*New* Safe & Secure 3.7 Interim Release 1
Released 6^th December 2011

This is the latest version of the Safe & Secure package which is now available for download from our Downloads area.

You can view the changes incorporated into this release here.

Safe & Secure 3.7
Released 26^th November 2010

Safe & Secure version 3.7 is out! It's packed full of new features. Find out more below, or download it by visiting the Downloads area.

RealTime Monitor

Locum is pleased to announce a partnership agreement with Unisys to develop and market Locum RealTime Monitor.

Under the agreement, Locum RealTime Monitor has been significantly enhanced to become a flexible, fully-featured monitoring tool. This release introduces RealTime Config, a PC-based Unisys SecurityCenter snap-in which enables you to control every aspect of monitoring your ClearPath MCP systems, from the designation of security and system events as alerts, to the ability to specify severity and routing information.

You can choose to display or forward alerts and even set threshold levels for alert volume, so that when those levels are breached, you can be emailed automatically to notify you of potential problems.

RealTime Monitor can display alerts from one or multiple ClearPath MCP systems. You can customize the display so that alerts are shown in the way you want to see them and an optional dial display can tell you at a glance the number of alerts being generated.

Locum RealTime Monitor is integrated with Unisys SecurityCenter. You can use it to connect to licensed and unlicensed systems as often as you like, for as long as you like. However, when connecting to an unlicensed system, no further reconfiguration is possible; when connecting to a licensed system full reconfiguration capabilities are allowed.

To evaluate the full functionality of RealTime Monitor, contact your Unisys account manager for a Locum RealTime Monitor ‘try and buy’ license key. Find out more by visiting the Locum RealTime Monitor page.

SecureAudit

Locum is pleased to announce a partnership agreement with Unisys to develop and market Locum SecureAudit.

Under the agreement, SECURE has been significantly enhanced to become a flexible, fully-featured auditors’ tool. This release introduces SecureAudit Client, a PC-based program which interacts with SECURE in the MCP environment.

Using SecureAudit Client, the Auditor and/or Security Administrator can request retrospective reports of security events in the MCP environment, and retrieve the information to the Client’s database. The data in the database may be presented in a variety of ways: as statistics, detailed data, graphical and correlation reports.

Reports may be exported and imported between SecureAudit databases, and also exported as .csv files.

If you are already licensed for SECURE, SecureAudit is free of charge, and SIMPLEINSTALL will install the appropriate software in the host MCP environment. SecureAudit Client may be installed on your PC from its own installation package.

Locum SecureAudit Client is fully integrated with Unisys’s SecurityCenter product, but can also be run as a standalone executable. Find out more and download it by visiting the Secure page.

SafeSurvey Client

The new version of SafeSurvey comes in two parts: the Host, which runs on MCP systems, and the Client, which runs on PCs. SafeSurvey Client provides a great new user-friendly means of scanning your systems and producing reports. The reports are dynamic, very easy to read, and allow you to produce graphs. Find out more and download it by visiting the SafeSurvey page.

3.7 IR 1

The latest version of Safe & Secure was released on the 6th of December 2011. It is fully qualified against MCP 13.0/54.1.  The following important changes have been applied:

• Delegated administrators with permission to assign passwords can now be forced to assign ‘Unseen Passwords’, whereby the generated password is not visible, and is emailed to the recipient user.
• An extra password check has been added when a user selects a new password: if the username is embedded anywhere in the selected password, the password change is now denied. .
• The handling of the usercode attribute ACCESSCODENEEDED has been changed. When the ACCESSCODELIST is cleared or initialised, confirmation is now required as to the desired setting of ACCESSCODENEEDED. .
• The use of BACKUPPREFIX has been rationalised. All backup printer output from Safe & Secure, including program dumps and diagnostics, will be resident under the LOCUMBD/<product name> prefix.
• In AdminDesk, the Logon Investigation function now returns two additional possibilities as to why a user may not be able to gain access: the SECOPT option SECUREPASSWORD is set to true, and the setting of the attribute LOGONFILTER.
• A Save Config function and a Recall Config function are implemented in the SafeLib Configuration dialog in order to add flexibility and ease to reconfiguration operations. In particular, they allow multiple MCP systems to be configured identically.
• The Export and Import Configuration functions allow individual configuration items (or groups of items) such as interface definitions, address pools and activity codes to be exported from one MCP connection and imported to another. These functions are implemented in the SafeLib Configuration dialog of Admindesk.
• In order to facilitate the finding of Locum output files, AdminDesk now has a Search for Locum Output function.
• The new Email to End Users function in AdminDesk allows the administrator to send an email to selected users via the MCP host. The MCP system is required to be Email Capable and each user to have an email address defined. Users can be selected from all user lists, including the main view and search results.
• The New User dialog in AdminDesk now provides assistance to administrators creating a sequence of records, for example where the names are in numerical order.
• RemoteUser Comments are now handled within AdminDesk. This brings AdminDesk into line with a recent enhancement to RemoteUser definitions in Userdatafile. .
• Due to the security aspects of some COMS Events log records (4,14), they have been included in Secure’s COMS Config Changes Report. .
• Role Based Access Control (RBAC) events are now reported in SecureAudit and available as a functional alert in Locum RealTime Monitor. .
• In SafeSurvey, RealTime Monitor and SecureAudit, to avoid the transmission of passwords in clear text, a Secure Logon has been implemented. This is dependent on MCP level 14.0 being installed. .
• In RealTime Monitor, automatic reconnection of the RTM dashboard can be configured in the event of a lost connection.

The 3.7 IR 1 release contains several fixes. For more information on these, and on the new features outlined above, refer to the 3.7 IR 1 Release Letter..

Click here to download SAFE & SECURE v. 3.7 IR 1.

3.7

The latest version of Safe & Secure was released on the 26th of November 2010. It is qualified against MCP54.1. Features include:

• New software product - RealTime Monitor: provides a new and expanded Windows-based interface for RealTime Monitor.
• General: Password Validation Options have been enhanced to provide further control over password structure. Alphabetic characters have been renamed ‘Uppercase Characters’, and a new category ‘Lowercase Characters’ has been added. The settings of each of the four categories (numeric, special, uppercase and lowercase characters) are consolidated into tri-state options (ALLOW, DISALLOW, ENFORCE) for more intuitive ease-of-use. The password generation function has also been enhanced to take account of the password structure policies.
• This release is compatible with the new MCP 12.0 implementation of case-sensitive passwords (SECOPT CaseSensitivePW), in that passwords input to Safe & Secure will require or not require quotes, depending on the setting of the new option.
• Industry-standard encryption has been implemented on messages sent and received by the AdminDesk, AdminSock and UserSock interfaces of SafeLib. AES (Advanced Encryption Standard) 128-bit encryption is available as an alternative to Locum’s proprietary hashing, which remains the default, and can be set via the Global Connection Properties dialog of AdminDesk.
• For easier checking of Safe & Secure’s installation and identification of associated problems, an Installation Troubleshooter function is implemented within AdminDesk. Within Safe, it is called Verify Installation and is available in the Install module.
• The Sentry User Interface API has a new function called Admin Inquire Usercode. This allows an administrator program to interrogate the Identity, Email and Userverification text attributes of a user.
• AdminDesk: For easier handling and improved diagnostics, Summary Text is now included in Userdatafiles and Safe & Secure dump files via a new file attribute called Locum_Summary.
• The new Socket Availability function, accessed via the ‘Socket Availability’ button of the SafeLib Configuration dialog, allows the administrator to check how many interfaces tasks have been open simultaneously, and how few have been available, in order to determine whether there are sufficient configured tasks to meet demand.
• Extra flexibility has been added to the Search functionality. For string attributes, ‘Whole Word Only’, ‘Begins With’ and ‘Ends With’ searches are now possible.
• AdminDesk has been considerably enhanced to allow configuration of the new Locum RealTime Monitor product.
• Reporting: A new report is now available via SECURE; the Usercode Validation Report allows the auditing of usercode validations and, if relevant, the assignment of the validated usercode to running tasks.
• SafeSurvey: A new snapshot, Usercode Usage, is implemented to allow the determination of unused usercodes since a specified date. If no date is specified, the current date minus 1 year is assumed.
• Many more fixes and new features: see the What's New file for more information. 

Enhancements

SafeLib v3.7.583

Ensures that SafeLib upgrades to version 3.7 from previous releases.

Secure v3.7.660

COMS Event records (4,14) are now included in the COMS Config report. The efficiency of the File Accesses report has been enhanced in SecureAudit Client. The Role Based Access Control report has been added. Minor fix to a (6,23) log record. Fix to waiting on the 'No file *SYSTEM/USERDATAFILE on otherwise ' error.

Conferences

Other Events