ML17276B330: Difference between revisions
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
||
| Line 13: | Line 13: | ||
| document type = Letter | | document type = Letter | ||
| page count = 3 | | page count = 3 | ||
| project = CAC:MG0162, CAC:MG0163, CAC:MG0164, CAC:MG0165, CAC:MG0166, CAC:MG0167, CAC:MG0168, CAC:MG0169, CAC:MG0170, CAC:MG0171, CAC:MG0172, EPID:L-2017-LRO-0027 | |||
}} | }} | ||
=Text= | |||
{{#Wiki_filter: Mr. M. Christopher Nolan Director Nuclear Regulatory Affairs Duke Energy 526 South Church Street, EC-02ZF Charlotte, NC 28202 October 20, 2017 | |||
SUBJECT: BRUNSWICK STEAM ELECTRIC PLANT, UNITS 1 AND 2; CATAWBA NUCLEAR STATION, UNITS 1AND2; SHEARON HARRIS NUCLEAR POWER PLANT, UNIT 1; MCGUIRE NUCLEAR STATION, UNITS 1 AND 2; OCONEE NUCLEAR STATION, UNITS 1, 2, AND 3; H. B. ROBINSON STEAM ELECTRIC PLANT, UNIT NO. 2; CRYSTAL RIVER UNIT 3 NUCLEAR GENERATING PLANT; LEVY COUNTY NUCLEAR PLANT, UNITS 1 AND 2; AND WILLIAM STATES LEE Ill NUCLEAR STATION, UNIT NOS. 1AND2-USE OF ENCRYPTION SOFTWARE FOR ELECTRONIC TRANSMISSION OF (CAC NOS. MG0162-MG0172; EPID L-2017-LR0-0027) | |||
==Dear Mr. Nolan:== | |||
By letter dated August 29, 2017 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML 17241A253), Duke Energy requested the U.S. Nuclear Regulatory Commission (NRC) approval to use Symantec Endpoint Encryption, Version 11.1 for the electronic transmission of safeguards information (SGI) in accordance with Title 1 O of the Code of Federal Regulations (1 O CFR) Paragraph 73.22(f)(3), "External transmission of documents and material." The regulations in 10 CFR 73.22(f)(3) describe requirements for the transmission of SGI outside an authorized place of use or storage. The regulations in 10 CFR 73.22(f)(3) state, in part: Except under emergency or extraordinary conditions, Safeguards Information shall be transmitted outside an authorized place of use or storage only by NRC approved secure electronic devices, such as facsimiles or telephone devices, provided that transmitters and receivers implement processes that will provide high assurance that Safeguards Information is protected before and after the transmission or electronic mail through the internet, provided that the information is encrypted by a method (Federal Information Processing Standard [FIPS] 140-2 or later) approved by the appropriate NRC Office; the information is produced by a self-contained secure automatic data process system; and transmitters and receivers implement the information handling processes that will provide high assurance that Safeguards Information is protected before and after transmission. Guidance to licensees on the electronic transmission of SGI is provided in NRC Regulatory Issue Summary 2002-15, Revision 1, "NRC Approval of Commercial Data Encryption Products for the Electronic Transmission of Safeguards Information," dated January 26, 2006 (ADAMS Accession No. ML050460031 ). As stated in Duke Energy's letter, Symantec Endpoint Encryption, Version 11.1 was developed with Symantec PGP Cryptographic Engine module, Software Version 4.3 and complies with FIPS 140-2 as validated by the National Institute of Standards and Technology (NIST) Consolidated Certificate No. 2377. A copy of the certificate was enclosed with Duke Energy's letter. The NRC approves only those cryptographic algorithms approved by NIST. If NIST no longer approves certain cryptographic algorithms, the NRC also does not approve use of that cryptographic algorithm. Based on the NIST validation that the encryption software complies with FIPS 140-2, the NRC staff finds that the use of Symantec Endpoint Encryption, Version 11.1 is acceptable to use for electronic transmission of SGI at the listed facilities in accordance with 10 CFR 73.22(f)(3). In its submittal, the licensee includes a list of facilities by docket number and a list of facilities by general plant names. The list of facilities by docket number includes all of Duke Energy's NRG-licensed facilities except the Crystal River Unit 3 independent spent fuel storage installation (ISFSI), Docket No. 72-1035. However, the list of facilities by general plant names includes all of Duke Energy's NRG-licensed facilities, including the Crystal River Nuclear Plant. Therefore, the NRC staff approves the use of Symantec Endpoint Encryption, Version 11.1, in accordance with 1 O CFR 73.22(f)(3), at all of Duke Energy's NRG-licensed facilities. If you have any questions, please contact me at 301-415-6256. Docket Nos. 50-325, 50-324, 72-6, 50-413, 50-414, 72-45, 50-369, 50-370, 72-38, 50-269, 50-270, 50-287, 72-40, 50-400, 50-261, 72-3, 72-60, 50-302, 72-1035, 52-029, 52-030, 52-018, and 50-019 cc: Distribution via Listserv | |||
Sincerely,Dennis J. Galvin, Project Manager Plant Licensing Branch 11-2 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation SUBJECT: BRUNSWICK STEAM ELECTRIC PLANT, UNITS 1 AND 2; CATAWBA NUCLEAR STATION, UNITS 1 AND 2; SHEARON HARRIS NUCLEAR POWER PLANT, UNIT 1; MCGUIRE NUCLEAR STATION, UNITS 1 AND 2; OCONEE NUCLEAR STATION, UNITS 1, 2, AND 3; H.B. ROBINSON STEAM ELECTRIC PLANT, UNIT NO. 2; CRYSTAL RIVER UNIT 3 NUCLEAR GENERATING PLANT; LEVY COUNTY NUCLEAR PLANT, UNITS 1 AND 2; AND WILLIAM STATES LEE Ill NUCLEAR STATION, UNIT NOS. 1 AND 2 -USE OF ENCRYPTION SOFTWARE FOR ELECTRONIC TRANSMISSION OF (CAC NOS. MG0162 -MG0172; EPID L-2017-LR0-0027) DATED OCTOBER 20, 2017 DISTRIBUTION: PUBLIC LPL2-2 Reading File RidsNrrDorlLpl2-2 Resource RidsNrrLAKGoldstein Resource RidsNrrPMRobinson Resource RidsNrrPMHarris Resource RidsNrrPMCatawba Resource RidsACRS_MailCTR Resource RidsNmssDsfmSflb Resource DParsons, NSIR JDixon-Herrity, NRO YChen, NMSS ADAMS A ccess1on N ML 172768330 0. OFFICE DORL/LPL2-2/PM NAME DGalvin DATE 10/05/17 OFFICE NMSS/DSFM/SFLB/BC* NAME JMcKirgan DATE 10/10/17 OFFICE OGC (NLO) *by e-mail NAME KGamin DATE 10/19/17 LPL2-1 Reading File RidsNrrDorlLp12-1 Resource RidsNmssDuwpRdb Resource RidsNrrLABClayton Resource RidsNrrPMMcGuire Resource RidsNrrPMBrunswick Resource RidsNrrPMOconee Resource RidsRgn2MailCenter Resource RNorman, NSIR JHickman, NMSS BHughes, NRO *b ,Y e-ma1 DORL/LPL2-2/LA NSIR/DSO/ISB/BC* BClayton DParsons 10/04/17 10/02/17 NMSS/DUWP/RDB/BC* NRO/DNRL/LB4/BC* BWatson JDixon-Herrity 10/06/17 10/06/17 DORL/LPL2-2/BC DORL/LPL2-2/PM US hoop DGalvin 10/20/17 10/20/17 OFFICIAL RECORD COPY}} | |||
Revision as of 02:24, 15 March 2018
| ML17276B330 | |
| Person / Time | |
|---|---|
| Site: | Oconee, Mcguire, Catawba, Harris, Brunswick, Crystal River, Robinson, McGuire, 07200006, 07200040, 07200003, 07200060, Levy County, Lee  |
| Issue date: | 10/20/2017 |
| From: | Galvin D J Plant Licensing Branch II |
| To: | Nolan M C Duke Energy Progress |
| Galvin D J | |
| References | |
| CAC MG0162, CAC MG0163, CAC MG0164, CAC MG0165, CAC MG0166, CAC MG0167, CAC MG0168, CAC MG0169, CAC MG0170, CAC MG0171, CAC MG0172, EPID L-2017-LRO-0027 | |
| Download: ML17276B330 (3) | |
Text
Mr. M. Christopher Nolan Director Nuclear Regulatory Affairs Duke Energy 526 South Church Street, EC-02ZF Charlotte, NC 28202 October 20, 2017
SUBJECT: BRUNSWICK STEAM ELECTRIC PLANT, UNITS 1 AND 2; CATAWBA NUCLEAR STATION, UNITS 1AND2; SHEARON HARRIS NUCLEAR POWER PLANT, UNIT 1; MCGUIRE NUCLEAR STATION, UNITS 1 AND 2; OCONEE NUCLEAR STATION, UNITS 1, 2, AND 3; H. B. ROBINSON STEAM ELECTRIC PLANT, UNIT NO. 2; CRYSTAL RIVER UNIT 3 NUCLEAR GENERATING PLANT; LEVY COUNTY NUCLEAR PLANT, UNITS 1 AND 2; AND WILLIAM STATES LEE Ill NUCLEAR STATION, UNIT NOS. 1AND2-USE OF ENCRYPTION SOFTWARE FOR ELECTRONIC TRANSMISSION OF (CAC NOS. MG0162-MG0172; EPID L-2017-LR0-0027)
Dear Mr. Nolan:
By letter dated August 29, 2017 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML 17241A253), Duke Energy requested the U.S. Nuclear Regulatory Commission (NRC) approval to use Symantec Endpoint Encryption, Version 11.1 for the electronic transmission of safeguards information (SGI) in accordance with Title 1 O of the Code of Federal Regulations (1 O CFR) Paragraph 73.22(f)(3), "External transmission of documents and material." The regulations in 10 CFR 73.22(f)(3) describe requirements for the transmission of SGI outside an authorized place of use or storage. The regulations in 10 CFR 73.22(f)(3) state, in part: Except under emergency or extraordinary conditions, Safeguards Information shall be transmitted outside an authorized place of use or storage only by NRC approved secure electronic devices, such as facsimiles or telephone devices, provided that transmitters and receivers implement processes that will provide high assurance that Safeguards Information is protected before and after the transmission or electronic mail through the internet, provided that the information is encrypted by a method (Federal Information Processing Standard [FIPS] 140-2 or later) approved by the appropriate NRC Office; the information is produced by a self-contained secure automatic data process system; and transmitters and receivers implement the information handling processes that will provide high assurance that Safeguards Information is protected before and after transmission. Guidance to licensees on the electronic transmission of SGI is provided in NRC Regulatory Issue Summary 2002-15, Revision 1, "NRC Approval of Commercial Data Encryption Products for the Electronic Transmission of Safeguards Information," dated January 26, 2006 (ADAMS Accession No. ML050460031 ). As stated in Duke Energy's letter, Symantec Endpoint Encryption, Version 11.1 was developed with Symantec PGP Cryptographic Engine module, Software Version 4.3 and complies with FIPS 140-2 as validated by the National Institute of Standards and Technology (NIST) Consolidated Certificate No. 2377. A copy of the certificate was enclosed with Duke Energy's letter. The NRC approves only those cryptographic algorithms approved by NIST. If NIST no longer approves certain cryptographic algorithms, the NRC also does not approve use of that cryptographic algorithm. Based on the NIST validation that the encryption software complies with FIPS 140-2, the NRC staff finds that the use of Symantec Endpoint Encryption, Version 11.1 is acceptable to use for electronic transmission of SGI at the listed facilities in accordance with 10 CFR 73.22(f)(3). In its submittal, the licensee includes a list of facilities by docket number and a list of facilities by general plant names. The list of facilities by docket number includes all of Duke Energy's NRG-licensed facilities except the Crystal River Unit 3 independent spent fuel storage installation (ISFSI), Docket No. 72-1035. However, the list of facilities by general plant names includes all of Duke Energy's NRG-licensed facilities, including the Crystal River Nuclear Plant. Therefore, the NRC staff approves the use of Symantec Endpoint Encryption, Version 11.1, in accordance with 1 O CFR 73.22(f)(3), at all of Duke Energy's NRG-licensed facilities. If you have any questions, please contact me at 301-415-6256. Docket Nos. 50-325, 50-324, 72-6, 50-413, 50-414, 72-45, 50-369, 50-370, 72-38, 50-269, 50-270, 50-287, 72-40, 50-400, 50-261, 72-3, 72-60, 50-302, 72-1035,52-029, 52-030,52-018, and 50-019 cc: Distribution via Listserv
Sincerely,Dennis J. Galvin, Project Manager Plant Licensing Branch 11-2 Division of Operating Reactor Licensing Office of Nuclear Reactor Regulation SUBJECT: BRUNSWICK STEAM ELECTRIC PLANT, UNITS 1 AND 2; CATAWBA NUCLEAR STATION, UNITS 1 AND 2; SHEARON HARRIS NUCLEAR POWER PLANT, UNIT 1; MCGUIRE NUCLEAR STATION, UNITS 1 AND 2; OCONEE NUCLEAR STATION, UNITS 1, 2, AND 3; H.B. ROBINSON STEAM ELECTRIC PLANT, UNIT NO. 2; CRYSTAL RIVER UNIT 3 NUCLEAR GENERATING PLANT; LEVY COUNTY NUCLEAR PLANT, UNITS 1 AND 2; AND WILLIAM STATES LEE Ill NUCLEAR STATION, UNIT NOS. 1 AND 2 -USE OF ENCRYPTION SOFTWARE FOR ELECTRONIC TRANSMISSION OF (CAC NOS. MG0162 -MG0172; EPID L-2017-LR0-0027) DATED OCTOBER 20, 2017 DISTRIBUTION: PUBLIC LPL2-2 Reading File RidsNrrDorlLpl2-2 Resource RidsNrrLAKGoldstein Resource RidsNrrPMRobinson Resource RidsNrrPMHarris Resource RidsNrrPMCatawba Resource RidsACRS_MailCTR Resource RidsNmssDsfmSflb Resource DParsons, NSIR JDixon-Herrity, NRO YChen, NMSS ADAMS A ccess1on N ML 172768330 0. OFFICE DORL/LPL2-2/PM NAME DGalvin DATE 10/05/17 OFFICE NMSS/DSFM/SFLB/BC* NAME JMcKirgan DATE 10/10/17 OFFICE OGC (NLO) *by e-mail NAME KGamin DATE 10/19/17 LPL2-1 Reading File RidsNrrDorlLp12-1 Resource RidsNmssDuwpRdb Resource RidsNrrLABClayton Resource RidsNrrPMMcGuire Resource RidsNrrPMBrunswick Resource RidsNrrPMOconee Resource RidsRgn2MailCenter Resource RNorman, NSIR JHickman, NMSS BHughes, NRO *b ,Y e-ma1 DORL/LPL2-2/LA NSIR/DSO/ISB/BC* BClayton DParsons 10/04/17 10/02/17 NMSS/DUWP/RDB/BC* NRO/DNRL/LB4/BC* BWatson JDixon-Herrity 10/06/17 10/06/17 DORL/LPL2-2/BC DORL/LPL2-2/PM US hoop DGalvin 10/20/17 10/20/17 OFFICIAL RECORD COPY