrators
for informational purposes.
Any changes you make must be confirmed and saved.
When all changes have been made, follow these directions to store your edits:

1. Click on 5ave I to proceed with the changes, or click on Cancel I to return to the
Manage Instance page.
2. Click on Save I to finalize your changes and return to the Manage Instance page with
this message:
4 Your Instance has been updated.
or
click on Cancel I to return to the Manage Instance page
46
-------
NetDMR Regulatory Authority User Guide
May 2011

3.2.2.1. Editing General Instance Information
In the General Information section, you can modify whether all Permit Administrators must also
be Signatories or not. To change this setting:

> Click on the Are permit administrators required to have signatory roles for
their permit? pick list and click on "Yes" to have NetDMR automatically assign
a Signatory role to each Permit Administrator role request that you approve, or
click on "No" to have NetDMR assign only a Permit Administrator role when you
approve them.

3.2.2.2. Editing the Custom Email Message
NetDMR automatically generates and sends emails to users for a variety of actions, including
completing the account creation process, when user access rights are granted or denied, and after
requesting to reset a password. You can create a message to append to the end of each email in
the Custom Email section.

To create this message or edit an existing message, enter the text directly into the box that is
provided:
Message to append to end of all instance emails
test message, delete me later,,,
For example, you may want to provide more specific contact information in the event of a
problem:

"Please email netdmr@state.gov or call the helpline at 800-555-1234for assistance."

3.2.2.3. Editing DMR Submission and Attachment Notifications
You can specify a set of recipients that will be notified by email each time a DMR is submitted
for this Instance and whether attachments were included with the DMR:
Email addresses that are sent submission acknowlegements any time a DMR is submitted for this instance.

Enter another email |rubin,steven@epa,gov Add |
address:

User Email Delete

rubin, steven@epa. gou £J

steven_rubin@epa.gov ${
If one or more emails have already been specified a table will be displayed under this box
showing existing addresses. Otherwise, the table will appear after the first new email address is
added.
47
-------
NetDMR Regulatory Authority User Guide
May 2011
To add a recipient to the table, type the email address of the recipient in the Enter
another email address box and click on I. If the email address already exists it will
not be saved and an error message will appear.
To remove an email address from the list:
1. Click on It in the Delete column of the row for that email address. A confirmation
window will appear:
Microsoft Internet Explorer
You have re que ste d to delete this email addre ss.SelectOKtoproceedorC anc el to exit without making
any changes.
OK
Cancel
2. Click on
to remove the email address, or click on
Cancel
to keep
the email recipient in the table.
3.2.2.4. Edit Custom News and Notices
You can create one or more News and Notices that will be displayed on the NetDMR Login page
for your Instance:
The following News/Notice items are displayed on the NetDMR Login Page.
News/Notice

Save and Add Another
News and Notices

Order Nevis/Notices

•^ Release 3 testing started.

•£>•£>• 2- NetDMR will be down on 7/31/200S.
Delete
If one or more news items or notices have already been specified a table will be displayed under
this box showing existing items. Otherwise, the table will appear after the first new item is
added.

> To add a new item, type the text for the news item or notice in the News/Notice box and
click on
Save and Add Another
J. If the news item already exists it will not be
saved and an error message will appear: News/Notices cannot be repeated.
To change the order of items in the table, click on O next to an item to move it under the
item below it, or click on ^ next to an item to move it over the item above it.
To remove an item from the list:
1. Click on it in the Delete column of the row for that item. A confirmation window
will appear:
48
-------
NetDMR Regulatory Authority User Guide
May 2011
I Microsoft Internet Explorer
You have re quested to delete this news .3 elect OK to proceed or Cancel to exit without making any
changes.
OK
Cancel
2. Click on
to remove the item, or click on
in the table.
to keep the item
3.3. Manage Agreements
After you complete your internal review of a hard copy Subscriber Agreement mailed to you by
a Signatory, you can approve or deny the Signatory requests using the Manage Agreement
functionality.

To respond to the signatory requests, follow these steps:

1. Log into your NetDMR account as a Regulatory Administrator.
2. Click on Agreements under the Manage tab. The Process Subscriber Agreement page is
displayed:
• ^narch I Vlen I Validate
A-'-tL-1. OL-U juL-U- I CORv I Eu^putt buy:, I COPi
I:,'.!. I HIT-iMl-. I P.iw I IMJ-.
I vsers I Jwtwort. Actixtr
I WFtS
11:11 i .-.1:1 r t \
1. Enter the Subscriber Agreement Number on the signatory request you are reviewing. The
Subscriber Agreement number can be found in the upper right corner of the agreement.
2. Click on _SH^HiLl. .
3. If you do not enter the Subscriber Agreement Number or enter an invalid Subscriber
Agreement Number, an error message will be displayed:
\ There were errors processing your request.
Enter a valid Subscriber Agreement Number.
4. The Process Subscriber Agreement Details page is displayed:
49
-------
NetDMR Regulatory Authority User Guide
May 2011
s a 4Jubsuibei Agreement. DeLuila
Number

hirst Name

Last Mini?

LKrr Ninin
|.-.r--.-^-c-^r-qf«mtnt
uuvndinv ui ilvvmidimg ur J«r IIT Vie irilunnatwn in thai uulurnn. II jvu Jn* Vnw All ur Vnw Partial, J
electronic version of a
Subscriber Agreement is not a
substitute for the original, signed
Subscriber Agreement mailed in
by a Signatory.
13. If you would like to view an electronic version of the
Subscriber Agreement and Agreement number, click on
Print Subscriber Agreement | Note that the
Agreement that you see will differ from the same
document signed by the Signatory if you changed any
of your Subscriber Agreement contact information for
your Instance recently. Because this electronic
document may slightly differ from the original and is
missing the Signatory's signature it cannot be used as a
substitute for the original.
14. On the Process Subscriber Agreement Details page, scroll down to the Signatory
Requests table and locate the permit that you would like to approve or deny for this user.
> To approve signatory access for the user, locate the row for the permit of interest
and click on I™ to place a check the
box under the Approve column.
> To deny signatory access for the user,
locate the row for the permit of
interest and click on I"" to check the
box under the Deny column. After
denying an access request, you must
enter a reason in the text box under the
Comment column for that permit.
15. Click on Save I to save your changes, or click on Cance| I to cancel your changes and
return to the Regulatory Administrators Home page.
16. Review your access changes on the Confirm Subscriber Agreement Responses page to
confirm that they are correct:
TIP
You may enter a comment when
approving a request, but you must
enter a comment when you deny a
request.
50
-------
NetDMR Regulatory Authority User Guide
May 2011
Manage I Search I View
Access Requests I CORs I Suspect Logs
Instance I Permits I Raw Logs
Confirm Subscriber Agreement Responses
Subscriber Agrc
Mumbe

First N

LastN

UserN

Organ

Phone
c5S16f8e-d62e-4d30-db5f-6e9bfb6e5000
pmt4hi

U.S. EPA
202-564-6233
Responses to Signatory Requests
fed with the default scrt crder applied.
One Request found
Permit ID Facility N
Relationship Authorized B
Confirm | Cancel |
17. Click on.
to save your changes, or click on
Cancel
to cancel your changes
and return to the Process Subscriber Agreement Details page.
18. The Subscriber Agreement Confirmation page will appear:
Subscriber Agreement Confirmation

; A The requests have been processed.
19. You will be returned to the Regulatory Administrators Home page and the Users you
approved or denied will no longer appear in the Pending Access Requests - External
Signatory table.

3.4. COR Functionality
All Regulatory Users can search, view, and download CORs. Only Regulatory Administrators
can repudiate, validate, and verify the signature for CORs. When a Signatory signs and submits a
DMR, NetDMR creates a unique COR for that DMR. The COR is defined in the Cross-Media
Electronic Reporting Rule as follows (70 FR 59880 October 13, 2005, specifically Subpart A,
Section 3.3):

"Copy of record means a true and correct copy of an electronic document received by an
electronic document receiving system, which copy can be viewed in a human-readable
format that clearly and accurately associates all the information provided in the
electronic document with descriptions or labeling of the information. A copy of record
includes:

(1) All electronic signatures contained in or logically associated with that document;
(2) The date and time of receipt; and
51
-------
NetDMR Regulatory Authority User Guide
May 2011

(3) Any other information used to record the meaning of the document or
the circumstances of its receipt. "
Each NetDMR installation has an RSA 1024 bit asymmetric key that is used for digital
signatures. NetDMR will use its private key to digitally sign the CORs. The signature will be
executed against a message digest created from the COR using the FIPS 140-2 hashing
algorithm. For details on this process go to these web sites:

> Federal Information Processing Standards (FlPS)-approved algorithms for generating
Message Digest: http://www.csrc.nist.gov/CryptoToolkit/tkhash.html

> FlPS-approved algorithms for generating/verifying digital signatures:
http ://www. csrc.nist. gov/CryptoToolkit/tkdigsigs. html

3.4.1. Search CORs

Regulatory Administrators can search, view, download, repudiate and validate CORs by
searching on any combination of Permit ID, Monitoring Period End Date Range, Signatory
Name and e-mail Address, Facility Name, Permitted Feature Number, Discharge Number,
Discharge Description, Confirmation Number, and if the COR has been repudiated.

To do this:
Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account. The Regulatory Administrators Home page will be displayed.
OR
While logged into NetDMR, click on CORs in the gray Search tab.
The COR Search page will be displayed:
A
jVrtDMK
fliceis Hequeila I CORs

I 'Jaen
•\ Search CORs
Tir.-lrth for [:<}&•; uonp any runhinnrun 01 sr.-Mth cnt*™. for Tcrt .Ind numcnc in.
v«j can enter njll or partial o*ena. rer example: entering a Perm* ID 04 '2 J4E w«ad return
::• i/^ .^
52
-------
NetDMR Regulatory Authority User Guide
May 2011

Enter data into one or more of the fields on this page using these guidelines:
> Permit ID - Enter all or a portion of the permit ID. For example, entering a permit
ID of'al' would return CORs for all Alabama permits.
> Signatory First Name - Enter all or a portion of the signatory first name. For
example, entering a first name of'jo' would return 'John' and 'Joanne'.
> Signatory Last Name-Enter all or a portion of the signatory first name. For
example, entering a last name of'mi' would return 'Smith' and 'Miller'.
> Facility Name - Enter all or a portion of a facility name. For example, entering a
'co' would return 'Company A' and 'ABC Incorporated'.
> Monitoring Period End Date Range - Enter the end date for the monitoring period
end date range using the mm/dd/yyyy format or select the appropriate start and end
dates from a calendar by clicking the calendar icon Z^J next to each text box.
Clicking !AdV3nced Search in the Search CORs section will open an expanded Search CORs
page and display the following additional search criteria:

> Signatory User Name-Enter all or a portion of the signatory user name. For
example, entering a last name of'mi' would return 'JaneSmith' and 'John.Miller'.
> Signatory Email - Enter all or a portion of a signatory email address. For example,
entering a last name of'mi' would return 'Jane.Smith@FacilityA.com' and
'John.Miller@FacilityB.com'.
> Permitted Feature Number - Enter all or a portion of a permitted feature number.
For example, entering 'S' would return permitted features 'S' and 'SUM'.
> Discharge Number - Enter all or a portion of a discharge number.
> Discharge Description - Enter all or a portion of a discharge description. For
example, entering a 'storm' would return 'Storm Water' and 'Storm Water Action
Levels'.
> Confirmation Number- enter the complete submission confirmation number for the
DMR/COR you wish to view (NetDMR generates a unique confirmation number for
your submission).
> Include Repudiated CORs? - click to check the box if you would like to include
repudicated CORS that match your search criteria in your search results.
3. Click on ^^^^H to display the results or Cancel I to return to the Regulatory
Administrators Home page. CORs that match your criteria are displayed on the COR
Search Results page:
53
-------
NetDMR Regulatory Authority User Guide
May 2011
. COR Search Results
SlRefine Search ^New Search ^Download Selected
CORs 1 through 2 of 2
Facility Permit ID Monitoring Permitted Discharge Discharge Submitted Signatory
Name Period End Feature Number Description Date
Date Number
Repudiated? View Downloac
COB
LEAF IL0029475 08/31/08 INF
RIVER
STP,
VILLAGE
P. IV E P.
STP,
VILLAGE
SO/08 INF
MONITORING
Figure 3-6: COR Search Results Page

3.4.2. Viewing COR Search Results
Up to ten CORs will be displayed by default in the COR Search Results page. If more than 10
CORs are returned, you can navigate through the list by:

> Clicking a page number link to go to a specific page of results.
> Clicking the $' green forward arrow to display the next page of CORs.
> Clicking the -J green back arrow to view the previous page of CORs.
> Clicking the I double green forward arrow icon to display the last 10 CORs.
> Clicking the 4fl double green back arrow icon to display the first 10 CORs.
> Clicking the View All link to show all CORs in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
CORs at a time.

You can click any underlined column title to sort the CORs in ascending or descending order by
the information in that column.

3.4.3. Refining the COR Search
If there are more CORs returned than you expected, click on SlRefine Search to display a search
page where you can narrow your search using Signatory, discharge, confirmation and repudiated
COR criteria:
54
-------
NetDMR Regulatory Authority User Guide
May 2011
Permit ID
Itn °/a
Monitoring Period End Date Range [

Signatory First Name f

Signatory Last Name

Signatory User Name [

Signatory Email [

Facility Name [

Permitted Feature Number

Discharge Number [

Discharge Description f

Confirmation Number

Include repudiated CORs?
(mm/dd/wyy)
r
Search | Close |
3.4.4. Performing a New COR Search
To view another set of CORs, click on '^New Search to display a Search page and re-enter data
search using Signatory, discharge, confirmation and repudiated COR criteria:
Permit ID
|tn%
Monitoring Period End Date Range f

Signatory First Name f

Signatory Last Name [

Signatory User Name [

Signatory Email

Facility Name [

Permitted Feature Number f

Discharge Number [

Discharge Description

Confirmation Number [

Include repudiated CORs?
/dd/yyyy)
Search | Close |
3.4.5. Downloading a COR
The COR generated by NetDMR when a DMR is signed and submitted is a master COR zip file
that includes the following:

> All of the user-provided data for the DMR.
> The legal certification statement displayed to the user during signing process.
> The public key certification in the form of Hashes of any files that were attached
to the DMR. NetDMR uses FIPS 140-2 to generate all hash values. This is the
current approved FIPS certified standard.
> Metadata about any attached files (e.g., name, type, etc.).
55
-------
NetDMR Regulatory Authority User Guide
May 2011

> A submission receipt, which includes the following:
• The DMR submission confirmation number
• The hash of the data document
• The date and time of the DMR submission
• Identifying information from the signing account, including: the user's full
name, account login, email address, and hashed password (at time of
signing), and IP address of the submitting computer.

The first step in viewing downloaded CORs is to open the master COR file that you downloaded
extract all zipped file contents into a directory of your choosing. Each of these extracted zipped
files is a COR. Open one of these files and extract the three main files along with any
attachments that were included with the DMR. The three main files are as follows:

> dmrSubmission.xml - this file contains all of the user entered data for the DMR
submission.
> DischargeMonitoringReport.xsl - this is a stylesheet that will format the
dmrSubmission.xml file to look like the NetDMR DMR View page for easy
viewing when viewed in a web browser.
> submissionReceipt.xml - this file documents when the DMR was submitted, by
whom, and with what electronic hashing algorithm.
TIP
It is easy to view the DMR data is to view the
dmrSubmission.xml file using a web browser such as
Microsoft Internet Explorer or Mozilla Firefox. When ^^
opened in this way, the web browser will automatically e sure ° e* rac
format the data based on the stylesheet file dmrSubmission.xml and
dischargeMonitroingReport.xsl. Note that the web browser dischargeMonitoringReport.xslfrom a
will NOT be able to locate the stylesheet if the user does not COR *PP«*fil* mto th* sa™
first unzip all of the contents of the zip file into the same irec or^'
directory. The user may choose to also view the XML data
directly in any text editor of their choice.

Any attachments that were uploaded for the DMR prior to signing will also be included in the
COR files. These files have the names supplied by the person who uploaded them and can be in
almost any format. NetDMR will not convert these files so it is up to the user to figure out how
best to work with these files.

CORs are downloaded from the COR Search Results page. To download these files:

1. Click on f~" within the row for the COR desired to display a checkmark in the box, then
click on -^Download Selected if yOU did not select a COR, this window will appear to
remind you to select a COR:
56
-------
NetDMR Regulatory Authority User Guide
May 2011
Microsoft Internet Explorer
You must s ele ct at le ast one COR. Click in the b ox in the Include in B atch COR D ownlo ad c olumn to
select a COR and then click Download Che eke dCORs again.
OK
Click on
OK
to return to the Search COR Results page and repeat Step 1.
2. You will be prompted to save the CORs as a zipped file:
Do you want to open 01 save Ihis file?

-j.*l Name: netdmr_cor_zips_1238110562597.zip
Type: WinZipFile
From: netdrnrtest.epacdx.net
Open
Save
While files from the Internet can be useful, some files can potentially
harm your computer. If you do not trust the source, do not open or
save this file. What's the risk?
Click on
:.ave
to save the file to a location you designate, or click on
Cancel
to return to the Search COR Results page.

3. The Windows Save As dialog will appear. Click on the Save In drop down box and
Save
select a location to save the file into, then click on
to save the file to a
location you designate, or click on ce J to return to the Search COR Results
page.
Save in: | _j Outbdund lo DM WG
~3 o f ' m-
Fib name: B
Save as type- |v./inZip File
Save

Cancel
4. The Download complete dialog will appear.
57
-------
NetDMR Regulatory Authority User Guide
May 2011
Download complete
Download Complete
...cor_zips_1238110562597.zip from netdmrtest.epacdx.net

Downloaded: 10.3KB in 1 sec
Download to: ...\netdmr_cor_zips_1238110562597.zip,.,
Transfer rate: 10,3KB/Sec
n Close this dialog box when download completes
Open
Open Folder
Close
5. Click on
to open the zipped COR file, 0penFolder to display the contents of
the Folder, or.
Close
to return to NetDMR.
3.4.6. Viewing a COR
CORs can be selected from the CO/fo Search Results page for viewing. The COR can be
downloaded or repudiated, its certification statement can be viewed, its signature can be viewed
and verified, and the signature public key can be displayed while viewing it. See Appendix C for
details on validating COR signatures.

Start by clicking on § in the row next to the desired COR and the View COR Details page
shown in Figure 3-7 is displayed.
Manage I SE
Access Requests I CORs I Suspect Logs
Instance I Permits I Raw Logs
Agreements I Users I Network Activity
I DMRs
View Certification | -P Download COR | fi'view COR Signature | $ Download COR Sig. Public Key | ^ Verify Signature | C'Repudiate 51 COR Search Results

View COR Details
Permit
Permit #:
Major:
IL0029475
r
Report Dates 8, Status
Monitoring Period: From 08/01/08 to 08/31/08
Considerations for form Completion

Principal Executive Officer
First Name:
Last Name:
Ho Data Indicator (HQDI)
Permittee:
Permittee Addn
DMR Due Date:
LEflF RIVER STP
cility:
cility Lo
NetDMR Validated
58
-------
NetDMR Regulatory Authority User Guide
May 20 11
Form NODI:

Parameter Monitoring Par-am.
Quantity or Loading
Quality or Concentration
Permit

=
g*
U&Z

Mgal/d

Req Raq

MO DAILY Mgal/d
Ava MX

~
1,0
Req
Mon
MO
AVG

mg/L
19 -
mg/L

19 -
mg/L

«n
MO mg/L

AVG

thru

plant
Submission Mote
If a parameter row does not contain any values for the Sample nor Effluent Trading, then none of the following fields will be submitted for that row: Units NumDer Of E
Analsyis, and Sample Type.
Edit Check Errors
Attachments
No attachments.

Report Last Saved By

LEAF RIVER STP
2008-08-04 08:40 (Time Zone: -05:00)
Figure 3-7: View COR Details Page
3.4.6.1. Viewing the COR Certification Statement
This feature displays the submitter name and user type, permit ID, facility name, permitted
feature, discharge number, monitoring period end date, submission date, submission time and the
verbage of the certification statement that the Signatory agreed to when signing and submitting
the DMR for this COR.

View the COR's Certification Statement from the View COR Details page by:

1 . Clicking on Vie w Certification and the CQR Certification Statement page will appear:
CXIK [iHitifirrtlion SltitttniKnl

n:nn \etcur* (P«rrTii*t* UHT) tqrtt-1 W the- fallnmna nnrtiuDtn ftittrrc^i when subiTiittinc <+ ', o>tt :•* r

Fwtan f Dmtm
• 1 t\ •!••,•! J:

tttfllfv uflftf t*tntt!YOri*rth}tlhatubrtH$WirK amwnitf^irxSvrfnr^lltJlOrlfl . ._ .
Jl 11/-0 J'-X ..v, ./•'.-..,I >."..•,•:-."•; -1..|'vV,.V'-;.'..J.:.fl my pasf-nrdarrf assunty ^ufitOn ans\¥tr vrfpnww * Svbmttutton, J agn

unoftttMrf*
.. . . . ,.
jf any wsion » »r»w tfia: tf» antNfwtSatity rf rry p
w «r *( any «
n etafc™ sicnafl>™ aowvabfif ro my hrrfffm
ffxtt fi-ta ztlttfatnn uf fxt fkiriSms ftj fAfl tfrw.vtr-l -,:.-••.'-.•
t Hit mm K> &» tMKl Offrrf *i»w*dj»-
2. Click on to return to the Kiew CO/? page.
59
-------
NetDMR Regulatory Authority User Guide
May 2011

3.4.6.2. Downloading the COR
Refer to Section 3.4.5 for details on how to download and view a COR.

3.4.6.3. Viewing the COR Signature
The View COR Signature link allows users to see the digital signature used when the COR was
Signed and Submitted. This signature is used in the Validate COR function for Internal
Administrators. The COR Signature is a hash value of the COR XML file that is encrypted with
the Signing Certificate's Private Key.

View the COR's Signature from the View COR Details page by:

1. Clicking on£*view COR Signature and the COR Signature page will appear:
£' COR Signature

3940ede536cdd62707decObd95a94a68932363eeefdl063b6ca2633522902dfdfd9b98d5ad32ac970d6718bObd6cblcd6096701a7aal69642efdd6a49d50e5eae33i

Back |
2. Click on Bacl< to return to the COR Signature page.

3.4.6.4. Downloading the COR Public Signature Key
The COR Signature Public Key is consistent throughout the NetDMR Installation. The COR
Signature Public Key is taken from the NetDMR Signing Certificate which can be chosen by a
System Administrator on the Edit Settings screen. The COR Signature Public Key is included in
the COR Details as a way for the user to download and save the information. The COR
Signature Public Key would be used in a situation where the NetDMR Application has become
inaccessible or the Signing Certificate used at the time of submission has been removed from the
Application. The Public Key could be used with the hashing algorithms to prove a saved COR is
the same as the original submission COR. The COR Signature Public Key can also be used to
prove which NetDMR installation has submitted a COR.

Download the COR's Public Signature Key from the View COR page by:

1 Clicking on ^ Download COR Sig. Public Key
2. You will be prompted to save the Signature Key as a zipped file:
60
-------
NetDMR Regulatory Authority User Guide
May 2011
E
File Download
Do you want to open or save this file?

Name: publicKey.txt
Type: Text Document 326 bytes
From: netdmrtst.tceq. state, tx. us

Open I S
While files from the Internet can be useful some files can potentially
harm your computer. If you do not trust the source, do not open or
save this file. What's the risk?
Click on
Save
to save the file to a location you designate, or click on
Cancel
to return to the Search COR Results page.
3. The Windows Save As dialog will appear. Click on the Save In drop down box and
select a location to save the file into, then click on
location you designate, or click on
page:
Save
to save the file to a
Cancel
to return to the Search COR Results
-U.S
Save in: | _J Oulbound lo DM WG
E3-
Save as type: |Tent Doc
4. The Download complete dialog will appear.
Download complete
Download Complete
publicKey.txt From netdmrtest,epacdx.net
• •••••••••••••••••••••••••••••••••••••••••I
Downloaded: 326 bytes in 1 sec
Download to: C:\0utbound to DM WG\publicKey.txt
Transfer rate: 326 bytes/Sec
l~ Close this dialog box when download completes
Open
Open Folder
Close
5. Click on
Open
toopen the zipped COR file, Open Folder I to display the contents of
the Folder, or.
Close
to return to NetDMR.
61
-------
NetDMR Regulatory Authority User Guide
May 2011

3.4.6.5. Verifying the COR Public Signature
The Verify COR Signature function re-signs the COR being viewed using the NetDMR Signing
certificate. This value is then matched against the COR Signature value in the database from the
original submission. The signing process takes the COR file being viewed, creates a hash value,
encrypts the hash using the private key, and compares the result against the value saved from the
original submission; essentially running the Validate COR function with the input being the
viewable COR. This function proves to the user that the COR in the original submission is in
fact what is being displayed on the screen.

Click $• Verify signature at the top of the View COR Details page to open the Verify COR
Signature page with a message indicating whether the verification was successful and the
following information about the COR:

> Permit ID
> Monitoring Period End Date
> Signatory Name
> Signatory User Name
> Signatory Email
> Facility Name
> Permitted Feature
> Confirmation Number

Verify the COR's Public Signature Key from the View COR Details page by:

1. Clicking on^ Verifv signature and the Verify COR Signature page will appear:
q. Verify COR Signature

*f The COR Signature was successfully verified.
Permit ID IL0029424

Monitoring Period End 2007-12-31
Date

Signatory Name nasrinlescure

Signatory User Name tonasrin@iyahoo.com

Signatory Email tonasrin@yahoo.com

Facility Name LASALLE STP, CITY OF

Permitted Feature °01

Confirmation Number 9e3b2391-d2e9-40a9-9e91-33e80ef2f97b

Ok I
2. Click on -2-L to return to the View COR page.

62
-------
NetDMR Regulatory Authority User Guide
May 2011
3.4.6.6. Returning to the COR Search Results Page
Return to the COR Search Results page by clicking on ^L COR Search Results
3.5. Repudiating the COR
If a signatory contacts you and indicates that
he/she has reason to believe their account has
been compromised and erroneous and
unauthorized DMRs have been submitted on their
behalf, you should first lock the users account and
then repudiate the CORs for the unauthorized
DMRs that were submitted.
*
If a signatory submitted an erroneous
DMR and wants to revise it, they should use
the Correct DMR functionality instead of the
Repudiate functionality - Repudiating the
COR removes it from ICIS.
Repudiate a COR from the View COR Details page by:

1. Logging into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account.
2. Clicking on ^Repudiate
3. The Repudiate COR page will appear:
B' Repudiate COR

Confirm that you would like to repudiate this COR, If you repudiate this COR, a delete transaction y
permittee will be required to re-start the submission process for the associated DMR
Monitoring Period End 2008-08-31
Date

Signatory Name nasrinlescur

Signatory User Name t°riasrin@ya

Signatory Email tonasrin@ya

Facility Name

Permitted Featore INF

Confirmation Number 5a5ee713-daa3-wd6-baf3-f5afc69ad9Zc

Comment*
be senttc ICIE, r.rb'b'i :nd the
LEAF RIVER STP VILLAGE OF
L7
4. Enter the reason for the repudiation in the Comments field.
5. Click on Submit to continue with repudiating the COR, or click on
the View COR Details page.
6. An error message will display if nothing was entered into the Comments field:
There were errors processing your request.
to return to
Repeat Steps 3 and 4.
63
-------
NetDMR Regulatory Authority User Guide
May 2011

7. NetDMR will send a batch file with instructions delete the COR out of ICIS-NPDES and
will return you to the View COR Details page.
8. Lock the Signatory's account using the instructions in Section 3.8.2

3.6. Searching and Viewing Permits
You can retrieve and view information about a specific permit such as User Roles and Subscriber
Agreements from the Regulatory Administrators Home page or from the Search Permit ID
page shown in Figure 3-8.
Manage
Access Requests I CORs I Suspect Log
Instance I Permits I Raw Logs
Agreements | Users | Network Activity
DMRs
Figure 3-8: Search Permit ID Page
3.6.1. Search for Permits
Follow these directions to search for a permit from the Regulatory Administrators Home Page.

1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account. The Regulatory Administrators home page will be displayed.
Click on Permits in the gray Search tab
OR
click on Permit ID in the Search page.
2. Type the nine-digit permit ID, and click on Search I.
3. If the permit is available in NetDMR, the View Permit Details page is displayed. See the
next section for instructions on how to use this page,
OR
If an invalid permit ID is entered or the permit ID is not in NetDMR, the following
message will be displayed:
Search Permit ID
There were errors processing your request.
Enter a full Permit ID to retrieve and view information about the permit.

Permit ID: |UT002074 The permitiD is not available for reporting in NetDMR.
Re-enter a valid Permit ID and click on Search I until NetDMR is able to display the
permit.
4. When finished viewing the permit, click on Cancel I to return to the Search Permit ID
page.
64
-------
NetDMR Regulatory Authority User Guide
May 2011

3.6.2. View Permit Details
After you search for and NetDMR locates the permit of interest, the View Permit Details page as
shown in Figure 3-9 is displayed.
•^ View Permit Details
C ICP
table will be displayed with the default sort order applied and anv selected check boxes will be reset to unselected

Permit ID UT0020974

Facility Name

Permittee Address
>IE\TPM_ C AVIS CO SE'.'7E5
Users and Roles
Showing 4 of 4 Users/Ro
User Name
Organization User Type Role
Role Status View Subscriber Agreement
Pending Access Requests - External Signatory

No results

Pending Access Requests - External
Figure 3-9: View Permit Details Page

The following information is shown on this page:
> Permit Details
S Permit ID
S Facility Name
-S Permittee Address

> Users and Roles Table
•S User Name
•S Organization
S User Type
S Role
v' Role Status
-S Link to the view details about the user
S Link to Subscriber Agreement (if applicable)

> Pending Access Requests - External Signatory Table
•S Name
S User Name
S Requested Date
-S Link to view details about the user
-S Link to Approve or Deny Request. Note: See Section 3.1.1 for instructions on
Approving/Denying Signatory Requests.

> Pending Access Requests - External Table
•S Name
S User Name
S User Type
65
-------
NetDMR Regulatory Authority User Guide
May 2011

•S Requested Role
•S Approve/Deny
-S Comment
S Link to view details about the user. Note: See Section 3.1.1 for instructions on
Approving/Denying External Permittee and Data Provider Requests.

Up to ten users requests will be displayed by default in each of these tables. If more than 10
users are associated with this permit or have pending requests, you can navigate through the list
by:

> Clicking a page number link to go to a specific page of results.
> Clicking the \' green forward arrow to display the next page of Users.
> Clicking the --\ green back arrow to view the previous page of Users.
> Clicking the I double green forward arrow icon to display the last 10 Users.
> Clicking the *l double green back arrow icon to display the first 10 Users.
> Clicking the View All link to show all Users in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
Users at a time.

You can click any underlined column title to sort the Users in ascending or descending order by
the information in that column.

3.7. Searching for Users
You can search for users from the Search Users page shown in Figure 3-10 to view and edit their
account information.
'•*. Seurdi I (
Figure 3-10: Search Users Page
3.7.1. User Search
Follow these directions to search for a user from the
Regulatory Administrators Home Page:

1. Log into NetDMR selecting the desired
Regulatory Authority and using a
Regulatory Administrator account. The
Regulatory Administrators Home page will

66
You can leave Search fields
blank to return all users. You can
also enter partial information for any
criteria. For example, entering "a "
in the User Name criteria would
return both "AdamSmith " and
"KatieJones@state.xx. us "
-------
NetDMR Regulatory Authority User Guide
May 2011
be displayed. Click on Users in the gray Search tab
OR
click on Users in the Search page.
2. Enter criteria for the user and click search. You can search by:
•^ User First Name
•^ User Last Name
•^ User Name
•^ Email
v' Permit ID
•^ Facility Name
3.
4.
Click on Search .
If the User is found the Search results will be displayed on the User Search Results page.
See the next section for instructions on how to utilize the information on this page,
OR
If a User is not in NetDMR, the following message will be displayed:
Search Results
Click any underlined column title to s
the table will be displayed with the dt
first page of results will be displayed
No results.
Re-enter valid data in any of the User search fields and click on Searcn I until NetDMR
is able to display the User.
5. If the list is too large, click on 51Refine search aiKj re.enter the First Name, Last Name,
User Name, Email Address, Permit ID or Facility Name, then click on Searcn I to return
less results or click on close I to return to the User Search Results page.
6. If another search is desired, click on ^ New Search an(j re-enter the First Name, Last
Name, User Name, Email Address, Permit ID or Facility Name, then click on Searcn I to
return less results or click on close I to return to the User Search Results page.
7. When finished viewing the User information, click on any tab to view that page.

3.7.2. User Search Results
The User Search Results page (Figure 3-11) displays a table with the list of roles for each user
that match your search criteria. This table includes the following information:
67
-------
NetDMR Regulatory Authority User Guide
May 2011
Ck*
dm inbf. mil h- .
Una
NXM
M.nmv.kfii.ih h i.»i, f nu UMi II i:l
Figure 3-11: User Search Results Page

This table includes the following information:
> First Name
> Last Name
> User Name
> Facility
> Permit ID
> User Type
> Access Rights
> Email
> Link to View User Details
> Link to Edit User Details
Up to ten User roles will be displayed by default
in each of these tables. If more than 10 User roles
are associated with this permit or have pending
requests, you can navigate through the list by:
TiP
1
If the user you are searching for is
not displayed in the User Search Results
table, you can click on Refine Search or
New Search on the upper right. Both links
will take you back to the Users Search
page where you can refine your search by
adding additional search criteria or
starting a new search.
> Clicking a page number link to go to a specific page of results.
> Clicking the ^ green forward arrow to display the next page of User roles.
> Clicking the --\ green back arrow to view the previous page of User roles.
> Clicking the l double green forward arrow icon to display the last 10 User roles.
> Clicking the ^ ' double green back arrow icon to display the first 10 User roles.
> Clicking the View All link to show all User roles in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
User roles at a time.

You can click any underlined column title to sort the User roles in ascending or descending order
by the information in that column.

3.7.3. View User Account Details
After locating a user of interest on the User Search Results page, click on,~> in the View column
of their row to display the View User Account Details page:
68
-------
NetDMR Regulatory Authority User Guide
May 2011
Home | My Account | Request Access | Help | Logout
View User Account Details
Edit Cance
Anthony

Mueske

Anthony .Mueske@state.sd.us

605-773-4085

South Dakota DENR

External
General Account Information

First Name

Last Name

User Name

Telephone Number

Organization

User Type

Selected Security Questions

What is your favorite city?
What was your first pet's name?
What is your favorite vacation destination?
Who was your childhood hero?
What was your high school mascot?

Roles
Click any underlined column title to sort the table rows in ascending or descending order by the informatio
table will be displayed with the default sort order applied.
Access Rights Access s
One Role found
Permit ID Facility Name

SDP000022 APPLIED ENGINEERING, INC. Edit Approved

Signatory Role History

Showing 2 of 2 Signatory
Permit ID Facility Name Change Date Change Type Changed By Cpmment

SD0023338 BROOKINGS - CITY OF 06-25-0816:28 Canceled Anthony Mueske Cancelled by user

SDU023388 BROOKINGS - CITY OF 06-25-0816:17 Pending Anthony Mueske
Figure 3-12: View User Account Details Page

This page displays the following information about the user:

> General Account Information
S First Name
S Last Name
•S User Name
-S Email
S Telephone Number
S Organization
•S Type of User
69
-------
NetDMR Regulatory Authority User Guide
May 2011
> Selected Security Questions
S The five security questions that the user selected when creating his/her account is
displayed; however the user's responses to the questions are not displayed

> Permit and Roles Table
S Permit ID
S Facility Name
•S Access Rights
•S Access Status

> Signatory Role History Table
S Permit ID
•S Facility Name
S Change Date
S Change Type
•S Changed By
-S Comment

Up to ten users requests will be displayed by default in each of these tables. If more than 10
users are associated with this permit or have pending requests, you can navigate through the list
by:

> Clicking a page number link to go to a specific page of results.
> Clicking the *: green forward arrow to display the next page of Users.
> Clicking the --.I green back arrow to view the previous page of Users.
> Clicking the ^ double green forward arrow icon to display the last 10 Users.
> Clicking the ^ ' double green back arrow icon to display the first 10 Users.
> Clicking the View All link to show all Users in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
Users at a time.

You can click any underlined column title to sort the Users in ascending or descending order by
the information in that column.

While on this page, either click on Editl to Edit the User Account information using the
instructions in the next section, or click on Car":e—I to return to the User Search Results page.

3.8. Editing and Managing User Accounts
You can manage and edit general account information, lock and unlock an account, change
security questions and answers, and approve, deny and revoke roles for the users associated with
your Instance from the Edit User Account page or the View User Account Details page.
70
-------
NetDMR Regulatory Authority User Guide
May 2011
.V.'DMK
ILOQ5
Raw Lags
NMwdrl '
QMRS
4' Fdit User Amount
I in k?-l Krntnn
• ••ii1. -M -•• i •• - • •! A
«( in, h«/(h* Kilbt AncMU t »igt ta envidt At *

Figure 3-13: Edit User Account Page

Up to ten permits the User has Roles for will be displayed by default. If more than 10 permits are
associated with the User's account, you can navigate through the list by:

> Clicking the ^ green forward arrow to display the next page of permits.
> Clicking the 4 green back arrow to view the previous page of permits.
> Clicking the ' ^ double green forward arrow icon to display the last 10 permits.
> Clicking the ^ -I double green back arrow icon to display the first 10 permits.
> Clicking the View All link to show all permits in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
permits at a time.

You can click on the Permit column title to sort the Permits in ascending or descending order.

Access the Edit User Account page shown in Figure 3-13 for a specific user and edit User
Information by following these steps:

1. Follow the instructions in Section 3.8 to display the Edit User Account page and click on
71
-------
NetDMR Regulatory Authority User Guide
May 2011
OR
Follow the instructions in Section 3.7.3 to display the desired User on the View User
Account Details page and click on Editl
2. Edit general user information, lock or unlock the account, reset the password, reset the
secret questions and approve, deny or revoke a role as described in the following
subsections.
3. After completing your edits, click on _ Save All changes | jo continue, or click on
Cancel I to return to the View User Account Details page.
If you enter invalid information, Deny a role without entering a comment, or revoke a
role without entering a comment an error message will appear:
There were errors processing your request.
Fix your errors and click on I Save All changes | ^o continue, or click on.
return to the View User Account Details page.
4. Review your changes on the Confirm User Account Changes page to confirm that they
are correct:
I Instance I Permits I
Agreements I Users
Raw Logs
Network Activity
DMRs
^ Confirm User Account Changes

General Account Information
First Name

Last Name
Spangler

filbert, Spangler@ state .sd.u

Albert, Spangler@ state .sd.u

605-773-4220

South Dakota DENR
Account Status

Modified Security Questio

No changes,

Role Changes
5. Click on 5ave I on the Confirm User Account Changes page to finalize your edits, or
click on Cancel I to return to the Edit User Account page.

3.8.1. Edit General User Information
You can modify the following information in the General User Account Information section:
> First Name
> Last Name
> User name
> Email
> Telephone Number
> Organization
User Type and Regulatory Authority are displayed on this tab for informational purposes
only.
72
-------
NetDMR Regulatory Authority User Guide
May 20 11

3.8.2. Lock User Account
A locked account is different than a disabled account. A user's account is disabled if he/she
enters their password incorrectly three times or enters three incorrect responses to security
questions. If a user disables their account by entering their password incorrectly three times, the
user can enable their account and request a password reset by responding correctly to a security
question. If a user forgets the responses to his/her security question, he/she must contact the
Regulatory Administrators directly and request a reset of the security questions.

If the current account status is unlocked and you would like to lock it, click on f~ next to the
Lock Account field to blank it out.
3.8.3. Unlock User Account
If the current account status is locked and you would like to unlock it, click on
Unlock Account field to remove the checkmark from it.
next to the
3.8.4. Reset User Password
You cannot create a password for the user. Instead to reset the User's password, click on F next
to the Reset Account Password field
Password

Reset account
password
NetDMR will send the user an email notifying them of the password reset:
To reset your password, please click on the following link:

https : //netdmrtest. epacdx. net/netdmr-web/p'ihllc/verif icatlon . htm?
Thsnlc you.
When the user clicks on the link in their email they will be taken to the Complete NetDMR
Password Reset Request page where they must answer one of their secret questions and enter a
new password twice:
Login | FAQs | Getting Started | Contact the NetDMR Team

JVerDMR
* Complete NetDMR Password Reset Request

Hello ahson_kittle@iyahoo.com. To reset your NetDMR password, provide a response to the
security question and create a new password for your account.
What is the name of the
street where you grew up?
Enter Password

Enter Password again
Submit | Cancel |
NetDMR will confirm the password was reset and send the user an email notifying them of the
password reset. The user is now ready to log back into NetDMR.
73
-------
NetDMR Regulatory Authority User Guide
May 2011
Login | FAQs | Getting Started | Conl
t the NetDMR Te
A
A/erDMR
^ Password Reset Completed

Your password has been changed. Click here to access the login page and begin using NetDMR.
£2008 NetDM
3.8.5. Reset User Security Questions and Answers
To reset User's Security Questions and Answers, click on the drop down in the Security
Questions and Answers section and select "Enter a temporary security question answer for the
user to force a reset of the security questions" from the list and type an answer into the box
below.
Security Questions and Answers
Select a question and enter an answer to reset all of the users security questions.

1
time the user logs in, he/she will be directed to a page to provide the answer
you communicated, select questions, and add responses.

NetDMR will send the user an email notifying them of the security answer reset:
To Reset your security Questions, please click on the following link:

httpg : //'net. dir.r teat-. epacdx . net./ r.ecdmr-web/gubl-C/'vgrjLf ^cation, hem?
-•-.-_--:.:.: : :: -: r •; •-. : E : -. : ? •-. : : :-: : -: : \ -. :•-. :
= E.: : .:-:•; :-::-." : -: = •---: -: " -. -::":: -:.. " : - 1 •- .-: :-. •:' .
The answer to the security question will be communicated to you via a phone call by the internal admir,.
Thank you.
You must contact the user by phone an inform him/her of the correct answer. When the user
clicks on the link in their email they will be taken to the Reset Account Credentials page where
they must provide the answer you provided, select questions and add responses for those
questions:
Login | FAQs | Getting Started | Contact the NetDMR Team
NetDMR
$ Reset Account Credentials

To reset your security questions, please enter the answer to the security question conveyed to you by the
administrator at your regulatory authority and select new security questions and answers.
Enter a temporary security question answer for the \ (Answers a
user to force a reset of the security questions.:

Selected Security Questions

Please provide responses for security questions. Select each question only one time. Note that answers are case-
sensitive.

NetDMR will confirm the security answers were reset and send the user an email notifying them
of the security question reset. The user is now ready to log back into NetDMR.
Lu^iiFi | FAQ* | H3.Lli.iM

NtiDMR
* NetDMR Account Reset Security Questions and Password
3.8.6. Approve User Access Requests
To approve a pending access request, click on F in the Approve column.

3.8.7. Deny User Access Requests
To deny a pending access request, click on F in the Deny column and enter a reason in the
Comment column.

3.8.8. Revoke User Access Requests
To revoke access to a permit, click on T in the Revoke column and enter a reason for the
revocation in the Comment column.

3.9. View Logs
Regulatory Authority Administrators should periodically perform a fraud analysis using the logs
for their Instance to determine if an account has been compromised. If it is determined that a
compromise has occurred, the affected account will need to be locked, preventing the user from
signing eDMRs, and the user will be contacted to address the situation. See Appendix B for
more information on performing fraud analysis.

As a Regulatory Administrator, you can access the following logs:

> Suspect Logs
> Raw Logs

Instructions for viewing these logs are described in detail within the next subsections.

3.9.1. Viewing Suspect Logs
The Suspect Analysis process analyzes NetDMR logs such as the login and submission logs to
identify irregularities associated with user accounts that may be a trigger for further
investigation.
75
-------
NetDMR Regulatory Authority User Guide
May 2011
A^V.RHM) .1-. I
Infttnoo
Agreements I users
Tho NetW* Suspect tntftiu System *tialvJ« NetOMR logs sueh *s the login and sLi.ru. ss
an am?uriL li« LBVII yjiiiproniiniJ, El an irisyularAj lur dn dwuunl. it luynd iL JUHI nut n

Select a suspant Analysis Log to Vlevg
inspect rtnalviis Kjn Uate: ftugurtM.;

Log Rome A
Figure 3-14: Suspect Logs Page

The irregularities that are flagged include the following: inconsistent login IP addresses,
multiple overlapping login attempts, multiple overlapping login attempts from different IP
addresses, and irregular submission pattern. The frequency with which the suspect analysis
process is run is set by the system administrator, and may be monthly, quarterly, semi-annual, or
yearly.

Follow these directions to view the contents of a suspect log:
1.

2.
O
Log into NetDMR selecting the desired Regulatory Authority and using a
Regulatory Administrator account. The Regulatory Administrators Home page
will be displayed.
Click on Suspect Logs under the View menu.
Click in the drop down box next to Suspect Analysis Run and select a specific
date of suspect analysis results to view:
Select One
Select One
September 14. 2008
lAuaust14.2008
[July 23, 2007
Click on
The suspect analysis results are displayed at the bottom of the page and provide the following
information:
Suspect Analysis Run Date
Log Range Analyzed
User Name
Irregularity Type
Description
Irregularity Type
Description
76
-------
NetDMR Regulatory Authority User Guide
May 2011
Irregularity Type
Inconsistent Login IPs
Overlapping Login
Attempts
Overlapping Login
Attempts with Different IPs
Irregular Submission
Pattern
Description
User has logged in using more than 10
different IP addresses during the analysis
log range. Example: Number of IPs: 32
User had more than 10 overlapping login
attempts within a 3 day span.
Example: Date and time of first login in
span: 08/01/07 2:24 pm.
User had more than 5 overlapping login
attempts using different IPs within a 3 day
span.
Example: Date and time of first login in
span: 06/01/07 5:25 pm.
Example: A higher than anticipated number
of DMRs were submitted during the
following month(s): January, 2007 (5);
March 2007 (10)
Up to 10 items in the log will be displayed by default in the Suspect Analysis Log table. If more
than 10 items are recorded, you can navigate through the list by:

> Clicking the page number links to display other pages of 10 items at a time.
> Clicking the green forward arrow:; to display the next page of items.
> Clicking the green back arrow •'•' to view the previous page of items.
> Clicking the double green forward arrow icon 'v to display the last 10 items.
> Clicking the double green back arrow icon Clicking the View All link to show all items in the table on the same page with the
default sort order applied.
> Clicking the View Partial link to return from the View All display back to viewing
10 items at a time with the default sort order applied.

You can click any underlined column title to sort the items in ascending or descending order by
the information in that column.

3.9.2. Viewing Raw Logs
Raw logs provide access to the logs of the date and time following user activities that are tracked
for your NetDMR Instance using the View Raw Logs page (Figure 3-15):

> Login attempts and results
> DMR Submissions
> Attempts to enable an account after being locked out
> Attempts to enable and expired password
> Attempts to reset a forgotten password
> Attempts to retrieve a forgotten username
> Attempts to edit account information
77
-------
NetDMR Regulatory Authority User Guide
May 2011
9' View Raw Logs

Select a Log to View

Log*:

Date Range Start*: »

Date Range End*: fr
|Select One
Figure 3-15: View Raw Logs Page

Follow these directions to view information contained within one or more raw logs:

1. Log into NetDMR selecting the desired Regulatory Authority and using a
Regulatory Administrator account. The Regulatory Administrators Home page
will be displayed.
2. Click on Raw Logs under the View menu.
3. Click on the Log drop down box to select a specific log to view:
| Select One
Edit Account
Enable Account
Enable Expired Password
Forgot Password
Forgot Usernarne
Login
Submission
4. Select the Date Range Start by clicking on 3 and selecting a date, or enter a date
in the box using the following format: mm/dd/yyyy.
5. Select the Date Range End by clicking on 3 and selecting a date, or enter a date
in the box using the following format: mm/dd/yyyy.

6. Click on view I to search for the log and display the results:
' Vinw Raw I ncjr.
tDRamur Start*: <™vdd/-,>v,)

tf Ranjt Frd': .-Tj-V^m)
78
-------
NetDMR Regulatory Authority User Guide
May 2011

Any information available for the log you selected is displayed at the bottom of the View Raw
Logs page and includes the following:

> Log selected
> Date Range selected

The Submission logs display includes the following information in a table:

> Date of DMR Submission
> User Name
> Permit ID
> Permit Feature Number
> Limit Set
> Monitoring Period End Date
> Confirmation Number
> Indication of whether the submission was repudiated.

The display for all other logs includes the following information in a table:

> Log Date
> UserlD
> User Name
> Name
> IP Address (populated for Login Logs only)
> Login Result

Up to 10 log items will be displayed by default in the table. If more than 10 items are available,
you can navigate through the list by:

> Clicking the page number links to display other pages of 10 items at a time.
> Clicking the green forward arrow:: to display the next page of items.
> Clicking the green back arrow •'•' to view the previous page of items.
> Clicking the double green forward arrow icon ••^ to display the last 10 items.
> Clicking the double green back arrow icon 4W to display the first 10 items.
> Clicking the View All link to show all items in the table on the same page with the
default sort order applied.
> Clicking the View Partial link to return from the View All display back to viewing
10 items at a time with the default sort order applied.

You can click any underlined column title to sort the items in ascending or descending order by
the information in that column.

3.10. View Network Activity
As a Regulatory Administrator, you can access the View Exchange Network Activity page by
clicking on Network Activity under the View menu. Regulatory Administrators can perform the
following using the functionality on this page:
79
-------
NetDMR Regulatory Authority User Guide
May 2011

View Exchange Network Activity;
Request Basic Permit Data Flow;
Request DMR Information by Date Range; and
Request Information for One DMR.
Manage
Access Requests
Instance
Agreements
Permits I Raw Logs
Users I Network Activity
I DMRs
View Exchange Network Activity

View the transactions between NetDMR and the Exchange Network Node be

View All
Showing items 1-10 of 99. *J/ 4 I, 2, 3, 4, 5, 6, 7, B
NetDMR NetDMR NetDMR NetDMR
Activity ID Created Status
Type Date
NetDMR NetDMR Node
Permit
Data
Request
2006-03- COMPLETED
Node
Node
14:30:00

Request Basic Permit Data Flow

Submit this request if you would like the system to retrieve updated basic permit data.
Transaction ID

f53d2095-
7acd-42de-
8c6e-
b673d32c7f21
Transaction Status
Status Date

COMPLETED 2008-08-

05:03:46

COMPLETED 2003-08-
6467-4221-
bb30-
e7c737bb25Qb
Request Basic Permit Data Flow update for this instance?
Request DMR Information by Date Range
Monitoring Period Start Date Range

Monitoring Period End Date Range

Permits
j (mm/dd/yyyy)
Update DMR Info
J
Request DMR Information for One DMR

Select the DMR for which you would like to request the Empty Slot Data Flow. This request is only available for DMRs for which an empty slot ^'""'1 ''"''" '^'T'lT1 h'"1;- '-^mP|eted
successfully at least once, If a signatory has not been approved or you have not previously run the Request DMR Information by Date Range™1" tnis PemK' tne "" or Permitted
,
features and the permit limit sets '/..'ill not be
Permit ID:

Permitted Feature:

Limit Set:

Monitoring Period End
Date:
Figure 3-16: View Network Activity Page

3.10.1. View Exchange Network Activity
The View Exchange Network Activity table shows the transactions between NetDMR and the
Exchange Network Node and displays the following information.

> NetDMR Activity Type - General description of the activity, including:
S Basic Permit Data Request: retrieves permit identifying information and related
dates such as permit ID, permit status, permitted facility name and location
information, and permit effective and expiration dates.
80
-------
NetDMR Regulatory Authority User Guide
May 20 11

•S Empty Slot Data Request: retrieves permitted features, limit sets, parameters, and
limits for a DMR.
-S DMR Submission: submits DMR transactions and retrieves and processes error
and warning transactions.

NetDMR Fields
> NetDMR ID - NetDMR identifier for this transaction.
> NetDMR Created Date - Date and time that the transaction was created.
> NetDMR Status - Current NetDMR status for the transaction, including:
> Pending: the transaction has been entered into the NetDMR queue
for processing.
> Node: the transaction has been submitted to the node for
processing and a node transaction ID has been returned
> Failed: the transaction failed.
> Completed: the transaction was successfully completed.
> Completed with errors: For DMR Submission transactions only,
the DMR was processed but errors or warnings were encountered
and returned from ICIS-NPDES.
> Cancelled: the transaction was submitted but remained pending
for 48 hours; the transaction was cancelled.

> NetDMR Service - Name of the Exchange Network service being utilized, including:
> NetDMR. GetBasicPermitlnfojvl .0: a Basic Permit Data Request.
> NetDMR. GetScheduledDMRsByDMRjvl.O: a type of Empty Slot
Data Request.
> NetDMR. GetScheduledDMRsByDate_vl.O: a type of Empty Slot
Data Request.
> ICIS-NPDES2: The DMR submission service.
Links
NetDMR Information: Click on to open a page and view the Agency Mapping
requested from ICIS via the Basic Permit or Empty Slot Data Flow service request
transaction:
NetDMR Result: Click on to download a zipped file and view the XML file
containing the results of data from ICIS via the Basic Permit, Empty Slot or DMR
Submission service request transaction result file if status is Completed or Completed
with Errors/Warnings.
81
-------
NetDMR Regulatory Authority User Guide
May 2011
NetDMR Log: Click on La to open a page to view the log of the progress from ICIS via
the Basic Permit, Empty Slot or DMR Submission service requests:
•\- \,/ • I. Activity I
"wWNH »t*nH HviirtM
SSSSS
Click on B I to close the NetDMR Information, Result or Log page and return to the View
Exchange Network Activity page.

Node Fields
> Node Transaction ID - The identifier returned from the node for the service request.
> Node Transaction Status - Current Node status of the request.
> Node Status Date - The last date and time that the Node status was refreshed.

Up to 10 Exchange Network transactions will be displayed in the table by default. If more than
10 transactions have occurred, you can navigate through the list by:

> Clicking the page number links to display other pages of 10 transactions at a time.
> Clicking the green forward arrow:; to display the next page of transactions.
> Clicking the green back arrow -•'• to view the previous page of transactions.
> Clicking the double green forward arrow icon •& to display the last 10 transactions.
> Clicking the double green back arrow icon '11 to display the first 10 transactions.
> Clicking the View All link to show all items in the table on the same page with the
default sort order applied.
> Clicking the View Partial link to return from the View All display back to viewing 10
transactions at a time with the default sort order applied.

You can click any underlined column title on the Exchange Network Activity table page to sort
the items in ascending or descending order by the information in that column. If you click to
view details for a row in a table and then choose to return to the View Exchange Network
Activity page, the first page of results will be displayed with the default sort applied.

3.10.2. Request Basic Permit Data Flow
When an instance is created, NetDMR requests basic permit information from ICIS-NPDES
using the Agency Maps as the selection criteria. After the initial request for Basic Permit occurs,
NetDMR will request the data from ICIS-NPDES again every week for each Instance based upon
their agency maps. See Appendix E for
more information on refreshing permit
data.
flp
ICIS will process NetDMR requests for
permits on a nightly basis. Check NetDMR the
next morning for your newly refreshed permits if
you requested a refresh of your permits.
-------
NetDMR Regulatory Authority User Guide
May 2011
Rather than wait one week, Regulatory Administrators are able to refresh basic permit data in
NetDMR with ICIS-NPDES data at any time using the View Network Activity page.

Follow the directions below to submit a request for NetDMR to refresh updated basic permit
data:
1.

3.
4.
5.

6.
Log into NetDMR selecting the desired Regulatory Authority and using a
Regulatory Administrator account. The Regulatory Administrators home page
will be displayed.
Click on Network Activity uncjer the Vew menu. The View Exchange Network
Activity page will be displayed.
Scroll down to the Request Basic Permit Data Flow section of the page.
Click on Update Permit Information |
Click on c I on the Confirm Request for Basic Permit Data Flow page to
send the request to ICIS, or click on Can I to return to the View Exchange
Network Activity page.
A message will appear confirming that your request has been sent to ICIS:
The requested data flow has been saved.
ICIS will process your request overnight and return the refreshed data the next morning.

3.10.3. DMR Data Refreshes from ICIS-NPDES
When the first Signatory for a permit is approved by a Regulatory Administrator, NetDMR
requests one year's worth of anticipated DMRs or "empty slot records" from ICIS-NPDES.
Each month after this, NetDMR requests another 2 month's worth of data to ensure that
NetDMR always has at least one year's worth of empty slot records. The selection criteria for
DMR data refreshes is based upon the date that the Signatory approval is granted, the monitoring
period start date and, in the case of the initial pull, the monitoring period end date. See
Appendix E for more information on refreshing DMR data.

Rather than wait one month, Regulatory Administrators and Permit Administrators are able to
DMR empty slot records in NetDMR with
ICIS-NPDES data at any time. Regulatory
Adminstrators can use the View Network
Activity page using the instructions in
Sections 3.10.4 and 3.10.5. Permit
Administrators can use the Refresh DMRs
hyperlink on the DMR Search Results
page.
ICIS will process NetDMR requests for
DMRs on a nightly basis. Check NetDMR the
next morning for your newly refreshed DMRs if
you requested a refresh of your DMRs.
3.10.4. Request DMR Information by Date Range
Requesting DMR Information by Date Range triggers an Empty Slot Data Flow (ESDF) refresh
request to ICIS for a specific permit ID for a specific set of dates. The ESDF retrieves the
following information for each DMR:
83
-------
NetDMR Regulatory Authority User Guide
May 2011
You may only request up to 14 consecutive
months ofDMRs at a time.
> Permit ID
> Permit Status Code
> Permittee and Facility Name and
Address
> Major Status Indicator
> DMR Recipient and Mailing
Address
> State/Region text
> Permit Dates
> Original issue date
> Most recent issue date
> Effective date
> Expiration date
> Federal Grant Indicator
> Permitted Feature
> Permitted Feature Identifier,
> Permitted Feature Type Code
Limit Set Designator and Name
Monitoring Period Start and End Dates
Report Due Date
Limit Information
Parameter
Season Identifier
Monitoring Location Type
Effluent Trading Partner Indicator
Frequency of Analysis Code
Sample Type Code
Quantity Unit Code
Numeric Conditions - statistical basis and limit value for
each quantity, loading, quality, or concentration

1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account. The Regulatory Administrators home page will be displayed.
2. Click on Network Activity uncjer the Vew menu. The View Exchange Network Activity
page will be displayed.
3. Scroll down to the Request DMR Information by Date Range section of the page.
4. Click on "I and select the Monitoring Period Start Date Range or type in the Monitoring
Period Start Date Range in this format:
mm/dd/yyyy.
OR
„.. . —„! , , , ,. , . . _ . . You can enter either a Monitoring
Click on I and select the Monitoring Period n . , Ov , ^. , r j r\ *
_ ,_ _ , ,f . . Period Start Date or End Date range, or
End Date Range or type in the Monitoring ,, , , , °
_.,_,__. ,.,, you may enter ranges for both dates.
Period End Date Range in this format:
mm/dd/yyyy.
Enter the Permit(s) of interest (separate each with a comma).
Click on Update DMR Information
84
-------
NetDMR Regulatory Authority User Guide
May 2011
If dates are not entered, dates are missing, or there are no permit IDs an error message
will appear:
V The requested data flow has been canceled.

View Exchange Network Activity

View the transactions between NetDMR and the Exchange Network Node below, Click any underli
order by the information in that column. If you click View All or View Partial, the table will be disp

There were errors processing your request.

Repeat Steps 4-6 entering a valid start date range, a valid end date range, and one or
more permit IDs.

7. Click on c°n I on the Confirm Request for DMR Information page to send
the request to ICIS, or click on Can I to return to the View Exchange Network
Activity page.
8. A message will appear confirming that your request has been sent to ICIS:

; i The requested data flow has been saved.
ICIS will process your request and return the refreshed data the next morning.

3.10.5. Request Information for One DMR
Follow the directions below to submit a request for information for one DMR:

1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account. The Regulatory Administrators Home page will be displayed.
2. Click on Network Activity UIKjer the View menu. The View Exchange Network Activity
page will be displayed.
3. Scroll down to the Request DMR Information for One DMR section of the page.
4. Enter a valid Permit ID. If an invalid permit ID is entered an error message will appear:
Permit ID:
|TN0000364S
Update The permitID 15 not available for reporting
— ' in NetDMR.
Re-enter a valid Permit ID.
5. Click on uPdate I.
6. NetDMR will retrieve all Permitted Features or outfalls for the permit. Click in the
Permitted Feature drop down box and click on the desired Permitted Feature.
7. Click on
8. NetDMR will retrieve all Limit Sets for the Permitted Feature. Click in the Limit Set
drop down box and click on the desired Limit Set.
9. Click on uPdate I.
10. NetDMR will retrieve all available DMR Monitoring Period End Dates for the Limit Set.
Click in the Monitoring Period End Date drop down box and click on the desired
selection.
1 1 Click on _ Update DMR Information _ |
85
-------
NetDMR Regulatory Authority User Guide
May 2011
12. The Confirm Request for DMR Information for One DMR page will appear:
Manage I Search I View
Access Requests I CORs I Suspect Logs
Instance I Permits I Raw Logs
Agreements I Users I Network Activity
I DMRs
Confirm Request for DMR Information for One DMR
Permit ID:

Permitted Feature:

Limit Set:

Monitoring Period End Date: 112/31/07
l - LASALLE WWTP OUTFALL|
Click on Cl=l m I on the Confirm Request for DMR Information page to send the
request to ICIS, or click on Can I to return to the View Exchange Network Activity
page.
13. A message will appear confirming that your request has been sent to ICIS:
, J The requested data flow has been saved.
V
fiH
You may only view a partial DMR.
Only a Permittee or Data Provider may
edit the DMR.
3.11. Requesting Access to Partial DMRs
Regulatory Administrators may request access to view
an in-progress DMR in order to assist a permittee
having difficulty in completing it. A Permit
Administrator of the Instance where the DMR resides is
responsible for approving partial DMR access requests.

To request access for viewing a DMR in progress:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account.
2. Click on the Request Access hyperlink at the top of the Regulatory Authority Home
page.
3. In the Request Access to Partial DMRs section, enter the Permit ID you would like to
access.
4. Click on I uPda1:e I to check to see if the permit exists in NetDMR.
5. If an invalid permit ID is entered or the permit does not exist in NetDMR an error
message will appear:
\ There were errors processing your request.
86
-------
7.

8.
9.

11
12
NetDMR Regulatory Authority User Guide
May 2011
Repeat Steps 3 and 4 using a valid permit ID.
Otherwise, NetDMR prompts you for a Permitted Feature. Click in the box next to
Permitted Feature, then click on a Permitted Feature Number to select it.
Click on I UPdate I to check to see if there are Limit Sets in NetDMR for the Permitted
Feature.
Click in the box next to Limit Set, then click on a Limit Set Number to select it.
Click on I uPdate | to check to see if there are Monitoring Period End Dates for any
partial DMRs in NetDMR for the Permitted Feature.
Click in the box next to Monitoring Period End Date, then click on an End Date to
select it.
Click on Add Access Request |
A new row will appear in the Summary of Access Requests table containing the selected
Permit ID, Permitted Feature, Limit Set and Monitoring Period End Date:
Permit ID Permitted Feature ID Limit Set Designator Monitoring Period End Date Remove Access
Request

IL0029424 001

IL0029424 003
8/31/08

9/30/08
13.
14.
15.
Repeat Steps 3 - 11 to add each Partial DMR desired.
Click on ** within a row to remove that partial DMR request from the table.
The Confirm Access Requests window will appear:
<4 Confirm Access Requests

You have already requested or been granted Internal Administrator Role.

<3 Request Access to Partial DMRs

Summary of access requests.

Permit ID Permitted Feature ID Limit Set Designator Monitoring Period End Date
TNOOU296S 002 G 4/30/08
Confirm | Cancel |
16
Click on Confirm | jo submit the access request, or click on.
Internal User Access page.
A message will appear notifying you your request was submitted:
I to return to the
+r
Your access request(s) have been submitted for approval.
A Permit Administrator in charge of the DMR must approve or deny your request. When your
request has been approved or denied, you will receive an email notifying you. If your request
was denied the reason for denying it will be included in the email.

3.11.1. View Partial DMRs
Once you have approval from a Permit Administrator for your partial DMR request, you can
view it using the Partial DMRs page shown in Figure 3-17.
87
-------
NetDMR Regulatory Authority User Guide
May 2011
• I'nrtlal [JMK-:
Figure 3-17: Partial DMRs Page
To display this page:
TIP
If the Permittee or Data Provider
changes the DMR while you are viewing it
you must close the DMR and repeat Step 4
to see their changes.
1. Log into NetDMR selecting the desired Regulatory Authority and using a
Regulatory Administrator account.
2. Click on DMRs under the View menu.
3. The Partial DMRs page displays the following for each DMR that you have been
granted access to
> Permit ID
> Permitted Feature
> Discharge Number
> Monitoring Period End Data
> View DMR
4. Click on & to open the desired
DMR to display it and be able to
talk the Permittee through any steps necessary to fill it out correctly. Note that the
DMR displayed will let you enter data into the fields but there are no buttons
allowing you to save this data - only Permittees or Data Providers can edit
DMRs.

3.12. Validate CORs
The Validate COR functionality allows Internal Administrators to check if a Copy of Record
(COR) provided by a Permittee User matches the corresponding COR stored in NetDMR, or if it
has been altered. To validate a COR, you must upload a zip file that contains only a single COR
and enter its COR signature. The COR will only be validated if the hash of the COR being
uploaded and its COR Signature matches the hash of the original COR and its COR Signature
saved in the database.

The COR Signature used during the process can be found in the submission acknowledgement
email that you received for this DMR submission (or can be retrieved by viewing a COR and
clicking on the "View COR Signature" hyperlink). Note that if you downloaded multiple CORs
or are using Internet Explorer 6, the individual COR zip files may have been combined into a
larger zip. Verify that you are downloading a single COR zip file by checking that the zip file
name starts with the Permit ID, followed by permitted feature, and monitoring period end date,
followed by other dates. See Appendix C for more details on validating CORs.

Follow these steps to Validate the COR:
88
-------
1.
2.
4.

5.
NetDMR Regulatory Authority User Guide
May 2011
Login to your NetDMR Regulatory Administrators account.
Click on CQRs under the Validate menu. The Validate COR page will appear:
I '..'.mil | '/II-VJ
£rrl^--:i?rlii^M I <:ol^ I '.-.ii:[if*[
Instance I H&rnits I Ka* Logs
Agreements I users I Network
I DMRS
. •!.• I alik- 11 . |.li ...I |

bitter digital signature \
to be used for
submrt | canttl |
Click on Browse... I and navigate to the location where the COR zip that you
would like to validate is stored. The Windows dialog box will open:
bah_directions.pdf
U CDX Lite ICIS Batch Web Pre-Registration Form • Hybrid UVT.xls
SJ CDX Lite ICIS Batch Web Pre-Registration Form.xls
5] CDX Lite ICIS Batch Web Registration Form - Illinois Production Users.xls
3eShare Instructions for ICIS-NPDEE System and Batch Documents.pdf
I] I CIS Batch Test Registration Form.xls
^Instructions for Generating Batch Audit Reports Using Business Objects xi.pdf
"0NetDMR Help_20080716.pdf
•BTablesforErrorCleanup.PDF
to upload the file, or click on I to return to the
Click on
Validate COR page.
If no fields were entered or a file other than a zipped file is uploaded an error
message will appear:
There were errors processing your request.
Repeat Steps 3 and 4 above.
Enter the digital signature for that DMR submission. Note: The digital signature
is included in the submission acknowledgement email that you received for this
DMR submission or can be retrieved by viewing a COR and clicking the View
COR Signature.
Click on Submit I to validate the COR, or click on Cancel to cancel to return to
the Regulatory Administrators Home page.
If an invalid digital signature is entered, an error message will appear:
89
-------
NetDMR Regulatory Authority User Guide
May 2011
Validate COR

: - The COR was not successfully validated.
9. NetDMR validates the COR by rehashing the COR zip file you uploaded and
comparing the new hash with the hash contained in the signature that you entered.
NetDMR then displays a message indicating whether the validation was
successful.

Chapter 4. Regulatory View User Procedures
All Regulatory Users can search, view, and download CORs. Only Regulatory Administrators
can repudiate, validate, and verify the signature for CORs. When a Signatory signs and submits a
DMR, NetDMR creates a unique COR for that DMR. The COR is defined in the Cross-Media
Electronic Reporting Rule as follows (70 FR 59880 October 13, 2005, specifically Subpart A,
Section 3.3):

(1) All electronic signatures contained in or logically associated with that document;
(2) The date and time of receipt; and
(3) Any other information used to record the meaning of the document or
the circumstances of its receipt. "

Each NetDMR installation has an RSA 1024 bit asymmetric key that is used for digital
signatures. NetDMR will use its private key to digitally sign the CORs. The signature will be
executed against a message digest created from the COR using the FIPS 140-2 hashing
algorithm. For details on this process go to these web sites:

> Federal Information Processing Standards (FlPS)-approved algorithms for generating
Message Digest: http://www.csrc.nist.gov/CryptoToolkit/tkhash.html

> FlPS-approved algorithms for generating/verifying digital signatures:
http ://www. csrc.nist. gov/CryptoToolkit/tkdigsigs. html

Regulatory Users can access CORs, from their home page shown in Figure 4-1, or by clicking on
the CORs hyperlink located on the gray Search and View tab to display the Search CORs page
shown in Figure 4-2.
90
-------
NetDMR Regulatory Authority User Guide
May 2011
Signatory First Name: \

Signatory Last Name: \

Facility Name: |~

Monitoring Period r-
End Date Range:
Figure 4-1: Regulatory User Home Page
4/1/09

3/16

3/16,

3/16
-.2 3
0:26 AM

0:17 AM

51 AM

0:12 AM
Regulatory Users can also view Permits, Users, and partial DMRs by clicking on the hyperlinks
on the home page or gray Search and View tab. Regulatory Users may not approve Signatory
requests and repudiate CORs unless they request to become a Regulatory Administrator.
a Search CORs

Search for CORs using any combination of search criteria. For text and numeric information;
you can enter full or partial criteria. For example, entering a perrnitlD of '2345' would return
TX123451 and TX823451.
Date Range:
Signatory First Name |~"
Signatory Last Name \
Signatory User Name [

Signatory Email [

Facility Name f
Permitted Feature
Number
Discharge Numbe
r
Discharge Description \
Confirmation Number \
Include repudiated
CORs?
Figure 4-2: Search CORs Page
91
-------
NetDMR Regulatory Authority User Guide
May 2011

The following subsections describe the steps for performing Regulatory User tasks.

4.1. Searching CORs
Regulatory Users can search for and view CORs, view a COR's certification statement or public
signature key, and download one or more CORs or the public signature key for a particular COR
by searching on any combination of Permit ID, Signatory Name, Facility Name, Monitoring
Period Start and End Date Range, Signatory Email Address, Permitted Feature Number,
Discharge Number, Discharge Description, Confirmation Number, and CORs that have been
repudiated. To do this:

1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account. The Regulatory User Home page will be displayed.
OR
While logged into NetDMR, click on CORs in the gray Search tab.
2. Enter data into one or more of the fields on the Regulatory User Home page or Search
CORs page using these guidelines:
> Permit ID - Enter all or a portion of the permit ID. For example, entering a permit
ID of 'al' would return 'Alabama'.
> Signatory First Name - Enter all or a portion of the signatory first name. For
example, entering a first name of'jo' would return 'John' and 'Joanne'.
> Signatory Last Name-Enter all or a portion of the signatory first name. For
example, entering a last name of'mi' would return 'Smith' and 'Miller'.
> Facility Name - Enter all or a portion of a facility name. For example, entering a
'co' would return 'Company A and 'ABC Incorporated'.
> Monitoring Period End Date Range - Enter the start and end dates for the
monitoring period end date range using the mm/dd/yyyy format or select the
appropriate start and end dates from a calendar by clicking the calendar icon S
next to each text box.

Clicking Advanced Search in the top right corner of the Search CORs tab will open the
Search CORs page and display the following additional search criteria:

> Signatory User Name-Enter all or a portion of the signatory user name. For
example, entering a last name of'mi' would return 'JaneSmith' and 'John.Miller'.
> Signatory Email - Enter all or a portion of a signatory email address. For example,
entering a last name of'mi' would return 'Jane.Smith@FacilityA.com' and
'John.Miller@FacilityB.com'.
> Permitted Feature Number - Enter all or a portion of a permitted feature number.
For example, entering 'S' would return permitted features 'S' and 'SUM'.
> Discharge Number - Enter all or a portion of a discharge number.
> Discharge Description - Enter all or a portion of a discharge description. For
example, entering a 'storm' would return 'Storm Water' and 'Storm Water Action
Levels'
> Confirmation Number- enter the complete submission confirmation number for the
DMR/COR you wish to view (NetDMR generates a unique confirmation number for
your submission).
92
-------
NetDMR Regulatory Authority User Guide
May 2011
> Include Repudiated CORs? - click to check the box if you would like to include
repudicated CORS that match your search criteria in your search results.
3. Click on Submit | to display the results or Cancel | to return to the Regulatory User
Home page. CORs that match your criteria are displayed on the COR Search Results
page:
. COR Search Results
SlRefine Search ^New Search ^Download Selected
CORs 1 through 2 of 2

Facility Permit ID Monitoring Permitted Discharge Discharge Submitted Signatory Confirmation #
Name Period End Feature Number Description Date
Pate Number
.udiated? View Downlo.
COB
RIVER
STP,
VILLAGE
LEAF IL0029475 09/30/00 INF
RIVER
STP,
VILLAGE
MONITORING
06eblf05-b5e7-

b253b6613fd3
Figure 4-3: COR Search Results Page

4.1.1. Viewing COR Search Results
Up to ten CORs will be displayed by default in the COR Search Results page. If more than 10
CORs are returned, you can navigate through the list by:

> Clicking a page number link to go to a specific page of results.
> Clicking the ^ green forward arrow to display the next page of CORs.
> Clicking the --\ green back arrow to view the previous page of CORs.
> Clicking the l double green forward arrow icon to display the last 10 CORs.
> Clicking the 49 double green back arrow icon to display the first 10 CORs.
> Clicking the View All link to show all CORs in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
CORs at a time.

You can click any underlined column title to sort the CORs in ascending or descending order by
the information in that column.

4.1.2. Refining the COR Search
If there are more CORs returned than you expected, click on ^Refine Search to display a search
page where you can narrow your search using Signatory, discharge, confirmation and repudiated
COR criteria:
93
-------
NetDMR Regulatory Authority User Guide
May 2011
Permit ID
Itn °/a
Monitoring Period End Date Range [

Signatory First Name f

Signatory Last Name

Signatory User Name [

Signatory Email [

Facility Name [

Permitted Feature Number

Discharge Number [

Discharge Description f

Confirmation Number

Include repudiated CORs?
(mm/dd/wyy)
r
Search | Close |
4.1.3. Performing a New COR Search
To view another set of CORs, click on '^New Search to display a Search page and re-enter data
search using Signatory, discharge, confirmation and repudiated COR criteria:
Permit ID
|tn%
Monitoring Period End Date Range f

Signatory First Name f

Signatory Last Name [

Signatory User Name [

Signatory Email

Facility Name [

Permitted Feature Number f

Discharge Number [

Discharge Description

Confirmation Number [

Include repudiated CORs?
/dd/yyyy)
Search | Close |
4.1.4. Downloading a COR
The COR generated by NetDMR when a DMR is signed and submitted is a master COR zip file
that includes the following:

> All of the user-provided data for the DMR.
> The legal certification statement displayed to the user during signing process.
> The public key certification in the form of Hashes of any files that were attached
to the DMR. NetDMR uses FIPS 140-2 to generate all hash values. This is the
current approved FIPS 140-2 certified standard.
> Metadata about any attached files (e.g., name, type, etc.).
94
-------
NetDMR Regulatory Authority User Guide
May 2011

> dmrSubmission.xml - this file contains all of the user entered data for the DMR
submission.
> DischargeMonitoringReport.xsl - this is a stylesheet that will format the
dmrSubmission.xml file to look like the NetDMR DMR View page for easy
viewing when viewed in a web browser.
> submissionReceipt.xml - this file documents when the DMR was submitted, by
whom, and with what electronic hashing algorithm.
TIP
dmrSi
dischargeMonitoringReport. xslfrom a
COR zipped file into the same
directory.
It is easy to view the DMR data is to view the
dmrSubmission.xml file using a web browser such as
Microsoft Internet Explorer or Mozilla Firefox. ^^
When opened in this way, the web browser will , 0 , sure to exfract
automatically format the data based on the stylesheet dmrSubmission.xml and
file dischargeMonitoringReport.xsl. Note that the
web browser will NOT be able to locate the
stylesheet if the user does not first unzip all of the
contents of the zip file into the same directory. The
user may choose to also view the XML data directly in any text editor of their choice.

CORs are downloaded from the View COR Details page. Do this by:
1. Clicking on ^ Download COR
2. You will be prompted to save the CORs as a zipped file:
95
-------
NetDMR Regulatory Authority User Guide
May 2011
Do you want to open 01 save this file?

-.* *| Name: netdmr_cor_zips_123811Q562597.zip

Type: WinZipFile
From: netdmrtest.epacdx.net
Open
Save
While files from the Internet can be useful, some files can potentially
harm your computer If you do not trust the source, do not open or
save this file. What's the risk?
Click on
to save the file to a location you designate, or click on
Cancel
to return to the Search COR Results page.
3. The Windows Save As dialog will appear. Click on the Save In drop down box and
select a location to save the file into, then click on
Save
I to save the file to a
location you designate, or click on I to return to the Search COR Results
page.
4. The Download complete dialog will appear:
Download complete
Download Complete
...cor_zips_1238110562597.zip from netdmrte5t.epacdx.net

Downloaded: 10.3KB in 1 sec
Download to: ...\netdmr_cor_zips_1238110562597,zip,.,
Transfer rate: 10,3KB/Sec

n Close this dialog box when download completes

Open
Open Folder Close
5. Click on
Open
the Folder, or.
Close
to open the zipped COR file, Open Folder I to display the contents of
to return to NetDMR.
96
-------
NetDMR Regulatory Authority User Guide
May 2011

4.1.5. Viewing a COR
A COR can be selected from the CORs Search Results page for viewing. You can view the
COR's certification statement, download the COR, view the COR's signature and download the
COR's public signature key from this page.

Start by clicking on ^ in the row next to the desired COR and the View COR Details page
shown in Figure 4-4 is displayed.
itlwi 1 H DnwnlMd CM t i' W» CM Agutur* I < OnMort COR S.g PvblK «e* I
View COR 1 H'l.jiK
•MM
TXGJJOOIS

CMOT OIL 4 0*8 COM04AT10W

CAAOT OIL fc OU COAWUT]ON

DM - bttnwl CMW

r^m OUVI/M M WJ1/M
Figure 4-4: View COR Details Page

4.1.5.1. Viewing the COR Certification Statement
View the COR's Certification Statement from the View COR Details page by:
1. Clicking on
View Certification
and the COR Certification Statement page will appear:
97
-------
NetDMR Regulatory Authority User Guide
May 2011
CX1K [teilifiti

^
I end OH* Din
ii ji *i »\ 11 JIM i nr
S^n^
(M./TM.

V" ».M COT
J «^«V un&rp«rtito ofk* tfwt tfvi iwftmuswn MM prep&rt under mv dfKQon cv (Lwrvifw w accordance wrtfi a ( yi »m deiiprwd to
H*u«M4M«iAMMMitfpHwftdi^Mtf«w
mwy^ jVw«Kti»i«, or^#dw(Vwwemi&to^^f^»^ i^ a»lA»Jw*f
£#Wj trut, *XW»», 4ttf OOnyMM. /*m *w«W « All of the user-provided data for the DMR.
> The legal certification statement displayed to the user during signing process.
> The public key certification in the form of Hashes of any files that were attached
to the DMR. NetDMR uses FIPS 140-2 to generate all hash values. This is the
current approved FIPS 140-2 certified standard.
> Metadata about any attached files (e.g., name, type, etc.).
> A submission receipt, which includes the following:
• The DMR submission confirmation number
• The hash of the data document
• The date and time of the DMR submission
• Identifying information from the signing account, including: the user's full
name, account login, email address, and hashed password (at time of
signing), and IP address of the submitting computer.

It is easy to view the DMR data is to view the dmrSubmission.xml file using a web browser such
as Microsoft Internet Explorer or Mozilla Firefox. When opened in this way, the web browser
98
-------
NetDMR Regulatory Authority User Guide
May 2011
will automatically format the data based on the
stylesheet file dischargeMonitoringReport.xsl.
Note that the web browser will NOT be able to
locate the stylesheet if the user does not first
unzip all of the contents of the zip file into the
same directory. The user may choose to also
view the XML data directly in any text editor of
their choice.
Be sure to extract
dmrSubmission.xml and
dischargeMonitoringReport. xslfrom a
COR zipped file into the same
directory.
Any attachments that were uploaded for the DMR prior to signing will also be included in the
COR files. These files have the names supplied by the person who uploaded them and can be in
almost any format. NetDMR will not convert these files so it is up to the user to figure out how
best to work with these files.

CORs are downloaded from the View COR Details page. Do this by:
1. Clicking on ^ Download COR
2. You will be prompted to save the CORs as a zipped file:
Do you want to open or save this file?

"Jl ^1 Name: netdmr_cor_zips_i23Sii056259;
Type: WinZipFile
From: netdmrte5t.epacdx.net
Open
Save
While files from the Internet can be useful, some files can potentially
harm your computer. If you do not trust the source, do not open or
save this file. What's the risk?
Click on
Save
to save the file to a location you designate, or click on
Cancel
to return to the Search COR Results page.
3. The Windows Save As dialog will appear. Click on the Save In drop down box and
select a location to save the file into, then click on
location you designate, or click on
page.
Save
to save the file to a
Cancel
to return to the Search COR Results
is type: |wirZipFile
99
-------
NetDMR Regulatory Authority User Guide
May 2011
4. The Download complete dialog will appear:
Download complete
Download Complete
...cor_zips_1238110562597.zip from netdmrte5t.epacdx.net

Downloaded: 10.3KB in 1 sec
Download to: ...\netdmr_cor_zips_1238110562597.zip,.,
Transfer rate: 10,3KB/Sec
l~~ Close this dialog box when download completes
Open Open Folder
Close
5. Click on
Open
the Folder, or.
Close
to open the zipped COR file, Open Fc I to display the contents of
to return to NetDMR.
4.1.5.3. Viewing the COR Signature
View the COR's Signature from the View COR Details page by:

1. Clicking onfi*view COR Signature and the CQR Signature page will appear:
£' COR Signature

3940ede536cdd62707decObd95a94a68932363eeefdl063b6ca2633522902dfdfd9b98d5ad32ac970d6718bObd6cblcd8096701a7aal69642efdd6a49d50e5eae33l

Back
2. Click on Bacl< to return to the COR Signature page.

4.1.5.4. Downloading the COR Public Signature Key
NetDMR uses asymmetric key cryptography for the digital signatures applied to CORs, This
type of cryptography includes both a public key and a private key. NetDMR digitally encrypts
and signs the COR with the private key, and decrypts the COR with the public key.

Download the COR's Public Signature Key from the View COR page by:

1 Clicking on ^ Download COR Sig. Public Key
2. You will be prompted to save the Signature Key as a zipped file:
100
-------
NetDMR Regulatory Authority User Guide
May 2011
E
File Download
Do you want to open or save this file?

Name: publicKey.txt
Type: Text Document 326 bytes
From: netdmrtst.tceq. state, tx. us

Open I S
While files from the Internet can be useful some files can potentially
harm your computer. If you do not trust the source, do not open or
save this file. What's the risk?
Click on
Save
to save the file to a location you designate, or click on
Cancel
to return to the Search COR Results page.
3. The Windows Save As dialog will appear. Click on the Save In drop down box and
select a location to save the file into, then click on
location you designate, or click on
page.
Save
to save the file to a
Cancel
to return to the Search COR Results
Save in: | _J Oulbound lo DM WG
3 O
Save as type: |Text Doc
4. The Download complete dialog will appear.
Download Complete
publicKey.txt from netdmrtestepacdx.net
••••••••••••••••••••••••••••••••••••••••••I
Downloaded: 326 bytes in 1 sec
Download to: C:\0utbound to DM WG\publicKey.txt
Transfer rate: 326 bytes/Sec
l~~ Close this dialog box when download completes
Open
Open Folder
Close
5. Click on
the Folder, or.
to open the zipped COR file,
L:lQse J to return to NetDMR.
I to display the contents of
101
-------
NetDMR Regulatory Authority User Guide
May 2011
4.1.5.5. Returning to the COR Search Results Page
Return to the COR Search Results page by clicking on SL COR search Results

4.2. Search and View Permits
Regulatory Users can view all Users having access to one permit along with their roles and
Subscriber Agreements by using the Search Permit ID page shown in Figure 4-5.
Figure 4-5: Search Permt ID Page

The steps for searching permits for user access information are:

1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account.
2. Click on Permits in the Search tab.
3. Enter the complete ID for the permit and click on Search I
4. If the permit ID is not complete or the permit could not be found in NetDMR an error
message appears:
There were errors processing your request.
Repeat Step 3 using a valid Permit ID.
5. The View Permit Details page will appear, allowing you to view information on Users
having access to the permit.
102
-------
NetDMR Regulatory Authority User Guide
May 2011
Q. View Permit Details

Permit ID
Facility Name
Permittee Address

Users and Rales

Showing 8 of 8 Users/Role? .
User Name
ILQ029424

LASALLE STP, CITY OF
Role Status View Subscriber Agreement
6. Click on & to display the View User Account page:
Q. View User Account Details

General Account Information

First Name
Last Name
User Name
Email
Telephone Number
Organization El
User Type Ir

Selected Security Questions

What is your favorite city'

What is your mother's maiden name?
What is the name of the high school you attended?
202-564-5013
Partial Access Permits and Roles
Showing 5 of 5 Roles ,
Permit ID Permitted Feature ID LJmit Set Designator Monitoring Period End Date Role
ILOQ29424 A01
ILOQ29424 INF
S/31/03
9/30/08
103
-------
NetDMR Regulatory Authority User Guide
May 2011

7. Click on DMR Data I to open a dialog window containing the Permitted Feature ID,
Limit Set Designator and Monitoring Period End Date for the Permit's User:
Microsoft Internet Explorer
DMR Information
Permit ID = 110029424
Permitted Feature ID = 007
Limit S et D e signator = 0
Monitoring Period End Date = 8/31/08
OK
Click on
OK
to close the dialog window
8.
and return to the User Search Results page.
Click on G to view the Subscriber Agreement for
the Signatory Users.
4.3. Search and View Users
Regulatory Users can view all permits one User has access
to along with that User's roles and Subscriber Agreements
for each permit by using the Search Users page shown in Figure 4-6.
The electronic version of a
Subscriber Agreement is not a
substitute for the original, signed
Subscriber Agreement mailed in
by a Signatory.
Search USCFG
User First Name

IkiTl dV.I Numi'

User Name

I rn.nl

Permit ID

Futility Ndinr

Figure 4-6: Search Users Page

The steps for searching for user access information are:

1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account.
2. Click on Users in the Search tab.
3. Enter full or partial data into one or more of the fields and click on Search I.
4. If no users could be found in NetDMR an error message appears:
104
-------
NetDMR Regulatory Authority User Guide
May 2011
There were errors processing your request.
Repeat Step 3 using valid data for the desired User(s).
5. The View User Details page will appear, allowing you to view information on User
access for one or more permits:
r Search Results
Users 1-10 of 24 « « 1, 2, 3> » Qlview All
First Last User Name Facility
LASALLE 3TP, CITY OF
SlRefine Search ^New Search
Permit ID User Type Access Rights Email
11.0029424 Irrte
LCC ILLINOIS, LLC-MIN1

USSALLE STP, CITY OF
tonasrinayahoo.com LCC ILLINOIS., LLC-MINT #2e, IL000007S Ext
6. Click on A to display the View User Account page:
q. View User Account Details

General Account Information

First Name

Last Name

User Name

Telephone Number

Organization

User Type
202-564-5013
105
-------
NetDMR Regulatory Authority User Guide
May 2011
Selected Security Questions

What is your favorite city'

What is your favorite color?

What is your mother's maiden name?

What is the name of the high school you attendei

Roles
Showing 2 of 2 Roles ,
Permit ID Facility Name Access Rights Access Status
Partial Access Permits and Roles
Showing 5 of 5 Roles ,
Permit ID Permitted Feature ID Lin

.002942 A01 0
late Role Role Request Status

I DMR Appi
7. Click on I DMR Data I to open a dialog window containing the Permitted Feature ID,
Limit Set Designator and Monitoring Period End Date that the user has access to.
Microsoft Internet Explorer
DMR Information
Permit ID = 110029424
Permitted Feature ID = 007
Limit S et D e signator = 0
Monitoring Period End Date = 8/31/08
OK
to close the dialog window and return to the User Search Results
Click on
page.
Click on G to view the Subscriber Agreement for Signatory Users. Note that the
Agreement that you see will differ from the same document signed by the Signatory if
you changed any of your Subscriber Agreement contact information for your Instance
recently. Because this electronic document may slightly differ from the original and is
The electronic version of a Subscriber Agreement is not a substitute for the
original, signed Subscriber Agreement mailed in by a Signatory.
g the Signatory's signature it cannot be used as a substitute for the original.

4.4. Requesting Partial DMR and Regulatory Administrator Access
Regulatory Users may request access to view an in-progress DMR in order to assist a permittee
having difficulty in completing it. In addition, Regulatory Users may request to be upgraded to a
Regulatory Administrator. The Internal User Access Request page (Figure 4-7) is used for
106
-------
NetDMR Regulatory Authority User Guide
May 2011
requesting this access, and a Permit Administrator for the Instance where the DMR resides is
responsible for approving or denying the request.
cf Request Internal Admin Privileges

Request Internal Admin Privilege: [~ Yes

d Request Access to Partial DMRs
PermitID:

Permitted Feature:

Limit Set:

Monitoring Period End
Date:

rf Access Requests
[Select Qm

[Select Om

(Select Oni
Update |

Permitted Feal
Submit I

Figure 4-7: Internal User Access Page
4.4.1. Regulatory Administrators Access Requests
The steps for requesting access to become a Regulatory Administrator are:

1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account.
2. Click on Request Access in the Search tab.
3. Click on l~~ next to Request Internal Admin Privilege field to place a checkmark in the
, Request Internal Admin Privilege: p Yes

4. Click on Subnmt I to submit the request.
5. The Confirm Access Request page will appear. Click on Confirm I to proceed with the
request, or click on ^^^^1 to cancel the request and return to the Internal User Access
page.
6. A message will appear notifying you that your access request has been submitted:
Your access request(s) have been submitted for approval.
7. A Regulatory Administrator will approve or deny your request. If your request is
approved, you will receive an e-mail stating:
The following actions have been taken for your access requests.

Role Id: Internal Admin
107
-------
NetDMR Regulatory Authority User Guide
May 2011
Status: Approved
Comment: Release 3 testing. Internal Admin access,
Thank you.
Otherwise, the Regulatory Administrators will deny your request and you will receive an e-mail
with a reason why the request was denied.

4.4.2. Partial DMR Access Request
To request access for viewing a DMR in progress:

1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account.
2. Click on Request Access in the Search tab.
3. In the Request Access to Partial DMRs section, enter the Permit ID you would like to
access.
4. Click on I uPda1:e I to check to see if the permit exists in NetDMR.
If an invalid permit ID is entered or the permit does not exist in NetDMR an error
message will appear:
There were errors processing your request.
Repeat Steps 3 and 4 using a valid permit ID.
Otherwise, NetDMR prompts you for a Permitted Feature. Click in the box next to
Permitted Feature, then click on a Permitted Feature Number to select it.
Click on I uPdate I to check to see if there are Limit Sets in NetDMR for the Permitted
Feature.
Click in the box next to Limit Set, then click on a Limit Set Number to select it.
9. Click on I uPdat:e I to check to see if there are Monitoring Period End Dates for any
partial DMRs in NetDMR for the Permitted Feature.
10. Click in the box next to Monitoring Period End Date, then click on an End Date to
select it.
11. Click on Add Access Request |
12. A new row will appear in the Summary of Access Requests table containing the selected
Permit ID, Permitted Feature, Limit Set and Monitoring Period End Date:
Permit ID
IL0029424
IL0029424
Permitted Feature ID Limit Set Designator
001
003
1
0
Monitoring Period End Date Remove Access
Request
3/31/08
9/30/08
n
•
13. Repeat Steps 3 - 11 to add each Partial DMR desired.
14. Click on & within a row to remove that partial DMR request from the table.
15. The Confirm Access Request page will appear. Click on Confirm | to submit the
access request, or click on Can I to return to the Internal User Access page.
16. A message will appear notifying you your request was submitted:
108
-------
NetDMR Regulatory Authority User Guide
May 2011
Your access request(s) have been submitted for approval.
A Permit Administrator in charge of the DMR must approve or deny your request. When your
request has been approved or denied, you will receive an email notifying you. If your request
was denied the reason for denying it will be included in the email.

4.4.3. View Partial DMRs
Once you have approval from a Permit Administrator for your partial DMR request, you can
view it using the Partial DMRs page shown in Figure 4-8.

Figure 4-8: Partial DMRs Page
To display this page:
1. Login to your NetDMR Regulatory User account.
2. Click on DMRs under the View menu.
3. The Partial DMRs page displays the following for each DMR that you have been
granted access to:
> Permit ID
> Permitted Feature
> Discharge Number
> Monitoring Period End Data
> View DMR
4. Click on to open the desired DMR to display it and be able to talk the
Permittee through any steps necessary to fill it out correctly. Note that the DMR
displayed will let you enter data into the fields but there are no buttons allowing
you to save this data - only Permittees or Data Providers can edit DMRs.
109
-------
NetDMR Regulatory Authority User Guide
May 2011
Appendix A. Subscriber Agreement
In order to submit DMRs to ICIS using NetDMR, a
Permittee must print off the Subscriber Agreement
form generated by NetDMR at the time they
request a Signatory role for one or more permits,
sign the Subscriber Agreement in ink, and mail it to
your Agency. You should never approve a
Signatory request before you have the requestor's
signed Subscriber Agreement.
Signatories should not be
approved until your Agency has
received the Subscriber Agreement.
There may be times when you have a change in your Agency's mailing address or the person
who should receive Subscriber Agreements at your Agency is reassigned. The System
Administrator can make these changes to your Instance so future Subscriber Agreements will
display the new mailing information for new Signatory requests in your Instance.

If one of your Signatories changes their name they will need to change their name in NetDMR
and print off a new Subscriber Agreement with their new name displayed, then sign and mail it
into your Agency.
NetDMR Subscriber Agreement Instructions Page
This form can be used for permits issued by: «insert name ofAgency»
Purpose
The NetDMR Subscriber Agreement should be used by Clean Water Act National Pollutant Discharge
Elimination System (NPDES) permit holders that would like to apply to submit Discharge Monitoring
Reports (DMRs) electronically, or change/update your reporting status information from a previously-
submitted application. Submission of DMRs electronically is an alternative to using paper forms to fulfill
the reporting requirements of the CWA NPDES program pursuant to 40 CFR 122.41(1)(4).

Basic Information on Who Should Fill Out the Subscriber Agreement

* To request use of electronic reporting for DMR information, the person that is authorized to sign
discharge monitoring reports (DMRs) as described in 40CFR 122.22 (a) must sign this document as
the Signatory Authority in Section E of this document.
• If the Signatory Authority (named in Section E) plans to electronically sign DMRs submitted through
NetDMR, then this person will also sign as the Subscriber (named in Section F).
• If the Signatory Authority plans to have someone else sign and submit the electronic DMRs, then this
individual must be a duly authorized represented as described in 40CFR 122.22(b) and the duly
authorized representative must sign as the Subscriber (see Section F).
• If a Signatory Authority has more than one NPDES permit for which they are responsible, and the
regulatory authority allows multiple permits on a single Subscriber Agreement, then this document
allows the signatory authority to list multiple permits on a single Subscriber Agreement as long as the
Subscriber is the same person for all the multiple permits listed.
110
-------
NetDMR Regulatory Authority User Guide
May 2011

• If the authority to electronically sign for a permit is to be delegated to multiple Subscribers, then each
Subscriber needs to submit and sign a separate Subscriber Agreement.
• This Subscriber Agreement cannot be used to register multiple permits that are issued by different
regulatory authorities.

Where to Submit

Print and mail the completed subscriber agreement below to your Clean Water Act permitting authority
for their review at the address below. You should retain a hard copy.
«insert regulatory authority mailing address»

Questions?

For help or questions please contact the «Regulatory Name» at «phone» or «email>^
You will receive a confirmation email from «insert email address of NetDMR» when your application
has been processed and approved. Thank you for helping us reduce paper use by choosing to
electronically submit your DMRs.
Key to Color Coding in this Document (this is not part of the subscriber agreement, but is to help
permitting authorities understand how the form is populated):

Green: Entered by the user during the account creation process
Red: Selected or entered by the user during the signatory request process
Pink: Entered by a System Administrator as part of the instance creation and customization process.
: Data retrieved from the basic permit data flow
Black text: Static text included in the subscriber agreement.
Purple: To be completed manually after subscriber agreement is printed
111
-------
NetDMR Regulatory Authority User Guide
May 2011

Agency: «insert name ofAgency»
Subscriber Agreement Number: « Auto Generated 36 digit Hexadecimal number »
Generated On: «Auto generated date»
Account Reference: « user account number»
A. Subscriber Information

The Subscriber is the individual that intends to sign DMRs and signs this subscriber agreement in Section
F.
User Name
Subscriber Name:
Organization:
Email Address:
Phone Number:

B. Permit Information
Signing privileges are requested for the following permit(s):
Permit ID
TX0002440
TX0000014
Facility
Name
ABC Steel
AAA Waste
Facility Address
123 County Road
Steelville, TX 34000
123 North Road
Steelville TX 34500
Relationship
The Facility
Parent
Company
Authorized By
Self
Jane Doe
This request is (check one):

NEW: the first request by this facility to use NetDMR reporting.

Q REQUEST FOR REACTIVATION: a re-activation of NetDMR reporting for a facility that had
discontinued using NetDMR

Q CONTINUATION WITH NEW AUTHORIZATION: an updated subscriber agreement
submitted because the signatory authority and/or subscriber at the facility has changed

RENEWAL: an updated form submitted when a permit application is submitted
Permit ID(s):
INACTIVATION: Explain reason for inactivation in the box below and identify whether the
inactivation is temporary or permanent
Permit ID(s):
Notes to Permitting Authority (Optional unless Inactivating):
112
-------
NetDMR Regulatory Authority User Guide
May 2011
C. Terms and Conditions
• PURPOSE: The intent of this agreement is to create legally binding obligations upon the parties
using the specified data transmission protocols and the NetDMR Reporting System, to ensure that
the Certifier (in this document, "Certifier" refers to signers of this document ~ both the Signatory
Authority, and the Subscriber) agrees to: (i) Maintain the confidentiality and protect the electronic
signature from unauthorized use or compromise, and follow any procedures specified by the
Regulatory Authority for this purpose; (ii) Be held as legally bound, obligated, or responsible by
use of the assigned electronic signature as by hand-written signature.
• VALIDITY AND ENFORCEABILITY: This Agreement has been executed by the parties to
evidence their mutual intent to follow Regulatory Authority procedures to create binding
regulatory reporting documents using electronic transmission and receipt of such records,
consistent with the provisions of 40 C.F.R. Part 3. Acceptance and execution of this agreement
by the Regulatory Authority shall be evidenced by the issuance of a personal identification
number (PIN) to the Certifier. Consistent with 40 C.F.R. Part 3 electronic signatures under this
agreement shall have the same force and effect as a written signature. Pen and ink signatures will
remain on file with the Regulatory Authority.
• RECEIPT: A Document shall be deemed to have been received by the Regulatory Authority
when it is accessible by the Regulatory Authority, can be fully processed and is syntactically
correct to the specified electronic transfer protocol that may be modified from time to time by the
Regulatory Authority. No Document shall satisfy any reporting requirement or be of any legal
effect until it is received.
3.1 COMPLIANCE TRACKING: The Certifier understands that upon activation of the
NetDMR account, EPA's database will be expecting to receive electronic transmission of DMR
data at the interval specified in the permit. If the database does not receive the DMR from the
Certifier at the expected time, the database will flag the DMR as being in non-receipt. If the
Certifier chooses to discontinue using NetDMR and return to using paper forms, the Certifier
must complete, sign, and submit to the regulatory authority a new subscriber agreement with
the "Inactivation" check box selected. If the regulatory authority does not receive this form, it
is likely that the system will continue to produce "non-receipt" flags (indicating reporting
violations).
• VERIFICATION: Upon receipt of a Document, NetDMR shall process the Document to make it
accessible to the Regulatory Authority and the Certifier. The Certifier is responsible for the
content of each transmission, in accordance with the associated certification statement, and for
reviewing the accuracy of the processed document in accordance with the associated certification
statement, and for reviewing the accuracy of the processed document information and as made
available by the NetDMR system.
• SIGNATURE: The Certifier shall adopt as its electronic signature any Personal Identification
Number (PIN) assigned by the Regulatory Authority following acceptance of this Agreement.
The Certifier agrees that any such Signature affixed to or associated with any transmitted
Document shall be sufficient to verify such party originated and possessed the requisite authority
both to originate the transaction and to verify the accuracy of the content, in the format of the
specified NetDMR transmission protocol or otherwise, at the time of transmittal. The Certifier
also expressly agrees that each report it submits by using its PIN constitutes their agreement with
the associated certification statement.
• SECURITY: The parties shall take reasonable actions to implement and maintain security
procedures necessary to ensure the protection of transmissions against the risk of unauthorized
access, alteration, loss or destruction including, but not limited to: protecting the secrecy of
passwords and electronic signatures and transmitting only files in an acceptable protocol.
• USE OF PIN: Each Certifier shall be either the permittee or a person identified by the permittee
as a representative authorized for signatory purposes by the permittee for each facility, person, or
113
-------
NetDMR Regulatory Authority User Guide
May 2011

other entity for which information is being reported. If a PIN has been compromised or where
there is evidence of potential compromise, it will be automatically or manually suspended. In
addition, the Regulatory Authority will inactivate or revoke a PIN where the Certifier is no longer
an authorized representative. Each Certifier expressly agrees that the Regulatory Authority may
act immediately and unilaterally in any decision to suspend, inactivate, revoke, or otherwise
disallow use of a PIN by any Certifier, where the Regulatory Authority believes that such action
is necessary to ensure the authenticity, integrity or general security of transmissions or records, or
where there are any actual or apparent violations of this agreement.
INABILITY TO TRANSMIT OR FILE REPORTS ELECTRONICALLY: No party shall be
liable for any failure to perform its obligations in connection with any Electronic Transaction or
any Electronic Document, where such failure results from any act or cause beyond such party's
control which prevents such party from electronically transmitting or receiving any Documents,
except that the Certifier is nonetheless required to submit records or information required by law
via other means, as provided by applicable law and with the time period provided by such law.
CONTINUATION OF OPERATIONS: In the event that electronic submission of DMR data is
not possible, it is the responsibility of the certifier to submit paper copies in accordance with the
requirements of the authorizing permit. Failure to submit DMR data by the date required by the
permit is a violation and will be recorded as such.
SEVERABILITY: Any provision of the Agreement which is determined to be invalid or
unenforceable will be ineffective to the extent of such determination without invalidating the
remaining provisions of this Agreement or affecting the validity or enforceability of such
remaining provisions.
TERMINATION AND RENEWAL: The agreement may be terminated by either party. Upon
termination of this agreement, the associated ability to submit electronic information through
NetDMR will also terminate. This subscriber agreement becomes effective upon notification of
approval by the Regulatory Authority to the Certifier (which may be either/or an automated
message from the NetDMR software, or separate notification). The regulatory authority will
normally provide notification of the effective date, but if no date is provided, the effective date is
the next reporting cycle following the notification. The subscriber agreement will continue until
modified by mutual consent or unless terminated with 60 days written notice by any party. The
permittee must resubmit this form at the time that a new permit application is submitted or when
permit responsibility transfers from one entity to another. This subscriber agreement should be
periodically reviewed and amended or revised when required. The requirements of this subscriber
agreement may, eventually, be incorporated into the NPDES permit so that they would be
renewed at the time of each discharge permit reissuance. The regulatory authority reserves the
right to approve or disapprove this subscriber agreement.
GOVERNING LAW: This Agreement shall be governed by and interpreted in accordance with
40 CFR 122, 40 CFR 3, and other applicable state provisions.
AGREEMENT:
4.5.1 agree:
• To protect my account and password from compromise, not allow anyone else to
use my account, and not share my password with any other person;
• To change my password if I believe it becomes known to any other person;
• To promptly report to Regulatory Authority any evidence of the loss, theft, or
other compromise of my account or password not later than one business day;
• To notify Regulatory Authority, in writing, if I terminate my employment, am
reassigned or any other change in my status that causes me to cease to be a
certifier represent any of the requested sites for the organization's electronic
reports to NetDMR. Notification should occur as soon as this change occurs.
• To review, in a timely manner, the email and onscreen acknowledgements and
copies of documents submitted through my account to NetDMR;

114
-------
NetDMR Regulatory Authority User Guide
May 2011

• To report any evidence of discrepancy between the document submitted, and
what NetDMR received;
• That in no event will Regulatory Authority be liable to me or my employer for
any special, consequential, indirect or similar damages, including any lost profits
or lost data arising out of the use or inability to use the software or of any data
supplied therewith even if Regulatory Authority or anyone else has been advised
of the possibility of such damages, or for any claim by any other party.
Regulatory Authority disclaims all warranties, express or implied, including but
not limited to implied warranties of merchantability and fitness for a particular
purpose, with respect to the software and the accompanying written materials

«add state conditions here»

I understand that I will be held as legally bound, obligated, and responsible by the electronic
signature created as by a handwritten signature.

D. Inactivation/Removal

Permittee must indicate reason for inactivation in Section B of the form. This is done to inform the
regulatory authority whether the permittee is switching back to paper DMRs, is no longer in business, or
has a temporary reason for inactivation.

E. Signatory Authorization

The signatory authority is the appropriate individual identified under 40 CFR 122.22 with the authority to
sign permit applications, reports, and other permit-required submittals (e.g., DMRs).

Permit ID(s): TXOOOOO14
I, Jane Doe, have the authority to enter into this Agreement for aste and Permit ID TXOOOOO 14
under the applicable standards. I request Regulatory Authority grant John Smith the ability to submit
DMRs for Permit ID TXOOOOO 14.

President
Signatory Authority Signature Title Date

F. Subscriber Signature

The subscriber is the NetDMR user that submits this agreement to request to electronically sign DMRs.
The subscriber is given signatory authority to sign reports and other information (e.g. DMRs) either under
40 CFR 122.22(a) or is delegated signatory authority by the individual(s) identified as the signatory
authority in Section E of this agreement [See 40 CFR 122.22(b)].

Permit ID: TX0002440
I, John Smith, have the authority to enter into this Agreement for ABC Steel and Permit ID TX0002440
under the applicable standards.

Permit ID: TXOOOOO 14
I, John Smith, am authorized by the signatory authority named in Part E of this document, who does have
the authority under the applicable standards, to enter into this agreement for AAA Waste and Permit ID
TXOOOOO 14.
115
-------
NetDMR Regulatory Authority User Guide
May 2011

By submitting this application to Regulatory Authority I, John Smith, have read, understand, and accept
the terms and conditions of this subscriber agreement. I certify under penalty of law that I have personally
examined and am familiar with the information submitted in this application and all attachments and that,
based on my inquiry of those persons immediately responsible for obtaining the information contained in
the application, I believe that the information is true, accurate and complete. I am aware that there are
significant penalties for submitting false information, including the possibility of fine and imprisonment.
Subscriber Signature Date

Print this form, save a copy for your records, and mail to: «insert regulatory authority mailing address>:

Checklist - Permitting Authority Use Only:
Check

Form Received by
Verified ICIS-NPDES Permit Limits
Regulatory Authority Approves NetDMR
Authorization
ICIS-NPDES NetDMR Flag Populated
User Approved in NetDMR Application
Notification to User
Inactivated?
Name

Date

116
-------
NetDMR Regulatory Authority User Guide
May 2011

Appendix B. Fraud Analysis

Administrators will periodically review the results of the fraud analysis and the login logs
to determine if an account has been compromised. If it is determined that a compromise
has occurred, the affected account will need to be locked, preventing the user from
signing eDMRs, and the user will be contacted to address the situation.

NetDMR includes functions that allow NetDMR Administrators to detect the possibility
that a user's device has been compromised:

1. Each time a user logs in to NetDMR, the IP and date/time of the login is
stored. Inconsistencies in the logins, such as different IP addresses may indicate a
compromised password.
2. NetDMR will only allow a user to maintain a single concurrent NetDMR
session. If the user is already logged in, the previous login will be invalidated. If
overlapping login attempts are frequently made, it may indicate a compromised
password.
3. NetDMR will include fraud analysis functionality, in which the logs are
periodically analyzed for irregularities. Irregularities will be flagged for NetDMR
Administrators to investigate and take further action, if appropriate. The
irregularities NetDMR will flag are:
a. Inconsistencies in the logins, such as use of multiple IP addresses.
b. Frequent overlapping login attempts from different IP addresses.
c. Irregular submission patterns. An example of an irregular pattern
would be a user who has submitted a single DMR every month for the past
6 months, but then submits 50 in one month.

NetDMR includes functions that allow NetDMR users to detect the possibility that their
account has been compromised:
1. After each DMR is submitted the submitter is sent an email
acknowledging the submission.
2. After logging in to NetDMR, a list of the user's previous logins is
displayed, including the date/time of the login and whether or not a submission
was made during that session.
If it is determined that a compromise has occurred, the user is required to lock their
account and notify the Regulatory Authority.
117
-------
NetDMR Regulatory Authority User Guide
May 2011

Appendix C. Validating CORs with Digital Signatures

NetDMR digitally signs the copy of record for a DMR using a public key encryption
process. The purpose of the digital signature is to provide assurances that the COR was
submitted through NetDMR.

Public key encryption can be described as using a locked mailbox with a mail slot. The
mail slot is exposed and accessible to the public. Its location or street address is in
essence the public key. Anyone knowing the street address can go to the mailbox and
drop a written message through the mail slot. However, only the person who possesses
the key can open the mailbox and read the message.

The National Installation of NetDMR has its own public/private asymmetric key pair
used for digital signatures. The public portion of the key pair is what you see when you
click on the 'Download COR Sig. Public Key' hyperlink on the Edit COR page. The
private part of the key pair is stored in the NetDMR database only accessible to the
NetDMR System Administrators. The Public/Private Key pair is associated with a
signing certificate, so the pair being used by the NetDMR Application will change
whenever a signing certificate is changed by a System Administrator.

When one or more DMRs are submitted to ICIS-NPDES, a submission receipt is created
for each resulting COR. The submission receipt is an XML document where the XML
tags provide semantic meaning to the data. The receipt includes:

1. Confirmation Number - a unique confirmation number is generated based on
the user account information, IP of user, and current system date. The
confirmation number is unique to the submission. If multiple DMRs are submitted
by the user at the same time, each DMR within the submission will have the same
confirmation number.
2. The hash of the data document - a string created by running the data document
through an algorithm. This algorithm will only produce the same string multiple
times if all the data in the document is exactly the same each time, thus a simple
comparison of the two strings can prove if the data in the document has changed.
3. Date/Time of the submission
4. Identifying information from the signing account, including:
a. Full Name of the submitting party
b. Account ID of the submitting party
c. Email Address of the submitting party
d. Hashed Password (at time of signing)
5. IP address of the submitting computer.

Digital signatures can be verified by generating the hash value of the COR and
comparing it to the hash retrieved by applying the NetDMR public key to the digital
signature. NetDMR will compare the hashed form of the user-supplied password
(appended with the user salt) and the hashed form of the answer to the secret question
provided during the signing process to the hashed form of the user's password and the
hashed form of the user's response to the secret question stored in the database.

118
-------
NetDMR Regulatory Authority User Guide
May 2011

A user can be traced back to a COR Submission in two ways. First, the installation from
which the submission originated can be tracked through the COR Signature Public Key
which is specific to each installation. Second, the NetDMR Database uses links between
tables to track users and their DMR submissions. These links are used to show which
user submitted a COR as well as for Suspect Analysis upon which a User has submitted
an unusually high number of CORs within a period that triggers a flag for further
analysis. This number is calculated using a statistical formula regarding monthly
submissions.

The three primary COR alteration scenarios the signature process is designed to protect
against are detailed below, along with the processes NetDMR will use to mitigate the
risk.

Signatory Falsification Scenario
Description: A signatory claims that NetDMR does not contain the actual submitted
data by providing an alternate COR and digital signature. The steps to replicate this
use case include:
1. The signatory submits a document to NetDMR and receives a copy of the
COR.
2. The signatory alters the COR and recalculates the hash value.
3. The signatory claims the COR in NetDMR does not represent that actual
submitted data and provides the modified COR and hash value as proof.

Mitigation: This use case is mitigated as follows:
It is computationally infeasible for the user to forge the digital signature
without the private key.
The NetDMR private key will be protected from unauthorized access by
storing it in a secure location on the NetDMR server. Physical access to the server
will be restricted to NetDMR System Administrators only.
A NetDMR administrator is required to specify which key pair on the
server NetDMR will use for digital signatures. NetDMR will log any changes
made to the key/pair used by NetDMR for signing CORs.

These strategies protect NetDMR from unauthorized users attempting to swap a
secure key pair with a compromised one. Such a change would require access to both
the physical server and either the database or Administrator access rights to the
NetDMR.

Regulatory Authority Staff Falsification Scenario
Description: A Regulatory Authority staff member alters the COR in NetDMR
without the signatory's knowledge. A possible scenario includes an attempt to alter a
Signatory's submission from being compliant to non-compliant.

Mitigation: This use case is mitigated through the following measures:
Alterations would require access to the NetDMR database. The staff
member would also need a detailed understanding of the data model to make all
119
-------
NetDMR Regulatory Authority User Guide
May 2011

the necessary alterations to the COR, regenerate the hashes, and modify the
various logs.
The staff member would require access to the NetDMR private key in
order to generate a new signature. The key pair can only be registered for use with
NetDMR through direct access to the NetDMR server. Physical access to the
server will be restricted to NetDMR System Administrators only. Additionally, a
NetDMR Administrator must configure NetDMR to use the registered key pair.
NetDMR allows Administrators to specify one or more email addresses
that are copied on all submission acknowledgement emails. The submission
acknowledgement email contains the signature of the COR. The staff member
would have to alter the signature contained in the original email sent to these
addresses to avoid detection of the change.
The NetDMR database will be periodically backed up. The staff member
would need to alter the backups to reflect the changed data.
If the internal user was able to circumvent the numerous protections, the
signatory would still have a valid COR signature. As described in Case A, it is
computationally infeasible for the Signatory to create a valid NetDMR signature
without the private key. The fact that the Signatory has a valid signature would
provide strong evidence that the data in NetDMR had been altered.

To alter the submission without detection the staff member (or members) would
require access to the database, the NetDMR server, tape backups, and the email
system. The staff member would also need enough detailed knowledge of NetDMR to
make all the necessary modifications within the database. It is extremely unlikely a
single staff member, or even a couple staff members, would have the access and
knowledge required to make all necessary changes to prevent detection. Additionally,
the dual protection in place for registering and configuring the NetDMR
public/private key makes it difficult for a single user to substitute a new key pair.

Third Party Modification Scenario
Description: A third party alters the COR in NetDMR without the knowledge of the
Regulatory Authority or signatory. A possible scenario includes a group attempting to
alter a submission from being compliant to non-compliant in an attempt to cause
enforcement actions against a facility.

Mitigation: Without the cooperation of the signatory or an internal staff member, all
mitigation strategies applied to Case A and Case B would apply to this use case. In
addition, the malicious user would need to gain access to the network on which
NetDMR is installed.
120
-------
NetDMR Regulatory Authority User Guide
May 2011

Appendix D. Agency Maps

When a new NetDMR Instance is created a list of all permits that are administered by the
regulating agency need to be retrieved from ICIS and stored within the Instance. To do this, one
or more "Agency Mappings" must be provided by the State, Tribe or EPA Region to the
NetDMR System Administrator.

An Agency Map is a combination of a two character NPDES permit prefix that matches a State
or Tribal code in ICIS and a NetDMR Agency Type Code that corresponds to an Issuing
Organization Type assigned to permits within ICIS.

For example:

• A new Instance needs to be created for the State of Alabama to contain permits
administered by the state. There is only one Agency Map of "AL-ST6"
• A new Instance needs to be created for the Commonwealth of Massachusetts to contain
permits administered by the state and its contractor. There are two Agency Maps of
"MA-ST6" and "MA-SC6.
• A new Instance needs to be created for the St. Regis tribe to contain permits administered
by the tribe. There is only one Agency Map of "SR-TR6"
• A new Instance needs to be created for EPA Region 6 to contain permits administered by
the Region. There are four Agency Maps of "AR-EP6", "LA-EP6", "NM-EP6", and
"TX-EP6".

NetDMR Agency Type Codes with Corresponding ICIS Issuing Organizations
NetDMR Agency Type Code
CT6
EC6
EO6
EP6
IN6
LC6
MN6
OF6
RG6
SC6
SO6
ST6
TR6
ICIS Issuing Organization
County
EPA Contractor
Other EPA
U.S. EPA
Interstate
Local
Municipal
Other Federal
Regional
State Contractor
Other - State
State
Tribal
An Agency Map can only be assigned to one Instance at a time. States, Tribes and EPA Regions
must work together to select their own Issuing Organization types and change the permits they
administer in ICIS to the Issuing Organization Types they selected. Otherwise, they run the risk
of having their permits in the wrong Instance or unavailable in NetDMR.
121
-------
NetDMR Regulatory Authority User Guide
May 2011

The moment an instance is created, NetDMR requests basic permit information from ICIS-
NPDES using the Agency Maps as the selection criteria. After the initial request for Basic
Permit occurs, NetDMR will request the data from ICIS-NPDES again every weekend for each
Instance based upon their agency maps. For example, the Alaska Instance is created with an
agency map of" AK-ST6". NetDMR will request all permits that have a NPDES Permit ID
starting with "AK" and an Issuing Organization Type of "State".

There are times when permits within an EPA Region may need to be reassigned to a State or
Tribal Instance. You will need to work with the State or Tribe to change the Issuing
Organization Type in ICIS for all affected permits to an Issuing Organization Type used by the
State or Tribe, then refresh your permit and
DMR data. You will be able to view the
CORS for these permits in your Instance only
TIP
Any time you change a permit's
Issuing Organization Type in ICIS to
either add the permit to your Instance or
remove it, you should refresh the permit
and DMR data in your Instance.
up until the time that you refreshed this data.

Rather than wait one week, Regulatory Administrators are able to refresh basic permit data in
NetDMR with ICIS-NPDES data at any time using the View Network Activity page. See
Section 3.10.2 for details on how to do this.
122
-------
NetDMR Regulatory Authority User Guide
May 2011

Appendix E. Basic Permit and DMR Refresh

Basic Permit Refresh

When an instance is created, NetDMR requests basic permit information from ICIS-NPDES
using Agency Maps as the selection criteria. After the initial request for Basic Permit occurs,
NetDMR will request the data from ICIS-NPDES again every week for each Instance based upon
their agency maps. For example, the Alaska Instance is created with an agency map of" AK-
ST6". NetDMR will request all permits that have a NPDES Permit ID starting with "AK" and an
Issuing Organization Type of "State".

If an agency map is added to or deleted from an existing instance NetDMR will request basic
permit information from ICIS-NPDES using only the Agency Maps that exist after the changes
are saved. An example of this scenario is where Region 9's instance was originally created with
agency maps for "NN-EP6", "AZ-EP6", "CA-EP6", "NV-EP6", "HI-EP6". After a year they
delegate all of the Navajo Nation permits to that tribe and want DMRs for American Samoa to
start being entered into NetDMR. The NetDMR System Administrator will add an agency map
of" AS-EP6" and remove the agency map of "NN-EP6". Upon saving these changes, NetDMR
will request all permits from ICIS-NPDES that have a NPDES Permit ID starting with "AZ",
"CA", "NV", "HI" and "AS" and an Issuing Organization Type of "EPA".
Rather than wait one week, Regulatory
Administrators are able to refresh basic
permit data in NetDMR with ICIS-
NPDES data at any time using the View
Network Activity page.
you requested a refresh of your permits.
NetDMR retrieves the list of permits that
ICIS will process NetDMR requests for
permits on a nightly basis. Check NetDMR the
next morning for your newly refreshed permits if
are available for reporting for a regulatory authority through the Basic Permit Data Flow
(BPDF). The BPDF retrieves the following information from ICIS for each permit:

> Permit Identifier
> Permit Status Code
> Facility Name
> Facility Address
> Permit Dates: original issue date, most recent issue date, effective date,
expiration date, termination date

If the BPDF request was for a complete replacement of the permit data (e.g., the Agency Map
was provided in the request), the permit reconciliation process will be used for all permits that
are either returned in the result file or in the NetDMR database. If the BPDF request was for a
specific set of permits (e.g., Permit IDs were provided), only the permits that were included in
the BPDF request are reconciled. For example, if the request only specified permit TX12345
and TX98765, the permit reconciliation process would only occur for permits TX12345 and
TX98765.

The permit reconciliation process is as follows:

123
-------
NetDMR Regulatory Authority User Guide
May 2011
If the permit exists in the result file, but not in the NetDMR database, add
the permit information to the NetDMR database. The permit will be
matched by comparing the Permitldentifier tag in the result file (or
provided in the original Solicit Request) to the permit_id column in the
NetDMR Permit table.
If the permit exists in the result file and the NetDMR database, update the
information in the NetDMR database with the information in the result
file.
If the permit exists in the NetDMR database but not in the result file, the
permit is no longer valid for electronic reporting in NetDMR. NetDMR
users will still be able to view previously submitted CORs, and request the
view role on these permits. Net DMR will not send a notification that the
permit is no longer valid for electronic reporting to users that can access
the permit as CORs will still be available for viewing.
DMR Refresh
When the first Signatory for a permit is approved by a Regulatory Administrator, NetDMR
requests one year's worth of anticipated DMRs or "empty slot records" from ICIS-NPDES using
the following criteria:

> Monitoring Period Start Date (MPSD) from 12 months before to 1 month after the date
the first Signatory request is approved
> Monitoring Period End Date (MPED) from the date the first Signatory role was approved
to 12 months afterward.

Each month after this, NetDMR requests another month's worth of data using the day of the
month the Signatory was approved to ensure that NetDMR always has at least one year's worth
of empty slot records. NetDMR will automatically retrieve empty slots for all permits for which
there is at least one NetDMR user with the signatory or edit role. DMRs will continue to be
retrieved as long as at least one user has the signatory or edit role for the permit.

To illustrate this concept, the following table lists 10 DMRs for a permit with their reporting
frequencies and monitoring period dates in ICIS.

Sample DMR list for Permit RI1234567
DMR ID
DMR1
DMR2
DMRS
DMR4
DMRS
DMR6
DMR7
DMRS
DMR9
Reporting Frequency
Annual
Quarter
Month
Month
Month
Month
Quarter
Month
Month
Monitoring Period
Start Date
01/01/2007
01/01/2007
01/01/2007
02/01/2007
03/01/2007
04/01/2007
04/01/2007
05/01/2007
06/01/2007
Monitoring Period End
Date
12/31/2007
03/31/2007
01/31/2007
02/28/2007
03/31/2007
04/30/2007
06/30/2007
05/31/2007
06/30/2007
124
-------
NetDMR Regulatory Authority User Guide
May 2011
DMRID
DMR10
Reporting Frequency
Month
Monitoring Period
Start Date
07/01/2007
Monitoring Period End
Date
07/31/2007
If the first Signatory is granted access to the permit on March 1, 2007 the next table shows a list
of requests that NetDMR would make to ICIS and the DMRs that would be returned for each
request. The Current Date column represents the date NetDMR makes the request.
Call
#

1
2
3
Date of
Call

03/01/2007
04/23/2007
06/23/2007
Monitoring
Period
Start Date
Range -
Start
03/01/2006
05/01/2007
07/01/2007
Monitoring
Period
Start Date
Range -
End
04/30/2007
06/30/2007
09/30/2007
Monitoring
Period End
Date
Range -
Start
03/01/2007
N/A
N/A
Monitoring
Period End
Date
Range -
End
03/01/2008
N/A
N/A
DMRs
Retreived from ICIS

DMR1,DMR2,DMR5,DMR6,DMR7
DMR8,DMR9
DMR10
For Call #1, NetDMR will use both MPSD and MPED date ranges to specify the DMRs that
should be returned because this is the first time DMRs are retrieved for the permit. The request
returns reports that have a MPSD of exactly one year before the first Signatory role was granted
up and 1 month after the first Signatory role was granted. The use of the MPED range for this
initial retrieval restricts the result set to only those DMRs with a MPED that has not passed. This
eliminates the DMRs with monitoring periods that have already passed (e.g., DMRS, DMR4).

After the initial call, NetDMR will periodically call the service to retrieve the next block of
DMRs. The MPSD range is chosen so as to not overlap with the range of the previous request for
the permit. The call is initiated 7 days prior to the MPSD range end date from the previous
request. This is to ensure that NetDMR has received the next set of DMRs before a user would
be able to enter data for them.

Call #2 demonstrates this relationship with the previous request. The call is made 7 days before
the MPSD Range End of Call #1. The MPSD Range Start is one day after the MPSD Range End
of Call #1. The MPSD Range End is set to the amount of time specified in the configuration file,
two months in this case. This call returns the next two monthly DMRs, DMRS and DMR9. A
similar process is performed for Call #3, which returns DMR10.

Rather than wait one month at a time, Regulatory Administrators, Signatories and users with the
Edit role are able to refresh DMR empty
slot records in NetDMR with ICIS-
NPDES data at any time. Regulatory
Administrators can use the View
Network Activity page (see Section
3.10.2 of the Regulatory Authority User
Guide for details on how to do this).
Signatories and users with the Edit role
can use the Refresh DMRs hyperlink on
the DMR Search Results page (see the
TIP
ICIS will process NetDMR requests for
DMRs on a nightly basis. Check NetDMR the
next morning for your newly refreshed DMRs if
you are the first Signatory for a permit or if you
requested a refresh of the DMR you were working
on.
125
-------
NetDMR Regulatory Authority User Guide
May 2011

Section 5.2 of this guide for details on how to do this).

The reconciliation process used depends upon which type of request generated the result file. In
addition, the list of DMRs that are reconciled is determined using the parameters that were
provided in the ESDF service request. DMRs are reconciled individually. For example, if the
result file includes information for ten DMRs and the information for one of the DMRs is invalid
for NetDMR (e.g., Monitoring Period End Date is missing), NetDMR will reject the invalid
DMR but accept the nine valid ones.

If the request was for DMRs using a date range NetDMR will reconcile the DMRs returned in
the result file and the set of DMRs in the NetDMR database that meet the original request
criteria. For example, if DMRs were requested for a Permit ID of RI12345 and an MPED range
of 01/01/07 - 01/31/07, NetDMR would also search the NetDMR database for the set of DMRs
that meet this criteria. The union of the DMRs in the result file and the set returned from
searching the database would be reconciled.

If the request was for a specific DMR NetDMR will reconcile all the DMRs specified in the
request. For example, if the request included information for two DMRs but the result file only
included one of the DMRs, the DMR reconciliation process would occur for both DMRs that
were originally requested.

The DMR reconciliation process includes the following steps:

5. If the DMR exists in the result file, but not in the NetDMR database, add the
DMR information to the NetDMR database. The DMR will be in the state 'Ready
for Data Entry'.
6. If the DMR exists in the in the NetDMR database but does not match a DMR in
the result file, deactivate the DMR in the NetDMR database. The CORs of
deactivated DMRs can still be viewed, but the DMR can not be edited or signed
(because ICIS no longer requires reporting for the DMR). Deactivated DMRs that
do not have an associated COR will not be displayed in search results. If a
subsequent result file includes a DMR that corresponds to a deactivated DMR,
NetDMR will remove the flag (i.e., reactivating the DMR) and replace the DMR
as described in item 3.
7. If the DMR exists in the result file and the NetDMR database, replace the
information in the NetDMR database with the information in the result file. The
complete set of possible changes is as follows:
a. Add new permitted feature(s) to the DMR.
b. Remove permitted feature(s) from the DMR.
c. Update permitted feature information on the DMR (e.g., the permitted
feature description code).
d. Add new parameter(s).
e. Remove parameter(s).
f Update parameter(s). (Includes updating the monitoring location code and
effluent trading status flag.)
g. Add new numeric condition(s).
h. Remove numeric condition(s).

126
-------
NetDMR Regulatory Authority User Guide
May 2011

i. Update numeric condition(s). (Includes updating the unit code.)

Any data that may have been entered by a user for a DMR (e.g. a partially completed DMR)
affected by the reconciliation process will not be modified, provided that the corresponding
measurements still exist in the revised DMR. Previously entered data associated with
measurements that do not exist in the revised DMR will be deleted. NetDMR will perform
validation again for all DMRs that are updated in this manner.

Submitted DMRs and CORs generated prior to any updates resulting from reconciliation will not
be affected by this process. However, corrections for a reconciled DMR will start from the
replaced DMR, not the DMR as originally submitted. For example, if a parameter existed when
the DMR was originally submitted but no longer exists, the corrected DMR will not display this
parameter on the DMR entry screen.

If one or more DMRs are missing for your permit after a refresh follow the steps in Appendix K
for troubleshooting missing DMRs.
127
-------
NetDMR Regulatory Authority User Guide
May 2011
Appendix F. Job Processing Schedule

NetDMR runs jobs such as DMR import, requesting Permit and empty slot DMR data from ICIS,
and submitting CORs to ICIS at scheduled intervals as described in the table below.

Job Processing Schedule for NetDMR in Production
Process Name
Import DMR
Solicit Request Basic Permit Data Flow
(BPDF) and Empty Slot Data Flow (ESDF)
DMR Submission
Update the status in NetDMR for BPDF,
ESDF and DMR
Suspect Log Analysis
Prepare BPDF
Prepare ESDF
Nightly CleanUp
Scheduled Jobs
5:00 AM - 9:00 PM at :00 past hour
10:15 am, 12:15 pm, 2:15 pm, 4:15 pm, 6:15 pm, 8:15 pm
7:00 pm
12:00 pm, 10:00 pm
5:00 am once per month
5:00 pm only on Saturday
10:00 am, 12:00 pm, 4:00 pm, 6:00 pm, 8:00 pm
3:00 am
Job Processing Schedule for NetDMR in the Test Environment
Process Name
Import DMR
Solicit Request Basic Permit Data
Flow (BPDF) and Empty Slot Data
Flow (ESDF)
DMR Submission
Update the status in NetDMR for
BPDF, ESDF and DMR
Suspect Log Analysis
Prepare BPDF
Prepare ESDF
Nightly CleanUp
Scheduled Jobs
Every hour at :25 and :55 past the hour. Example: 9:25 am, 9:55
am
From 9 am to 10 pm at :05 and :35 past the hour. Example:
9:05 am, 9:35 am
From 8 am to 10 pm at :05, :25, :45 past the hour. Example:
8:05 am, 8:25 am, 8:45 am
Every hour at :00, :20, and :40 past the hour. Example: 9:00
am, 9:20 am, 9:40 am
Not scheduled until 2020
10:00 pm
From 9 am to 10 pm at :45 past the hour. Example: 9:45 am,
10:45 am
3:00 am
128
-------
NetDMR Regulatory Authority User Guide
May 2011
Appendix G. Troubleshooting Missing DMRs

There are various reasons why a DMR may be missing from NetDMR. The reasons and their
solutions are described below.

Reason #1
NetDMR will not display all DMRs that exist for a permit. Instead, NetDMR will
display only DMRs that have a Monitoring Period Start Date on or before the day of your
search and a Monitoring Period End Date on or after the day of your search minus 14
months. For example, if you perform your search on April 15, 2009, NetDMR will
display DMRs where monitoring started before April 16, 2009, and ended after February
14, 2008.

Solution
If the DMR's monitoring period end date is after the date the first Signatory for your
permit was approved and its Monitoring Period Start Date is on or before the day of your
search, perform the search by entering a Monitoring Period End Date range that will
cover the Monitoring Period End Date(s) of the desired DMR(s).

Reason #2
When the first Signatory for a permit is approved, NetDMR retrieves requests one year's
worth of anticipated DMRs or "empty slot records" from ICIS-NPDES using the
following criteria:

> Monitoring Period Start Date (MPSD) from 12 months before to 1 month after the
date the first Signatory request is approved.
> Monitoring Period End Date (MPED) from the date the first Signatory role was
approved to 12 months afterward.

Solution
If the DMR's monitoring period end date is before the date the first Signatory for your
permit was approved, have your Regulatory Administrator request the desired DMR(s)
from ICIS. After ICIS returns the DMR(s), perform the search by entering a Monitoring
Period End Date range that will cover the Monitoring Period End Date(s) of the desired
DMR(s).

Reason #3
NetDMR only requests DMRs from ICIS that are anticipated or "scheduled" on a regular
basis such as monthly, quarterly, semi-annually and annually. If a DMR is anticipated on
an irregular or "unscheduled" basis such as sometime during a quarter or year, ICIS does
not store it and cannot provide it to NetDMR.

Solution
Either submit the DMR to the Regulatory Authority on paper, or have your Regulatory
Authority look at the limit set in ICIS to see if it is unscheduled. If it is unscheduled, you
129
-------
NetDMR Regulatory Authority User Guide
May 2011

should see if your Regulatory Authority is willing to change the limit set for the limits in
ICIS from "unscheduled" to "scheduled" and set the limits to "optional". They will need
to refresh the DMR data for your permit if they agree to change the limit set. (Note that
violations will not be calculated in ICIS for optional limits).

Reason #4
ICIS only provides DMRs for active limits to NetDMR and your limit(s) have been
inactivated.

Solution
Ask your Regulatory Authority to look at the limit set in ICIS to see if it is inactive. If it
is inactive but should be active, have your Regulatory Authority change the limit set to be
active and refresh the DMR data for your permit.

Reason #5
NetDMR automatically pulls a particular DMR data once and your limits changed or
your permit was reissued in ICIS since the DMR was pulled.

Solution
Have your Regulatory Administrator, Signatory or any user with the Edit role refresh
DMR empty slot records in NetDMR with ICIS-NPDES data. Regulatory Administrators
can use the View Network Activity page (see Section 3.10.2 of the Regulatory Authority
User Guide for details on how to do this). Signatories and users with the Edit role can
use the Refresh DMRs hyperlink on the DMR Search Results page (see the Section 5.2 of
this guide for details on how to do this).

Reason #6
Your permit was administered by one Regulatory Authority but has been changed to
another recently. For example, an EPA Region was authorized to administer your permit
but now a state or tribe is authorized to administer your permit. All CORs submitted
using the old Regulatory Authority's instance can be viewed, but all DMRs have been
moved to the new Regulatory Authority's instance including any that were in progress.

Solution
You will need to create an account for the new Regulatory Authority's instance and
search for your DMRs on their site. NetDMR will allow you to create the new account
using the same user account name and password as your old instance.

Reason #7
The Issuing Organization Type for your permit in ICIS was changed to one that is not
recognized by your Regulatory Authority's Instance.

Solution
Ask your Regulatory Authority Administrator to compare the Issuing Organization Type
for your permit in ICIS against their Agency Mappings for their NetDMR Instance and
either change the Issuing Organization Type in ICIS to match one of their existing
130
-------
NetDMR Regulatory Authority User Guide
May 2011

Agency Mappings or add a new Agency Map to their Instance that matches your permit's
Issuing Organization Type. See Appendix D for more information on Agency Maps.

Reason #8
You or your Regulatory Authority Administrator refreshed your DMR(s) but ICIS has not
processed your request yet.

Solution
ICIS processes DMR requests on a nightly basis. Wait until morning after your refresh
was requested to search for your DMR(s).

Reason #9
The request for data from ICIS failed.
Solution
Have your Regulatory Administrator check the View Exchange Network Activity page
for the status of your request. If your request failed the Regulatory Authority
Administrator will need to contact NetDMR User Support for assistance.

If your DMR is still missing after checking through all of the troubleshooting steps above ask
your Regulatory Authority Administrator to report your problem to NetDMR User Support.
131
-------
NetDMR Regulatory Authority User Guide
May 2011

Appendix H. Frequently Asked Questions

User Type and Role Questions

What is an Internal User?
An Internal User is a Regulatory Authority staff member with a NetDMR account.
What is an External User?
An External User is a Permittee or Data Provider staff member with a NetDMR account.
What is a Regulatory Authority?
A Regulatory Authority is a state agency or EPA Regional office that administers
NPDES permits. Regulatory Authority staff can view partial DMRs and CORs, approve
requests from Data Provider staff, Permittee staff and other Regulatory Authority staff for
access to the Regulatory Authority's Instance on NetDMR.
What is a Regulatory Administrator?
A Regulatory Administrator is a Regulatory Authority staff member that approves or
denies requests from Permittee users wanting to become a Signatory for a permit.
What is a Permittee?
A Permittee is a staff member at a permitted facility. Permittees can view, enter and
upload DMRs into NetDMR, edit CORs, sign and submit DMRs, and approve requests
from Data Provider staff and other Permittees for access to the facility's permit(s).
What is a Permit Administrator?
A Permit Administrator is a Permittee staff member that approves or denies requests from
Data Providers and other Permittees to view and edit DMRs for their NPDES permit.
They also approve or deny requests from Regulatory Authorities to view DMRs that have
not been signed and submitted ("partial DMRs").
What is a Signatory?
A Signatory is a Permittee staff member that is authorized to sign and submit DMRs for a
specific permit. Because NetDMR uses digital signatures, new Signatories must print off
a Subscriber Agreement form generated by NetDMR, sign it and mail it to the Regulatory
Authority listed within the Subscriber Agreement before he/she can sign and submit
DMRs.
What is a Data Provider?
A Data Provider is a lab, consulting firm or other business that has been hired by a
permitted facility to enter or view Discharge Monitoring Reports (DMRs) on behalf of
that facility. Data Provider staff are allowed to view, enter and import DMRs into
NetDMR and edit CORs but they cannot sign and submit DMRs to ICIS. Only a
permittee with the Signatory role can do this.

Access Questions

How do I navigate to NetDMR?
Navigate to www. epa. gov/netdmr and click on a blue state within the Electronic
Reporting map. The NetDMR Welcome screen will appear. Select the name of the State
or Regional Authority Instance that administers your NPDES permit(s) from the
Regulatory Authority drop down box and click on the "Go" button.
What is an Instance?

132
-------
NetDMR Regulatory Authority User Guide
May 2011

NetDMR is designed to allow a State, Tribe or EPA Region to have its own Login page
that separates their own set of permits and DMRs from the other Regulatory Authorities.
How do I know what Instance to choose from the NetDMR Login page?
If you submit your DMRs to a State agency, select the name of that agency from the
dropdown list (example: "Tennessee" or "Oklahoma - DEQ"). If you submit your
DMRs to an EPA region, select the name of that region from the dropdown list (example:
"EPAR7 IA-KS-MO-NB").
How can I be sure that my permit is stored in the Instance I selected?
After you select your Instance on the NetDMR Welcome page, the NetDMR Login page
will be displayed. Click on the "Checking your Permit Id" link and enter your permit's
NPDES ID. NetDMR will tell you whether your permit is available or not.
My permit is not available in the NetDMR Instance for the State agency or EPA region that
administers it. What should I do?
If you are a Permittee or Data Provider User, contact your Regulatory Authority's
NetDMR Administrator using the email link on the NetDMR login page provided under
the "New to NetDMR?" section. If you are a state or EPA Region staff member, refer to
the Regulatory Authority Questions section.
After I register for a new account, set up my password and receive my confirmation email
that my account is ready to use, the hyperlink to NetDMR does not work. What
should I do?
Close your browser, then open it back up again and navigate to NetDMR through the map
at www. epa. gov/netdmr.
I'm getting a "Page Not Found" or "cannot display the webpage" message from my web
browser. What should I do?
Call or email NetDMR User Support at 202-564-7756 or netdmr@epa.gov with details on
the steps you were performing just before the message appeared.
I am able to log into my NetDMR Instance, but as soon as I try to do anything I get kicked
out and returned to the NetDMR Welcome page. What is wrong?
NetDMR requires that you enable session cookies to function properly. All cookies
generated by NetDMR are removed when you close your browser. Instructions for
enabling cookies in Internet Explorer are provided below. To identify what version of a
web browser you are operating, click on the Help menu in Internet Explorer or Netscape
and click on "About".

If you are using Internet Explorer 6.0 or 7.0:

1. Choose Tools, then Internet Options.
2. Click the Privacy tab.
3. Default setting is medium. Move the slider to determine which setting you
prefer.
4. You can also click on Advanced for specialized cookie treatment.
After you enable cookies, log into NetDMR again.
When I try to log into NetDMR my web browser tells me I must allow cookies. How can I
do this?
If you are using Internet Explorer 6.0 or 7.0:

1. Choose Tools, then Internet Options.

133
-------
NetDMR Regulatory Authority User Guide
May 2011

2. Click the Privacy tab.
3. Default setting is medium. Move the slider to determine which setting you
prefer.
4. You can also click on Advanced for specialized cookie treatment.

After you enable cookies, log into NetDMR again.
I forgot my NetDMR User ID. What should I do?
Navigate to NetDMR, select your Instance then click on the "Forgot User Name"
hyperlink. NetDMR will ask you for your email address and an answer for one of your
secret questions, then display your User Name if it finds your email address on file and
you answered the question correctly. If you do not answer your secret question correctly
three times in a row your account will be locked.
I forgot my NetDMR Password. What should I do?
Navigate to NetDMR, select your Instance then click on the "Forgot Password"
hyperlink. NetDMR will ask you for your email address and an answer for one of your
secret questions, then ask you to reset your password if it finds your email address on file
and you answered the question correctly. If you do not answer your secret question
correctly three times in a row your account will be locked.
I cannot log into NetDMR. What should I do?
If you forgot your User ID or password, refer to "I forgot my NetDMR User ID" or "I
forgot my NetDMR Password". If you know your NetDMR User ID and password but
cannot log in, contact the Regulatory Authority Administrator for your Instance and ask
them to reset your password.
I tried to log in but my account is locked. What should I do?
If the account became locked because you logged in with the wrong password three times
or answered a secret question with the wrong answer three times, contact the Regulatory
Authority's Administrator for your Instance. The Regulatory Administrator's email
address is provided under the "New to NetDMR?" section of the NetDMR login page for
your Instance.

If you have no idea why your account was locked this may indicate an unauthorized
individual may tried to log into your account. See "What should I do if my NetDMR
account becomes compromised?" for instructions on what to do about this.
What should I do if my NetDMR account becomes compromised?
If you are a Signatory for one or more permits you must contact your Regulatory
Authority's Administrator and request that person lock your account and repudiate all
CORs that have been submitted while your account was compromised. All others should
notify the Regulatory Authority's Administrator. The Regulatory Administrator's email
address is provided under the "New to NetDMR?" section of the NetDMR login page for
your Instance.
I'm getting a "There is a problem with the site's certificate" message from my web
browser. What should I do?
The certificate has expired and will be updated soon but you will still be able to use
NetDMR. Just click on the "Continue to this website" link and you will be taken to the
NetDMR Welcome page.
I was working in NetDMR but am now getting a "Session Expired" message. What
happened?

134
-------
NetDMR Regulatory Authority User Guide
May 2011

NetDMR tracks how long it has been since the last keystroke or mouse click was entered.
If 30 minutes have passed without a keystroke or mouse click NetDMR will
automatically log you out without saving your changes. You must log back in and re-
enter any data that was lost.

Account Questions

What should I do if my name changes?
If you are a Signatory for one or more permits you must notify the Regulatory
Administrator of your Instance before changing your name in NetDMR and re-generate
your Subscriber Agreement(s), print them, sign them and send them to your Regulatory
Authority. To re-generate your Subscriber Agreements, navigate to the "My Account"
page and click on each Subscriber Agreement icon that appears in your "My Permits"
table.

To change your name in NetDMR, log into NetDMR, click on the "My Account"
hyperlink at the top of the page and change your name. Be sure to save your changes.
What should I do if my email address changes?
Log into NetDMR, click on the "My Account" hyperlink at the top of the page and
change your email address. Be sure to save your changes. If you set up your account to
use your email address as your account ID you must start using your newly changed
email address to log into NetDMR.

Data Refresh Questions

How often is permit data refreshed from EPA's ICIS system?
When an instance is created, NetDMR requests basic permit information from ICIS.
After the initial request for Basic Permit occurs, NetDMR will request the data from ICIS
every weekend. Regulatory Administrators are able to refresh basic permit data in
NetDMR with ICIS-NPDES data at any time using the View Network Activity page.
ICIS will respond to all requests for permits from NetDMR once a night.
How often is DMR data refreshed from EPA's ICIS system?
When the first Signatory for a permit is approved by a Regulatory Administrator,
NetDMR requests one year's worth of anticipated DMRs or "empty slot records" from
ICIS-NPDES using the following criteria:
> Monitoring Period Start Date (MPSD) from 12 months before to 1 month after the
date the first Signatory request is approved
> Monitoring Period End Date (MPED) from the date the first Signatory role was
approved to 12 months afterward.

Each month after this, NetDMR requests another month's worth of data using the day of
the month the Signatory was approved to ensure that NetDMR always has at least one
year's worth of empty slot records. NetDMR will automatically retrieve empty slots for
all permits for which there is at least one NetDMR user with the signatory or edit role.
DMRs will continue to be retrieved as long as at least one user has the signatory or edit
role for the permit.
135
-------
NetDMR Regulatory Authority User Guide
May 2011

Data Entry Questions

I entered data into a NetDMR page but it was not saved. Why?
You navigated to another page or out of NetDMR without clicking on the "Save",
"Submit" or "Confirm" button. After entering data, always be sure to save AND confirm
your changes.
After entering data and clicking on the Save or Submit button, I get a "There were errors
processing your request" message. What do I do?
Any field that has erroneous or missing data will have red text to the right of that field
explaining what caused the problem. Search through all fields on the page for red text
messages and correct them.

Instance Access Questions

I have the ability to approve or deny role requests from Permittees and Data Providers.
When should I do this?
It is the responsibility of the Permit Administrator to grant all non-Signatory access rights
to permits. If the Permit Administrator is not available a Regulatory Administrator can
approve non-Signatory access requests on a case-by-case basis. This functionality was
built into NetDMR only as a safeguard against unexpected events and is NOT intended to
be used to manage external access requests on a regular basis.
A Permittee or Data Provider requested a Signatory role and wants me to approve it now
instead of waiting for the Subscriber Agreement to arrive in the mail. Can I print
off their Subscriber Agreement in NetDMR and use it as justification for approving
their Signatory request?
No. Because of CROMERR regulations and the possibility of having to defend the
submission of DMRs in a court of law, you must have a Subscriber Agreement with the
Signatory's signature on file. The electronic version of a Subscriber Agreement is
missing the signature and cannot a substitute for the original, signed Subscriber
Agreement mailed in by a Signatory.
What is a Subscriber Agreement?
A Subscriber Agreement is "an electronic signature agreement signed by an individual
with a handwritten signature". Any NetDMR Permittee who wishes to sign and submit
DMRs to EPA must request a Signatory role for their DMR account for their permit(s),
print off the Subscriber Agreement generated by NetDMR, complete portions of the
form, then sign and mail the Subscriber Agreement to the appropriate State or Regional
Regulatory Authority. Until your Signatory role request is approved in NetDMR by the
Regulatory Administrator, you will not be allowed to sign and submit DMRs.
A Signatory told me their account has been compromised. What should I do?
Have a Regulatory Administrator lock the user's NetDMR account and then repudiate the
CORs for the unauthorized DMRs that were submitted. Accounts can be locked and
unlocked from the Edit User page. CORs can be repudiated through the Repudiate COR

136
-------
NetDMR Regulatory Authority User Guide
May 2011

page. Note that when you repudiate a COR it is removed from ICIS and the Signatory
must submit a new DMR. After repudiating each COR in question, the Regulatory
Administrator needs to unlock the account and reset the password and secret
question/answers for the account then notify the Permittee or Data Provider of the new
password and answers.

If the Signatory submitted an erroneous DMR and wants to revise it, they must search for
the COR and select the "Correct DMR" option instead of having it repudiated.
A user told me their account is locked. What should I do?
Have a Regulatory Administrator unlock the user's NetDMR account using the Edit User
page, then have the Permittee or Data Provider log back into NetDMR.
One of the NetDMR users working at my Agency has left the organization or is no longer
working with DMRs. What should I do?
Contact the Regulatory Administrator for your Agency. The Regulatory Administrator
can inactivate the account by clicking on the "Users" tab of the home page, searching for
the NetDMR account and revoking all roles for that user.
One of my facilities notified our Agency that one of their staff has left the organization or
no longer works in that capacity. What should I do?
Have them contact the Permit Administrator(s) for each of the permits they have access
to and have them delete the accounts for the permit(s).

If the staff is a Permit Administrator or Signatory the Regulatory Administrator must
inactivate the account by clicking on the "Users" tab of the home page, searching for the
NetDMR account and revoking the Signatory role for that user. Be sure that is at least
one active Permit Administrator or Signatory before inactivating the user or nobody will
be able to approve Permittee and Data Provider requests or sign and submit DMRs.
How come I cannot approve role requests for my Instance?
You must request a Regulatory Administrator role for your NetDMR account from your
"Request Access" page in order to approve Signatory requests from Permittees and
Regulatory Authority User or Administrator requests from staff within your State
Agency, Tribe or Region.

Permit Questions

What are Agency Maps?
Permits retrieved from ICIS and stored within a NetDMR Instance is based upon the
agency maps assigned to an Instance. For example, the Alaska Instance is created with
an agency map of" AK-ST6". NetDMR will request all permits that have a NPDES
Permit ID starting with "AK" and an Issuing Organization Type of "State".

137
-------
NetDMR Regulatory Authority User Guide
May 2011

of "NN-EP6". Upon saving these changes, NetDMR will request all permits from ICIS-
NPDES that have a NPDES Permit ID starting with "AZ", "CA", "NV", "HI" and "AS"
and an Issuing Organization Type of "EPA".

See the Regulatory Authority User Guide for more information on agency maps.
A permit we administer is not available in my Instance. What do I do?
Click on the Instance hyperlink on your NetDMR home page and note the Agency Type
codes listed in the "Agency Mappings" table. Go into ICIS, search for the permit and
look at the "Issuing Organization Type". Either change the "Issuing Organization Type"
to match one of the Agency Type Codes for the state in NetDMR, or contact ICIS User
Support to add the Agency Type Code to the "Agency Mappings" table in NetDMR.
I entered a new permit into ICIS or reissued a permit in ICIS recently. Do I need to do
anything in NetDMR?
Yes, if the permit has DMRs for your facilities that are or will be submitted to ICIS using
NetDMR. NetDMR will request new permit data every weekend but there are times that
you may not want to wait for the new data to appear. To update NetDMR with new
information, the Regulatory Administrator for your Instance will need to use the View
Exchange Network Activity page to request new permit and DMR information.
I made changes to a permit or limit in ICIS. Do I need to do anything in NetDMR?
Yes, if the permit has DMRs for your facilities that are or will be submitted to ICIS using
NetDMR. NetDMR will request new permit data every weekend but there are times that
you may not want to wait for the new data to appear. To update NetDMR with new
information the Regulatory Administrator for your Instance will need to use the View
Exchange Network Activity page to request the most recent permit and/or DMR
information.
One or more permits were administered by an EPA Region but now a State Agency or
Tribe administers it. How does NetDMR handle this and is there anything I need to
do?
If the State or Tribe does not have an existing NetDMR Instance, they must designate a
Regulatory Administrator to coordinate with the NetDMR System Administrator to set up
a new Instance in NetDMR and make sure that all permit in ICIS have an Issuing
Organization Type that differs from what the Region is using in order for NetDMR to be
able to request the proper permits.

If the State or Tribe has an existing NetDMR Instance, the Regulatory Administrator will
need to coordinate with the NetDMR System Administrator to add new Agency
Mappings for these permits, or log into ICIS and change each permit's Issuing
Organization type that differs from what the Region is using in order for NetDMR to be
able to request the proper permits.

The permittees and data providers will be able to view their old DMRs and CORs in the
Regional Instance but will need to begin entering DMR data in the State or Tribal
Instance.

If one of your permittees contacts you and says they were working on a DMR when the
permit was switched to the new Instance or need to submit a corrected COR, the
138
-------
NetDMR Regulatory Authority User Guide
May 2011

Regulatory Administrator for the new Instance must click on the "Network Activity"
hyperlink on their home page and request the DMR or COR from ICIS.
I requested a refresh of Permit Data but the NetDMR keeps displaying the old data. What
do I do?
ICIS processes NetDMR requests for permit data once a night A Regulatory
Administrator for the Instance can click on the "Network Activity" hyperlink on their
home page and find your request in the list.

If the status is "Pending" this means ICIS has not processed the request yet. If the date of
your request is the same day then wait until the next morning to check the status. If the
date of your request is one or more days earlier contact NetDMR User Support for
assistance.

If the status is "Failed" NetDMR encountered a problem communicating with ICIS.
Contact NetDMR User Support.

If the status is "Completed" but the permit in NetDMR still contains old data contact
NetDMR User Support..

DMR and COR Questions

What is a COR?
A COR or "Copy of Record" means a true and correct copy of an electronic document
received by an electronic document receiving system, which copy can be viewed in a
human-readable format that clearly and accurately associates all the information provided
in the electronic document with descriptions or labeling of the information. A copy of
record includes:
(1) All electronic signatures contained in or logically associated with that document;
(2) The date and time of receipt; and
(3) Any other information used to record the meaning of the document or the
circumstances of its receipt."
All DMRs signed and submitted to ICIS from NetDMR become the "Copy of Record".
I can see CORs for my instance but not DMRs. What is wrong?
Because a DMR in progress is NetDMR is designed for facilities to enter their DMRs,
State and EPA Regional staff are not allowed to view DMRs that are in progress unless a
Permittee or Data Provider requests help. See "A Permittee or Data Provider User needs
my help with entering their DMR" for information on how to view a partial DMR..
A Permittee or Data Provider User needs my help with entering their DMR. How can I
help?
The User must contact their Permit Administrator and let them know you will need
access to the Partial DMR. Next, you can request a View role for your NetDMR account
from your "Request Access" page in order to view the Partial DMR in question, then
notify the Permit Administrator of your pending request. Once the Permit Administrator
has approved your request you will be able to view but not edit the DMR.
I can see a partial DMR but not edit it. What is wrong?
Because NetDMR is designed for facilities to enter their DMRs, State and EPA Regional
staff are not allowed to edit DMRs.

139
-------
NetDMR Regulatory Authority User Guide
May 2011

The Permittee or Data Provider User entered changes to a partial DMR while I was
helping them but I can't see their changes. What is wrong?
The User will need to save their changes, then you will need to close the DMR window
and reopen it to see their changes.
How do I know when a DMR for my Permittees or Data Provider has been submitted to
ICIS?
The Regulatory Administrator for your Instance can add one or email addresses into the
"DMR Submissions and Attachment Notifications" section of their Edit Instance page.
How do I know when a DMR for my Permittees or Data Provider has been processed by
ICIS?
The Regulatory Administrator for your Instance can add one or email addresses into the
"DMR Submissions and Attachment Notifications" section of their Edit Instance page.
How can I get NetDMR to stop sending email notifications of DMR submissions to me?
The Regulatory Administrator for your Instance can remove your email addresses from
the "DMR Submissions and Attachment Notifications" section of their Edit Instance
page.
A Permittee or Data Provider told me their permit was in NetDMR but are unable to enter
DMRs for it. What should I do?
If the permit was administered by an EPA Region but a State Agency or Tribe now
administers it, see "One or more permits were administered by an EPA Region but now a
State Agency or Tribe administers it" for the answer. Otherwise, NetDMR inactivated
the permit because ICIS could not find it. The Regulatory Administrator for your
Instance needs to click on the Instance hyperlink on their home page and provide you
with the agency mapping for the permits assigned to your Agency so you can log into
ICIS, view the permit and make sure it has an Issuing Organization Type that matches the
NetDMR Agency Type Code. If you change the Issuing Organization Type in ICIS, see
the Regulatory Authority User Guide section on Agency Mappings for instructions on
what to do.
I requested a refresh of DMR Data but the NetDMR keeps displaying the old data. What
do I do?
ICIS processes NetDMR requests for DMR data once a night A Regulatory
Administrator for the Instance can click on the "Network Activity" hyperlink on their
home page and find your request in the list.

If the status is "Failed" NetDMR encountered a problem communicating with ICIS.
Contact NetDMR User Support.

If the status is "Completed" but the DMR in NetDMR still contains old data, refer to the
Permittee and Data Provider User Guide's "Troubleshooting Missing DMRs" appendix
for various causes of DMR data not being returned from ICIS.

Assistance Questions

140
-------
NetDMR Regulatory Authority User Guide
May 2011
Who should I contact for assistance with NetDMR?
For Role access questions contact your Regulatory Administrator. For all other
questions, call or email NetDMR User Support at 202-564-7756 or netdmr@epa.gov
141
-------
NetDMR Regulatory Authority User Guide
May 2011
Appendix I. Requesting Assistance

Contact your Regulatory Authority using the email address displayed under the "New to
NetDMR?" section of the login page of your Instance. Use this form as a guideline when
contacting your Regulatory Authority.
Requestor Contact Information
Name:
Facility/Organization:
Email Address:
Phone Number:
NetDMR Identifying Information
NetDMR Account Name:
NPDES Permit ID:
User Type: Permittee/Facility Staff
Role: View Edit
Data Provider/Lab/Contractor
Signatory Permit Administrator
Area of NetDMR Requiring Assistance
NetDMR Page:
Question or
Problem:
Steps followed
when question or
problem arose:
DMR or COR Identifying Information
Permitted Feature ID:
Discharge ID:
Monitoring Period End Date:
Parameter:
142
-------