IronKey ™ EMS On-Prem v7.0.0.0 Release Notes 


EMS v17.1.20.0


Release Date: March, 2017


WHAT’S NEW in IronKey EMS On-Prem v7.0.0.0:

  • ACE Player is no longer available in version 7.0.0.0
  • Ironkey EMS On-Prem can be installed in the following operating environments:
  • - VMware® vSphere® ESXi Hypervisor (version 5.0 or higher) environment
  • - VMware® Workstation 12 Player (or higher) environment

Switching to alternate port 9701/TCP

Port 2000/TCP is commonly used for Cisco VoIP phone management and may present a traffic conflict with Cisco firewalls if phone traffic is on the IronKey EMS On-Prem network. To resolve the conflict, you can disable Cisco firewall port 2000/TCP packet inspection with ‘no inspect skinny’ or set IronKey EMS On-Prem Server to use port 9701/TCP.

Disabled RC4 ciphers, CBC ciphers, MD5 MAC, and 96-bit MAC for SSH connections

Improved CLI output for several commands

Added commands to enable debug mode

You should only use the debug commands if DataLocker Customer Support has requested that you enable it, for example when attempting to reproduce an issue and provide Customer Support with a supportInfo file.

Support for IronKey D300M and Sentry EMS

IronKey EMS now supports the new IronKey D300M and DataLocker Sentry EMS device. Designed for business-grade security, the D300M and Sentry EMS are encrypted USB 3.0 drives that are FIPS 140-2 Level 3 certified and TAA-compliant.

Web based login accounts (new accounts and upgrade from version 6.2.0.0)

Added full support for Web-based login

Previous releases required Administrators to have an IronKey Enterprise device to access the management console to manage their IronKey EMS account. Administrators can log in directly to the management console web application with Username & Password only.

Added Two-factor authentication for Web-based login

Admins who use Web-based login will authenticate using their user name and password, and also be required to provide an Access Code, sent in an email message.

Web-based login feature is not available for EMS On-Prem accounts upgrading from version 6.1 and older. Our Engineering team is working on making this feature available in the near future.


KNOWN ISSUES

IronKey On-Prem version 6.1.0.0 and upgrades from version 6.1.0.0 – Devices with Default Device Policy cannot download a new policy version automatically.

Workaround: To download a new Default policy version: Default Device Policy needs to be updated and new version saved. End user must manually click on the ‘Check For Updates’ button in the device Control Panel to update the policy on the device. After this is completed, the device will start updating the policy automatically two minutes after unlock.

To assigned a new policy to the device with Default policy: Once a new policy is assigned to the device in Admin Console, end user must manually click on the ‘Check For Updates’ button in the device Control Panel to update the policy on the device. After this is completed, the device will start updating the policy automatically two minutes after unlock.

A prompt to install VMware tools might be displayed when logged into EMS On-Prem CLI. Click "Never Remind Me Again" on the prompt.

Some pages in Admin Console might be slightly misaligned when the browser window is resized small. For the best browsing experience maximize your browser window.

Comments on Device profile page or User profile page are not saved if entered text is in angle brackets.

Silver Bullet IP Range addresses are not displayed on the Review Default Policy confirmation page.

  • In IronKey EMS On-Prem upgraded from version 4.0 and older, users will not receive updated text for Default Storage Activation Email. Workaround: Access Admin Console. Click on System Console tab and select Message Center from the left side menu. Open Default Storage Activation Email. Modify the template or click Revert to Default button. Click "Save" button. Storage users will now receive updated email template.