Categories
Knowledge Support exacqVision Enterprise Categories Products

Missing Icon Fonts in EM

Issue

EM Icon fonts not being displayed due to a new Windows 10 security feature that blocks fonts that are installed outside of the Fonts directory called Untrusted Font Blocking.

<br>

Here is an article explaining the feature:

<br>

​https://support.microsoft.com/en-us/help/3053676/windows-10-technical-preview-adds-a-feature-that-blocks-untrusted-font

<br>

Resolution

Changing the Mitigation Options value to 2000000000000 should resolve their issue.

<br>

How to turn on and use the blocking untrusted fonts feature

To turn this feature on, off, or to use audit mode, use one of the following methods.

<br>

Using Group Policy

  1. Open Local Group Policy Editor.
  2. Under Local Computer Policy, expand Computer Configuration, expand Administrative Templates, expand System, and then click Mitigation Options.
  3. In the Untrusted Font Blocking setting, you can see the following options:
    • Block untrusted fonts and log events
    • Do not block untrusted fonts
    • Log events without blocking untrusted fonts

<br>

Using Registry Editor

  1. Open Registry Editor (regedit.exe) and go to the following registry subkey:
  2. If the MitigationOptions key is not there, right-click and add a new QWORD (64-bit) Value, naming it as MitigationOptions.
  3. Update the Value data of the MitigationOptions key, and make sure that you keep your existing value, like the important note below:
    • To turn this feature on. Type 1000000000000.
    • To turn this feature off. Type 2000000000000.
    • To audit with this feature. Type 3000000000000.
    • Important: Your existing MitigationOptions values should be saved during your update. For example, if the current value is 1000, your updated value should be 1000000001000.
  4. Restart your computer.

<br>

Missing-Icon-Fonts-in-EM.pdf
Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Enterprise Manager Outbound Firewall Rules on Restricted Networks

Issue

Accessing our licensing server from Enterprise Manager on a restricted network will require an exception to the outbound firewall rules.  Please add exacq.com and port 443 to the outbound firewall rules to open access.

<br>

Version Affected

All.

<br>

Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Enabling stronger cipher/protocol security with Enterprise Manager

If your exacqVision Enterprise Manager is already using HTTPS as described in our Knowledge Base Article ‘How to Enable HTTPS for ESM’ you can make sure you are using strong ciphers and the most current ssl protocol using this document.

<br>

Locate and make the indicated changes to the file httpd-ssl.conf

<br>

Windows

C:\Program Files\exacqVision\EnterpriseManager\apache_solr\apache2\conf\extra\httpd-ssl.conf

<br>

Linux

/usr/local/exacq/esm/apache_solr/apache2/conf/extra/httpd-ssl.conf

<br>

Find SSLCipherSuite and SSLProxyCipherSuite and make sure they match the following.

<br>

Find the SSL Protocol Support section and make sure the following is set as follows.   Note, it may be possible to user TLSv1.3 but it has not been tested yet.

<br>

Verifying

To verify the endpoint is running as expected for your Enterprise Manager HTTPS site.

<br>

Run the following command from a Linux machine with openssl installed.

<br>

Note the output under SSL-Session.

<br>

Enabling-stronger-cipher-protocol-security-with-Enterprise-Manager.pdf