Announcements

Unlocking Innovation: Explore the Latest NIM Release - Discover Enhanced Features, Exciting Announcements, and More!

  2. v7.0.1866

    Service Release

    IMPROVEMENTS AND FIXES

    • REST - Fixed Pagination requests are failing in Skyward Qmlativ connectors. Search fields are not being sent after the initial pagination request.
    • Service - Fixed CVE-2026-111497

    KNOWN ISSUES

    • Snapshot restoration fails to restore internal.passwords table. Workaround: Manually extract passwords.csv from C:\ProgramData\Tools4ever\NIM\sysdata\snapshots\snapshots\snapshot_<date>\archive.tgz, then place the file in C:\ProgramData\Tools4ever\NIM\sysdata\internal and restart the service.

    References

    Add a comment

    Comments

  3. eMudhra Certificate Security Advisory: Upgrade NIM to v7.0.1865 or Later

    Security Advisory

    We recommend that customers running an earlier version of NIM upgrade to v7.0.1865 or higher as soon as possible to address the eMudhra certificate trust issue.

    Private keys associated with eight eMudhra intermediate certificate authorities were compromised. These keys could allow an attacker to impersonate trusted websites or services to applications that still trust the affected certificate chains. Details are available in the Mozilla incident report.

    This issue is resolved in NIM v7.0.1865 and later.

    Please schedule the upgrade during a maintenance window and verify your system connections afterward. If you cannot upgrade immediately, review our security advisory and remediation instructions.

    For assistance with upgrading or applying the interim remediation, contact Tools4ever Support.

    References

    Add a comment

    Comments

  4. v7.0.1865

    Service Release

    IMPROVEMENTS AND FIXES

    • Service - Use an updated version of node to remove the leaked emSign root certificates

    KNOWN ISSUES

    • REST - Pagination requests are failing in Skyward Qmlativ connectors. Search fields are not being sent after the initial pagination request. Workaround: Upgrade to v7.0.1866
    • Snapshot restoration fails to restore internal.passwords table. Workaround: Manually extract passwords.csv from C:\ProgramData\Tools4ever\NIM\sysdata\snapshots\snapshots\snapshot_<date>\archive.tgz, then place the file in C:\ProgramData\Tools4ever\NIM\sysdata\internal and restart the service.

    References

    Add a comment

    Comments

  9. v7.0.1864

    Service Release

    New Features

    11

    Password Reset Dashboard

    Password Reset module of NIM provides a multitude of possibilities but it's prime function is Account recovery via password reset. Previously SSRPM provide a landing page for multiple options (Enroll, Reset Password, Unlock, Manage Attributes, Lookup Username) NIM should provide an option to have a landing page that can provide options for different Password Reset profiles (e.g. Reset Password, Unlock Only). This provides a simple point of entry. Expansion on this is to allow only certain hostnames to be allowed. For example if my nim host name is "nim.domain.com", I maybe want to have password reset point to "reset.domain.com". This would mean then if I go to "reset.domain.com" I would land on the dashboard page to select my option.

    Mike Sheldon
    Released 🚀

    1

    17

    Workflows

    A proposed enhancement to the product is the introduction of workflows, allowing requests to be reviewed and approved by designated reviewers before proceeding. This would be particularly beneficial in scenarios such as application access requests or provisioning processes, ensuring oversight and compliance. How Workflows Would Improve the Product Approval Mechanism – When a user submits a request (e.g., access to an application or a provisioning action), it enters a workflow where assigned reviewers must approve or reject it before execution. Role-Based Reviewers – Approval requests could be routed to specific individuals based on their roles (e.g., managers, security officers, or compliance teams). Multi-Step Approvals – Workflows could support multi-tiered approvals where different stakeholders must review a request at various stages. Audit and Compliance – Each approval or rejection would be logged, providing a clear audit trail for governance and regulatory requirements. Example Use Case A user requests access to an HR application. Instead of immediate access, the request follows this workflow: Step 1: The user's manager reviews and approves the request.Step 2: If approved, the HR department reviews and grants final approval.Step 3: Upon approval, the provisioning process assigns the necessary permissions automatically. By incorporating workflows, the product enhances security, ensures compliance, and streamlines access management while preventing unauthorized changes.

    Mike Sheldon
    Released 🚀

    2

    • Apps - Show the selected basic or composed item
    • Apps - Form and table builder
    • SFTP - Support for host validation
    • AI - Added MCP plugins and improved the performance of the MCP server

    IMPROVEMENTS AND FIXES

    • AI - Sessions are validated on every request
    • Apps - Designer can't open app after library change when one of its composed items was created from a row padded with placeholder
    • Audit Log - Object Display Name is not getting updated when changed
    • Authentication - Basic authentication disallows users with saml or ldap authentication methods set
    • Certificates - Improved importing of various certificate chains
    • Filters - Session variables can now be used as default data type for filter parameter
    • Lookup Tables - Renaming could cause other tables to be unchecked in Internal System
    • Onboarding - Profile name no longer case sensitive.
    • REST - Support parallel page retrieval when the number of pages Is known
    • REST - Query params duplicating on next-url paging
    • REST - Not retrieving all pages with some last page detection mechanisms
    • REST - OAuth connector callback has now CSRF/state protection
    • REST - "extraHeaders" can now override the Accept header.
    • SAML - When logging in a check is performed that the IDP is the one bound to the user
    • SAML - XML injection in AttributeValue lets a user inject extra signed attributes
    • Scheduler - Mail server no longer causes job to stop on error
    • Scheduler - "Stop on Error" no longer gets checked on upgrade
    • Service - Improved CSP protection
    • Service - JavaScript now executes in strict mode by default
    • Service - Gated the log socket and improved socket security
    • Service - Updated nim script compiler settings to support development environment
    • Settings - Uploading images in the preferences page in Edge/Chrome works now
    • Settings - Uploading files bigger as the limit will not log you out anymore
    • Templates - Keep inserted NIM variables inside the surrounding formatting
    • Templates - Sort NIM variable and NIM table insert menus alphabetically
    • Templates - Insert/edit link - Remove useless "Open in new tab" option
    • Variables - Incorrect type (string) of session variable sessionUserID
    • UI - Grid header menus missing and copy functionality in grids was broken.

    KNOWN ISSUES

    • REST - Pagination requests are failing in Skyward Qmlativ connectors. Search fields are not being sent after the initial pagination request. Workaround: Upgrade v7.0.1866
    • Snapshot restoration fails to restore internal.passwords table. Workaround: Manually extract passwords.csv from C:\ProgramData\Tools4ever\NIM\sysdata\snapshots\snapshots\snapshot_<date>\archive.tgz, then place the file in C:\ProgramData\Tools4ever\NIM\sysdata\internal and restart the service.

    DOCUMENTATION

    Add a comment

    Comments