NetDMR
National Installation
Regulatory Authority User
Guide
Draft - May 1, 2009
-------
S NetDMRRegulatory Authority User Guide /fckS
Draft - May 1, 2009 \rrJ
Table of Contents
Chapter 1. Introduction 1
1.1. Structure of this Guide 1
1.1.1. Organization 1
1.1.2. User Guide Notation and Conventions 1
1.1.2.1. Tips 1
1.2. Background - What is the National Installation of NetDMR? 1
1.3. System Requirements 2
1.3.1. Enabling Session Cookies 2
1.4. Types of Users and Their Roles 3
1.5. Security 6
1.5.1. System Access 6
1.5.1.1. System Time-Out 9
1.5.1.2. Logging Out 9
1.5.1.3. Suspect Analysis Log 9
1.6. Look and Feel 10
1.6.1. General System Navigation 10
1.6.2. NetDMR Pages 10
1.6.3. Entry of Data 12
1.6.3.1. Text Boxes 12
1.6.3.2. Checkboxes 12
1.6.3.3. Radio Buttons 12
1.6.3.4. Pick lists 12
1.6.3.5. Multi-Select Lists 13
1.6.3.6. Calendar Icons 14
1.6.4. Page Types 14
1.6.4.1. Search Pages 14
1.6.4.2. List Pages 15
1.7. Resources for More Information 16
Chapter 2. Managing Your Account 17
2.1. Creating an Account 17
2.1.1. General Information Rules 20
2.2. Searching for Available Permit Ids 21
2.3. Requesting View or Edit Access 22
2.4. Viewing an Account 23
2.5. Editing an Account 25
2.5.1. Request Access Rights Change 27
2.5.2. Security Questions and Answers 27
2.5.2.1. Reset Security Questions 27
2.5.3. Change Password 28
2.5.3.1. Reset Password 29
2.5.4. Lock Account 30
2.6. Unlocking Your Account 30
2.7. Resetting a Password 31
2.8. Retrieving a Forgotten User Name 31
2.9. Retrieving a Forgotten Password 33
2.10. Disabled Accounts 34
i
-------
SNetDMRRegulatory Authority User Guide /fckS
Draft - May 1, 2009 \rrJ
Chapter 3. Regulatory Administrators Procedures 35
3.1. Managing Access Requests 37
3.1.1. Approve/Deny Signatory Requests 38
3.1.2. Managing Regulatory User Access Requests 41
3.1.3. Managing External Permittee and Data Provider User Access Requests 42
3.2. Managing Your NetDMR Instance 43
3.2.1. View Instance 44
3.2.1.1. General Information Details 44
3.2.1.2. Agency Mappings 44
3.2.1.3. System Administrators 44
3.2.1.4. Custom Email Message 45
3.2.1.5. DMR Submission and Attachment Notifications 45
3.2.1.6. Custom News and Messages 45
3.2.2. Edit Instance 45
3.2.2.1. Editing General Instance Information 47
3.2.2.2. Editing the Custom Email Message 47
3.2.2.3. Editing DMR Submission and Attachment Notifications 47
3.2.2.4. Edit Custom News and Notices 48
3.3. Manage Agreements 49
3.4. COR Functionality 51
3.4.1. Search CORs 52
3.4.2. Viewing COR Search Results 54
3.4.3. Refining the COR Search 54
3.4.4. Performing a New COR Search 55
3.4.5. Downloading a COR 55
3.4.6. Viewing a COR 58
3.4.6.1. Viewing the COR Certification Statement 59
3.4.6.2. Downloading the COR 60
3.4.6.3. Viewing the COR Signature 60
3.4.6.4. Downloading the COR Public Signature Key 60
3.4.6.5. Verifying the COR Public Signature 62
3.4.6.6. Returning to the COR Search Results Page 63
3.5. Repudiating the COR 63
3.6. Searching and Viewing Permits 64
3.6.1. Search for Permits 64
3.6.2. View Permit Details 65
3.7. Searching for Users 66
3.7.1. User Search 66
3.7.2. User Search Results 67
3.7.3. View User Account Details 68
3.8. Editing and Managing User Accounts 70
3.8.1. Edit General User Information 72
3.8.2. Lock User Account 73
3.8.3. Unlock User Account 73
3.8.4. Reset User Password 73
3.8.5. Reset User Security Questions and Answers 74
3.8.6. Approve User Access Requests 75
ii
-------
/pj£*v NetDMRRegulatory Authority User Guide /fckS
tWy Draft - May 1, 2009 \rrJ
3.8.7. Deny User Access Requests 75
3.8.8. Revoke User Access Requests 75
3.9. View Logs 75
3.9.1. Viewing Suspect Logs 75
3.9.2. Viewing Raw Logs 77
3.10. View Network Activity 79
3.10.1. View Exchange Network Activity 80
3.10.2. Request Basic Permit Data Flow 82
3.10.3. DMR Data Refreshes from ICIS-NPDES 83
3.10.4. Request DMR Information by Date Range 83
3.10.5. Request Information for One DMR 85
3.11. Requesting Access to Partial DMRs 86
3.11.1. View Partial DMRs 87
3.12. Validate CORs 88
Chapter 4. Regulatory View User Procedures 90
4.1. Searching CORs 92
4.1.1. Viewing COR Search Results 93
4.1.2. Refining the COR Search 93
4.1.3. Performing a New COR Search 94
4.1.4. Downloading a COR 94
4.1.5. Viewing a COR 97
4.1.5.1. Viewing the COR Certification Statement 97
4.1.5.2. Downloading the COR 98
4.1.5.3. Viewing the COR Signature 100
4.1.5.4. Downloading the COR Public Signature Key 100
4.1.5.5. Returning to the COR Search Results Page 102
4.2. Search and View Permits 102
4.3. Search and View Users 104
4.4. Requesting Partial DMR and Regulatory Administrator Access 106
4.4.1. Regulatory Administrators Access Requests 107
4.4.2. Partial DMR Access Request 108
4.4.3. View Partial DMRs 109
Appendix A - Subscriber Agreement 110
Appendix B - Fraud Analysis 117
Appendix C - Validating CORs with Digital Signatures 118
Appendix D - Agency Maps 121
Appendix E - Basic Permit and DMR Refresh 123
Appendix F - Job Processing Schedule 128
Appendix G- Troubleshooting Missing DMRs 129
Appendix H - Frequently Asked Questions 132
Appendix I - Requesting Assistance 142
List of Figures
iii
-------
S NetDMRRegulatory Authority User Guide /fckS
Draft - May 1, 2009 \rrJ
Figure 1-1: NetDMR User Categories and Their Roles 5
Figure 1-2: Functions of the Various NetDMR Roles 6
Figure 1-3: NetDMR Welcome Page 7
Figure 1-4: NetDMR Login Page 8
Figure 1-5: NetDMR Permittee User Home Page 8
Figure 1-6: Example of Text Boxes 12
Figure 1-7: Example of Checkboxes 12
Figure 1-8: Example of Radio Buttons 12
Figure 1-9: Example of a Pick list 13
Figure 1-10: Example of Multi-Select List 13
Figure 1-11: Calendar Pop-up Window 14
Figure 1-12: Sample Search Page 15
Figure 1-13: Sample List Page 16
Figure 2-1: NetDMR Create Account Page 18
Figure 2-2: NetDMR Complete Account Creation Process Page 20
Figure 2-3: New Account Data Checking Rules 21
Figure 2-4: Request Access to Permits and Associated DMRs Page 22
Figure 2-5: My Account Page 24
Figure 2-6: My Account Page 26
Figure 2-7: Locked Account Notification Page 30
Figure 2-8: Regulatory Authority Contact Page 30
Figure 3-1: Regulatory Administrator Home Page 36
Figure 3-2: View User Account Details Page 37
Figure 3-3: Process Subscriber Agreement Details Page 39
Figure 3-4: Manage Instance Page 43
Figure 3-5: Edit Instance Page 46
Figure 3-6: COR Search Results Page 54
Figure 3-7: View COR Details Page 59
Figure 3-8: Search Permit ID Page 64
Figure 3-9: View Permit Details Page 65
Figure 3-10: Search Users Page 66
Figure 3-11: User Search Results Page 68
Figure 3-12: View User Account Details Page 69
Figure 3-13: Edit User Account Page 71
Figure 3-14: Suspect Logs Page 76
Figure 3-15: View Raw Logs Page 78
Figure 3-16: View Network Activity Page 80
Figure 3-17: Partial DMRs Page 88
Figure 4-1: Regulatory User Home Page 91
Figure 4-2: Search CORs Page 91
Figure 4-3: COR Search Results Page 93
Figure 4-4: View COR Details Page 97
Figure 4-5: Search Permt ID Page 102
Figure 4-6: Search Users Page 104
Figure 4-7: Internal User Access Page 107
Figure 4-8: Partial DMRs Page 109
iv
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Chapter 1. Introduction
1.1. Structure of this Guide
1.1.1. Organization
The intent of this guide is to provide step-by-step instructions, guidance, and pertinent
information on how to use the National Installation of NetDMR.
This guide addresses the technical basics of administering accounts and providing assistance to
permittees and data providers entering data into the National Installation of NetDMR. For the
most part, it does not deal with policy regarding what data should be entered in particular
circumstances. Descriptions and information are written to provide clarity to the average User,
not for regulatory precision. Finally, this guide is not exhaustive. Data elements and other
aspects of the system that are reasonably self-explanatory are not discussed.
1.1.2. User Guide Notation and Conventions
The bulk of this guide consists of step-by-step guides to performing various tasks. Within each
task, steps are enumerated and screen shots are included to illustrate the steps.
1.1.2.1. Tips
Throughout the Guide you will find text boxes
containing Tips. Tip boxes contain information that
should make your job easier. They include ideas for
streamlining data entry or information pertaining to
particular situations.
Tips include ideas for
streamlining data entry or information
pertaining to particular situations.
1.2. Background - What is the National Installation of NetDMR?
The National Installation of NetDMR is a web-based application that will allow National
Pollutant Discharge Elimination System (NPDES) permittees to electronically submit discharge
monitoring reports (DMRs) to EPA's data system for discharge information, the Integrated
Compliance Information System (ICIS)-NPDES database. NPDES permits are issued under the
authority of the Clean Water Act.
The NetDMR application, or "installation", resides at CDX and allows each State Agency, Tribe
or EPA Regional office to have their own separate working environment, or "Instance" that can
be customized with their own logos, permits, DMRs, new alerts and contact information.
NetDMR includes the following key components:
• Common Functionality: Create an account, request access to a permit and associated
DMRs/and copies of record (CORs), edit account information, retrieve a forgotten user
name or reset a forgotten password, and unlock a locked account.
1
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
• System Administrator: Configure a NetDMR installation and customize settings for
each Instance associated with an installation.
• Regulatory Administrator: Manage user accounts; set additional customization options
for an Instance; approve signatories; and search, view, and download DMRs and CORs
submitted for permits administered by the regulatory authority associated with the
Instance.
• Permit Administrator: Manage user read and write access to DMRs for a specific
permit.
• Search Functionality: Search and view permit details.
• DMR Functionality: Search, view, edit, sign and submit DMRs; import DMR data.
• COR Functionality: Search, view, and download copies of record for DMRs.
• Interaction with ICIS: NetDMR retrieves permit and expected DMR data from ICIS and
submits reported DMR data to ICIS automatically.
• Database: Store information needed by NetDMR or generated by NetDMR users.
• Help System: Provide on-line instruction on how to use specific elements of NetDMR
functionality.
Descriptions for all key components except the System Administrator are described in
subsequent sections of this document. Details on NetDMR functionality available to System
Administrator are provided in the NetDMR System Administrator User Guide
1.3. System Requirements
The following are the minimum PC requirements to access and use the National Installation of
NetDMR:
> Pentium III/IV or equivalent processor
> 128 MB RAM (512 MB recommended)
> Monitor with resolution of at least 800 x
600
> Internet access
> Microsoft Internet Explorer 6.0 or above,
with settings:
JavaScript enabled
Session cookies enabled
• Pop-up blockers disabled
1.3.1. Enabling Session Cookies
NetDMR requires that you enable session cookies to function properly. A cookie is a small text
file containing information that a Web site copies to your computer. NetDMR will automatically
detect whether you have cookies enabled after login and provide instructions on how to enable
cookies if needed. All cookies generated by NetDMR are removed once you close your browser.
After you enable cookies, log into NetDMR again. The following cookies will be used by
NetDMR:
NetDMR was designedfor use
with Internet Explorer. Unexpected
results may occur if any other Web
browser is used.
2
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
• JSESSIONIID - A number generated by the NetDMR to identify your browser. This
cookie is removed once you close your browser and contains no personal identifying
information.
• COOKIE TEST - A cookie that has the value of 1. This cookie is set only to test that your
browser allows cookies. This cookie contains no personal identifying information.
To enable cookies using Internet Explorer 6.0 or 7.0:
1. Choose Tools, then Internet Options.
2. Click the Privacy tab.
3. Default setting is medium. Move the slider to determine which setting you prefer.
4. You can also click on Advanced for specialized cookie treatment.
1.4. Types of Users and Their Roles
The ability to view and modify data within the National Installation of NetDMR is controlled by
the organization a User is affiliated with (a facility, a lab or contractor, a state, an EPA region, or
EPA headquarters) and the roles to which a User can be assigned. Regulatory Users are assigned
either a Regulatory Administrator role or a Regulatory View role. Figure 1-1 lists the different
Roles and User Categories NetDMR offers:
Role
User Category
Functions
System
Administrator
EPA Headquarters
> Create and manage an installation
> Create and manage downtimes and
settings
> Create and manage Instances:
o Create the first Regulatory
Administrators for a new
Instance
o Manage General Information
o Manage Regulatory
Administrators requests
o Manage Agency Maps
Regulatory
Administrator
EPA Region or State
(Internal)
> Customize an Instance:
o Manage some General
Information
o View System Administrators
o Manage Subscriber Agreements
o View Agency Maps
o Manage e-mail messages
o Manage DMR submission and
attachment notifications
o Manage news and notices
> Manage Regulatory Administrators,
Signatory and Regulatory View requests
> Create the first Permit Administrator for
a new Instance
> Assist Permit Administrators with
3
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Role
User Category
Functions
managing Permit Administrator,
External Permitte and Data Provider
Edit and View Requests
> View permits and users
> View, validate, download and repudiate
CORs
> Manage user accounts
> View logs and network activity
> Request access to View Partially
completed DMRs
Signatory
Permittee or Facility
(External)
> Request access to view, modify, sign or
submit DMRs/CORs for a permit
> Import DMRs
> Sign and submit Subscriber Agreements
> Download blank DMRs
> Download CORs
Permit
Administrator
Permittee or Facility
(External)
> Manage Permit Administrator, External
Permittee and Data Provider Edit and
View requests, and Regulatory View
Partial DMR Requests to view or
modify DMRs and CORs
> Manage Regulatory View access to
partially completed DMRs
> Request access to view, modify, sign or
submit DMRs/CORs for a permit
> Import DMRs
> Sign and submit Subscriber Agreements
> Download blank DMRs
> Download CORs
Edit
Permittee or Facility
(External)
> Request access to view and modify a
permit and its DMRs/CORs
> View users
> Download blank DMRs
> Download CORs
Edit
Data Provider -
Contractor or Lab
(External)
> Request access to view and modify a
permit and its DMRs/CORs
> View users
> Download blank DMRs
> Download CORs
View
EPA Region or State
(Internal)
> Request access to view a permit and its
DMRs/CORs
> Request Regulatory Administrators
access
> View users
> Download blank DMRs
View
Permittee or Facility
> Request access to view a permit and its
4
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Role
User Category
Functions
(External)
DMRs/CORs
> View users
> Download blank DMRs
View
Data Provider -
Contractor or Lab
(External)
> Request access to view a permit and its
DMRs/CORs
> View users
> Download blank DMRs
Figure 1-1: NetDMR User Categories and Their Roles
> System Administrator - EPA Headquarters staff responsible for configuring and
performing routine maintenance on the National NetDMR Installation, establishing state
Instances of NetDMR within the National Installation, and creating the first Regulatory
Administrators.
> Regulatory Administrator - State and EPA Regional (Regulatory Authority) staff
responsible for managing User accounts, customizing their own Instance within the
National Installation, approving DMR signatories, and searching, viewing and
downloading DMRs and their Copies of Record (CORs) submitted for permits
administered by the regulatory authority associated with the Instance, and provide
Technical Support of NetDMR for Permittees and Data Providers
> Permit Administrator - Facility or permittee staff responsible for approving all COR and
DMR view requests, and DMR edit requests for the Permit. Permit Administrators may
edit DMRs only if they have been granted Edit access to a permit.
> Signatory - Facility or permittee staff
responsible for signing and submitting
DMRs on behalf of an organization. A
request for the signatory privilege requires
submission of a Subscriber Agreement to
the Regulatory Authority that administers
a particular NPDES permit
> Permitee User - Facility or permittee staff responsible for viewing, entering, editing or
uploading Discharge Monitoring Reports (DMRs) into a state Instance.
> Data Provider - Contractor or laboratory staff responsible for viewing, entering, editing
or uploading Discharge Monitoring Reports (DMRs) into a state Instance. Data
Providers are not allowed to sign and submit DMRs or approve access to permits.
Figure 1-2 illustrates the functions available to each role within NetDMR.
Until the first Signatory Privilege is
granted for a permit, no accesses or
privileges can be requested for that permit
by other users.
5
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
System
Administrator
(EPA HQ User)
Install and
Customize
NetDMR
Cre ate
Instance
Create Initial
Internal
Administrator
Monitor and Maintain Hosted Version of NetDMR
Regulatoryl
Administrator Role
(Regulatory
Authority User)
Customize
Instance
Forward URL &
Other Information
to Permittees
Review
Subscriber
—*¦
Agreement
Approve
Signatory
Using NetDMR
Interface
Monitor Instance
Permit
Administrator
Role
(Permittee User)
Cre ate
Account
Inform Staff that
Edit and View-Only Access
Requests can be Made
Approve
Requests
Signatory Role
(Permittee User)
Cre ate
Account
Request
Signatory
Access
Sign and Mail
Subscriber
Agreement
Review and
Edit
DMRs
Sign and
Submit
DMRs
Edit Role
(Permittee or Data Provider User)
Cre ate
Account
Request
Edit
Access
Read-Only Role
(Permittee or Data Provider User)
Cre ate
Account
Request
View- Only
Access
View CORs
Figure 1-2: Functions of the Various NetDMR Roles
1.5. Security
1.5.1. System Access
The National Installation of NetDMR is accessed through a secure web site by navigating to
http://www.epa.gov/netdmr. Initially, a map of the United States will be displayed. Click on a
blue NetDMR state of interest and click on the Log In hyperlink to enter the NetDMR site. If
your permit is with an EPA Region or Tribe click on any blue NetDMR state and click on the
Log In hyperlink for that state to enter the NetDMR site. The NetDMR Welcome page will
appear and prompt you for your Regulatory Authority (Figure 1-3).
6
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Home | FAQs | Getting Started
NeiDMR
Welcome to NetDMR! If you are a permittee, you may be able to use
this web site to complete and submit DMRs electronically for your
facility.
Select Regulatory li
Authority: "
E0
Warning Notice
The registration procedure for the National Installation of NetDMR is part of the United States Environmental Protection
Agency's (EPA) Central Data Exchange, which is for authorized use only. Unauthorized access or use of this computer
system may subject violators to criminal, civil, and/or administrative action. All information on this computer system may
be monitored, recorded, read, copied, and disclosed by and to authorized personnel for official purposes, including law
enforcement. Access or use of this computer system by any person, whether authorized or unauthorized, constitutes
consent to these terms.
Privacy Statement
EPA will use the personal identifying information which you provide for the expressed purpose of registration to the National
Installation of NetDMR site at the Central Data Exchange and for updating and correcting information in internal EPA
databases as necessary. The Agency will not make this information available for other purposes unless required by law. EPA
does not sell or otherwise transfer personal information to an outside third party. [Federal Register: March 18, 2002
(Volume 67, Number 52)][Page 12010-12013]
@2008 NetDMR
Figure 1-3: NetDMR Welcome Page
If your permit is administered by a State Environmental Agency or an EPA Region, click on the
Select Regulatory Authority pick list and
highlight appropriate agency's state name or EPA
Region.
Select
Regulatory
Authority:
Click on 11 to proceed to the NetDMR Login
page for the NetDMR Instance of the Regulatory
Authority you selected from the list box.
CA-HI-NE-SD-UT
CA-HI-NE-SD-UT
CT-KY-PR-RI-S R
ERG Test-NY
R10 Partial -AK-ID-OR-WA
R3 Partial -DC-MD-VA
R6 Partial - LA-GM
Texas
At the NetDMR Login page shown in Figure 1-3, existing NetDMR users enter their NetDMR
User Name and Password as shown in Figure 1-4, then click on ,jllljnili | New users must
click on register for a new account to gain access to NetDMR before being able to log into
NetDMR.
7
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Login | FAQs | Getting Started | Contact the NetDMR Team
A
NetDMR
Welcome
Welcome to the Tennessee installation of NetDMR! If you are a
permittee, you may be able to use this Web site to complete and
submit OMRs electronically for your facility.
New to NetDMR?
^ First time users can register for a new account.
^ If you have any questions about NetDMR, please contact
lescure.nasrin@epa.Qov.
News
• NetDMR Regulatory Authority Accounts Derno on Monday, March 9,
2009 10:00 AM Eastern Time. It covers Regulatory Authority User
Guide, DMR Data Entry.
Warning Notice
The registration procedure for the National Installation of NetDMR is part of the United States Environmental Protection
Agency's (EPA) Central Data Exchange, which is for authorized use only. Unauthorized access or use of this computer
system may subject violators to criminal, civil, and/or administrative action. All information on this computer system may
be monitored, recorded, read, copied, and disclosed by and to authorized personnel for official purposes, including law
enforcement. Access or use of this computer system by any person, whether authorized or unauthorized, constitutes
consent to these terms.
Privacy Statement
EPA will use the personal identifying information which you provide for the expressed purpose of registration to the National
Installation of NetDMR site at the Central Data Exchange and for updating and correcting information in internal EPA
databases as necessary. The Agency will not make this information available for other purposes unless required by law. EPA
fines nnt sell c,r otherwise franker nersr.oal information tc, an nntsirip third nartv. [Federal Rpnister: March 18. ?OQ?
User Name |doe jane@sjte.com | Submit |
Password I.....
Forgot User Name? / Forgot Password? /
Create a NetDMR Account
Check Your PermitID
^ First time users should check to see if your
permit is available in NetDMR yet by
Checking vour Permit ID
Figure 1-4: NetDMR Login Page
You are only permitted one NetDMR login at a time (a single active session). If you attempt to
log into NetDMR from the same or more than one computer simultaneously NetDMR will
terminate the previous session and establish the most recent login attempt.
After a successful login, NetDMR will display the Permittee User, Signatory Administrator,
Permit Administrator, Regulatory Administrators or System Administrator home page depending
upon your Role and access level. Figure 1-5 is an example of the Permittee User Home page
for a Regulatory Authority User with View access.
A Userjuseramk, Permittee Use
CT-KY-PR-RI-SR
Home | My Account | Request Access | Help | Logout
~
NetDMR
Download
Blank DMR Form
Search
All DMRs & CORs
^ Search: All OMRs & CORs
All DMRs & Copies of Record (CORs)
aarch for DMRs and C
Permit #: Update |
Facility: | All Update |
Permitted Feature: | All _^j Update |
Discharge:
Monitoring Period End
Date Range:
[3 | (3 (mm/dd/yyyy)
Edited or Submitted | All
By:
Last 10 Logins
5/30/08 2:33 PM
Figure 1-5: NetDMR Permittee User Home Page
-------
NetDMR Regulatory Authority User Guide ^ .x
^etDMR* Draft - May 1, 2009 1®$
A list of up to 10 previous logins are always displayed on the right side of Last 10 Logins
each home page. 7/i/os 5:26 pm
7/1/08 5:1? PM
1.5.1.1. System Time-Out
NetDMR will automatically log you out and prompt you to log back in if the page is left idle for
30 minutes.
Home | FAQs | Getting Started
A
NetDMR
Session Timeout
Your session has expired. To continue using NetDMR you must login to the application again.
The Session Lockout Timer, which is a countdown from 30
minutes, is displayed at the top right corner of every page.
The timer resets to 30 minutes every time you perform an action that refreshes the page (e.g.
save, submit, cancel, etc). Once you are logged out you may sign back in immediately. Any
unsaved information will be lost.
1.5.1.2. Logging Out
Log out of NetDMR by clicking on I Logout at top of any NetDMR page.
E
1.5.1.3. Suspect Analysis Log
The Suspect Analysis log is a tool used by Regulatory
Administrators to detect illegal activity to determine if an account
has been compromised. If it is determined that a compromising
situation has occurred, the affected account will need to be locked
to prevent the user from logging into NetDMR until the illegal
activity has been addressed and the account is unlocked by a
Regulatory Administrator.
The NetDMR Suspect Analysis log tracks the following activities
within a specified frequency of time:
A Signatory with a
locked account will be
unable to sign and submit
DMRs until a Regidatory
Authority Administrator
unlocks the account.
> inconsistent login IPs - more than 10 originating IPs.
> overlapping login attempts - more than 10 overlapping
login attempts in 3 days.
> overlapping login attempts with different originating IPs -
more than 5 overlapping login attempts from different IPs
within 3 days.
> irregular DMR submission pattern - calculates the mean
number of submissions per month and standard deviation,
and then flags anything greater than two standard deviations.
View the Suspect logs
periodically to make sure no
illegal activity is occurring
for your Instance.
9
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
The System Administrator sets the frequency of the suspect analysis log runs for the installation
through the settings functionality. The default is set to quarterly. Section 3.9 explains how to
generate and view contents of the suspect logs.
1.6. Look and Feel
1.6.1. General System Navigation
Hyperlinks take you to a particular page. By
convention, hyperlinks are indicated by an arrow or
hand icon when hovering your cursor over them. A
standard set of hyperlinks are found at the top of all
NetDMR pages and customized hyperlinks are
sprinkled in the body of certain pages as necessary.
Home | FAQs | Getting Started
A
NetDMR
Submit
Go
Search
Buttons cause the system to perform some action, such as searching, saving, or
deleting. Buttons are generally found near the bottom of the page or next to a
block of data, and the actions they perform are dependent on information you have
entered on the page.
Update
1.6.2. NetDMR Pages
The NetDMR Welcome page has hyperlinks at the top that provide answers to Frequently Asked
Questions (FAQs) and explain how to get started in NetDMR. The body of the page displays
news items and has a drop down list box for choosing a Regulatory Authority interface or
NetDMR Instance.
The series of hyperlinks on the top of the NetDMR
Login page provide answers to Frequently Asked
Questions (FAQs), explain how to get started in
NetDMR, and provide contact information. In the
body of the NetDMR Login page are hyperlinks to
register for a new NetDMR account, create a NetDMR
account, retrieve a User Name, retrieve a forgotten
password, and check if your permit is in NetDMR.
You can set up separate
accounts in NetDMR for each
Regulatory Authority that you have
permit(s) on file with.
After you have logged in, the NetDMR pages have hyperlinks at the top that return to the main
NetDMR home page, navigate to your account, allow you to request access, provide help and
display the Logout page. A brief description of each hyperlink is given below.
Home
This option returns a User or Administrator to the appropriate NetDMR home page from any
page within NetDMR.
FAQs
10
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
The FAQ page lists topics of interest to most Users of NetDMR. Click on to expand the list
of questions, and click on ~ to collapse the list.
Getting Started
The Getting Started page displays information Users and Administrations need to know when
first starting to use NetDMR.
Contact the NetDMR Team
This page displays information on whom to contact with NetDMR questions and assistance.
Register for a New Account
New Users and Administrators must create an
account before they can use NetDMR. Clicking on
this link presents the page for creating new
accounts.
Forgot Username?
This option presents a page that allows Users and
Administrators to retrieve their forgotten NetDMR
User Name.
Forgot Password?
This option presents a page that allows Users and Administrators to reset a forgotten NetDMR
password.
Create a NetDMR Account
New Users and Administrators must create an account before they can use NetDMR. Clicking
on this link presents the page for creating new accounts.
Checking Your Permit ID
This option allows Users to find out if any of their permits are available within NetDMR for
reporting their DMRs.
Help
This option provides step-by-step instructions and guidance on how to use NetDMR.
Logout
This option logs a User or Administrator out of NetDMR.
To remind you of how you logged into NetDMR, all
NetDMR pages display your User ID, your user type and the
name and/or logo of the NetDMR Instance you are currently
working with in the upper right corner.
New Users should click on the
''Checking your PERMITID "
hyperlink to make sure NetDMR stores
your permit before clicking on the
registration hyperlink
tit User:userarnk, Permittee User
CT-KY-PR-RI-SR
11
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
1.6.3. Entry of Data
A variety of tools, including text boxes, radio buttons and pick lists designed for different types
of data entry appear throughout NetDMR. These tools are similar to those found on many web
pages. The purpose and use of these tools is described below.
1.6.3.1. Text Boxes
Text boxes appear as blank rectangles. Examples are shown in Figure 1-6. They allow free
entry of letters and/or numbers. All text boxes have a set limit on the number of characters that
can be entered. The size of the text box is generally related to the number of characters that may
be entered. If you attempt to enter more characters than are allowed, the extra characters will not
show up in the text box or be stored in NetDMR.
User Name
Password
Figure 1-6: Example of Text Boxes
1.6.3.2. Checkboxes
Checkboxes appear as small squares. Clicking on a check box toggles the appearance of a check
mark. Checkboxes often appear along with groupings of items, such as the months of the year,
and allow you to select any number or all of the items. An example of a group of checkboxes is
shown in Figure 1-7. Checkboxes are also used to indicate yes or no answers to questions.
Approve
Deny
r
r
Figure 1-7: Example of Checkboxes
1.6.3.3. Radio Buttons
Radio buttons appear as small circles, typically next to lists of items. An example of a list with
radio buttons is shown in Figure 1-8. From any group of items with radio buttons, only one item
may be selected. Clicking on a radio button selects that item, and the selection is indicated by a
dot in the circle. If a different item in the list had been selected, the dot and the selection are
removed from that item. In many cases, once an item is selected, a button elsewhere on the page
must then be clicked to execute a particular action (e.g. edit or delete the selected item in the
list).
User Name: *
© Use rny email address as my user name
Create rny own user name
Figure 1-8: Example of Radio Buttons
1.6.3.4. Pick lists
Pick lists appear similar to text boxes, but with a button with a downward pointing arrow at the
right side of the rectangle. Clicking on this button, or in the box, causes a list to appear, from
12
-------
NetDMR Regulatory Authority User Guide
^NetDMB* Draft - May 1, 2009 \rrJ
which a single item may be selected. Figure 1-9 shows the Select Regulatory Authority pick
list box and the options for the top box displayed after clicking on the arrow button or within the
list. The desired text is selected by clicking on it.
Select
Regulatory
Authority:
CA-HI-NE-SD-UT
CA-HI-NE-SD-UT
CT-KY-PR-RI-SR
ERG Test-NY
R10 Partial-AK-ID-OR-WA
R3 Partial -DC-MD-VA
R6 Partial - LA-GM
Texas
Figure 1-9: Example of a Pick list
The list then disappears and the selected item appears in the text box:
Sele* I CA-HI-NE-SD-UT ^1 Go
Regulatory 1 ™ I
Authority:
1.6.3.5. Multi-Select Lists
Multi-select lists appear as boxes containing a list of items. These lists allow you to select more
than one item from the list by holding down the Ctrl key and clicking on the desired item(s).
Selected items are marked with dark blue highlighting. An example of a multi-select list with
two of the visible items selected is shown in Figure 1-10.
Type of User:*
Select One T
Select One
Permittee User
Internal User
Data Provider
Figure 1-10: Example of Multi-Select List
Selection of multiple items is controlled through the use of the Ctrl and Shift keys.
While holding the Ctrl key, clicking on items in the list toggles their selection. Holding the
Shift key while clicking an item will select all items between that item and the previously
clicked item (any other items will become unselected). Clicking on an item while holding
neither the Ctrl nor Shift key will reset the selection, with only that item now selected. As
with pick lists, you can move through the list by using the letter keys. Doing so also resets
the selection.
13
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
1.6.3.6. Calendar Icons
Calendar icons ~ appear to the right of text boxes for date fields. Dates can be entered either by
typing directly into the text box or by clicking and choosing a date from the calendar that is
displayed. Figure 1-11 shows the calendar pop-up window that appears after clicking on the
calendar icon.
'H http://netdmrtst.... HEIDI
| July jJ < 2008 >
July 2008
Su Mo
TU
We
Th
Fr|
sa
1
2
3
4
s|
6|| 7
8
9
10
11
12
13 14
IS
16
17
18
19
20 21
22
23
24
25
26
27 28
29
30
31
Internet
Figure 1-11: Calendar Pop-up Window
The calendar will appear with the current month and
day displayed. Above the calendar are a pick list for
choosing a month and a set of right and left arrow
buttons. Clicking on - will move backward one
month. Clicking on — moves forward one month. The
individual dates are shown as hyperlinks. Clicking on
a date will return you to the data entry page with that
date entered in the appropriate text box.
1.6.4. Page Types
There are three major types of pages in NetDMR: search pages, list pages, and add/edit pages.
There are various versions of these pages for the various business areas, but all pages of a given
type share a number of features. These common features are described below.
1.6.4.1. Search Pages
Search pages are a common starting point for many tasks in NetDMR, allowing you to search for
an activity you wish to edit or determine if a particular activity already exists in the system
before adding it. Search pages also appear in the sequence of pages you are guided through
while adding certain activities. A sample search page is shown in Figure 1-12.
fiP
When typing dates directly into
text boxes, they must be entered in the
format: mm ddyyyy. For example,
November 6, 2008 would be entered as
11 06 2008.
14
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Permit ID |il
Monitoring Period End Date Range [
iQl
PI (mm/dd/yyyy)
Signatory First Name
Signatory Last Name
Signatory User Name
Signatory Email
Facility Name
Permitted Feature Number
Discharge Number
Discharge Description
Confirmation Number
Include repudiated CORs? V
Search
Close |
Figure 1-12: Sample
Note that fields are organized in groups or related
data elements. You may enter information in as
many fields across as many groups as you wish.
If information is entered in more than one field,
NetDMR combines the information with an
'AND' operation. In other words, it will find
records that meet all of the criteria you entered.
Therefore, the more information you enter, the
fewer results you will receive.
In most cases, you will want to enter as much
information as you know about the record you are
looking for in order to narrow your search results. In other cases you may want to enter fewer
search criteria to cast a broader net. One Instance calling for a more general search is when you
are searching to ensure that a record does not already exist before adding it.
Search text entered in text boxes can be either full or partial and is not case sensitive. NetDMR
will return all records with text that starts with the text entered in the corresponding search field.
For example, entering "peters" in the owner's last name field on a search page will return all
records where the owner's last name is Peters, Peterson, Petersen, etc.
1.6.4.2. List Pages
List pages are used to display the results of a search. You can choose an item from the displayed
list to perform an action on. A sample list page is shown in Figure 1-13.
Search Page
i
To search for text that may
occur in the middle of the data
element, use % at the beginning as a
wildcard. For example, entering
" %ers " in the owner's last name field
on a search page will return all
records where the owner's last name is
Peters. Peterson. Anderson, etc.
15
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
H Home | My Account | Re
A
| NetDMR
quest Access | Help | Logout
& User: amkintemaluser. Internal User
Illinois - IL
Search
CORs
Permits
Users
View
DMRs
® Session Lockout Timers
q. View Permit Details
Permit ID
IL0029424
Facility Name
LASALLE STP, CITY OF
Permittee Address
400 RIVER ROAD
LASALLE IL, 61301
Users and Roles
Showing 10 of 10 Users/Roles ,
User Name Organization User Type Role
amkinternaluser OECA Internal Partial DMR
DMR Data I
-nkinternaluser OECA
3.nasrin@epa.gou EPA
DMR Data |
Partial DMR
Internal Partial DMR
DMR Data I
Role Status View
Pending £
Pending
Approved
Subscriber Agreement
Figure 1-13: Sample List Page
Search results are normally presented in a table that lists up to ten records in most cases. If more
than 10 records are returned, you can navigate through the list by:
> Clicking iy to display the next page of records.
> Clicking -J to view the previous page of records.
> Clicking f > to display the last 10 records.
> Clicking ^ to display the first 10 records.
> Clicking the View All link to show all records in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
records at a time.
You can click on any underlined column title to sort the records by that column in ascending or
descending order.
1.7. Resources for More Information
For more information, contact ICIS User Support by telephone or e-mail at:
Phone: 202-564-7756
e-mail: netdmr@epa.gov
16
-------
NetDMR Regulatory Authority User Guide
^etDMR* Draft - May 1, 2009
Chapter 2. Managing Your Account
This section provides information on how to manage your NetDMR account. Topics include:
> Creating an account
> Searching for available permits
> Requesting view or edit access
> Viewing an account
> Editing an account
> Unlocking an account
> Resetting a password
> Retrieving a forgotten User name
> Retrieving a forgotten password
2.1. Creating an Account
Figure 2-1 shows the NetDMR page for creating a new account. Note that Regulatory
Administrators accounts will be set up by the NetDMR System Administrator, and Permit
Administrator accounts are established by Regulatory Administrators or other Permit
Administrators.
Login | FAQs | Getting Started | Contact the NetDMR Team
~
NetDMR
* Create a NetDMR Account
General Account Information
Please provide the information requested below to create a NetDMR account. A indicates a required entry.
Email Address: *
|john.doe@facili1y.com
Enter Email Address Again:*
|john. doe@facility.com
User Name: *
* Use my email address as my user name
Create my own user name
|johndoe
First Name: *
|john
Last Name: *
D
o
CD
Telephone Number:* (###-###-####)
|800-555-1212
Organization: *
| Acme
Type of User: *
| Permittee Userj
Selected Security Questions
Please provide responses for the security questions below. Select each question only one time. Note that answers are
case-sensitive.
17
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Question 1*
hero
Question 2*
Who was your childhood hero?
What is your mother's maiden name?
~3
~3
Question 3*
What is the name of the high school you attended?
attended
Question 4*
What is the name of the street where you grew up?
[HP
Question 5*
What is your favorite city?
city
"3
Submit | Reset | Cancel |
Figure 2-1: NetDMR Create Account Page
First time users can access the NetDMR Create Account page to create their own accounts by
following these steps:
1. From the NetDMR Welcome page, click on the pick list to select the Regulatory
Authority for your Permit:
Select Regulatory
Authority:
of the United States Envii
Unauthorized access or u<
->n. All information on this
}ersonnel for official purpo
'ther authorized or unautf
BAH -GM
BAH DC
BAH Delaware
BAH Hawaii - HI
BAH Michigan
BAH-DC-Tribal
New York-NY
Sample Instance
Tennessee
Texas
ay
2. Click on Go
3. At the NetDMR Login page, click on register for a new account or
Create a NetDMR Account .
4. Fill out the required information on the Create a NetDMR Account page:
> Enter your e-mail address, and re-enter the e-mail address to confirm
> Choose whether to use your e-mail address as your User name (recommended) or
create your own User name and enter
that User name
> Enter your first name
> Enter your last name
> Enter your 10 digit telephone number
as xxx-xxx-xxxx
> Enter the name of the organization you
Refer to Section 1.4 for a
description of NetDMR User Types
and the functionality available to them.
18
-------
5.
6.
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
are affiliated with
> Choose your User Type ("Permittee Users" are permitted facility staff; "Data
Provider Users" are lab or contractor staff; and "Regulatory Users" are state, tribe,
or EPA staff.)
> Select 5 or more security questions from the drop down list and enter an answer
for each question selected.
Click on Submit | to process your account request, click on ^eset | to blank out all
Cancel
fields on this page, or click on.
to return to the NetDMR Login page.
If NetDMR notifies you that data errors were found:
Create a NetDMR Account
I ^ There were errors processing your request.
i #
Fix the problem indicated in red text next to the field with problems.
The Verify NetDMR Account Request page will appear:
Verify NetDMR Account Request
I £ Please verify the information you entered below to create a NetDMR!
' account.
" ¦
Confirm that the information is correct on this page, then click on
the account or click on CancGl
Verify
to establish
OK
to return to the Create New Account page.
OK
8. At the Confirm NetDMR Account Request page click on to finalize the request.
9. A confirmation page will appear. Read the message, then Click on
10. You will receive an e-mail from NetDMR
to the e-mail account you provided
requesting you to complete your account
which will activate it. Click on the
hyperlink provided in this e-mail to open
the Complete NetDMR Account Creation
Process page shown in Figure 2-2.
You have only 60 days from
the day you request your account
to activate your account.
Login | FAQs | Getting Started | Contact the NetDMR Team
A
NetDMR
A Complete NetDMR Account Creation Process
Hello adminuser. To finish creating your NetDMR account, provide a response to the security question and create a
password for your account.
What is the name of the street where you |"
grew up?
Create Password:
Enter Password Again:
Submit | Cancel
(Answers are
case-sensitive)
(Case sensitive,
8-20 characters,
include letters
and numbers)
19
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Figure 2-2: NetDMR Complete Account Creation Process Page
11.
12.
13.
Answer the security question, create a password for your account, and enter the
password a second time.
Click on Submit to complete the account creation process and activate your
Qg |^| Qg |
account, or click on to return to the NetDMR Welcome page.
If the answer to your secret question is wrong, the password does not meet the rules
or the two passwords differ, NetDMR will display an error message indicating what
the problem was.
^ There were errors processing your request.
What is your father's middle name?
(Answers are
case-sensitive)
The information
you entered does
not match our
records. Please
try again. Note:
answers are
case-sensitive.
14.
15.
Re-enter the correct information and click on "'u':imit I to complete the account
creation process and activate your account, or click on.
NetDMR Welcome page.
The NetDMR Account Created page will appear.
Login | FAQs | Getting Started j Contact the NetDMR Team
£
JVeJDMR
Cancel
to return to the
NetDMR Account Created
Your NetDMR Account has been created. Click here to access the login oaae and begin using NetDMR.
16. Click on Login 1 in the upper left corner or here to access the login page on this
page to log into NetDMR.
2.1.1. General Information Rules
When entering account information, NetDMR applies data checking rules. A summary of these
account rules is provided in Figure 2-3 below.
Account Information
Rules
E-mail address
Only letters, numbers, . and are allowed.
Must contain the symbol.
Must be unique.
You must have access to this e-mail account.
Username
Only letters, numbers, . and are allowed.
First Name
Only letters, numbers, . and are allowed.
Last Name
Only letters, numbers, . and are allowed.
Organization
Only letters, numbers, . and are allowed.
20
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Account Information
Rules
User Type
Permittee User = permitted facility or lab staff
Data Provider = organization that provides DMR data to
NetDMR
Regulatory User = state, tribe. EPA Regional or EPA HO
staff
Telephone Number
Must be in xxx-xxx-xxxx format.
Security Questions and
Answers
All security questions must be different.
All security answers must be different.
Security Answers are case sensitive.
Choose security answers that are easy to remember as you
will need to know them to create an account, edit your
account, and retrieve forgotten passwords and User names,
and sign DMRs.
Figure 2-3: New Account Data Checking Rules
2.2. Searching for Available Permit Ids
In order to view or enter DMR data for a permit into the National Installation of NetDMR, the
permit must be present within the system. You can check whether any of your permits are
available for DMR reporting by following the instructions below. You do not have to create a
NetDMR account before you can check on the status of your permits.
1. Click on checkinq your permitid on the NetDMR Login page.
2. Enter the permit Id to search for:
Login | FAQs | Getting Started | Contact the NetDMR Teai
NerDMR
3 Check Whether a Permit is Available for Reporting in NetDMR
Enter a Permit ID* | ~ Check Permit ID |
, Check Permit ID
3. Click on
4. NetDMR will display a message if the permit does not exist. Reenter the permit ID if it was
incorrectly entered or contact the NetDMR Regulatory Administrators for your Regulatory
Authority to request the permit be added to NetDMR:
^ The permitID 'ZZ0000001' is not available for reporting in NetDMR.
» Check another permitID or return to the Login page.
5. If the permit exists in NetDMR, you will see a message telling you it is available for
reporting:
The permitID SR0026417 is available for reporting in NetDMR. You
may check another permitID or proceed directly to Creating an
Account. If you already have a NetDMR account. Login now. ;
21
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
2.3. Requesting View or Edit Access
After a Permittee or Data Provider account has
been created, they are able to request access to view
permit, DMR and COR information stored within
NetDMR using the Request Access to Permits and
Associated DMRs page shown in Figure 2-4. Only
Permittees or Data Providers with an Edit Role may
edit DMRs, only Permittee Users may request a
Permit Administrator or Signatory Role and only
Permittee Users with a Signatory role may submit DMRs for a permit within NetDMR.
Until the first Signatory
Privilege is granted for a permit, no
view edit access or privileges can be
requested for that permit.
jVeTDMR
CT-KY-PR-RI-SR
Search
Ail DMRs & CORs
Download
Blank DMR Form
d Request Access to Permits and Associated DMRs
Enter the ID for the permit whose DMRs you would like to ac
Repeat this process for each permit you would like to reques
I
PermitID:
Role:
Update |
| Select One J
Add Request
^ Access Requests
A summary of the current access requests is presented below.
Permit ID Requested Role Remove Access Request
No Permits found
Figure 2-4: Request Access to Permits and Associated DMRs Page
The steps for a Permittee requesting a view, edit, Permit Administrator or Signatory role for a
permit, or a Data Provider requesting a view or edit role for a permit using this page are:
1. Log into NetDMR by selecting the NetDMR Instance, then entering your User ID and
password for that Instance.
2. Click on I Re
-------
/pj£*v NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
NetDMR, contact your NetDMR Instance Administrator and have he or she add the permit
into NetDMR, then perform the steps above after the NetDMR Instance Administrator
notifies you the Permit ID is now in NetDMR.
7. If you have already requested access to this permit NetDMR will display this message on the
page. Enter another permit ID that you do not currently have access for.
| ^ You have already requested or received all available roles for this
* permit
Click in the box next to Roles, then click on View:
| Select One ^ |
Select One
View
Add Request
9. Click on
10. If you did not choose a Role an error message is displayed. Repeat steps 6 and 7 above.
; ~ There were errors processing your request.
PermitID: |proooo353
Update | The perrmitlD is not available for reporting
in NptDMR .
11. Check to make sure the request has been added to the Access Requests table at the bottom of
the page, then click on 5ubnnit .
d Access Requests
A summary of the current access requests is presented below.
Permit ID
Requested Role
Remove Access
Request
SR0026417
Signatory
n
12. If the wrong Permit ID or Role was selected on this table, click on next to the Permit ID
to delete request from this table.
13. Repeat steps 3-11 above for each different Permit ID you need access for.
14. Review the information displayed on the page, then click on Submit [
Your view and edit access requests will be forwarded to the appropriate Administrator for
approval. NetDMR will send a notification message to the e-mail address associated with your
account after the Administrator approves or denies your request.
2.4. Viewing an Account
You can access the data that you provided when you created your NetDMR account including
your security questions and all permits you have access to by logging into NetDMR and clicking
23
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
on I Hv Account | in the upper left corner of the page. The My Account page is shown in Figure
2-5.
JVerDMR
Search Download
All DMRs & CORs Blank DMR Form
CT-KY-PR-RI-SR
My Account
Email:
alison_kittle@yahoo.com
User Name:
useramk
First Name:
Alison
Last Name:
Kittle
Telephone Number:
804-883-7860
Organization:
Test User
Type of User:
Permittee User
Edit Account
Selected Security Questions
a Click to display your security questions, Note that your security a
(Mill not be shown, however you can change your questions and a
Permit ID Access Rights Access Status Request Date Update Date Subsc
SR0026417 Signatory Pending 2008-07-02 16:19:42.0 2008-07-02 16:19:42.0 Q
Figure 2-5: My Account Page
The five security questions you selected when you created your account can be displayed by
clicking on * in the Selected Security Questions section. The answers to these questions are
not displayed but they can be changed when editing your account. You can hide the questions by
clicking on
At the bottom of the page is the My Permits section. My Permits includes a list of all permits
that a user has requested access to, the access rights and status of the access requests, the date of
the request for when an action was taken as well as the ability to print the Subscriber Agreements
associated with the permit. Up to ten permits will be displayed by default. If more than 10
permits are associated with your account, you can navigate through the list by:
> Clicking to display the next page of permits.
> Clicking s] to view the previous page of permits.
> Clicking C > to display the last 10 permits.
> Clicking ^ to display the first 10 permits.
> Clicking the View All link to show all permits in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
permits at a time.
24
-------
NetDMR Regulatory Authority User Guide /f£*%
^etDMR* Draft - May 1, 2009 \rrJ
You can click on the Permit column title to sort the Permits in ascending or descending order.
To view the Subscriber Agreement for a Signatory request listed in this table, click on O within
the Signatory's row to display the Subscriber Agreement in a separate window.
2.5. Editing an Account
All NetDMR Users are able to revise their e-mail address, NetDMR user name, first name, last
name, telephone number and organization on the Edit Account page as shown in Figure 2-6. In
addition, you can request changes to your permit access rights, modify your security questions
and answers, and lock your accounts using the steps that follow. Any changes must be
confirmed and saved.
25
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
lime | My Account | Request Access | Help | Logout
~
NetDMR
CT-KY-PR-RI-SR
Search
All DMRs & CORs
Download
Blank DMR Form
if Edit My Account
General Account Information
Organization:*
Type of User:*
Email Address:*
|alison_kittle@y ahoo ,co
Enter Email Address
|alison_kittle@y ahoo ,co
Again: *
User Name: *
f Use my email address as my user name
<*" Create my own user name
l-eramk |
First Name: *
Last Name:*
(Kittle
Telephone Number:* (###-###-####)
(804-883-7860
|Test User
| Perr-ittCL LL-_J
My Permits
One Permit found.
Permit Id Access Rights Access Status Subscriber Agreement Request Date Update Date Delete Access Rights
SR0026417 Signatory Pending Q 2008-07-02 16:19:42.0 2008-07-02 16:19:42.0 |—
Security Questions and Answers
a Click to display your security questions. Note that your s
II not be shown, however you can change your questions and a
Change Your Password
Your password must be 8-20 characters and contain both letters and numbers.
Enter a new
password:
Enter your password
again:
Lock Your Account
Locked accounts can not access NetDMR.
8-20 charac
both letters
numbers)
Lock Account
Save | Cancel |
Figure 2-6: My Account Page
1. Log into NetDMR and click on I Hv Account | in the upper left corner of the page.
2. Click on Edit Account within the My Account page.
3. Make changes by entering data in any of the General Account Information fields
except User Type and Delete Access Rights in the My Permits section, changing
security questions and answers, changing your password, or locking your account in
the Lock Your Account section (refer to subsections below for details). Although
there is a Delete Access Rights column, only a Permit Administrator may delete
access rights to their permit(s).
4. Review your changes to confirm they are correct.
26
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Cancel
to cancel changes and return to the My Account
5. Click on or click on
page.
6. Answer the Security Question and provide your current password.
2.5.1. Request Access Rights Change
You can delete access rights to the permits you currently
have access to by clicking on the l~~ empty checkboxes in
the Delete Access Rights column within the My Permits
table next to the permits to delete. Click on a checked box
^ to unselect a permit.
Click any underlined column
title to sort the permits in ascending or
descending order by the information in
that column.
2.5.2. Security Questions and Answers
You can change your Security Questions and Answers by clicking on ^ to display your
security questions or ~ to hide the list of security questions. To change a question, click on the
drop down arrow and click on the question. To change an answer, simply type the answer in the
box under the question.
2.5.2.1. Reset Security Questions
A Regulatory Authority Administrator may have you reset your security questions and answers if
they discover your account has been compromised. If this is the case, your account will be
suspended and you will receive an email notifying you of the change. If you try to log into
NetDMR you will be prompted to reset your password or security questions:
Login | FAQs | Getting Started | Contact the NetDMR Team
~
NetDMR
^ Reset Credential via Verification Key
You must change your password and/or security questions before you can continue using this account. You should
have received instructions on how to perform this via email. If you did not receive this email, please contact your
Regulatory Authority for assistance.
©2008 NetDMR
Contact your Administrator to get the secret answer to use for resetting your questions, then
follow these steps to change your security questions and answers:
1. Click on the hyperlink within your security reset email notification:
To Reset your security Questions, please click on the following link:
https://netdmrte5t.epacdx.net/netdmr-web/public/verification.htm?
key=~9bfe-3E~~d9 9d5ff jd~c jac _ ~ 2 2c 1 _ 9cdE E 2 19d4e 5 3 9f - S ¦: 52 cic - laf 5b - f ~ 1 ^ser Id=l 62
The answer to the security question will be communicated to you via a phone call by the internal admin.
Thank you.
2. The Reset Account Credentials page will appear:
27
-------
KNetDMfq
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Luy.n | FAQ. | OvUinu I CoriL-U lh« NvtOMft T
~
¦V./DMR
4 Rebel Account Credentials
Tu n-.H yam security questions, ph'jsv <*nt
administrator at your regulatory authority and select new security questions and answers-
Enter a temporary security question answer for the
IHCr lo force
-------
NetDMR Regulatory Authority User Guide
^etDMR* Draft - May 1, 2009
2.5.3.1. Reset Password
A Regulatory Authority Administrator may have you reset your password if you are having
problems logging in or if they di scover your account has been compromised. If this is the case,
your account will be suspended and you will receive an email notifying you of the change. If
you try to log into NetDMR you will be prompted to reset your password or security questions:
Login | FAQs | Getting Started | Contact the NetDMR Teal
A
NetT)MR
^ Reset Credential via Verification Key
You must change your password and/or security questions before you can continue using this account. You should
have received instructions on how to perform this via email. If you did not receive this email, please contact your
Regulatory Authority for assistance.
©2008 NetDMR
Follow these steps to change your password:
1. Click on the hyperlink within your security reset email notification:
To reset your password, please click on the following link:
https : //net-dir.r rest.. epacdx . r.et/r.e~airjr--.vei:/publ-c/''er-£-ca^icr.. l-.t-rr-?
^-,-=:65c"fi:a£defe jl22aedee~ f b ce4 ibc 6c-i 1 £ E f e9 jc^ece rdcd5I'2e.E f lizf 3a5 5~ Luser Id=l 62
Thank you.
2. The Complete NetDMR Password Reset Request page will appear:
Login | FAQs | Getting Started | Contact the NetDMR Team
A
AtoDMR
Complete NetDMR Password Reset Request
Hello alison_kittie@yahoo.com. To reset your NetDMR password, provide a response to the
security question and create a new password for your account.
What is the name of the
(answers are case-Sensitive)
street where you grew up?
Enter Password
(case sensitive, 6-20 characters.
Enter Password again
Submit | Cancel |
3. Type in the secret answer for the question displayed.
4. Enter a new password that is not the same as the previous password.
5. Re-enter the new password.
6. Click on H to save your new password.
7. If you did not provide the correct answer to the question or your password is invalid an
error message will appear:
^ There were errors processing your request.
Repeat steps 3 through 6.
8. You will receive confirmation that your password has been reset:
Login | FAQs | Getting Started | Contact the NetDMR Team
A
NetDMR
Password Reset Completed
Your password has been changed. Click here to access the looin page and begin using NetDMR.
@2008 NetDMR
29
-------
NetDMR Regulatory Authority User Guide /f£*%
^etDMR* Draft - May 1, 2009 \rrJ
9. Click on the here to access the login page hyperlink to log into NetDMR.
2.5.4. Lock Account
If you need to inactivate your account for a period of time you can lock your account by clicking
on the I- empty checkbox in the Lock Your Account section. If you do not want to lock your
account and the box is ^ checked, click on the checked box to avoid locking your account.
If you lock your account, the next time you attempt to log into the National Instance of NetDMR
the Locked Account page will display. Follow these steps to unlock a locked account:
1. Answer the security question that is displayed.
2. Click on
Submit
If you respond correctly to the security question you will be directed back to the NetDMR Login
page to log into your account.
2.6. Unlocking Your Account
If you have locked your account in order to inactivate it for a period of time or a Regulatory
Administrator locked your account due to security issues, you will receive an e-mail notifying
you that your account is locked. The next time you attempt to log into the National Instance of
NetDMR the Locked Account page will display as shown in Figure 2-7.
Login | FAQs | Getting Started | Contact the NetDMR Team
~
NetDMR
^ Locked Account
Your account has been locked. To unlock your account, you must contact your Regulatory
authority .
Figure 2-7: Locked Account Notification Page
Contact your Regulatory Authority by clicking on Regulatory authority an(j calling the
telephone number or sending an e-mail to the address specified in the Regulatory Authority
Contact page Figure 2-8.
Login | FAQs | Getting Started | Contact the NetDMR Team
JVefDMR
Contact the NetDMR Team
If you need assistance, please contact NetDMR at:
Phone: 555-555-5555
Email: netdmr@erg.com
Figure 2-8: Regulatory Authority Contact Page
30
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
After the Regulatory Authority unlocks your account NetDMR will notify you with an email
containing a link. Navigate to the link to display a page confirming your account has been
unlocked and follow these steps:
1. Answer the security question that is displayed.
2. Click on
Submit
If you respond correctly to the security question you will be directed back to the NetDMR Login
page to log into your account.
2.7. Resetting a Password
NetDMR passwords expire after 6 months and will display
the Expired Password page after you log in with an expired
password. Use this page to reset your expired password by:
1. Answering the security question.
2. Entering your current password.
3. Entering a new password twice.
fl
Be sure to enter a new password
that is not the same as the 10 most
recent passwords you've used.
4. Clicking on
Submit
You may also reset your password at any time by using the My Account page. To do this:
1. Log into NetDMR and click on I Hv Account | in the upper left corner of the page.
2. Click on Edit Account within the My Account page.
3. Enter a new password and then reenter it in the spaces provided within the Change
Your Password section.
4. The Confirm Account Edits page will appear. Answer the Security Question and
provide your old password.
5. Click on 5ave I to proceed, or click on Lancel to cancel changes and return to the
My Account page.
6. If the security question answer or old password is incorrect, NetDMR will display the
error message shown below. Enter your answer and old password again.
,— — — - -- -- -- -- - — — _____________________________________ _________ n
; ^ There were errors processing your request.
7. If the security answer and old password are correct, NetDMR will display this
confirmation message:
; / Your account changes haye been saved.
2.8. Retrieving a Forgotten User Name
If you have forgotten your User Name, follow these steps to recover it:
1. Navigate to the NetDMR Welcome page, select your Regulatory Authority, and click on
Go I
31
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
2. Click on Forgot User Name? on the NetDMR Login page.
3. Enter the e-mail address you used to create your NetDMR account in the box provided:
Login | FAQs | Getting Started | Contact the NetDMR Tearr
X
NerDMR
ft Retrieve User Name
Step 1: To retrieve your user name, please enter the e-mail address you specified when you
created your NetDMR account.
Email Address*:
r
Submit | Cancel |
4. Click on Submit to continue, or click on CancGl | to return to the NetDMR Login page.
5. If you provided an e-mail address that NetDMR does not recognize NetDMR will display a
message that your User Name could not be found:
^ A user with the specified email address was not found.
Perform steps 3-4 again making sure to use the correct e-mail address for the Regulatory
Authority you selected. Otherwise, one of your security questions will be displayed:
Login | FAQs | Getting Started | Contact the NetDMR Tear
A
JVetDMR
<2 Retrieve User Name
Step 2: Please respond to the security question you specified when you created your NetDMR
account.
Email Address:
What was your high school mascot?
alison kittle@yahoo.com
Submit Cancel
6. Answer the security question that is displayed.
to continue, or click on Cancel | to return to the NetDMR Login page.
Submit
7. Click on
8. If the answer to your secret question is incorrect, NetDMR will display an error message
^ There were errors processing your request.
Otherwise, NetDMR will display your User Name:
Login | FAQs | Getting Started | Contact the NetDMR Tea
A
NetDMR
^ Retrieve User Name
Your user name is 'useramk'. Please go to the login page to continue using NetDMR.
32
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
2.9. Retrieving a Forgotten Password
If you have forgotten your NetDMR password, follow these steps to recover it:
1. Navigate to the NetDMR Welcome page, select your Regulatory Authority, and click on
Go |
2. Click on Forgot Password? 0n the NetDMR Login page
3. Enter the e-mail address you used to create your NetDMR account in the box provided:
Login | FAQs | Getting Started | Contact the NetDMR Team
X
NetDMR
-S Forgot Password
Step 1: To reset a password that you forgot, please enter the e-mail address you specified when
you created your NetDMR account:
Email Address*:
1
Submit |
Cancel |
Submit
to continue, or click on
Cancel
to return to the NetDMR Login page.
4. Click on
5. If you provided an e-mail address that NetDMR does not recognize NetDMR will display a
message that your e-mail address could not be found:
^ A user with the specified email address was not found.
Perform steps 3-4 again making sure to use the correct e-mail address for the Regulatory
Authority you selected. Otherwise, one of your security questions will be displayed:
Login | FAQs | Getting Started | Contact the NetDMR Team
NetDMR
Forgot Password
Step 2: Please respond to the security question you specified when you created your NetDMR
account.
Email Address:
alison_kittle@yahoo.com
What was your high school mascot?
1 1
Submit | Cancel |
6. Answer the security question that is displayed.
Cancel
7. Click on
Submit
to continue, or click on
to return to the NetDMR Login page.
8. If the answer to your secret question is incorrect, NetDMR will display an error message
^ There were errors processing your request.
Otherwise, you will receive an e-mail from NetDMR to the e-mail account you provided.
Click on the hyperlink provided in this e-mail to access the Complete the NetDMR Password
Reset Request page.
9. Answer the security question.
33
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
10. Enter a new password that is different than the last 10 passwords you specified for your
account.
11. Enter the new password again.
2.10. Disabled Accounts
A locked account is different than a disabled account. A user's account is disabled if he/she
enters their password incorrectly three times or enters three incorrect responses to security
questions.
If a user disables their account by entering their password incorrectly three times, the user can
enable their account and request a password reset by responding correctly to a security question,
then logging into NetDMR. If a user forgets the responses to his/her security question, he/she
must contact the Regulatory Administrators directly and request a reset of the security questions.
12. Click on
Submit
34
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Chapter 3. Regulatory Administrators Procedures
Regulatory Administrators manage a single NetDMR Instance containing DMRs for one State
agency, one Tribe, or one EPA Region comprising multiple states. A System Administrator
must assign one or more Regulatory Administrators for the Instance when it is created, then
Regulatory Administrators can approve other new Regulatory Administrators requests from
Regulatory Users using the Manage Access Request functionality.
Regulatory Administrators are responsible for:
> managing Regulatory User requests and user accounts
> assisting Permit Administrators with managing External Permittee and Data Provider
User requests
> requesting basic permit and empty slot DMR requests from ICIS
> viewing, validating, repudiating and downloading CORS
> viewing permits, users, suspect and raw logs, network activity
> requesting access to view partially completed DMRs to assist Permittee and Data
Providers as needed.
Figure 3-1 shows the Regulatory Administrators Home page. Details for Regulatory
Administrators on how to perform tasks using this page are provided in the next sections.
35
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
"X'
W«DMR
« UU'i>»U« jnv IMml l>»a»
Tennessee
1 ManaQ.?
search
View
Validate
1 Instance
CORs
Parrots
Raw lo-oi
COR#
1 Agreements
Uters
NtfWOfk ACtlV«V
OMRS
' Search: CORS Permit ID Users
CORs
Permit ID:
Signatory Tirsl Name: f
Signatory Last Name: |~
Facility Name: f
VSl/M
VilJO*
2/23/09
a, 11/w
Monitoring Period j—
[nd Date Range:
3T
~ c
' PHidinq Access Requests
CiKk any undartinad column (HI* to ton tk* Ijutiln ima in atcaeirimg or d«w>ilinf by tfio iitforrtuMawi in that ceAjmn, |f you dick v>«» All or Viw* »arl>*l, Mia labia will ba
dttpiayad with tl>» da/aull tort oidar apptod and any «atad chatfc bona* wJI t>a «•«< to uiuunlataad.
PondUtq Arrows Raqumtf - Internal
Pending Acceu Ruquevti - External Signatory
One ftaquwt found
WlWI IP >««l»IHw«
.•'•ti>«)na.vii< TN0CO29M USCOE-OAK RIDW Y12 PLT J/WW
Peridinq Access Requests - Externa]
Showing • at • Raquattt
«ir»ig^9nw4.eom TWOOOiSM u»DO«-C
nM^mnlaeemadmm TmaoCT+M USDO« OAK *
ir»la5^*njit corn TI»00»»B
THOOOJ»«I USOCWOAK *
TM3C2SS8 USDCt-OAK «
Figure 3-1: Regulatory Administrator Home Page
Up to ten User Requests will be displayed by default in each of these tables. If more than 10
User Requests are associated with this permit or have pending requests, you can navigate
through the list by:
> Clicking a page number link to go to a specific page of results.
it Clicking the green forward arrow to display the next page of User Requests.
> Clicking the green back arrow to view the previous page of User Requests.
> Clicking the double green forward arrow icon to display the last 10 User Requests.
> Clicking the double green back arrow icon to display the first 10 User Requests,
it Clicking the View All link to show all Users in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
Users at a time.
You can click any underlined column title to sort the User Requests in ascending or descending
order by the information in that column.
36
-------
NetDMR Regulatory Authority User Guide
^etDMR* Draft - May 1, 2009
3.1. Managing Access Requests
You can approve or deny NetDMR access requests for your Instance using the Manage Access
Requests functionality on the Regulatory Administrators Home page. The types of access
requests you can approve or deny include:
> Signatory Access Requests
> Regulatory Administrators Access Requests
> Regulatory User View Access Requests
You can also approve or deny Permittee and Data Provider Edit and View requests; however
these requests should only be managed if a Permit Administrator asks for your assistance.
If a Permittee or Data Provider needs assistance filling out a DMR, you can request "Partial
DMR" access to the DMR from your Request Access page. However, only Permit
Administrators may approve partial DMR requests.
When managing access requests, details on the User can be viewed on the View User Account
Details page shown in Figure 3-2 by clicking on - in the View Details column next to the User.
Click on Edit to modify the user's account information or click on Cancel to return to the
Pending Access Requests tables of the Regulatory Administrators Home page.
ime | My Account | Request Acct
~
NetDMR
User:ia4mi, Internal User
Michigan - MI
Manage
Search
View
Validate
Access Requests
CORs
Suspect Logs
CORs
® Session Lockout Timer: 29:41
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
^ View User Account Details
General Account Information
First Name
Last Name
User Name
Email
Telephone Number
Organization
User Type
Selected Security Questions
Edit] Cancel |
Kittle
pmt4mi
kittle.alison@epa.gov
202-564-6233
U.S. EPA
External
What was your high school mascot?
What is the name of the high school you attended?
What is your favorite city?
What is the name of the street where you grew up?
Roles
Click any underlined column title to sort the table rows in ascending or descending order by the information in that column. If you click View All or View Partial, th
table will be displayed with the default sort order applied.
One Role found
Permit ID Facility Name Access Rights Access Status
MI0054003 ISABELLA CO LANDFILL View Pending
Signatory Role History
No results.
Figure 3-2: View User Account Details Page
37
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
T
Signatories should not be
approved until your Agency has
received the Subscriber Agreement.
3.1.1. Approve/Deny Signatory Requests
In order to submit DMRs to ICIS using NetDMR, a
Permittee must print off the Subscriber Agreement
form generated by NetDMR at the time they
request a Signatory role for one or more permits,
sign the Subscriber Agreement in ink, and mail it to
your Agency. You should never approve a
Signatory request before you have the requestor's
signed Subscriber Agreement.
There may be times when you have a change in your Agency's mailing address or the person
who should receive Subscriber Agreements at your Agency is reassigned. The System
Administrator can make these changes to your Instance so future Subscriber Agreements will
display the new mailing information for new Signatory requests in your Instance.
If one of your Signatories changes their name they will need to change their name in NetDMR
and print off a new Subscriber Agreement with their new name displayed, then sign and mail it
into your Agency.
Once you have a signed Subscriber Agreement, follow the directions below to approve or deny
permit signatory access requests from Permittee and Data Provider users:
1. Log into your NetDMR account as a Regulatory Administrator. The Regulatory
Administrators Home page will be displayed with pending Internal and External User
Access Requests displayed.
> If you are already logged in as a Regulatory Administrator and the Access Requests
are not displayed, click on Access Requests under the Manage tab
> OR
> Search by Permit ID (See Section 3.6 for instruction of searching permits).
2. Scroll down to the Pending Access Requests - External Signatory table at the bottom
of the page.
3. Click on p in the Respond to Request column next to the desired user. You can click
any underlined column title to sort the users in ascending or descending order by the
information in that column. The Process Subscriber Agreement page is displayed:
ome | My Account | Request Access | Help | Logout
A
NetDMR
Manage
Search
View
1 Validate^
Access Requests
CORs
Suspect Logs
CORs
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
[
Tennessee
Process Subscriber Agreements
Subscriber Agreement
Number:
©2008 NetDMR
Submit |
38
-------
NetDMRRegulatory Authority User Guide /fckS
Draft - May 1, 2009 \rrJ
4. Enter the Subscriber Agreement Number for this permit and click Submit. The Process
Subscriber Agreement Details page (Figure 3-3) is displayed:
£ Intvmal U*«r
...
CA-HI-NE-SD-UT
NefDMR
Manage
Search
View
validate M
Access Requests
CORs
1 jspect Logs
COfts
Instance
Permits
Raw Logs
Agroamonts
Niitwurk Activity
DMKs
Process Subscriber Anreement Details
Subscriber Agreement
Number
rlrst Name
A&fon
Last Name
kMr
User Name
pmMhi
Organization
U.S. CPA
Email
alison kittleVvahao.com
Phone
202-SM-<>2W
Print jubicriber Agreement
* Signatory Requests
Clirlf «ny «inHftriiiwri column titfe to ^ort th« tnhlr rnws m or rtrsnrnding netir.r hy thr infnrmatinn «n that mlumn. If fan dink Virw All nr Vi>w P.i-ti.il, rt
table will lie di^plared wilti the default sort urOet applied.
!>#>wwii+ Il> F.*rdMy flam* Facility Rplatf To approve signatory access for the user, locate the row for the permit of interest
and click on r to place a check the
box under the Approve column.
> To deny signatory access for the user,
locate the row for the permit of
interest and click on r to check the
box under the Deny column. After
denying an access request, you must
enter a reason in the text box under the
Comment column for that permit.
The electronic version of a
Subscriber Agreement is not a
substitute for the original, signed
Subscriber Agreement mailed in
by a Signatory.
You may enter a comment when
approving a request, but you must
enter a comment when you deny a
request.
39
-------
NetDMRRegulatory Authority User Guide /fckS
Draft - May 1, 2009 \rrJ
8. Click on Save to save your changes, or click on Cancel | cancel your changes and
return to the Regulatory Administrators Home page.
9. Review your access changes on the Confirm Subscriber Agreement Responses page to
verify they are correct:
Manage
Search
View
Validate ^ 1
Access Requests
CORs
Suspect Logs
CORs
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
Confirm Subscriber Agreement Responses
Subscriber Agreement
C5816f8e-d62e-4a30-ab5f-6e9bfb6e5000
Number
First Name
Alison
Last Name
Kittle
User Name
pmt4hi
Organization
U.S. EPA
Email
alison_kittle@yahoo.com
Phone
202-564-6233
* Responses to Signatory Requests
Click any underlined column title to sort the table rows in ascending or descending order by the information in that column. If you click View All or View Partial, tl
table will be displayed with the default sort order applied.
One Request found
Permit ID Facility Name Facility Address Relationship Authorized By Status Comment
Confirm | Cancel |
10. Click on Ccmfirnn to save your changes, or click on Cancel I to cancel your changes
and return to the Process Subscriber Agreement Details page.
11. The Subscriber Agreement Confirmation page will appear:
Home | My Account | Request Access | Help | Logout 4 User:ia4hi, Internal User
A CA-HI-NE-SD-UT
AfetDMR
Manage
Access Requests
Instance
Agreements
Search
CORs
Permits
Users
View
Suspect Logs
Raw Logs
Network Activity
DMRs
Validate
CORs
^ Session Lockout Timer: 29:56
Subscriber Agreement Confirmation
; ^ The requests have been processed.
12. You will be returned to the Regulatory Administrators Home page and the Users you
approved or denied will no longer appear in the Pending Access Requests - External
Signatory table.
Instead of typing in a Subscriber Agreement Number you can copy it from the electronic version
of the requestor's subscriber agreement and paste it into the Subscriber Agreement Number on
the Process Subscriber Agreements page. To do this, search for the permit and click on the
printer icon in the Subscriber Agreement column of the requestor within the Users and Roles
table. The Subscriber Agreement will appear in a separate window with the Subscriber
Agreement Number listed in the upper right corner.
40
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
3.1.2. Managing Regulatory User Access Requests
Regulatory User staff at your Agency with a View role may request to become a Regulatory
Administrator to your NetDMR Instance. Follow the directions below to approve or deny access
requests from your Regulatory Users.
1.
2.
3.
4.
5.
6.
Log into your NetDMR account as a Regulatory Administrator. The Regulatory
Administrators Home page will be displayed with pending Internal and External User
Access Requests displayed.
> If you are already logged in as a Regulatory Administrator and the Access Requests
are not displayed, click on Access Requests under the Manage tab
OR
> Locate the user of interest in the table (see Section 3.7 for instructions on Searching
Users). You can click any underlined column title to sort the users in ascending or
descending order by the information in that column.
Scroll down to the Pending Access Requests - Internal table at the bottom of the page
To approve signatory access for the user, locate the row for the permit of interest and
click on r to checkmark it under the
Approve column.
To deny access for the user, locate the row
for the permit of interest and click on r
to checkmark it under the Deny column.
After denying an access request, you must
enter a reason in the text box under the
Comment column for that permit.
Click on Save to save your changes, or
click on Cancel I to cancel your changes and return to the Regulatory Administrators
Home page.
Review your access changes on the Confirm Access Requests page to verify they are
correct:
You may enter a comment when
approving a request, but you must
enter a comment when you deny a
request.
~
NetDMR
I K.r, |
Michigan - MI
Mon«ue
tOHi MqiltW
tjsoc^t LOOS
Nocwofk Actmtr
Validate
J Confirm Access Knqunr.tr.
* - Fxlnrnnl
7. Click on 5ave I. to save your changes, or click on Cancel I to cancel your changes.
8. You will be returned to the Regulatory Administrators Home page and the Users you
approved or denied will no longer appear in the Pending Access Requests - Internal
table.
41
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
3.1.3. Managing External Permittee and Data Provider User Access
Requests
If requested by a Permit Administrator, you can approve or deny Permit Administrator role
requests, and Permittee and Data Provider Edit or View role requests. Note that these requests
should only be managed if a Permit Administrator requests assistance.
Follow the directions below to approve or deny Permittee and Data Provider User role access
requests:
1.
2.
3.
4.
Log into your NetDMR account as a Regulatory Administrator. The Regulatory
Administrators Home page will be displayed with pending Internal and External User
Access Requests displayed.
> If you are already logged in as a Regulatory Administrator and the Access Requests
are not displayed, click on Access Requests under the Manage tab
OR
> Search by Permit ID (see Section 3.6 for instructions on searching permits).
Scroll down to the Pending Access Requests - External table at the bottom of the page
To approve signatory access for the user, locate the row for the permit of interest and
click on I- to checkmark it under the
Approve column.
To deny access for the user, locate the row
for the permit of interest and click on r
to checkmark it under the Deny column.
After denying an access request, you must
enter a reason in the text box under the
Comment column for that permit.
5.
6.
You may enter a comment when
approving a request, but you must
enter a comment when you deny a
request.
Click on Save to save your changes, or
click on Cancel I to cancel your changes and return to the Regulatory Administrators
Home page.
Review your access changes on the Confirm Access Requests page to verify they are
correct:
Michigan - MI
WrI)
Confirm Access RRquor.tr.
Pawling Ar.r.»« Roqiunt*. - Fxtnrnitl
W» tiw" found
Save Cancel
7. Click on 5ava I. to save your changes, or click on Canc01 I to cancel your changes.
8. You will be returned to the Regulatory Administrators Home page and the Users you
approved or denied will no longer appear in the Pending Access Requests - External
table.
42
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
3.2. Managing Your NetDMR Instance
You can use the Manage Instance page (Figure 3-4) to view or customize the following settings
associated with your Instance:
? General Information
3* Agency Mappings
> System Administrator(s)
> Email Messages
> DMR Submission and Attachment Notification Recipients
> News and Notices
>me | My Account | Request Access | Help | Logout
~
NeiDMR
s User:iladminuser, Internal User
Illinois - IL
Manage
Search
View
1 Validate"!
Access Requests
CORs
Suspect Logs
CORs
w
™ Session Lockout Timer: 29s08
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
^ Manage Instance
Edit Instance |
General Information
Instance Name
Time Zone
Number of secret questions a
user must answer:
Frequency of Password Change:
Allow multiple signatory requests in a
subscriber agreement?
Are Permit Administrators required to
have signatory roles for their permit?
Instance Status*
Submittal Postal
Code*
Contact Name
Contact Email
Contact Phone
Illinois - IL
US/Eastern
3
12 months
No
No
On-Line
XX
Nasrin Lescure
tonasrin@y ahoo.com
202-564-5013
Agency Mappings
Permit Prefix Agency Type Codes
IL TR6, EP6, TR3, ST6
System Administrator(s)
Name Affiliation Email address Phone
Alison Kittle OECA kittle.alison@epamail.epa,gov 202-564-6233
Bob Jacoby ERG systemadmin@circadianlabs.com 512-407-1835
Custom Email Message
Message to append to end of all instance emails test message, delete me later...
DMR Submission and Attachment Notifications
Email addresses that are sent submission acknowlegements any time a DMR is submitted for this instance:
No email addresses entered.
Custom News and Notices
The following News/Notice items are displayed on the NetDMR Login Page.
News / Notices
2- NetDMR will be down on 7/31/2008.
Release 3 testing started,
Figure 3-4: Manage Instance Page
43
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
3.2.1. View Instance
You can view detailed information about your NetDMR Instance by clicking on the Instance
option under the Manage menu. The Manage Instance page will display information about
your Instance as described in the next subsections.
3.2.1.1. General Information Details
The General Information section displays the information that you specified when you created
this Instance, including:
> Instance Name.
> Time Zone.
> Number of secret questions a user must answer.
> Password change frequency requirements.
> Whether the Instance allows multiple signatory requests in a Subscriber
Agreement
> Whether Permit Administrators are required to have signatory roles for their
permits.
> Current status of the Instance.
> Postal code to be used for submittals.
> Instance contact information.
3.2.1.2. Agency Mappings
Refer to Appendix D for detailed information on Agency Maps. The Agency Mappings table on
the Manage Instance page displays the selected Permit Prefixes and associated Agency Type
Codes. Up to six Agency Maps will be displayed by default. If more than six Agency Maps are
associated with your Instance, you can navigate through the list by:
> Clicking f' to display the next page of Agency Maps.
> Clicking -J to view the previous page of Agency Maps.
> Clicking f - to display the last 6 Agency Maps.
> Clicking ^ to display the first 6 Agency Maps.
> Clicking the View All link to show all Agency Maps in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 6
Agency Maps at a time.
You can click the Permit Prefix of Agency type code column title to sort the Agency Mapping
rows in ascending or descending order.
3.2.1.3. System Administrators
The System Administrators table displays the User Name, Affiliation, Email Address, and Phone
Number of each System Administrator.
44
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
3.2.1.4. Custom Email Message
The contents of the message to be appended to all emails sent to accounts by the NetDMR
regarding the Instance.
3.2.1.5. DMR Submission and Attachment Notifications
A table listing email addresses that are to be sent
submission acknowledgements any time a DMR
is submitted by NetDMR on behalf of the
Instance and whether attachments were included
with the DMR.
3.2.1.6. Custom News and Messages
A table containing one or more news items
displayed on the home page of the Instance.
3.2.2. Edit Instance
As a Regulatory Administrator you can set up or change the following settings for your Instance:
if Edit Instance
Edit the instance settings below, Note that some settings are shown for informational purposes and can only be edited by your System Administrator.
General Information
Instance Name
Illinois - IL
Time Zone
US/Central
Number of secret questions a
4
user must answer:
Frequency of Password Change:
12 months
Allow multiple signatory requests in a
No
subscriber agreement?
Are Permit Administrators required to
|no _^J
have signatory roles for their permit?
Instance Status*
On-Line
Submittal Postal Code*
XX
Contact Name
Nasrin Lescure
Contact Email
tonasrin@yahoo.com
Contact Phone
202-564-5013
Agency Mappings
Permit Prefix Agency Type Codes
IL TR3 , EP6 , ST6
, TR6
System Administrator
Name Affiliation
Email address
Phone
Alison Kittle OECA
kittle.alison@epamail.epa.gov
202-564-6233
Bob Jacoby ERG
systemadmin@circadianlabs.corr
l 512-407-1835
Cindy Cheng BAH
dmr_bah03@yahoo.com
703-377-4874
Kara TestAccount4 TCEQ
ste e rs d v @ tee q, state. tx. u s
512-239-5180
Michael Beatty TCEQ
mbeatty@tceq. state.tx. us
512-239-5118
Michael Beatty TCEQ
netdmrtxtst@gmail.com
512-239-5118
NetDMR Userl Agency
netdmr.userl@erg.com
703-633-1600
Srikala Kanumuru BAH
kanumuru_srikala@bah, com
703-377-8620
System Admin ERG
netdmr.user20@erg.com
555-555-5555
carol malcolm TCEQ
carol. malcolm@tceq, state.tx. us
555-555-5555
katie Connolly erg
katie. connolly@erg.com
858-888-8888
nasrin lescure epa
netdmr@gmail.com
202-564-5013
netdmr userl5 IT Dept
netdmr. userl5@erg. com
703-444-4444
45
If a recipient is not receiving DMR
submission and attachment notifications
and their address in this table is accurate,
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Custom Email Message
Message to append to end of all instance emails
1
j
DMR Submission and Attachment Notifications
Email addresses that are
ent submission acknowlegements any time a DMR is
submitted for this instance.
Enter another email
1
Add |
address:
User Email Delete
No ,m,il ,dd„,,., present
Custom News and Notices
News/Notice
News and Notices
Order
News/Notices
Delete
ffl
Release 3 testing started.
9 P
2- NetDMR will be down on 7/31/2008.
M
This is a test
¦
Save | Cancel |
Figure 3-5: Edit Instance Page
> Whether Permit Administrators are required to have signatory roles for their permits
> Email Messages
> DMR Submission and Attachment Notification Recipients
> News and Notices
To do this, access the Edit Instance page shown in
Figure 3-5 by:
1. Logging into your NetDMR account as a
Regulatory Administrator.
2. Clicking on Instances under the Manage tab.
3. Clicking on Edit Instance |
Any changes you make must be confirmed and saved.
When all changes have been made, follow these directions to store your edits:
1. Click on Save I to proceed with the changes, or click on Cancel | to return to the
Manage Instance page.
2. Click on Save I to finalize your changes and return to the Manage Instance page with
this message:
i -i
I Your Instance has been updated.
or click on '-ancel I to return to the Manage Instance page.
Some Instance settings displayed on
the Edit Instance page can only be edited
by the System Administrator and are
displayed to the Regulatory Administrators
for informational purposes.
46
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
3.2.2.1. Editing General Instance Information
In the General Information section, you can modify whether all Permit Administrators must also
be Signatories or not. To change this setting:
> Click on the Are permit administrators required to have signatory roles for
their permit? pick list and click on "Yes" to have NetDMR automatically assign
a Signatory role to each Permit Administrator role request that you approve, or
click on "No" to have NetDMR assign only a Permit Administrator role when you
approve them.
3.2.2.2. Editing the Custom Email Message
NetDMR automatically generates and sends emails to users for a variety of actions, including
completing the account creation process, when user access rights are granted or denied, and after
requesting to reset a password. You can create a message to append to the end of each email in
the Custom Email section.
To create this message or edit an existing message, enter the text directly into the box that is
provided:
Message to append to end of all instance emails
test message, delete me later... j*j
m
For example, you may want to provide more specific contact information in the event of a
problem:
"Please email netdmr a state.gov or call the helpline at 800-555-1234for assistance."
3.2.2.3. Editing DMR Submission and Attachment Notifications
You can specify a set of recipients that will be notified by email each time a DMR is submitted
for this Instance and whether attachments were included with the DMR:
Email addresses that are
sent submission acknowlegernents any time a DMR is submitted for this instance.
Enter another email
jrubin.steven@epa.gov Add J
address:
User Email Delete
rubin. steven@epa. gov :jjf
steuen_rubin@epa, gov $$
If one or more emails have already been specified a table will be displayed under this box
showing existing addresses. Otherwise, the table will appear after the first new email address is
added.
47
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
> To add a recipient to the table, type the email address of the recipient in the Enter
another email address box and click on Add I. If the email address already exists it will
not be saved and an error message will appear.
> To remove an email address from the list:
1. Click on in the Delete column of the row for that email address. A confirmation
window will appear:
Microsoft Internet Explorer
m
ff You have requested to delete this email address.3elect OK to proceed or Cancel to e:at without making
any changes.
OK
Cancel
2. Click on 0K" to remove the email address, or click on Cancel t0 keep
the email recipient in the table.
3.2.2.4. Edit Custom News and Notices
You can create one or more News and Notices that will be displayed on the NetDMR Login page
for your Instance:
The following News/Notice items are displayed on the NetDMR Login Page,
News/Notice
Save and Add Another
~3
d
News and Notices
Order
News/Notices
Delete
o-
Release 3 testing started.
H
o &
2- NetDMR will be down on 7/31/2008.
n
If one or more news items or notices have already been specified a table will be displayed under
this box showing existing items. Otherwise, the table will appear after the first new item is
added.
> To add a new item, type the text for the news item or notice in the News/Notice box and
click on save and Add Another | news item already exists it will not be
saved and an error message will appear: News/Notices cannot be repeated.
> To change the order of items in the table, click on O next to an item to move it under the
item below it, or click on & next to an item to move it over the item above it.
> To remove an item from the list:
1. Click on M in the Delete column of the row for that item. A confirmation window
will appear:
48
-------
KNetDMfq
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Microsoft Internet Explorer
m
f You have requested to delete this news.Select OK to proceed or Cancel to exit without making any
changes.
OK
Cancel
2. Click on
OK
to remove the item, or click on
Cancel
to keep the item
in the table.
3.3. Manage Agreements
After you complete your internal review of a hard copy Subscriber Agreement mailed to you by
a Signatory, you can approve or deny the Signatory requests using the Manage Agreement
functionality.
To respond to the signatory requests, follow these steps:
1. Log into your NetDMR account as a Regulatory Administrator.
2. Click on Agreements under the Manage tab. The Process Subscriber Agreement page is
displayed:
rcAccess | Half | Lt|(H
~
JVt-rDMR
Manage
Search
View
Validate
Acarv. Rinjtiir.l'.
CGR^
Suspect t.ogr.
COR;;
instance
Permits
Kaw Logs
Aareemervts
Network Activity
OMRS
Uicn lladminuser. Internal
Illinois - IL
Process Subscriber Agreements
Subscriber Agreement |
1. Enter the Subscriber Agreement Number on the signatory request you are reviewing. The
Subscriber Agreement number can be found in the upper right corner of the agreement.
2. Click on submit .
3. If you do not enter the Subscriber Agreement Number or enter an invalid Subscriber
Agreement Number, an error message will be displayed:
4 There were errors processing your request.
Enter a valid Subscriber Agreement Number.
4. The Process Subscriber Agreement Details page is displayed:
49
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
CA-HI-NE-SD-UT
JvefDMR
Search
CORs
Pernwts
Manage
xsss Requests
Instance
View
jsoect Logs
Logs
fliiivily
Process Subscriber Agreement Details
Subscriber Agreement
c jU10fUe-i:e-4a.JU-ab'jf-t>eSbfb0e-j0U0
Number
Tlrst Name
AEton
Last Name
KMn
User Name
pmMhi
Organization
U.'i. £PA
Email
alison kittfe9vahoo.com
Phone
20i2-Sb*-4i2Y>
Print "jubscriber Agreement
^ SigriuLuiy Requests
Clirii an - underlined uulumri title tu soil the table ruwt hi asuendiriv or desuendwy urder by the ml urination in tliet uilumn, II y
ju diuk Vi
w All ur View
tnhle will lift displayed with the default «irt nritar Applied.
One Request luund
Permit ID Facility N«nt Facility Address Relationship Authorized By Approve Deny C omment
HI0000019 KAHE 4CMERXTINQ STATION 89 900 FARRINQTOH HWVW«AK« H], K792 Facility 3*11 r—
r I
a
1
si
13. If you would like to view an electronic version of the
Subscriber Agreement and Agreement number, click o
Print Subscriber Agreement | Note that the
Agreement that you see will differ from the same
document signed by the Signatory if you changed any
of your Subscriber Agreement contact information for
your Instance recently. Because this electronic
document may slightly differ from the original and is
missing the Signatory's signature it cannot be used as ;
substitute for the original.
14. On the Process Subscriber Agreement Details page, scroll down to the Signatory
Requests table and locate the permit that you would like to approve or deny for this user.
> To approve signatory access for the user, locate the row for the permit of interest
and click on r to place a check the
box under the Approve column.
> To deny signatory access for the user,
locate the row for the permit of
interest and click on r to check the
box under the Deny column. After
denying an access request, you must
enter a reason in the text box under the
Comment column for that permit.
15. Click on Save to save your changes, or click on Cancel | cancel your changes and
return to the Regulatory Administrators Home page.
16. Review your access changes on the Confirm Subscriber Agreement Responses page to
confirm that they are correct:
>n
The electronic version of a
Subscriber Agreement is not a
substitute for the original, signed
Subscriber Agreement mailed in
by a Signatory.
You may enter a comment when
approving a request, but you must
enter a comment when you deny a
request.
50
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Manage
Search
View
Validate
Access Requests
CORs
Suspect Logs
CORs
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
Confirm Subscriber Agreement Responses
Subscriber Agreement
C5816f8e-d62e-4a30-ab5f-6e9bfb6e5000
Number
First Name
Alison
Last Name
Kittle
User Name
pmt4hi
Organization
U.S. EPA
Email
alison_kittle@yahoo.com
Phone
202-564-6233
* Responses to Signatory Requests
Click any underlined column title to sort the table rows in ascending or descending order by the information in that column. If you click View All or View Partial, tl
table will be displayed with the default sort order applied.
One Request found
Permit ID Facility Name Facility Address Relationship Authorized By Status Comment
Confirm | Cancel |
17. Click on CQnfirnn to save your changes, or click on Cancel I to cancel your changes
and return to the Process Subscriber Agreement Details page.
18. The Subscriber Agreement Confirmation page will appear:
Home | My Account | Request Access | Help | Logout 4 User:ia4hi, Internal User
A CA-HI-NE-SD-UT
NetDMR
Manage
Access Requests
Instance
Agreements
Search
CORs
Permits
Users
View
Suspect Logs
Raw Logs
Network Activity
DMRs
Validate
CORs
^ Session Lockout Timer: 29:56
Subscriber Agreement Confirmation
; ^ The requests have been processed.
19. You will be returned to the Regulatory Administrators Home page and the Users you
approved or denied will no longer appear in the Pending Access Requests - External
Signatory table.
3.4. COR Functionality
All Regulatory Users can search, view, and download CORs. Only Regulatory Administrators
can repudiate, validate, and verify the signature for CORs. When a Signatory signs and submits a
DMR, NetDMR creates a unique COR for that DMR. The COR is defined in the Cross-Media
Electronic Reporting Rule as follows (70 FR 59880 October 13, 2005, specifically Subpart A,
Section 3.3):
"Copy of record means a true and correct copy of an electronic document received by an
electronic document receiving system, which copy can be viewed in a human-readable
format that clearly and accurately associates all the information provided in the
electronic document with descriptions or labeling of the information. A copy of record
includes:
(1) All electronic signatures contained in or logically associated with that document;
(2) The date and time of receipt; and
51
-------
KNetDMfq
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
(3) Any other information used to record the meaning of the document or
the circumstances of its receipt. "
Each NetDMR installation has an RSA 1024 bit asymmetric key that is used for digital
signatures. NetDMR will use its private key to digitally sign the CORs. The signature will be
executed against a message digest created from the COR using the FIPS 140-2 hashing
algorithm. For details on this process go to these web sites:
> Federal Information Processing Standards (FlPS)-approved algorithms for generating
Message Digest: http://www.csrc.nist.gov/CrvptoToolkit/tkhash.html
>• FlPS-approved algorithms for generating/verifying digital signatures:
http://www.csrc.nist.gov/CrvptoToolkit/tkdigsigs.html
3.4.1. Search CORs
Regulatory Administrators can search, view, download, repudiate and validate CORs by
searching on any combination of Permit ID, Monitoring Period End Date Range, Signatory
Name and e-mail Address, Facility Name, Permitted Feature Number, Discharge Number,
Discharge Description, Confirmation Number, and if the COR has been repudiated.
To do this:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account. The Regulatory Administrators Home page will be displayed.
OR
While logged into NetDMR, click on CORs in the gray Search tab.
2. The COR Search page will be displayed:
Net I) MR
M i'h-i;.r
instance
View
tptXt LO04
Raw Logi
Network Actrvrtv
DNfti
q, search CORs
Search for CORs usirvs any cwnbinawn of search orxerta. For text arm numeric information,
you c.in otiN'r full or p;irti
Signatory I net Nam*
Signatory ll«»r
Sanatory Email
Facility Name
d f eature
I H^liartK- Number
Discharge Description
Confirmation Number
Include 1
cote?
':!ir
Search | Canari |
52
-------
0NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Enter data into one or more of the fields on this page using these guidelines:
> Permit ID - Enter all or a portion of the permit ID. For example, entering a permit
ID of 'al' would return CORs for all Alabama permits.
> Signatory First Name - Enter all or a portion of the signatory first name. For
example, entering a first name of'jo' would return 'John' and 'Joanne'.
> Signatory Last Name - Enter all or a portion of the signatory first name. For
example, entering a last name of'mi' would return 'Smith' and 'Miller'.
> Facility Name - Enter all or a portion of a facility name. For example, entering a
'co' would return 'Company A' and 'ABC Incorporated'.
> Monitoring Period End Date Range - Enter the end date for the monitoring period
end date range using the mm ddyyyy format or select the appropriate start and end
dates from a calendar by clicking the calendar icon "°1 next to each text box.
Clicking I Advanced Search jn Search CORs section will open an expanded Search CORs
page and display the following additional search criteria:
> Signatory User Name - Enter all or a portion of the signatory user name. For
example, entering a last name of'mi' would return 'JaneSmith' and 'John.Miller'.
> Signatory Email - Enter all or a portion of a signatory email address. For example,
entering a last name of'mi' would return 'Jane.Smith@FacilityA.com' and
'John.Miller@FacilityB.com'.
> Permitted Feature Number - Enter all or a portion of a permitted feature number.
For example, entering 'S' would return permitted features 'S' and 'SUM'.
> Discharge Number - Enter all or a portion of a discharge number.
> Discharge Description - Enter all or a portion of a discharge description. For
example, entering a 'storm' would return 'Storm Water' and 'Storm Water Action
Levels'.
> Confirmation Number- enter the complete submission confirmation number for the
DMR/COR you wish to view (NetDMR generates a unique confirmation number for
your submission).
> Include Repudiated CORs? - click to check the box if you would like to include
repudicated CORS that match your search criteria in your search results.
3. Click on Sutimit I to display the results or Cancel I to return to the Regulatory
Administrators Home page. CORs that match your criteria are displayed on the COR
Search Results page:
53
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Home | My Account | Request Access | Help | Logout
~
NetDMR
Illinois - IL
Search
View
CORs
DMRs
Permits
Users
COR Search Results
OlRefine Search ^New Search ^Download Selected
CORs 1 through 2 of 2
Facility Permit ID Monitoring Permitted Discharge Discharge Submitted Signatory Confirmation # Repudiated? View Downloa<
LEAF
RIVER
STP,
VILLAGE
LEAF
RIVER
STP,
VILLAGE
IL0029475 08/31/08 INF
IL0029475 09/30/08 INF
5a5ee713-daa3-
44d6-baf3-
f5afc69ad92c
06eblf05-b5e7-
4c97-8a5d-
b253b6613fd3
Figure 3-6: COR Search Results Page
3.4.2. Viewing COR Search Results
Up to ten CORs will be displayed by default in the COR Search Results page. If more than 10
CORs are returned, you can navigate through the list by:
> Clicking a page number link to go to a specific page of results.
> Clicking the ly green forward arrow to display the next page of CORs.
> Clicking the J green back arrow to view the previous page of CORs.
> Clicking the f • double green forward arrow icon to display the last 10 CORs.
> Clicking the ^ double green back arrow icon to display the first 10 CORs.
> Clicking the View All link to show all CORs in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
CORs at a time.
You can click any underlined column title to sort the CORs in ascending or descending order by
the information in that column.
3.4.3. Refining the COR Search
If there are more CORs returned than you expected, click on Refine Search to display a search
page where you can narrow your search using Signatory, discharge, confirmation and repudiated
COR criteria:
54
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Permit ID |tn%
Monitoring Period End Date Range f j-g] |
(mm/dd/yyyy)
Signatory First Name
Signatory Last Name
Signatory User Name
Signatory Email
Facility Name
Permitted Feature Number
Discharge Number
Discharge Description
Confirmation Number
Include repudiated CORs? |~~
Search | Close |
3,4.4. Performing a New COR Search
To view another set of CORs, click on New Search to display a Search page and re-enter data
search using Signatory, discharge, confirmation and repudiated COR criteria:
Permit ID
[tn%
Monitoring Period End Date Range
11 1—
r*°| (mm/dd/yyyy)
Signatory First Name
1
Signatory Last Name
1
Signatory User Name
1
Signatory Email
Facility Name
1
Permitted Feature Number
1
Discharge Number
1
Discharge Description
1
Confirmation Number
1
Include repudiated CORs?
r
Search | Close j
3.4.5. Downloading a COR
The COR generated by NetDMR when a DMR is signed and submitted is a master COR zip file
that includes the following:
> All of the user-provided data for the DMR
5^ The legal certification statement displayed to the user during signing process.
> The public key certification in the form of Hashes of any files that were attached
to the DMR. NetDMR uses FIPS 140-2 to generate all hash values. This is the
current approved FIPS certified standard.
S* Metadata about any attached files (e.g., name, type, etc.).
55
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
> A submission receipt, which includes the following:
¦ The DMR submission confirmation number
¦ The hash of the data document
¦ The date and time of the DMR submission
¦ Identifying information from the signing account, including: the user's full
name, account login, email address, and hashed password (at time of
signing), and IP address of the submitting computer.
The first step in viewing downloaded CORs is to open the master COR file that you downloaded
extract all zipped file contents into a directory of your choosing. Each of these extracted zipped
files is a COR. Open one of these files and extract the three main files along with any
attachments that were included with the DMR. The three main files are as follows:
> dmrSubmission.xml - this file contains all of the user entered data for the DMR
submission.
> DischargeMonitoringReport.xsl - this is a stylesheet that will format the
dmrSubmission.xml file to look like the NetDMR DMR View page for easy
viewing when viewed in a web browser.
> submissionReceipt.xml - this file documents when the DMR was submitted, by
whom, and with what electronic hashing algorithm.
It is easy to view the DMR data is to view the
dmrSubmission.xml file using a web browser such as
Microsoft Internet Explorer or Mozilla Firefox. When
opened in this way, the web browser will automatically
format the data based on the stylesheet file
dischargeMonitroingReport.xsl. Note that the web browser
will NOT be able to locate the stylesheet if the user does not
first unzip all of the contents of the zip file into the same
directory. The user may choose to also view the XML data
directly in any text editor of their choice.
Any attachments that were uploaded for the DMR prior to signing will also be included in the
COR files. These files have the names supplied by the person who uploaded them and can be in
almost any format. NetDMR will not convert these files so it is up to the user to figure out how
best to work with these files.
CORs are downloaded from the COR Search Results page. To download these files:
1. Click on l~~ within the row for the COR desired to display a checkmark in the box, then
click on ^Download Selected jf yOU did not select a COR, this window will appear to
remind you to select a COR:
f
Be sure to extract
dmrSubmission.xml and
dischargeMonitoringReport.xslfrom a
COR zippedfile into the same
directory.
56
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Microsoft Internet Explorer
El
You must select, at least one COR. Click in the box in the Include in Batch COR Download column to
select a COR and then click Download Checked CORs again.
OK
Click on
OK
to return to the Search COR Results page and repeat Step 1.
2. You will be prompted to save the CORs as a zipped file:
2
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Download complete
-! : xi
¦a
Download Complete
...cor_zips_1238110562597.zip from netdmrtest.epacdx.net
Downloaded: 10.3KB in 1 sec
Download to: ... \netdmr_cor_zips_l 238110562597. zip..,
Transfer rate: 10.3KB/5ec
r Close this dialog box when download completes
~ pen
Open Folder
Close
5. Click on 'ipe;h I to open the zipped COR file, I to display the contents of
the Folder, or I to return to NetDMR.
3.4.6. Viewing a COR
CORs can be selected from the CORs Search Results page for viewing. The COR can be
downloaded or repudiated, its certification statement can be viewed, its signature can be viewed
and verified, and the signature public key can be displayed while viewing it. See Appendix C for
details on validating COR signatures.
Start by clicking on in the row next to the desired COR and the View COR Details page
shown in Figure 3-7 is displayed.
Home | My Account | Request Access | Help | Logout ^ User:iladrninuser, Internal User
Illinois - IL
NetDMR
Manage
Search
View
Validate
Access Requests
CORs
Suspect Logs
CORs
^ Session Lockout Timer:
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
'^View Certification | -P Download COR | fc'view COR Signature | ^ Download COR Sig. Public Key | Verify Signature | fi Repudiate '3. COR Search Results |
View COR Details
Permit
Permit #:
Major:
Permitted Feature:
IL0029475
¦
INF
Influent Structure
Report Dates & Status
Monitoring Period: From 08/01/08 to 08/31/08
Considerations for Form Completion
Principal Executive Officer
First Name:
Last Name:
No Data Indicator (NODI)
Permittee:
Permittee Addre
|dMR Due Date:
LEAF RIVER STP
Facility:
Facility Location:
| Status:
(Telephone:
NetDMR Validated
58
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
«3 - Raw
Sewage
Influent
<3 - Ra*
Sewage
Influent
Flow, in
conduit or G - Raw
thru Sewage
Influent
Quantity or Loadin
Value Qualifier V
Units Qualifier
Quality or Concentration
Qualifier Value Qualifie
Req
Mon
AVG
# Frequency Sample
of of Analysis Type
Valu> Units Ex.
Req
Mon 03 -
DAILY Mgal/d
Submission Note
If a parameter row does not contain any values for the Sample nor Effluent Trading, then n
Analsyis, and Sample Type.
Edit Check Errors
Comments
3 of the following fields will be submitted for that r<
Continuous RCOTOT
Number of Excursions, Frequency of
Attachments
No attachments.
Report last Saved By
LEAF RIVER STP
User: tonasrin@yahoo.com
Name: nasrin lescure
E-Mail; tonasrin^yahfJiTOrn
2008-08-04 08:40 (Time Zone: -05:00)
Figure 3-7: View COR Details Page
3.4.6.1. Viewing the COR Certification Statement
This feature displays the submitter name and user type, permit ID, facility name, permitted
feature, discharge number, monitoring period end date, submission date, submission time and the
verbage of the certification statement that the Signatory agreed to when signing and submitting
the DMR for this COR.
View the COR's Certification Statement from the View COR Details page by:
1. Clicking on View Certification and the COR Certification Statement page will appear:
¦/ COR Certification StalKineiil
riitllff-r U-ier) agreed to Ihr loluwny fttilriicillilm >tn1rnirrti nhr*i v.iIitr.Miny Chi* tbpy a
:«itv Pmirittvil Dr«*nrtwm H— rit— iiy IS
tlVEft iOI 0*11 IASAU.E WWTI» HIMMI
I cwWf v»£u- oi h<* (t>4( tfv% prep&ed urxAsr 'ny (Aractw c iufrfwon in «cWrtf<»ncw witfi t*mg my pattword and tecxmty guettxm mow and printing the Submit button, t that
I. 1 am nasno lescure.
? 1 ha** not violated any term in my Electronic Signature Agreement
3. Sam otherwise wtthout any reason to Mmve that tf» conMent/Mty of my password has form ornprom.u*! no*i or at any tsmo prior to
tfus sutxntxsion
f ! h.nv tt» authority to SuDHhI thine data on Mtaff a/ tin* listed f.yditm.
f. This JCSon const/kilos jn i^vdrorvc i'tgmtfiTe GQuivalent to rny written jjynaturt/.
6. I urntersttrxf that tfvs attestation of fact pefWtis to thv irnpiernentation, oversight, and enfoKotrwnt of a fedurjt program
and must be true to thv best of r"r knowledge
6»tfc|
2. Click on Bacl< to return to the View COR page.
59
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
3.4.6.2. Downloading the COR
Refer to Section 3.4.5 for details on how to download and view a COR.
3.4.6.3. Viewing the COR Signature
The View COR Signature link allows users to see the digital signature used when the COR was
Signed and Submitted. This signature is used in the Validate COR function for Internal
Administrators. The COR Signature is a hash value of the COR XML file that is encrypted with
the Signing Certificate's Private Key.
View the COR's Signature from the View COR Details page by:
1. Clicking on^- View C0R signature an(j COR Signature page will appear:
3.4.6.4. Downloading the COR Public Signature Key
The COR Signature Public Key is consistent throughout the NetDMR Installation. The COR
Signature Public Key is taken from the NetDMR Signing Certificate which can be chosen by a
System Administrator on the Edit Settings screen. The COR Signature Public Key is included in
the COR Details as a way for the user to download and save the information. The COR
Signature Public Key would be used in a situation where the NetDMR Application has become
inaccessible or the Signing Certificate used at the time of submission has been removed from the
Application. The Public Key could be used with the hashing algorithms to prove a saved COR is
the same as the original submission COR. The COR Signature Public Key can also be used to
prove which NetDMR installation has submitted a COR.
Download the COR's Public Signature Key from the View COR page by:
1 Clicking on ^ Download COR Sig. Public Key
2. You will be prompted to save the Signature Key as a zipped file:
COR Signature
3940ede536cdd62707dec0bd95a94a68932363eeefdl063b6ca2633522902dfdfd9b98d5ad32ac970d6718b0bd6cblcd8096701a7aal69642efdd8a49d50e5eae33(
Back |
2. Click on Bacl<: to return to the COR Signature page
60
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
(File Download 131
Do you want to open or save this file?
0
Name: publicKey.txt
Type: T ext D ocument, 326 bytes
From: netdmrtst.tceq. state, tx. us
Open Save | Cancel j
$
While files from the Internet can be useful, some files can potentially
harm your computer. If you do not trust the source, do not open or
save this file. What's the risk?
Click on
Save
,
Cancel
to save the file to a location you designate, or click on
to return to the Search COR Results page.
3. The Windows Save As dialog will appear. Click on the Save In drop down box and
select a location to save the file into, then click on
Save
to save the file to a
location you designate, or click on
page:
Cancel
to return to the Search COR Results
Save in: I Outbound to DM WG
File name: [fSUBBSSBBHI
Save as type: | Text Document
4. The Download complete dialog will appear.
1 Download complete
-ln|x|
Download Complete
publicKey.txt from netdmrtest.epacdx.net
¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦I
Downloaded: 326 bytes in 1 sec
Download to: C: \Outbound to DM WG\publicKey. txt
Transfer rate: 326 bytes/Sec
f" Close this dialog bow when download completes
~ pen Open Folder
Close
f i
5. Click on Ilpen I to open the zipped COR file, l°pen Fljldt;( I to display the contents of
the Folder, or H I to return to NetDMR.
61
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
3.4.6.5. Verifying the COR Public Signature
The Verify COR Signature function re-signs the COR being viewed using the NetDMR Signing
certificate. This value is then matched against the COR Signature value in the database from the
original submission. The signing process takes the COR file being viewed, creates a hash value,
encrypts the hash using the private key, and compares the result against the value saved from the
original submission; essentially running the Validate COR function with the input being the
viewable COR. This function proves to the user that the COR in the original submission is in
fact what is being displayed on the screen.
Click ¦- Verify Signature af the top of the View COR Details page to open the Verify COR
Signature page with a message indicating whether the verification was successful and the
following information about the COR:
> Permit ED
p- Monitoring Period End Date
> Signatory Name
> Signatory User Name
> Signatory Email
> Facility Name
P Permitted Feature
> Confirmation Number
Verify the COR's Public Signature Key from the View COR Details page by:
1. Clicking on Verify signature and the Verify COR Signature page will appear:
q. Verify COR Signature
: J The COR Signature was successfully verified.
Permit ID
IL0029424
Monitoring Period End 2007-12-31
Date
Signatory Name
nasrinlescure
Signatory User Name tonasrin@yahoo.corn
Signatory Email
tonasrin@yahoo.com
Facility Name
LASALLE STP, CITY OF
Permitted Feature
Confirmation Number 983b2391-d2e9-40a9-9e91-33e80ef2f97b
Ok |
2. Click on Jri. to return to the View COR page.
62
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
3.4.6.6. Returning to the COR Search Results Page
Return to the COR Search Results page by clicking on 3. cor Search Results
3.5. Repudiating the COR
If a signatory contacts you and indicates that
he/she has reason to believe their account has
been compromised and erroneous and
unauthorized DMRs have been submitted on their
behalf, you should first lock the users account and
then repudiate the CORs for the unauthorized
DMRs that were submitted.
If a signatory submitted an erroneous
DMR and wants to revise it, they should use
the Correct DMR functionality instead of the
Repudiate functionality - Repudiating the
COR removes it fi'om ICIS.
Repudiate a COR from the View COR Details page by:
1. Logging into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account.
2. Clicking on6 Repudiate
3. The Repudiate COR page will appear:
| My Account | Reque-
NetDMR
Manage
Search
View
Access Requests
CORs
Suspect Logs
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
Illinois - IL
Validate
6* Repudiate COR
Confirm that you would like to repudiate this COR. If you repudiate this COR, a delete transaction will be sent to ICIS-NPDES and the
permittee will be required to re-start the submission process for the associated DMR.
Permit ID
IL0029475
Monitoring Period End
2008-08-31
Date
Signatory Name
nasrinlescure
Signatory User Name
tonasrin@yahoo.com
Signatory Email
tonasrin@yahoo.com
Facility Name
LEAF RIVER STP, VILLAGE OF
Permitted Feature
INF
Confirmation Number
5a5ee713-daa3-44d6-baf3-f5afc69ad92c
Comment*
1 J
Submit | Cancel |
4. Enter the reason for the repudiation in the Comments field.
5. Click on Submit to continue with repudiating the COR, or click on Cdncel I
the View COR Details page.
6. An error message will display if nothing was entered into the Comments field:
^ There were errors processing your request.
to return to
Repeat Steps 3 and 4.
63
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
7. NetDMR will send a batch file with instructions delete the COR out of ICIS-NPDES and
will return you to the View COR Details page.
8. Lock the Signatory's account using the instructions in Section 3.8.2
3.6. Searching and Viewing Permits
You can retrieve and view information about a specific permit such as User Roles and Subscriber
Agreements from the Regulatory Administrators Home page or from the Search Permit ID
page shown in Figure 3-8.
Help Log
CA-HI-NE-SD-UT
iVetDMR
Validate
buspect Logs
Raw Logs
Network Activity
DMRs
Manage
I Access Requests
Instance
Agreements
Search
CORs
Permits
Users
^ Search Permit ID
Enter a full Permit ID to retrieve and v
n information about the permit,
|UT0020974|
Figure 3-8: Search Permit ID Page
3.6.1. Search for Permits
Follow these directions to search for a permit from the Regulatory Administrators Home Page.
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account. The Regulatory Administrators home page will be displayed.
Click on Permits in the gray Search tab
OR
click on Permit ID in the Search page.
2. Type the nine-digit permit ID, and click on Search
3. If the permit is available in NetDMR, the View Permit Details page is displayed. See the
next section for instructions on how to use this page,
OR
If an invalid permit ID is entered or the permit ID is not in NetDMR, the following
message will be displayed:
^ Search Permit ID
^ There were errors processing your request.
Enter a full Permit ID to retrieve and view information about the permit.
Permit ID. |UT002074 y^g permitID is not available for reporting in NetDMR.
Re-enter a valid Permit ID and click on Search until NetDMR is able to display the
permit.
4. When finished viewing the permit, click on '-ancel | to return to the Search Permit ID
page.
64
-------
NetDMR Regulatory Authority User Guide
^etDMR* Draft - May 1, 2009
3.6.2. View Permit Details
After you search for and NetDMR locates the permit of interest, the View Permit Details page
shown in Figure 3-9 is displayed.
^ View Permit Details
Click any underlined column title to sort the table rows in ascending or descending order by the information in that colu
table will be displayed with the default sort order applied and any selected check boxes will be reset to unselected.
nn, If you click View All or View Partial, the
Permit ID UT0020974
Facility Name central davis co sewer
Permittee Address 2200 SOUTH SUNSET DRIVE 2200 SOUTH SUNSET DRIVE
KAYSVILLE UT, 84037
Users and Roles
Showing 4 of 4 Users/Roles
User Name Organization User TvDe Role Role Status View Subscriber Aareement
carsenkidman@live.com Utah Water Quality External Signatory Approved £
a
carsenkidman@live.com Utah Water Quality External Permit Administrator Approved £
emilyryan51@live.com Utah DEQ External View Approved £
onlyone_sweetwhiteroses@hotmail.com EXTERNAL External Edit Approved £
Pending Access Requests - External Signatory
No results.
Pending Access Requests - External
No results.
Save | Cancel |
Figure 3-9: View Permit Details Page
The following information is shown on this page:
> Permit Details
•S Permit ID
•S Facility Name
•S Permittee Address
> Users and Roles Table
•S User Name
•S Organization
•S User Type
•S Role
•S Role Status
•S Link to the view details about the user
•S Link to Subscriber Agreement (if applicable)
> Pending Access Requests - External Signatory Table
•S Name
•S User Name
•S Requested Date
•S Link to view details about the user
•S Link to Approve or Deny Request. Note: See Section 3.1.1 for instructions on
Approving/Denying Signatory Requests.
> Pending Access Requests - External Table
•S Name
•S User Name
•S User Type
65
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
•S Requested Role
•S Approve/Deny
¦S Comment
•S Link to view details about the user. Note: See Section 3.1.1 for instructions on
Approving/Denying External Permittee and Data Provider Requests.
Up to ten users requests will be displayed by default in each of these tables. If more than 10
users are associated with this permit or have pending requests, you can navigate through the list
by:
> Clicking a page number link to go to a specific page of results.
> Clicking the ly green forward arrow to display the next page of Users.
> Clicking the J green back arrow to view the previous page of Users.
> Clicking the f • double green forward arrow icon to display the last 10 Users.
> Clicking the ^ double green back arrow icon to display the first 10 Users.
> Clicking the View All link to show all Users in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
Users at a time.
You can click any underlined column title to sort the Users in ascending or descending order by
the information in that column.
3.7. Searching for Users
You can search for users from the Search Users page shown in Figure 3-10 to view and edit their
account information.
JVetDMR
View
Suspect Logs
Raw logs
Network Activity
OMR*
Access Requests
^ Seurch Users
11 comfcbullion of tvareh «r
User rirst Name
User l ast N*m»
Email
Permit ID
facility Name
Figure 3-10: Search Users Page
3.7.1. User Search
Follow these directions to search for a user from the
Regulatory Administrators Home Page:
1. Log into NetDMR selecting the desired
Regulatory Authority and using a
Regulatory Administrator account. The
Regulatory Administrators Home page will
66
T
You can leave Search fields
blank to return all users. You can
also enter partial information for any
criteria. For example, entering "a "
in the User Name criteria would
return both "AdamSmith " and
''KatieJones@state. xx. us''
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
be displayed. Click on Users in the gray Search tab
OR
click on Users in the Search page.
2. Enter criteria for the user and click search. You can search by:
S User First Name
S User Last Name
S User Name
¦S Email
•S Permit ID
•S Facility Name
3. Click on Search
4. If the User is found the Search results will be displayed on the User Search Results page.
See the next section for instructions on how to utilize the information on this page,
OR
If a User is not in NetDMR, the following message will be displayed:
'^User Search Results
Click any underlined column title to s
the table will be displayed with the de
first page of results will be displayed
No results.
Re-enter valid data in any of the User search fields and click on Search until NetDMR
is able to display the User.
5. If the list is too large, click on 51 Refine Search an(j re-enter the First Name, Last Name,
User Name, Email Address, Permit ID or Facility Name, then click on Search to return
less results or click on close | to return to the User Search Results page.
6. If another search is desired, click on ; New Search ancj re-enter the First Name, Last
Name, User Name, Email Address, Permit ID or Facility Name, then click on Search to
return less results or click on close 110 return to the User Search Results page.
7. When finished viewing the User information, click on any tab to view that page.
3.7.2. User Search Results
The User Search Results page (Figure 3-11) displays a table with the list of roles for each user
that match your search criteria. This table includes the following information:
67
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Acms Rsc
MttjKin
Liiqi
NM<«orlt Artmtr
OMRj
Elisor Search Resuttf
Figure 3-11: User Search Results Page
This table includes the following information:
5^ First Name
> Last Name
> User Name
h Facility
''k Permit ID
5^ User Type
p Access Rights
P Email
b Link to View User Details
> Link to Edit User Details
Up to ten User roles will be displayed by default
in each of these tables. If more than 10 User roles
are associated with this permit or have pending
requests, you can navigate through the list by:
If the user you are searching for is
not displayed in the User Search Results
table, you can click on Refine Search or
New Search on the upper right. Both links
will take you back to the Users Search
page where you can refine your search by
adding additional search criteria or
starting a new search.
> Clicking a page number link to go to a specific page of results.
Clicking the green forward arrow to display the next page of User roles.
> Clicking the green back arrow to view the previous page of User roles.
P Clicking the double green forward arrow icon to display the last 10 User roles.
> Clicking the double green back arrow icon to display the first 10 User roles.
> Clicking the View All link to show all User roles in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
User roles at a time.
You can click any underlined column title to sort the User roles in ascending or descending order
by the information in that column.
3.7.3. View User Account Details
After locating a user of interest on the User Search Results page, click on & in the View column
of their row to display the View User Account Details page:
68
-------
KNetDMfq
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Home | My Account | Request Access | Help | Logout
A
iVe£DMR
Manage
Search
View
Validate
Access Requests
CORs
Suspect Logs
CORs
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
^ View User Account Details
General Account Information
Edit Cancel
First Name
Anthony
Last Name
Mueske
User Name
Anthony .Mueske@state.sd.us
Email
Anthony .Mueske@state.sd. us
Telephone Number
605-773-4085
Organization
South Dakota DENR
User Type
External
Selected Security Questions
What is your favorite city?
What was your first pet's name?
What is your favorite vacation destination?
Who was your childhood hero?
What was your high school mascot?
Roles
Click any underlined column title to sort the table rows in ascending or descending order by the informatio
table will be displayed with the default sort order applied,
One Role found
Petrnit ID Facility Name Access Rights Access Status
SDP000022 APPLIED ENGINEERING, INC, Edit Approved
Signatory Role History
Showing 2 of 2 Signatory
Peimit IP Facility Name Change Pate Change Type Changed By Comment
SD0023388 BROOKINGS - CITY OF 06-25-08 16:28 Canceled Anthony Mueske Cancelled by user
SD0023388 BROOKINGS - CITY OF 06-25-08 16:17 Pending Anthony Mueske
Figure 3-12: View User Account Details Page
This page displays the following information about the user:
? General Account Information
¦S First Name
•S Last Name
S User Name
S Email
•S Telephone Number
S Organization
S Type of User
69
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
> Selected Security Questions
•S The five security questions that the user selected when creating his/her account is
displayed; however the user's responses to the questions are not displayed
> Permit and Roles Table
•S Permit ID
•S Facility Name
•S Access Rights
•S Access Status
> Signatory Role History Table
•S Permit ID
•S Facility Name
•S Change Date
•S Change Type
•S Changed By
¦S Comment
Up to ten users requests will be displayed by default in each of these tables. If more than 10
users are associated with this permit or have pending requests, you can navigate through the list
by:
> Clicking a page number link to go to a specific page of results.
> Clicking the ly green forward arrow to display the next page of Users.
> Clicking the \] green back arrow to view the previous page of Users.
> Clicking the ^ double green forward arrow icon to display the last 10 Users.
> Clicking the 44 double green back arrow icon to display the first 10 Users.
> Clicking the View All link to show all Users in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
Users at a time.
You can click any underlined column title to sort the Users in ascending or descending order by
the information in that column.
While on this page, either click on Edlt to Edit the User Account information using the
instructions in the next section, or click on Cancel I to return to the User Search Results page.
3.8. Editing and Managing User Accounts
You can manage and edit general account information, lock and unlock an account, change
security questions and answers, and approve, deny and revoke roles for the users associated with
your Instance from the Edit User Account page or the View User Account Details page.
70
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Michigan - MI
¦A
NetDMR
I
I A«4K5 R«QU«*5
I Instance
I Aoraomonts
d Fdit User Account
YAv t-*n miSl fjip utffT MiXQuhl by cfijvtiginy iftfaraiiaEioh b*law.
Gurleral Account Information
first Name
LmI iName
Telephone Number
Organisation
tisrr ryof
Account Sl«Un
Verified Atmutrt
Current aicgwil vtoti
1 nfJifd Rpa-ion
Lnrkfd
I orJc Account
|k^73
pTf
Verrlwd
Not locked
I'mwfOrd
RkH of count r~
Mtswinl
Knr.urlty Ouftttiont « teUHitj
| Siilca One
[
Contact Slip unrr Sit gfttmrr Id Tkim Ttuf rirtit
time »w titer lefls in, he/she «t» be greeted ts 4 sage to provide We vswt-f
rau HxnmutitMtad, sete-a questions, and add responses.
Rotas
C»efc **1 ii<"rderlr\ed column btle to sort the table rows m afcon-s^s or descen«ng order b* the information in Diet column. If you diefc View All or View tj
table will be disclosed with the default tort order ac>ol«d end an» selected check boxes wil bo reset to unselected
A
Save am etwees | Cancel 1
Figure 3-13: Edit User Account Page
wijllipW found
Pnwll ID Fartttw Htgnm torn Wil» tom tUHii D*ny
Hli»5*no.l cr.Afiru* CO IAHM1U V)*x B»nd»no r- 1—
Up to ten permits the User has Roles for will be displayed by default. If more than 10 permits are
associated with the User's account, you can navigate through the list by:
P Clicking the green forward arrow to display the next page of permits.
> Clicking the green back arrow to view the previous page of permits.
>• Clicking the double green forward arrow icon to display the last 10 permits.
> Clicking the double green back arrow icon to display the first 10 permits.
> Clicking the View AH link to show all permits in the table on the same page.
it Clicking on the View Partial link to return from the View All display back to viewing 10
permits at a time.
You can click on the Permit column title to sort the Permits in ascending or descending order.
Access the Edit User Account page shown in Figure 3-13 for a specific user and edit User
Information by following these steps:
1. Follow the instructions in Section 3 .8 to display the Edit User Account page and click on
,
71
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
OR
Follow the instructions in Section 3.7.3 to display the desired User on the View User
Account Details page and click on Edit.
2. Edit general user information, lock or unlock the account, reset the password, reset the
secret questions and approve, deny or revoke a role as described in the following
subsections.
3. After completing your edits, click on Save fill Changes | continue, or click on
cancel 1t0 return to the View User Account Details page.
If you enter invalid information, Deny a role without entering a comment, or revoke a
role without entering a comment an error message will appear:
^ There were errors processing your request.
Fix your errors and click on :-,ave A" chang0S I to continue, or click on Cancel I to
return to the View User Account Details page.
4. Review your changes on the Confirm User Account Changes page to confirm that they
are correct:
i Access Requests i
LUK5
1 bUSpect Logs
1 Instance
Permits
1 Raw Logs
1 Agreements
Users
1 Network Activity
| LUKS |
1 1
1 DMRs
^ Confirm User Account Changes
General Account Information
First Name Al
Last Name Spangler
User Name Albert.Spangler@state.sd.u
Email Albert.Spangler@state.sd.u
Telephone Number 605-773-4220
Organization South Dakota DENR
User Type External
Account Status
Lock Account: V
Modified Security Questions
No changes.
Role Changes
No results,
Save | Cancel |
5. Click on Save I on the Confirm User Account Changes page to finalize your edits, or
click on ancel I to return to the Edit User Account page.
3.8.1. Edit General User Information
You can modify the following information in the General User Account Information section:
> First Name
> Last Name
> User name
> Email
> Telephone Number
> Organization
User Type and Regulatory Authority are displayed on this tab for informational purposes
only.
72
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
3.8.2. Lock User Account
A locked account is different than a disabled account. A user's account is disabled if he/she
enters their password incorrectly three times or enters three incorrect responses to security
questions. If a user disables their account by entering their password incorrectly three times, the
user can enable their account and request a password reset by responding correctly to a security
question. If a user forgets the responses to his/her security question, he/she must contact the
Regulatory Administrators directly and request a reset of the security questions.
If the current account status is unlocked and you would like to lock it, click on r next to the
Lock Account field to blank it out.
3.8.3. Unlock User Account
If the current account status is locked and you would like to unlock it, click on 1^ next to the
Unlock Account field to remove the checkmark from it.
3.8.4. Reset User Password
You cannot create a password for the user. Instead to reset the User's password, click on r next
to the Reset Account Password field.
Password
Reset account
W
password
NetDMR will send the user an email notifying them of the password reset:
To reset your password, please click on the following link:
https://netdmrtest.epacdx.net/netdiar-web/public/verification.htm?
kev=865a78baadefe0122aedee4fb6e41b66641888e90cbebecdbd502e5Slbf5a557&userld=162
Thank you.
When the user clicks on the link in their email they will be taken to the Complete NetDMR
Password Reset Request page where they must answer one of their secret questions and enter a
new password twice:
Login | FAQs | Getting Started | Contact the NetDMR Team
~
NetDMR
Complete NetDMR Password Reset Request
Hello alison_kittle@yahoo.com. To reset your NetDMR password, provide a response to the
security question and create a new password for your account.
What is the name of the
street where you grew up?
Enter Password
(case sensitive, 8-20 characters,
include letters and numbers)
Enter Password again
Submit | Cancel |
NetDMR will confirm the password was reset and send the user an email notifying them of the
password reset. The user is now ready to log back into NetDMR.
73
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Login | FAQs | Getting Started | Contact the NetDMR Team
A
NetDMR
Password Reset Completed
Your password has been changed. Click here to access the login page and begin using NetDMR.
©2008 NetDMR
3.8.5. Reset User Security Questions and Answers
To reset User's Security Questions and Answers, click on the drop down in the Security
Questions and Answers section and select "Enter a temporary security question answer for the
user to force a reset of the security questions" from the list and type an answer into the box
below.
Security Questions and Answers
Select a question and enter an answer to reset all of the users security questions.
Contact the user by phone to communicate the answer to the question. The next
time the user logs in, he/she will be directed to a page to provide the e
you communicated, select questions, and add responses.
NetDMR will send the user an email notifying them of the security answer reset:
To Reset your security Questions, please click on the following link:
https : //netdmrcesr. epacdx. net/' necdifir-web/public/verifica~ion. htm?
key=6224cbd€f66f33393ef7QfScf4bQ3ceQ7a3b532Qfb6b6a?a35e9S7Sfd7fQf179&u3erld=162
The answer to the security question will be communicated to you via a phone call by the internal admin.
Thank you.
You must contact the user by phone an inform him/her of the correct answer. When the user
clicks on the link in their email they will be taken to the Reset Account Credentials page where
they must provide the answer you provided, select questions and add responses for those
questions:
Login | FAQs | Getting Started | Contact the NetDMR Team
NetDMR
^ Reset Account Credentials
To reset your security questions, please enter the answer to the security question conveyed to you by the
administrator at your regulatory authority and select new security questions and answers.
Enter a temporary security question answer for the |~~
user to force a reset of the security questions.:
Selected Security Questions
Please provide responses for security questions. Select each question only one time. Note that answers are case-
sensitive.
Question 1*
d
| Select One
Question 2*
d
| Select One
Question 3*
| Select One
Save | Cancel |
74
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
NetDMR will confirm the security answers were reset and send the user an email notifying them
of the security question reset. The user is now ready to log back into NetDMR.
LuMin | FAQk | OuUitmj SUil«J I Cuotact Ihw NwiDHR T.«n
~
NetDMR
• NetDMR Account Reset Security Questions and Password
3.8.6. Approve User Access Requests
To approve a pending access request, click on r in the Approve column.
3.8.7. Deny User Access Requests
To deny a pending access request, click on T in the Deny column and enter a reason in the
Comment column.
3.8.8. Revoke User Access Requests
To revoke access to a permit, click on r in the Revoke column and enter a reason for the
revocation in the Comment column.
3.9. View Logs
Regulatory Authority Administrators should periodically perform a fraud analysis using the logs
for their Instance to determine if an account has been compromised. If it is determined that a
compromise has occurred, the affected account will need to be locked, preventing the user from
signing eDMRs, and the user will be contacted to address the situation. See Appendix B for
more information on performing fraud analysis.
As a Regulatory Administrator, you can access the following logs:
> Suspect Logs
> Raw Logs
Instructions for viewing these logs are described in detail within the next subsections.
3.9.1. Viewing Suspect Logs
The Suspect Analysis process analyzes NetDMR logs such as the login and submission logs to
identify irregularities associated with user accounts that may be a trigger for further
investigation.
75
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Nell)
Mortage
Search
Vletv
Validate
Araiv. foiiquoste
CORi
Sir.piwt I rig-.
COR-,
liwtanee
Raw Log';
Agreements
t>sers
Network Activity
OMRs
Illinois - IL
; Suspecf I OflR
The NetDMR Swsoect Analyii* System analyze? NatDMR tog* such as the login and jubmitsion Icwjj to find irregularit>«J tfcat may indicate
an acwunl has bean cunipruiiiisei). II an mrevulanty lur an account is- found rt lives not mean a cuiiiprvnuse has occutreii;
only that hirWinr iiwftvhg«tinn wwrnnMl
Select o Suspect Analysis Log to View
Su%|ii3Ct Analysis Run*: |August u, ?008 ,*1
ViKwini) Siis|ji;i:I Analysis I ni|
Suspect Analysis Kun Date:
Augmt 14.2IMU
Log Range Analyzed:
August 14, ?IW16 Aiigut* 14, 20M
Figure 3-14: Suspect Logs Page
The irregularities that are flagged include the following: inconsistent login IP addresses,
multiple overlapping login attempts, multiple overlapping login attempts from different IP
addresses, and irregular submission pattern. The frequency with which the suspect analysis
process is run is set by the system administrator, and may be monthly, quarterly, semi-annual, or
yearly.
Follow these directions to view the contents of a suspect log:
1. Log into NetDMR selecting the desired Regulatory Authority and using a
Regulatory Administrator account. The Regulatory Administrators Home page
will be displayed.
2. Click on Suspect Logs under the View menu.
3. Click in the drop down box next to Suspect Analysis Run and select a specific
date of suspect analysis results to view:
Select One ~*\
Select One
September 14, 2008
August 141 2008
July 23, 2007
4. Click on
View
The suspect analysis results are displayed at the bottom of the page and provide the following
information:
p Suspect Analysis Run Date
P Log Range Analyzed
User Name
Hp Irregularity Type
~ Description
| Irregularity Type Description
76
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Irregularity Type
Description
Inconsistent Login IPs
User has logged in using more than 10
different IP addresses during the analysis
log range. Example: Number of IPs: 32
Overlapping Login
Attempts
User had more than 10 overlapping login
attempts within a 3 day span.
Example: Date and time of first login in
span: 08/01/07 2:24 pm.
Overlapping Login
Attempts with Different IPs
User had more than 5 overlapping login
attempts using different IPs within a 3 day
span.
Example: Date and time of first login in
span: 06/01/07 5:25 pm.
Irregular Submission
Pattern
Example: A higher than anticipated number
of DMRs were submitted during the
following month(s): lanuary, 2007 (5);
March 2007 (10)
Up to 10 items in the log will be displayed by default in the Suspect Analysis Log table. If more
than 10 items are recorded, you can navigate through the list by:
> Clicking the page number links to display other pages of 10 items at a time.
> Clicking the green forward arrow [> to display the next page of items.
> Clicking the green back arrow 4 to view the previous page of items.
> Clicking the double green forward arrow icon W to display the last 10 items.
> Clicking the double green back arrow icon 44 to display the first 10 items.
> Clicking the View All link to show all items in the table on the same page with the
default sort order applied.
> Clicking the View Partial link to return from the View All display back to viewing
10 items at a time with the default sort order applied.
You can click any underlined column title to sort the items in ascending or descending order by
the information in that column.
3.9.2. Viewing Raw Logs
Raw logs provide access to the logs of the date and time following user activities that are tracked
for your NetDMR Instance using the View Raw Logs page (Figure 3-15):
> Login attempts and results
> DMR Submissions
> Attempts to enable an account after being locked out
> Attempts to enable and expired password
> Attempts to reset a forgotten password
> Attempts to retrieve a forgotten username
> Attempts to edit account information
77
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
ime | My Account | Request Access | Help | Logoi
~
JVefDMR
¦ninuser, Internal User
Illinois - IL
Manage
Access Requests
Instance
Agreements
Search
CORs
Permits
Users
View
Suspect Logs
Raw Logs
Network Activity
DMRs
Validate
CORs
*•* Session Lockout Timers 29; 55
if View Raw Logs
Select a Log to View
Log*:
| Select One
J
Date Range Start*:
(mm/dd/yyyy)
I J H
Date Range End*:
(mm/dd/yyyy)
1 3
View |
Figure 3-15: View Raw Logs Page
Follow these directions to view information contained within one or more raw logs:
L
2.
3.
4.
5.
6.
Log into NetDMR selecting the desired Regulatory Authority and using a
Regulatory Administrator account. The Regulatory Administrators Home page
will be displayed.
Click on Raw L°QS under the View menu.
Click on the Log dro
3 down box to select a specific log to view:
Select One
d
Edit Account
Enable Account
Enable Expired Password
Forgot Password
Forgot Username
Login
Submission
Select the Date Range Start by clicking on and selecting a date, or enter a date
in the box using the following format: mm/dd/yyyy.
Select the Date Range End by clicking on and selecting a date, or enter a date
in the box using the following format: mm/dd/yyyy.
Click on I to search for the log and display the results:
! Vlitw kifjw l ogs
siriiftt a urn io vluw
Lej«i zi
Octo R*nQc Start*: [ptfci/zwt -g
Date Ranijp Fail*: (""nWnw) [hviS/Totj -tj
Viewing Log
Leo: Loflm
Data n«n««: OWKftnoa OVIVJOO#
Iftijt t-lU of Tl'J H 1 I, i, i, i, J, v, *!
taaJMa. Tim f 11 If n m I Mm* IKAAIra* Irnifewjlt
utyn'os ojiUJ ft* m» «li>on r*u» «»I1
nini/nii #»•« *» J*n •mkMiuiiaAw «< kjhU »...
WWO# 9liM m so* HMrainuitr MironnM* W«t7.t.is s.»
0Wl'J/00 0»i2tf fSM 110 naUm. j>»il0«..s.com MUm ultil C7.10Mll.tt Ciu(
OU'lWOB 0Jhi» ft* na ii«Wmt.w>*il»«rj.wm n«Um ¦¦¦•! 'U,20ti.l« r> »«ll
DWIM* MK' f# :«0 n«Mmr.us»il9«nf. nm imMimuiiiI t7.l07.IUM
78
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Any information available for the log you selected is displayed at the bottom of the View Raw
Logs page and includes the following:
> Log selected
> Date Range selected
The Submission logs display includes the following information in a table:
> Date of DMR Submission
> User Name
> Permit ID
> Permit Feature Number
> Limit Set
> Monitoring Period End Date
> Confirmation Number
> Indication of whether the submission was repudiated.
The display for all other logs includes the following information in a table:
> Log Date
> UserlD
> User Name
> Name
> IP Address (populated for Login Logs only)
> Login Result
Up to 10 log items will be displayed by default in the table. If more than 10 items are available,
you can navigate through the list by:
> Clicking the page number links to display other pages of 10 items at a time.
> Clicking the green forward arrow [> to display the next page of items.
> Clicking the green back arrow < to view the previous page of items.
> Clicking the double green forward arrow icon to display the last 10 items.
> Clicking the double green back arrow icon 4:1 to display the first 10 items.
> Clicking the View All link to show all items in the table on the same page with the
default sort order applied.
> Clicking the View Partial link to return from the View All display back to viewing
You can click any underlined column title to sort the items in ascending or descending order by
the information in that column.
3.10. View Network Activity
As a Regulatory Administrator, you can access the View Exchange Network Activity page by
clicking on Network Activity under the View menu. Regulatory Administrators can perform the
following using the functionality on this page:
10 items at a time with the default sort order applied.
79
-------
KNetDMfq
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Hp View Exchange Network Activity;
~ Request Basic Permit Data Flow;
P Request OMR Information by Date Range; and
P Request Information for One DMR.
Manage
Search
View
Validate
Access Requests
CORs
Suspect Logs
CORs
Session Lockout Timer: 23:48
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
Home | My Account | Request Access | Help | Logout
A
iVeZDMR
Illinois - IL
View Exchange Network Activity
View the transactions between NetDMR and the Exchange Network Node below.
ig^View All
Showina items 1-10 of 99, M/ • NetDMR Activity Type - General description of the activity, including
S Basic Permit Data Request: retrieves permit identifying information and related
dates such as permit ID, permit status, permitted facility name and location
information, and permit effective and expiration dates.
80
-------
HNetDMRj
NetDMR Regulatory Authority User Guide /fgkS
Draft - May 1, 2009 \rrJ
•S Empty Slot Data Request: retrieves permitted features, limit sets, parameters, and
limits for a DMR.
•S DMR Submission: submits DMR transactions and retrieves and processes error
and warning transactions.
NetDMR Fields
> NetDMR ID - NetDMR identifier for this transaction.
> NetDMR Created Date - Date and time that the transaction was created.
> NetDMR Status - Current NetDMR status for the transaction, including:
> Pending: the transaction has been entered into the NetDMR queue
for processing.
> Node: the transaction has been submitted to the node for
processing and a node transaction ID has been returned
> Failed: the transaction failed.
> Completed: the transaction was successfully completed.
> Completed with errors: For DMR Submission transactions only,
the DMR was processed but errors or warnings were encountered
and returned from ICIS-NPDES.
> Cancelled: the transaction was submitted but remained pending
for 48 hours; the transaction was cancelled.
> NetDMR Service - Name of the Exchange Network service being utilized, including:
> NetDMR. GetBasicPermitlnfovl .0: a Basic Permit Data Request.
> NetDMR. GetScheduledDMRsByDMRvl.O: a type of Empty Slot
Data Request.
> NetDMR. GetScheduledDMRsByDate v 1.0: a type of Empty Slot
Data Request.
> ICIS-NPDES2: The DMR submission service.
Links
> NetDMR Information: Click on to open a page and view the Agency Mapping
requested from ICIS via the Basic Permit or Empty Slot Data Flow service request
transaction:
> NetDMR Result: Click on to download a zipped file and view the XML file
containing the results of data from ICIS via the Basic Permit, Empty Slot or DMR
Submission service request transaction result file if status is Completed or Completed
with Errors/Warnings.
81
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
> NetDMR Log: Click on to open a page to view the log of the progress from ICIS via
the Basic Permit, Empty Slot or DMR Submission service requests:
Network Activity tog
Click on Bacl< I to close the NetDMR Information, Result or Log page and return to the View
Exchange Network Activity page.
Node Fields
> Node Transaction ID - The identifier returned from the node for the service request.
> Node Transaction Status - Current Node status of the request.
> Node Status Date - The last date and time that the Node status was refreshed.
Up to 10 Exchange Network transactions will be displayed in the table by default. If more than
10 transactions have occurred, you can navigate through the list by:
> Clicking the page number links to display other pages of 10 transactions at a time.
> Clicking the green forward arrow ^ to display the next page of transactions.
> Clicking the green back arrow 4 to view the previous page of transactions.
> Clicking the double green forward arrow icon W to display the last 10 transactions.
> Clicking the double green back arrow icon M to display the first 10 transactions.
> Clicking the View All link to show all items in the table on the same page with the
default sort order applied.
> Clicking the View Partial link to return from the View All display back to viewing 10
transactions at a time with the default sort order applied.
You can click any underlined column title on the Exchange Network Activity table page to sort
the items in ascending or descending order by the information in that column. If you click to
view details for a row in a table and then choose to return to the View Exchange Network
Activity page, the first page of results will be displayed with the default sort applied.
3.10.2. Request Basic Permit Data Flow
When an instance is created, NetDMR requests basic permit information from ICIS-NPDES
using the Agency Maps as the selection criteria. After the initial request for Basic Permit occurs,
NetDMR will request the data from ICIS-NPDES again every week for each Instance based upon
their agency maps. See Appendix E for
more information on refreshing permit
data.
ICIS will process NetDMR requests for
permits on a nightly basis. Check NetDMR the
next morning for your newly ref'eshed permits if
you requested a ref'esh of your permits.
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Rather than wait one week, Regulatory Administrators are able to refresh basic permit data in
NetDMR with ICIS-NPDES data at any time using the View Network Activity page.
Follow the directions below to submit a request for NetDMR to refresh updated basic permit
data:
1.
3.
4.
5.
Log into NetDMR selecting the desired Regulatory Authority and using a
Regulatory Administrator account. The Regulatory Administrators home page
will be displayed.
Click on Network Activity under the Vew menu. The View Exchange Network
Activity page will be displayed.
Scroll down to the Request Basic Permit Data Flow section of the page.
Click on Update Permit Information |
Click on Confirm
send the request to ICIS, or click on
Cancel
t
Jt<
on the Confirm Request for Basic Permit Data Flow page to
CIS
Network Activity page.
A message will appear confirming that your request has been sent to ICIS:
to return to the View Exchange
J The requested data flow has been saved.
ICIS will process your request overnight and return the refreshed data the next morning.
3.10.3. DMR Data Refreshes from ICIS-NPDES
When the first Signatory for a permit is approved by a Regulatory Administrator, NetDMR
requests one year's worth of anticipated DMRs or "empty slot records" from ICIS-NPDES.
Each month after this, NetDMR requests another 2 month's worth of data to ensure that
NetDMR always has at least one year's worth of empty slot records. The selection criteria for
DMR data refreshes is based upon the date that the Signatory approval is granted, the monitoring
period start date and, in the case of the initial pull, the monitoring period end date. See
Appendix E for more information on refreshing DMR data.
Rather than wait one month, Regulatory Administrators and Permit Administrators are able to
DMR empty slot records in NetDMR with
ICIS-NPDES data at any time. Regulatory
Adminstrators can use the View Network
Activity page using the instructions in
Sections 3.10.4 and 3.10.5. Permit
Administrators can use the Refresh DMRs
hyperlink on the DMR Search Results
page.
3.10.4. Request DMR Information by Date Range
Requesting DMR Information by Date Range triggers an Empty Slot Data Flow (ESDF) refresh
request to ICIS for a specific permit ID for a specific set of dates. The ESDF retrieves the
following information for each DMR:
ICIS will process NetDMR requests for
DMRs on a nightly basis. Check NetDMR the
next morning for your newly refi'eshed DMRs if
you requested a refresh of your DMRs.
83
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
You may only request up to 14 consecutive
months ofDMRs at a time.
> Permit ID
> Permit Status Code
> Permittee and Facility Name and
Address
> Major Status Indicator
> DMR Recipient and Mailing
Address
> State/Region text
> Permit Dates
> Original issue date
> Most recent issue date
> Effective date
> Expiration date
> Federal Grant Indicator
> Permitted Feature
> Permitted Feature Identifier,
> Permitted Feature Type Code
Limit Set Designator and Name
Monitoring Period Start and End Dates
Report Due Date
Limit Information
Parameter
Season Identifier
Monitoring Location Type
Effluent Trading Partner Indicator
Frequency of Analysis Code
Sample Type Code
Quantity Unit Code
Numeric Conditions - statistical basis and limit value for
each quantity, loading, quality, or concentration
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account. The Regulatory Administrators home page will be displayed.
2. Click on Network Activity under the Vew menu. The View Exchange Network Activity
page will be displayed.
3. Scroll down to the Request DMR Information by Date Range section of the page.
4. Click on and select the Monitoring Period Start Date Range or type in the Monitoring
Period Start Date Range in this format:
mm/dd/yyyy.
OR
Click on and select the Monitoring Period
End Date Range or type in the Monitoring
Period End Date Range in this format:
mm/dd/yyyy.
5. Enter the Permit(s) of interest (separate each with a comma).
fi Clink nti Update DMR Information
You can enter either a Monitoring
Period Start Date or End Date range, or
you may enter ranges for both dates.
84
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
If dates are not entered, dates are missing, or there are no permit IDs an error message
will appear:
^ The requested data flow has been canceled. ;
View Exchange Network Activity
View the transactions between NetDMR and the Exchange Network Node below. Click any underli
order by the information in that column. If you click View All or View Partial the table will be disp
; \ There were errors processing your request.
Repeat Steps 4-6 entering a valid start date range, a valid end date range, and one or
more permit IDs.
7. Click on CQnfirm I on the Confirm Request for DMR Information page to send
the request to ICIS, or click on Cancel I to return to the View Exchange Network
Activity page.
8. A message will appear confirming that your request has been sent to ICIS:
J The requested data flow has been saved.
ICIS will process your request and return the refreshed data the next morning.
3.10.5. Request Information for One DMR
Follow the directions below to submit a request for information for one DMR:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account. The Regulatory Administrators Home page will be displayed.
2. Click on Network Activity under the View menu. The View Exchange Network Activity
page will be displayed.
3. Scroll down to the Request DMR Information for One DMR section of the page.
4. Enter a valid Permit ID. If an invalid permit ID is entered an error message will appear:
Permit ID" ITN00003648 Update I The permitlD is not available for reporting
' I in WotnMD
Re-enter a valid Permit ID.
5. Click on uPdate I.
6. NetDMR will retrieve all Permitted Features or outfalls for the permit. Click in the
Permitted Feature drop down box and click on the desired Permitted Feature.
7. Click on uPldate I.
8. NetDMR will retrieve all Limit Sets for the Permitted Feature. Click in the Limit Set
drop down box and click on the desired Limit Set.
9. Click on uPdate |.
10. NetDMR will retrieve all available DMR Monitoring Period End Dates for the Limit Set.
Click in the Monitoring Period End Date drop down box and click on the desired
selection.
1 1 Clink nti Update DMR Information
85
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
SNetDMd a/t \&J
12. The Confirm Request for DMR Information for One DMR page will appear:
~
NetDMR
Manage
Search
View
Validate 1
Access Requests
CORs
Suspect Logs
CORs
Instance
Permits
Raw Logs
Agreements
Users
Network Activity
DMRs
Illinois - IL
Confirm Request for DMR Information for One DMR
Permit ID:
Permitted Feature:
Limit Set:
|lL0029424
|l - LASALLE WWTP OUTFALL
Monitoring Period End Date: 112/31/07 3
Confirm J Cancel |
Click on
Confirm
on the Confirm Request for DMR Information page to send the
request to ICIS, or click on 1 I to return to the View Exchange Network Activity
page.
13. A message will appear confirming that your request has been sent to ICIS:
The requested data flow has been saved.
You may only view a partial DMR.
Only a Permittee or Data Provider may
edit the DMR.
3.11. Requesting Access to Partial DMRs
Regulatory Administrators may request access to view
an in-progress DMR in order to assist a permittee
having difficulty in completing it. A Permit
Administrator of the Instance where the DMR resides is
responsible for approving partial DMR access requests.
To request access for viewing a DMR in progress:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
Administrator account.
2. Click on the Request Access hyperlink at the top of the Regulatory Authority Home
page.
3. In the Request Access to Partial DMRs section, enter the Permit ID you would like to
access.
4. Click on
U p d ate
to check to see if the permit exists in NetDMR.
5. If an invalid permit ID is entered or the permit does not exist in NetDMR an error
message will appear:
There were errors processing your request.
86
-------
HNetDMRj
6.
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
7.
9.
Repeat Steps 3 and 4 using a valid permit ID.
Otherwise, NetDMR prompts you for a Permitted Feature. Click in the box next to
Permitted Feature, then click on a Permitted Feature Number to select it.
Click on Update to check to see if there are Limit Sets in NetDMR for the Permit!
Feature.
Click in the box next to Limit Set, then click on a Limit Set Number to select it.
Click on
Update
to check to see if there are Monitoring Period End Dates for any
partial DMRs in NetDMR for the Permitted Feature.
10. Click in the box next to Monitoring Period End Date, then click on an End Date to
select it.
11 Click on Add Access Request |
12. A new row will appear in the Summary of Access Requests table containing the selected
Permit ID
Permitted Feature ID
Limit Set Designator
Monitoring Period End Date
Remove Access
Reguest
IL0029424
001
1
8/31/08
n
IL0029424
003
0
9/30/08
n
13. Repeat Steps 3 - 11 to add each Partial DMR desired.
14. Click on 3* within a row to remove that partial DMR request from the table.
15. The Confirm Access Requests window will appear:
Confirm Access Requests
You have already requested or been granted Internal Administrator Role.
Request Access to Partial DMRs
Summary of access requests.
Permit ID Permitted Feature ID Limit Set Designator Monitoring Period End Date
TN0002968 002 G 4/30/08
Confirm | Cancel |
Click on Conf|rm | to submit the access request, or click on Cancel I to return to the
Internal User Access page.
16. A message will appear notifying you your request was submitted:
J Your access request(s) have been submitted for approval.
A Permit Administrator in charge of the DMR must approve or deny your request. When your
request has been approved or denied, you will receive an email notifying you. If your request
was denied the reason for denying it will be included in the email.
3.11.1. View Partial DMRs
Once you have approval from a Permit Administrator for your partial DMR request, you can
view it using the Partial DMRs page shown in Figure 3-17.
87
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
NelOMR
Figure 3-17: Partial DMRs Page
To display this page:
1. Log into NetDMR selecting the desired Regulatory Authority and using a
Regulatory Administrator account.
2. Click on DMRs under the View menu
3. The Partial DMRs page displays the
granted access to
> Permit ID
> Permitted Feature
> Discharge Number
> Monitoring Period End Data
> View DMR
4. Click on to open the desired
DMR to display it and be able to
talk the Permittee through any steps necessary to fill it out correctly. Note that the
DMR displayed will let you enter data into the fields but there are no buttons
allowing you to save this data - only Permittees or Data Providers can edit
DMRs.
3.12. Validate CORs
The Validate COR functionality allows Internal Administrators to check if a Copy of Record
(COR) provided by a Permittee User matches the corresponding COR stored in NetDMR, or if it
has been altered. To validate a COR, you must upload a zip file that contains only a single COR
and enter its COR signature. The COR will only be validated if the hash of the COR being
uploaded and its COR Signature matches the hash of the original COR and its COR Signature
saved in the database.
The COR Signature used during the process can be found in the submission acknowledgement
email that you received for this DMR submission (or can be retrieved by viewing a COR and
clicking on the "View COR Signature" hyperlink). Note that if you downloaded multiple CORs
or are using Internet Explorer 6, the individual COR zip files may have been combined into a
larger zip. Verify that you are downloading a single COR zip file by checking that the zip file
name starts with the Permit ID, followed by permitted feature, and monitoring period end date,
followed by other dates. See Appendix C for more details on validating CORs.
Follow these steps to Validate the COR:
following for each DMR that you have been
If the Permittee or Data Provider
changes the DMR while you are viewing it
you must close the DMR and repeat Step 4
to see their changes.
88
-------
1.
2.
4.
5.
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Login to your NetDMR Regulatory Administrators account.
Click on CORs under the Validate menu. The Validate COR page will appear:
>... | MT Acr.u«
NeiDMR
Mflllflljr
Scrtrrli
Vitliririli'
hcmv, Rfiqmvst*;
CORS
Suspect logre
CORs
Instance
Permits
Raw Loos
^reemsnts
users
network Activity
OMRs
Illinois - IL
~ Validate COR
validate a COR by uploading the zip ftJe and entering the signature key. The signature key was included in the submission acknowledgement email
that you received for this DMR submission.
Select a I fie to upload | Crown.. |
fcnter digital signature |
to be used for
verification
_yubmji_J ^^ancel_|
Click on Browse... ancj navigate to the location where the COR zip that you
would like to validate is stored. The Windows dialog box will open:
Pfr Outbound to DM WG 4" (t] [jjji]*
P3bah_
^jCDX Lite ICIS Batch Web Pre-Registration Form - Hybrid UVT.xls
^jCDX Lite ICIS Batch Web Pre-Registration Form.xls
3] CDX Lite ICIS Batch Web Registration Form - Illinois Production Users.xls
QeShare Instructions for ICIS-NPDES System and Batch Documents.pdf
ICIS Batch Test Registration Form.xls
Instructions for Generating Batch Audit Reports Using Business Objects xi.pdf
NetDMR Help_20080716.pdf
Tables for Error Cleanup.PDF
File name:
Files of type:
MM
| Open |
| All Files
A
Cancel |
/a
Click on
Open j
Cancel
to return to the
to upload the file, or click on
Validate COR page.
If no fields were entered or a file other than a zipped file is uploaded an error
message will appear:
^ There were errors processing your request.
Repeat Steps 3 and 4 above.
Enter the digital signature for that DMR submission. Note: The digital signature
is included in the submission acknowledgement email that you received for this
DMR submission or can be retrieved by viewing a COR and clicking the View
COR Signature.
Click on ',ubnr"t I to validate the COR, or click on t-dnuei to cancel to return to
the Regulatory Administrators Home page.
If an invalid digital signature is entered, an error message will appear:
89
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Validate COR
" The COR was not successfully validated.
COfi filn vaMfltrd
9. NetDMR validates the COR by rehashing the COR zip file you uploaded and
comparing the new hash with the hash contained in the signature that you entered.
NetDMR then displays a message indicating whether the validation was
successful.
Chapter 4. Regulatory View User Procedures
All Regulatory Users can search, view, and download CORs. Only Regulatory Administrators
can repudiate, validate, and verify the signature for CORs. When a Signatory signs and submits a
DMR, NetDMR creates a unique COR for that DMR. The COR is defined in the Cross-Media
Electronic Reporting Rule as follows (70 FR 59880 October 13, 2005, specifically Subpart A,
Section 3.3):
"Copy of record means a true and correct copy of an electronic document received by an
electronic document receiving system, which copy can be viewed in a human-readable
format that clearly and accurately associates all the information provided in the
electronic document with descriptions or labeling of the information. A copy of record
includes:
(1) All electronic signatures contained in or logically associated with that document;
(2) The date and time of receipt; and
(3) Any other information used to record the meaning of the document or
the circumstances of its receipt. "
Each NetDMR installation has an RSA 1024 bit asymmetric key that is used for digital
signatures. NetDMR will use its private key to digitally sign the CORs. The signature will be
executed against a message digest created from the COR using the FIPS 140-2 hashing
algorithm. For details on this process go to these web sites:
> Federal Information Processing Standards (FlPS)-approved algorithms for generating
Message Digest: http://www.csrc.nist.gov/CrvptoToolkit/tkhash.html
> FlPS-approved algorithms for generating/verifying digital signatures:
http://www.csrc.nist.gov/CryptoToolkit/tkdigsigs.html
Regulatory Users can access CORs, from their home page shown in Figure 4-1, or by clicking on
the CORs hyperlink located on the gray Search and View tab to display the Search CORs page
shown in Figure 4-2.
90
-------
KNetDMfq
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Search
View
CORs
DMRs
Permits
Users
Home | My Account ) Request Access | Help | Logout
A
NetDMR
Jser:netdmria@gmai
'"^¦Search: CORS Permit ID Users
CORs
[ Ad«anoed Searcfr |
Permit ID:
Signatory First Name:
Signatory Last Name:
Facility Name:
Monitoring Period
End Date Range:
~
Search |
r°l (mm/dd/yvyy)
Texas
Figure 4-1: Regulatory User Home Page
I
Last 10 logins
4/1/09 7:47 AM
4/1/09 7:44 AM
3/16/09 10:26 AM
3/16/09 10:17 AM
3/16/09 7:51 AM
12/31/08 10:12 AM
12/31/08 10:10 AM
12/31/08 10:03 AM
tJ
Regulatory Users can also view Permits, Users, and partial DMRs by clicking on the hyperlinks
on the home page or gray Search and View tab. Regulatory Users may not approve Signatory
requests and repudiate CORs unless they request to become a Regulatory Administrator.
Home | My Account | Request Access | Help | Logout <» User: iladminuser, Internal User
Jk Illinois - IL
NefDMR
Search
CORs
Permits
Users
View
DMRs
^ Session Lockout Timer:
q. Search CORs
Search for CORs using any combination of search criteria. For text and numeric information,
you can enter full or partial criteria. For example, entering a permitID of '2345' would return
'TX12345' and 'TX82345'.
Monitoring Period End
Date Range:
Signatory First Name
Hi
H (mm/dd/yyyy)
Signatory Last Name
Signatory User Name
Signatory Email
Facility Name
Permitted Feature
Number
Discharge Number
Discharge Description
Confirmation Number
Include repudiated V
CORs?
Submit | Cancel |
Figure 4-2: Search CORs Page
91
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
SNetDMd a/t \&J
The following subsections describe the steps for performing Regulatory User tasks.
4.1. Searching CORs
Regulatory Users can search for and view CORs, view a COR's certification statement or public
signature key, and download one or more CORs or the public signature key for a particular COR
by searching on any combination of Permit ID, Signatory Name, Facility Name, Monitoring
Period Start and End Date Range, Signatory Email Address, Permitted Feature Number,
Discharge Number, Discharge Description, Confirmation Number, and CORs that have been
repudiated. To do this:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account. The Regulatory User Home page will be displayed.
OR
While logged into NetDMR, click on CORs in the gray Search tab.
2. Enter data into one or more of the fields on the Regulatory User Home page or Search
CORs page using these guidelines:
> Permit ID - Enter all or a portion of the permit ID. For example, entering a permit
ID of'al' would return 'Alabama'.
> Signatory First Name - Enter all or a portion of the signatory first name. For
example, entering a first name of'jo' would return 'John' and 'Joanne'.
> Signatory Last Name - Enter all or a portion of the signatory first name. For
example, entering a last name of'mi' would return 'Smith' and 'Miller'.
> Facility Name - Enter all or a portion of a facility name. For example, entering a
'co' would return 'Company A' and 'ABC Incorporated'.
> Monitoring Period End Date Range - Enter the start and end dates for the
monitoring period end date range using the mm ddyyyy format or select the
appropriate start and end dates from a calendar by clicking the calendar icon ^
next to each text box.
Clicking Advanced Search in the top right corner of the Search CORs tab will open the
Search CORs page and display the following additional search criteria:
> Signatory User Name - Enter all or a portion of the signatory user name. For
example, entering a last name of'mi' would return 'JaneSmith' and 'John.Miller'.
> Signatory Email - Enter all or a portion of a signatory email address. For example,
entering a last name of'mi' would return 'Jane.Smith@FacilityA.com' and
'John.Miller@FacilityB.com'.
> Permitted Feature Number - Enter all or a portion of a permitted feature number.
For example, entering 'S' would return permitted features 'S' and 'SUM'.
> Discharge Number - Enter all or a portion of a discharge number.
> Discharge Description - Enter all or a portion of a discharge description. For
example, entering a 'storm' would return 'Storm Water' and 'Storm Water Action
Levels'
> Confirmation Number- enter the complete submission confirmation number for the
DMR/COR you wish to view (NetDMR generates a unique confirmation number for
your submission).
92
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
> Include Repudiated CORs? - click to check the box if you would like to include
repudicated CORS that match your search criteria in your search results.
3. Click on Sutimi1; I to display the results or Cancel I to return to the Regulatory User
Home page. CORs that match your criteria are displayed on the COR Search Results
page:
| My Account | Request A
NetDMR
Help | Logout
Illinois - IL
Search
View
CORs
DMRs
Permits
Users
COR Search Results
CORs 1 through 2 of 2
OlRefine Search ^New Search ^Download Selected
Permit ID Monitoring Permitted Discharge Discharge Submitted Signatory Confirmation # Repudiated? View Downloa<
Period End Feature Number Description Date
LEAF
RIVER
STP,
VILLAGE
LEAF
RIVER
STP,
VILLAGE
IL0029475 08/31/08 INF
IL0029475 09/30/08 INF
5a5ee713-daa3-
44d6-baf3-
f5afc69ad92c
06eblf05-b5e7-
4c97-8a5d-
b253b6613fd3
Figure 4-3: COR Search Results Page
4.1.1. Viewing COR Search Results
Up to ten CORs will be displayed by default in the COR Search Results page. If more than 10
CORs are returned, you can navigate through the list by:
> Clicking a page number link to go to a specific page of results.
> Clicking the ly green forward arrow to display the next page of CORs.
> Clicking the \] green back arrow to view the previous page of CORs.
> Clicking the f > double green forward arrow icon to display the last 10 CORs.
> Clicking the ^ double green back arrow icon to display the first 10 CORs.
> Clicking the View All link to show all CORs in the table on the same page.
> Clicking on the View Partial link to return from the View All display back to viewing 10
CORs at a time.
You can click any underlined column title to sort the CORs in ascending or descending order by
the information in that column.
4.1.2. Refining the COR Search
If there are more CORs returned than you expected, click on Refine Search to display a search
page where you can narrow your search using Signatory, discharge, confirmation and repudiated
COR criteria:
93
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Permit ID |tn%
Monitoring Period End Date Range f j-g] |
(mm/dd/yyyy)
Signatory First Name
Signatory Last Name
Signatory User Name
Signatory Email
Facility Name
Permitted Feature Number
Discharge Number
Discharge Description
Confirmation Number
Include repudiated CORs? |~~
Search | Close |
4,1.3. Performing a New COR Search
To view another set of CORs, click on New Search to display a Search page and re-enter data
search using Signatory, discharge, confirmation and repudiated COR criteria:
Permit ID
[tn%
Monitoring Period End Date Range
11 1—
r*°| (mm/dd/yyyy)
Signatory First Name
1
Signatory Last Name
1
Signatory User Name
1
Signatory Email
Facility Name
1
Permitted Feature Number
1
Discharge Number
1
Discharge Description
1
Confirmation Number
1
Include repudiated CORs?
r
Search | Close j
4.1.4. Downloading a COR
The COR generated by NetDMR when a DMR is signed and submitted is a master COR zip file
that includes the following:
> All of the user-provided data for the DMR
5^ The legal certification statement displayed to the user during signing process.
> The public key certification in the form of Hashes of any files that were attached
to the DMR. NetDMR uses FIPS 140-2 to generate all hash values. This is the
current approved FIPS 140-2 certified standard.
S* Metadata about any attached files (e.g., name, type, etc.).
94
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
> A submission receipt, which includes the following:
¦ The DMR submission confirmation number
¦ The hash of the data document
¦ The date and time of the DMR submission
¦ Identifying information from the signing account, including: the user's full
name, account login, email address, and hashed password (at time of
signing), and IP address of the submitting computer.
The first step in viewing downloaded CORs is to open the master COR file that you downloaded
extract all zipped file contents into a directory of your choosing. Each of these extracted zipped
files is a COR. Open one of these files and extract the three main files along with any
attachments that were included with the DMR. The three main files are as follows:
> dmrSubmission.xml - this file contains all of the user entered data for the DMR
submission.
> DischargeMonitoringReport.xsl - this is a stylesheet that will format the
dmrSubmission.xml file to look like the NetDMR DMR View page for easy
viewing when viewed in a web browser.
> submissionReceipt.xml - this file documents when the DMR was submitted, by
whom, and with what electronic hashing algorithm.
It is easy to view the DMR data is to view the
dmrSubmission.xml file using a web browser such as
Microsoft Internet Explorer or Mozilla Firefox.
When opened in this way, the web browser will
automatically format the data based on the stylesheet
file dischargeMonitoringReport.xsl. Note that the
web browser will NOT be able to locate the
stylesheet if the user does not first unzip all of the
contents of the zip file into the same directory. The
user may choose to also view the XML data directly in any text editor of their choice.
Any attachments that were uploaded for the DMR prior to signing will also be included in the
COR files. These files have the names supplied by the person who uploaded them and can be in
almost any format. NetDMR will not convert these files so it is up to the user to figure out how
best to work with these files.
CORs are downloaded from the View COR Details page. Do this by:
1. Clicking on ^ Download COR
2. You will be prompted to save the CORs as a zipped file:
f
Be sure to extract
dmrSubmission.xml and
dischargeMonitoringReport.xsl from a
COR zippedfile into the same
directory.
95
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
*i
Do you want to open or save this file?
a]
N arne: netdmr_cor_zips_l 238110562597. zip
Type: WinZipFile
From: netdmrtest.epacdx.net
Open
Save
While files from the Internet can be useful, some files can potentially
§. harm your computer. If you do not trust the source, do not open or
save this file. What's the risk?
Click on
Save
,
Cancel
to save the file to a location you designate, or click on
to return to the Search COR Results page.
3. The Windows Save As dialog will appear. Click on the Save In drop down box and
select a location to save the file into, then click on
location you designate, or click on
page.
Save
to save the file to a
Cancel
to return to the Search COR Results
Save in: | Q Outbound to DM WG
File name:
4. The Download complete dialog will appear:
Download complete
—Download Complete
...cor_zips_1238110562597.zip from netdrnrtest.epacdx.net
Downloaded: 10.3KB in 1 sec
Download to; ... \netdmr _cor_zips_l 238110562597. zip..,
Transf er rate: 10.3KB/5ec
f~ Close this dialog box when download completes
-in! x|
Open
Open Folder
Close
5. Click on IB I to open the zipped COR file, l^pen Fo|i:lt:r I to display the contents of
J t<
the Folder, or.
Close
to return to NetDMR.
96
-------
KNetDMfq
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
4.1.5. Viewing a COR
A COR can be selected from the CORs Search Results page for viewing. You can view the
COR's certification statement, download the COR, view the COR's signature and download the
COR's public signature key from this page.
Start by clicking on in the row next to the desired COR and the View COR Details page
shown in Figure 4-4 is displayed.
' \lmm CertihcaUco I 9 Oot»«to»d UM I •' Wen to# S«giuture | < tto-M.t«3 CD* S.g Public K>
Vl"W COR Details
TW1XC3I
CtfOT OIL kWl COHtOWlOn
6WI Oil. * U*S COflPOflATIOn
OK -EdemalOtM
OUOWt » tl/Jl/W
Dn* Dik Ode
CW-4 • CORAS CWKTX ST H
o ImdKMvj (HOOI)
TOTAL St. :
•001' •
ihn e»™.
!> .4 tw tUvne*4 Its. th
¦ ¦ ¦' ' " r;- -•
Figure 4-4: View COR Details Page
4.1.5.1. Viewing the COR Certification Statement
View the COR's Certification Statement from the View COR Details page by:
1. Clicking on View Certification arKj t]ie COR Certification Statement page will appear:
97
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
y COR Certification ShilEminnl
r*4»»nn trtoirv (P«rmittoa Uw) agreed to !~*> Mm
Pii nit 9 Futility hniilUiil
ILIIMU4 1MMVER Hi
lion •itnlrmrm! mhcn wilirrrffiiig «hu ropj 01 rncord-
OliLhinifl Dntnffbun 4i»hIi**»u PtrvjJ Ind DHR Dsn
LASAUEWWTP HIMl tl 2HI II-23 ll/H/ll iitltDT
I cvrMy un4*r rwwMy ot Urn (hit tfu j sxjtmnttQft wis enotnd undtr my rtr»c orjfrjww who
i-waoe tf» sysftm, or those «WW wspons/M for QitMrmj the ortjrmattsn, wtfofrwyon sutmtted is. to £«sf «* my *noi#.$ to tho imphrwtatKri, oversight, jrjtf wiftwwwtf of a Mvrat environmtmWprogram
All of the user-provided data for the DMR.
> The legal certification statement displayed to the user during signing process.
> The public key certification in the form of Hashes of any files that were attached
to the DMR. NetDMR uses FIPS 140-2 to generate all hash values. This is the
current approved FIPS 140-2 certified standard.
> Metadata about any attached files (e.g., name, type, etc.).
> A submission receipt, which includes the following:
¦ The DMR submission confirmation number
¦ The hash of the data document
¦ The date and time of the DMR submission
¦ Identifying information from the signing account, including: the user's full
name, account login, email address, and hashed password (at time of
signing), and IP address of the submitting computer.
The first step in viewing downloaded CORs is to open the master COR file that you downloaded
extract all zipped file contents into a directory of your choosing. Each of these extracted zipped
files is a COR. Open one of these files and extract the three main files along with any
attachments that were included with the DMR. The three main files are as follows:
> dmrSubmission.xml - this file contains all of the user entered data for the DMR
submission.
> DischargeMonitoringReport.xsl - this is a stylesheet that will format the
dmrSubmission.xml file to look like the NetDMR DMR View page for easy
viewing when viewed in a web browser.
> submissionReceipt.xml - this file documents when the DMR was submitted, by
whom, and with what electronic hashing algorithm.
It is easy to view the DMR data is to view the dmrSubmission.xml file using a web browser such
as Microsoft Internet Explorer or Mozilla Firefox. When opened in this way, the web browser
98
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
will automatically format the data based on the
stylesheet file dischargeMonitoringReport.xsl.
Note that the web browser will NOT be able to
locate the stylesheet if the user does not first
unzip all of the contents of the zip file into the
same directory. The user may choose to also
view the XML data directly in any text editor of
their choice.
Be sure to extract
dmrSubmission.xml and
dischargeMonitoringReport.xsl from a
COR zippedfile into the same
directory.
Any attachments that were uploaded for the DMR prior to signing will also be included in the
COR files. These files have the names supplied by the person who uploaded them and can be in
almost any format. NetDMR will not convert these files so it is up to the user to figure out how
best to work with these files.
CORs are downloaded from the View COR Details page. Do this by:
1. Clicking on ^ Download COR
2. You will be prompted to save the CORs as a zipped file:
*]
Do you want to open or save this file?
a)
•rom: netdnr
Open | Save
ame: netdmr_cor_zips_l 238110562597. zip
Type: WinZip File
From: netdmrtest.epacdx.net
While files from the Internet can be useful, some files can potentially
harm your computer. If you do n
save this file. What's the risk?
Click on
Save
Cancel
to save the file to a location you designate, or click on
to return to the Search COR Results page.
3. The Windows Save As dialog will appear. Click on the Save In drop down box and
select a location to save the file into, then click on
Save
to save the file to a
location you designate, or click on
page.
Cancel
to return to the Search COR Results
Q Outbound to DM WG
99
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
4. The Download complete dialog will appear:
Download complete
yl
Download Complete
...cor_zips_1238110562597.zip from netdmrtest.epacdx.net
Downloaded: 10.3KB in 1 sec
Download to: ... \netdmr_cor_zips_l 238110562597. zip..
Transf er rate: 10.3KB/5ec
Close this dialog box when download completes
^JnJxJ
~ pen
~ pen Folder
Close
5. Click on 0pen I to open the zipped COR file, °PenFolder | to display the contents of
the Folder, or I to return to NetDMR.
4.1.5.3. Viewing the COR Signature
View the COR's Signature from the View COR Details page by:
1. Clicking on®- View C0R signature an(j COR Signature page will appear:
COR Signature
3940ede536cdd62707dec0bd95a94a68932363eeefdl063b6ca2633522902dfdfd9b98d5ad32ac970d6718b0bd6cblcd8096701a7aal69642efdd8a49d50e5eae33<
Back |
2. Click on Bacl<: to return to the COR Signature page.
4.1.5.4. Downloading the COR Public Signature Key
NetDMR uses asymmetric key cryptography for the digital signatures applied to CORs, This
type of cryptography includes both a public key and a private key. NetDMR digitally encrypts
and signs the COR with the private key, and decrypts the COR with the public key.
Download the COR's Public Signature Key from the View COR page by:
1 Clicking on ^ Download COR Sig. Public Key
2. You will be prompted to save the Signature Key as a zipped file:
100
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
File Download
Do you want to open or save this file?
E
Name: publicKey.txt
Type: T ext D ocument, 326 bytes
From: netdmrtst.tceq. state, tx. us
Open
Save
Cancel
%
While files from the Internet can be useful, some files can potentially
harm your computer. If you do not trust the source, do not open or
save this file. What's the risk?
Click on
Save
,
Cancel
to save the file to a location you designate, or click on
to return to the Search COR Results page.
3. The Windows Save As dialog will appear. Click on the Save In drop down box and
select a location to save the file into, then click on
Save
to save the file to a
location you designate, or click on
page.
Cancel
to return to the Search COR Results
Jjxj
Save in: _) Outbound to DM WG
0
My Documents
9 File name;
Save as type: |Text Document
4. The Download complete dialog will appear.
1 Download complete
-Inlxi
71
Download Complete
publicKey.txt from netdmrtest.epacdx.net
Downloaded: 326 bytes in 1 sec
Download to: C: \Outbound to DM WG\publicKey. txt
Transfer rate: 326 bytes/5ec
f~ Close this dialog box when download completes
Open Open Folder |
Close
i i
5. Click on
Upen
the Folder, or.
Close
to open the zipped COR file, up~nIH I to display the contents of
J to return to NetDMR.
101
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
4.1.5.5. Returning to the COR Search Results Page
Return to the COR Search Results page by clicking on cor Search Results
4.2. Search and View Permits
Regulatory Users can view all Users having access to one permit along with their roles and
Subscriber Agreements by using the Search Permit ID page shown in Figure 4-5.
H«m* | Ny Ac
cau»t | KMH>t Ace**
| 1l.ll | L.,«t
iUM.
Itdmunutar, lntamtl ui*r
A
Illinois - IL
W/DMR
Search
CORs
OMRs H
Permits
^ Search Permit ID
Inter a fiii penrtiUO to retrieve an
view information about the permit.
Permit II):
1
Figure 4-5: Search Permt ID Page
The steps for searching permits for user access information are:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account.
2. Click on Permits in the Search tab.
3. Enter the complete ID for the permit and click on Search |
4. If the permit ID is not complete or the permit could not be found in NetDMR an error
message appears:
; ^ There were errors processing your request.
Repeat Step 3 using a valid Permit ID.
5. The View Permit Details page will appear, allowing you to view information on Users
having access to the permit.
102
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Home I My Account | Request Access | Help | Logout
~
NetMfR
Illinois - IL
Search
CORs
Permits
Users
View
OMRs
q. View Permit Details
Permit ID
IL0029424
Facility Name
LASALLE STP, CITY OF
Permittee Address
400 RIVER ROAD
LASALLE IL, 61301
Users and Roles
Showing 8 of 8 Users/Roles .
User Name Organization User Type Role Role Status View Subscriber Agreement
lescure.nasrin@epa.gov EPA Internal Partial DMR Approved £
DMR Data |
DMR Data |
lescure.nasrin@epa.gov EPA Internal Partial DMR Approved £
DMR Data |
tonasrin@yahoo.com epa External Signatory Approved £ Q
6. Click on & to display the View User Account page:
er:amkinternaluser, Internal User
Illinois - IL
NetDMR
Search
CORs
Permits
Users
o. View User Account Details
General Account Information
First Name
Last Name
User Name
Email
Telephone Number
Organization
User Type
Selected Security Questions
lescure.nasrin@epa.gov
lescure.nasrin@epa.gov
202-564-5013
EPA
What is your favorite city?
What is your favorite color?
What is your mother's maiden name?
What is the name of the high school you attended?
Showing 2 of 2 Roles
Permit ID Facility N
Partial Access Permits and Roles
Showing 5 of 5 Roles ,
Permit ID
Permitted Feature ID
Limit Set Designate
r Monitoring Pe
riod End Da
te Role
Role Reauest Status
IL0029424
A01
0
8/31/08
Part
al DMR
Appro
ed
IL0029424
INF
L
9/30/08
Part
al DMR
Appro
ed
IL0029424
INF
L
8/31/08
Part
al DMR
Appro
ed
IL0029424
007
0
8/31/08
Part
al DMR
Approved
IL0029424
007
0
9/30/08
Part
al DMR
Appro
ved
103
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
7. Click on DMR Data I to open a dialog window containing the Permitted Feature ID,
Limit Set Designator and Monitoring Period End Date for the Permit's User:
Microsoft Internet Explorer
El
DMR Information
Permit ID = IL0029424
Permitted Feature ID = 007
Limit Set Designator = 0
Monitoring Period End Date = 8/31/OS
OK
Click on
OK
to close the dialog window
and return to the User Search Results page.
8. Click on <3 to view the Subscriber Agreement for
the Signatory Users.
4.3. Search and View Users
Regulatory Users can view all permits one User has access
to along with that User's roles and Subscriber Agreements
for each permit by using the Search Users page shown in Figure 4-6.
The electronic version of a
Subscriber Agreement is not a
substitute for the originalsigned
Subscriber Agreement mailed in
by a Signatory.
m UianlladminustJ. Irw«m»l Uttr
Net D M R
search
CORs
View
OMRs
Users
^ Search Users
Search for users usinfl any combination erf se arch eritena. »or text and numeric information, you can enter full or partial criteria, l or example, entering a user
name ol 'jo' iruulcJ return 'juhrintiiUi' «tid "vjuluiMjll".
Il««r Kirrt MniDP
User Last Name
User Name
Email
Permit 10
racllltv Name
Search I
Figure 4-6: Search Users Page
The steps for searching for user access information are:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account.
2. Click on Users in the Search tab.
3. Enter full or partial data into one or more of the fields and click on Search I.
4. If no users could be found in NetDMR an error message appears:
104
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
^ There were errors processing your request.
Repeat Step 3 using valid data for the desired User(s).
The View User Details page will appear, allowing you to view information on User
access for one or more permits:
iHome | My i
count | Reques
t Access |
| Help | Logou'
at User:iladminuser, Internal User
A
NetDMR
Illinois - IL
Search
CORs
Permits
Users
View
1
® Session Lockout Timer: 29142
<*.User Search Results
SlRefine Search ^New Search
Users 1-10 of 24 44 4 1
, 2, 3 ~ »
Slview All
First
Last
User* Nam
e
Facility
Permit ID
User Tvoe
Access Riahts Email
View
Name
Name
Nasrin
Lescure
lescure. na
isrin@epa.gov
LASALLE STP, CITY OF
IL0029424
Internal
DMR Data
^ Partial DMR lescure.nasrin@epa.gov
A
nasrin
lescure
tonasrin@
yahoo.com
LEAF RIVER STP, VILLAGE OF
IL0029475
External
Signatory tonasrin@yahoo.com
A
nasrin
lescure
tonasrin@
yahoo.com
LCC ILLINOIS, LLC-MINT #26
IL0000078
Administrator
A
Nasrin
Lescure
lescure. na
isrin@epa.gou
LASALLE STP, CITY OF
IL0029424
Internal
Partial DMR lescure.nasrin@epa.gov
A
DMR Data
J
nasrin
lescure
tonasrin@yahoo.com
LCC ILLINOIS, LLC-MINT #26
IL0Q00078
External
Signatory tonasrin@yahoo.com
Click on 4 to display the View User Account page:
Home | My Account | Request Access | Help | Logout A Useriamkinternaluser, Internal User
Illinois - IL
NeiDMR
Search
CORs
Permits
Users
View
DMRs
<*. View User Account Details
General Account Information
First Name
Nasrin
Last Name
Lescure
User Name
lescure ,nasrin@epa .gov
Email
lescure ,nasrin@epa .gov
Telephone Number
202-564-5013
Organization
EPA
User Type
Internal
105
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Selected Security Questions
What is your favorite city?
What is your favorite color?
What is your mother's maiden name?
What is the name of the high school y
u attended?
Roles
Showing 2 of 2 Roles .
Partial Access Permits and Roles
Showing 5 of 5 Roles .
Permit IP Permitted Feature ID Umit Set Designator Monitoring Period End Date Role Role Request Status
IL0029424 A01 0 8/31/08 Partial DMR Approved
IL0029424 INF L 9/30/08 Partial DMR Approved
IL0029424 INF L 8/31/08 Partial DMR Approved
IL0029424 007 0 8/31/08 Partial DMR Approved
IL0029424 007 0 9/30/08 Partial DMR Approved
7. Click on DMR Data I to open a dialog window containing the Permitted Feature ID,
Limit Set Designator and Monitoring Period End Date that the user has access to.
Microsoft Internet Explorer
DMR Information
Permit ID = IL0029424
Permitted Feature ID = 007
Limit S et D e signator = 0
Monitoring Period End Date :
OK
8/31/08
OK
to close the dialog window and return to the User Search Results
Click on
page.
Click on O to view the Subscriber Agreement for Signatory Users. Note that the
Agreement that you see will differ from the same document signed by the Signatory if
you changed any of your Subscriber Agreement contact information for your Instance
recently. Because this electronic document may slightly differ from the original and is
The electronic version of a Subscriber Agreement is not a substitute for the
original, signed Subscriber Agreement mailed in by a Signatory.
n
g the Signatory's signature it cannot be used as a substitute for the original.
4.4. Requesting Partial DMR and Regulatory Administrator Access
Regulatory Users may request access to view an in-progress DMR in order to assist a permittee
having difficulty in completing it. In addition, Regulatory Users may request to be upgraded to a
Regulatory Administrator. The Internal User Access Request page (Figure 4-7) is used for
106
-------
NetDMR Regulatory Authority User Guide
^etDMR* Draft - May 1, 2009
requesting this access, and a Permit Administrator for the Instance where the DMR resides is
responsible for approving or denying the request.
Home | My Account | Request Access | Help | Logout
JVefDMR
A User: iladrninuser. Internal User
Illinois - IL
Search
CORs
Permits
Users
View
DMRs
® Session Lockout Timer:
d Request Internal Admin Privileges
Request Internal Admin Privilege: I- Yes
cf Request Access to Partial DMRs
Select the DMR for which you would like to request view only access. You can send each request individually or group multiple requests together.
PermitID:
l
Update |
Permitted Feature:
I Select One fc]
Update |
Limit Set:
| Select One
Monitoring Period End
| Select One
Date:
Access Requests
Summary of access requests.
Permitted Feature ID Limit Set Designator Monitoring Period End Date Remove Access Request
Requests found
ibmit |
Figure 4-7: Internal User Access Page
4.4.1. Regulatory Administrators Access Requests
The steps for requesting access to become a Regulatory Administrator are:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account.
2. Click on Request Access in the Search tab.
3. Click on r next to Request Internal Admin Privilege field to place a checkmark in the
kQx. Request Internal Admin Privilege: R Yes
4. Click on Submit to submit the request.
5. The Confirm Access Request page will appear. Click on Ccmfirm I to proceed with the
request, or click on Cancel | to cancel the request and return to the Internal User Access
page.
6. A message will appear notifying you that your access request has been submitted:
| Your access request(s) have been submitted for approval.
7. A Regulatory Administrator will approve or deny your request. If your request is
approved, you will receive an e-mail stating:
The following actions have been taken for your access requests.
Role Id: Internal Admin
107
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Status: Approved
Comment: Release 3 testing.
Internal Admin access.
Thank you.
Otherwise, the Regulatory Administrators will deny your request and you will receive an e-mail
with a reason why the request was denied.
4.4.2. Partial DMR Access Request
To request access for viewing a DMR in progress:
1. Log into NetDMR selecting the desired Regulatory Authority and using a Regulatory
User account.
2. Click on Request Access in the Search tab.
3. In the Request Access to Partial DMRs section, enter the Permit ID you would like to
access.
4. Click on Upda1:e to check to see if the permit exists in NetDMR.
5. If an invalid permit ID is entered or the permit does not exist in NetDMR an error
message will appear:
There were errors processing your request.
6.
7.
9.
Repeat Steps 3 and 4 using a valid permit ID.
Otherwise, NetDMR prompts you for a Permitted Feature. Click in the box next to
Permitted Feature, then click on a Permitted Feature Number to select it.
Click on
U p d ate
to check to see if there are Limit Sets in NetDMR for the Permitted
Feature.
Click in the box next to Limit Set, then click on a Limit Set Number to select it.
Click on
U p d ate
to check to see if there are Monitoring Period End Dates for any
partial DMRs in NetDMR for the Permitted Feature.
10. Click in the box next to Monitoring Period End Date, then click on an End Date to
select it.
11. Click on Add Access Request |
12. A new row will appear in the Summary of Access Requests table containing the selected
Permit ID
Permitted Feature ID Limit Set Designator
Monitoring Period End Date
Remove Access
Request
ILO029424
001 1
3/31/08
St
ILO029424
003 0
9/30/03
B
13. Repeat Steps 3 - 11 to add each Partial DMR desired.
14. Click on % within a row to remove that partial DMR request from the table.
15. The Confirm Access Request page will appear. Click on Confirm | to submit the
access request, or click on Ca 1 I to return to the Internal User Access page.
16. A message will appear notifying you your request was submitted:
108
-------
NetDMR Regulatory Authority User Guide
^NetDMR* Draft - May 1, 2009 ^5^
Your access request(s) have been submitted for approval.
A Permit Administrator in charge of the DMR must approve or deny your request. When your
request has been approved or denied, you will receive an email notifying you. If your request
was denied the reason for denying it will be included in the email
4.4.3. View Partial OMRs
Once you have approval from a Permit Administrator for your partial DMR request, you can
view it using the Partial DMRs page shown in Figure 4-8.
Figure 4-8: Partial DMRs Page
To display this page:
1. Login to your NetDMR Regulatory User account.
2. Click on DMRs under the View menu.
3. The Partial DMRs page displays the following for each DMR that you have been
granted access to:
> Permit ID
> Permitted Feature
> Discharge Number
> Monitoring Period End Data
> View DMR
4. Click on to open the desired DMR to display it and be able to talk the
Permittee through any steps necessary to fill it out correctly. Note that the DMR
displayed will let you enter data into the fields but there are no buttons allowing
you to save this data - only Permittees or Data Providers can edit DMRs.
109
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix A. Subscriber Agreement
In order to submit DMRs to ICIS using NetDMR, a
Permittee must print off the Subscriber Agreement
form generated by NetDMR at the time they
request a Signatory role for one or more permits,
sign the Subscriber Agreement in ink, and mail it to
your Agency. You should never approve a
Signatory request before you have the requestor's
signed Subscriber Agreement.
There may be times when you have a change in your Agency's mailing address or the person
who should receive Subscriber Agreements at your Agency is reassigned. The System
Administrator can make these changes to your Instance so future Subscriber Agreements will
display the new mailing information for new Signatory requests in your Instance.
If one of your Signatories changes their name they will need to change their name in NetDMR
and print off a new Subscriber Agreement with their new name displayed, then sign and mail it
into your Agency.
Signatories should not be
approved until your Agency has
received the Subscriber Agreement.
NetDMR Subscriber Agreement Instructions Page
This form can be used for permits issued by: «insert name ofAgency»
Purpose
The NetDMR Subscriber Agreement should be used by Clean Water Act National Pollutant Discharge
Elimination System (NPDES) permit holders that would like to apply to submit Discharge Monitoring
Reports (DMRs) electronically, or change/update your reporting status information from a previously-
submitted application. Submission of DMRs electronically is an alternative to using paper forms to fulfill
the reporting requirements of the CWA NPDES program pursuant to 40 CFR 122.41(1)(4).
Basic Information on Who Should Fill Out the Subscriber Agreement
¦ To request use of electronic reporting for DMR information, the person that is authorized to sign
discharge monitoring reports (DMRs) as described in 40CFR 122.22 (a) must sign this document as
the Signatory Authority in Section E of this document.
¦ If the Signatory Authority (named in Section E) plans to electronically sign DMRs submitted through
NetDMR, then this person will also sign as the Subscriber (named in Section F).
¦ If the Signatory Authority plans to have someone else sign and submit the electronic DMRs, then this
individual must be a duly authorized represented as described in 40CFR 122.22(b) and the duly
authorized representative must sign as the Subscriber (see Section F).
¦ If a Signatory Authority has more than one NPDES permit for which they are responsible, and the
regulatory authority allows multiple permits on a single Subscriber Agreement, then this document
allows the signatory authority to list multiple permits on a single Subscriber Agreement as long as the
Subscriber is the same person for all the multiple permits listed.
110
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
¦ If the authority to electronically sign for a permit is to be delegated to multiple Subscribers, then each
Subscriber needs to submit and sign a separate Subscriber Agreement.
¦ This Subscriber Agreement cannot be used to register multiple permits that are issued by different
regulatory authorities.
Where to Submit
Print and mail the completed subscriber agreement below to your Clean Water Act permitting authority
for their review at the address below. You should retain a hard copy.
«insert regulatory authority mailing address»
For help or questions please contact the «Regulatory Name» at «phone» or «email».
You will receive a confirmation email from «insert email address of NetDMR» when your application
has been processed and approved. Thank you for helping us reduce paper use by choosing to
electronically submit your DMRs.
Key to Color Coding in this Document (this is not part of the subscriber agreement, but is to help
permitting authorities understand how the form is populated):
• Green: Entered by the user during the account creation process
• Red: Selected or entered by the user during the signatory request process
• Pink: Entered by a System Administrator as part of the instance creation and customization process.
• Gray: Data retrieved from the basic permit data flow
• Black text: Static text included in the subscriber agreement.
• Purple: To be completed manually after subscriber agreement is printed
Questions?
Ill
-------
NetDMR Regulatory Authority User Guide
^NetDMB* Draft - May 1, 2009 \rrJ
Agency: «insert name of Agency»
Subscriber Agreement Number: « Auto Generated 36 digit Hexadecimal number »
Generated On: «Auto generated date»
Account Reference: « user account number»
A. Subscriber Information
The Subscriber is the individual that intends to sign DMRs and signs this subscriber agreement in Section
F.
User Name:
Subscriber Name:
Organization:
Email Address:
Phone Number:
B. Permit Information
Signing privileges are requested for the following permit(s):
Permit ID
Facility
Name
Facility Address
Relationship
Authorized By
TX0002440
ABC Steel
123 County Road
Steelville, TX 34000
The Facility
Self
TX0000014
AAA Waste
123 North Road
Steelville TX 34500
Parent
Company
Jane Doe
This request is (check one):
~ NEW: the first request by this facility to use NetDMR reporting.
REQUEST FOR REACTIVATION: a re-activation of NetDMR reporting for a facility that had
discontinued using NetDMR
CONTINUATION WITH NEW AUTHORIZATION: an updated subscriber agreement
submitted because the signatory authority and/or subscriber at the facility has changed
~ RENEWAL: an updated form submitted when a permit application is submitted
Permit ID(s):
~ DEACTIVATION: Explain reason for inactivation in the box below and identify whether the
inactivation is temporary or permanent
Permit ID(s):
Notes to Permitting Authority (Optional unless Inactivating):
112
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
C. Terms and Conditions
• PURPOSE: The intent of this agreement is to create legally binding obligations upon the parties
using the specified data transmission protocols and the NetDMR Reporting System, to ensure that
the Certifier (in this document, "Certifier' refers to signers of this document ~ both the Signatory
Authority, and the Subscriber) agrees to: (i) Maintain the confidentiality and protect the electronic
signature from unauthorized use or compromise, and follow any procedures specified by the
Regulatory Authority for this purpose; (ii) Be held as legally bound, obligated, or responsible by
use of the assigned electronic signature as by hand-written signature.
• VALIDITY AND ENFORCEABILITY: This Agreement has been executed by the parties to
evidence their mutual intent to follow Regulatory Authority procedures to create binding
regulatory reporting documents using electronic transmission and receipt of such records,
consistent with the provisions of 40 C.F.R. Part 3. Acceptance and execution of this agreement
by the Regulatory Authority shall be evidenced by the issuance of a personal identification
number (PIN) to the Certifier. Consistent with 40 C.F.R. Part 3 electronic signatures under this
agreement shall have the same force and effect as a written signature. Pen and ink signatures will
remain on file with the Regulatory Authority.
• RECEIPT: A Document shall be deemed to have been received by the Regulatory Authority
when it is accessible by the Regulatory Authority, can be fully processed and is syntactically
correct to the specified electronic transfer protocol that may be modified from time to time by the
Regulatory Authority. No Document shall satisfy any reporting requirement or be of any legal
effect until it is received.
3.1 COMPLIANCE TRACKING: The Certifier understands that upon activation of the
NetDMR account, EPA's database will be expecting to receive electronic transmission of DMR
data at the interval specified in the permit. If the database does not receive the DMR from the
Certifier at the expected time, the database will flag the DMR as being in non-receipt. If the
Certifier chooses to discontinue using NetDMR and return to using paper forms, the Certifier
must complete, sign, and submit to the regulatory authority a new subscriber agreement with
the ""Inactivation" check box selected. If the regulatory authority does not receive this form, it
is likely that the system will continue to produce "non-receipt"' flags (indicating reporting
violations).
• VERIFICATION: Upon receipt of a Document, NetDMR shall process the Document to make it
accessible to the Regulatory Authority and the Certifier. The Certifier is responsible for the
content of each transmission, in accordance with the associated certification statement, and for
reviewing the accuracy of the processed document in accordance with the associated certification
statement, and for reviewing the accuracy of the processed document information and as made
available by the NetDMR system.
• SIGNATURE: The Certifier shall adopt as its electronic signature any Personal Identification
Number (PIN) assigned by the Regulatory Authority following acceptance of this Agreement.
The Certifier agrees that any such Signature affixed to or associated with any transmitted
Document shall be sufficient to verify such party originated and possessed the requisite authority
both to originate the transaction and to verify the accuracy of the content, in the format of the
specified NetDMR transmission protocol or otherwise, at the time of transmittal. The Certifier
also expressly agrees that each report it submits by using its PIN constitutes their agreement with
the associated certification statement.
• SECURITY: The parties shall take reasonable actions to implement and maintain security
procedures necessary to ensure the protection of transmissions against the risk of unauthorized
access, alteration, loss or destruction including, but not limited to: protecting the secrecy of
passwords and electronic signatures and transmitting only files in an acceptable protocol.
• USE OF PIN: Each Certifier shall be either the permittee or a person identified by the permittee
as a representative authorized for signatory purposes by the permittee for each facility, person, or
113
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
other entity for which information is being reported. If a PIN has been compromised or where
there is evidence of potential compromise, it will be automatically or manually suspended. In
addition, the Regulatory Authority will inactivate or revoke a PIN where the Certifier is no longer
an authorized representative. Each Certifier expressly agrees that the Regulatory Authority may
act immediately and unilaterally in any decision to suspend, inactivate, revoke, or otherwise
disallow use of a PIN by any Certifier, where the Regulatory Authority believes that such action
is necessary to ensure the authenticity, integrity or general security of transmissions or records, or
where there are any actual or apparent violations of this agreement.
INABILITY TO TRANSMIT OR FILE REPORTS ELECTRONICALLY: No party shall be
liable for any failure to perform its obligations in connection with any Electronic Transaction or
any Electronic Document, where such failure results from any act or cause beyond such party's
control which prevents such party from electronically transmitting or receiving any Documents,
except that the Certifier is nonetheless required to submit records or information required by law
via other means, as provided by applicable law and with the time period provided by such law.
CONTINUATION OF OPERATIONS: In the event that electronic submission of DMR data is
not possible, it is the responsibility of the certifier to submit paper copies in accordance with the
requirements of the authorizing permit. Failure to submit DMR data by the date required by the
permit is a violation and will be recorded as such.
SEVERABILITY: Any provision of the Agreement which is determined to be invalid or
unenforceable will be ineffective to the extent of such determination without invalidating the
remaining provisions of this Agreement or affecting the validity or enforceability of such
remaining provisions.
TERMINATION AND RENEWAL: The agreement may be terminated by either party. Upon
termination of this agreement, the associated ability to submit electronic information through
NetDMR will also terminate. This subscriber agreement becomes effective upon notification of
approval by the Regulatory Authority to the Certifier (which may be either/or an automated
message from the NetDMR software, or separate notification). The regulatory authority will
normally provide notification of the effective date, but if no date is provided, the effective date is
the next reporting cycle following the notification. The subscriber agreement will continue until
modified by mutual consent or unless terminated with 60 days written notice by any party. The
permittee must resubmit this form at the time that a new permit application is submitted or when
permit responsibility transfers from one entity to another. This subscriber agreement should be
periodically reviewed and amended or revised when required. The requirements of this subscriber
agreement may, eventually, be incorporated into the NPDES permit so that they would be
renewed at the time of each discharge permit reissuance. The regulatory authority reserves the
right to approve or disapprove this subscriber agreement.
GOVERNING LAW: This Agreement shall be governed by and interpreted in accordance with
40 CFR 122, 40 CFR 3, and other applicable state provisions.
AGREEMENT:
4.5.1 agree:
¦ To protect my account and password from compromise, not allow anyone else to
use my account, and not share my password with any other person;
¦ To change my password if I believe it becomes known to any other person;
¦ To promptly report to Regulatory Authority any evidence of the loss, theft, or
other compromise of my account or password not later than one business day;
¦ To notify Regulatory Authority, in writing, if I terminate my employment, am
reassigned or any other change in my status that causes me to cease to be a
certifier represent any of the requested sites for the organization's electronic
reports to NetDMR. Notification should occur as soon as this change occurs.
¦ To review, in a timely manner, the email and onscreen acknowledgements and
copies of documents submitted through my account to NetDMR;
114
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
¦ To report any evidence of discrepancy between the document submitted, and
what NetDMR received;
¦ That in no event will Regulatory Authority be liable to me or my employer for
any special, consequential, indirect or similar damages, including any lost profits
or lost data arising out of the use or inability to use the software or of any data
supplied therewith even if Regulatory Authority or anyone else has been advised
of the possibility of such damages, or for any claim by any other party.
Regulatory Authority disclaims all warranties, express or implied, including but
not limited to implied warranties of merchantability and fitness for a particular
purpose, with respect to the software and the accompanying written materials
«add state conditions here»
I understand that I will be held as legally bound, obligated, and responsible by the electronic
signature created as by a handwritten signature.
D. Inactivation/Removal
Permittee must indicate reason for inactivation in Section B of the form. This is done to inform the
regulatory authority whether the permittee is switching back to paper DMRs, is no longer in business, or
has a temporary reason for inactivation.
E. Signatory Authorization
The signatory authority is the appropriate individual identified under 40 CFR 122.22 with the authority to
sign permit applications, reports, and other permit-required submittals (e.g., DMRs).
Permit ID(s): TX0000014
I, Jane Doe, have the authority to enter into this Agreement for and Permit ID TX0000014
under the applicable standards. I request Regulatory Authority grant John Smith the ability to submit
DMRs for Permit ID TX0000014.
F. Subscriber Signature
The subscriber is the NetDMR user that submits this agreement to request to electronically sign DMRs.
The subscriber is given signatory authority to sign reports and other information (e.g. DMRs) either under
40 CFR 122.22(a) or is delegated signatory authority by the individual(s) identified as the signatory
authority in Section E of this agreement [See 40 CFR 122.22(b)].
Permit ID: TX0002440
I, John Smith, have the authority to enter into this Agreement for ABC Steel and Permit ID TX0002440
under the applicable standards.
Permit ID: TX0000014
I, John Smith, am authorized by the signatory authority named in Part E of this document, who does have
the authority under the applicable standards, to enter into this agreement for AAA Waste and Permit ID
Signatory Authority Signature
President
Title
Date
TX0000014.
115
-------
NetDMR Regulatory Authority User Guide
tWy Draft - May 1, 2009
By submitting this application to Regulatory Authority I, John Smith, have read, understand, and accept
the terms and conditions of this subscriber agreement. I certify under penalty of law that I have personally
examined and am familiar with the information submitted in this application and all attachments and that,
based on my inquiry of those persons immediately responsible for obtaining the information contained in
the application, I believe that the information is true, accurate and complete. I am aware that there are
significant penalties for submitting false information, including the possibility of fine and imprisonment.
Subscriber Signature Date
Print this form, save a copy for your records, and mail to: «insert regulatory authority mailing address»
Checklist - Permitting Authority Use Only:
Check
Name
Date
Form Received by
Verified ICIS-NPDES Permit Limits
Regulatory Authority Approves NetDMR
Authorization
ICIS-NPDES NetDMR Flag Populated
User Approved in NetDMR Application
Notification to User
Inactivated?
116
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix B. Fraud Analysis
Administrators will periodically review the results of the fraud analysis and the login logs
to determine if an account has been compromised. If it is determined that a compromise
has occurred, the affected account will need to be locked, preventing the user from
signing eDMRs, and the user will be contacted to address the situation.
NetDMR includes functions that allow NetDMR Administrators to detect the possibility
that a user's device has been compromised:
1. Each time a user logs in to NetDMR, the IP and date/time of the login is
stored. Inconsistencies in the logins, such as different IP addresses may indicate a
compromised password.
2. NetDMR will only allow a user to maintain a single concurrent NetDMR
session. If the user is already logged in, the previous login will be invalidated. If
overlapping login attempts are frequently made, it may indicate a compromised
password.
3. NetDMR will include fraud analysis functionality, in which the logs are
periodically analyzed for irregularities. Irregularities will be flagged for NetDMR
Administrators to investigate and take further action, if appropriate. The
irregularities NetDMR will flag are:
a. Inconsistencies in the logins, such as use of multiple IP addresses.
b. Frequent overlapping login attempts from different IP addresses.
c. Irregular submission patterns. An example of an irregular pattern
would be a user who has submitted a single DMR every month for the past
6 months, but then submits 50 in one month.
NetDMR includes functions that allow NetDMR users to detect the possibility that their
account has been compromised:
1. After each DMR is submitted the submitter is sent an email
acknowledging the submission.
2. After logging in to NetDMR, a list of the user's previous logins is
displayed, including the date/time of the login and whether or not a submission
was made during that session.
If it is determined that a compromise has occurred, the user is required to lock their
account and notify the Regulatory Authority.
117
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix C. Validating CORs with Digital Signatures
NetDMR digitally signs the copy of record for a DMR using a public key encryption
process. The purpose of the digital signature is to provide assurances that the COR was
submitted through NetDMR.
Public key encryption can be described as using a locked mailbox with a mail slot. The
mail slot is exposed and accessible to the public. Its location or street address is in
essence the public key. Anyone knowing the street address can go to the mailbox and
drop a written message through the mail slot. However, only the person who possesses
the key can open the mailbox and read the message.
The National Installation of NetDMR has its own public/private asymmetric key pair
used for digital signatures. The public portion of the key pair is what you see when you
click on the 'Download COR Sig. Public Key' hyperlink on the Edit COR page. The
private part of the key pair is stored in the NetDMR database only accessible to the
NetDMR System Administrators. The Public/Private Key pair is associated with a
signing certificate, so the pair being used by the NetDMR Application will change
whenever a signing certificate is changed by a System Administrator.
When one or more DMRs are submitted to ICIS-NPDES, a submission receipt is created
for each resulting COR. The submission receipt is an XML document where the XML
tags provide semantic meaning to the data. The receipt includes:
1. Confirmation Number - a unique confirmation number is generated based on
the user account information, IP of user, and current system date. The
confirmation number is unique to the submission. If multiple DMRs are submitted
by the user at the same time, each DMR within the submission will have the same
confirmation number.
2. The hash of the data document - a string created by running the data document
through an algorithm. This algorithm will only produce the same string multiple
times if all the data in the document is exactly the same each time, thus a simple
comparison of the two strings can prove if the data in the document has changed.
3. Date/Time of the submission
4. Identifying information from the signing account including:
a. Full Name of the submitting party
b. Account ID of the submitting party
c. Email Address of the submitting party
d. Hashed Password (at time of signing)
5. IP address of the submitting computer.
Digital signatures can be verified by generating the hash value of the COR and
comparing it to the hash retrieved by applying the NetDMR public key to the digital
signature. NetDMR will compare the hashed form of the user-supplied password
(appended with the user salt) and the hashed form of the answer to the secret question
provided during the signing process to the hashed form of the user's password and the
hashed form of the user's response to the secret question stored in the database.
118
-------
NetDMR Regulatory Authority User Guide
ijjf Draft - May 1, 2009
A user can be traced back to a COR Submission in two ways. First, the installation from
which the submission originated can be tracked through the COR Signature Public Key
which is specific to each installation. Second, the NetDMR Database uses links between
tables to track users and their DMR submissions. These links are used to show which
user submitted a COR as well as for Suspect Analysis upon which a User has submitted
an unusually high number of CORs within a period that triggers a flag for further
analysis. This number is calculated using a statistical formula regarding monthly
submissions.
The three primary COR alteration scenarios the signature process is designed to protect
against are detailed below, along with the processes NetDMR will use to mitigate the
risk.
> Signatory Falsification Scenario
Description: A signatory claims that NetDMR does not contain the actual submitted
data by providing an alternate COR and digital signature. The steps to replicate this
use case include:
1. The signatory submits a document to NetDMR and receives a copy of the
COR.
2. The signatory alters the COR and recalculates the hash value.
3. The signatory claims the COR in NetDMR does not represent that actual
submitted data and provides the modified COR and hash value as proof.
Mitigation: This use case is mitigated as follows:
It is computationally infeasible for the user to forge the digital signature
without the private key.
The NetDMR private key will be protected from unauthorized access by
storing it in a secure location on the NetDMR server. Physical access to the server
will be restricted to NetDMR System Administrators only.
A NetDMR administrator is required to specify which key pair on the
server NetDMR will use for digital signatures. NetDMR will log any changes
made to the key/pair used by NetDMR for signing CORs.
These strategies protect NetDMR from unauthorized users attempting to swap a
secure key pair with a compromised one. Such a change would require access to both
the physical server and either the database or Administrator access rights to the
NetDMR.
> Regulatory Authority Staff Falsification Scenario
Description: A Regulatory Authority staff member alters the COR in NetDMR
without the signatory's knowledge. A possible scenario includes an attempt to alter a
Signatory's submission from being compliant to non-compliant.
Mitigation: This use case is mitigated through the following measures:
Alterations would require access to the NetDMR database. The staff
member would also need a detailed understanding of the data model to make all
119
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
the necessary alterations to the COR, regenerate the hashes, and modify the
various logs.
The staff member would require access to the NetDMR private key in
order to generate a new signature. The key pair can only be registered for use with
NetDMR through direct access to the NetDMR server. Physical access to the
server will be restricted to NetDMR System Administrators only. Additionally, a
NetDMR Administrator must configure NetDMR to use the registered key pair.
NetDMR allows Administrators to specify one or more email addresses
that are copied on all submission acknowledgement emails. The submission
acknowledgement email contains the signature of the COR. The staff member
would have to alter the signature contained in the original email sent to these
addresses to avoid detection of the change.
The NetDMR database will be periodically backed up. The staff member
would need to alter the backups to reflect the changed data.
If the internal user was able to circumvent the numerous protections, the
signatory would still have a valid COR signature. As described in Case A, it is
computationally infeasible for the Signatory to create a valid NetDMR signature
without the private key. The fact that the Signatory has a valid signature would
provide strong evidence that the data in NetDMR had been altered.
To alter the submission without detection the staff member (or members) would
require access to the database, the NetDMR server, tape backups, and the email
system. The staff member would also need enough detailed knowledge of NetDMR to
make all the necessary modifications within the database. It is extremely unlikely a
single staff member, or even a couple staff members, would have the access and
knowledge required to make all necessary changes to prevent detection. Additionally,
the dual protection in place for registering and configuring the NetDMR
public/private key makes it difficult for a single user to substitute a new key pair.
Third Party Modification Scenario
Description: A third party alters the COR in NetDMR without the knowledge of the
Regulatory Authority or signatory. A possible scenario includes a group attempting to
alter a submission from being compliant to non-compliant in an attempt to cause
enforcement actions against a facility.
Mitigation: Without the cooperation of the signatory or an internal staff member, all
mitigation strategies applied to Case A and Case B would apply to this use case. In
addition, the malicious user would need to gain access to the network on which
NetDMR is installed.
120
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix D. Agency Maps
When a new NetDMR Instance is created a list of all permits that are administered by the
regulating agency need to be retrieved from ICIS and stored within the Instance. To do this, one
or more "Agency Mappings" must be provided by the State, Tribe or EPA Region to the
NetDMR System Administrator.
An Agency Map is a combination of a two character NPDES permit prefix that matches a State
or Tribal code in ICIS and a NetDMR Agency Type Code that corresponds to an Issuing
Organization Type assigned to permits within ICIS.
For example:
• A new Instance needs to be created for the State of Alabama to contain permits
administered by the state. There is only one Agency Map of "AL-ST6"
• A new Instance needs to be created for the Commonwealth of Massachusetts to contain
permits administered by the state and its contractor. There are two Agency Maps of
"MA-ST6" and "MA-SC6.
• A new Instance needs to be created for the St. Regis tribe to contain permits administered
by the tribe. There is only one Agency Map of "SR-TR6"
• A new Instance needs to be created for EPA Region 6 to contain permits administered by
the Region. There are four Agency Maps of "AR-EP6", "LA-EP6", "NM-EP6", and
"TX-EP6".
NetDMR Agency Type Codes with Corresponding ICIS Issuing Organizations
NetDMR Agency Type Code
ICIS Issuing Organization
CT6
County
EC6
EPA Contractor
E06
Other EPA
EP6
U.S. EPA
IN6
Interstate
LC6
Local
MN6
Municipal
OF6
Other Federal
RG6
Regional
SC6
State Contractor
S06
Other - State
ST6
State
TR6
Tribal
An Agency Map can only be assigned to one Instance at a time. States, Tribes and EPA Regions
must work together to select their own Issuing Organization types and change the permits they
administer in ICIS to the Issuing Organization Types they selected. Otherwise, they run the risk
of having their permits in the wrong Instance or unavailable in NetDMR.
121
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
The moment an instance is created, NetDMR requests basic permit information from ICIS-
NPDES using the Agency Maps as the selection criteria. After the initial request for Basic
Permit occurs, NetDMR will request the data from ICIS-NPDES again every weekend for each
Instance based upon their agency maps. For example, the Alaska Instance is created with an
agency map of "AK-ST6". NetDMR will request all permits that have a NPDES Permit ID
starting with MAK" and an Issuing Organization Type of "State".
There are times when permits within an EPA Region may need to be reassigned to a State or
Tribal Instance. You will need to work with the State or Tribe to change the Issuing
Organization Type in ICIS for all affected permits to an Issuing Organization Type used by the
State or Tribe, then refresh your permit and
DMRdata. You will be able to view the
CORS for these permits in your Instance only
up until the time that you refreshed this data.
If an agency map is added to or deleted from
an existing instance NetDMR will request
basic permit information from ICIS-NPDES
using only the Agency Maps that exist after
the changes are saved. An example of this scenario is where Region 9's instance was originally
created with agency maps for "NN-EP6", "AZ-EP6", "CA-EP6", "NV-EP6", "HI-EP6". After a
year they delegate all of the Navajo Nation permits to that tribe and want DMRs for American
Samoa to start being entered into NetDMR. The NetDMR System Administrator will add an
agency map of "AS-EP6" and remove the agency map of "NN-EP6". Upon saving these
changes, NetDMR will request all permits from ICIS-NPDES that have a NPDES Permit ID
starting with "AZ", "CA", "NV", "HI" and "AS" and an Issuing Organization Type of "EPA".
Rather than wait one week, Regulatory Administrators are able to refresh basic permit data in
NetDMR with ICIS-NPDES data at any time using the View Network Activity page. See
Section 3.10.2 for details on how to do this.
Any time you change a permit's
Issuing Organization Type in ICIS to
either add the permit to your Instance or
remove it, you should refresh the permit
and DMR data in your Instance.
122
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix E. Basic Permit and DMR Refresh
Basic Permit Refresh
When an instance is created, NetDMR requests basic permit information from ICIS-NPDES
using Agency Maps as the selection criteria. After the initial request for Basic Permit occurs,
NetDMR will request the data from ICIS-NPDES again every week for each Instance based upon
their agency maps. For example, the Alaska Instance is created with an agency map of "AK-
ST6". NetDMR will request all permits that have a NPDES Permit ID starting with MAK" and an
Issuing Organization Type of "State".
If an agency map is added to or deleted from an existing instance NetDMR will request basic
permit information from ICIS-NPDES using only the Agency Maps that exist after the changes
are saved. An example of this scenario is where Region 9's instance was originally created with
agency maps for "NN-EP6", "AZ-EP6", "CA-EP6", "NV-EP6", "HI-EP6". After a year they
delegate all of the Navajo Nation permits to that tribe and want DMRs for American Samoa to
start being entered into NetDMR. The NetDMR System Administrator will add an agency map
of "AS-EP6" and remove the agency map of "NN-EP6". Upon saving these changes, NetDMR
will request all permits from ICIS-NPDES that have a NPDES Permit ID starting with "AZ",
"CA", "NY", "HI" and "AS" and an Issuing Organization Type of "EPA".
Rather than wait one week, Regulatory
Administrators are able to refresh basic
permit data in NetDMR with ICIS-
NPDES data at any time using the View
Network Activity page.
NetDMR retrieves the list of permits that
are available for reporting for a regulatory authority through the Basic Permit Data Flow
(BPDF). The BPDF retrieves the following information from ICIS for each permit:
> Permit Identifier
> Permit Status Code
> Facility Name
> Facility Address
> Permit Dates: original issue date, most recent issue date, effective date,
expiration date, termination date
If the BPDF request was for a complete replacement of the permit data (e.g., the Agency Map
was provided in the request), the permit reconciliation process will be used for all permits that
are either returned in the result file or in the NetDMR database. If the BPDF request was for a
specific set of permits (e.g., Permit IDs were provided), only the permits that were included in
the BPDF request are reconciled. For example, if the request only specified permit TX12345
and TX98765, the permit reconciliation process would only occur for permits TX12345 and
TX98765.
The permit reconciliation process is as follows:
ICIS will process NetDMR requests for
permits on a nightly basis. Check NetDMR the
next morning for your newly refi'eshed permits if
you requested a refi'esh of your permits.
123
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
1. If the permit exists in the result file, but not in the NetDMR database, add
the permit information to the NetDMR database. The permit will be
matched by comparing the Permitldentifier tag in the result file (or
provided in the original Solicit Request) to the permitid column in the
NetDMR Permit table.
2. If the permit exists in the result file and the NetDMR database, update the
information in the NetDMR database with the information in the result
file.
3. If the permit exists in the NetDMR database but not in the result file, the
permit is no longer valid for electronic reporting in NetDMR. NetDMR
users will still be able to view previously submitted CORs, and request the
view role on these permits. Net DMR will not send a notification that the
permit is no longer valid for electronic reporting to users that can access
the permit as CORs will still be available for viewing.
DMR Refresh
When the first Signatory for a permit is approved by a Regulatory Administrator, NetDMR
requests one year's worth of anticipated DMRs or "empty slot records" from ICIS-NPDES using
the following criteria:
> Monitoring Period Start Date (MPSD) from 12 months before to 1 month after the date
the first Signatory request is approved
> Monitoring Period End Date (MPED) from the date the first Signatory role was approved
to 12 months afterward.
Each month after this, NetDMR requests another month's worth of data using the day of the
month the Signatory was approved to ensure that NetDMR always has at least one year's worth
of empty slot records. NetDMR will automatically retrieve empty slots for all permits for which
there is at least one NetDMR user with the signatory or edit role. DMRs will continue to be
retrieved as long as at least one user has the signatory or edit role for the permit.
To illustrate this concept, the following table lists 10 DMRs for a permit with their reporting
frequencies and monitoring period dates in ICIS.
Sample D
MR list for Permit RI1234567
DMR ID
Reporting Frequency
Monitoring Period
Start Date
Monitoring Period End
Date
DMR1
Annual
01/01/2007
12/31/2007
DMR2
Quarter
01/01/2007
03/31/2007
DMR3
Month
01/01/2007
01/31/2007
DMR4
Month
02/01/2007
02/28/2007
DMR5
Month
03/01/2007
03/31/2007
DMR6
Month
04/01/2007
04/30/2007
DMR7
Quarter
04/01/2007
06/30/2007
DMR8
Month
05/01/2007
05/31/2007
DMR9
Month
06/01/2007
06/30/2007
124
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
DMR ID
Reporting Frequency
Monitoring Period
Start Date
Monitoring Period End
Date
DMR 10
Month
07/01/2007
07/31/2007
If the first Signatory is granted access to the permit on March 1, 2007 the next table shows a list
of requests that NetDMR would make to ICIS and the DMRs that would be returned for each
request. The Current Date column represents the date NetDMR makes the request.
Call
Date of
Monitoring
Monitoring
Monitoring
Monitoring
DMRs
#
Call
Period
Period
Period End
Period End
Retreived from ICIS
Start Date
Start Date
Date
Date
Range -
Range -
Range -
Range -
Start
End
Start
End
1
03/01/2007
03/01/2006
04/30/2007
03/01/2007
03/01/2008
DMR1,DMR2,DMR5,DMR6,DMR7
2
04/23/2007
05/01/2007
06/30/2007
N/A
N/A
DMR8,DMR9
3
06/23/2007
07/01/2007
09/30/2007
N/A
N/A
DMR 10
For Call #1, NetDMR will use both MPSD and MPED date ranges to specify the DMRs that
should be returned because this is the first time DMRs are retrieved for the permit. The request
returns reports that have a MPSD of exactly one year before the first Signatory role was granted
up and 1 month after the first Signatory role was granted. The use of the MPED range for this
initial retrieval restricts the result set to only those DMRs with a MPED that has not passed. This
eliminates the DMRs with monitoring periods that have already passed (e.g., DMR3, DMR4).
After the initial call, NetDMR will periodically call the service to retrieve the next block of
DMRs. The MPSD range is chosen so as to not overlap with the range of the previous request for
the permit. The call is initiated 7 days prior to the MPSD range end date from the previous
request. This is to ensure that NetDMR has received the next set of DMRs before a user would
be able to enter data for them.
Call #2 demonstrates this relationship with the previous request. The call is made 7 days before
the MPSD Range End of Call #1. The MPSD Range Start is one day after the MPSD Range End
of Call #1. The MPSD Range End is set to the amount of time specified in the configuration file,
two months in this case. This call returns the next two monthly DMRs, DMR8 and DMR9. A
similar process is performed for Call #3, which returns DMR10.
Rather than wait one month at a time, Regulatory Administrators, Signatories and users with the
Edit role are able to refresh DMR empty
slot records in NetDMR with ICIS-
NPDES data at any time. Regulatory
Administrators can use the View
Network Activity page (see Section
3.10.2 of the Regulatory Authority User
Guide for details on how to do this).
Signatories and users with the Edit role
can use the Refresh DMRs hyperlink on
the DMR Search Results page (see the
ICIS will process NetDMR requests for
DMRs on a nightly basis. Check NetDMR the
next morning for your newly refi'eshed DMRs if
you are the first Signatory for a permit or if you
requested a refi'esh of the DMR you were working
on.
125
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Section 5.2 of this guide for details on how to do this).
The reconciliation process used depends upon which type of request generated the result file. In
addition, the list of DMRs that are reconciled is determined using the parameters that were
provided in the ESDF service request. DMRs are reconciled individually. For example, if the
result file includes information for ten DMRs and the information for one of the DMRs is invalid
for NetDMR (e.g., Monitoring Period End Date is missing), NetDMR will reject the invalid
DMR but accept the nine valid ones.
If the request was for DMRs using a date range NetDMR will reconcile the DMRs returned in
the result file and the set of DMRs in the NetDMR database that meet the original request
criteria. For example, if DMRs were requested for a Permit ID of RI12345 and an MPED range
of 01/01/07 - 01/31/07, NetDMR would also search the NetDMR database for the set of DMRs
that meet this criteria. The union of the DMRs in the result file and the set returned from
searching the database would be reconciled.
If the request was for a specific DMR NetDMR will reconcile all the DMRs specified in the
request. For example, if the request included information for two DMRs but the result file only
included one of the DMRs, the DMR reconciliation process would occur for both DMRs that
were originally requested.
The DMR reconciliation process includes the following steps:
5. If the DMR exists in the result file, but not in the NetDMR database, add the
DMR information to the NetDMR database. The DMR will be in the state 'Ready
for Data Entry'.
6. If the DMR exists in the in the NetDMR database but does not match a DMR in
the result file, deactivate the DMR in the NetDMR database. The CORs of
deactivated DMRs can still be viewed, but the DMR can not be edited or signed
(because ICIS no longer requires reporting for the DMR). Deactivated DMRs that
do not have an associated COR will not be displayed in search results. If a
subsequent result file includes a DMR that corresponds to a deactivated DMR,
NetDMR will remove the flag (i.e., reactivating the DMR) and replace the DMR
as described in item 3.
7. If the DMR exists in the result file and the NetDMR database, replace the
information in the NetDMR database with the information in the result file. The
complete set of possible changes is as follows:
a.
Add new permitted feature(s) to the DMR.
b.
Remove permitted feature(s) from the DMR.
c.
Update permitted feature information on the DMR (e.g., the permitted
feature description code).
d.
Add new parameter(s).
e.
Remove parameter(s).
f.
Update parameter(s). (Includes updating the monitoring location code and
effluent trading status flag.)
g-
Add new numeric condition(s).
h.
Remove numeric condition(s).
126
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
l.
Update numeric condition(s). (Includes updating the unit code.)
Any data that may have been entered by a user for a DMR (e.g. a partially completed DMR)
affected by the reconciliation process will not be modified, provided that the corresponding
measurements still exist in the revised DMR. Previously entered data associated with
measurements that do not exist in the revised DMR will be deleted. NetDMR will perform
validation again for all DMRs that are updated in this manner.
Submitted DMRs and CORs generated prior to any updates resulting from reconciliation will not
be affected by this process. However, corrections for a reconciled DMR will start from the
replaced DMR, not the DMR as originally submitted. For example, if a parameter existed when
the DMR was originally submitted but no longer exists, the corrected DMR will not display this
parameter on the DMR entry screen.
If one or more DMRs are missing for your permit after a refresh follow the steps in Appendix K
for troubleshooting missing DMRs.
127
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix F. Job Processing Schedule
NetDMR runs jobs such as DMR import, requesting Permit and empty slot DMR data from ICIS,
and submitting CORs to ICIS at scheduled intervals as described in the table below.
Job Processing Schedule for NetDMR in Production
Job Processing Schedule for NetDMR in Production
Job Process
NetDMR Interval
ICIS Processing Frequency
DMR Import
Every 5 minutes
N/A
Basic Permit Data from ICIS -
for new Instance
Every 2 hours between 10:15
a.m. - 6:15 p.m.
TBD
Basic Permit Data from ICIS -
maintenance of existing
Instance
Every 2 hours between 10:15
a.m. - 6:15 p.m.
TBD
DMR Data from ICIS - for First
Signatory Approved
Every 2 hours between 10:15
a.m. - 6:15 p.m.
TBD
DMR Data from ICIS -
maintenance of existing
Instance
Every 2 hours between 10:15
a.m. - 6:15 p.m.
TBD
Basic Permit and DMR Data
from ICIS - Manual Refreshes
Every 2 hours between 10:15
a.m. - 6:15 p.m.
TBD
DMRCOR Submission to ICIS
7:00 p.m.
Every 15 minutes between 6:00
p.m. - 6:00 a.m.
Job Processing Schedule for NetDMR in the Test Environment
Job Process
NetDMR Interval
ICIS Processing Frequency
DMR Import
25 and 55 minutes after the
hour every hour
N/A
Basic Permit Data from ICIS -
for new Instance
1 minute after the hour between
9:00 a.m. - 5:00 p.m.
15 minutes after received
Basic Permit Data from ICIS -
maintenance of existing
Instance
1 minute after the hour between
9:00 a.m. and 5:00 p.m.
15 minutes after received
DMR Data from ICIS - for First
Signatory Approved
1 minute after the hour between
9:00 a.m. and 5:00 p.m.
15 minutes after received
DMR Data from ICIS -
maintenance of existing
Instance
1 minute after the hour between
9:00 a.m. and 5:00 p.m.
15 minutes after received
Basic Permit and DMR Data
from ICIS - Manual Refreshes
1 minute after the hour between
9:00 a.m. and 5:00 p.m.
15 minutes after received
DMR/COR Submission to ICIS
20 and 50 minutes after the
hour every hour
15 minutes after received
128
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix G. Troubleshooting Missing DMRs
There are various reasons why a DMR may be missing from NetDMR. The reasons and their
solutions are described below.
Reason #1
NetDMR will not display all DMRs that exist for a permit. Instead, NetDMR will
display only DMRs that have a Monitoring Period Start Date on or before the day of your
search and a Monitoring Period End Date on or after the day of your search minus 14
months. For example, if you perform your search on April 15, 2009, NetDMR will
display DMRs where monitoring started before April 16, 2009, and ended after February
14, 2008.
Solution
If the DMR's monitoring period end date is after the date the first Signatory for your
permit was approved and its Monitoring Period Start Date is on or before the day of your
search, perform the search by entering a Monitoring Period End Date range that will
cover the Monitoring Period End Date(s) of the desired DMR(s).
Reason #2
When the first Signatory for a permit is approved, NetDMR retrieves requests one year's
worth of anticipated DMRs or "empty slot records" from ICIS-NPDES using the
following criteria:
> Monitoring Period Start Date (MPSD) from 12 months before to 1 month after the
date the first Signatory request is approved.
> Monitoring Period End Date (MPED) from the date the first Signatory role was
approved to 12 months afterward.
If the DMR's monitoring period end date is before the date the first Signatory for your
permit was approved, have your Regulatory Administrator request the desired DMR(s)
from ICIS. After ICIS returns the DMR(s), perform the search by entering a Monitoring
Period End Date range that will cover the Monitoring Period End Date(s) of the desired
DMR(s).
NetDMR only requests DMRs from ICIS that are anticipated or "scheduled" on a regular
basis such as monthly, quarterly, semi-annually and annually. If a DMR is anticipated on
an irregular or "unscheduled" basis such as sometime during a quarter or year, ICIS does
not store it and cannot provide it to NetDMR.
Either submit the DMR to the Regulatory Authority on paper, or have your Regulatory
Authority look at the limit set in ICIS to see if it is unscheduled. If it is unscheduled, you
should see if your Regulatory Authority is willing to change the limit set for the limits in
ICIS from "unscheduled" to "scheduled" and set the limits to "optional". They will need
Solution
Reason #3
Solution
129
-------
NetDMR Regulatory Authority User Guide /f£*%
^etDMR* Draft - May 1, 2009 \rrJ
to refresh the DMR data for your permit if they agree to change the limit set. (Note that
violations will not be calculated in ICIS for optional limits).
Reason #4
ICIS only provides DMRs for active limits to NetDMR and your limit(s) have been
inactivated.
Solution
Ask your Regulatory Authority to look at the limit set in ICIS to see if it is inactive. If it
is inactive but should be active, have your Regulatory Authority change the limit set to be
active and refresh the DMR data for your permit.
Reason #5
NetDMR automatically pulls a particular DMR data once and your limits changed or
your permit was reissued in ICIS since the DMR was pulled.
Solution
Have your Regulatory Administrator, Signatory or any user with the Edit role refresh
DMR empty slot records in NetDMR with ICIS-NPDES data. Regulatory Administrators
can use the View Network Activity page (see Section 3.10.2 of the Regulatory Authority
User Guide for details on how to do this). Signatories and users with the Edit role can
use the Refresh DMRs hyperlink on the DMR Search Results page (see the Section 5.2 of
this guide for details on how to do this).
Reason #6
Your permit was administered by one Regulatory Authority but has been changed to
another recently. For example, an EPA Region was authorized to administer your permit
but now a state or tribe is authorized to administer your permit. All CORs submitted
using the old Regulatory Authority's instance can be viewed, but all DMRs have been
moved to the new Regulatory Authority's instance including any that were in progress.
Solution
You will need to create an account for the new Regulatory Authority's instance and
search for your DMRs on their site. NetDMR will allow you to create the new account
using the same user account name and password as your old instance.
Reason #7
The Issuing Organization Type for your permit in ICIS was changed to one that is not
recognized by your Regulatory Authority's Instance.
Solution
Ask your Regulatory Authority Administrator to compare the Issuing Organization Type
for your permit in ICIS against their Agency Mappings for their NetDMR Instance and
either change the Issuing Organization Type in ICIS to match one of their existing
Agency Mappings or add a new Agency Map to their Instance that matches your permit's
Issuing Organization Type. See Appendix D for more information on Agency Maps.
130
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Reason #8
You or your Regulatory Authority Administrator refreshed your DMR(s) but ICIS has not
processed your request yet.
Solution
ICIS processes DMR requests on a nightly basis. Wait until morning after your refresh
was requested to search for your DMR(s).
Reason #9
The request for data from ICIS failed.
Solution
Have your Regulatory Administrator check the View Exchange Network Activity page
for the status of your request. If your request failed the Regulatory Authority
Administrator will need to contact NetDMR User Support for assistance.
If your DMR is still missing after checking through all of the troubleshooting steps above ask
your Regulatory Authority Administrator to report your problem to NetDMR User Support.
131
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix H. Frequently Asked Questions
User Type and Role Questions
What is an Internal User?
An Internal User is a Regulatory Authority staff member with a NetDMR account.
What is an External User?
An External User is a Permittee or Data Provider staff member with a NetDMR account.
What is a Regulatory Authority?
A Regulatory Authority is a state agency or EPA Regional office that administers
NPDES permits. Regulatory Authority staff can view partial DMRs and CORs, approve
requests from Data Provider staff, Permittee staff and other Regulatory Authority staff for
access to the Regulatory Authority's Instance on NetDMR.
What is a Regulatory Administrator?
A Regulatory Administrator is a Regulatory Authority staff member that approves or
denies requests from Permittee users wanting to become a Signatory for a permit.
What is a Permittee?
A Permittee is a staff member at a permitted facility. Permittees can view, enter and
upload DMRs into NetDMR, edit CORs, sign and submit DMRs, and approve requests
from Data Provider staff and other Permittees for access to the facility's permit(s).
What is a Permit Administrator?
A Permit Administrator is a Permittee staff member that approves or denies requests from
Data Providers and other Permittees to view and edit DMRs for their NPDES permit.
They also approve or deny requests from Regulatory Authorities to view DMRs that have
not been signed and submitted ("partial DMRs").
What is a Signatory?
A Signatory is a Permittee staff member that is authorized to sign and submit DMRs for a
specific permit. Because NetDMR uses digital signatures, new Signatories must print off
a Subscriber Agreement form generated by NetDMR, sign it and mail it to the Regulatory
Authority listed within the Subscriber Agreement before he/she can sign and submit
What is a Data Provider?
A Data Provider is a lab, consulting firm or other business that has been hired by a
permitted facility to enter or view Discharge Monitoring Reports (DMRs) on behalf of
that facility. Data Provider staff are allowed to view, enter and import DMRs into
NetDMR and edit CORs but they cannot sign and submit DMRs to ICIS. Only a
permittee with the Signatory role can do this.
Access Questions
How do I navigate to NetDMR?
Navigate to www.epa.gov/netdmr and click on a blue state within the Electronic
Reporting map. The NetDMR Welcome screen will appear. Select the name of the State
or Regional Authority Instance that administers your NPDES permit(s) from the
Regulatory Authority drop down box and click on the "Go" button.
What is an Instance?
DMRs.
132
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
NetDMR is designed to allow a State, Tribe or EPA Region to have its own Login page
that separates their own set of permits and DMRs from the other Regulatory Authorities.
How do I know what Instance to choose from the NetDMR Login page?
If you submit your DMRs to a State agency, select the name of that agency from the
dropdown list (example: "Tennessee" or "Oklahoma - DEQ"). If you submit your
DMRs to an EPA region, select the name of that region from the dropdown list (example:
"EPAR7 IA-KS-MO-NB").
How can I be sure that my permit is stored in the Instance I selected?
After you select your Instance on the NetDMR Welcome page, the NetDMR Login page
will be displayed. Click on the "Checking your Permit Id" link and enter your permit's
NPDES ID. NetDMR will tell you whether your permit is available or not.
My permit is not available in the NetDMR Instance for the State agency or EPA region that
administers it. What should I do?
If you are a Permittee or Data Provider User, contact your Regulatory Authority's
NetDMR Administrator using the email link on the NetDMR login page provided under
the "New to NetDMR?" section. If you are a state or EPA Region staff member, refer to
the Regulatory Authority Questions section.
After I register for a new account, set up my password and receive my confirmation email
that my account is ready to use, the hyperlink to NetDMR does not work. What
should I do?
Close your browser, then open it back up again and navigate to NetDMR through the map
at www, epa. gov/netdmr.
I'm getting a "Page Not Found" or "cannot display the webpage" message from my web
browser. What should I do?
Call or email NetDMR User Support at 202-564-7756 or netdmr@epa.gov with details on
the steps you were performing just before the message appeared.
I am able to log into my NetDMR Instance, but as soon as I try to do anything I get kicked
out and returned to the NetDMR Welcome page. What is wrong?
NetDMR requires that you enable session cookies to function properly. All cookies
generated by NetDMR are removed when you close your browser. Instructions for
enabling cookies in Internet Explorer are provided below. To identify what version of a
web browser you are operating, click on the Help menu in Internet Explorer or Netscape
and click on "About".
If you are using Internet Explorer 6.0 or 7.0:
1. Choose Tools, then Internet Options.
2. Click the Privacy tab.
3. Default setting is medium. Move the slider to determine which setting you
prefer.
4. You can also click on Advanced for specialized cookie treatment.
After you enable cookies, log into NetDMR again.
When I try to log into NetDMR my web browser tells me I must allow cookies. How can I
do this?
If you are using Internet Explorer 6.0 or 7.0:
1. Choose Tools, then Internet Options.
133
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
2. Click the Privacy tab.
3. Default setting is medium. Move the slider to determine which setting you
prefer.
4. You can also click on Advanced for specialized cookie treatment.
After you enable cookies, log into NetDMR again.
I forgot my NetDMR User ID. What should I do?
Navigate to NetDMR, select your Instance then click on the "Forgot User Name"
hyperlink. NetDMR will ask you for your email address and an answer for one of your
secret questions, then display your User Name if it finds your email address on file and
you answered the question correctly. If you do not answer your secret question correctly
three times in a row your account will be locked.
I forgot my NetDMR Password. What should I do?
Navigate to NetDMR, select your Instance then click on the "Forgot Password"
hyperlink. NetDMR will ask you for your email address and an answer for one of your
secret questions, then ask you to reset your password if it finds your email address on file
and you answered the question correctly. If you do not answer your secret question
correctly three times in a row your account will be locked.
I cannot log into NetDMR. What should I do?
If you forgot your User ID or password, refer to "I forgot my NetDMR User ID" or "I
forgot my NetDMR Password". If you know your NetDMR User ID and password but
cannot log in, contact the Regulatory Authority Administrator for your Instance and ask
them to reset your password.
I tried to log in but my account is locked. What should I do?
If the account became locked because you logged in with the wrong password three times
or answered a secret question with the wrong answer three times, contact the Regulatory
Authority's Administrator for your Instance. The Regulatory Administrator's email
address is provided under the "New to NetDMR?" section of the NetDMR login page for
your Instance.
If you have no idea why your account was locked this may indicate an unauthorized
individual may tried to log into your account. See "What should I do if my NetDMR
account becomes compromised?" for instructions on what to do about this.
What should I do if my NetDMR account becomes compromised?
If you are a Signatory for one or more permits you must contact your Regulatory
Authority's Administrator and request that person lock your account and repudiate all
CORs that have been submitted while your account was compromised. All others should
notify the Regulatory Authority's Administrator. The Regulatory Administrator's email
address is provided under the "New to NetDMR?" section of the NetDMR login page for
your Instance.
I'm getting a "There is a problem with the site's certificate" message from my web
browser. What should I do?
The certificate has expired and will be updated soon but you will still be able to use
NetDMR. Just click on the "Continue to this website" link and you will be taken to the
NetDMR Welcome page.
I was working in NetDMR but am now getting a "Session Expired" message. What
happened?
134
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
NetDMR tracks how long it has been since the last keystroke or mouse click was entered.
If 30 minutes have passed without a keystroke or mouse click NetDMR will
automatically log you out without saving your changes. You must log back in and re-
enter any data that was lost.
Account Questions
What should I do if my name changes?
If you are a Signatory for one or more permits you must notify the Regulatory
Administrator of your Instance before changing your name in NetDMR and re-generate
your Subscriber Agreement(s), print them, sign them and send them to your Regulatory
Authority. To re-generate your Subscriber Agreements, navigate to the "My Account"
page and click on each Subscriber Agreement icon that appears in your "My Permits"
table.
To change your name in NetDMR, log into NetDMR, click on the "My Account"
hyperlink at the top of the page and change your name. Be sure to save your changes.
What should I do if my email address changes?
Log into NetDMR, click on the "My Account" hyperlink at the top of the page and
change your email address. Be sure to save your changes. If you set up your account to
use your email address as your account ID you must start using your newly changed
email address to log into NetDMR.
Data Refresh Questions
How often is permit data refreshed from EPA's ICIS system?
When an instance is created, NetDMR requests basic permit information from ICIS.
After the initial request for Basic Permit occurs, NetDMR will request the data from ICIS
every weekend. Regulatory Administrators are able to refresh basic permit data in
NetDMR with ICIS-NPDES data at any time using the View Network Activity page.
ICIS will respond to all requests for permits from NetDMR once a night.
How often is DMR data refreshed from EPA's ICIS system?
When the first Signatory for a permit is approved by a Regulatory Administrator,
NetDMR requests one year's worth of anticipated DMRs or "empty slot records" from
ICIS-NPDES using the following criteria:
> Monitoring Period Start Date (MPSD) from 12 months before to 1 month after the
date the first Signatory request is approved
> Monitoring Period End Date (MPED) from the date the first Signatory role was
approved to 12 months afterward.
Each month after this, NetDMR requests another month's worth of data using the day of
the month the Signatory was approved to ensure that NetDMR always has at least one
year's worth of empty slot records. NetDMR will automatically retrieve empty slots for
all permits for which there is at least one NetDMR user with the signatory or edit role.
DMRs will continue to be retrieved as long as at least one user has the signatory or edit
role for the permit.
135
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Rather than wait one month, Regulatory Administrators and Permit Administrators are
able to DMR empty slot records in NetDMR with ICIS-NPDES data at any time.
Regulatory Adminstrators can use the View Network Activity page and Permit
Administrators can use the Refresh DMRs hyperlink on the DMR Search Results page.
Data Entry Questions
I entered data into a NetDMR page but it was not saved. Why?
You navigated to another page or out of NetDMR without clicking on the "Save",
"Submit" or "Confirm" button. After entering data, always be sure to save AND confirm
your changes.
After entering data and clicking on the Save or Submit button, I get a "There were errors
processing your request" message. What do I do?
Any field that has erroneous or missing data will have red text to the right of that field
explaining what caused the problem. Search through all fields on the page for red text
messages and correct them.
Instance Access Questions
I have the ability to approve or deny role requests from Permittees and Data Providers.
When should I do this?
It is the responsibility of the Permit Administrator to grant all non-Signatory access rights
to permits. If the Permit Administrator is not available a Regulatory Administrator can
approve non-Signatory access requests on a case-by-case basis. This functionality was
built into NetDMR only as a safeguard against unexpected events and is NOT intended to
be used to manage external access requests on a regular basis.
A Permittee or Data Provider requested a Signatory role and wants me to approve it now
instead of waiting for the Subscriber Agreement to arrive in the mail. Can I print
off their Subscriber Agreement in NetDMR and use it as justification for approving
their Signatory request?
No. Because of CROMERR regulations and the possibility of having to defend the
submission of DMRs in a court of law, you must have a Subscriber Agreement with the
Signatory's signature on file. The electronic version of a Subscriber Agreement is
missing the signature and cannot a substitute for the original, signed Subscriber
Agreement mailed in by a Signatory.
What is a Subscriber Agreement?
A Subscriber Agreement is "an electronic signature agreement signed by an individual
with a handwritten signature". Any NetDMR Permittee who wishes to sign and submit
DMRs to EPA must request a Signatory role for their DMR account for their permit(s),
print off the Subscriber Agreement generated by NetDMR, complete portions of the
form, then sign and mail the Subscriber Agreement to the appropriate State or Regional
Regulatory Authority. Until your Signatory role request is approved in NetDMR by the
Regulatory Administrator, you will not be allowed to sign and submit DMRs.
A Signatory told me their account has been compromised. What should I do?
Have a Regulatory Administrator lock the user's NetDMR account and then repudiate the
CORs for the unauthorized DMRs that were submitted. Accounts can be locked and
unlocked from the Edit User page. CORs can be repudiated through the Repudiate COR
136
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
page. Note that when you repudiate a COR it is removed from ICIS and the Signatory
must submit a new DMR. After repudiating each COR in question, the Regulatory
Administrator needs to unlock the account and reset the password and secret
question/answers for the account then notify the Permittee or Data Provider of the new
password and answers.
If the Signatory submitted an erroneous DMR and wants to revise it, they must search for
the COR and select the "Correct DMR" option instead of having it repudiated.
A user told me their account is locked. What should I do?
Have a Regulatory Administrator unlock the user's NetDMR account using the Edit User
page, then have the Permittee or Data Provider log back into NetDMR.
One of the NetDMR users working at my Agency has left the organization or is no longer
working with DMRs. What should I do?
Contact the Regulatory Administrator for your Agency. The Regulatory Administrator
can inactivate the account by clicking on the "Users" tab of the home page, searching for
the NetDMR account and revoking all roles for that user.
One of my facilities notified our Agency that one of their staff has left the organization or
no longer works in that capacity. What should I do?
Have them contact the Permit Administrator(s) for each of the permits they have access
to and have them delete the accounts for the permit(s).
If the staff is a Permit Administrator or Signatory the Regulatory Administrator must
inactivate the account by clicking on the "Users" tab of the home page, searching for the
NetDMR account and revoking the Signatory role for that user. Be sure that is at least
one active Permit Administrator or Signatory before inactivating the user or nobody will
be able to approve Permittee and Data Provider requests or sign and submit DMRs.
How come I cannot approve role requests for my Instance?
You must request a Regulatory Administrator role for your NetDMR account from your
"Request Access" page in order to approve Signatory requests from Permittees and
Regulatory Authority User or Administrator requests from staff within your State
Agency, Tribe or Region.
Permit Questions
What are Agency Maps?
Permits retrieved from ICIS and stored within a NetDMR Instance is based upon the
agency maps assigned to an Instance. For example, the Alaska Instance is created with
an agency map of "AK-ST6". NetDMR will request all permits that have a NPDES
Permit ID starting with "AK" and an Issuing Organization Type of "State".
If an agency map is added to or deleted from an existing instance NetDMR will request
basic permit information from ICIS-NPDES using only the Agency Maps that exist after
the changes are saved. An example of this scenario is where Region 9's instance was
originally created with agency maps for "NN-EP6", "AZ-EP6", "CA-EP6", "NV-EP6",
"HI-EP6". After a year they delegate all of the Navajo Nation permits to that tribe and
want DMRs for American Samoa to start being entered into NetDMR. The NetDMR
System Administrator will add an agency map of" AS-EP6" and remove the agency map
137
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
of "NN-EP6", Upon saving these changes, NetDMR will request all permits from ICIS-
NPDES that have a NPDES Permit ID starting with "AZ", "CA", "NV", "HI" and "AS"
and an Issuing Organization Type of "EPA".
See the Regulatory Authority User Guide for more information on agency maps.
A permit we administer is not available in my Instance. What do I do?
Click on the Instance hyperlink on your NetDMR home page and note the Agency Type
codes listed in the "Agency Mappings" table. Go into ICIS, search for the permit and
look at the "Issuing Organization Type". Either change the "Issuing Organization Type"
to match one of the Agency Type Codes for the state in NetDMR, or contact ICIS User
Support to add the Agency Type Code to the "Agency Mappings" table in NetDMR.
I entered a new permit into ICIS or reissued a permit in ICIS recently. Do I need to do
anything in NetDMR?
Yes, if the permit has DMRs for your facilities that are or will be submitted to ICIS using
NetDMR. NetDMR will request new permit data every weekend but there are times that
you may not want to wait for the new data to appear. To update NetDMR with new
information, the Regulatory Administrator for your Instance will need to use the View
Exchange Network Activity page to request new permit and DMR information.
I made changes to a permit or limit in ICIS. Do I need to do anything in NetDMR?
Yes, if the permit has DMRs for your facilities that are or will be submitted to ICIS using
NetDMR. NetDMR will request new permit data every weekend but there are times that
you may not want to wait for the new data to appear. To update NetDMR with new
information the Regulatory Administrator for your Instance will need to use the View
Exchange Network Activity page to request the most recent permit and/or DMR
information.
One or more permits were administered by an EPA Region but now a State Agency or
Tribe administers it. How does NetDMR handle this and is there anything I need to
If the State or Tribe does not have an existing NetDMR Instance, they must designate a
Regulatory Administrator to coordinate with the NetDMR System Administrator to set up
a new Instance in NetDMR and make sure that all permit in ICIS have an Issuing
Organization Type that differs from what the Region is using in order for NetDMR to be
able to request the proper permits.
If the State or Tribe has an existing NetDMR Instance, the Regulatory Administrator will
need to coordinate with the NetDMR System Administrator to add new Agency
Mappings for these permits, or log into ICIS and change each permit's Issuing
Organization type that differs from what the Region is using in order for NetDMR to be
able to request the proper permits.
The permittees and data providers will be able to view their old DMRs and CORs in the
Regional Instance but will need to begin entering DMR data in the State or Tribal
Instance.
If one of your permittees contacts you and says they were working on a DMR when the
permit was switched to the new Instance or need to submit a corrected COR, the
do?
138
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Regulatory Administrator for the new Instance must click on the "Network Activity"
hyperlink on their home page and request the DMR or COR from ICIS.
I requested a refresh of Permit Data but the NetDMR keeps displaying the old data. What
do I do?
ICIS processes NetDMR requests for permit data once a night A Regulatory
Administrator for the Instance can click on the "Network Activity" hyperlink on their
home page and find your request in the list.
If the status is "Pending" this means ICIS has not processed the request yet. If the date of
your request is the same day then wait until the next morning to check the status. If the
date of your request is one or more days earlier contact NetDMR User Support for
assistance.
If the status is "Failed" NetDMR encountered a problem communicating with ICIS.
Contact NetDMR User Support.
If the status is "Completed" but the permit in NetDMR still contains old data contact
NetDMR User Support..
DMR and COR Questions
What is a COR?
A COR or "Copy of Record" means a true and correct copy of an electronic document
received by an electronic document receiving system, which copy can be viewed in a
human-readable format that clearly and accurately associates all the information provided
in the electronic document with descriptions or labeling of the information. A copy of
record includes:
(1) All electronic signatures contained in or logically associated with that document;
(2) The date and time of receipt; and
(3) Any other information used to record the meaning of the document or the
circumstances of its receipt."
All DMRs signed and submitted to ICIS from NetDMR become the "Copy of Record".
I can see CORs for my instance but not DMRs. What is wrong?
Because a DMR in progress is NetDMR is designed for facilities to enter their DMRs,
State and EPA Regional staff are not allowed to view DMRs that are in progress unless a
Permittee or Data Provider requests help. See "A Permittee or Data Provider User needs
my help with entering their DMR" for information on how to view a partial DMR..
A Permittee or Data Provider User needs my help with entering their DMR. How can I
help?
The User must contact their Permit Administrator and let them know you will need
access to the Partial DMR. Next, you can request a View role for your NetDMR account
from your "Request Access" page in order to view the Partial DMR in question, then
notify the Permit Administrator of your pending request. Once the Permit Administrator
has approved your request you will be able to view but not edit the DMR.
I can see a partial DMR but not edit it. What is wrong?
Because NetDMR is designed for facilities to enter their DMRs, State and EPA Regional
staff are not allowed to edit DMRs.
139
-------
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
The Permittee or Data Provider User entered changes to a partial DMR while I was
helping them but I can't see their changes. What is wrong?
The User will need to save their changes, then you will need to close the DMR window
and reopen it to see their changes.
How do I know when a DMR for my Permittees or Data Provider has been submitted to
The Regulatory Administrator for your Instance can add one or email addresses into the
"DMR Submissions and Attachment Notifications" section of their Edit Instance page.
How do I know when a DMR for my Permittees or Data Provider has been processed by
The Regulatory Administrator for your Instance can add one or email addresses into the
"DMR Submissions and Attachment Notifications" section of their Edit Instance page.
How can I get NetDMR to stop sending email notifications of DMR submissions to me?
The Regulatory Administrator for your Instance can remove your email addresses from
the "DMR Submissions and Attachment Notifications" section of their Edit Instance
page.
A Permittee or Data Provider told me their permit was in NetDMR but are unable to enter
DMRs for it. What should I do?
If the permit was administered by an EPA Region but a State Agency or Tribe now
administers it, see "One or more permits were administered by an EPA Region but now a
State Agency or Tribe administers it" for the answer. Otherwise, NetDMR inactivated
the permit because ICIS could not find it. The Regulatory Administrator for your
Instance needs to click on the Instance hyperlink on their home page and provide you
with the agency mapping for the permits assigned to your Agency so you can log into
ICIS, view the permit and make sure it has an Issuing Organization Type that matches the
NetDMR Agency Type Code. If you change the Issuing Organization Type in ICIS, see
the Regulatory Authority User Guide section on Agency Mappings for instructions on
what to do.
I requested a refresh of DMR Data but the NetDMR keeps displaying the old data. What
do I do?
ICIS processes NetDMR requests for DMR data once a night A Regulatory
Administrator for the Instance can click on the "Network Activity" hyperlink on their
home page and find your request in the list.
If the status is "Pending" this means ICIS has not processed the request yet. If the date of
your request is the same day then wait until the next morning to check the status. If the
date of your request is one or more days earlier contact NetDMR User Support for
assistance.
If the status is "Failed" NetDMR encountered a problem communicating with ICIS.
Contact NetDMR User Support.
If the status is "Completed" but the DMR in NetDMR still contains old data, refer to the
Permittee and Data Provider User Guide's "Troubleshooting Missing DMRs" appendix
for various causes of DMR data not being returned from ICIS.
Assistance Questions
ICIS?
ICIS?
140
-------
HNetDMRj
NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Who should I contact for assistance with NetDMR?
For Role access questions contact your Regulatory Administrator. For all other
questions, call or email NetDMR User Support at 202-564-7756 or netdmr@epa.gov .
141
-------
S NetDMR Regulatory Authority User Guide
Draft - May 1, 2009
Appendix I. Requesting Assistance
Contact your Regulatory Authority using the email address displayed under the "New to
NetDMR?" section of the login page of your Instance. Use this form as a guideline when
contacting your Regulatory Authority.
Requestor Contact Information
Name:
Facility/Organization:
Email Address:
Phone Number:
NetDMR Identifying Information
NetDMR Account Name:
NPDES Permit ID:
User Type: Permittee/Facility Staff Data Provider/Lab/Contractor
Role: View Edit Signatory Permit Administrator
Area of NetDMR Requiring Assistance
NetDMR Page:
Question or
Problem:
Steps followed
when question or
problem arose:
DMR or COR Identifying Information
Permitted Feature ID:
Discharge ID:
Monitoring Period End Date:
Parameter:
142
------- |