Version 10.1.6.1
Release date
December 15, 2020
This release features a new localization, support for Active Directory (AD) authentification in MS SQL, and encryption of database data in transit and at rest. It also addresses issues with RPA performance for Analytics and introduces improvements and component upgrades to enhance the platform's performance and stability.
Localization
With Intelligent Automation Cloud (IA Cloud) v10.1.6.1, WorkFusion further expands the global reach. In addition to Japanese, German, and Spanish localization, IA Cloud is now available in French.
This supports customers' ambitions to further spread automation across regions and cover use cases in more languages. The localized user interfaces provided for major components, such as Control Tower, WorkSpace, and Analytics, increase the platform's accessibility for native speakers.
To change your localization, refer to the following instructions:
- For Control Tower
- For WorkSpace
RPA performance for Analytics
RPA performance for Analytics was enhanced, leading to a significant reduction of the total completion time of the ETL (extract, transform, load) operations.
The new RPA implementation is about 9x faster than the older version (2m 10s vs. 18+m). Tableau ETL extracts run 6-10x times faster.
Encryption for MS SQL data in transit and at rest
Encryption is now enabled for all connections to MS SQL, thus enhancing the security of database data in transit—the data moving across servers.
The Transparent Data Encryption (TDE) mechanism enables real-time encryption of data at rest—the database data and the transaction log. For instructions to set up the MS SQL TDE for IA Cloud Enterprise, refer to the guide.
The installer was also updated to facilitate IA Cloud setup with the Transport Layer Security (TLS) support enabled for MS SQL on the customer side.
Support for AD authentication in MS SQL
With IA Cloud Enterprise supporting Active Directory (AD) authentication in MS SQL, the following benefits are provided:
Manual efforts by IT Operations to manage MS SQL users are eliminated. All users can now be managed via AD.
Password change is enabled, thus enhancing the platform's security.
The IA Cloud can be installed with MS SQL Always On enabled.
It is now possible to migrate to AD users in the course of the upgrade from previous versions. For instructions to enable the migration, refer to the upgrade guide.
Providing support for AD authentication to MS SQL involved the following installer fixes:
- Resolved issues with AD access to MS SQL for the OCR, RPA, and BI components of the IA Cloud Enterprise, as well as for Linux services.
- Fixed the problem when the pre-checker returned an error for AD access to MS SQL.
- Enabled validation for the pre-checker to verify that SPN created for MS SQL in the customer's Active Directory corresponds to
mssql_hostnamefromhosts.yml. - Added pre-checks to verify that required ports are open towards the domain controller when AD logins are used for MS SQL.
Improvements
Performance of BEP Workers was improved, resulting in decreased Bot Task and, hence, Business process failures. This involved re-designing Bot sources to eliminate the excessive load due to duplicate tasks in Worker queues.
Logs across all IA Cloud Enterprise components are synchronized by the Kibana timezone.
The IA Cloud Enterprise installer was improved to avoid product installation issues related to wrong certificates provided by customers and ensure a more stable upgrade process with less troubleshooting. The improvements are as follows:
- Certificates were restructured, and the checking script verifying the installation readiness was updated accordingly.
- A check to verify that no Business Processes (BPs) are running was added, enabling users to comply with the prerequisite to stop all BPs before an upgrade.
- Component vulnerabilities were eliminated, which involved updating Nexus to 2.14.19.1 and removing the cups-libs component.
The
ZooKeeperConstraintsNodesListenerbean at the execution-constraints module was excluded from the Workers’ startup configuration. This reduced the network's, Workers', and ZooKeeper loads.The XXE vulnerability in SAML configuration was eliminated. The
org.opensaml.xml.parse.StaticBasicParserPoolcomponent creating XML parsers for SAML was enhanced with two parameters:http://javax.xml.XMLConstants/feature/secure-processing=truehttp://apache.org/xml/features/disallow-doctype-decl=true.
The parameters prevent the XML parser from processing insecure XML elements (for example, links to external entities in the doctype declaration).
In addition to the default SHA-1 algorithm, support of the RSA SHA-256 encryption was implemented for SAML requests to SSO (Single sign-on). For instructions to enable it, refer to the guide.
Updates
The OSHI library for Workers was updated to resolve a known issue with the logger.
Tomcat was upgraded to v8.5.57.
log4j v1.x versions were upgraded to log4j v2.13.3.
ZooKeeper was upgraded to v3.6.1.
Curator was upgraded to v5.1.0.
The Chrome driver for the RPA package was updated to eliminate browser crashes on the RPA node.
Bug fixes
Fixed the problem breaking the FIFO effect. Typically, each Manual Task (MT) in Control Tower is assigned with a sorting index and, subsequently, synchronized to WorkSpace. The problem was that a synchronization job would occasionally pick up tasks with a null sort index and put the tasks on the top of the MT queue. In v10.1.6.1, changes were introduced into the database sorting indexing to avoid rating the MT's null value as the top priority.
Resolved the issue when hits could not be submitted to WorkSpace due to the exceeded MS SQL maximum limit of 2,100 parameters.
Enabled support of Spanish symbols by ETL.
Resolved the issue with tracking BP run status changes in Analytics. Now, Analytics for processes and process executions is updated responsively to reflect BP run changes.
Fixed the issue with the display of maximum BPs on the BP list.
Fixed the wrong sequence of the RPA height and width parameters in
com.workfusion.autoit.driver.DesktopImageElement.Eliminated the problem with the IE answer expand:on functionality. The dropdown with an apostrophe in the parent answer is now clickable.
Fixed performance issues observed when an existing BP instance was copied or a new one was created with multiple images.
Resolved the release plugin issue to enable support of custom time zones.
Fixed the issue when it was impossible to log out from several pages with SSO enabled.
Tuned Xmx JVM to increase the stability of the Task Dispatcher Service.