To ensure a smooth transition to the upcoming SafeConsole versions (5.9.6+), which features an updated security architecture, you need to update the device SSL certificates used for server-device communication on secure USB devices acquired/registered before the cut-off date which is October 31, 2019 for SafeConsole Cloud. For SafeConsole On-Premise, you can identify the cut-off date by following step 1 below.

In order to update your SafeConsole server to newer versions, you must complete the steps below.

Please ensure that you complete the following steps to allow for a smooth transition to newer versions. Depending on the outcome of your first step, this process may take 30 minutes or less. However, if you have multiple devices to fix, it may take an estimated 5-15 minutes to fix each device.

Important Steps to Prepare for Future SafeConsole Updates

  1. On-Premise Only: Determine Your SafeConsole Server ‘Device SSL’ Cut-off Date

    • Identify when your SafeConsole server was updated to version 5.5.0.7 or later.

    • Search the server log file in the ../logs/safeconsole-*.log for the term ‘version update’ to find this information. Any device acquired (registered) by the server after this date is unaffected. This is your ‘cut-off date’.

  2. Identify Affected Devices with outdated ‘Device SSL’

    • In SafeConsole, go to Manage > Drives.

    • Activate the 'Acquired Date' column by clicking the Columns button and checking the corresponding checkbox.

    • Sort by 'Acquired Date'. Devices with dates older than the ‘cut-off date’ are affected. For SafeConsole Cloud the cut-off date is October 31, 2019.

    • Note the status of each device acquired/registered before the cut-off date. Devices that you have permanently decommissioned (lost, disabled, or reset) may be excluded from further action and will become offline.

  3. Fix the ‘Device SSL’ for Affected Devices

    • Devices acquired before the cut-off date that you wish to keep managing need to be fixed. These are the two options (do A or B):

  1. Update Device Software 

  • Download and update the device software to version 6.3 or later (4.8.49 or later for some devices) found here: https://datalocker.com/device-updates. 

  • Log into the device when managed by a SafeConsole server running version 5.9.5.232. 

  • The device will automatically get a new device SSL certificate.

- OR -

  1. Factory Reset If updating the device software is not possible:

  • Optionally backup the device data, 

  • Perform a factory reset on the device

  • Reconnect the device to the server. 

  • The device will automatically get a new device SSL certificate.

  1. Confirm Managed Devices

    • Re-run the steps to confirm the 'Acquired Date' of your devices.

    • Ensure that any device with an 'Acquired Date' older than the cut-off date has been fixed or can be decommissioned (become offline) before updating to newer SafeConsole versions (5.9.6+).



Video: How to determine the acquired date of devices in SafeConsole