Skip to Main Content

Technical Reference Architecture Standards

The CMS Technical Reference Architecture (TRA) and its associated Supplements, document the standard architecture for all of the CMS Production Environments. The Supplements document specific technical solutions in support of the TRA. Federal employees and contractors should refer to these supplements closely for information on the CMS infrastructure and building systems that will be part of the CMS production environment. 

Note: The TRA and Supplements can be found on CMS' internal website. If you require these documents but do not have access to CMS' internal website, please send an email to CMS IT Governance and provide ALL OF THE FOLLOWING INFORMATION: your name, company name, phone number, project name, and name of the CMS GTL in your request.


.NET Developer Guidelines v2.0, Published 05/16/2013
The CMS Technical Reference Architecture – .NET Developer Guidelines Supplement V2.0 provides the authoritative technical reference of principles, standards, and engineering guidance for.NET application development across the CMS enterprise. This supplement is authorized and approved by the CMS Chief Technology Officer. The information provided here is relevant to ASP.NET software development teams and system administration groups.

When the development team demonstrates that the use of Java EE is not an option, the CMS Technical Review Board (TRB) will review the proposed use of .NET by development teams on a case-by-case basis. In those cases where the TRB approves use of .NET by a development team, the team should use the guidelines and principles described in this supplement when establishing a foundation for an individual .NET system design. This supplement describes the CMS .NET Application Architecture and how it integrates into the CMS TRA Windows Multi-Zone Architecture. The supplement also presents guidance for best practices/standards for general development and security.

This version 2.0 edition has been updated to reflect the new TRA 3.0 Foundation standard as well as updated Microsoft .NET technology and practices.

Access Control and Identity Management v1.0, Published 5/24/2010
The Access Control and Identity Management Supplement provides design and engineering guidance for access controls and identity management of CMS applications and infrastructure in CMS data center environments.

Analytic Sandbox v1.0, Published 5/5/2014
This CMS Technical Reference Architecture – Analytic Sandbox Supplement, Version 1.0, provides the approved Analytic Sandbox guidelines and standards for the CMS Database Environments in accordance with CMS’s technical architecture approach and technical reference standards.  This Supplement inherits the strategies, guidelines, and capabilities from the CMS Business Intelligence Strategy, Version 3.0.

This supplement provides architecture guidance, incorporates best practices, and defines the infrastructure of the analytic sandbox using components compatible with the CMS TRA. It includes the architecture, services, and procedures that form a blueprint for deploying analytic sandbox solutions across CMS.

Application Performance Monitoring v1.0, Published 12/21/2010
The Application Performance Monitoring (APM) Supplement establishes the technical concepts, business rules, and standards for APM architecture and services in the CMS Production Environments.

Architecture Change Request Process v1.0, Published 09/29/2009
The Architecture Change Request Process defines the standard process for review, approval, and publication of changes to CMS Technical Reference Architecture documents.

Architecture Change Request Form v1.0
The Architecture Change Request Form is used in conjunction with the Architecture Change Request Process to request changes to the Technical Reference Architecture foundation document and/or Supplements.

Business Intelligence v1.0, Published 3/18/2011
The Business Intelligence Supplement provides the authoritative technical reference architecture (TRA) for all CMS stakeholders who plan, acquire, implement, use, and maintain CMS business intelligence (BI) systems within the CMS Production Environments.

Business Rules v1.0, Published 6/29/2009
The Business Rules Supplement articulates the business rules that should assist all Agency contractors in sustaining the three critical technical objectives in support of CMS’ health care mission: (1) move CMS Production workloads efficiently, (2) provide appropriate and sufficient disaster recovery capability, and (3) facilitate the migration and transition of CMS Business Owner applications into new production environments.

Business Rules Engine v1.0, Published 7/12/2012
The Business Rules Engine (BRE) Supplement defines concepts, terminology, and architecture rules related to the use of Business Rules Engines at CMS. The document also describes the technology standards and reference architecture for implementing BRE-based solutions. Finally, it presents guidance for planning and deploying BRE-based applications that meet the expectations of CMS and its constituents.

CIEM Methodology v1.0, Published 5/5/2014
This CMS Technical Reference Architecture – Canonical Modeling for Information Exchange Methodology (CIEM) Supplement, Version 1.0, defines CIEM and canonical modeling methodology. It provides background and technical guidance to help CMS organizations incorporate CIEM and canonical modeling in projects and programs across the agency. This supplement supplies specific definitions, concepts, recommended activities, and artifacts required to implement CIEM and canonical modeling.

This supplement presents the processes, standards, and practices for using canonical modeling to model and manage information exchanges. It includes the necessary technical foundation to define, model, maintain, and manage domain, reference, and exchange models for information integration between the CMS and its internal and external partners.

CIEM Strategy v1.0, Published 3/25/2014
This CMS Technical Reference Architecture – Canonical Modeling for Information Exchange Strategy Supplement, Version 1.0, presents the business rationale for using the CMS Information Exchange Model (CIEM) with canonical data modeling to develop reusable, shared vocabularies for CMS information exchange.

This CMS TRA strategy supplement provides the non-technical foundations to help CMS business and technical staff have meaningful discussions about the role and benefits of CIEM and canonical data modeling in supporting information sharing in the CMS operational and data analytics environments.

CMS Portal Strategy v1.0, Published 05/12/2011
The CMS Portal Strategy is presented to generate awareness, discussion, and support throughout CMS for implementing a common portal strategy throughout all lines of CMS business. This strategy builds upon the CMS Shared Services Strategy, the CMS Technical Reference Architecture (TRA), and the CMS Business Reference Model (BRM).

CMS Technical Reference Architecture (TRA) v3.0, Published 02/12/2013
The CMS Technical Reference Architecture, Version 3.0 provides the authoritative technical architecture approach and technical reference standards for the CMS enterprise. The CMS TRA consists of this foundation document and the CMS TRA Supplements. This foundation document is authorized and approved by the CMS Chief Technology Officer.

The CMS TRA is intended to (1) provide technical architecture reference standards for all CMS Processing Environments and future application designs to ensure a secure operating environment, (2) communicate CMS’ architecture approach and standards, (3) identify CMS’ target technical environments to assist agency contractors in developing their transition approaches, and (4) provide technical standards for use in future CMS task orders.

The CMS TRA Version 3.0 improves upon the prior TRA Version 2.1 guidance in several ways: (1) expanding adoption of virtualization technologies and the Virtual Data Center (VDC), (2) integrating the Expedited Life Cycle (XLC), and (3) emphasizing reuse through Service Oriented Architecture (SOA), Shared Services, and common platform services. It also removes redundant technical guidance that is more appropriately covered in existing TRA Supplements.

Configuration Management v1.0, Published 08/09/2013
The Centers for Medicare & Medicaid Services (CMS) recognizes the necessity of managing its inventory of Information Technology (IT) assets to ensure the integrity and availability of these assets to support CMS missions. This CMS Technical Reference Architecture (TRA) – Configuration Management Supplement represents CMS’s prescribed configuration management (CM) standards and guidance for establishing, implementing, and maintaining disciplined control of CMS IT assets and any changes to these assets across the enterprise. This supplement complies with and supports CMS’s Policy for Configuration Management (April 2012).

Customer Relationship Management: Siebel v1.0, Published 5/24/2010
The Customer Relationship Management Supplement: Siebel provides a description of CRM best practices, guidance on component placement, component configuration, and a general overview of the Siebel CRM architecture.

Data Archiving Services v1.0, Published 5/24/2010
The Data Archiving Services Supplement establishes the technical concepts, business rules, policies, and standards for data archiving architecture and services in the CMS Production Environments. This supplement shapes and supports critical elements of the CMS enterprise, namely the Data Archiving and the Data Storage Architectures.

Data Mart v1.0, Published 5/5/2014
This CMS Technical Reference Architecture – Data Mart Supplement Version 1.0, defines the agency’s enterprise-wide initiative to create a business-oriented, consolidated, secure data mart environment to organize and manage the wealth of CMS data where users can leverage software tools to ask business questions and derive accurate and timely answers. This document represents the CMS Data Mart Reference Architecture in two virtual views—the “Business View” and the “Technical View.”

The concepts, strategies, and guidelines presented in this document align with the CMS Data Warehouse Strategy, which creates a road-map to an integrated data warehouse (DW) ecosystem that promotes efficiency, accuracy, privacy, and an enhanced user experience. This supplement inherits the strategies, guidelines, and capabilities of the CMS Data Warehouse Strategy.

Data Warehousing v1.0, Published 5/5/2014
This CMS Technical Reference Architecture – Data Warehousing Supplement, Version 1.0, provides the approved data warehousing guidelines and standards for the CMS Data Warehousing Environments in accordance with CMS’s technical architecture approach and technical reference standards.

This supplement is database product and platform agnostic. It provides architecture guidance, incorporates best practices, and defines the infrastructure of the data warehousing space using components compatible with the CMS TRA. It includes the architecture, services, and procedures that form a blueprint for deploying data warehousing solutions across CMS.

Distributed Systems Platform v1.0, Published 7/7/2010
The Distributed Systems Platform Supplement provides the authoritative technical reference of principles, standards, and engineering guidance for the use and support of mid-tier server environments across the CMS enterprise. The information provided here governs the use and support of development, test, implementation, and production environments for developing, testing, and hosting CMS business applications on Microsoft Windows, UNIX, Linux, and zLinux server platforms.

Domain Name System Services v1.0, Published 3/30/2011
The Domain Name System Services Supplement establishes the standards and guidelines for implementing DNS services in order to provide network name (hostname) to IP resolution services for Intranet users, as well as users and business partners from external sources.

Enterprise Content Management Services v1.0, 4/20/2010
The Enterprise Content Management (ECM) Services Supplement establishes the technical concepts, business rules, policies, and standards for ECM architecture and services in the CMS Production Environments. This supplement is the authoritative technical architecture reference for all CMS stakeholders who plan, acquire, implement, use, and maintain all types of unstructured data, such as images, documents, PDF files, and email.

Enterprise File Transfer v1.0, Published 10/5/2011
The Enterprise File Transfer (EFT) Supplement defines the enterprise-wide standard architecture for transferring files between CMS data centers as well as between CMS data centers and external partners.

Enterprise Service Bus v1.0, Published 6/5/2012
The Enterprise Service Bus (ESB) Supplement defines the enterprise-wide standard architecture for building, configuring, and deploying Enterprise Services Buses at CMS.

Enterprise Storage Architecture and Storage Services v1.0, Published 5/24/2010
The Enterprise Storage Architecture and Storage Services Supplement presents the primary technical concepts, business rules, policies, and standards to guide and inform all CMS stakeholders who plan, acquire, design, implement, use, and maintain CMS storage systems and components across the enterprise.

Internet Protocol version 6 (IPv6) v2.0, Published 12/15/2012
The Internet Protocol version 6 (IPv6) Supplement provides CMS acquisition policies for IPv6 compliance, technical IPv6 transition guidance, and engineering guidance for securing IPv6-compliant systems.

Java EE Application Development Guidelines v1.01, Published 1/8/2010
The Java EE Application Development Guidelines Supplement provides information that is relevant to Java EE software development teams and system administration groups. Development teams should use the guidelines and principles described in this supplement when establishing a foundation for an individual Java EE system design.

Open Source Software v2.0, Published 02/12/2013
The CMS Technical Reference Architecture - Open Source Software Supplement provides the approved guidelines and standards for adopting, authorizing, using, operating, and maintaining open source software (OSS) in all CMS Production Environments. The CMS Chief Technology Officer approves and authorizes the publication of this document.

This supplement describes the Agency's strategy for OSS and provides the guidance to assist CMS in taking full advantage of and leveraging the advancements in technology through open source software. It addresses open standards, security considerations, software development practices, licensing options, change management, operations and management issues, and policies for the governance of open source adoption. The CMS Technical Review Board will rely on the guidance in this supplement to assess the potential adoption of and approval for specific open source software.

This updated document adds business rules for managing OSS to the same standard as Commercial Off-the-Shelf (COTS) software, documenting all products in the Technology Products Profile (TPP), building OSS from configuration controlled source code, and prohibiting the modification of OSS at this time.

CMS Business Owners and Agency contractors should rely on this supplement when considering OSS as part of CMS systems.

Portal Style Guide v1.0, Published 7/10/2013
This CMS Technical Reference Architecture (TRA) – Portal Style Guide Supplement V1.0 defines the components and terminology of portal user interfaces, and establishes a baseline set of visual components that the agency can use when communicating or referencing CMS portal elements. The guidance in this supplement is intended for implementing a portal-based user interface with a common user experience based on the CMS Assets Front-End Framework, wireframes, and proven performance enhancements from industry.  

This TRA supplement serves as the agency’s enterprise standard in support of its initiative to provide a consistent, accessible, and productive user interface for all users to CMS portals and other portal-based presentation mechanisms.

The CMS Chief Technology Officer authorizes and approves the publication of the Portal Style Guide Supplement and its contents. This supplement augments and aligns with the CMS TRA Portal Strategy and CMS TRA Web-Based User Interface Supplement, and CMS will update it on an as-needed basis.

Portlet v1.0, Published 6/6/2012
The Portlet Supplement defines the enterprise-wide standard architecture for building composable and reusable portlets for use in CMS portals, and defines and establishes the standards applicable to the use of portlets at CMS. It also defines the terminology, describes the permitted techniques, and outlines the business rules for using portlets with the CMS portal infrastructure.

Private and Community Cloud IaaS and PaaS Infrastructure v1.0, Published 02/01/2013
Private and Community Cloud IaaS and PaaS Infrastructure Supplement defines the enterprise-wide standard architecture for building, configuring, and deploying Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) Cloud Infrastructure at CMS. An effective cloud infrastructure enhances productivity by providing a standards-based platform to securely manage the full system life cycle from initial provisioning through eventual retirement and de-provisioning of virtual resources, including virtual machines, storage, and networks.

This TRA supplement defines terminology and presents the business rules for use of IaaS and PaaS in private and community clouds at CMS. The document describes the essential characteristics of Cloud services, including on-demand service, resource pooling, rapid elasticity, and measured services, and how these services operate within the CMS multi-zone architecture. This supplement also presents guidance about planning for and deploying IaaS and PaaS-based applications that meet the expectations of CMS and its stakeholders.

Release Management, v1.0, Published 6/28/2013
This CMS Technical Reference Architecture – Release Management Supplement, Version 1.0 complements the CMS TRA by providing rules and engineering guidance for developing, testing, and hosting CMS distributed systems and business applications within the agency’s data center Development, Test, Implementation, and Production Processing environments.

This supplement provides the rules governing the support and use of CMS data center environments for the conduct of pre-approved, scheduled Development, Validation Testing, and Implementation Testing of distributed CMS systems, infrastructure, and business applications.

The CMS Chief Technology Officer authorizes and approves the publication of the Release Management Supplement and its contents. This supplement augments and aligns with the CMS TRA Foundation 3.0, and CMS will update it on an as-needed basis.

Security Services v2.0, Published 8/27/2013
The Security Services Supplement provides the security design and engineering guidance for CMS data center environments. The ARS-CMSR takes precedence over this supplement for resolution of any conflict in interpretation of security guidance for the CMS environment.

Shared Services v1.0, Published 5/24/2010
The Shared Services Supplement provides the authoritative technical reference of principles, standards, and engineering guidance for shared services development across the CMS enterprise. Development teams should use the guidelines and principles described in this supplement when designing and implementing shared technology services.

Technology Products Portfolio v1.0, Published 11/19/2010
The Technology Products Portfolio Supplement provides the authoritative technical reference of CMS-approved Commercial Off-the-Shelf (COTS) products (software only) to guide new offerors and existing CMS contractor proposals and solutions within the CMS procurement process.

Technical Products Portfolio Concept of Operations v1.0, Published 6/21/2013
This CMS Technical Reference Architecture – Technology Products Portfolio (TPP) Concept of Operations Supplement provides the life-cycle guidance for CMS-approved Commercial Off-the-Shelf (COTS) products (software only) and informs the handling of new and existing CMS proposals and solutions within the CMS acquisition process.

This TPP Concept of Operations Supplement augments and aligns with the CMS TRA – TPP Supplement, which defines business rules and information characteristics of the Technology Products Portfolio database. This document provides guidance, in the form of a concept of operations, for such life-cycle events as product selection, change, and retirement. It also addresses the required actions when audits reveal unapproved products and the role of periodic CMS Technical Review Board reviews.

The CMS Chief Technology Officer authorizes and approves the publication of this supplement and its contents. CMS will update the TPP Concept of Operations Supplement and its complementary Portfolio database on a regular basis.

Virtualization v1.1, Published 7/28/2010
The Virtualization Supplement establishes the authoritative technical reference for CMS server and network virtualization architectures. This supplement presents the primary technical concepts, business rules, policies, and standards to guide and inform all CMS stakeholders who plan, acquire, design, implement, use, and maintain virtualized CMS servers and network components across the enterprise.

Web-Based User Interface v1.0, Published 6/5/2012
The Portlet Supplement defines the enterprise-wide standard architecture for building composable and reusable portlets for use in CMS portals, and defines and establishes the standards applicable to the use of portlets at CMS. It also defines the terminology, describes the permitted techniques, and outlines the business rules for using portlets with the CMS portal infrastructure.

Web Services v1.0, Published 10/5/2011
The Web Services Supplement describes Web services architecture and functional components related to integration into CMS' enterprise, including implementing messaging and certificate-based security measures. This supplement also presents Web services design principles and standards along with strategies for Web services adoption and implementation.

Wide Area Network (WAN) Services v2.0, Published 03/15/2013
The CMS Technical Reference Architecture – Wide Area Network (WAN) Services Supplement provides the authoritative technical reference of principles, business rules, and engineering guidance for design and implementation of CMS WAN Services.  This supplement is authorized and approved by the CMS Chief Technology Officer.

This supplement describes the CMS Core Network, CMS Private Network (CMSnet), and the CMS Extranet. Together, these WAN elements serve the Enterprise Data Centers (EDC), business partners, employees, and beneficiary communications needs of the Agency.  The information provided here is relevant to systems developers and systems maintainers, and helps ensure consistency in connectivity and communications across all CMS production environments.

This supplement presents additional guidance on the gateways at the EDCs that facilitate a secure flow of information.  This supplement also describes the expected interactions between the CMS Management/Security Zone and the Presentation, Application, and Data Zones.

This supplement expands on the prior supplement (Version 1.0) in number of areas:  the Core, CMSNet, Extranet, QIES Managed VPN solution, Managed Internet Services, Multicast and Quality of Service, and Key Servers.

Related Links