It is designed to access the parameters of remote desktops or laptops from a single interface in order to efficiently provide support to their users. The DameWare Remote Support (DRS) is the flagship of the suite and allows you to perform most of the network administration tasks. The package includes multiple tools that aim to help you increase your daily activity performance. If you are raising a case with SolarWinds directly and need assistance with this, please provide us with the SolarWinds Case reference.DameWare Remote Support is a powerful application designed to assist the network administrators who need to remotely access and manage other computers. If you have any further questions, need any specific guidance or would like to take advantage of the Orion Assistance Program, please contact our support on or 01903 340993. OAP services also include assistance with your digital code-signing certificate update. These guidance and support services are provided at no additional charge to our Active Maintenance customers who were/are running one of the Orion Platform versions affected by SUNBURST or SUPERNOVA. The program provides upgrade and hotfix assistance to Active Maintenance SolarWinds customers by leveraging professional consulting resources who are experienced with the Orion Platform and its products. To support customers, SolarWinds have created the Orion Assitance Program (OAP). Orion Products Affected by Digital Code-Signing Certificate Revocation Orion Platform Version This is only a response to the Sunburst and Supernova vulnerabilities to perform a best practice clean-up and is not an indication of further compromise.For the affected non-Orion products, updates will be released to these over the same time period, so you are advised to keep an eye out for communications from SolarWinds and within the SolarWinds Customer Portal.Those running Orion versions within the 2019.4.x releases should upgrade either to 2020.2.4 or 2019.4.2, with that version release expected during week of 25th January.Those running Orion versions 2020.x should upgrade to 2020.2.4, which will be released during the week of 18th January.You need to upgrade by 8th March 2021 to ensure correct operation of your affected SolarWinds application.For those of you running affected application versions on old OS’s such as Windows Server 2012 or Windows Server 2008 (I know you still exist!), again this is an opportunity for you to get that migration project in place, upgrade the application and take advantage of all the new features you have been missing out on. We have provided guidance on how best to upgrade your Orion platform in order to take a risk adverse position in our previous blog and webinar, however for this circumstance an in place upgrade is likely to be the requirement. SolarWinds are maintaining a page on the existing Security Advisory section of their website for this certificate change and should be your go to for regular updates – New Digital Code-Signing Certificates, so please ensure you review this if you have not already done so.Īs this update requires an upgrade, the purpose of this blog is firstly to highlight that if you are running an application affected by the code-signing certificate revocation, you need to act quickly in order to plan for your application to be upgraded, ensuring the ongoing function remains. This certificate is used by more than just the Orion platform and therefore this impacts additional SolarWinds applications, with those affected needing to be upgraded with a new version, which has a new code-signing certificate. These are likely to be monitoring the validity of such certificates on the installed software you have and if it sees a certificate in active use being in a revoked status is likely to interfere with the correct running of the software. The announcement today (15th January) states that on the 8th March 2021 the code-signing certificate will be actively revoked, leading to the potential for applications running with that certificate to be affected by your organisation’s internal security policies and end point protection software. The impact of this needs to be understood and managed accordingly, as a lack of action may affect your monitoring service. Having released security patches and upgrades to their Orion® platform, SolarWinds® have announced that due to the nature of the compromise, they are going to be revoking the code-signing certificate.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |