CWDS Bulletins

CARES SPOCs, Implementation Coordinators, OCM Coordinators, County Leadership, Tribe Leadership, Probation Leadership, and State Leadership:

We are in the final stretch of the CWS-CARES Pop-Up Shop #2 which closes at the end of this week. We’ve received 24 orders to date, but we have 11 items that are currently "at risk" of cancellation because they haven't met the minimum order requirements yet.

To ensure your preferred items are produced, please order by Friday, April 17.

Place your order here: CWS-CARES Pop-Up Shop #2.

For more information about the shop and ordering process, visit our FAQ page: CWS-CARES Pop-Up Shop #2 | FAQs.

We still need orders for:

• Hanes® Cotton T-Shirts & Dade Polos (Men’s/Women’s)
• Low-Profile Caps & Non-Woven Tote Bags
• Recycled Tumblers & Cavetto Ceramic Mugs
• Notebooks, Pens, Stickers, and Buttons

If minimums aren't met, items are cancelled and not charged.

Please share this email and flyer with anyone who may be interested in placing an order. Thank you for your continued partnership and support of the CWS-CARES project!

Action Required

No action required.

If you have any questions, need clarification, or have any accessibility issues, please do not hesitate to contact Customer Relations at CWS_CustRel@otsi.ca.gov.

CARES SPOCs, Implementation Coordinators, OCM Coordinators, County Leadership, Tribe Leadership, Probation Leadership, and State Leadership:

In this Weekly Digest:

• One Week Left to Purchase from the CWS-CARES Pop-Up Shop!
• Registration Now Open for CWS-CARES Stakeholder Briefing #7
• Updated Environment Matrix for User Access
• CWS-CARES Data Dictionary Version 0.10 Now Available
• CWS-CARES Core Constituent Demonstrations
• CWS-CARES Frequently Asked Question (FAQ) of the Week

_______

One Week Left to Purchase from the CWS-CARES Pop-Up Shop!

There’s still time to order from the CWS-CARES Pop-Up Shop #2! The shop will remain open until end of day on Friday, April 17, 2026. Place your orders at: CWS-CARES Pop-Up Shop #2 | Order Now.

The shop is open to all 58 California counties, Tribes, and partner organizations. CWS-CARES branded items are available for purchase using your own funds. For ordering and shipping details, please reference the CWS-CARES Pop-Up Shop #2 FAQs and Item Preview document.

Please contact CWDS Customer Relations with any questions. Happy shopping!

_______

Registration Now Open for CWS-CARES Stakeholder Briefing #7

We encourage you to attend the next CWS-CARES Stakeholder Briefing on May 27, 2026! Register now at: CWS-CARES Stakeholder Briefing #7 | Registration. Note: A separate calendar invitation will not be sent by the CWS-CARES Project. Please manually add the .ics attachment in the registration confirmation email to your calendar.

All stakeholders impacted by the changes to CWS-CARES are welcome to attend, ask questions, and hear updates from Project leadership. The full agenda for the May 2026 Stakeholder Briefing is available to view on the CWS-CARES Stakeholder Briefing #7 | Registration page. Updates will include:

• Implementation
• Extended User Scenario Testing 3
• Production Simulation
• Resource Family Approval (RFA) Portal Demonstration

All materials from the March 25, 2026 Stakeholder Briefing #6, including the session recording, presentation slides, and Q&A summary, are now available on the CWS-CARES Stakeholder Briefings page on the CWDS website.

Thank you for participating in our Stakeholder Briefing webinar series! We hope to see you on May 27, 2026 to continue the conversation on the upcoming transition to CWS-CARES.

_______

Updated Environment Matrix for User Access

Looking to better understand the different CWS-CARES environments? The CWS-CARES Project has developed multiple environments to support testing, training, and readiness activities, each designed for a specific purpose and user group. The Environment Matrix provides an overview of their intended use, access, and availability.

Please note that this is a point-in-time resource located on the CWS-CARES User Resources Webpage on the CWDS website, and information is subject to change as the Project progresses.

View the CWS-CARES Environment Matrix here: WS-CARES Environments for User Access

_______

CWS-CARES Data Dictionary Version 0.10 Now Available

The CWS-CARES Data Dictionary V0.10 is now available on the Microsoft Teams Channel: CARES Data Dictionary under Shared as of Monday, April 13, 2026. Check the Intro tab of the CWS-CARES Data Dictionary for the detailed list of updates included in the new version. Highlights included in V0.10:

• CDI Legacy Mapping Layer tab has been renamed to Legacy Mapping Layer
• Alignment of Legacy Mapping Layer tab objects with the CWS_CMS-CARES Conversion tab
• Updates to Columns/Relationships tab based on application development activities

Please contact CWDSDataManagement@otsi.ca.gov if you have any questions.

Stay tuned for more updates to the CWS-CARES Data Dictionary, which will be shared in future CWS-CARES Weekly Digest emails.

_______

CWS-CARES Core Constituent Demonstrations

Here’s a quick look at the CWS-CARES Core Constituent Demonstrations from the previous and upcoming two weeks. These demonstrations give counties and partners a chance to see key features in action, learn what’s new or coming soon, and share feedback that helps shape ongoing improvements to CWS-CARES.

View all the previous Product Demonstrations on the CWDS website: CWS-CARES Product Demonstrations. Please note, a log in is required to view all recordings.

CWS-CARES Core Constituent Demonstrations Held March 30 - April 10, 2026:

• No CWS-CARES Core Constituent Demonstrations were held between March 30^th – April 10^th.

Upcoming CWS-CARES Core Constituent Demonstrations Held April 13 – 17, 2026: * 

• April 13, 2026, 1:00 PM – 4:00 PM

Family First Prevention Services Act (FFPSA) Portal and CWS-CARES Functionality: End-to-End Portal Demo

*Please note that dates for CWS-CARES Demonstrations shared here are subject to change. Please check the CWDS Meeting and Event Calendar for the most up-to-date schedule.

_______

CWS-CARES Frequently Asked Question (FAQ) of the Week

Each week, we highlight a common question from counties and partners, along with a clear, practical answer to help you better understand CWS-CARES functionality.

April 13, 2026 FAQ of the Week:

Q: Once we transition to CWS-CARES, will probation staff still access via Citrix?

A: Yes, probation staff will still access via Citrix after the transition to CWS-CARES.

To view all of the CWS-CARES FAQs, please visit the CWDS Website: CWS-CARES FAQs | CWDS Website. Have a question? Send it to Customer Relations at CWS_CustRel@otsi.ca.gov and we will be happy to help.

_______

Share Your Feedback and Subscribe 

Thank you for following our progress! Share your feedback on this CWS-CARES Weekly Digest here: CWS-CARES Weekly Digest Feedback Form. Subscribe to future issues here: CWS-CARES Weekly Digest Subscription Form.

_______

Action Required

We request that all CWS-CARES Single Point of Contacts (SPOCs) and Implementation Coordinators coordinate and distribute the CWS-CARES Weekly Digest to all staff impacted by CWS-CARES, at their discretion.

All SPOCs, Technical Contacts, and CAD Contacts:

The CWDS Infrastructure team and the California Department of Technology (CDT) have scheduled a software upgrade on the CAD/Business Objects (BO) servers. The upgrade window is scheduled for Thursday, April 9, 2026, beginning at 6:00 PM and concluding at 9:00 PM.

CAD Business Objects (BO) / Business Intelligence (BI) will not be accessible during the scheduled upgrade window. Any BO reports scheduled to run during this timeframe will be affected.

Action Required

Review scheduled BO reports and reschedule report jobs to avoid the scheduled maintenance window. Rerun the missed report jobs, if necessary.

Contact the IBM Help Desk (800-428-8268) to report any issues with your Business Objects content.

All SPOCs and Technical Contacts:

April 7, 2026 UPDATE: After a one-month hiatus for March, the automated process to end‑date inactive CWS/CMS user logins has resumed for April. The new reports were generated and saved to SAFE on Tuesday, April 7, 2026. The SAFE file is titled, “SCR9039_END-DATE_USERID_2026-04-07.xlsx.” REMINDER: this is the final month that the report will list CWS/CMS user accounts that have been inactive for the previous 180 days. Beginning in May, the reports will list accounts that have been inactive for 90 days.

Please review your organization’s report, saved in the SAFE folder. Organizations that do not have any potential accounts to end‑date in their report will, instead, find the following statement, “NO ROWS FOR DATA QUALITY CLEANSE”.

If needed, up to ten (10) listed accounts may be requested to be excluded from the automated end‑date process. Only a few organizations currently have more than ten (10) accounts listed. Please submit your exclusion file by Thursday, April 23, 2026, at 5:00 PM, to request listed user logins from being end-dated when the process runs on Saturday, April 25, 2026. If more than ten (10) user logins are needed to be excluded, please send your justification to the CWDS Customer Relations mailbox (CWS_CustRel@otsi.ca.gov). The justification will be forwarded to the review team for consideration. No action is required if your county agrees with the list as provided.

As stated in the SCR 9039 FAQ document, CWS/CMS User IDs that need to be reactivated following the automated end‑date process can be accomplished by contacting the IBM Help Desk at 800-428-8268. Please note that the process to reactive the accounts is complex and does take one or two weeks to be completed by the IBM team. User accounts from the reports that are logged in prior to Friday, April 24, 2026, at 5:00 PM, will not be end‑dated in the automated process on April 25, 2026.

__________________________________________________________________________

March 5, 2026 UPDATE: The CWDS Project has decided to not run the automated process to end-date inactive CWS/CMS user logins during March. The monthly process will resume in April. The next reports will be sent to the SAFE folder approximately April 7, 2026.

____________________________________________________________________

February 18, 2026 UPDATE: This is a reminder to submit an exclusion file, if needed, by Thursday, February 19, 2026, at 5:00 PM to prevent up to ten (10) user logins from being end-dated. No action is required if your county agrees with the list as provided.

______________________________________________________________________________________________

February 11, 2026 UPDATE:  As presented at the February 10, 2026 Technical Advisory Committee (TAC) Meeting, we are sharing the updated SCR 9039 FAQ document for your reference.   

_____________________________________________________________________

February 6, 2026 UPDATE: Based on received feedback, the reports are being updated for the following criteria:

Report criteria:

Identifies CWS/CMS user logins that have not been used in the past 180 days 

However, users are omitted from the report if they fall into one of these two categories:

1. Have NOT logged into CWS/CMS within the previous 180 days, but HAVE logged into CARES-Live within the previous 180 days.
2. The User ID has been created within the previous 90 days, and has NOT logged into CWS/CMS.

Updated reports, using the new criteria listed above, will be made available in SAFE in the FromOSI folder no later than 5:00 PM, on Friday, February 6, 2026, titled: 
SCR9039_END-DATE_USERID_2026-02-06.xlsx. 

Please use this updated report when reviewing the list of user logins identified for deactivation.

_____________________________________________________________________

To prepare for CWS-CARES Mock Cycles and Production Simulation, the CWS-CARES Project will begin an automated process to end-date inactive CWS/CMS user logins. This effort helps ensure that only active users are set up with access in CWS-CARES. 

This process identifies CWS/CMS user logins that have not been used in the past 180 days and schedules those logins to be end-dated. This is standard account cleanup intended to reduce inactive or outdated system access as counties prepare for CWS-CARES. 

What This Means for Counties 

• This activity affects system access only. There are no impacts to caseloads, staff roles, office assignments, or authority. 
• User logins associated with an active County License Case (CLC) are excluded from the report. 
• All user accounts (active and inactive) will still be carried forward to CWS-CARES. 

County Review and Option to Exclude User Logins  

Counties will have an opportunity to review the list of user logins identified for deactivation. To accommodate staff on extended leave (such as administrative or maternity leave), counties may exclude up to 10 user logins from deactivation, if needed. 

A report will be available in SAFE in the FromOSI folder on February 2, 2026, titled: 
SCR9039_END-DATE_USERID_2026-02-02.xlsx. 

If your county wishes to exclude user logins: 

1. Use the Excel file provided. 
2. Keep only the rows (up to 10) for user logins you want excluded. 
3. Do not modify the file layout or formatting. 
4. Upload the file to SAFE in the ToOSI folder. 

If more than 10 exclusions are needed, please contact CWDS Customer Relations and include a brief explanation. 

Deadline: February 19 at 5:00 PM 
Files received after this deadline will not be accepted, and all user logins listed in the original report will be end-dated. 

Timing and Ongoing Process 

• This first run will process and end-date User IDs on February 21, 2026. 
• The 180-day inactivity threshold will remain in place through April 2026, giving counties additional time to review the list and adjust to new processes. 
• Beginning May, the inactivity threshold will change to 90 days, consistent with CWS-CARES access policy and the Production Simulation environment. 
• After February, this process will occur monthly until the transition to CWS-CARES: 
• Reports will be posted after the first weekend of each month 
• User logins will be deactivated during the fourth weekend of the month 
• Counties will receive advance notice of specific dates 

Restoring a User Login 

If a user login is end-dated and later needs to be restored, counties may submit a Help Desk ticket to reinstate the existing login and associated staff access. 

Action Required 

• Review the report of inactive CWS/CMS user logins when it becomes available in SAFE. 
• Submit an exclusion file (if needed) by February 19 at 5:00 PM to prevent up to 10 user logins from being end-dated. 
• No action is required if your county agrees with the list as provided. 

For questions or concerns, please contact the CWDS Customer Relations mailbox. 

Regional Training Academy Leads:

The CWS-CARES Project recently launched the FCED Hub, a centralized resource for information related to Foster Care Eligibility and Determination (FCED). FCED is the interface between CalSAWS and CWS-CARES to facilitate the determination of foster care funding in California, and replaces or augments information currently provided by social workers to eligibility workers. The FCED Hub includes eligibility demonstrations, FAQs, meeting recordings and materials, and CalSAWS FCED newsletters. We invite you to access the Hub to learn more about the FCED interface and better prepare for the upcoming implementation of CWS-CARES. 

How to Access the FCED Hub 
Regional Training Academy Leads can access the Hub by creating an account on the CWDS website:  

1. Sign up at Account Sign Up | CWDS  
2. Enter your name, email, county, and create a password 
3. Select the county from the dropdown that best represents your region 
4. Log in using your CWDS credentials  
5. Navigate to the CWDS Portals page and enter the FCED Hub  

Once you have created an account, you will have access to all resources on the CWDS website, including the Hub. 

Requesting Access for RTA Staff 

RTA Leads are responsible for requesting access to the FCED Hub on behalf of their staff. To request access for RTA staff, email Customer Relations at CWS_CustRel@otsi.ca.gov with their full name, email address, and RTA region. Staff will receive an email communication with instructions to create a CWDS account and log in. 

Action Required

Email Customer Relations at CWS_CustRel@otsi.ca.gov to request FCED Hub access for RTA staff.

FCED Governance Committee Members:

Following our February 9, 2026 Governance Committee meeting, two new resources are now available on the CWS-CARES FCED Hub:

• February 2026 Governance Committee materials — including the meeting recording, presentation slides, and agenda
• Monthly CalSAWS FCED newsletters — with instructions on how to access the new CalSAWS FCED demonstration series, which shows how information from CWS-CARES is displayed for the CalSAWS user, processed, and how information is returned to CWS-CARES as appropriate.

Based on your feedback from the meeting, we have also expanded FCED Hub access to our Regional Training Academy partners.

We will continue adding materials to the FCED Hub as they become available.

Action Required

Please contact CWDS Customer Relations with any questions.

CARES SPOCs, Implementation Coordinators, OCM Coordinators, County Leadership, Tribe Leadership, Probation Leadership, and State Leadership:

In this Weekly Digest: 

• Two Weeks Left: Order Now at the CWS-CARES Pop-Up Shop! 
• CWS-CARES Core Constituent Demonstration
• CWS-CARES Frequently Asked Question (FAQ) of the Week 

_______

Two Weeks Left: Order Now at the CWS-CARES Pop-Up Shop! 

There is still time to order from the CWS-CARES Pop-Up Shop #2! The shop will remain open until end of day on Friday, April 17, 2026. Place your orders at: CWS-CARES Pop-Up Shop #2 | Order Now . 

The shop is open to all 58 California counties, Tribes, and partner organizations. CWS-CARES branded items are available for purchase using your own funds. For ordering and shipping details, please reference the CWS-CARES Pop-Up Shop #2 FAQs and Item Preview document.  

Please contact CWDS Customer Relations with any questions. Happy shopping! 

_______

CWS-CARES Core Constituent Demonstration

Here is a quick look at the CWS-CARES Core Constituent Demonstrations from the previous and upcoming two weeks. These demonstrations give counties and partners a chance to see key features in action, learn what’s new or coming soon, and share feedback that helps shape ongoing improvements to CWS-CARES.

View all the previous Product Demonstrations on the CWDS website: CWS-CARES Product Demonstrations. Please note, a log in is required to view all recordings. 

CWS-CARES Core Constituent Demonstrations Held March 23 - April 3, 2026: 

• No CWS-CARES Core Constituent Demonstrations were held between March 23 – April 3. 

Upcoming CWS-CARES Core Constituent Demonstrations: *  

• No CWS-CARES Core Constituent Demonstrations are currently planned between April 6 – April 30.  

*Please note that dates for CWS-CARES Demonstrations shared here are subject to change. Please check the CWDS Meeting and Event Calendar for the most up-to-date schedule. 

_______

CWS-CARES Frequently Asked Question (FAQ) of the Week

Each week, we highlight a common question from counties and partners, along with a clear, practical answer to help you better understand CWS-CARES functionality

April 6, 2026 FAQ of the Week:

Q: Will CWS-CARES incorporate Safety Organized Practice (SOP)? This is the state approved model approach we use in practice. 

A: CWS-CARES incorporates elements aligned with Safety Organized Practice (SOP) where appropriate within system functionality. For example, provisional Harm and Danger Statements are available at Intake (Screening) and can be further developed throughout the referral and case lifecycle. Additionally, SOP-aligned language has been integrated into relevant areas of the system, including structured contact notes and other documentation features, where applicable. 

To view all of the CWS-CARES FAQs, please visit the CWDS Website: CWS-CARES FAQs | CWDS Website. Have a question?  Send it to Customer Relations at  CWS_CustRel@otsi.ca.gov and we will be happy to help.

_______

Share Your Feedback and Subscribe 

Thank you for following our progress! Share your feedback on this CWS-CARES Weekly Digest here: CWS-CARES Weekly Digest Feedback Form. Subscribe to future issues here: CWS-CARES Weekly Digest Subscription Form.

_______

Action Required

We request that all CWS-CARES Single Point of Contacts (SPOCs) and Implementation Coordinators coordinate and distribute the CWS-CARES Weekly Digest to all staff impacted by CWS-CARES, at their discretion.

All Dedicated County SPOCs and Technical Contacts:

April 2, 2026, UPDATE: CWS/CMS Operations would like to share an important update regarding how all Zscaler support requests will be handled moving forward. These changes will help streamline the process and ensure users receive consistent and timely support.

Effective immediately, all Zscaler-related support requests must be directed to the CMS/CMS Help Desk. This includes:

• Creating new user accounts
• Granting access or requesting unblocked URLs
• Troubleshooting login, access, or connectivity issues

Please encourage users to review the latest Okta & Zscaler User Guide, which is attached to this message. The guide includes:

• Step-by-step instructions for logging in to Zscaler
• How to reset passwords
• How to reset MFA
• Q&A section covering common issues and solutions
• Support contact information

CMS/CMS Help Desk Contact Information:

• CWS/CMS Service Desk Email: cmshelp@kyndryl.com
• CWS/CMS Service Desk Phone Number: 1-800-428-8268

Following these updated procedures will help ensure faster resolution times and a smoother experience for all users.

Thank you for your cooperation and continued partnership.

____________________________________________________________________________________

February 6, 2026, UPDATE: The CWDS Infrastructure team would like to extend their most sincere gratitude to everyone on their ongoing participation either directly or indirectly with the Zscaler effort.

Updates:

During our deployment, this past January 28^th we had some setbacks that caused the rollback process for Lassen, Plumas and Sutter site 1. CWS Ops has been diligently working on a solution for the counties affected. Currently this has been solved and confirmed for Lassen and Plumas County. For Sutter County we are still working on the fix to be applied. Once the fix is confirmed,  we will work with SPOCs directly to provide next steps.

Next STEPS for Lassen and Plumas County:

• Zscaler to be released once again on Monday February 9^th
• Please reboot your workstation before the start of the day
• Login to Zscaler to be able to access the CWS/CMS resources

____________________________________________________________________________________

January 26, 2026 UPDATE: The CWDS Infrastructure team would like to remind you to reboot your workstation on Wednesday, January 28, 2026. This will ensure your computer is ready with the latest changes before you login and start using Zscaler.

Attached is a copy of the “New User Guide Okta & Zscaler v1.2.” Please review if you have any questions or concerns with the user login and activation process.

Also attached is the calendar invite to allow users to join the call to address any concerns or issues during the deployment of Zscaler.

Zscaler release dates:

Phase 1 of release COMPLETED:

January 21 2026: Shasta, Del Norte, Imperial, Sierra, and Amador to start using Zscaler.

NOTE: Reboot CWS/CMS workstations prior to logging in on Wednesday, January 21, 2026.

Phase 2 of release:

January 28 2026: The remaining Dedicated Counties and Tribes.

NOTE: Reboot CWS/CMS workstations prior to logging in on Wednesday, January 28, 2026.

____________________________________________________________________________________________________

January 16, 2026 UPDATE: Appreciation to everyone who joined today’s “CWS Ops Zscaler User Group” meeting. We are excited as we move forward with this project. Your support and participation is valued.

In this communication we have attached the New User Guide – Okta & Zscaler v1.1 document. Please use this guide for user account activation, enabling Multi-Factor Authentication (MFA), and using Zscaler.

This is a friendly reminder for those who have not yet done so, to please complete their Zscaler account activation. Please do not delay this step to prevent a possible disruption of service on your State-issued CWS workstation.

Important! Release dates have been updated:

Phase 1 of release: January 21 2026: Shasta, Del Norte, Imperial, Sierra, and Amador Counties to start using Zscaler.

NOTE: Phase 1 users – Make sure you reboot your workstation before using Zscaler on January 21, 2026.

Phase 2 of release: January 28 2026: Everyone else to start using Zscaler.

NOTE: Phase 2 users – Make sure you reboot your workstation before using Zscaler on January 28, 2026.

Also, please add the attached ‘CWS Ops Zscaler Production Support’ Outlook invite to your calendar. You may join the call on January 21, 2026, or January 28, 2026, for Zscaler questions or concerns.

Thank you for your support and participation.

____________________________________________________________________________________

January 13, 2026 UPDATE: The CWDS Infrastructure team thanks everyone for their continued support with the Zscaler implementation project. Below is the recount from the latest Zscaler User Group meeting on Friday, January 9, 2026:

Updates

Appreciation to Shasta, Del Norte, and Imperial Counties for your participation as testers. Please continue to share any feedback as it allows us to improve and close any issues.

We have attached the New User Guide – Okta & Zscaler v1.1 document. Please utilize this guide for user account activation, enabling Multi-Factor Authentication (MFA), and using Zscaler.

You can now review the previous Zscaler User group sessions at your own pace. These sessions are located on the CWDS website at this link: https://cwds.ca.gov/pages/hardware_technical_information.

Users who have not yet completed their Zscaler account activation will receive an invitation to activate their account. Please ensure users complete their activation as soon as possible. Do not delay on this step so that no disruption is experienced on your State-issued workstation. Once the account is created, wait for the release date before using Zscaler.

Zscaler Release Date

The CWDS Infrastructure team plans to make one final firewall network change in preparation to the release date. This change should not impact users. It is scheduled for Tuesday, January 13, 2026, at 12:00 Noon, Pacific Time.

Phase 1 of release: January 21 2026, at 12:00 Noon. Shasta, Del Norte, Imperial, Sierra and Amador Counties to start using Zscaler.

Phase 2 of release: January 28 2026, at 12:00 Noon. All remaining Dedicated Counties to start using Zscaler.

Q&A Highlight

Q: What is the process to request a ZScaler account?

A: Send an email to cwsoperationsteam@otsi.ca.gov to request a Zscaler account.

________________________________________________________________________________

December 22, 2025 UPDATE: The CWDS Infrastructure team thanks everyone for their continued collaboration with the Zscaler implementation project. Below is the recount from the latest Zscaler User Group meeting on Friday, December 19, 2025:

Zscaler Release Date

The CWDS Infrastructure team plans to release Zscaler on Wednesday, January 21, 2026, at 12:00 Noon Pacific Time.

Q&A Highlight

Q: If new remote user credentials are needed, should counties delay requesting Cisco AnyConnect credentials and wait for Zscaler?

A: No. Please continue with your county’s standard process to request Cisco AnyConnect credentials. In addition, request Zscaler credentials for any users who do not already have them.

Next Steps & Holiday Message

The session on Friday, December 19, 2025, was the final Zscaler User Group meeting for 2025. The CWDS Infrastructure team looks forward to connecting again early in January as the Zscaler release date approaches. In the meantime, the team wishes you, your families, and your loved ones a safe and joyful holiday season.

_________________________________________________________________

December 15, 2025 UPDATE: The CWDS Infrastructure team expresses their appreciation for those who have joined the weekly Zscaler User Group meetings in November and December and for your continued engagement. Your participation helps keep our efforts on track to quickly identify and address any issues that arise.

Here are the newest questions and answers that arose from the most recent status meeting:

Q: When will the recordings of the previous Zscaler User Group meetings be saved to the CWDS website?

A: The CWDS Web team is working on receiving the necessary approvals. We will provide an update once the CWDS Infrastructure team receives word from the Web team.

Q: When will Zscaler be ready for customers to use?

A: Zscaler testing is nearly completed. An exact implementation date to use Zscaler should be provided by the next Zscaler User Group meeting on Friday, December 19, 2025.

Zscaler Client Connector Deployment Status

CWS Ops is nearing completion of the Zscaler Client Connector deployment across all workstations. Only a small number of workstations remain without the installation. For those machines, we kindly ask that you leave them powered on for an extended period to allow the deployment to complete. If you are a remote user and utilize Cisco AnyConnect, please ensure you are logged in so we can complete the installation successfully.

CWDS appreciates your cooperation and support for this project.

____________________________________________________________________

November 24, 2025 UPDATE: The CWDS Infrastructure team appreciates your continued participation and support during this Zscaler migration project. Following our last status meeting on Friday, November 21, 2025, the team is pleased to share that they have made steady progress and are now moving forward with this project, as expected. Your ongoing engagement and valuable contributions play an essential role in helping to maintain momentum to achieve these shared goals. We remain grateful for your commitment and look forward to the continued collaboration.

Here are the newest questions and answers that arose from the most recent status meeting:

Q: When will additional Okta authentication login options be available?

A: As of Friday, November 21, 2025, users should have the ability to not have to rely on the ‘Okta Verify’ option from a mobile device. Users now have the ability to obtain the multi-factor authentication (MFA) one-time-use code through their email.

Q: Does this effort involving Zscaler and Okta affect the Server Based Computing (SBC) users login?

A: SBC users will continue to login as they normally do; this Zscaler/Okta effort has no impact on SBC.

Q: When can users expect to receive the email to create the Zscaler/Okta account?

A: Users should have already received an Okta account email from the CWDS Infrastructure team. If users have not yet received the email, please inform the CWDS Infrastructure team at cwsoperationsteam@otsi.ca.gov with the list of users who need to receive the account creation email. Please include the first name, last name, and the email address for each user on the list.

Q: When will the Zscaler client be installed on the CWS workstations?

A: Starting at 6:00 PM on Wednesday, November 26, 2025, the CWDS Infrastructure team and IBM/Kyndryl will start deploying the Zscaler Client Connector to the CWS workstation, using the BigFix installer. The installation process will use a rolling deployment, so as not to cause too large of impact to the network at one time.

If possible, please leave the CWS workstations powered on over the Thanksgiving holiday. Note: please also be connected to the Virtual Private Network (VPN) if the workstation uses VPN. This process will occur silently in the background.

Once completed, the user will notice the Zscaler application loaded on the workstation. This is an automatic loading process; however, no further action is needed as of this time. The user can close the Zscaler application to continue to do their daily work. Further instruction will be provided when Zscaler is expected to be in use. For now, this current activity is only to load the Zscaler application onto the workstation.

Please direct any questions regarding this process to the CWDS Customer Relations mailbox at CWS_CustRel@otsi.ca.gov.

_______________________________________________________________________

November 10, 2025 UPDATE: The CWDS Infrastructure team will be sending out emails to the Dedicated Counties to create their Zscaler accounts. The attached New User Guide Okta & Zscaler document will assist counties with solving any questions that Counties may have during the transition to Zscaler and Okta. The Infrastructure team will continue to leverage the Friday ‘CWS Ops Zscaler User Group’ meetings to communicate the next steps in this project and to answer any questions that the Counties may have.

Here are a couple questions and answers that arose from last week’s meeting:

Q: Will users that rely on Citrix to login into the CWS/CMS application be impacted when this Virtual Private Network (VPN) change occurs?

A: No impact will be reflected if a user is using Citrix to access the CWS/CMS application.

Q: Since Zscaler depends on the use of Okta, is it possible to receive directions outlining Okta verification process?

A: The attached New User Guide Okta & Zscaler document provides instructions on installing the “Okta verify application” function on iOS and Android mobile devices. The CWDS Infrastructure team is researching the possibility of installing the Okta application on the CWS/CMS workstations, but are currently requesting Dedicated Counties to allow the installation on mobile devices.

Action Required

The only action currently required of the Dedicated County is to create their Zscaler accounts when the email invite is delivered to their Outlook mailbox.

Please continue to attend the Zscaler meetings on Fridays in November and December to learn about the transition from AnyConnect VPN to Zscaler and to share any questions or concerns that you have regarding this project.

___________________________________________________________________

The CWDS Infrastructure team, along with IBM/Kyndryl, currently use AnyConnect Virtual Private Network (VPN) for Dedicated County remote access to the CWS/CMS application. In an effort to achieve higher security standards and to move away from obsolete technologies, CWDS is switching to the Zscaler tool for remote access. Additionally, Zscaler will replace the McAfee proxy that is used to whitelist specific websites for the Dedicated Counties. In collaboration with Zscaler, CWDS will also use the Okta identity management tool.

Zscaler is a cloud native security platform that allows users to connect to applications and surf the internet securely. Okta is an identify management platform that allows user to securely authenticate to services.

The CWDS Infrastructure team will create accounts for all Dedicated County users. On November 19, 2025, IBM/Kyndryl will use the BigFix tool to deploy Zscaler on the Dedicated County workstations. Users will receive emails from Zscaler and Okta as the accounts are created and are rolled out to the workstations.

In December 2025, CWDS will transition from Cisco AnyConnect VPN and McAfee Proxy to Zscaler and Okta. In January 2026, the transition will be completed. Cisco AnyConnect VPN and McAfee Proxy will no longer be used; Dedicated Counties will be fully using only Zscaler and Okta.

To help users with the transition to Zscaler and Okta, the CWDS Infrastructure team will hold weekly meetings every Friday afternoon at 1:00 PM, beginning on November 7, 2025, and running through to the end of the calendar year. The CWDS Infrastructure team will use these meetings to cover the Zscaler project, why it is occurring, the timeline and activities, and to answer questions and concerns regarding the project.

Action Required

Please attend the Zscaler transition meetings, Fridays in November and December, to learn about the transition from AnyConnect VPN to Zscaler and to share any questions or concerns that you have regarding this project.

All SPOCs and Technical Contacts in Mariposa County:

The California Department of Technology (CDT) has scheduled maintenance, beginning on Wednesday, April 1, 2026, at 11:00 PM and concluding on Thursday, April 2, 2026 at 5:00 AM. Users at the listed site may experience interruptions in connectivity to CWS/CMS and CARES-Live within the scheduled Verizon maintenance window.

Remote access (e.g., Server Based Computing [SBC]) to the CWS/CMS application will not be impacted by this scheduled maintenance.
 

Action Required

CWS/CMS Users

If users experience any issues with CWS/CMS, please follow your county process for reporting issues, or you may contact the IBM Boulder Help Desk at 1-800-428-8268.

CARES-Live Users

Please follow your county process for reporting issues. CARES-Live County Administrators may contact the CARES Service Desk through the CWDS ServiceNow Customer Support Management (CSM) Portal. Alternate methods are phoning 1-855-292-3444 or via email at Servicedesk@cwds.ca.gov during normal business hours. You may also email after hours, and a Service Desk representative will contact you the next business day.

All SPOCs and Technical Contacts in Mariposa County:

The California Department of Technology (CDT) has scheduled maintenance on Tuesday, March 31, 2026, beginning at 11:00 PM and concluding on Wednesday, April 01, 2026 at 5:00 AM. Users at the listed site will experience interruptions in connectivity to CWS/CMS and CARES-Live within the scheduled Verizon maintenance window.

Remote access (e.g., Server Based Computing [SBC]) to the CWS/CMS application will not be impacted by this scheduled maintenance.

Action Required

CWS/CMS Users

If users experience any issues with CWS/CMS, please follow your county process for reporting issues, or you may contact the IBM Boulder Help Desk at 1-800-428-8268.

CARES-Live Users

Please follow your county process for reporting issues. CARES-Live County Administrators may contact the CARES Service Desk through the CWDS ServiceNow Customer Support Management (CSM) Portal  Alternate methods are phoning 1-855-292-3444 or via email at Servicedesk@cwds.ca.gov during normal business hours. You may also email after hours, and a Service Desk representative will contact you the next business day.