IBM Endpoint Manager Platform

IBM Endpoint Manager enables organizations to securely manage even the most intermittently connected mobile users, delivering continuous updates regardless of connectivity to the internal corporate network and enforcing policies offline to ensure regulatory compliance.

These are the new features and enhancements to the existing functions:

Enhanced Security

This enhancement includes the following functions:

• Ability to disable SHA-1 signatures in favor of SHA-256.
• Support for TLS 1.2 communication protocol.
• The root certificate key strength is increased from 1024 bits to 4096 bits.

Note: Enabling Enhanced Security results in loss of management of any agents or relays with versions earlier than V9.1, including proxy agents.

For information about this enhancement, see Security Configuration Scenarios.

LDAP group support in Web Reports

For information about this enhancement, see Step 2: Assign a Web Reports role to LDAP users or groups.

Linux server processes are now 64-bit

The following services are now 64-bit:

• Root Server
• Web Reports
• FillDB
• GatherDB

Common Criteria security certification features

This enhancement includes the following functions:

• Configurable login banners for Console and Web Reports.

  To configure the login banner, set the option loginWarningBanner as described in Advanced Options for Windows systems or in Running the Endpoint Manager Administration Tool for Linux systems.

• Inactivity timeout for Console and Web Reports.

  To configure the inactivity timeout, specify the option timeoutLockMinutes as described in Advanced Options for Windows systems or in Running the Endpoint Manager Administration Tool for Linux systems.

• Increased server audit logging.

  To configure the server audit logging, specify the setting _BESRootServer_Audit_Verbosity as described in Configuration Settings.

Dashboard API enhancements

This enhancement includes the following functions:

• Suppress warning for the StopAction API.
• Tag actions when importing.
• Asynchronous DownloadFile API.
• Asynchronous UploadFile API.

Enhanced screen reader support for the Client UI

This enhancement includes the following functions:

• Enabled screen reader for About dialog and Action History dialog.
• Support high contrast display mode in Client UI.

REST API enhancements

This enhancement includes the following functions:

• Ability to add a file that will to be gathered by agents to a site.
• Ability to delete a computer.
• Users that are created through the REST API are now logged in the server audit log.

The information about REST API is available at the following web page REST API.

New agent inspectors

This enhancement includes the following functions:

• Square root, for example, sqrt of 4.
• Added comparison operators for type <time of day with time zone>.
• Group membership inspectors, for example, manual groups of <client>.
• Ability to percent-encode and percent-decode strings.
• On Windows systems: ability to inspect whether Data Execution Prevention is enabled for a process.
• On Windows systems: registry inspectors support the REG_QWORD registry type.
• On Windows systems: get the process id (pid) of a service, for example, pid of <service>.
• *nix: network socket inspectors.

The information about agent inspectors is available at the following web page IBM Endpoint Manager Inspectors Reference.

For a list of fixes that are included in the V9.1, see http://support.bigfix.com/bes/changes/fullchangelist-91.txt.

For a list of known limitation that affects V9.1 (9.1.1065), see Known Issues in IBM Endpoint Manager V9.1.