Good Mobile Messaging Server Version 8.3.2 (BDB Version ...€¦ · Good Mobile Messaging Server...

1

© Good Technology 2016. All rights reserved.

Good Mobile Messaging Server Version 8.3.2 (BDB Version) Good Mobile Control Server Version 2.7.4 for Microsoft Windows Exchange and Exchange Online (Office 365) Release Notes Updated 11/19/16

Overview .......................................................................................................................................... 3 Good Mobile Messaging Server Version 8.3.2.12 (Hot Fix) (11/19/16) ............................................... 4

New In This Release .................................................................................................................... 4 Issues Resolved – GMM .............................................................................................................. 4

Good Mobile Control Server Version 2.7.4.1115 (Hot Fix Release) (08/31/16) .................................... 4 New In This Release .................................................................................................................... 4 Issues Resolved – GMM .............................................................................................................. 4

Good Mobile Messaging Server Version 8.3.2.10 (Hot Fix) (08/01/16) ............................................... 4 Customer Action .......................................................................................................................... 5 Instructions ................................................................................................................................... 5 Issues Resolved – GMM .............................................................................................................. 6

Good Mobile Control Server Version 2.7.2.1059 (Hot Fix) (04/18/16) ................................................. 6 New In This Release .................................................................................................................... 6

Good Mobile Messaging Server Version 8.3.2.7 (Service Release) (03/29/16) .................................... 6 New in This Release .................................................................................................................... 6 Issues Resolved – GMM .............................................................................................................. 6

Good Mobile Messaging Server Version 8.3.1.13 (Hot Fix) (03/10/16) ............................................... 7 New in This Release .................................................................................................................... 7 Issues Resolved – GMM .............................................................................................................. 7

Good Mobile Control Server Version 2.7.1.1045 (Hot Fix) (02/29/16) ................................................. 7 New In This Release .................................................................................................................... 7 Issues Resolved – GMC .............................................................................................................. 7

Good Mobile Control Server Version 2.7.0.1040 (Service Release) (02/08/16).................................... 7 New In This Release .................................................................................................................... 7 Issues Resolved – GMC .............................................................................................................. 8

Good Mobile Control Server Version 2.6.4.972 (Service Release) (09/24/15) ..................................... 9 New In This Release .................................................................................................................... 9 Issues Resolved – GMC ............................................................................................................ 10 Open Issues - GMC ................................................................................................................... 10

Good Mobile Messaging Server Version 8.3.1.10 (Hot Fix) (09/21/15) ............................................. 11 New in This Release .................................................................................................................. 11 Issues Resolved – GMM ............................................................................................................ 11

Good Mobile Messaging Server Version 8.3.1.8 (Hot Fix) (08/05/15) ............................................... 11 New in This Release .................................................................................................................. 11 Issues Resolved – GMM ............................................................................................................ 11

Good Mobile Control Server Version 2.6.3.926 (Service Release) (07/29/15) ................................... 12 New In This Release .................................................................................................................. 12

2


Open Issues - GMC ................................................................................................................... 12 Good Mobile Control Server Version 2.6.2.888 (Hot Fix) (05/20/15) ................................................. 12

New in This Release .................................................................................................................. 12 Issues Resolved – GMC ............................................................................................................ 12

Good Mobile Control Server Version 2.6.2.872 (Service Release) (05/05/15) ................................... 12 Issues Resolved – GMC ............................................................................................................ 13 Open Issues - GMC ................................................................................................................... 13

Good Mobile Messaging Server Version 8.3.1.5 (Hot Fix) (04/17/15) ............................................... 14 New in This Release .................................................................................................................. 14 Issues Resolved – GMM ............................................................................................................ 14

Good Mobile Messaging Server Version 8.3.1.4 (Service Release) (03/25/15) .................................. 14 New in This Release .................................................................................................................. 14 Disabling SSL V3 for GMM ........................................................................................................ 14 Issues Resolved - GMM ............................................................................................................. 15

Good Mobile Control Server Version 2.6.1.832 (Hot Fix) (03/18/15) ................................................. 16 New in This Release .................................................................................................................. 16 Issues Resolved – GMM ............................................................................................................ 16

Good Mobile Messaging Server Version 8.3.0.19 (Hot Fix) (03/04/15) ............................................. 16 Issues Resolved - GMM ............................................................................................................. 16

Good Mobile Control Server Version 2.6.1.823 (Service Release) (02/03/15) ................................... 17 New in This Release .................................................................................................................. 17 Issues Resolved - GMC ............................................................................................................. 17 Open Issues - GMC ................................................................................................................... 17



Good Mobile Control Server Version 2.6.0.801 (Feature Release) (12/16/14) ................................... 18 New in This Release .................................................................................................................. 18 Issues Resolved - GMC ............................................................................................................. 18 Open Issues - GMC ................................................................................................................... 19

Good Mobile Messaging Server 8.3.0.12 (Feature Release) (11/05/14) ........................................... 21 New in This Release .................................................................................................................. 21 Issues Resolved - GMM ............................................................................................................. 21 Open Issues - GMM ................................................................................................................... 21

Good Mobile Control Server Version 2.5.3.723 (Service Release) (08/04/14) ................................... 22 New in This Release .................................................................................................................. 22 Issues Resolved - GMC ............................................................................................................. 22 Open Issues - GMC ................................................................................................................... 22

Good Mobile Control Server Version 2.5.2.701 (Service Release) (07/23/14) ................................... 22 New in This Release .................................................................................................................. 22 Issues Resolved - GMC ............................................................................................................. 23

Good Mobile Messaging Server Version 8.0.5.46 (Service Release) (06/25/14) ................................ 23 New in This Release .................................................................................................................. 23 Issues Resolved - GMM ............................................................................................................. 23 Open Issues in Good Mobile Messaging Server ....................................................................... 24

Good Mobile Messaging Server Version 8.0.4.1 (Service Release) (04/28/14) .................................. 24 New in This Release .................................................................................................................. 24

Good Mobile Control Server Version 2.5.0.672 (Feature Release) (04/28/14) ................................... 24 New in This Release .................................................................................................................. 24 Issues Resolved - GMC ............................................................................................................. 24 Open Issues - GMC ................................................................................................................... 26

Good Mobile Control Server v2.4.2.610 (Service Release) (03/07/14) ................................................ 27 In This Release .......................................................................................................................... 27

3


Issues Resolved – GMC ............................................................................................................ 27 Good Mobile Messaging Server v8.0.3.31 (Service Release) (02/06/14) ............................................ 27

In This Release .......................................................................................................................... 27 Issues Resolved – GMM ............................................................................................................ 27

Good Mobile Control Server v2.4.1.539 (Service Release) (10/22/13) ......................................... 29 In This Release .......................................................................................................................... 29

New in GMC ........................................................................................................................... 29 Issues Resolved – GMM/GMC .................................................................................................. 29

Good Mobile Control Server v2.4.0.501 (Feature Release) (08/13/13) ........................................ 29 In This Release .......................................................................................................................... 29

New in GMC ........................................................................................................................... 29 Issues Resolved – GMC ............................................................................................................ 30

Good Mobile Control Server v2.3.2.3 (Service Release) (07/10/13) ................................................... 31 Good Mobile Messaging Server Version 8.0.5.61 (Hot Fix) (03/09/15) ............................................. 31

Issues Resolved - GMM ............................................................................................................. 31 Good Mobile Messaging Server v8.0.2.13 (Service Release) (07/10/13) ............................................ 31

Issues Resolved – GMM ............................................................................................................ 31 Good Mobile Messaging Server v8.0.2.9 (Service Release) (06/07/13) .............................................. 32

Issues Resolved – GMM ............................................................................................................ 32 Good Mobile Control Server 2.3.0.402; Good Mobile Messaging Server Version 8.0.1.86 (Feature Release) (05/08/13) .......................................................................................................................... 32

In This Release .......................................................................................................................... 32 New in GMM ........................................................................................................................... 33 New in GMC ........................................................................................................................... 33 Supported Exchange Online Features In This Release ......................................................... 33 Unsupported Exchange Online Features In This Release ..................................................... 34

Open Issues in Good Mobile Control Server ............................................................................. 34

Overview

This release of Good for Enterprise includes updated software for Good Mobile Control v7.2.4 and Good Mobile Messaging v8.3.2 (BDB version, now combined with SQL version). For a complete list of handhelds that are compatible with this server software, and additional details and known issues about a specific device/ROM/carrier combination, refer to the Good Monitoring Portal | Supported Devices (www.good.com/gmp). The Portal also lists which handhelds are covered by Good’s Technical Support. This release is compatible with Microsoft Exchange 2010, with SP2 RU4 or newer. In the “Open Issues” sections, the listed issues have not been sufficiently resolved in this release and will be addressed in a future release. The issues are identified by component and a brief description. A workaround is provided if it is available. For more information, contact your Good representative. For the latest compatibility information, please refer to the Compatibility Matrix. Good Mobile Control Server = GMC Good Mobile Messaging Server = GMM Hot Fixes: To achieve a rapid turnaround, hot fixes do not undergo the same level of testing as service or feature releases. Hot fixes are available, by request, from Good Technical Support. All defects addressed in hot fixes are included in the next scheduled service or feature release.

http://www.good.com/gmp

http://media.www1.good.com/documents/GMM-GMC-Compatibility-Matrix.pdf

4


Good Mobile Messaging Server Version 8.3.2.12 (Hot Fix) (11/19/16)

New In This Release

• Open issues resolved

Issues Resolved – GMM

Tracker Issue Component FIRST-12494

Folders not removed from Trash when Outlook deleted items folder is emptied

Email

FIRST-12642

Enable support "IPM.Sharing." Message classes

Good Mobile Control Server Version 2.7.4.1115 (Hot Fix Release) (08/31/16)

New In This Release

• Support for iOS 10: This release includes GFE support for iOS 10 activation and enrollment. iOS 10 will be displayed in GMC in the OS Version column on the Handhelds page. iOS 10 has been added to the available operating systems for inclusion in the OS Verification rule in Compliance Management policies. Edit existing OS verification rules as necessary to add the OS, or create new rules. For instructions on using MDM with iOS 10, and other compatibility questions, refer to the Product Advisory: Good Mobile Control (GMC) Compatibility With iOS 10.

• Open issues resolved



Fixes to GMC login issues causing hanging on the login page. GMC login

FIRST-11873

Problems resetting device passwords from GMC. Password reset


Mandatory upgrade of older versions of Good For Enterprise Good Mobile Messaging servers to support SHA-256 Signed Certificates

There is an industry-wide initiative to deprecate the use of SHA-1 for signing digital certificates, and replacing existing SHA-1 signed certificates with certificates that are signed using SHA-256. The industry goal is to replace SHA-1 with SHA-256 by the end of 2016. Many companies and products have already started this migration. BlackBerry uses SHA-1 signed certificates in the Good For Enterprise Network Operations Center (NOC) to provide authentication to the various products that connect to the NOC. The current SHA-1 commercial certificate, issued by Thawte, expires in a few months, and it is no longer possible to renew SHA-1 certificates. BlackBerry will be updating that certificate to one signed using SHA-256. This will require existing customers to update the root certificate (stored in their Good servers) used to validate the NOC certificate.

http://goodpkb.force.com/PublicKnowledgeBase/articles/Answer/22450/?q=product+advisory+ios+10&l=en_US&fs=Search&pn=1

5


Customer Action

In order to prevent any service related issues, it is mandatory that all customers install the new root certificate in Good Mobile Messaging server Exchange and Domino by September 1st, 2016.

No action is needed for the Good Mobile Control (GMC) Console.

To assist you in installing the proper root certificate, you can either update the Good Mobile Messaging servers or add the root certificate to the server certificate store. Failure to install the proper root certificate will result in a failure to authenticate when attempting to connect to the NOC. Therefore, taking action is mandatory to avoid any service interruption.

Instructions

Option 1: Server Update

IMPORTANT: Reference the following KB Article for the appropriate steps to upgrade your Good Mobile Messaging or Good Mobile Control(s) - KB5954

Upgrading to the following GMM servers will automatically install the new root certificate.

For best practices, it is recommended that you also upgrade your Good Mobile Control Server to the latest Generally Available version located here. The GMC should always be upgraded before the GMM server.

Here are the links to the GMM server builds and upgrade instructions:

Good Mobile Messaging Server Exchange - MAPI

Software Download – v7.2.3.15

Upgrade Instructions

Good Mobile Messaging Server Exchange - EWS SQL/BDB

Software Download – v8.3.2.10


Good Mobile Messaging Server Domino

Software Download – v8.1.6.27 32 bit

Software Download – v8.1.6.27 64bit


Option 2: Adding the Root Certificate to the Certificate Store

For customers who cannot update their servers by the affected date, the certificate can be installed manually, as described below. Step 1: Make a backup of the Good Technology\Good Messaging Server\etc\ssl folder.

Step 2: Stop the Good Mobile Messaging service.

Step 3: Extract the two files from the cacerts_gfe.zip file into the C:\Program Files (x86)\Good Technology\Good Messaging Server\etc\ssl directory.

Cacerts_gfe.zip can be found here.

Step 4: Start the Good Mobile Messaging service. Step 5: Log into the GMC and verify that you are connecting to the NOC.

https://goodcustomerportal.force.com/GoodSupport/articles/Answer/5954

https://community.good.com/community/administrators-home/product-resources/good-for-enterprise

ftp://goodcust:[email protected]/HF/GMMS/MAPI/GMMServerEnterprise-7.2.3.15.zip

https://media.good.com/documents/upgrade_exchange_MAPI.pdf

ftp://goodcust:[email protected]/HF/GMMS/EWS/GMMServerEnterprise-8.3.2.10.zip

https://media.good.com/documents/upgrade_exchange_EWS_SQL.pdf

ftp://goodcust:[email protected]/HF/GMMS/Domino/GMMServerEnterprise-8.1.6.27_x32.zip

ftp://goodcust:[email protected]/HF/GMMS/Domino/GMMServerEnterprise-8.1.6.27_x64.zip

https://media.good.com/documents/upgrade_domino.pdf

ftp://goodcust:[email protected]/cacerts_gfe.zip

6




Fixes for standby installer and GMMFailover tool. Installer

Good Mobile Control Server Version 2.7.2.1059 (Hot Fix) (04/18/16)

New In This Release

• Java updated to 1.8.0.74 • Support for SQL Server 2012, 2014 • Ability to initiate password reset for Android devices from the GMC Handhelds tab • Open issues resolved

Good Mobile Messaging Server Version 8.3.2.7 (Service Release) (03/29/16)

New in This Release

• Handheld cache corruption fix • Internal project defects • Updated OpenSSL library • Disabled use of SSLv2/v3 and TLS 1.0 • Certify Exchange 2016 • Open Issues resolved

The fixes in this release have been developed to address urgent specific issues within customers’ environments.


Tracker Issue Component GMMSO-1754

EWS now fetches the OOO notification sent from Exchange server rather than sending calls every 15 mins.

Mail

GMMSO-1877

GLS services took longer time to stop and gave an error saying services could not be stopped.

NOC

GMMSO-1992

OpenSSL upgraded to latest version. OpenSSL

GMMSO-1993

HHCACHE database improvements. Cache

GMMSO-1994

Calendar causing server to timebomb. Calendar

GMMSO-1996

Access logs can grow to a very large size (GB) prior to being rotated.

Logging

GMMSO-2016

GMMS server logs incorrectly, logging sslv2/3 protocol instead of TLSv.

Logging

GMMSO-2020

Not able to save poison messages; poison logic not functional. Email

GMMSO-2021

[GFE iOS client] Synchronization failure. Synchronization

GMMSO-2027

Recurring Calendar doubled on client after generating from device. Calendar

GMMSEXC- By default, all EnterpriseVault classes emails now ignored. Email

7


1325 FIRST-8699 Users constantly disconnecting due to ErrorInvalidSyncStateData. Usability FIRST-9019 Email sync failure. Email FIRST-9257 Use of insecure cypher. Security FIRST-9292 Notification delays; email arriving in groups; email stops

completely. Notifications

FIRST-9457 Hidden folders visible in GMM Clients. Email FIRST-9942 Unable to failover EWS GMM server. Failover FIRST-10977

GMM Server service crashes and does not restart. GMM service

FIRST-11102

Unable to activate and send/receive mails. Email

FIRST-11207

“GoodLinkServer Exchange Messaging\Number of paused users” shows an unrealistic number of devices.

Perfmon


New in This Release

The hot fixes in this release have been developed to address urgent specific issues within customers’ environments.


Component Issue Tracker Calendar Time zone fix for Russian Standard Time. FIRST-

10415 Email Fix for poison messages on EWS and remove autodiscover on

non-EWS related Exceptions. FIRST-10220


New In This Release

• Windows 10 Mobile support • Open issues resolved.

Issues Resolved – GMC

Component Issue Tracker User Search Unable to add users because lookup failed with

"HRESULT=0x8007203a: The server is not operational." FIRST-9868

Add Handhelds

Incorrect results displayed on Handhelds tab. FIRST-11211

Good Mobile Control Server Version 2.7.0.1040 (Service Release) (02/08/16)

New In This Release

• Hardware compliance: Compliance by manufacturer of device model (Android only) • Hardware compliance: Compliance by build number of device (Android device) • Support for proxy in Office 365 environments • Replacement of SHA1 with SHA256 certificates

8


• Added Flow control status to Handheld reports • Display Deleted Domino users in Handhelds report • Upgrade to Tomcat 8


Component Issue Tracker Roles Manage Policies right gives “Manage Certificates” right to user as

well. GMC-4489

Compliance Can't import hardware compliance rule for ios.

GMC-4473 UI Policy imported without build numbers but model is "highlighted"

to indicate some child builds are checked. GMC-4478

UI UI is broken on IOS configuration popups.

GMC-4470 Compliance Invalid checkbox state after saving compliance and coming back

if manufacturer contains @. GMC-4468

UI UI not cleared after canceling and returning to compliance popup.

GMC-4464 Compliance Cannot save compliance rule after Refresh button is used.

GMC-4460 UI GMC is crashing on policies page.

GMC-4456 Reports Stats report exported via CLI & webservice doesn't contain “User

Deleted” column. GMC-4447

Compliance Can't create compliance rule.

GMC-4442 Reports “User Deleted” column missing from statistics report.

GMC-4437 UI Disallow policy without build number selected if build verification

is checked. GMC-4434

UI Empty build number is displayed on UI.

GMC-4433 UI Build numbers are not clearly separated on Hardware Models

page. GMC-4432

XML manufacturer.xml handling is not implemented.

GMC-4431 UI Missing “ID” attribute of the hardware-tree web element.

GMC-4428 UI Hardwares.xml list is not being refreshed if page is refreshed.

GMC-4427 Import Import should fail if importing model nonexistent in destination

GMC.

GMC-4426

Compliance Cannot save Policy with Compliance Rule and special characters in build name.

GMC-4424

UI Duplicate entries on Hardware Models list in Settings.

GMC-4419 XML Custom name from hardwares1.xml is being overwritten

by name from hardwares.xml.

GMC-4418

UI Hardware Models page crashes upon clicking Refresh.

GMC-4417 UI Duplicate model entry placed in Others section.

GMC-4416 UI Manufacturers list is not sorted alphabetically.

GMC-4412 Templates Email-templates page crashes due to JS/CSS resources missing.

GMC-4405 UI TouchID icons are visible on other GFE authentication pages

where there is no Touch Id option.

GMC-4398

Import “default email template not allowed to be edited“ when importing policy with Good Priority Access template.

GMC-4387

Templates Messaging template is overwritten but imported policy doesn’t contain template.

GMC-4385

Upgrade Upgrade fails.

GMC-4383

9


UI Unimplemented or unreasonable conversion requested.

GMC-4316 VPN VPN type can be selected as None.

GMC-4231 UI Single-row subquery returns more than one row.

GMC-4224 Downgrade Authentication Delegate with password enabled, Downgrade

GM, password section should be enabled but is not.

GMC-3984

config.props Export HH file incorrect after add 'setsystem.handheldExport.isUnifiedHeader true' in config.props file

GMC-3968

VPN “Send All Traffic” of VPN can't sync to client.

GMC-3930 Auth Delegate

Auth delegate with smime, then downgrade.

GMC-3883

UI Wrong state for device: still shows provisioned status after device wipe.

FIRST-5579

VPP Users sometimes see a message that a VPP redemption code has already been used.

FIRST-7647

Search GMC search criteria and results are different for adding handhelds vs adding role members.

FIRST-10253

Policies iOS policies missing WLAN and Exchange account settings. FIRST-10254 VPP Cannot upload VPP spreadsheets for several apps. FIRST-10332 MDM MoveHandheld does not move MDM-only devices. FIRST-10462 Roles After adding an AD group to a GMC role, after about 15 minutes

the name becomes blank. FIRST-10731

UI Application icons do not appear in console. FIRST-10769

Open Issues - GMC

Component Issue Tracker UI VPP distributed number not updated correctly in

Settings/VPP when distributing app to two handhelds using the same email.

GMC-4507


New In This Release

• Policy import/export improvements • Support for iOS 9 MDM device restrictions (non-supervised) • Policy setting for allowing Apple Watch* • Web services API enhancement for exportHandheldStats to return handheld status • Upgrade to Java 8 libraries** • iOS 9 compatibility • Android M compatibility • Apache Tomcat upgraded to version 6.0.43 • Support for iOS 8 + MDM Restrictions - Apple Watch Wrist Detection, Book Backup and

Book MetaData Sync

* Notifications displayed on a paired iPhone will also be displayed on the Apple Watch. The user will not be able to use the Good for Enterprise Apple Watch app without the feature being enabled on the GFE policy. GFE does not use a secure container to secure storage or communication of data between the mobile device and the watch. By default, the GFE Apple Watch policy is off.

10


** Note: GFE command-line utilities now require Java 8. The Java upgrade will overwrite existing Java files and folders; the cert store will be overwritten with default certs. Back up any SSL certs before upgrading to this version; add these certs again after the upgrade is complete.


Component Issue Tracker Custom Apps

Some custom-application iOS .ipa archives contain PNG icon files that GMC is not able to read.

FIRST-7275

UI Two types of servers (e.g., GMM and GMX) being present can cause problems with retrieving handheld statuses.

FIRST-8564

API After updating Cisco ISE MDM from 1.2.1 to 1.3 there are internal errors while trying to communicate with the GMC.

FIRST-8761

GFE/GC Using the auto-sync option in GMC to send user information to Good Control works, but gives incorrect user information to Good Control.

FIRST-9004

UI GMC 2.6.0.801 occasionally displays the Handhelds page with no handhelds.

FIRST-9468

UI GMC 2.6.2.872 displays illegal parameter when selecting "Connectivity Verification" filter.

FIRST-9472

UI Kerberos-based Single Sign-On (SSO) displays all timestamps for GMMs in the UTC time zone.

FIRST-9843

Open Issues - GMC

Component Issue Tracker SSL/TLS Update SSL/TLS Cipher Suite support to maintain

compatibility with Firefox and Chrome browsers. Workaround: If admin encounters a GMMS -> GMC connectivity problem because of this change, add the following to GMC config.props and restart GMC: ws.ciphers TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA

GMC-4291

Policy Import/Export

When login settings are set to "Kerberos-based Single Sign-On (SSO)" and "Web-based login as a secondary option" is disallowed in GMC, login to GMC via Internet Explorer and Mozilla Firefox is not supported. Login using Google Chrome is supported.

GMC-4324

Utilities Note that GFE command-line utilities now require Java 8. GMC-4332 Authentication Delegation

In Settings/Authentication Delegates, when adding an AD, if a script is entered in the description field, no AD can subsequently be edited.

GMC-4340

GMC/GC Migration

In some cases, automatic import of users into Good Control server may be enabled on the GMC Settings/Enterprise Server page but display as disabled on the Home page. Workaround: disable and re-enable automatic import on the Settings page.

GMC-4374

11



If a user exports a policy with Messaging settings but no Messaging template, exports the policy, then creates a Messaging template in a GMC and imports the exported policy, the new template will be overwritten with the exported settings and applied to policies in the current GMC, even though the exported policy did not use a template.

GMC-4385


If a new policy is created with the Provisioning “Good Priority Access” template selected in the “Reminder Email Template” field, saved, and exported, then an import to another GMC with the same policy name will fail with the error “'Default email template not allowed to be edited.”

GMC-4387


If “'Allow Siri dictation in Good for Enterprise for iOS” is set to the default (enabled/checked in previous GMC versions) in a policy or template, then exported, then imported to the current version of GMC, the setting will be changed to disabled/unchecked, the new default.

GMC-4390


New in This Release



Component Issue Tracker Email User receives a new mail notification, click on the notification, and

are taken to the GFE inbox where no new email exists. FIRST-10220


New in This Release



Component Issue Tracker Installer Installer text update. GMMSO-

1968 Installer Installer fix for blank pop-up issue if wrong credentials are entered

containing a space. GMMSO-1970

Failover Fix for connect error in GMM when GMC is failed over. GMMSO-1973

S/MIME Do not log proxy auth for S/MIME proxy. GMMSO-1975

Failover Fix for issue when failover partner was not set during SQL mirroring.

GMMSO-1984

GAL Add support for EWS S/MIME GAL lookups (OFFICE 365). FIRST-9095

Cache Fix issue when GMM experienced cache corruption, requiring reprovisioning of some users (account not found).

FIRST-9165

12


Exchange Automatically restart the GMM if Exchange 502 errors persists in environment.

FIRST-9395

Email Fix for folder hierarchy sync problems on Windows Phones. FIRST-9444

Email Include mailbox version in grouping information (EWS). FIRST-9620

Exchange Automatically restart the GMMS if Exchange System.InvalidOperationException persists in environment.

FIRST-9922


New In This Release

• Support for Windows 10

Note: If GMC is downgraded from this release with active Windows 10 devices being managed on it, any unexpected behavior is not supported.

Open Issues - GMC

Component Issue Tracker GMC Filtering by platform doesn't work after sending service

notification GMC-4123

GMC Downgrading to the previous version of GMC retains iOS MDM policy restrictions set up in this version (such as not allowing enterprise book notes and highlights, backing up enterprise books, and Apple Watch restrictions).

GMC-4239

GMC Windows 8 &10 devices not shown when displaying list of all devices in compliance via dashboard.

GMC-4277

GMC Update SSL/TLS Cipher Suite support to maintain compatibility with Firefox and Chrome browsers.

GMC-4291

GMC Wrong tooltips for Windows Phone in file handling section GMC-4303 GMC Windows 8 and Windows 10 platform icons are missing in

GMC Self Service. GMC-4310


New in This Release



Component Issue Tracker GMC Upgrading to v2.6.2.872 will fail if any network issues are

encountered while connecting to the Good Operations Center NOC. Prior to upgrade, any rows returned to the GMC SQL database query “SELECT * FROM dbo.orca_actions” will cause this failure.

GMC-4164 FIRST-9383


• Support for TouchID authentication with GFE [iOS8]*

13


• Support for use of SMIME as a GD service by GFE* • Enables Authentication Delegation for GFE iOS** • Enables Custom Keyboard policy restriction for GFE iOS* • GMC Support for NOC changes related to user email name change • Enables disallow of Windows Phone 7 devices

* Requires GFE iOS client version 3.0.2 ** Requires GFE iOS client version 3.0.2 or GFE Android client version 3.0.0


Component Issue Tracker MDM Profile Under certain circumstances, users are prompted to install new

MDM profile after disabling a few settings. FIRST-6392

Export Feature

When managing handhelds for all GMMs, exporting entire dataset fails while sorting by phone number.

FIRST-6749

Password Reset

Web service GMC Password Reset calls fails. FIRST-7428

WiFi Wifi settings via MDM profile not getting pushed to the device via policy.

FIRST-7746

Error Handling

Better error handling for GMC policy exceptions, a rare scenario that can cause policies to miss data.

FIRST-7902

Compliance Stats

Inaccurate compliance status displayed. FIRST-7958

GMC Portal GMC web-portal displays incorrect time under Message Statistics. FIRST-8162

Web Services

Handheld ID for some device models not available. FIRST-8286

Roles Users in the custom Help Desk role can't access the Handhelds page.

FIRST-8445

Custom APK Fail to upload custom APK in GMC. FIRST-8549

Open Issues - GMC

Component Issue Tracker GMC IOS MDM Profile \ Activesync options - Username and

domain are not prompted on handset. GMC-3785

Authentication After correcting an authentication delegate’s app id in GMC, Client authentication may not function correctly.

GMC-3908

GMC A downgrade from 2.6.5.2319 to 2.5.3.742 can't export delegated auth. policy with SMIME enabled, soft token and from provider radio buttons marked.

GMC-4042

GMC The “Compliance Rule ErrorMsg” column's value is empty for Android devices that broke a compliance rule.

GMC-4142

GMC [iOS] Profile can't install on device if Single Sign On (SSO) has been added in the iOS config policy and “Email Address” has been selected as the Kerberos Principal Name.

GMC-4146

GMC Upgrading to v2.6.2.872 will fail if any network issues are encountered while connecting to the Good Operations Center NOC. Prior to upgrade, any rows returned to the GMC SQL database query “SELECT *

GMC-4164 FIRST-9383

https://jira.corp.good.com/browse/GMC-4042



14


FROM dbo.orca_actions” will cause this failure. Corrected by Hot Fix 2.6.2.888.

GMC Windows 8 and 10 devices are not displayed on the GMC dashboard under “Devices in Compliance” on the Home tab.

GMC-4277


New in This Release



Component Issue Tracker User Connection

Fix for users being disconnected due to ErrorInvalidSyncdata. FIRST-8369 FIRST-8669

Move User Fix for GMMS restart caused by moving user who is downloading items prior to move completion.

FIRST-8774

Logging Fix for no EWSSVCs logs being retained if maxsizefile is set. FIRST-9003

Logging Logging enhancement for large bad lock. GMMSEXC-1390

Email Set X-Anchormailbox during Autodiscover GMMSO-1979


New in This Release

This release resolves the issues listed below. It also includes the fixes for those issues resolved in previous hotfix releases, as documented in the previous hotfix sections of this document.

Disabling SSL V3 for GMM

GMM server supports only SSLv3 and TLSv1.0 for GMM-to-GMM connections. GMM server also supports TLSv1.1 and TLSv1.2 for GMM-to-GMC/NOC connections. By default GMM uses SSLv3 to communicate with other GMM servers. This release supports the administrator’s ability to disable the SSLv3 protocol by adding a registry key. This registry key forces the connections to use TLSv1.0 instead of SSLv3. Ensure that all GMM servers are upgraded to this version before disabling SSLv3. Failure to do so will disrupt move-user functionality between GMM servers.

Registry Key Reference: GMMSDOM-2192: Security Use: Disables SSL V3.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\GoodLinkServer\parameters\ soap

"TLS1Only" = 0 By Default the registry is OFF Enable the registry for the fix (Default set to 0. To enable, change to 1.)

15


Issues Resolved - GMM

Component Issue Tracker

Event Logging

Added missing Event IDs for some EWS/SQL events and adjusted event log severity level.

GMMSO-1517

GMMS HA GMMFailover tool should exit if it is configured as BDB. GMMSO-1915

SMTP Correct issues caused by an SMTP name change. GMMSO-1921 GMMSO-1924

SMIME Signed email created from an SMIME client displays as valid with exception in the Sent Items folder.

GMMSO-1922

Conversation History

After upgrading to 8.3, v8.3 GMM not displaying the Conversation History folder in the folder list.

GMMSO-1929

Attachments 0 byte size attachments cannot be downloaded. GMMSO-1933

Email Add ability for iOS devices to sync email at will by performing “pull to refresh.”

GMMSO-1936

Attachments Unable to display embedded opaque signed SMIME emails body.

GMMSO-1937

Calendar Update to a recurring meeting request by a delegate does not result in a sync to invitees.

GMMSO-1940

Migration During v8.0 GMM user migration, deleted records marked as "Fake EWS ID" in v8.0 BDB database are being imported to SQL database.

GMMSO-1941

Database Add ODBC database interface support and pass all ODBC settings to the client driver (MultiSubnetFailover flag support, etc.)

GMMSO-1948

Database The Contact Notes field displayed as raw HTML when created by Outlook.

GMMSO-1954

Sync Add FolderSnapshot_SyncType index for GdUserContext* tables for SQL performance improvement.

GMMSO-1956

GMMS HA The run command must be exectured more than once, in some cases, to successfully cause Failover.

GMMSO-1957

GAL Lookups Provide GAL lookup support when Exchange 2010 server version is less than SP2.

FIRST-7634

Sync Enhancement to initial sync. FIRST-7805

16


Database Allow shortname or FQDN when specifying failover database partner.

FIRST-7975

Services Fix loop that could lead to large access file creation, resulting in GMM not able to start

FIRST-7978

Notification Makes push client connection registry configurable. FIRST-8081

Database Corrupt database for some users resulting in message flow stopping. Only recovery is to reprovision. Fix is to skip syncing of invalid columns (enabled via registry).

FIRST-8369

OOO Fix issue that was clearing Out of Office text when enabled from handheld.

FIRST-8446

Move user Fix issue that caused failed moves for user migrated from MAPI to EWS then moved to another EWS server.

FIRST-8496

Calendar Under special circumstances, GMM crashes while processing recurring calendar events.

FIRST-8619


New in This Release



Component Issue Tracker Web Services

Fix failure when trying to send a device password reset through web services.

FIRST-7428

Email Fix corruption of policy that could result in client's receiving error "Opening attachments has been blocked by IT."

FIRST-7902

Time Zone Fix time issue related to new Russian time zone change. FIRST-8162

Web Services

Fix issue related to Handheld ID not being available for some models when using webs ervices.

FIRST-8286

Roles Fix custom role issue when trying to access handhelds page FIRST-8445




Component Issue Tracker Migration from MAPI

Fix for users stuck on starting services after move from MAPI to EWS due to timing issues.

FIRST-8512

17



New in This Release

• Password authentication as secondary option with Delegated Authentication • Performance improvement for Export Stats

Issues Resolved - GMC

Component Issue Tracker GMC Code optimization to help query GMM/NOC connectivity

status under GMC. FIRST-7753

GMC Easy Activation fails if there is a change in the SMTP address for an existing user.

FIRST-8300

GMC Export Statistics performance fix. GMC-3920 GMC-3967 GMC-3973

Open Issues - GMC

Component Issue Tracker GMC Importing a GMC 2.6.1 policy set into GMC 2.5.x

causes user errors without a warning such as “Unsupported functions will keep default.”

GMC-3983

GMC When downgrading from build 818 to 723, GMC policy sets with “Password Protected” should have “Password Authentication” enabled.

GMC-3984

GMC Export Statistics may not export stats for a device if the GMM serving it is down and setsystem.gmm.refresh.border_amount

is set in the props file.

GMC-3995

GMC When downgrading from build 818 to 801, the GMC policy Password Authentication checkboxes should remain unchecked.

GMC-3996




Component Issue Tracker Handhelds Removed hard-coded max limitation for number of handhelds

and add override to change maximum supported handhelds according to customer software/hardware.

FIRST-8089

Logging Lowered the IPC remote call error logging from Event logger to Debug log.

FIRST-8418

Database Optimize migration/and or moves from BDB server to SQL. FIRST-8128 GMMSO-1941

18





Component Issue Tracker Email Fix to not load email body when it is said to be sync header

only. GMMSO-1905

Sync After change of SMTP mail address, a resync can cause all data to be lost on client.

GMMSO-1921

Calendar Newly add invitee disappears when re-opening the meeting after editing the invitees on device.

GMMSO-1924

Folders After upgrading to 8.3 from 8.2, client not displaying the Conversation History folder in the folder list.

GMMSO-1929

Failover Failover command for database string is case sensitive, fix to make it case insensitive.

GMMSO-1934

S/MIME Implement size restrictions on S/MIME emails (25 mb default). FIRST-7761

Email Fix to download attachments when filename contains quotations.

FIRST-7871

S/MIME Improve error handling if GMMS receives LDAP_Unavailable during LDAP certificate lookups.

FIRST-7876

Email Long subjects containing double-byte characters show as No Subject in IOS.

FIRST-7915

UI Tasks issue - Grouping view in Outlook differs if created on client vs Outlook.

FIRST-8047

S/MIME Cannot send S/MIME messages because we don't support matching multiple RFC822 names from the cert.

FIRST-8050

Stats Client messaging statistics are reset when service is restarted. FIRST-8157

Good Mobile Control Server Version 2.6.0.801 (Feature Release) (12/16/14)

New in This Release

• Support for 3rd party Auth Delegates • Support auto-import of users from GMC to GC via Easy Activation • Support Windows Pro 8.1 GFE clients • iOS 8 MDM - Support for new device restrictions • Support Easy Activation after email address change* * Requires GFE iOS Client version 2.7.0 or Android Client version 2.7.1 for support of Easy Activation. Requires Good Control Server v1.8.42 or higher and GD SDK iOS 1.9.4340 and Android 1.9.1162 or higher for support of GD app interoperability.

Note: For Windows devices only, with GMC release 2.6.0, ”Do not install on this platform” is the default setting for all new policies. When GMC is updated to release 2.6.0, any previous settings for “Version to install” are retained.


Component Issue Tracker GMC If a user has the View-only Administrator role and also the Self FIRST-

19


Service role, they can see the OTA PIN of other users. 6308 GMC Disclaimer Rule is not displayed on Android Good Client. FIRST-

6827 GMC Unable to upgrade from Good Mobile Control v2.3.x. FIRST-

6924 GMC Users from Bidirectional external trust forest not able to

connect to Self Service portal. FIRST-7351

GMC Policy import from source GMC to destination GMC with different time zone results not working.

FIRST-7385

GMC Unable to log into self-service portal if double-byte characters are present.

FIRST-7473

GMC Move optimizations if moving from 2.5.1.683 to higher versions.

FIRST-7485

GMC Customer app (ipa) does not show the correct app icon when opening the webstore or when uploading to GMC (missing image).

FIRST-7513

GMC Welcome Email Support for Japanese Character-set. FIRST-7607

GMC Handheld Page fix where list of devices can disappear randomly.

FIRST-7723

GMC SSO login will not work if trying to use the configured browser from the localhost machine itself.

GMC-1175

GMC With SSL set to On for all LDAP connections between GMC and AD, all domains remain visible but all search operations against unsecure domains will fail.

GMC-2963

GMC Unicode characters are not supported in device names. GMC-3273 GMC Cross-GMC user move will cause the destination GMC to

send irrelevant information to all GMMs connected. This may cause an abundant number of GMM transaction logs.

GMC-3283

GMC [Android] If the GMA policy setting “Allow user to persist enterprise credentials in Good secure container for website and web proxy access” is enabled in GMC v2.5 and GMC is later downgraded to GMC v2.4, the user will continue to see the “Remember me” feature enabled. Workaround: to disable this feature on the device, make any change to the policy in GMC v2.4 and save it. (Store Credentials are enabled by default when provisioning a 2.6 Client in 2.4 environment.)

GMC-3307

GMC Added configuration option to enable/disable SSL protocol versions to address vulnerabilities such as POODLE (https://community.good.com/docs/DOC-3827).

GMC-3841

GMC Custom apps display bundle name vs display name. GMC-3859 GMC If a GC database is down, the status indicator on the Settings

> Enterprise Servers page remains green. GMC-3905

GMC

Unchecking MDM policy settings “Query of device information,” “Query of network information,” “Restriction-related queries,” “Security-related queries” may cause Compliance Manager blacklist/whitelist device checks to fail.

MDM-94

Open Issues - GMC

Component Issue Tracker GMC "OutOfMemoryError" while executing iOSMDM test

with 36000 devices. GMC-3035

GMC Self Service in Office 365 cloud environments is not GMC-3246



https://community.good.com/docs/DOC-3827

20


supported. GMC [Domino] Unable to add Unicode users to roles when

there is no mailbox, using Domino Dir.Auth. GMC-3298

GMC Store Credentials are enabled by default when provisioning a 2.6 Client in 2.4 environment.

GMC-3307

GMC No re-sync and cannot receive email after moving user from GMM 7.2 to 8.1, then to 8.2, while handheld is not connected.

GMC-3367

GMC Applications refresh remains pending for bMdm Android.

GMC-3403

GMC Upgrading GMC from 2.5 to 2.6 with 8.3 GMM present, some new database fields for EWS/SQL GMM and all new database fields for EWS/BDB are not be displayed on Server info page.

GMC-3687

GMC Email address does not update in OTA email when resent from GMC

GMC-3797

GMC When moving Windows 8 devices to a new GMC, the source GMC completed-moves log does not display successfully completed actions.

GMC-3829

GMC If the GMC has a policy that is >8k in size and the “Enable automatic import of users” into Good Control server is enabled on the GMC side, then during the Easy Activation process, there is a Policy Retrieval error as the retrieval fails.

GMC-3837

GMC When an Easy Activation process times out on a device, the GMC handheld log may indicate success.

GMC-3839

GMC Old email address shown in compliance email notification.

GMC-3845

GMC If an admin edits a user’s SMTP address in Exchange, rather than adding a new address for the user in Exchange, GFE reset cannot finish re-sync. GFE cannot be used in this state.

GMC-3852

GMC Easy activation fails after changing a user’s email address.

GMC-3858

GMC Policies dynamically created in Good Control as part of the GMC automatic-import feature may be named incorrectly.

GMC-3886

GMC If the GC certificate is missing on the GMC host machine, you will be unable to remove the GC on the GMC Settings > Enterprise Servers page. Workaround: Use Replace on the Enterprise Server page for the GC and replace the GC with itself or another.

GMC-3898

GMC If a GC database is down, the status indicator on the Settings > Enterprise Servers page remains green.

GMC-3905

GMC Scheduled reports of the same frequency type are send at once even if date requirement is not met.

GMC-3912

GMC An SMTP-changed user whose OTA PIN has expired can still provision their device using old mail with expired PIN, but not using a newly generated pin.

GMC-3917

GMC If attempting to set up Easy Activation for a suspended device, the operation will fail, but no failure log will be created in GMC Settings and the GC/GMC/Client status displays as normal.

GMC-3921



















21


GMC Once an Application Management policy template is assigned to a policy, the policy cannot be reverted to No Template (custom settings). The workaround is to create a new, empty template and assign it to the policy.

GMC-3923

GMC If authentication delegation is set for the client and subsequently changed to none, a password continues to be required.

GFEANDROID-5977

Good Mobile Messaging Server 8.3.0.12 (Feature Release) (11/05/14)

New in This Release

• EWS SQL and EWS BDB versions are now combined in a single build. • Support for Exchange Tasks in GMM BDB version (support for Tasks in GMM SQL version

was added in v8.1). • S/MIME enhanced so that LDAP lookups will check for multiple entries.

If first LDAP entry does not contain a valid certificate, subsequent entries will be searched until a valid certificate is found.

• Support for the new Client feature for enhanced handling of Calendar invites with large number of invitees (requires GFE iOS Client 2.7.0 or higher; Android Client to be released).

• Updates the digital certificate used to authenticate GMM to GMC. • Issues resolved.


Component Issue Tracker Attachment Attachment fails to download with malformed EWS XML

response. FIRST-6895

Move After user move from GMM to another GMM, consistency reports show invalid results.

FIRST-6858

GAL lookup Address book recipients cache does not work FIRST-6631

Open Issues - GMM

Component Issue Tracker Installer If a fresh GMM installation is canceled after the GMC

registration screen has been reached, and the installer is run again, incorrect screens will be displayed and the install attempt will fail. Workaround: after canceling an installation, delete or rename the registry key [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Good Technology\GoodLink Install Parameters] before attempting to install again.

GMMSO-1925

Calendar Unicode data displayed as garbage values (???) in invitee Calendar notes field when forwarding the meeting from remote user's device calendar

GMMSO-1834

Calendar Issues with different types of attachments (image, non image types) when 'Reply To All Attendees' and 'Reply/Reply All' from device calendars

GMMSO-1833

Calendar Issues displaying embedded issues in Reply/Reply All/Reply To All Attendees meeting mails

GMMSO-1830

22


Installer The upgrade information page does not display in some scenarios.

GMMSO-1813

Calendar Calendar Entries beyond 2038 are syncing to the device with incorrect date information. This happens to the mailboxes migrated from Domino to Exchange using BinaryTree tool.

GMMSO-1719

Calendar Calendar events are not synced to the device when accepted from Mac Outlook.

GMMSO-1461


New in This Release

• This release supports an increased policy-length restriction for policy messages. In previous versions of Good Mobile Control, compliance policy messages were restricted to 8k in size. This limit can break compliance policy checks for Android devices when the size of the policy is very large. This release removes that limit for Android devices. Policies up to 256K in size have been tested for Android devices. The GFE Android client 2.6.0 or higher is required. (GMC-3434)


Component Issue Tracker GMC Support for compliance policy messages larger than 8K

for Android devices. GMC-3434

GMC Delays pushing iOS configuration profile to end user. FIRST-6798 GMC All handhelds disappear temporarily from “Handheld”

Page on single handheld deletion. FIRST-7170

GMC Failure to upload the same app for different platforms under one policy

FIRST-7213

Open Issues - GMC

Component Issue Tracker GMC If the iOS configuration MDM profile is enabled by GMC

policy for an iOS user/device and that device uninstalls/reinstalls GFE without being removed from GMC, the user may be prompted again for profile installation.

GMC-3345

GMC Do not edit or remove a GFE user’s SMTP address in Exchange or Domino or GFE will not function on the user’s device. Instead, in such a case add a new address and make it primary.

GMC-3852


New in This Release

• Corrects network-failure problems that occur during new provisions.

Note: As of June 2014, ws.good.com/ws has been added for the web service call that was using good.com/ws. The following outbound network hostnames for Good Operations Center have been added: ws.good.com HTTPS 443 216.136.156.64/27.

23



Component Issue Tracker GMC Unable to sort by pin expiration date. FIRST-5867 GMC Command-line Export Stats tool stops after encountering

a corrupted user record. FIRST-6292

GMC iOS configuration policy section shows as pending. FIRST-6708 GMC GMC command-line tool fails with certain special

characters in the password. FIRST-6901

GMC When group is added to the self-service role in GMC, some users of the group are not able to log in to the Self Service portal.

FIRST-6986

GMC Large number of network failures during new provisions. FIRST-7246


New in This Release

This service release is a cumulative update that includes several hot fixes and other bug fixes along with an update to the OpenSSL library to address several security vulnerabilities found in OpenSSL. This includes fixes for the following vulnerabilities:

• ·SSL/TLS MITM vulnerability (CVE-2014-0224) • ·DTLS recursion flaw (CVE-2014-0221) • ·DTLS invalid fragment vulnerability (CVE-2014-0195) • ·Anonymous ECDH denial of service (CVE-2014-3470)

Note that GMM is not currently affected by these issues (not vulnerable), but the library is being updated to avoid potential problems in the future if the use of OpenSSL in GMM changes.


Component Issue Tracker Email Forwarding an email that has both attachments and embedded

images from an iOS device and choosing not to include the attachments causes the embedded images in the forwarded email to be dropped.

GMMSO-1157

Security SECURITY: OpenSSL CCS Injection Vulnerability (CVE-2014-0224) : SSL/TLS MITM vulnerability

GMMSO-1669

Sessions Adding checks to ensure that the app message is less than 8K before submitting to the session.

GMMSO-1466

Logging For security reason, logging full EWS SOAP messages are not allowed.

GMMSO-1423

Notifications GMMS may fail to subscribe notifications at startup. GMMSO-1340

Email, Sync GMMS shows wrong timestamp on email Inbox. GMMSO-1196

Email Emails are not syncing to Deleted Items folder when deleted from Outlook inbox.

GMMSO-870

Move Optimization improves the Move User operation. FIRST-6885 Email, Sync Email Sync Delay during initial sync. FIRST-6873

GMC Console freezes when user tries to update lookup server/device properties

FIRST-6804

Folder Sync Subfolders fail to sync when a large batch of folders are involved, FIRST-6762

24


exceeding the message payload threshold. Attachment Download

Attachment download fails when server is busy processing a large number of calendar exceptions.

FIRST-6761

Email User unable to send from iPad. Message going to Drafts folder. FIRST-6549 Email SMIME emails stuck in Outbox when data coverage is poor. FIRST-6437 Email Delivered email displays incorrect timestamp. FIRST-6359 Email Deleted items in Outlook are not reflected in Good for Enterprise

client. FIRST-6355

Attachment Download

Attachment Download Fail - Error Code 13. FIRST-6158

Attachment Download

Attachment Download Fail - Requires GMM Restart. FIRST-5472

Open Issues in Good Mobile Messaging Server

Component Issue Tracker Attachment (Android device)

Calendar view: On Android devices, when opening a zip file that contains a large number of files, the operation may stick at “Loading.”

GMMSO-1717


New in This Release

This release is a repackage of the GMM server with the newly released GMC v2.5.0.672. It also includes a fix to reduce verbosity of extended logging to enable more effective analysis of the application events.

Good Mobile Control Server Version 2.5.0.672 (Feature Release) (04/28/14)

New in This Release

Policy Import/Export Easy Activation Support (requires Android 2.4) Secure LDAP Connections (SSLv3/TLS1.x) between GMC and AD Scheduled Reports Compliance Alert Notifications Web Services APIs for User Self Service Actions 64-bit JVM Support Support for “SELinux Enforced” and “Verify apps” compliance rules (requires Android 2.4) Support for Cloud-based AD (O365)


Component Issue Tracker GMC

Moving a user to a different server immediately after that user performs an OTAP may result in a server crash and restart.

113611

GMC

The pages of unmanaged applications downloaded from Good are not localized. Users who select the “Visit Application Catalog” option on their device will find the list of available applications displayed in English.

110172 GMC-925

GMC

Errors will occur if the SQL Server JDBC driver is installed on the target machine for GMC installation. Workaround: The installer is probably looking into the wrong location to find sqljdbc_auth.dll.

110022 GMC-914

25


Try searching for sqljdbc_auth.dll on the machine and you will probably find one of the locations to be a system path such as C:\Windows\SysWOW64. Browse to the path and rename sqljdbc_auth.dll to sqljdbc_auth.Backup, and continue with the GMC installation.

GMC InstallShield threw errors when attempting to install MS SQL Native Client and CLI utilities.

109824 GMC-903

GMC

The quantity displayed of provisioned and unprovisioned devices on the Home page maybe be incorrect due to the presence of managed clientless devices.

109159 GMC-875

GMC Exporting all handhelds may run up to 20% slower. 107547 GMC

An unmanaged application will not push to the device after upgrade until the existing managed app policy is pushed or modifed to trigger the action. This can take up to 12 hours after the upgrade.

103764 GMC-582

GMC

A User Rejected/Cancel action on the device to install a managed app results in an incorrect Status/Action displayed in GMC.

101160 GMC-492

GMC

VPN configuration using a combination of IPSEC Shared Secret and Hybrid Authentication settings is not supported.

71520 GMC-3

GMC Deleting a trusted GMC throws error: "The remote GMC 'https://GFEQA3.GFEQA.qagood.com:19005/' was not verified.

GMC-1435

GMC Self Service: clicked Send Activation PIN and I got 2 welcome emails

GMC-1439

GMC Upgrading GMC from R6 SR1 to R8 trunk: failed to start due to DB upgrade scripts

GMC-1490

GMC Setup was NOT able to install Microsoft SQL Server Express.." error message occurred while installing GMC IS2012 v2.4.0.501 on Windows 2012 environment

GMC-1503

GMC Web Services API for role assignment fails for users outside of GMC Domain.

FIRST-5628

GMC Failing to send service notification alert for bulk users in GMC - Handhelds spread out in multiple pages within GMC.

FIRST-5733

GMC GMC fails to grant role to users with Turkish user_name FIRST-5880 GMC MDM Profiles fails to re-install after user manually removes it. FIRST-5953 GMC GMC failed to connect to SQL server under special circumstances.

Fix enables SQL AlwaysOn clustering. FIRST-5964

GMC Handheld ID missing for Export Statistics. FIRST-6044 GMC GMC CLI tool - Code optimization Fix. FIRST-6126 GMC Self Service Portal - Unlock Device fails. FIRST-6345 GMC One or more source GMM servers appear to be offline. Handheld

move operation for offline GMM servers will fail with: “Click OK to continue or Cancel to abort the action." However, the move is successful.

FIRST-6558

GMC

GMC version 1.3.1, with the default File Transfer policy and Send Attachments enabled, allows the previous Good iOS Client (1.9.5) and Android Client (1.7.5), as well as the current Android Client (1.8.0), to import files to Good from third-party applications, but does not allow the current Good iOS Client (1.9.6) to do so. The GMC must be upgraded to 1.3.3 or higher, with importing enabled, for iOS devices using the current Good Client to import files.

GMC

If you receive an “Illegal Key Size” error while importing an iOS MDM certificate into Good Mobile Control via Certificates > Upload Signed Certificate, refer to http://good.custhelp.com/app/answers/detail/a_id/741 for a

26


solution to the problem. You will need to install the Unlimited Strength JCE (jar files).

Open Issues - GMC


(GMA) Setting the correct address but incorrect port number on GMC for a proxy server causes an incorrect error messages on the Client using GMA, for https addresses.

95179

GMC Unchecking MDM policy settings “Query of device information,” “Query of network information,” “Restriction-related queries,” “Security-related queries” may cause Compliance Manager blacklist/whitelist device checks to fail.

103117

GMC After upgrading GMC to 2.3.0, when the GMA checkbox is disabled in Settings and enabled in the policy, the GMA icon does not show up on the device.

109757 GMC-897

GMC The status of a managed application is not displayed correctly if "Auto Uninstall" in unchecked.

110205

GMC SSO login will not work if trying to use the configured browser from the localhost machine itself.

GMC-1175

GMC IE Browser Timeout encounters a password failure when attempting to login again.

GMC-1207

GMC Upgrading GMC from 2.3.1.430 to 2.4.0.501 fails. GMC-1490

GMC With SSL set to On for all LDAP connections between GMC and AD, all domains remain visible but all search operations against unsecure domains will fail.

GMC-2963

GMC Support for 35k Handhelds requires heap size of 2GB or higher. GMC-3035

GMC Send service notification not functional. GMC-3257

GMC MDM Android - Applications refresh remains pending. GMC-3259

GMC Unicode characters are not supported in device names. GMC-3273

GMC GMC does not support exporting the compliance status for WP8 devices

GMC-3278

GMC Adding a Self-Service user on a non-primary domain will result with a "User could not be found" error message. GMC only supports adding HH on the Primary domain

GMC-3303

GMC [Android] If the GMA policy setting “Allow user to persist enterprise credentials in Good secure container for website and web proxy access” is enabled in GMC v2.5 and GMC is later downgraded to GMC v2.4, the user will continue to see the “Remember me” feature enabled. Workaround: to disable this feature on the device, make any change to the policy in GMC v2.4 and save it.

GMC-3307

GMC On a clean Windows2008 SP2 32-bit system, Windows PowerShell may be absent. In this case, the GMC installer will not install SQL Server Management Studio You will need to install Powershell and the Management Studio.

GMC-3376

GMC Policy names that include Unicode characters (Chinese/Japanese/Arabic) are not displayed correctly.

GMC-3387

27


GMC The handheld import/export functions are not supported for WP8.

-----

Good Mobile Control Server v2.4.2.610 (Service Release) (03/07/14)

In This Release

This service release addresses a security issue in the Good Mobile Control (GMC) Server that can result in updated compliance rules files not being pushed to the Good for Enterprise clients.Customers are strongly urged to update to this version.This issue was introduced in the 2.4.0 release, so any GMC server at this version or newer should be updated. (GMC-3194) Also in this release:

• iOS CloudKeyChainSync restrictions are available. • The following open issues have been resolved.


Component Issue Tracker GMC Improved the performance of the software export function. GMC-

2736 GMC Fixed the Server name to display ServerName in GMC, rather

than SerialNumber.ServerName. GMC-2776

GMC The same domain capabilities are now visible to the Web Service API as to the default SSP.

FIRST-5628

GMC Issue resolved with GMC upgrade that caused an Appcrash. FIRST- 5752

GMC Good Messaging Domino directory service auto-start issue resolved.

FIRST-5939

Good Mobile Messaging Server v8.0.3.31 (Service Release) (02/06/14)

In This Release

This release includes fixes for the following:

• Calendar functions resulting in possible missing events and/or sync problems • Email processing resulting in possible delayed email delivery, and sync issues between

Good for Enterprise client and users’ desktop system. • Server issues resulting in possible server or process restarts • Log file issues resulting in failed upload of log files • Installer issues


Component Issue Tracker GMM No users able to send or recieve email on

EE53422454.PMGMM01 : error 5662, 5669, 4614, 65538 FIRST-4822

GMM Misleading prompts on install/upgrade for Office 365 credential selection.

FIRST-5117

GMM Missing calendar updates. Validate item failed: Organizer not loaded.

FIRST-5300

GMM Messages sent from phone go to drafts folder in Outlook. FIRST-5338

28


GMM Malformed calendar data can cause EWSproc restart. FIRST-5382

GMM Customer unable to send to personal distribution list, receives 3 NDRs upon attempt.

FIRST-5387

GMM Users paused, stuck in initializing. FIRST-5467

GMM GMM can send but not receive messages. FIRST-5494

GMM Unanticipated system restart. FIRST-5510

GMM Email delay due to unnecessary subfolder processing. FIRST-5526

GMM Missing Calendar entries. FIRST-5614

GMM Delays seen after installing build 8.0.2.18. FIRST-5658

GMM Server restarts. FIRST-5687

GMM Users stuck in Paused for Exchange down. FIRST-5879

GMM Failed to connect to messaging server ''Users exchange server appears to be down or disabled.”

FIRST-5951

GMM User recently moved over to O365-Calendar is not syncing completely.

FIRST-6027

GMM iPhone not synching calendar, but synching email ok. No meetings synced and no meetings created in Good for Enterprise or O365.

FIRST-6064

GMM User not syncing calendar items. FIRST-6117

GMM StreamingConnectionManager leaked due to missing event-unsubscribe.

GMMSO-130

GMM Uploadlog failed to load some logs. GMMSO-367

GMM Email is saved to Draft directory when a meeting is accepted from device with "no response" option.

GMMSO-461

GMM Sync email delay caused by working on unsubscribed folders. GMMSO-475

GMM Slow batch GroupInformation causes email delay. GMMSO-495

GMM Multiple duplicate contact subfolders created when user moved from EWS-BDB to EWS-SQL.

GMMSO-840

GMM Hebrew support for send/reply/forward HTML emails needed. GMMSO-905

GMM Emails in subfolders are not syncing to device when the subfolder is subscribed.

GMMSO-932

GMM Truncated leading or tailing white spaces in PROXY & GMM registration Install-shield screens.

GMMSO-963

29



In This Release

This release includes new features and addresses customer-reported and known issues.

New in GMC Adds support for new iOS 7 MDM features:

• New Restrictions • Lock Device action enhancements • Single Sign-On • App Configuration • Extended Configurations

Issues Resolved – GMM/GMC

Component Issue Tracker GMC GMC event log descriptions not displaying in event viewer. FIRST-

4890 GMC Handheld reports for device type output text in format as seen on

NOC rather than user-friendly format. FIRST-5406

GMC GMC-to-GMC move user failed due to out-of-memory issue. FIRST-5523

GMC GMC load page fails after remote wipe. FIRST-5543

GMC GMC service crashes while running exportsoftware report. FIRST-5582

GMC GMC will not upload a different application file type with the same name.

FIRST-5604

GMC GMM server names truncated in GMC. FIRST-5660

GMC Issues with Kerberos SSO on GMC. FIRST-5692

GMC Unchecking MDM policy settings “Query of device information,” “Query of network information,” “Restriction-related queries,” “Security-related queries” may cause Compliance Manager blacklist/whitelist device checks to fail.

MDM-94

GMC Filled in column content for Title, Location, and Mail Server for Handheld Users report.

GMC-1524

Good Mobile Control Server v2.4.0.501 (Feature Release) (08/13/13)

In This Release

This release includes new features, and addresses customer-reported and known issues.

New in GMC • Support for moving users between GMCs • Ability to send service notifications/alerts * • Ability to view additional account details when searching for users and filtering for bulk

actions • Ability to use separate email template when regenerating PIN

30


• Auto-send reminders for pending activations • Improved role-based access control (expanded rights on the Roles tab) • Ability to reset Good for Enterprise on a device from the GMC (Over-The-Air

resynchronization) * • Ability for self-service users to reset Good for Enterprise client on a device (Over-The-Air

resynchronization) * • HTML-based welcome and regeneration emails • Kerberos-based Single Sign-on • Good Support guided access to server/client logs • Automated non-compliance actions when MDM profile is removed from iOS devices. • iOS MDM profile re-enrollment is no longer required when moving users between policy

sets • Automated removal of the MDM profile on the device (that is, removal of device

restrictions, configs (WiFi/VPN/EAS), and managed apps) when an iOS MDM-enabled device is removed (deleted) from GMC or the MDM policy checkbox is unchecked

• Good for Enterprise iOS App Catalog localization • Search, add, distribute apps in non-US Apple App Stores • Reset device password • Reset Good for Enterprise password * • Single-click action for regenerating or resending PIN • Ability to view activation PIN • Upgrade to JRE 7 (Good for Enterprise command-line utilities now require JRE 7) * Requires Good Mobile Messaging server v7.2.0.


Component Issue Tracker GMC A User Rejected/Cancel action on the device to install a managed

app results in an incorrect Status/Action displayed in GMC. 101160

GMC An unmanaged application will not push to the device after upgrade until the existing managed app policy is pushed or modifed to trigger the action. This can take up to 12 hours after the upgrade.

103764

GMC Exporting all handhelds may run up to 20% slower. 107547 GMC The quantity displayed of provisioned and unprovisioned devices

on the Home page maybe be incorrect due to the presence of managed clientless devices.

109159


109824

GMC Errors will occur if the SQL Server JDBC driver is installed on the target machine for GMC installation. Workaround: The installer is probably looking into the wrong location to find sqljdbc_auth.dll. Try searching for sqljdbc_auth.dll on the machine and you will probably find one of the locations to be a system path such as C:\Windows\SysWOW64. Browse to the path and rename sqljdbc_auth.dll to sqljdbc_auth.Backup, and continue with the GMC installation.

110022

GMC The pages of unmanaged applications downloaded from Good are not localized. Users who select the “Visit Application Catalog” option on their device will find the list of available applications displayed in English.

110172

GMC GMC Servers installed in 2009 – 2010 (versions >= 1.0.3.30, and <= 1.0.3.83) and then updated to 2.3.0.402, do not support Priority Access as currently configured. If you are using GMC 2.3.0.402

111739

31


and the Priority Access policy Client Type has been properly configured in GMC, but user devices receive an error during setup such as “The OTAP fails with an error: your account is not authorized to use this edition of Good for Enterprise,” you should contact your authorized service representative to rectify the problem.

GMC HTML welcome email will not be sent in an Exchange 2003 environment; text welcome email is sent fine. Workaround: In mixed environments, send HTML welcome email via Exchange 2007.

112673

GMC If you receive an “Illegal Key Size” error while importing an iOS MDM certificate into Good Mobile Control via Certificates > Upload Signed Certificate, refer to http://good.custhelp.com/app/answers/detail/a_id/741 for a solution to the problem. You will need to install the Unlimited Strength JCE (jar files)


This release includes security enhancements.




Component Issue Tracker Moving Users Fix for consistency issues after moving users. FIRST-

6858 GAL Lookups Fix for GAL lookup timeouts. IN 8.0.xx, IPC data does not

include the user’s mail address and GUID when doing GAL lookups. It causes the EWS process to use the GoodAdmin session to do the EWS call.

FIRST-8303

Email Attachment download enhancement. Device dropped the connection to GMM but GMM failed to detect that event. GMM did not receive any packets including FIN, RST, etc. The fix cleans up all the old resources and accepts the new connection.)

FIRST-8087

Email Removed the recipient size check on emails. Improved logging changes.

FIRST-8619


This release addresses customer-reported and other known issues.


Component Issue Tracker GMM [Office 365] Changing SMTP ADDRESS results in delay of email

delivery. FIRST-4942

http://good.custhelp.com/app/answers/detail/a_id/741

32


GMM Service restarts on GMM server unexpectedly. FIRST-4989

GMM Cannot sync deleted contacts on the handheld after upgrading GMM.

GMMSO-372

GMM When users reprovision, old Calendar reminders are not deleted.

GMMSO-388

GMM Rescheduled meeting not appearing in Good Calendar. TT114079 GMM [Office 365] Good for Enterprise sends reminders for original

meetings that have been canceled or rescheduled. TT114869

GMM [Office 365] Server restarts every 5-7 minutes. TT115386 GMM [Office 365] Users receiving Error 102 on the handheld. TT115651 GMM Secure browser exceptions fail to parse CIDR addresses or IP.

Exceptions works only with FQDN domain names. FIRST-4651


This release includes new features, and addresses customer-reported and other known issues.

• Prevent upgrade from MAPI GMMS • iOS push notification - separate email and calendar sound settings


Component Issue Tracker GMM Users stopped receiving emails even though the GMM services

were running 115242

GMM Move user failed and GMM crashed. 113611 GMM Primary SMTP address support change. 115729 GMM Zip-file attachment in message request is not downloaded on

Android device. 110956

GMM Emails moved from the Inbox to an unsubscribed folder are not displayed in that folder on the device until the user subscribes to that folder.

112213

GMM Although reading of signed S/MIME emails on mobile devices is supported, downloading of attachments for these emails sometimes fails due to inability to validate the S/MIME certificate.

113310

GMM Zip-file attachment in message request is not downloaded on Android device.

110956

GMM Emails moved from the Inbox to an unsubscribed folder are not displayed in that folder on the device until the user subscribes to that folder.

112213

GMM Although reading of signed S/MIME emails on mobile devices is supported, downloading of attachments for these emails sometimes fails due to inability to validate the S/MIME certificate.

113310

Good Mobile Control Server 2.3.0.402; Good Mobile Messaging Server Version 8.0.1.86 (Feature Release) (05/08/13)

In This Release

This release includes new features, and addresses customer-reported and known issues.

33


Note: Moving users between Good Mobile Messaging Server 8.0.1 and Good Mobile Messaging Server 7.x or lower is not supported. Good Mobile Messaging Server 7.x cannot be upgraded to 8.0.1. Good Mobile Messaging Server 8.0.1 requires Good Mobile Control Server 2.3.0. Refer to the Good for Enterprise Quick Installation Guide and Good for Enterprise Administrator’s Guide for information on pre-installation configuration tasks, system installation, user management, and product maintenance.

New in GMM • Support for Microsoft Exchange Online (Office 365) • Server enhancements in this release:

o Improved diagnostics and system logging, especially for data access layer o Encrypt and daily rotate EWS logs o Handle missing Exchange notifications; notification recovery

• Bug fixes

New in GMC • Set up GMC with new IS2012 installer • Ability to upload/distribute client-based certificates for GMA authentication • Prevue GE: Priority Access & General Access availability. Refer to the Prevue GE Priority

Access Planning Guide for information on using this new service. All note open issue 111739 below.

• GMA policy enhancements, to enable/disable: o Access to non-fully qualified domains o Default/native browser redirection o User ability to accept unsigned/expired certificates (iOS only)

• Ability to enable/disable Siri dictation via GMC policy • New attributes for GMC Handheld List View • HTML Email template: HTML-customizable activation • Client change for Cisco ISE: enable Device Auto-Quarantine feature for our customers • Support new attributes for GMC Reports • Support web based application catalog • Support for new attributes for GMC CLI "Export Statistics" • New Filters for GMC Handheld List View page • Summary page/screen for each policy now supports new edit links: MDM, SMIME, GMA,

etc • iOS 6 MDM restrictions now support request to include the "EAP-TLS" option for Wifi

profile in iOS Config

Supported Exchange Online Features In This Release Supported Operating System: Windows 2008 R2 x64 Third Party Pre-requisites: .NET 3.5 SP1 This release supports the following Good for Enterprise functionality:

• Two way Email Sync • Includes Signed Non-Encrypted Email. • Two way Contact Sync • Global Address List lookup • Two way Calendar Syncing (including recurrence) • Download Calendar Attachments • Download Email Attachments • HTML Email

34


• Secure Browser • Upload Email Attachment • GMMS Proxy

Unsupported Exchange Online Features In This Release • Contact Subfolders • Tasks (to be supported in upcoming 8.1 release) • S/MIME Encrypted not supported • HTML Welcome Message • iOS Notification Enhancements

Open Issues in Good Mobile Control Server


GMC version 1.3.1, with the default File Transfer policy and Send Attachments enabled, allows the previous Good iOS Client (1.9.5) and Android Client (1.7.5), as well as the current Android Client (1.8.0), to import files to Good from third-party applications, but does not allow the current Good iOS Client (1.9.6) to do so. The GMC must be upgraded to 1.3.3 or higher, with importing enabled, for iOS devices using the current Good Client to import files.

GMC

If you receive an “Illegal Key Size” error while importing an iOS MDM certificate into Good Mobile Control via Certificates > Upload Signed Certificate, refer to http://good.custhelp.com/app/answers/detail/a_id/741 for a solution to the problem. You will need to install the Unlimited Strength JCE (jar files)

GMC

VPN configuration using a combination of IPSEC Shared Secret and Hybrid Authentication settings is not supported.

71520

GMC

(GMA) Setting the correct address but incorrect port number on GMC for a proxy server causes an incorrect error messages on the Client using GMA, for https addresses.

95179

GMC

A User Rejected/Cancel action on the device to install a managed app results in an incorrect Status/Action displayed in GMC.

101160

GMC

Unchecking MDM policy settings “Query of device information,” “Query of network information,” “Restriction-related queries,” “Security-related queries” may cause Compliance Manager blacklist/whitelist device checks to fail.

103117

GMC

An unmanaged application will not push to the device after upgrade until the existing managed app policy is pushed or modifed to trigger the action. This can take up to 12 hours after the upgrade.

103764

GMC Exporting all handhelds may run up to 20% slower. 107547 GMC

The quantity displayed of provisioned and unprovisioned devices on the Home page maybe be incorrect due to the presence of managed clientless devices.

109159

GMC After upgrading GMC to 2.3.0, when the GMA checkbox is disabled in Settings and enabled in the policy, the GMA icon does not show up on the device.

109757


109824

35


GMC

Errors will occur if the SQL Server JDBC driver is installed on the target machine for GMC installation. Workaround: The installer is probably looking into the wrong location to find sqljdbc_auth.dll. Try searching for sqljdbc_auth.dll on the machine and you will probably find one of the locations to be a system path such as C:\Windows\SysWOW64. Browse to the path and rename sqljdbc_auth.dll to sqljdbc_auth.Backup, and continue with the GMC installation.

110022

GMC

The pages of unmanaged applications downloaded from Good are not localized. Users who select the “Visit Application Catalog” option on their device will find the list of available applications displayed in English.

110172

GMC

The status of a managed application is not displayed correctly if "Auto Uninstall" in unchecked.

110205

GMC

GMC Servers installed in 2009 – 2010 (versions >= 1.0.3.30, and <= 1.0.3.83) and then updated to 2.3.0.402, do not support Priority Access as currently configured. If you are using GMC 2.3.0.402 and the Priority Access policy Client Type has been properly configured in GMC, but user devices receive an error during setup such as “The OTAP fails with an error: your account is not authorized to use this edition of Good for Enterprise,” you should contact your authorized service representative to rectify the problem.

111739

GMC

Moving a user to a different server immediately after that user performs an OTAP may result in a server crash and restart.

113611

GMC The “Send Message” option on the “Apply Actions” dropdown menu on the GMC Handhelds tab is not functional.

GMC-3257

© Good Technology, Inc. 2001-2014. All rights reserved. Good, Good Technology, the Good logo, Good Mobile Messaging, Good Mobile Intranet, Good Mobile Defense, Good Mobile Application Services, GoodAccess, GoodInfo, GoodLink, and Powered by Good are trademarks of Good Technology, Inc. All other trademarks and service marks contained herein are the property of their respective owners. Good Technology, Inc., and its products are not related to, sponsored by, or affiliated with Research In Motion Limited. For information concerning other intellectual property rights of Good and others, go to www.good.com/legaldocs.

http://www.good.com/legaldocs

Date post:	11-Aug-2020
Category:	Documents
Upload:	others
View:	3 times
Download:	0 times

Good Mobile Messaging Server Version 8.3.2 (BDB Version ...€¦ · Good Mobile Messaging Server...

Documents