Description
We are thrilled to announce the availability of the latest version of Integration Service, IQService - June 2024 . This new release comes with enhanced capabilities aimed at offering improved security configurations and functional use cases. One of the key highlights of this update is the support for Group Managed Service Account (gMSA) as a service account in the Active Directory Connector.
Based on our previous announcement, we are super excited to announce that the new version of Integration Service, IQService - June 2024 is now available with the latest capabilities.
With respect to the dropped support versions, all the connector requests would start failing if the IQService version is older than IQService-Jun-2022. So if you are still using the older version, please plan to upgrade the IQService to the latest version to avoid any down time.
If update service is not configured in your environment to receive auto updates, refer to Update IQService for upgrading the IQService manually and configure update service to get the auto updates in future.
For more information, refer to the IQService documentation.
What is the Problem?
- There is no way to support Group Managed Service Account (gMSA) as a Service Account in the Active Directory connector.
- IQService not referring Subject Name in the certificate and dependent on the language set on the Operating System.
- There is no way to provide the list of trusted certificate names for Subject Alternative Name (SAN) and Subject match flow while using the IQService certificate based client authentication by UpdateService.
What is the Solution?
This release will include the following upcoming features and enhancements -
- Group Managed Service Account (gMSA) as a service account in the Active Directory Connector. This capability is dependent on the connector as well and it is part of the latest version of the connector.
- Improvements -
- If TLS for Domain settings is checked in the Active Directory connector, IQService will communicate on TLS port when enforcePasswordPolicy is set as true.
- IQService will now respect Subject Name in the certificate regardless of the language set on the Operating System.
- IQService certificate based client authentication by UpdateService now adheres to the provided list of trusted certificate names for Subject Alternative Name (SAN) and Subject match flow.
Action Required
- If customers are running IQService which is IQService-Jun-2022 or older version, please upgrade to the latest IQService version and also configure the updateService to ensure that your environment is auto updated with the latest features, bug fixes and security improvements. If you are already using the latest version and the updateService is healthy and running, your IQService upgrades automatically without any action item.