socreg - asset registration portal

I've received an "IP address to transfer" message.

Here we explain what it means and what you need to do.

You've received the message because Socreg has encountered a mismatch between the security contact that claimed an IP address (individually or by subnet) and the security contact that registered a subdomain.

(Note: In Socreg the assignment of a subdomain enables the transfer of IP address responsibility to the right party, but does not assign security contact responsibility).

For example, if security contact A registers a subdomain xyz.berkeley.edu and another security contact B claims subnet a.b.c.0/24 and there is a set of hostnames defined...

How are security notices routed?

Security notices are routed based on the registration information in Socreg.

For example, if an IP address has a registered Security Contact, the security notice is sent to that Security Contact, but if there is no specific IP address registration, then the notice is sent to the Security Contact that registered the subnet that contains the IP Address. Notices will also be sent to:

The registrant Security Contact’s Service Provider, if any.

The registrant Security Contact’s Departmental...

Why can’t two Security Contacts share the same subnet? We both have IP addresses on the subnet.

Overlap is not allowed in Socreg. If two departments share a subnet, the department who claims the most IP addresses for that subnet will get the entire subnet. The other department will get individual IP addresses.

Additionally, one Security Contact will register and be primarily responsible for an IP address, although other Security Contacts may also receive security notices for that IP address.

For complicated situations, e.g., where two different groups are responsible for systems on a subnet, a Security...

What are the types of email generated by Socreg? Can I opt out from receiving any/all of them?

There are three types of email generated by Socreg:

FYI emails: These emails are rolled up into a single digest which is sent once per week. Users can opt-out of receiving the digest by setting "Receive FYI digest" to “off”. However, at least one member of the Security Contact should continue to receive them. Some FYI emails are sent immediately, for example when a PD Application or one of its components is modified.

Notices about Access or Asset Requests. Others may submit a request in Socreg for:...

What is the process if another Security Contact is non-responsive when I want to claim or transfer something immediately?

Contact the Information Security Office at: socreg@berkeley.edu

Security Contacts

Definition

A Security Contact is a group of authorized members who register IT Resources and receive security notices involving those resources.

The email address for a Security Contact should reach multiple people so that security incidents receive prompt attention. This can be accomplished by using a CalNet SPA, listserv,...

Can I self-register Fixed IP address assignments?

Department and Group Security Contacts can register devices for Fixed IP address assignment – where a device always gets the same IP on its primary subnet, but a Dynamic IP on any other subnet – provided that the Security Contact has a registered subnet, with an available IP address space, and a registered subdomain.

For details about registering devices for Fixed IP address assignment, please review the "Devices" page in the Socreg...

What email address should I use for my Security Contact?

A Security Contact has one email address that is used to receive security notices. The email address should reach multiple people either via a listserv, group address, or, ideally, a CalNet Special Purpose Account so that security incidents involving a department or group's IT Resources receive prompt attention. SPAs are CalNet IDs that can be shared by multiple users for collaborative purposes and are recommended for this purpose. See ...