PowerSC Release Notes for 2.3.0.5

The following features have been added in PowerSC Version 2.3.0.5:

The following compliance profiles are added:

• Center for Internet Security Alibaba Cloud Foundation Benchmark is added. This benchmark is intended for the Alibaba Cloud Linux 3 operating system.
• Payment Card Industry DSS V4.0.1 compliance for AIX and VIOS is added.

The following IBM i feature is added:

• Viewing an profile's effect on values is added. You can view what the effect of an IBM i compliance profile would be if you were to apply that profile to the IBM i uiAgent. (The profile is not applied to the uiAgent by this action.)

The following PowerSC GUI features are added:

• Creating custom events, for both standalone or correlation events, is moved to the Management tab of the PowerSC GUI. From the Management > Custom Events page, you can create a custom standalone or correlation event of your own choosing.
• The Scheduled Scans Calendar section displays a monthly calendar view that indicates the days in the month that have a scheduled-activity configured. The hover text indicates which scheduled activities are scheduled for that day.
• Working with the Last Scan Detail report is added in this release to display information about the last scan information for the following scan types: malware, quantum safe, blocklisting, and trusted signature database (TSD).
• Viewing server certificates and Changing server certificates are added in this release. You can choose to add a new certificate to the server's keystore.
• Undoing previously applied rules is added to undo previously-applied rules on one or more endpoints in a selected group without having to undo the entire profile. You may find this feature to be useful in the case where you determine that not all of the applied rules in a given profile are appropriate in your environment.
• Configuring CSM for ransomware alerts is added. You can configure PowerSC to obtain and report on ransomware alerts that are detected by CSM. As part of this feature, integration with Storage Insights has been discontinued and is no longer supported. The related section has been removed.
• Creating a malware policy is added. The malware configuration and schedule associated with the policy are automatically applied to any new endpoints added to that group. The Policy Type field is added to the Policy Management page for this purpose.
• Integrating ClamAV and Trusted Execution is added. You can use PowerSC to start a ClamAV scan to check the files that trigger Trusted Execution (TE) events on an AIX uiAgent against the malware (virus definitions) database.

The following TNC-related features are added:

• Creating an fsPolicy is updated to add build information, make the APAR group optional, and make the iFix list optional.
• Managing TNC IP groups is added in this release. The IP Groups feature allows you to manage reusable IP Groups that can be assigned to TNC Policies.

The following Swagger changes are made in this release:

• Swagger GET /correlatedEvent example, Swagger POST /correlatedEvents/{correlatedName} example, and Swagger DELETE /correlatedEvents/{correlatedName} example are added in this release. 
• Swagger PUT /correlatedEvents example is updated to change the global correlation-window configuration.
• Swagger report examples is added. You can export the PowerSC reports to CSV and PDF files from the API.
• Swagger certificate examples is added in this release. You can generate, import, get, and reload the PowerSC certificates from the API.
• Swagger TNC policy examples is added in this release to get and update the TNC policies configuration, including policies, iFix lists, fileset policies, APAR groups, and IP groups.

The following clamd RPMs are provided in the RPMS directory for Red Hat Enterprise [() Linux]® Server:

• clamd-1.4.3-2.el10.ppc64le.rpm
• clamd-1.4.3-2.el8.ppc64le.rpm
• clamd-1.4.3-2.el9.ppc64le.rpm
• clamd-1.4.3-2.el10.x86_64.rpm
• clamd-1.4.3-2.el8.x86_64.rpm
• clamd-1.4.3-2.el9.x86_64.rpm

OpenSSL 1.1.x is not supported. The uiServer and uiAgent systems must be using the same level of OpenSSL for the P12 generated by the PowerSC GUI and API to work. The generated P12 file is not compatible across versions 1.1.x and 3.x. You can use the openssl version command to determine the OpenSSL version on the uiServer and uiAgents.

In this release, new HMC profiles must begin with Linux_HMC. However, existing profiles with the HMC_ prefix will continue to work as expected.
For the best future compatibility, it is a best practice to recreate your custom profiles via the PowerSC GUI, copy the custom profiles to your endpoints, and delete the previous version. This is recommended because the built-in profiles DTD has been updated to include operating system and source and parent details. When you create a custom profile this useful information is carried into each rule of the newly created profiles.