Summary of Upcoming Changes with User Impacts

(Revised September 24, 2021)
 

AFFECTED USERS CHANGE DESCRIPTION

Effective Date: October 2, 2021 | Enhance Security: Disable Weak Ciphers in Training Environment

Applicant S2S, Grantor S2S

On October 2, 2021, Grants.gov will enhance security for our Training environment.

The following weak ciphers will be disabled in the Training environment:

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  • TLS_RSA_WITH_AES_256_CBC_SHA256
  • TLS_RSA_WITH_AES_256_CBC_SHA
  • TLS_RSA_WITH_AES_128_CBC_SHA256
  • TLS_RSA_WITH_AES_128_CBC_SHA

Grants.gov will continue to enable the following ciphers in Production and Training:

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Grants.gov is making this security enhancement in the Training environment on October 2, 2021 to give Applicant S2S users and Grantor S2S users an opportunity to update and test their systems in preparation for the update in the Production environment on January 15, 2022.

Impact: After October 2, 2021, all S2S users should update and test their systems in the Training environment before January 15, 2022.

Effective Date: January 15, 2022 | Enhance Security: Disable Weak Ciphers in Production Environment

Applicant S2S, Grantor S2S

On January 15, 2022, Grants.gov will enhance security for our Production environment.

The following weak ciphers will be disabled in the Production environment:

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  • TLS_RSA_WITH_AES_256_CBC_SHA256
  • TLS_RSA_WITH_AES_256_CBC_SHA
  • TLS_RSA_WITH_AES_128_CBC_SHA256
  • TLS_RSA_WITH_AES_128_CBC_SHA

Grants.gov will continue to enable the following ciphers in Production and Training:

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Grants.gov made this security enhancement in the Training environment on October 2, 2021 to give Applicant S2S users and Grantor S2S users an opportunity to update and test their systems in preparation for the update in the Production environment.

Impact: All S2S users should update and test their systems in the Training environment before January 15, 2022.

Effective Date: April 4, 2022 | The System for Award Management (SAM.gov) replaces the Data Universal Numbering System (DUNS) Number

Grantors, Applicants, Grantor S2S, Applicant S2S

Starting on April 4, 2022, the Data Universal Numbering System (DUNS) Number will be replaced by a “new, non-proprietary identifier” requested in, and assigned by, the System for Award Management (SAM.gov). This new identifier is being called the Unique Entity Identifier (UEI).

To learn more about the transition from DUNS Numbers to the UEI, including information on changes to federal grant application forms, please visit our Planned UEI Updates page.


For the Summary of Recent Changes with User Impact, please see the Releases page for the details of the recent enhancements to Grants.gov.