Introducing Next® Enhanced Integrity Mode

Brand new security feature for everyone using Next® Digital workplace.

In today's world of continuous cyber threats, we have decided to step up once more in our efforts to keep your systems safe. Next® is an immensely flexible platform for document and process management. Most of this flexibility comes from configuration and parameter settings, but also from code extensions and flexible BPMN processes that can be uploaded to Next®.

Going forward, all extensions and processes must be digitally signed by Nextway to run in production mode - or Enhanced Integrity mode, as we call it.

If you, during development and test, decide to run Next® in Reduced Integrity mode, the Next® UI will clearly indicate and notify you that you are running in insecure mode.


Next® clearly indicates if it is running in insecure mode


The business log

Whenever you start Next® in Reduced Integrity mode, this is logged in the application log, and a Notification is sent to the Next® Operations and Next® Admin groups. 


Your Next® Digital Workplace was started in Reduced Integrity mode. 
In this mode, Next® may run unauthorized code and processes.
You should only run Next® in this mode for test purposes. 


For the techies

For an extension or a BPMN process to be digitally signed it must be built in the Nextway development environment. This eliminates a potential attack vector for malicious code. 

By allowing only signed extensions and processes to run, we also secure that every piece of code is in our authorized repository. Having all code in this repository lets us automatically verify compatibility with new releases, and thereby simplifying the update process. The aim is to deliver a SaaS-like always up to date experience to anyone running Next® - in the cloud or on premise.  

In a release prior to the release containing this new feature, we will include an automatic verification of your Next®. If this verification finds unsigned extensions or processes, it will send Notification to the Next® Admin group.

 

Your Next® Digital Workplace contains unsigned extensions or processes.

Once Enhanced Integrity mode is enabled, your Next® will not be able to start successfully.

Please contact Nextway. 


Future enhancements

We are constantly enhancing the security level of Next® and more will follow.

Additional information

Please refer to the online product guide for additional information on this feature, once it is released.

Commercial terms and conditions

This new feature is available at no additional cost, to users with an active subscription to Next®Any consultancy assistance will be invoiced separately.

Disclaimer

Despite our best efforts, we may be forced to change both content and expected delivery of future product updates without notice. 


Details

Title:

Introducing Next® Enhanced Integrity Mode

Type:

New feature

Status:

In planning

Expected release:

May 2023

Affected products:

Next® Contracts
Next® Emails

Next® Enterprise Archive
Next® Invoices
Next® Mailroom
Next® Processes

Audience:

Admin
Operations
Specialist

Classification:

Public

Responsible product manager:

Kim Hellum

Updated:

29.11.2022

By:

Kim Hellum