Security
Sort by:
Trending
Status:
Showing 36
6
VOTE
Single Sign-on (SSO) with SAML or OIDC authentication is required for the Sterling User Interfaces (UIs), including C:D, SSP, SEAS, SFG, SCCM and SCCD. Migration from a legacy LDAP connection to a federated (SAML or OIDC) connection is required for all UIs, by US Federal Agencies.
This is required to comply with US Federal Security requirements mandated to all US Federal Agencies.
3
Planned for future release
8
VOTE
Cryptographic function used for TLS certificates storage should use SHA-384 or SHA-512 or POLY-1305
CA Certificates, Key Certificates and Private Keys are stored in key database file cdkeystore.kdb + STH file. In addition software stores the key database password in .keystore file and passphrase to the private key in .password file in C:\Program...
4
Not under consideration
6
VOTE
14
VOTE
Mask or Don't Include Passwords In Connect Direct Process Scripts that have been built in Connect Direct Web Services or Connect Direct Browser UI
Currently when a user builds a process in CDWS or CD Browser UI, the password is in plain text if a pnode/snode ID is used with password. This is a security vulnerability and should be addressed. We realize that there is no way to stop a user from...
1
Planned for future release
6
VOTE
1
VOTE
Encrypted Access Key and Secret Key in # S3 IO Exit parameters
Encrypted Access Key and Secret Key in # S3 IO Exit parameters Stanza of Initparm.cfg file. Here is problem Statement : We were able to send the file to DELL ECS S3 Bucket from linux node, for this one we have updated the initparm.cfg file, We hav...
3
Not under consideration
9
VOTE
4
VOTE
7
VOTE
Add TLS 1.3 Support to Connect:Direct for HPE Nonstop Platform
It was mentioned in HPE NonStop Forum that TLSv1.3 will be coming out later 2019 year. It was also mentioned by HPE that TLSv1.0 is a degraded security protocol and that HPE NonStop Client Applications running on X86 and Itanium Platform need to m...
6
Future consideration
8
VOTE