Axway Activator Release Notes

Transcription

1 Axway Activator Release Notes Document version: April 2018 Product version requirements New features and enhancements Known issues and limitations Documentation Support services Product version requirements Implementations with other Axway products require the following versions for compatibility with Activator 6.0.0: Axway product Version B2Bi Transfer CFT To obtain the latest service pack for the Axway product versions, refer to support.axway.com. New features and enhancements This section provides high-level details. See the Activator documentation available at if you need additional information. Interoperability and Compliance HTTP synchronous response Activator now supports the delivery of synchronous responses to inbound HTTP and HTTPS messages. This feature can be configured on "HTTP no packaging" type community pickup exchanges. Configuration can be implemented either in the Activator UI or through the REST API. Axway Activator Release Notes 1

2 This configuration can be saved as part of an entire system backup, and can also be propagated to network peers. New IBM MQ supported version Activator has been tested now for the support of IBM MQ 8.0. REST APIs As part of the Axway AMPLIFY platform integration, REST APIs are available in this Activator release. These APIs provide an easy mechanism for configuration promotion and can be used for integration with Axway and non-axway solutions. Swagger 2.0 for Activator REST APIs Activator now embeds the Swagger 2.0 interface for using REST APIs. Activator REST APIs are fully compatible with the AxwayAPI Gateway product. Single Sign On Activator now supports Single Sign On in networks with SAML 2.0 based identity provider servers. It also supports SAML Single Logout, SSO metadata configuration information through a dedicated Activator URL, and SHA256 signing of SAML requests and responses. Updated platform support Activator now supports 64-bits platforms for Windows and Linux. For a full list of platforms supported by Activator, refer to the Activator Installation Guide, available at Java 8 support The Activator runs on machines with JRE 1.8 installed. User experience Message Tracker enhancements Activator Message Tracker now provides improved exchange point name searches. Axway Activator Release Notes 2

3 Pickup groups You can now organize application pickups and trading pickups into groups in which they can be activated, deactivated, exported, and imported together. Customizable retries It is now possible to set the delay between message sending retries for each application and trading delivery. Installation/Upgrade Activator uses now the Install4j framework and provides an In-Place mechanism for upgrades from and 5.12 Activator existing installations. This mechanism allows less planning than side-by-side upgrades and does not require the usage of new hardware. Security Compliance TLS 1.2 support Activator supports by default TLSv1.2 for the user interface connection and for the following protocols: HTTP, FTP, IBM MQ and (SMTPS, POP3S). More protocols will be covered in the following releases. SHA2-MAC cipher support Activator now supports SHA2 with MAC ciphers (hmac-sha2-256, hmac-sha2-512) for SFTP exchanges. As with other ciphers, it is possible to control/override SSH ciphers for encryption for outgoing transfers and Activator accepts SHA2 MAC ciphers for incoming exchanges. Elliptic Curve Cryptography support Security has become one of the most important concerns on the market and the new tendency is to move to forward secrecy instead of key exchange via RSA. Forward secrecy is a protocol feature that enables secure conversations that are not dependent on the server's private key. With cipher suites that do not support Forward Secrecy, someone who can recover a server's private key can decrypt all earlier encrypted conversations if they have them recorded. It is now possible to use the cipher suites offering forward secrecy (Elliptic Curve Cryptography) to secure transmissions. From onwards, Activator supports and prefers to negotiate cipher suites offering forward secrecy. Axway Activator Release Notes 3

4 Prevent storage of clear-text data (SFTP) Activator now supports the ability to prevent the storage of (non-encrypted) backups of messages processed through the system for SFTP based exchanges. This is an optional behavior which can be activated per SFTP exchange point definition. Additional protocols will be added in future updates. Override default PGP signing certificates Activator users can now specify an alternative PGP signing key for a partner or category in the Collaboration Settings. Upgrades Activator Upgrade Customers running Activator or higher can upgrade directly to the Activator release. Known issues and limitations TLSv2 cipher Unable to use TLSv2 cipher SSL_RSA_WITH_RC4_128_SHA in MQ8Issue When setting the cipher suite value to SSL_RSA_WITH_RC4_128_SHA in Activator, Activator fails to make calls to MQ. The supported TLSv2 cipher does not work after the upgrade to Activator 6.0.0, which uses Java 8, update 66. To use a workaround: 1. Go to <Activator_install_directory>\conf and open jvmarguments.xml in an editor. 2. Add the line: <Option>Djava.security.properties=../conf/mysecurity.conf</Opt ion> 3. Create a new file in the../conf directory called mysecurity.conf. In this newly created file, add the line: jdk.tls.disabledalgorithms=sslv3, MD5withRSA, DH keysize < 7683 This line enables the RC4 encryption algorithm, which allows the cipher SSL_RSA_WITH_RC4_ 128_SH. 4. Restart Activator. Axway Activator Release Notes 4

5 Discontinued features Platforms In line with developments in the market, Activator has been updated to run in 64-bit mode and the 32-bit editions have been discontinued, starting with the Activator version In addition to that, Activator is no longer supported on AIX and Solaris. Full support is provided for the 64- bit editions of Windows and Linux (Suse / Redhat). Customers running on older Windows versions should upgrade to Windows 10/ Server 2016 to be able to run Activator Customer currently running on AIX or Solaris have to move to a different platform first. More details around the upgrade procedures can be found in our Activator Installation Guide, available at Protocols Starting with the Activator release, the support is discontinued for the following protocols: EDIINT AS1/AS3, AS4, OFTP V1/V2, cxml, MLLP, RNIF, ebxml intermediary, WebServices, WebDAV, SecureFile, Generic . For customers in need of these protocols, we recommend Axway B2Bi. Existing Activator customers that are using these discontinued protocols will be evaluated on an individual basis. Standards Support for CSOS, NIST, and FIPS has been discontinued in Activator Connectivity Sentinel and PassPort are no longer supported in Activator. Documentation This section describes documentation enhancements and related documentation. Documentation enhancements The following documents have been updated to take into account new product features and enhancements for Activator 6.0.0: Activator Installation Guide Activator Administrator Guide Activator online help Axway Activator Release Notes 5

6 Related documentation To find all available documents for this product version: 1. Go to 2. In the left pane Filters list, select your product or product version. Note Customers with active support contracts need to log in to access restricted content. Support services The Axway Global Support team provides worldwide 24 x 7 support for customers with active support agreements. support@axway.com or visit Axway Support at Copyright 2018 All rights reserved Axway Activator Release Notes 6