Do we have a release day for AM 8.7 SP1

[SugunaRavichand]

I was told that 8.7 SP1 has the remediation for TLS 1.1 vulnerability so trying to  find out the release date.

[EricaChalfin]

@SugunaRavichand,

The target for release for Authentication Manager 8.7 patch 1 is late September.  Be sure to subscribe to SecurID Advisories for more information as we get closer to release.

[SugunaRavichand]

Erica,
Thank You. I am part of the SecurID Advisory. I am also waiting on a vulnerability remediation said to be in AM v8.6 P4, haven't gotten anything from the SecurID advisory yet, is there an ETA?
Thanks,
Suguna

[EricaChalfin]

@SugunaRavichand,

I am not seeing a specific date as of yet.  

[SugunaRavichand]

Erica.
Ok, Thank you

[SaravananBSB · Accepted solution]

Yes, we have an AM 8.7 patch1 release planned ETA end of Sept 2022 OR early Oct 2022,

[DanielRobinson]

In the meantime, the following two lines will disallow TLS 1.1:

sudo su

/opt/rsa/am/utils/rsautil store -a enable_min_protocol_tlsv1_2 true restart

This will allow TLS 1.2 and disallow TLS 1.1.  This setting will remain in effect until another RSA AM Update is applied.

[SugunaRavichand]

Daniel,

Thanks, we have already done but the Nexpose scanning on the servers still shows TLS 1.1 vulnerability and we were told that 8.6P7  will address it.

Thanks,

Suguna 

[SugunaRavichand]

Thank you!

[EricaChalfin · Accepted solution]

@SugunaRavichand,

Hot off the presses! Earlier today SecurID announced SecurID Authentication Manager 8.7 Patch 1 and Updated Web-Tier Server.