Data Center Expert release summary

Security updates

CVE-2019-11810 – Kernel: NULL pointer can lead to DoS

CVE-2018-9568 – Kernel: Possible escalation of privileges

CVE-2019-11135 – TSX transactions

California state legislature security updates for network-connected devices

Data Center Expert was updated to comply with California law for the security of connected devices.

Security updates

CVE-2019-11479 - Default MSS hard-coded to 48 bytes

CVE-2019-5489 - Page cache access 

CVE-2019-3896 - Privilege escalation DoS

CVE-2019-3863 - Out of bounds memory write error

CVE-2018-17972- Kernel task stack contents

CVE-2017-17805 - Zero-length inputs

SACK:

CVE-2019-11477 - Integer overflow in TCP Selective Acknowledgment (SACK) sequence

CVE-2019-11478 - TCP Selective Acknowledgment (SACK) sequence retransmission queue

See Data Center Expert Security for more information.

Updated support for Linux

You can now install the Data Center Expert client on RHEL 6.0 and CentOS 6.

Improved performance in the installed client

Loading times for sensors, thresholds, and device alarms are now faster in the installed client.

Improved reports in the web client

Saved reports in the web client now support 100 sensors.

Improved alarm resolution in the web client

You can now manually resolve threshold alarms in the web client.

Security updates

CVE-2018-14634 - Kernel privilege escalation vulnerability

CVE-2018-5391 - Kernel TCP “FragmentSmack” vulnerability

CVE-2002-0510 - UDP IP Zero

Microarchitectural Data Sampling (MDS):

CVE-2018-12130 - Fill buffers, known as ZombieLoad or RIDL

CVE-2018-12126 - Fallout

CVE-2018-12127 - Load buffers

CVE-2019-11091 - Uncacheable memory

Enhancements to Maintenance Mode

Administration and Device View and Control users can now schedule when to disable or re-enable notifications for any device or device group. The Maintenance Mode Schedules window displays the schedules to enter and exit maintenance mode, and provides options to view and modify schedules and comments.

Compressed backups

You can now choose to compress a backup. The compressed backup is a single tar.gz file with a .dce file extension for easier filename filtering.

EcoStruxure IT

The name of the StruxureOn option was updated to EcoStruxure IT. There is no change to the connection to EcoStruxure IT (formerly StruxureOn) from DCE.

IP addresses of discovered nodes

You can now change the IP addresses of discovered nodes without losing data.

The v7.7.0 release updates Java to version 1.8.0.201.

Security updates

ZipSlip

Further enhancements to maintenance mode

Administration and Device View and Control users can now schedule when to disable or re-enable notifications for any device or device group. A new Maintenance Mode Schedules window displays the schedules to enter and exit maintenance mode, and provides options to view and modify schedules and comments.

Compressed backups

You can now choose to compress a backup. The compressed backup is a single tar.gz file with a .dce file extension for easier filename filtering.

EcoStruxure IT

The name of the StruxureOn option was updated to EcoStruxure IT. There is no change to the connection to EcoStruxure IT (formerly StruxureOn) from Data Center Expert.

IP addresses of discovered nodes

You can now change the IP addresses of discovered nodes without losing data.

Security updates

Meltdown (CVE-2017-5754), Spectre (CVE-2017-5753, CVE-2017-5715)

For more information about these software vulnerabilities, see this Schneider Electric Security Notification.

Maintenance Mode improvements

Device view and control users can now use maintenance mode.

SSL protocol selection

You can now select the allowed SSL protocols for the web server and private proxy.

Improvements to Device Definition File (DDF) support

Device Definition Files (DDF) have been updated to address duplicate sensor entries.

StruxureOn Digital Service registration improvements

You now register your Data Center Expert server using the claim code link in the StruxureOn > Registration option.
You now manage your contact list on https://struxureon.com/manage instead of in Data Center Expert.

Improvements to Device Definition File (DDF) support
Device Definition Files (DDF) for APC Smart-UPS, ACRC301, APC DC Magnum, and EcoBreeze have been updated to address most duplicate sensor entries in Data Center Expert. Contact your local technical support if you have questions about a specific sensor value.

Improvements to Modbus polling
Modbus polling is no longer affected by prolonged network disruptions.

This release patches the latest OpenSSL vulnerabilities to improve security and updates to Java 8 version 102.

StruxureOn Digital Service

You can now connect your Data Center Expert server to the StruxureOn Digital Service. See https://struxureon.com for more information.

Prompt to change the default username and password

You are now prompted to change the default username and password when you first log in to the client. You can change the default credentials at that time, at a later time, or opt to keep the default credentials.

This release updates the server operating system to improve security and updates to Java 8 version 65.

Support for Adding, Deleting, and Modifying Users on NMC v6.x Devices
In the APC SNMP Device Configuration option, the "Configuration Type" display is now available when at least one monitored APC SNMP device has firmware v6.0.0 and higher, excluding v6.0.6 - v6.1.1. There are now two device configuration types:

• Standard device configuration settings: Select one or more monitored APC SNMP devices and configure them to use settings shared with a selected APC SNMP device, or settings saved as a template.
• User configuration (APC AOS versions v6.0.0 and higher, excluding v6.0.6 through v6.1.1): Modify user management options on devices with firmware v6.0.0 and higher, excluding v6.0.6 - v6.1.1.

Note: You must upload a .csf file directly to the device to configure users on devices with older firmware v6.0.6 - v6.1.1.

Additional NFS options
Users can now configure the transport protocol (TCP or UDP) and NFS version (v2.0, v3.0, v4.0, or v4.1) for the Server Backup/Restore NFS option in the System > Server Administration menu and the Manage Export Scheduling option in the Reports menu.

Additional Windows Share options
Users can now configure the NT LAN Manager authentication level (NTLM, NTMLi, NTLMv2, NTLMv2i, NTLMSSP, or NTLMSSPi) for the Server Backup/Restore options in the System > Server Administration menu and the Manage Export Scheduling option in the Reports menu.

Modbus discovery retries
Users can now specify how many times Data Center Expert will try to discover a Modbus device and communicate with it after the first attempt is unsuccessful.

Open SSL patches

This release patches the latest OpenSSL vulnerabilities to improve security.

Latest time zone data

This release updates to Java 7 version 79 to include the latest time zone data.

Open SSL patches

This release patches the latest OpenSSL vulnerabilities to improve security.

Latest time zone data

This release updates to Java 7 version 71.

Customer Experience Program

The Customer Experience Program helps Schneider Electric improve Data Center Expert and the features you use most often. The usage data collected are stored anonymously. You can disable participation in the Customer Experience Program in Client Preferences, accessed from the File menu.

Enhancements to Sensor History Reports

Graph-format sensor history reports now contain fifteen graph line colors.

Community

A link to the Community is now available in the Help menu.

The 7.2.1 release supports an upcoming hardware revision for Data Center Expert Enterprise servers to the Dell™ PowerEdge™ R720.

Data Center Expert Enterprise server running on the Dell PowerEdge R720 requires a minimum of v7.2.1.

Users can apply a v7.2.0 backup to restore server data to v7.2.1 if necessary.

Data Center Expert product name

StruxureWare Central is now called StruxureWare Data Center Expert.

Device Discovery by Device Administrator Users

Device Administrator users now have the ability to discover devices into device groups to which they have access.

Device Discovery into a Device Group

In the Device Discovery wizard, an additional display is now available to select one device group into which to place discovered SNMPv1, SNMPv3, NetBotz Appliance, or Modbus devices. Server Administrator users can place devices into any device group. Device Administrator users can place devices into only the device groups to which they have access.

Enhanced Rack Access PX Support

Rack access PX handle locks can now be controlled from the Data Center Expert client via SNMP.

Data Center Expert Web Client Enhancements

The Data Center Expert server home page has been replaced by the Data Center Expert Server web client, available on a computer, tablet, or mobile device with an internet browser, in English only. The web client now allows you to do the following:

• • Download the full Data Center Expert client, and view status and logs.

• • Create customized pages and add gadgets in the desktop version to display the Data Center Expert server data you want to see at-a-glance using the desktop, tablet, or mobile versions.

• • View saved graph-format reports generated on the Data Center Expert server that contain 25 numeric sensors or less and no more than 2 axes.

• • View a log of Data Center Expert system events, user-initiated control and configuration events, and user authentication events, including failed login attempts.

• • Search for active alarms, sensors, devices, and device groups for the Data Center Expert server based on text you type, or using query syntax to filter results by category or attribute.

Data Center Operation Suite on a Separate Server

The Data Center Operation Suite no longer resides on the Data Center Expert server.

To upgrade from a previous version of Operations running on a StruxureWare Central 7.0 server, you must first back up the StruxureWare Central 7.0 server. You then install the separate Data Center Operation server and clients, and migrate the data from the StruxureWare Central 7.0 backup to the Data Center Operation server.

For more information, see the documentation for Data Center Operation.

StruxureWare Central Virtual Appliance

The StruxureWare Central 7.0 server is now available as a virtual appliance, supported on VMware. The full-featured demo of the virtual appliance monitors up to five device nodes and one surveillance node. You can purchase a license key to upgrade to a production version to monitor additional device nodes and activate supported applications, or to migrate from a StruxureWare Central server hardware version to a StruxureWare Central virtual appliance.

StruxureWare Central Web Client

The StruxureWare Central web client provides a real-time overview of active alarms and device details for the StruxureWare Central 7.0 server. The StruxureWare Central web client is available on a computer, tablet, or mobile device with an internet browser, in English only.

Create Virtual Sensor Option

Users with Device Administrator or Server Administrator access can create virtual sensors for the StruxureWare Central server. A virtual sensor allows you to view and monitor the average or total value of multiple numeric sensors of the same sensor type.

RAID Battery Status Notification for StruxureWare Central Enterprise Server

There is now an entry in the StruxureWare Central server log when the RAID battery is in a warning or critical state. You access the log from the web page for your StruxureWare Central server.

Additionally, a system event email is now sent to all Administrator users when the RAID battery status escalates from OK to Warn, from OK to Error, or from Warn to Error. The email is repeated once a week while the status remains at Warn or Error. No email is sent when the condition is resolved

Updated Login Dialog

The StruxureWare Central client login dialog has a more modern look.

Support for 2048 bit SSL Certificates

The StruxureWare Central server now generates Certificate Signing Requests (CSR) using 2048 bit keys.

Unit of Measure Column Added

A Unit of Measure column is now available in the Create Virtual Sensor and Create Thresholds dialogs, and the Report Criteria display, making it easier to select like-type sensors.

Column Selector Option Available in Additional Displays

The ability to configure columns is now available in the following displays:

• • “Edit Report Criteria” display, accessed from the Reports perspective.
  • “Add to map” display, accessed from the Map View.
  • “Select Sensors” display, accessed from the Create Thresholds option in the Alarm Configuration perspective.

StruxureWare Central product name

InfraStruxure Central is now called StruxureWare Central.

Outlet Control for Supported Rack PDU devices

Users can now control outlets on supported APC Rack PDU devices, and third party Rack PDU devices with DDFs that include outlet control, using the “Outlet Control” display in the Monitoring perspective.  Note: The StruxureWare Central server cannot determine whether outlets are part of an outlet group.

Additional Device Group Access for Monitoring and Surveillance

A user with the Monitoring device group access “View Access – No Camera Images” can view alarms and sensor information for devices, but cannot view the live feed in the “Device Sensor” display or view clips included in alarm notifications.

A user with the Surveillance device group access “View Live Feed Only – No Camera Clips” can view the live feed from camera devices, but cannot access historical clips associated with those camera devices.

Rack Access Control and Configuration for NetBotz Appliances

Users can now control locks on rack doors monitored by the NetBotz Rack Access PX-HID, or Rack Access Pod 170 devices associated with supported NetBotz Appliances using the “Rack Access Settings” display in the NetBotz Appliance Configuration option.

Alarm Notification Suppression

Users can now acknowledge active alarms and suppress future notifications.

Comments Field for Active and Historical Alarms

InfraStruxure Manager Migration Utility

InfraStruxure Central v6.2 provides a utility used to migrate settings and other important data from an InfraStruxure Manager v4.7 to an InfraStruxure Central v6.2 server. When migration is complete, the InfraStruxure Central server will manage devices previously managed by the InfraStruxure Manager.

Migration of a fully configured InfraStruxure Manager, monitoring the maximum number of nodes, can take over twenty-four hours to complete when the InfraStruxure Manager data log is included in the migration. When the data log is not included, migration can take up to one hour. When a migration that includes devices on the private LAN is complete, the InfraStruxure Manager will be turned off.

Enhanced Alarm Configuration

Users can now modify device alarm configurations, changing the default values to better comply with their IT management policies.

New Reports perspective

Predefined summary reports and user-customized sensor history reports are now in one Reports perspective. Users can now create graph-format, summary-format, or table-format custom sensor history reports, modify the report criteria, and export or save these reports. Additionally, users can generate pre-defined graph-format snapshot reports for the devices or device groups the InfraStruxure Central server monitors, and export them as HTML, CSV (comma delimited), or PDF. 

Trending and Analytics

Users can now include a trend line on a graph-format report to predict future sensor values based on past data sets when all numeric sensors included in the report use the same unit of measure.The trend is calculated using a linear regression model and the ordinary least squares estimation method. All the available data returned by the InfraStruxure Central server for the sensors selected, and the time range specified for the report, are considered in the model. The data are extended for twice the specified time range to create the trend line.

Client Preferences

Users can now open a browser in a view inside the InfraStruxure Central client to automatically logon to the user interface of devices that use basic authentication.

License Keys

Users can now view information about installed license keys and copy it to a document.

Open LDAP Authentication

The InfraStruxure Central server now requires OpenLDAP for secure communication with a Linux authentication server.

Server SSL Certificates

The user can now import SSL certificates used for secure communication with an SMTP server, Active Directory or OpenLDAP server, or a NetBotz Appliance. The STARTTLS extension is required to communicate with SMTP servers using the Secure SMTP protocol

Storage Settings Purge Option

Users can now manually purge alarm history data.

Rack Access Configuration

Users can now configure Rack Access Users settings in the APC SNMP Device Configuration wizard “Configure Device Settings” display.

Surveillance Settings

Users can now access configuration options in a right-click menu in the Camera view.

Macros

Additional alarm action macros are now available.

Identification macros:

• • ${SERVERIP}: The dotted-decimal IP address of the InfraStruxure Central server.
  • ${SERVERHOSTNAME}: The hostname of the InfraStruxure Central server.
  • ${SERVERMODEL}: The model of the InfraStruxure Central server. 

Alarm macros:

• • ${ALERTTYPENAME}: The ${ALERTTYPE} value, displayed in the language appropriate for the InfraStruxure Central server locale.
  • ${ALERTSEVNAME}: The ${ALERTSEV} value, displayed in the language appropriate for the InfraStruxure Central server locale.
  • ${DEVICELABEL}: The label of value of the device that either contains the sensor that reported the alarm or to which the sensor is connected.

6.1,

6.1.1

August,

September 2010

The InfraStruxure Central v6.1 release supports new features in InfraStruxure Operations v6.1 only. There are no new features available in InfraStruxure Central v6.1. APC recommends updating to InfraStruxure Central v6.1 to support InfraStruxure Operations v6.1 only.

6.0

6.0.2

January,

June 2010

Improved Icons

Many icons in the InfraStruxure Central user interface have been redesigned to provide a more intuitive experience while navigating the application.

Updated Menu Options

Redesigned the contents of the menu bar for additional clarity and functionality.

Modbus TCP Device Support

InfraStruxure Central can now discover and monitor devices that use the Modbus TCP protocol and Modbus RTU devices that are connected to a Modbus RTU to Modbus TCP gateway.

New Perspectives

InfraStruxure Central now provides three new perspectives to help manage your devices:

Alarm Configuration – Modbus and SNMP device alarm configuration is now handled in the Alarm Configuration perspective. Users can create thresholds, notification policies, and alarm actions. NetBotz devices are handled in the same manner as previous releases.

Summary Reports – Five pre-defined reports are available in the Summary Reports perspective. By default, two views appear in the Summary Reports perspective. These views allow you to generate, view, print, and export reports in HTML, CSV (comma-delimited), or PDF format for the device groups selected.

• • All Reports View: lists the Available Reports for the devices the InfraStruxure Central server monitors, and allows you to generate those reports for selected device groups
  • Report View: displays the reports generated for the device groups selected, and allows you to print and export those reports.

Power Management – InfraStruxure now supports the PowerLogic™ ION Enterprise™ server. When the ION Enterprise integration is enabled through the InfraStruxure Central user interface, and the client is rebooted, the Power Management perspective will be enabled. This allows users to access the ION Enterprise view. 

Custom Property Support

Users can now create custom properties that can appear as columns in the Monitoring perspective views and the Device Sensors display. Custom properties are created in a new view, the Custom Properties Editor.

Maintenance Mode

InfraStruxure Central now has a way to disable notifications for a device or device group. Enabling “Maintenance Mode” for a device or device group will disable any notifications from those devices until the mode is disabled again.

Trend Lines in Graphs and Reports

Graphs and reports in InfraStruxure Central now have the option to show trend lines, which track the moving average value of the chart data.

Device Launch with Automatic Log In

You can provide credentials to automatically log in to the web interfaces of APC SNMP devices with the following Network Management Card and firmware revisions:

• • rPDU with Network Management Card firmware revision 3.7.1 and higher.
  • APC SNMP devices with a Network Management Card (AP9617, AP9618, or AP9619) with firmware revision 3.7.0 and higher.
  • APC SNMP devices with a Network Management Card (AP9630, AP9631, AP9635) with firmware revision 5.1.0 and higher.

Support for Static IPs on the Private LAN

InfraStruxure Central now supports two private LAN sectors (Network A and Network B) that can be used to separate devices that use DHCP address assignment and static IPs. Devices which require static IPs can be added to the Network B LAN. When devices are reset on the DHCP Discovery tab, the IPs of devices on Network B will not be reset.

InfraStruxure Central Server Can Now Be Used As Standalone NTP Server

Users can now set the InfraStruxure Central Server as an NTP server without syncing with an external NTP server.

New Communication Link Status Threshold

Users can configure a new threshold – “Communication Link Status” – for SNMP and Modbus devices in the Alarm Configuration perspective. This threshold is triggered when communication is lost with the device, and replaces the off-line alarm configuration capability in previous releases.

Frequency filter in Graphing/Reporting

Users can select the report interval time when creating a data report or a data graph.

InfraStruXure Central

Improved Usability

New user interface to match Change and Capacity Manager

Cohesive look and feel

Superior usability over current user interface

Scalability

Increased maximum node count (currently 1025)

Standard Up to 2025

Enterprise Up to 4025

New Functions

Mass firmware updates of APC Network Management Cards

Remote Monitoring Service Support

Vastly improved alerting (speed and configuration)

New, Low Cost, Entry InfraStruXure Central platform

ISX Central Basic – matches ISX Manager entry price point

All the same great ISX Central features

Up to 525 nodes

Optional Surveillance add on for 15 cameras

Localized User Interface

Japanese, German, Russian, Simplified Chinese, Korean, French, Spanish, Italian, Portuguese