Evidence.com May 2017 Release Notes

Transcription

1 Evidence.com May 2017 Document Revision: A Evidence.com Version

2 Apple, ios, and Safari are trademarks of Apple, Inc. registered in the US and other countries. Firefox is a trademark of The Mozilla Foundation registered in the US and other countries. Google, Google Play, Android, and Chrome are trademarks of Google, Inc. Microsoft, Windows, Internet Explorer, and Excel are trademarks of Microsoft Corporation registered in the US and other countries. Javascript is a trademark of Oracle America, Inc. registered in the US and other countries., Axon, Axon Body, Axon Body 2, Axon Capture, Axon Dock, Axon Flex, Axon Flex 2, Axon View, Evidence.com, Evidence.com Lite, Evidence Sync, and TASER are trademarks of Axon Enterprise, Inc., some of which are registered in the US and other countries. For more information, visit All rights reserved Axon Enterprise, Inc. Axon Enterprise, Inc. Page 2 of 8

3 Table of Contents May 23: Evidence.com May 2017 Release... 4 Evidence.com Administrator Multi-Factor Authentication... 4 How it Works... 4 Multi-Factor Authentication Account Settings... 5 Verifying Your Mobile Phone Number... 6 Critical Action Permissions... 6 Default Video Player Upgrade... 7 Faster Skin Blurring Redaction Processing... 7 Reminder: End of Support for Internet Explorer Issues Resolved in Evidence.com May Axon View for Android Updates... 8 Axon Capture for Android Updates... 8 Axon Enterprise, Inc. Page 3 of 8

4 May 23: Evidence.com May 2017 Release Evidence.com Administrator Multi-Factor Authentication We are implementing a change that requires all Evidence.com administrators and users with critical action permissions to use multi-factor authentication when signing in and when completing critical actions. This change is being made to ensure an agency's most powerful Evidence.com user accounts are secure and protected from malicious attacks. This change replaces the standard security question authentication with a multi-factor authentication. How it Works After a user makes a critical change, Evidence.com asks them to enter a security code. The security code is sent to the user s mobile phone or address, depending on the Multi- Factor Authentication settings for the agency. In cases where the agency delivery method setting is set to send to the user's mobile phone and the user does not have a verified phone number listed in their user information, the system will automatically send a security code to the user's address. After the user enters the security code, the action is completed. Further authentication is not required for other critical actions taken with the number of minutes specified in the account settings. Additionally, when signing in to Evidence.com, there are some cases (such as signing in from a new IP address) where users with critical action permissions are asked to enter a security code to complete their sign in. If your agency is using Single Sign-On (SSO) functionality, users are not asked for a security code when signing in. Agencies can also enable multi-factor authentication for all users in the agency. Axon Enterprise, Inc. Page 4 of 8

5 Multi-Factor Authentication Account Settings With this change, a new Multi-Factor Authentication account settings section has been added to the IP Address page. This replaces the Mobile Phone Advanced Authentication section of the IP Address page. To change the Multi-Factor Authentication settings for your agency: 1. On the menu bar, click Admin and then under Security Settings, click IP Address. 2. Scroll down to the Multi-Factor Authentication settings section below the IP Active Session Security settings. 3. Select if Multi-Factor Authentication will apply Agency-Wide or for Admin Only users. The Agency-Wide setting requires all users to enter a security code delivered by phone or when they sign in to Evidence.com or when they make a critical change. If your agency is using Single Sign-On (SSO) functionality, users are not asked for a security code when signing in. The Admin Only setting only requires users assigned to Roles with critical action permissions to enter a security code when they sign in or when they make a critical change. All other users will continue to be prompted with security questions. 4. Choose the delivery method for the security codes; SMS Text or Automated Call Back or . Axon Enterprise, Inc. Page 5 of 8

6 Axon recommends using SMS Text, since using a mobile phone is normally the fastest method for receiving the security code. 5. Enter how long, in minutes, the security code is valid in Evidence.com in the Security Challenge Frequency field. After the codes expire, users are prompted to enter new codes. The value can be any whole number from 2 to 10 minutes. 6. Click Save. Your agency s Multi-Factor Authentication Settings are now configured and enabled. Verifying Your Mobile Phone Number Since the fastest way to receive the security code is by mobile phone text, we recommend using SMS Text as the security code delivery method and that users with critical action permissions verify their mobile phone number with the system. To verify your mobile phone number: 1. Sign into your Evidence.com account. 2. Click your name, in the upper-right corner, to go to the User Information page. 3. Enter in your mobile phone number in the Cell Phone field and save the change. Note: If Verified is shown adjacent to your mobile phone number, no further action is needed. 4. Click Send Verification Code. 5. Select the method you wish to receive your security code (we recommend Send SMS). 6. Enter the security code to verify your mobile phone number. 7. Your mobile phone is verified and this completes your preparation to use multi-factor authentication. Critical Action Permissions Users that are assigned a Role with critical action permissions are required to use multifactor authentication when signing in and when they make a change associated with the permission. The following permission settings are considered critical action permissions for multi-factor authentication: Configure Agency Security Settings = Allowed Edit Agency Settings = Allowed Axon Enterprise, Inc. Page 6 of 8

7 Edit Device Offline Microphone Settings = Allowed User Administration = Allowed Category Administration = Allowed Delete Evidence & Edit Date Recorded = Any Evidence Restricted Category Access = Allowed Default Video Player Upgrade We are upgrading the default Evidence.com video player to provide a more secure player that supports the HTTP Live Streaming (HLS) protocol. No noticeable changes to the video player operation and functionality are expected. Agencies do not need to take any action for the upgrade. In addition to being more secure, the HLS upgrade supports native video playback on ios browsers and allows the Evidence.com video player to seamlessly maintain compatibility with modern browsers that block Adobe Flash content, while still allowing Flash to be used as needed. The upgrade will be rolled out over several weeks during May Faster Skin Blurring Redaction Processing In March, we announced the general availability of Skin Blurring redaction. Since then, we have continued working to refine and improve the feature. This month we are adding improvements that reduced skin blur redaction processing wait times by up to 400%. This significant reduction in skin blur redaction processing time was brought about through enhancements to the processing algorithm. Reminder: End of Support for Internet Explorer 10 Last year Microsoft announced that it would support only the most current version of Internet Explorer available for their supported operating systems and will no longer provide security updates or technical support for older versions of Internet Explorer. Since regular security updates are vital for protecting systems from malicious attacks, Evidence.com will no longer support Internet Explorer 10 (IE 10) beginning with the July 2017 release of Evidence.com. After the October 2017 release of Evidence.com, you will no longer be able to sign in to Evidence.com using IE 10. Axon Enterprise, Inc. Page 7 of 8

8 Issues Resolved in Evidence.com May 2017 We resolved the following issue in this Evidence.com release: Evidence Search: Added ability to search for a user by entering First Name and Last Name. During a search you can now enter John Smith as well as Smith, John. Axon View for Android Updates Axon View for Android was updated to v4.3 at the beginning of May. The update resolved several bugs and added the following enhancements: Users can add multiple categories to a given piece of evidence. Support for Regular Expression (regex) validation in Evidence.com. Axon Capture for Android Updates Axon Capture for Android v3.3.2 expected to release near the end of May. This update resolved several bugs and added the following enhancements: The app now uses the highest resolution available on a given Android device. Updated map providers. Axon Enterprise, Inc. Page 8 of 8