ROSS TAX PRO
254-Tax Consultants
Andreaa Chan'nel, MPA
EFIN 748335 · P03215544
ROSS TAX PRO SOFTWARE · 254-Tax Consultants · EFIN 748335
LIVE · MeF ACTIVE
◆ Auth Infrastructure
JWK · X.509 · AES-256 · RSA-2048 · IRS Pub 4557 · NIST SP 800-63B · GLBA Safeguards
TLS 1.3 Active · AES-256-GCM
IRS Pub 4557 Compliant
◆ ◆ ◆
0
Active JWKs
0
Valid Certs
0
Expiring Soon
YES
MFA Enforced
30m
Session Timeout
100%
NIST Compliant
Encryption Standards
Data at Rest
AES-256-GCMFIPS 197
Data in Transit
TLS 1.3 (ECDHE)NIST SP 800-52
Key Exchange
RSA-2048 / ECDSA P-256FIPS 186-4
JWT Signing
RS256 (RSA-SHA256)RFC 7518
JWT Encryption
RSA-OAEP-256 / A256GCMRFC 7516
Password Hashing
bcrypt (cost=12)NIST SP 800-63B
Token Expiry
Access: 15m · Refresh: 7dIRS Pub 4557
Certificate Authority
DigiCert / IRS e-Services CAIRS Pub 3112
IRS / NIST Compliance Checklist
Minimum 12 charactersNIST SP 800-63B §5.1.1
No common/dictionary passwordsNIST SP 800-63B §5.1.1.2
MFA required for all usersIRS Pub 4557 §3.3, GLBA
Session timeout ≤ 30 minutesIRS Pub 4557 §3.5
Password history (last 12)NIST SP 800-63B §5.1.1
Account lockout after 5 attemptsIRS Pub 4557 §3.4
Encrypted transmission (TLS 1.3)GLBA Safeguards §314.4
Audit log of all auth eventsIRS Pub 4557 §3.6
Password max age 90 daysIRS Pub 4557 §3.3
Secure password recovery channelNIST SP 800-63B §5.1.2
Portal Access Matrix
| Portal | Auth Method | MFA | Session | Credential | IRS Reference |
|---|---|---|---|---|---|
| Client Portal | SSN (last 4) + PIN | SMS / Email OTP | 15 min idle | Firm-issued PIN | IRS Pub 4557 §3 |
| ERO Portal | PTIN + EFIN + Password | Authenticator App | 30 min idle | IRS PTIN + EFIN | IRS Pub 3112 §4 |
| Admin Portal | Admin ID + Password | Hardware Key / TOTP | 20 min idle | Firm admin credentials | GLBA Safeguards |
Andreaa Chan'nel, MPA
Role:ERO Admin
PTIN:P03215544
EFIN:748335
Signed in 04:36 PM
Session: 0m
SECURE
QUICK TOOLS
MeF ACTIVE
EFIN 748335 · TY2025