<font size=2 face="Calibri"><b>Mobile Device Management (MDM) Supplement
to V9.1 Platform Announcement </b></font>
<br>
<br><font size=2 face="Calibri">IBM is pleased to announce version 9.1
of the IBM Endpoint Manager platform and with this release there are some
supplement points to take note of:</font>
<br>
<br><font size=2 face="Calibri">1. Mobile
Device Management (MDM) will not work with the IBM Endpoint Manager (IEM)
V9.1 Enhanced Security options enabled. Enhanced Security (SHA256) is a
feature of the platform, not of MDM. It cannot be enabled for Patch Management
and disabled for MDM. A patch for MDM customers who want to use Enhanced
Security will be available in several weeks. MDM customers are strongly
advised to postpone their V9.1 upgrade until the patch is available. The
protection currently available in 9.0 and earlier versions through SHA1
remains fully in place. </font>
<br>
<br><font size=2 face="Calibri">Optionally, MDM users may upgrade to V9.1
provided Enhanced Security (SHA256 features) remain turned off. For more
information about Enhanced Security in IEM V9.1, see:</font>
<br>
<br><font size=2 face="sans-serif">Platform Release Notes </font><a href="https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Change%20and%20Release%20Notes"><font size=2 color=#0082bf face="sans-serif"><u>https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Change%20and%20Release%20Notes</u></font></a><font size=2 face="sans-serif">
</font>
<br>
<br><font size=2 face="sans-serif">Platform Documentation (IBM Knowledge
Center), e.g.,</font>
<br><a href="http://www-01.ibm.com/support/knowledgecenter/SS63NW_9.1.0/com.ibm.tivoli.tem.doc_9.1/Platform/Adm/c_scenarios_sha2_installation.html"><font size=2 color=#0082bf face="sans-serif"><u>http://www-01.ibm.com/support/knowledgecenter/SS63NW_9.1.0/com.ibm.tivoli.tem.doc_9.1/Platform/Adm/c_scenarios_sha2_installation.html</u></font></a><font size=2 face="sans-serif">
</font>
<br>
<br>
<br><font size=2 face="Calibri">2. All
MDM customers upgrading to V9.1:</font>
<ul>
<li><font size=2 face="Calibri">Must run Fixlet 350: "Encryption components
outdated for 9.1" on all applicable machines and restart those machines
when action completes.</font></ul><font size=2 face="Calibri">This fixlet
ensures that the MDM encryption tools used to configure components/extenders
and to send </font><font size=2 face="sans-serif">down</font><font size=2 face="Calibri">
encrypted profiles/redemption codes remain compatible with V9.1.</font>
<br>
<br>
<br><font size=2 face="Calibri">3. All
MDM customers upgrading to V9.1:</font>
<ul>
<li><font size=2 face="Calibri">Who subsequently remove, or accidentally
delete, a site in their deployment</font>
<li><font size=2 face="Calibri">Must complete the Workaround Procedure
described here.</font></ul><font size=2 face="Calibri">When a site is deleted
or removed, one of the Proxy Agent files must be deleted and the Proxy
Agent restarted. If this is not done you may have devices that fail to
report-in or respond. </font>
<br>
<br><font size=2 face="Calibri">V9.1 Workaround Procedure</font>
<br><font size=2 face="Calibri">1. Stop
the Proxy Agent service.</font>
<br><font size=2 face="Calibri">2. Copy
the file: “SiteSubscriptions.json” from your Proxy Agent installation
directory (e.g., “C:\Program Files (x86)\BigFix Enterprise\Management
Extender") to a temporary folder. </font>
<br><font size=2 face="Calibri">3. Delete
the SiteSubscriptions.json file in the Proxy Agent installation directory.
</font>
<br><font size=2 face="Calibri">4. Restart
the Proxy Agent service.</font>
<br><font size=2 face="Calibri">5. Verify
that the Proxy Agent starts properly (service will say "started").</font>
<br><font size=2 face="Calibri">6. Wait
10 to 15 minutes for the SiteSubscriptions.json file to regenerate.</font>
<br><font size=2 face="Calibri">7. Verify
that the Proxy Agent log shows no errors (check the Proxy Agent log file
in "C:\Program Files (x86)\BigFix Enterprise\Management Extender\__Logs").</font>
<br><font size=2 face="Calibri">8. Verify
that you can send a message to an existing mobile device.</font>
<br>
<br>
<br><font size=2 face="sans-serif"><b>Frequently Asked Questions </b></font>
<br><font size=2 face="sans-serif">Q: I do not use Mobile Device Management.
Do I still need to do anything?</font>
<br><font size=2 face="sans-serif">A: No. You don’t need to do anything
if you do not use the Mobile Device Management application. </font>
<br>
<br><font size=2 face="sans-serif">Q: I use MDM but I have not upgraded
my IEM platform to V9.1. Do I need to do anything?</font>
<br><font size=2 face="sans-serif">A: No. You do not need to do anything.</font>
<br>
<br><font size=2 face="sans-serif">Q: I upgraded my IEM platform to V9.1
but did not enable the Enhanced Security feature. Will my deployment be
affected?</font>
<br><font size=2 face="sans-serif">A: Yes. You must run Fixlet 350: "Encryption
components outdated for 9.1" on all applicable machines and restart
those machines when action completes.</font>
<br>
<br><font size=2 face="sans-serif">Q: I use MDM. Do you advise me to upgrade
my IEM deployment to V9.1?</font>
<br><font size=2 face="sans-serif">A: No. MDM customers are strongly advised
to wait several weeks to upgrade to V9.1, when a patch for Enhanced Security
(ES) and SHA256 features becomes available.</font>
<br>
<br><font size=2 face="sans-serif">Q: I have enabled Enhanced Security
(ES) and see that my MDM site does not work. What should I do?</font>
<br><font size=2 face="sans-serif">A: Disable ES and restart your IEM server
machine. You will be using SHA1 Security, and everything should work as
before. Please refer to the Platform Installation documentation in the
IBM Knowledge Center.</font>
<br>
<br><font size=2 face="sans-serif">Q: Do I need to change my MDM masthead
to make it compliant with the V9.1 platform?</font>
<br><font size=2 face="sans-serif">A: If prompted in your IEM Console,
you will need to run BES Administrator Tool to gather the new upgraded
MDM masthead. Please refer to the MDM documentation in the IBM Knowledge
Center.</font>
<br>
<br><font size=2 face="sans-serif">Q: I use MDM and have upgraded IEM to
V9.1 but have recently removed a site. Do I need to do anything?</font>
<br><font size=2 face="sans-serif">A: Yes. You are advised to complete
the steps in the 9.1 Workaround Procedure described above. </font>
<br>
<br><font size=2 face="sans-serif">Q: I use MDM and have upgraded IEM to
9.1 but when I try to enable Enhanced Security it asks me to delete a few
mastheads. What should I do?</font>
<br><font size=2 face="sans-serif">A: If you are using MDM, please do not
enable ES until a patch for Enhanced Security (ES) and SHA256 features
becomes available in several weeks.</font>
<br>
<br>
<br><font size=2 face="Calibri">___________________________________________________________________________________________<br>
Application Engineering Team <br>
IBM Endpoint Manager</font><font size=3 face="Calibri"> </font>