Users Guide

● Logging is improved for the error that results when a user with duplicate UPNs in the Dell Data Protection database
attempts to log in to the Remote Management Console. [DDPS-3578]
● Logging is improved for the error that results when searching for a user whose group name includes a special character.
[DDPS-3587]
● The Common Encrypted Folders policy is now correctly applied to %ENV:USERPROFILE%\Downloads. [DDPS-3752]
● Endpoints that were previously removed can now be consistently added back into inventory and receive new policies as
expected. [DDPS-3772]
● The Remote Management Console Domain Details & Actions page is no longer illegible if the domain service account that is
used to add the domain includes a quotation mark (") in its password. [DDPS-3813]
● An issue that led to high Compatibility Server CPU load at restart when forensics are enabled in the Security Server is
resolved. [DDPS-3833]
● An error that caused occasional Core Server service crashes when multiple inventories are run is now properly handled.
[DDPS-3877]
Technical Advisories v9.4
● After Dell Enterprise Server and DDP Enterprise Server - Virtual Edition installation, the Remote Management Console
displays "1 Uncommitted Override," indicating a pending policy commit. The policy represents an internal setting. To work
around this issue, commit policies after installation. In the left pane, click Management > Commit, enter the description,
"Initial commit," and click Commit Policies. [DDPS-3163]
● An error occurs during forensic key bundle download from VE.[DDPS-3244]
● In order for Dell Data Protection SED and HCA v8.5.1 and earlier clients to communicate with Dell Enterprise Server and
Virtual Edition v9.4, the following settings must be configured on the Server:
1. On the Security Server, access <root>/opt/dell/server/security-server/conf/spring-jetty.xml, and comment out the
excludeProtocols property:
<!--
<property name="excludeProtocols" value="SSL,SSLv2,SSLv3" />
-->
2. In the <root>/opt/dell/java runtime/jre1.8/lib/security/java.security file, remove "SSLv3, " from the line below:
jdk.tls.disabledAlgorithms=SSLv3, RC4, DH keySize < 768
[DDPS-3371]
● Universal security groups are not supported due to the way they are created within Active Directory. [DDPS-3765]
● Email/SMTP settings are not retained after upgrade and restore from backup. To work around this issue, after upgrade and
restore are complete, reconfigure SMTP settings in the VE Terminal:
1. From the Advanced Configuration menu, select Email Notifications.
2. In the Set up Email Notifications screen, to enable email alerts, press the Spacebar to enter an X in the Enable Email Alerts
field.
3. Enter the SMTP Server fully qualified domain name.
4. Enter the SMTP Port.
5. In the From User field, enter the email account ID that will send email notifications.
6. In the Enter User field, enter an email account ID for access to change configured email notifications.
7. In the Password field, enter a password for access to change configured email notifications.
8. In the Mail IDs fields for VE Status, Password Updates, and Updates Availability, enter lists of recipients for each notification
type. Follow these conventions when listing recipients: Email address format is [e-mail]. Recipients are separated
with commas or semicolons.
9. In the Service alert reminder field, to enable reminders, press the Spacebar to enter an X in the field then set the reminder
interval in minutes.
10. A Service alert reminder is triggered when the reminder interval has passed after a notification is sent about a system health
issue and the host or service remains in the same state.
11. In the Summary Report field, to enable reports of notifications, select the desired interval (Daily, Weekly, or Monthly) and
then press the Spacebar to enter an X in the field.
12. Select OK.
13. Restart the services.
[DDPS-4037]
34
Dell Security Management Server Virtual Technical Advisories