Hi, I think this is related to some Windows/Windows defender setting. Could you verify the 'Check apps and files' setting in Windows Security -> App & Browser control? If this settings is set to...

Hi, I think your question can be extended to the more general question 'how to securely use secrets in automation scripts' and I think this has somewhat been answered in this thread. The conclusion from...

Hi, For http: this 'System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 127.0.0.1:80' is usually seen when the firewall does not allow inbound...

Hi Andrew, The reason cube cannot connect to the DMA is because the (self-signed) certificate you configured is not trusted by your client machine. That's also why you see the security warning in the...

Hi Daniel, I think the reason the embeded site does work on Firefox but not on Chrome is because of a difference in the default value for the 'SameSite' property of a cookie. In Chrome, if the 'SameSite'...

Hi, A quick test makes me believe that only lowercase alphanumerical characters (a-z, 0-9) are allowed.

Hi, The process of resetting the password differs a bit depending on how the user signs in. We allow users to sign in with their Microsoft, Google, Amazon or LinkedIn account, so the user should reset...

Hi, Currently, this is not supported. We do have a project on our backlog to map out which services can be moved away from running as Local System in the future, but at the moment it is to early to tell...

Hi, The new version of DIS has some new features that make use of some web api endpoints besides the normal connection. From the stacktrace, it seems that DIS is trying to make an api call to http://127.0.0.1...

Hi, To answer your first question: It is not possible to specify a custom port for the communication between the CloudGateway and dataminer.services. This communication is HTTPS and WSS based, so we chose...

Hi, Which DataMiner version are you running? MSV C++ 2005 and 2010 can be uninstalled after upgrading to DataMiner v10.3.9. For .NET, it depends on the DataMiner version, but also on the DxMs that are...

Hi, We do follow Microsoft's support lifecycles, which means that for all supported DataMiner versions, we support all OS versions that Microsoft supports. So, there are no different OS requirements for...

Hi, A DMZ network is a network that is isolated form the public internet via a firewall and from the corporate network, also via a firewall. In theory this can be the same firewall with different sets...

Hi Jochen, I believe DOM data is stored in the elasticsearch/opensearch database (if you're not using StaaS). I would not advise to store credentials/keys in there because that data is not encrypted at...

Hi Tiago, If you are running a version of DataMiner that only requires .NET 8 (which you can check here) and if all the DxMs you have installed are up to date you can delete all the older .NET programs....

Hi, Different .NET versions are not compatible with each other. This means that it's not possible to simply replace .NET 5 or 6 by .NET 8. Instead, we first have to make changes to the software and release...

Hi, It looks like the cloudgateway is not able to set up a connection to the dataminer.services endpoints because the connection is getting blocked. Could it be that there is a firewall in the network...

Hi Koen, You are correct that this backdoor does not affect DataMiner. The backdoor specifically targets sshd for linux. This does mean that customers with Cassadra & Opensearch installations might...

Hi Koen, you are correct that DataMiner doens't use any of the components. ElasticSearch doesn't use ActiveMQ since it's not listed on their dependencies list nor did they release a securit advisory....

Hi, DataMiner requires you to install .NET using the .NET hosting bundle installer. This should install both the .NET and ASP.NET runtime as well as the IIS component, so I would recommend to run that...

Hi, Depending on where you have the Cassandra instance installed, different versions can be used. If you are running Cassandra on Windows, it's not possible to update to Cassandra 4.0 or newer. If you...

Hi Francisco, If the element on which the actions are performed is determined by user input, could it be that the user running the script has permissions on some elements but lacks them on others, causing...

Hi, My guess is that the device you're trying to connect to, does not accept TLS 1.0 and TLS 1.2. Would it be possible to verify which TLS versions the device does accept? Since the other Agent, running...

Hi Ryan, My guess is that the ConnectionTester is telling you that it's connecting to the cloudgateway at <IP> over NATS (port 5100) in order to validate whether that cloudgateway has a connection...

Hi I tested which settings get applied when a User is in multiple groups. It seems like the settings that get applied depend on the order in which the User became member of a group. The first group where...

Hi, As far as I'm aware, DataMiner does not rely on ICMP 13 and 14, as time synchronization across the cluster should be done by NTP.

Hi Oscar, I remember investigating this behaviour a while back for a similar dojo question. Does the answer for that question provide give you sufficient information? Kind regards,

Hi, I don't know if DataMiner 9.6 can handle Element polling through HTTPS, but I think it is possible to gain more insight by using Wireshark and looking at the network traffic that is generated. If...

Hi James, I had a look at how the BPA checks for the redirection and it does so by making an http call to http://127.0.0.1 and verifying the returned http status code. This does not work in your case,...

Hi Catarina, I believe that the webpages only make use of GET, POST and HEAD methods. However, future modules (DataAPI, Scripted Connectors, ...) exposing a REST API might require the use of PUT and DELETE...

Hi, Hi, this error message indicates that Cube somehow cannot connect towards DataMiner. Can you verify whether you can ping the DMA? When connecting over https, this error is shown when Cube fails to...

After investigating wireshark traces, it looks like the Master server does not support TLSv1.1 or any of the ciphers the client (DMA) supports because the Master server immediately sends a TCP reset message...

Hi, I'm assuming you are using the powershell version of the script because you have to provide the paths to the keytool and openssl. I had a look at the script and noticed it was not properly formatting...

Hi, If the CN and the SANs are different in the new certificate compared to the self-signed one, you might need to change some configuration in DataMiner (maintenancesettings.xml) and IIS (the binding)....

Hi, Towards the end user, it may look like the DMS has a single webpage, but actually, every agent has it's own standalone webpage. So, every time the DNS cache expires and a new DNS query is executed,...

Hi, I can't help you with the question about a DMA in a different network behind a NAT, but I can help you with your question about encrypting all communication in a DMS. I will start by recommending...

Hi Alberto, Windows NT 6.2 refers to both Windows 8 and Windows Server 2012. Windows 8 is already end of life. Windows Server 2012 will go end of life in October. DataMiner follows Microsoft's lifecycle...

Hi, After setting or changing environment variables (as done in step 16), you should open a new PowerShell prompt in step 17 for the changes to take effect. This was not really clear in the documentation,...

Hi Zean, To access the Dashboards and Monitoring app via dataminer.services you have to be logged in to dataminer.services. For Cube, I'm assuming you mean the remote cube access as anounced here. This...