Reynolds is making changes to Third-Party Automated Access into ERA

[ssdd]

Announcing Important Change to Third-Party Automated Access into ERA

Effective immediately, Reynolds will begin the rollout of prohibiting automated access into ERA®. This will impact any process that is set up to directly access ERA without any manual intervention.

Why is this change being implemented?

Reynolds has made significant progress in cooperation with over 100 third-party vendors and many OEMs to create safe, secure, monitored, and supported access to ERA. However, we continue to see an increase in non-certified third-party access activity, including more data being extracted and more frequent access attempts. This type of activity not only puts your data at risk, but also can negatively impact the performance of your ERA system.

Certified interfaces with ERA are the safest way to protect your data and ensure that third parties and OEMs are meeting their obligations in terms of the data they are accessing and the frequency with which they are accessing it. Reynolds continues to make changes that secure your system while still supporting the need for moving data to third parties and OEMs. The Reynolds Certified Interface (RCI) Program supports third-party vendors securely accessing dealer data, while improving the accuracy of the information and minimizing performance issues that may have impacted your ERA system. Vendors who are in the RCI program understand the importance of data security. Furthermore, OEMs are making significant strides in their work directly with DMS providers to offer more integrated applications in support of sound data security objectives.

How will ERA notify users of this change within the system?

When a user’s activity is identified as automated access, they will receive this error message on screen at their next login attempt:

USER ID DISABLED DUE TO AUTOMATED ACCESS ATTEMPTS

You can view User IDs that have attempted access into your system and be assured the User ID has been disabled. If you view a disabled User ID in 6210 (Maintain User Security), you will receive this error message on screen and will not be able to reactivate or delete the affected User ID:

This is about as clear as mud to me... what does this mean?
they are going to cut everybody off who polls R&R, like the people who poll our inventory, and then those people will have to been on some approved list? then they will have to call R&R and then they will set them back up?
wonder how long this process will be?
S

USER ID DISABLED DUE TO AUTOMATED ACCESS ATTEMPT
AUTOMATED ACCESS POSES A SECURITY RISK TO YOUR SYSTEM

How will this impact me?

Because of our relationships with OEMs and many vendors, the impact of automated access into ERA has been minimized as much as possible. However, if a third party vendor you do business with is impacted by this change, please refer them to the Reynolds Certified Interface hotline at 937.485.0402. If an OEM program is impacted, please contact your regional OEM representative.

Should you have any questions, please contact the Technical Assistance Center at 800.767.0080.

[XDCX]

Originally Posted by ssdd

This is about as clear as mud to me... what does this mean?
they are going to cut everybody off who polls R&R, like the people who poll our inventory, and then those people will have to been on some approved list? then they will have to call R&R and then they will set them back up?
wonder how long this process will be?
S

While I'm no expert it sounds like Reynolds is going to cut-off any attempts by non-approved vendors to access your data. It doesn't matter if you've allowed the vendor to access your data, if the vendor isn't approved their request will be blocked.

To me the big question is whether Reynolds charges a vendor to complete their "Reynolds Certified Interface (RCI) Program." If there's no charge to the vendor and Reynolds is simply trying to protect the dealer's data then I think that's a good thing. By contrast, if the vendors have to pay for the "Reynolds Certified Interface (RCI) Program" then I'd be inclined to think it's a money-grab on Reynolds part and may force some of the smaller vendors out of the market.

[JoeRocket]

Originally Posted by XDCX

While I'm no expert it sounds like Reynolds is going to cut-off any attempts by non-approved vendors to access your data. It doesn't matter if you've allowed the vendor to access your data, if the vendor isn't approved their request will be blocked.

Right. And that's because R&R is really UCS (Useless...er....Universal Computer System) now. And UCS is the biggest PITA to work with I've ever experienced. They are ultra-security minded. For example, emulation directly with UCS is not allowed...you have to go through a 3rd party.

They've already screwed up my Report Generator. Then they made it to where I couldn't log in to more than one port at a time. Any of you with UCS experience know what's up. If I didn't know any better, I'd have thought UCS was a subsidiary of Chrysler as difficult as they are to work with.

[ssdd]

Originally Posted by XDCX

To me the big question is whether Reynolds charges a vendor to complete their "Reynolds Certified Interface (RCI) Program." If there's no charge to the vendor and Reynolds is simply trying to protect the dealer's data then I think that's a good thing. By contrast, if the vendors have to pay for the "Reynolds Certified Interface (RCI) Program" then I'd be inclined to think it's a money-grab on Reynolds part and may force some of the smaller vendors out of the market.

Exactly... I bet there has to be some money reason for this. however there are tons of people like the mudd group who can access our data base and I dont trust many of them... I hope they are trying to protect the dealers and not just make money.

Thanks for moving and fixing the title..
S

[XDCX]

Originally Posted by ssdd

Exactly... I bet there has to be some money reason for this. however there are tons of people like the mudd group who can access our data base and I dont trust many of them... I hope they are trying to protect the dealers and not just make money.

If I were a gambling man I'd bet it's a money issue too. If the issue is data security you'd have to think there was a better solution than just cutting the vendor off. I wonder how much notice the vendors have had about this recent change?

Originally Posted by ssdd

Thanks for moving and fixing the title..
S

No problem. I know Google indexes the forum 24/7/365 so I wanted to make sure the thread title was descripive enough to draw more traffic to the forum.

I'm sure most R&R dealers are confused by the new Third-Party Automated Access into ERA rules and many will search Google looking for more information.

[XDCX]

Originally Posted by JoeRocket

If I didn't know any better, I'd have thought UCS was a subsidiary of Chrysler as difficult as they are to work with.

Nominated for "Quote of the Week."

[ssdd]

well they have cut everybody off, and every one of them is pissed, and taking it out on us like it was our idea. integra link is one that R&R does not like and that is who does the polling for mopar rewards...

[ssdd]

I am wondering if this is a nation wide thing or are they doing it in waves by regions....

[XDCX]

Originally Posted by ssdd

I am wondering if this is a nation wide thing or are they doing it in waves by regions....

That's a good question.

I noticed this thread was getting traffic last night so I'm guessing that other dealers are searching Google looking for answers.

I also thought it was interesting to see IP Addresses from Reynolds & Reynolds, ADP and Mudd Advertising were also reading this thread this morning.

[XDCX]

Originally Posted by XDCX

I also thought it was interesting to see IP Addresses from Reynolds & Reynolds, ADP and Mudd Advertising were also reading this thread this morning.

Based on a review of the forum's IP Tracking Logs it appears this thread has attracted the attention of someone at Reynolds and Reynolds.

If you have information you'd like to add to this thread that may be useful to our members so they have a better understanding of your current actions please feel free to send me an email at XDCX@DealershipForum.com and I'll be happy to add your information to this thread.

[ssdd]

I can imagine there must be people looking for info on this... it is unusual for me to read everything that comes across my desk, and it would have been easy for me to have blown that letter off and not read it, so I am sure other dealers don't even know the are doing this...

[ssdd]

here is what my website guys are saying and these guys do all the dealers from Knoxville TN to Atlanta GA....

Henry,
I have spoken to our migration software specialist and our polling Dept at Dealer Specialties. Reynolds is requiring all third party vendors to be certified through them for security purposes. DS is unable to comply at this time.
With out a new password and user name, we cannot get into your DMS to retrieve data. They have already advised myself as well as all parties involved this will not happen unless we become a Reynolds certified vendor (see above). Therefore we will not be able to pull data. Ive listed some options below....

1. become a certified vendor. DS cannot reply to their request.
2. DS can create an FTP account for *****. This would have to be sent to us daily every morning by IT personnel or another individual. This account will contain all data needed...data for all vehicles in active status.
3. use someones password/username that has access to your DMS. Select guy can go in and retrieve data and send to all. This will be strictly adhered to. This will happen only if the dealership agrees.
4. Reduce their monthly package to gold from platinum. Technician will post cars as he goes their 2 or 3 times a week.
I don't have any other option as this time.


Thank You.

Joe Garingan

[XDCX]

Originally Posted by ssdd

here is what my website guys are saying and these guys do all the dealers from Knoxville TN to Atlanta GA....

Henry,
I have spoken to our migration software specialist and our polling Dept at Dealer Specialties. Reynolds is requiring all third party vendors to be certified through them for security purposes. DS is unable to comply at this time.
With out a new password and user name, we cannot get into your DMS to retrieve data. They have already advised myself as well as all parties involved this will not happen unless we become a Reynolds certified vendor (see above). Therefore we will not be able to pull data. Ive listed some options below....

1. become a certified vendor. DS cannot reply to their request.
2. DS can create an FTP account for *****. This would have to be sent to us daily every morning by IT personnel or another individual. This account will contain all data needed...data for all vehicles in active status.
3. use someones password/username that has access to your DMS. Select guy can go in and retrieve data and send to all. This will be strictly adhered to. This will happen only if the dealership agrees.
4. Reduce their monthly package to gold from platinum. Technician will post cars as he goes their 2 or 3 times a week.
I don't have any other option as this time.


Thank You.

Joe Garingan

It sounds like Dealer Specialties is trying to deal with this situation as best as possible but none of their solutions sound that attractive.

I wonder why Dealer Specialties cannot become a "Certified Vendor"?

[ssdd]

I have ask that, but I have not gotten an answer...

[JoeRocket]

Originally Posted by ssdd

3. use someones password/username that has access to your DMS. Select guy can go in and retrieve data and send to all. This will be strictly adhered to. This will happen only if the dealership agrees.

Bingo. This is what I've done in a few instances.