Will RSA SecurID Access IDR OS be updated soon ?

[DavidPala2]

Dear All,

Trying to PoC the RSA SecurID Access solution, I have to conform to corporate processes.

One of them is the vulnerability scan of the IDR OVA appliance, once it's deployed.

As a result of the scan, I was told that the Operating System is obsolete, as it is : SUSE Linux Enterprise Server 11 SP4.

Getting a tour at SUSE Lifecycle reference : https://www.suse.com/lifecycle/ 

We get the following :

So right now, I am absolutely unable to deploy the IDR because of obsolete OS.

Has someone a solution for me...?      🙂

Or maybe, the IDR OS is about to be updated very soon ?

Another point is that SSH Server Public Key is too small.

To remediate this point, I have to delete the existing SSH server keys, then restarting it, but I was not able to become "root" on the Identity Router.

So my question is : is there a way to become "root" on an RSA SecurID Identity Router ? or any mean to be able to modify root-owed "system files" ?

Thanks in advance for helping !

Kind Regards,

David

[TedBarbour · Accepted solution]

Hi David Pala‌ - we do have plans to update the the underlying OS later this year.  In the mean time, we have LTSS on the current version which provides ongoing maintenance and security patches.

RSA will investigate and patch as necessary vulnerabilities reported via RSA customer support.

Also, as this is a proprietary "black box" appliance, you can contact customer support to assist with gaining root access if needed.

Thanks,

Ted

[DavidPala2]

Hi Ted Barbour‌,

Thanks for prompt answer !

For the LTSS subject, that is what I precisely answered the Security Team guy before posting, and I will now forward him your answer.

For the root access, thanks for the clue, I will raise a case by now.

Kind Regards,

David