SocReg - asset registration portal

Socreg - Asset Registration Portal

Overview

Socreg is a self-service asset registration portal developed by the Information Security Office (ISO) to help campus departments and their Security Contacts maintain the registration of network assets and Protected Data, and to meet Policy requirements.

A Security Contact is a group of authorized members who register IT Resources and receive security notices involving those resources. UC Berkeley’s...

Instructions for Registering P4 Workstations in Socreg

Requirement:

P4 workstations need to be registered as Protected Data Applications in Socreg. This applies to:

Workstations that store P4 Institutional Information. Workstations that are used to connect to P4 systems or services IF the user's credentials provide access to P4 Institutional Information in that system/service. Workstations that are used to administer P4 systems or services. Process:

To register a large number of P4 workstations, please contact socreg@berkeley.edu for assistance. Otherwise, select one of the...

How do I register P4 workstations as Protected Data Applications in Socreg?

Please see Instructions for Registering P4 Workstations in Socreg for step-by-step instructions.

Protected Data Applications

Please note: If you are connecting to socreg.berkeley.edu from OFF CAMPUS you must first connect to the campus VPN to access the portal.

Security Contacts can register Protected Data (PD) Applications or systems that handle, store, or transmit institutional data restricted by laws and policies. This registration...

Basic Socreg Functions and Use Cases

The following instructions explain how to establish a Security Contact and register assets to receive security notices about those assets.

Establish a Security Contact by using the sidebar item Asset/Access Requests.

If you are not a member and a Security Contact exists, you may request to join the membership by selecting “Request membership” from the drop-down menu. Someone in the Security Contact will have to approve your request.

If there is not a Security Contact for your department, you may...

Registered Assets

Accurate and complete registration of assets lets the Information Security Office (ISO) notify your department of problems and security risks. Security Contacts can register or claim network assets including: Cloud Accounts, Subnets (as defined by the Network group), IP addresses, Subdomains, Offsite hostnames, Devices, and Protected Data Applications and Services.

Users accessing socreg.berkeley.edu from an off-campus IP address, or while connected to CalVisitor, will need to use the...

Offsite Hostnames

The Information Security Office reviews and approves all new offsite hostnames before the campus DNS Administrator can create the necessary DNS records.

How to register a new offsite hostname: Log into socreg.berkeley.edu with your CalNet ID Click on the appropriate Unit Security Contact. (If you don't see any Unit Security Contact names, click "My Assets" and the "New Offsite Hostname" button.) Click on the "Offsite Hostname" button on the left And then Click "New Offsite Hostname"

Note: an individual can start the request but during the approval process the...

How Do I Update My Socreg Profile Settings?

To change your profile settings in Socreg, log in and click your name in the top bar and then click ‘Settings’. Current options are:

Receive Release Email - this toggles whether or not you would like to receive the Socreg release notifications.

Note: This setting is different than the ‘...

Socreg Releases

As new software releases are deployed and the Socreg application is updated, information about the software releases is posted to the Socreg Releases Google Doc (CAS Authentication required to access).

Release information is also sent to admin membership of unit Security Contacts.

I've received an "IP address to transfer" message.

Here we explain what it means and what you need to do.

You've received the message because Socreg has encountered a mismatch between the security contact that claimed an IP address (individually or by subnet) and the security contact that registered a subdomain.

(Note: In Socreg the assignment of a subdomain enables the transfer of IP address responsibility to the right party, but does not assign security contact responsibility).

For example, if security contact A registers a subdomain xyz.berkeley.edu and another security contact B claims subnet a.b.c.0/24 and there is a set of hostnames defined...