Introducing Next® Enhanced Integrity Mode

Brand new security feature for everyone using Next® Digital workplace.

In todays world of continuous cyberthreats we have decided to step up once more in our efforts to keep your systems safe. Next® is an immensely flexible platform for document and process management. Most of this flexibility comes from configuration and parameter settings, but also from code extensions and uploadable BPMN processes.

Going forward, all extensions and processes must be digitally signed by Nextway to run in production mode - or Enhanced Integrity mode as we call it.

If you during development and test, decides to run Next® in Reduced Integrity mode, the Next® UI will clearly indicate that you are running in insecure mode.


Next® clearly indicates if it is running in insecure mode

The business log

Whenever you start Next® in Reduced Integrity mode, this is logged in the application log, and a Notification is sent to the Next® Operations and Next®, and Admin groups. 


Your Next® Digital Workplace was started in Reduced Integrity mode. In this mode, Next® may run unauthorized code and processes. You should only run Next® in this mode for test purposes. 

For the techies

For an extension or a BPMN process to be digitally signed it must be build in the Nextway development environment. This eliminates a potential attach vector for malicious code. 

By allowing only signed extensions and processes to run, we also secure that every piece of code is in our authorized repository. Having all code in this repository lets us automatically verify compatibility with new releases, and thereby simplifying the update process. The aim is to deliver a SaaS-like always up to date experience to anyone running Next® - in the cloud or on premise.  

In a release prior to the release containing this new feature, we will include an automatic verification of your Next®. If this verification finds unsigned extensions or processes, it will send Notification to the Next® Admin group.

 

Your Next® Digital Workplace contains unsigned extensions or processes. Once Enhanced Integrity mode is enabled, your Your Next® will not be able to start successfully. Please contact Nextway. 

Future enhancements

We are constantly enhancing the security level of Next® and more will follow.


Additional information

Please refer to the online product guide for additional information on this feature, once it is released.

Commercial terms and conditions

This new feature is available at no additional cost, to users with an active subscription to Next®. Any consultancy assistance will be invoiced separately.

Disclaimer

Despite our best efforts, we may be forced to change both content and expected delivery of future product updates without notice.

  

This suggestion is awaiting technical approval.

  


Details

Title:

Introducing Next® Enhance Integrity Mode

Type:

New feature

Status:

In planning

Expected release:

January 2022

Affected products:

Next® Contracts
Next® Emails

Next® Enterprise Archive
Next® Invoices
Next® Mailroom
Next® Processes

Audience:

Admin
Operations
Specialist

Classification:

Public

Responsible product manager:

Kim Hellum

Updated:

21.09.2021

By:

Kim Hellum