Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the It Operations topic
No spam. Unsubscribe anytime.
IT reports successful domain migration and YubiKey rollout; vendors raise migration concerns
Summary
The commission heard that the city's largest domain migration to a new muni domain and Azure AD was completed with YubiKey FIDO2 authentication in place and no reported authentication failures; staff also warned of vendor support and scheduling problems with BS&A and Johnson Controls affecting other cutovers.
The Franklin Technology Commission received an operations briefing Dec. 3 reporting a citywide domain migration and related security upgrades, and heard staff warnings about vendor support problems that could delay other projects.
Information Services staff described a migration from the city’s old Franklin NT domain to a new ‘muni’ domain synchronized with Microsoft Azure Active Directory. As part of the migration, the city installed vulnerability-management agents, applied enterprise mobility-management controls and issued more than 220 YubiKeys for mandatory two-factor (FIDO2) authentication. “On the day of the migration, all users were functional and able to log into the network with their YubiKeys,” the Director of IT reported.
The commission also heard that squad-car and body-camera footage (roughly 12 terabytes) is being moved to the Motorola cloud for retention management; staff estimated a 5–7 day upload window and said they were about 25% complete at the time of the briefing.
Vendor performance issues surfaced in the report. Staff said the finance/permitting vendor (BS&A) notified the city it could not meet planned migration dates and proposed outsourcing work to a subcontractor (EC3). Staff described repeated support problems with vendor technicians, missing skillsets for database attachment and concerns about performing major changes near a year-end change-freeze (city staff aim to avoid major changes around the property-tax statement and fiscal deadlines). One staff member described prolonged troubleshooting and difficulty coordinating vendor level-2 support while the city performed its domain migration.
Why it matters: The domain migration and two-factor rollout are foundational security upgrades for the city’s systems; successful implementation reduces account compromise risk and standardizes authentication. At the same time, migration delays and weak vendor support create operational risk for finance and permitting systems and could force contingency workarounds or require additional vendor engagement.
Next steps: Staff said remaining application migrations (for example, BS&A modules) will be rescheduled as needed; the commission listed security project failure avoidance and penetration-test results as future agenda items. Commissioners asked staff to continue monitoring vendor performance, schedule migrations outside year-end freeze windows where possible, and report progress at the next meeting.
