Enhanced Security mode and BES Support site

I’m preparing to test Enhanced Security mode in my lab environment. I noticed that it requires non-supported sites to be unsubscribed. What surprised me is that the Admin tool called out the native BES Support site as not supported. Is there a newer Enhanced Security compliant version of BES Support?

What about the other sites which aren’t compliant? Is IBM going to release updated versions that are compliant?

Bump … does anyone have any insight?

It is expected that most sites will be compliant with Enhanced Security, and currently, most are (including BES Support). I would ensure that you have the latest version of the Fixlet Sites, and if you continue to have issues, to contact Support.

Yes, I would expect them to be compliant too. However even with 9.2 installed and a current BES Support site version of 1200, the Admin tool flags the BES Support site as being non-compliant with Enhanced Security. I’ll follow up with a PMR to support.

FYI … support confirmed a bug in Enhanced Security that apparently is fixed but has yet to be publically released.

Any Updates on these issues with Enhanced Security? Also does BigFix have this documented somewhere? I have also been looking for like documentation Enhanced Security and Client/Relay Authentication and find documentation lacking.

Thanks,

Peter

The sites we publish are compatible but it will have required that your deployment picked up new mastheads which should be done in the gather phase, and it also may require a running of BESAdmin to deploy them out.

If you are running in an airgap mode it will require using the 9.2 based Airgap tool as well.

1 Like