UBIQUITY 8 Introduction The paper describes the changes introduced with version 8 of ASEM Ubiquity software platform.
Version 1
Description First emission
Date 23/09/2016
Disclaimer The information given in the documentation could change without notice and doesn't represent any Version Description Date obligation for ASEM S.p.A.. ASEM S.p.A. is not responsible for technical mistakes or other omissions 1 First release 10/08/2016 and declines every responsibility resulting from its use. ASEM S.p.A. will not be responsible for any loss of profits or damages, direct or not, of any kind (included loss or damages of data), deriving from the use of this documentation.
Page 1 of 8
Technical Note
UBIQUITY 8
Table of contents 1 2 3 4 5 6 7
Introduction ................................................................................................................................................. 3 IEC 62443-3 and German BSI certification ................................................................................................ 3 Automatic updates and notifications........................................................................................................... 4 Support for the new Ubiquity Runtime PORTABLE license ....................................................................... 5 New Remote Desktop feature options........................................................................................................ 6 New VPN configuration options .................................................................................................................. 7 Session activity log extension .................................................................................................................... 8
Page 2 of 8
Technical Note
UBIQUITY 8
1 Introduction Ubiquity version 8 introduces a number of new features that enhance the functional features of the platform. Ubiquity 8 also introduces the certification of conformity to the IEC 62443 and corresponding German BSI on cybersecurity industrial communications when using the Internet as a means of transport.
2 IEC 62443-3 and German BSI certification Ubiquity 8 boasts an important new certification which is specific for industrial communications through the use of the Internet. Ubiquity 8 has been certified in every component and affirms its full compatibility with the reference standards IEC 62443-3. The certification has been strongly desired to confirm the primary role of Ubiquity in the scenario of excellent products for secure remote assistance. The audit was conducted by an external competent body who performed a series of tests and validations in accord with the typical operational framework of these audit:
Auditing processes according to NIST SP800-115 & ISECOM OSSTMM Concept auditing based on BSI (German federal office for information security), ISA 99, and IEC 62443 Component auditing where components were individually analyzed and stressed System auditing where end-to-end security was thoroughly assessed
On the basis of a strong cooperation with the auditing team, Ubiquity 8 has been improved and strengthened obtaining then the certification of security audit successfully passed.
The document is available for download from the web site. Page 3 of 8
Technical Note
UBIQUITY 8
3 Automatic updates and notifications Ubiquity 8 introduces an effective mechanism to handle updating of systems in the field. For each system associated with the domain, Runtime software or routers, you can see now the update status in the “Device details” area together with the information about availability of an update.
If you want to update the system software simply click on the Update button and choose whether to upgrade immediately or schedule it to run within a time window freely configurable. You can also program to execute the updates on a group of devices, choosing them with a multiple selection from the table view of the Domain’s devices.
The Ubiquity log system tracks all transactions and makes them available for analysis in the connection audit. The upgrade of Ubiquity Control Center is also managed through an automatic notification of the availability of new version, sent as soon as you are logged in to the domain.
Page 4 of 8
Technical Note
UBIQUITY 8
4 Support for the new Ubiquity Runtime PORTABLE license Ubiquity Control Center 8 allows to manage the new Ubiquity Runtime PORTABLE license, The PORTABLE license of Ubiquity supports the same functions of the PRO license plus the ability to move it a limited number of times on other systems.
Feature Interactive tools (Remote Desktop, File Exchange, Remote Task Manager, Chat, System Information) Session activity log and audit VPN limited to the device hosting Ubiquity Runtime VPN extended to the remote device sub-network Internet connection sharing Serial port pass-through License move to different hardware
BASIC
PRO
PORTABLE
Yes
Yes
Yes
No Yes No No No No
Yes Yes Yes Yes Yes No
Yes Yes Yes Yes Yes Yes, 20 times
The Ubiquity Runtime PORTABLE license is activated on a single device at a time, but can be moved to other systems for twenty (20) times. There is no limit in time between two movements. Once the available movements are finished the license remains indefinitely active on the last system. The PORTABLE license is available for WinCE and Win32/64 operating systems. The PORTABLE license can be activated on both ASEM and third-party systems. The PORTABLE license is already available for ordering. Its activation on the various systems is responsibility of the customer and, as usual, it can be done off-line on your system or online directly from Ubiquity Control Center using every time the same activation code provided in the sale package. Ubiquity Control Center also provides an indication of the number of residual movements.
Page 5 of 8
Technical Note
UBIQUITY 8
5 New Remote Desktop feature options The Remote Desktop feature is enhanced with two convenient new features: full-screen view with the scaling options and support for remote systems with multiple monitors. The remote desktop view is scaled to the size of the Control Center window. The "Original size" control allows you to view the remote image in its original size with the appearance of the scroll bars. You can return to the scaled view by pressing "Fit to window". "Full screen" button allows viewing full-screen remote desktop. To exit full screen mode, simply move your mouse to the top edge of the screen to bring up the toolbar with the command output.
If the remote system with Ubiquity Runtime is featuring more distinct monitors, Ubiquity Remote Desktop allows you to access each of these individually and activate an extended viewing of all the connected monitors.
The extended view displays all the screens at once respecting the monitor layout from the Windows Control Panel.
Page 6 of 8
Technical Note
UBIQUITY 8
While in extended view you can freely work on the screens as you were in local.
6 New VPN configuration options Ubiquity 8 introduces a new option for choosing the IP addresses to assign to the virtual Ethernet interface "Ubiquity VPN" on the PC with Control Center. The IP assignment can be done fully automatic or manual. The new option for the automatic assignment allows you to specify an IP address range within which the IP address will be chosen.
Page 7 of 8
Technical Note
UBIQUITY 8
7 Session activity log extension With the release of Ubiquity 7 we’ve introduced the detailed log of all session activities and Ubiquity has made possible to trace service operations in a timely manner allowing immediate identification of important tasks such as writing or erasing files, use of the VPN network with certain protocols and specific IP addresses. The feature proved to be extremely useful and valuable primarily as a tool for security and monitoring of provided support; following the demonstrated interest by all Ubiquity users, the storage history buffer time has been extended from 10 to 30 days. The extension applies to all domains from 21/09/2016.
