Search
-
- Already released
Introducing Next® Enhanced Integrity Mode
Brand new security feature for everyone using Next® Digital workplace.
In today's world of continuous cyber threats, we have decided to step up once more in our efforts to keep your systems safe. Next® is an immensely flexible platform for document and process management. Most of this flexibility comes from configuration and parameter settings, but also from code extensions and flexible BPMN processes that can be uploaded to Next®.
Going forward, all extensions and processes must be digitally signed by Nextway to run in production mode - or Enhanced Integrity mode, as we call it.
If you, during development and test, decide to run Next® in Reduced Integrity mode, the Next® UI will clearly indicate and notify you that you are running in insecure mode.
Next® clearly indicates if it is running in insecure mode
The business log
Whenever you start Next® in Reduced Integrity mode, this is logged in the application log, and a Notification is sent to the Next® Operations and Next® Admin groups.
Your Next® Digital Workplace was started in Reduced Integrity mode.
In this mode, Next® may run unauthorized code and processes.
You should only run Next® in this mode for test purposes.
For the techies
For an extension or a BPMN process to be digitally signed it must be built in the Nextway development environment. This eliminates a potential attack vector for malicious code.
By allowing only signed extensions and processes to run, we also secure that every piece of code is in our authorized repository. Having all code in this repository lets us automatically verify compatibility with new releases, and thereby simplifying the update process. The aim is to deliver a SaaS-like always up to date experience to anyone running Next® - in the cloud or on premise.
In a release prior to the release containing this new feature, we will include an automatic verification of your Next®. If this verification finds unsigned extensions or processes, it will send Notification to the Next® Admin group.
Your Next® Digital Workplace contains unsigned extensions or processes.
Once Enhanced Integrity mode is enabled, your Next® will not be able to start successfully.
Please contact Nextway.
Future enhancements
We are constantly enhancing the security level of Next® and more will follow.
Additional information
Please refer to the online product guide for additional information on this feature, once it is released.
Commercial terms and conditions
This new feature is available at no additional cost, to users with an active subscription to Next®. Any consultancy assistance will be invoiced separately.
Disclaimer
Despite our best efforts, we may be forced to change both content and expected delivery of future product updates without notice.
Details
Title:
Introducing Next® Enhanced Integrity Mode
Type:
New feature
Status:
In planning
Expected release:
May 2023
Affected products:
Next® Contracts
Next® Emails
Next® Enterprise Archive
Next® Invoices
Next® Mailroom
Next® Processes
Audience:
Admin
Operations
Specialist
Classification:
Public
Responsible product manager:
Kim Hellum
Updated:
29.11.2022
By:
Kim Hellum