Change Guardian 6.1.0.2 includes security fixes, usability improvements, and resolves several previous issues. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us to ensure that our product meets all your needs.
The documentation for this product is available on the Micro Focus website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Change Guardian Documentation page. To download this product and patches, see the Micro Focus Downloads website.
The following issues have been resolved in this release:
This release resolves an issue where a vulnerability in OpenSSL certificate parsing leaves systems open to denial-of-service attacks.(CVE-2022-0778)
Issue: When the user has installed Change Guardian Agent for Windows or Security Agent for UNIX 7.6.3, TLS 1.1 is enabled for communication.(Defect 534008 and 516128)
Fix: TLS 1.1 has been disabled.
For more information about hardware requirements, supported operating systems, and browsers, see the System Requirements for Change Guardian 6.1.
You can upgrade the components to Change Guardian 6.1.0.2 only from Change Guardian 6.1.0.1. For information about the upgrade procedure, see Applying Updates to Change Guardian Components in the Change Guardian Installation and Administration Guide.
NOTE:The FIPS mode upgrade for UNIX and Windows agents from 6.1.0.1 to 6.1.0.2 is not supported.
Micro Focus strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.
Issue: When the user updates components to Change Guardian 6.1.0.2 in FIPS mode, TLS 1.1 is disabled on Windows and UNIX agents and thus, the agents fail to register due to unsupported protocol and display the below error: (Defect 550211)
error code: 336032002 (0x14077102) in .\ssl\s23_clnt.c line 767 (error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol)
Workaround: None.
Issue: When you have Windows Agent 6.1 or 6.1.0.1 and upgrade it to a newer version, the upgrade fails with the message Failed to install NetIQChangeGuardianAgent.msi. (Defect 517117)
Workaround: Remove/delete assets from the Agent Manager. Add the assets again and install a new version of the agent package.
Issue: Once the package is uploaded successfully, the AMS page goes down for few seconds showing Error 502.(Defect 484014)
Workaround: Refresh the page to restore the AMS page.
Issue: If a process is terminated within a second of its creation, the Change Guardian Agent for Windows cannot collect the command line details such as Command Line, Command Line Length, Command Line Parameter, and Command Line Parameter Length. Events that are generated as a result of such processes do not display the command line details. (Defect 292163)
Workaround: None.
Issue: The assembly path for certain Windows processes is not available to the Change Guardian Agent for Windows, due to which the agent cannot collect the Windows process description. Events that are generated as a result of such processes do not display the process description. (Defect 290154)
Workaround: None.
Issue: If you click DASHBOARDS > EVENTS, the Events dashboard is displayed. If you click on DASHBOARDS again, the Event Dashboard appears blank. (Defect 189391)
Workaround: Refresh the page to view the Events Dashboard.
Issue: On a scheduled report for AGENT HEALTH ON FEDERATED SERVERS, if you added the requestor (shown as the local Change Guardian server) to be included in the report, the web console incorrectly displays that the server is not selected. (Defect 319023)
Workaround: Although the web console incorrectly displays the requestor server is not selected, the filters are saved and the report includes the server details.
Issue: After installing or upgrading Change Guardian in FIPS mode, when you launch Alerts Dashboard for the first time, a conflict error message is displayed. (Defect 302233)
Workaround: Refresh the page and ignore the conflict error message as there is no functionality impact.
Issue: If you use certain versions of Internet Explorer 11, such as versions 11.0.10240.16384 and 11.1098.17763.0, to view and modify Event Dashboard settings, Internet Explorer does not display the saved settings. (Defect 155003)
Workaround: Use other supported web browsers.
Issue: If you delete a user from AD, and then create a new user with same account name, AD does not synchronize the new user. (Defect 170282)
Workaround: None.
Issue: When the Change Guardian appliance boots after installation, the appliance reports that some services have failed to start: (Defect 174273)
Failed to start LSB: NetIQ LDAP Expander. Failed to start LSB: Sentinel Server.
Workaround: The services start correctly. You can ignore such error messages.
For information about Micro Focus legal notices, see https://www.microfocus.com/about/legal/
Copyright © 2022 Micro Focus or one of its affiliates.