<html><body><p><font size="2" face="Arial">IBM BigFix Inventory and IBM License Metric Tool </font><b><font size="2" face="Arial">application update 9.2.13</font></b><font size="2" face="Arial"> is now available.</font><br><br><font size="2" face="Arial">This update contains features that extend software discovery, enhance license reporting and address security scenarios. The key features include:</font><br>
<ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Reporting the Registered User metric for Microsoft Office 365 (BigFix Inventory only)</font></b><br>
<ul><font size="2" face="Arial">BigFix Inventory reports utilization of the Registered User metric for Microsoft Office 365. The information is extracted during regular software scans directly from computers where components of Office 365 are installed. Based on the scan results, the Registered User metric is calculated, and its utilization is displayed on the All Metrics report. Detailed information about users is shown on the Software Users report.</font><br><br><b><font size="2" face="Arial">Benefits:</font></b><font size="2" face="Arial"> Thanks to this feature, you can track licenses for Office 365 in BigFix Inventory to analyze trends, define thresholds and optimize costs by identifying users of unused instances.</font><br><br></ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Version currency of Internet browsers and other selected software that changes frequently (BigFix Inventory only)</font></b><ul><br><font size="2" face="Arial">BigFix Inventory automatically detects all versions of a number of software components on Windows. These components include Internet browsers (Chrome, Edge, Firefox, and Opera) as well as components such as Adobe Air, Adobe Flash Player, Slack, and other. The components are detected by generic signatures while their versions are automatically retrieved from files or packages that caused detection. </font><p><p><b><font size="2" face="Arial">Benefits: </font></b><font size="2" face="Arial">Thanks to the newly introduced approach towards detection of software that is frequently updated, full discovery currency is ensured.</font><p></ul><br><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Preview Features</font></b><ul><font size="2" face="Arial">The Preview features give you a chance to take a sneak peek at what we are currently developing. You can try them out and provide your feedback to influence how they work when they are officially released. You can provide your feedback about the dashboard by clicking the </font><b><font size="2" face="Arial">Send Feedback </font></b><font size="2" face="Arial">button on the Home Page.</font><br>
<ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Preview feature: Visibility of Common Vulnerabilities and Exposures (CVEs) (BigFix Inventory only)</font></b><br>
<ul><ul><font size="2" face="Symbol">· </font><font size="2" face="Arial">Information about CVEs is shown on the Software Classification report on which CVEs are matched with software components through component detailed versions. </font><p><font size="2" face="Symbol">· </font><font size="2" face="Arial">The details of CVEs are extended to include a link to a description of the CVE in the National Vulnerability Database as well as the version of the CVSS, either 2.0 or 3.0.</font><p><font size="2" face="Symbol">· </font><font size="2" face="Arial">Information about CVEs can be filtered and sorted by the CVE name. The filter shows the software that meets the specified criteria by searching through the full list of CVEs of each reported software instance.</font><p></ul></ul>
<ul><b><font size="2" face="Arial">Benefits: </font></b><font size="2" face="Arial">Thanks to the improvements in showing information about CVEs you can better identify, monitor, and analyze potentially vulnerable software and at the same time prevent potential threats.</font><br><br></ul></ul>
<ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Preview feature: Security dashboard and reporting (BigFix Inventory only)</font></b><ul><br><font size="2" face="Arial">New Security Dashboard shows a preview of security features in the form of widgets that show the following information:</font><ul><font size="2" face="Symbol">· </font><font size="2" face="Arial">The number of software installations that are out of support</font><br><font size="2" face="Symbol">· </font><font size="2" face="Arial">The number of software installations for which support ends within the next three months</font><br><font size="2" face="Symbol">· </font><font size="2" face="Arial">The number of software installations that are vulnerable</font><br><font size="2" face="Symbol">· </font><font size="2" face="Arial">The number of software installations that were discovered within the last two weeks and are vulnerable</font><br><font size="2" face="Symbol">· </font><font size="2" face="Arial">The overall number of software installations</font></ul><font size="2" face="Arial">To view the new dashboard, click Go to New Dashboard & Reporting on the home page</font><font size="2" color="#0000FF" face="Arial">.</font><br><br><b><font size="2" face="Arial">Benefits: </font></b><font size="2" face="Arial">Summary of the most important security information available at a single view.</font><br><br></ul></ul></ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Reporting utilization of FlexPoints</font></b><br>
<ul><font size="2" face="Arial">FlexPoint is a license metric unit that can be used to determine the cost of IBM products that are purchased as part of FlexPoint bundles. Each product from a bundle is licensed based on a different license metric but all metrics are converted into FlexPoints. Products that are currently available as part of FlexPoint bundles are products from the IBM Cloud and IBM Analytics brands.</font><br><br><b><font size="2" face="Arial">Benefits: </font></b><font size="2">BigFix Inventory and License Metric Tool allow you to calculate the current license utilization of IBM FlexPoints, based on the most recent data. For some product that are included in FlexPoint bundles and cannot be automatically measured by BigFix Inventory or License Metric Tool, manual input of the base metric is required.nThanks to this feature, you can make sure that you are prepared for audits, and that the number of purchased FlexPoints fits your needs. </font><br><br></ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">New To Do list on the top navigation bar </font></b><br>
<ul><font size="2" face="Arial">The top navigation bar is extended with a To Do list that, at present, displays the information about:</font><ul><font size="2" face="Symbol">· </font><font size="2" face="Arial">Failed imports of data</font><p><font size="2" face="Symbol">· </font><font size="2" face="Arial">Availability of a new version of the application</font><p><font size="2" face="Symbol">· </font><font size="2" face="Arial">The need to configure connections to virtualization hosts for some of the computers</font><p></ul><br><b><font size="2" face="Arial">Benefits: </font></b><font size="2" face="Arial">Thanks to the To Do list you are informed about issues that might affect the accuracy of your reports and thus, immediately take actions to avoid miscalculations. At the same time, you can be up-to-date about the newest application releases.</font><p><p></ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Support for BigFix Inventory and License Metric Tool server on MS SQL 2016</font></b><br>
<ul><font size="2" face="Arial">MS SQL 2016 is now supported as a database for BigFix Inventory and License Metric Tool. If you used MS SQL 2016 with earlier versions of BigFix Inventory or License Metric Tool your environment was non-compliant from IBM perspective. The data that was stored in the database might have been invalid and the historical data cannot be fixed. However, data collected after the upgrade to BigFix Inventory or License Metric Tool 9.2.13 will be valid and compliant from IBM perspective. </font><br><br><b><font size="2" face="Arial">Benefits: </font></b><font size="2" face="Arial">You can use the MS SQL 2016 edition as a database.</font><br></ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Discovery of new components from Citrix, Symantec, and Oracle (BigFix Inventory only)</font></b><br>
<ul><font size="2" face="Arial">The software catalog is extended to discover new components from Citrix, Symantec, and Oracle. To discover the components, ensure that you upgrade BigFix Inventory to version 9.2.13.</font><br><font size="2" face="Arial">Below is the list of the newly added components. To learn about their exact versions, use the Software Catalog widget in BigFix Inventory to browse the catalog content.</font><ul><font size="2" face="Symbol">· </font><font size="2" face="Arial">Added discovery capability for Citrix products</font><ul><ul><font size="2" face="Courier New">o </font><font size="2" face="Arial">Citrix Edgesight</font><br><font size="2" face="Courier New">o </font><font size="2" face="Arial">Citrix Presentation Server</font><br><font size="2" face="Courier New">o </font><font size="2" face="Arial">Citrix XenDesktop</font></ul></ul><font size="2" face="Symbol">· </font><font size="2" face="Arial">Added discovery capability for Symantec products</font><ul><ul><font size="2" face="Courier New">o </font><font size="2" face="Arial">Veritas Cluster Enterprise Agents</font><br><font size="2" face="Courier New">o </font><font size="2" face="Arial">Veritas Cluster ServerVeritas Cluster Server Bundled Agents</font><br><font size="2" face="Courier New">o </font><font size="2" face="Arial">Veritas Cluster Server Disk Reservation Modules and Utilities</font></ul></ul><font size="2" face="Symbol">· </font><font size="2" face="Arial">Added discovery capability for Oracle products</font><ul><ul><font size="2" face="Courier New">o </font><font size="2" face="Arial">Oracle Clusterware</font><br><font size="2" face="Courier New">o </font><font size="2" face="Arial">Oracle GoldenGate</font><br><font size="2" face="Courier New">o </font><font size="2" face="Arial">Sun Cluster HA for WebSphere MQ</font><br></ul></ul></ul><b><font size="2" face="Arial">Benefits:</font></b><font size="2" face="Arial"> More visibility into deployed products and components and better license management without the need to develop custom signatures.</font><p><p></ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Information about the end of support dates is refreshed (BigFix Inventory only)</font></b><br>
<ul><font size="2" face="Arial">The information about the end of support dates is refreshed for your IBM software components for which the dates were announced since the last update of the list. The data is based on the information contained in IBM Lifecycle in September.</font><br><br><b><font size="2" face="Arial">Benefits: </font></b><font size="2" face="Arial">The information about the end of support dates for the IBM software used in your organization is up-to-date and thus, you can prepare for the forthcoming software updates. </font><br><br></ul><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Security enhancements</font></b><ul><ul><font size="2" face="Symbol">· </font><font size="2" face="Arial">On the server side:</font><ul><ul><font size="2" face="Courier New">o </font><font size="2" face="Arial">Java is upgraded to the newest version to maintain security.</font><br><font size="2" face="Courier New">o </font><font size="2" face="Arial">TLS 1.2 is enabled in IBM Java by default.</font><br><font size="2" face="Courier New">o </font><font size="2" face="Arial">WebSphere Application Server Liberty is upgraded to version 18.0.0.2 to address CVE-2018-1553.</font></ul></ul><font size="2" face="Symbol">· </font><font size="2" face="Arial">On the endpoint side:</font><ul><ul><font size="2" face="Courier New">o </font><font size="2" face="Arial">Update of the Xerces library to version 3.2.1 on Windows to keep the scanner secure and reliable.</font><br><br></ul></ul></ul></ul><font size="2" face="Arial">· </font><font size="2" face="Symbol">· </font><b><font size="2" face="Arial">Support for new virtualization technologies</font></b><ul><ul><font size="2" face="Arial">· vSphere ESXi 6.7 and vSphere vCenter Server 6.7.</font><br></ul></ul></ul><b><font size="2" face="Arial">Action to take</font></b><br><br><font size="2" face="Arial">To learn how to get the application update and deploy it as well as to view the full list of new features and APARs that were fixed in this application update, see the following links:</font><br><font size="2" face="Arial">BigFix Inventory: </font><a href="https://ibm.biz/bfi_update_9213"><u><font size="2" color="#0000FF" face="Arial">https://ibm.biz/bfi_update_9213</font></u></a><br><font size="2" face="Arial">License Metric Tool: </font><a href="https://ibm.biz/lmt_update_9213"><u><font size="2" color="#0000FF" face="Arial">https://ibm.biz/lmt_update_9213</font></u></a><font size="2" face="Arial"> </font><br><br><b><font size="2" face="Arial">Questions</font></b><br><br><font size="2" face="Arial">If you have any product-related questions, please post them on one of the following forums:</font><br><a href="https://ibm.biz/BFI_Forum"><u><font size="2" color="#0000FF" face="Arial">https://ibm.biz/BFI_Forum</font></u></a><br><a href="https://ibm.biz/ILMT_Forum"><u><font size="2" color="#0000FF" face="Arial">https://ibm.biz/ILMT_Forum</font></u></a><font size="2" face="Arial"> </font><br><br>
<table border="0" cellspacing="0" cellpadding="0"><tr valign="top"><td width="441" bgcolor="#FAFAFA"><img width="1" height="1" src="cid:1__=4EBB0985DFAB357C8f9e8a93df938690918c4EB@" border="0" alt=""></td></tr>
<tr valign="top"><td width="441" bgcolor="#FAFAFA"><img width="1" height="1" src="cid:1__=4EBB0985DFAB357C8f9e8a93df938690918c4EB@" border="0" alt=""></td></tr></table><BR>
</body></html>