FileWave Version 13.1.5
FileWave Management Suite
Included in the Installer
Compatibility
Server
Booster
Clients
Admin
Mobile Clients
Compatibility Chart
New Features (13.1.5)
macOS Catalina brings new restrictions and security changes; one of these changes is the new Read-Only System Volume, introduced to protect the system from un-wanted changes. As your FileWave server stores files in /fwxserver, it is impacted by this change.
FileWave 13.1.5 is now locating files in /usr/local/filewave/fwxserver; if you are upgrading from a previous version, files will be moved during upgrade.
If you upgrade from a previous version of FileWave, /fwxserver will be moved to its new location. In case moving is not possible (specific mount point for instance), upgrade will stop and will require manual data folder move.
For Details please refer to fwxserver folder relocation in FileWave Server 13.1.5+ on macOS and Linux Platforms
Backup Script Update:
With the relocation of /fwxserver, the backup script must be updated on your server to ensure a proper backup is being captured.
Please reference the following for more information; https://kb.filewave.com/display/KB/Automated+Backup
Generated self-signed cert is compliant with iOS 13, tvOS 13 and macOS 15 new security requirements.
fwcontrol generateSelfSignedCert command uses previous private key, allowing to unblock already upgraded devices
FileWave clients are identified by a user-friendly identifier (client name) and a machine-fingerprint identifier (device id). Re-enrolling devices with a different name or enrolling a new device with the same name as an existing client creates duplicated entries in the system, which can lead to various problems. FileWave 13.1.5 integrates duplicated detection:
At enrollment time; enrolling a device matching either the client name or the fingerprint, but not both (so not a in place re-enrollment) will not be possible without solving the conflict (removing the old entry or ignoring the new enrollment).
tools are provided to detect and resolve existing duplicated entries
OpenSSL updated to 1.0.2t
New Features (13.1)
Click here to expand...
Security Enforcement
End-to-End encrypted notifications
TLS certificates for all FileWave components:
Clients and boosters now request a certificate when added to FileWave; the certificate is checked by other peers (client contacting booster, booster contacted by client…) to ensure communications are safe
Boosters now need to be enrolled to be allowed to communicate
Compatibility mode allows to transition to 13.1
New admin permissions
Activation Lock Bypass code management
Server preferences
OCSP Stapling support
Updated MDM enrollment to follow updated Apple guidelines
Device Management
Analytics
Analytics are now collected daily and sent to an Elasticsearch database
Information collected is the following:
License information and usage
Number of clients per device type
Map of versions for clients/server/boosters
Logging level
Number of Filesets
Imaging usage (count and associations)
Number of fileset groups and number of associations to fileset groups
Server and Boosters OS version
Available and used disk-space
Engage configuration
Classroom configuration
Number of model updates in the past 24h
Number of restarts in the past 24h
WebUI usage (general and fileset reinstall
The information is packed in a JSON file and sent to Logstash for data validation and enrichment
UCS Improvements
Apple "Spring 2019" release support
Support for iOS 12.2, tvOS 12.2, macOS 10.14.4
Classroom can now be used on macOS
New or updated profiles:
macOS - Restrictions - new options (Classroom, screen sharing related)
macOS - Exchange - authentication options for Exchange Web Services
macOS - Security And Privacy - FireWall can be excluded from the profile
macOS - Content Caching has now more options
macOS - Setup Assistant - "Skip True Tone" option
macOS - Mobile Account - cachedaccounts.askForSecureTokenAuthBypass option
Transparency and Consent Configuration profile has now a dedicated entry
iOS - Restrictions - new options for Personal Hotspot modification and disable server-side Siri Logging
iOS - Restrictions - allowESIMModification option
tvOS - Restrictions - defer software update and force automatic date and time
New Certificate Transparency Profile
New MDM commands:
Enable or Disable Remote Desktop (macOS)
UnlockUserAccount - allows to unlock a local user account that has been locked for too many failed password attempts (macOS)
Support for iOS Per-App-VPN, which allows to configure a specific VPN for a specific application.
Support for iBoss Per-App-VPN
Support for tvOS Software Update
Update DEP profile:
New Skip Item : "SIMSetup" (iOS)
Updated Admin Account creation for macOS
Support for MDM Activation Lock
Improved Shared iPad support:
When non-current user is deleted, current user won't be logged out.
Scheduled log out verifies now iOS updates
Android (EMM) support
Additional Information
Included Open Source Software
Click here for an extensive list of Open Source Software included in the FileWave products.
Fixes in 13.1.4 and 13.1.5
Fixes in 13.1.2
Fixes in 13.1.1
Downloads
Your existing FileWave Server must be version 12.0.3 or higher before you can upgrade to FileWave 13.1+.
Upgrading
Please read: https://kb.filewave.com/display/KB/Upgrading+your+FileWave+Server
This article contains important information that will help ensure your upgrade runs smoothly. It is strongly advised that you review this for each release, since new notes or instructions may have been added.
Please make sure you have a recent backup before upgrading your server.
Upgrading FileWave requires the FileWave Imaging Appliance (IVS) is upgraded to a compatible version to ensure communication continues. Example: FileWave 13.1.0 requires the 6.1 IVS to image your computers.
The FileWave Engage Server must be version 1.2.0 or greater for compatibility.
In order to avoid problems with migrating database internal structures please make sure that you use a local administrator account, not domain administrator, when performing FileWave Server upgrade on Windows platform.
Location Tracking
The location reporting feature in FileWave is disabled by default.
It is recommended that you verify that this feature is in accordance with your organization’s policies and AUP (Acceptable Use Policy). Notify your end users before activating location reporting, as enabling the feature will prompt for permission to location information.
Read more... The Location Tracking KB (https://kb.filewave.com/display/KB/Location+Tracking)
Before Upgrading
Version 13.0.x introduces higher security standards which have impact on self-signed certificate usage.
While it is recommended to use Trusted-CA issued certificates, you can still use self-signed certificate with FileWave; please make sure you follow the upgrade steps described in this KB article.
Following upgrade steps is important to make sure your FileWave setup works properly !
With FileWave 13.0.x, FileWave uses new Apple Push Notifications service with HTTP/2 protocol; make sure your FileWave server can contact https://api.push.apple.com (port 443).
Security Changes
Starting with FileWave 13.1.0, all components (clients and boosters) will be assigned a certificate to validate their access to your FileWave instance. This implies that Boosters need to be enrolled to be part of your FileWave setup.
When upgrading, a Compatibility Mode will automatically be enabled to ease transition; in this mode, already enrolled clients will automatically be assigned a certificate, but Boosters will require manual "create certificate" operation once upgraded to 13.1.
You can figure out which booster requires a certificate by looking at the booster view.
If you are using a self signed certificate for your FileWave Server, Booster trust store needs to be updated to trust this certificate. The easiest way is to go through our Custom Package Builder Service and generate a Booster Package which will contain the server certificate.
Web admin console
With version 13.0.x comes the first iteration of FileWave web-based admin console. It will be installed automatically and uses default HTTPS port (443).
Upgrade to 13.0.x will fail if port 443 is not available (upgrade will fail without upgrading your server, leaving it with the previous version running).
It is recommended to use a dedicated server for FileWave; if you want to share the server with other services that require HTTPs port, follow the following steps:
macOS Downloads
Windows Downloads
In order to avoid problems with migrating database internal structures please make sure that you use a local administrator account, not domain administrator, when performing FileWave Server upgrade on Windows platform.
Linux Downloads
Note: Use the following command to download and unzip the installers:
wget https://fwdl.filewave.com/13.1.5/FileWave_Linux_13.1.5.zip
unzip FileWave_Linux_13.1.5.zip
Since v11+ only has one installer (that installs both mdm and server), the old standalone mdm will be removed automatically when doing an upgrade. This does not delete any mdm data.
To install or upgrade the FileWave Server, use the following :
yum install -y --nogpgcheck fwxserver-13.1.5-1.0.x86_64.rpm
To install or upgrade the FileWave Booster, use the following :
yum install -y --nogpgcheck fwbooster-13.1.5-1.0.x86_64.rpm
iOS Downloads
This is a native app version of the traditional Web Clip kiosk/app portal that is sent to devices; it provides for a better end user experience and is highly recommended for iOS 9 devices (required for location information).
iOS 9+ : FileWave Enterprise.ipa
Static CDN URL :
https://fwdl.filewave.com/13.1.5/app_kiosk/filewave/App%20Portal%2013.1.5.ipa
Android Downloads
This is the Android APK, and can be downloaded and associated to update already enrolled Android Devices.
FileWaveClient-13.1.5.apk
Skeleton for Android white-boxing
Chrome
The FileWave Inventory extension for Chromebook has to be installed via the Google Admin Console for your domain. Please see Quickstart Guide for Chromebooks for detailed instructions
Skeleton for Chromebook white-boxing
Virtual Appliance Downloads
VMware and VirtualBox (OVA) Server Appliance
VMware and VirtualBox (OVA) Booster Appliance
For more information about importing the appliances please see: Importing Virtual Appliances
Hyper-V Appliance Downloads