Viya Marketplace - TLS is still 1.0 for the storage account - Ecopetrol

[fnajera]

Hi team,

Hope you're doing very well.

The TLS version is not updated, it still in version 1.0 and that was retired in February. When will you migrate to TLS 1.2? This is a hard requirement for the security team in the company in Ecopetrol.

Please see the image attached.

[cj_blake]

Hi @fnajera - we have an open issue for this item which should be released soon. However, this will only affect new deployments. Will moving to a new PAYG deployment be OK for you?

[fnajera]

Hey @cj_blake , thanks for your response. We just did a new PAYG deployment a couple of days ago in order to have the update of the public ip vulnerability issue, and now we found this one. It's ok for us to do a new deployment if that will solve this TLS issue.

Can you please tell us when will be ready this solution? so we can do the new deployment.

[fnajera]

Hi @cj_blake hope you're doing well. Is there any update about this topic? Thank you!!

[cj_blake]

Hi @fnajera, I am sorry for the slow reply to this. We're looking to get the update out by the end of April.

[fnajera]

Thank you Blake. I will inform this to the company, and ping you in a couple of weeks to check if the updated has been released.

[cj_blake]

Hi @fnajera, today we have published a new version of SAS Viya Pay-As-You-Go to the Azure Marketplace. This update uses the latest LTS version of Viya, updates the TLS version used by the Storage Accounts to 1.2, and updates the Kubernetes networking to use Azure networking as opposed to Kubelet.

I have noticed that occasionally the home directory for the viya_admin user doesn't get created which can prevent sessions from starting correctly. The fix for me was to run the steps from this page: SAS Help Center: Add and Configure Users with one modification: during step 3, before running the final move command, run the following:

sed -i 's#(read input; printf "%s==" "$input") |##g' /tmp/create_homedir.sh

Also, as a pre-requisite to those steps, I did have to run "sudo mount -a"  so that the share where the home directories exist as mounted. I was then able to reset/properly start a SAS Studio session for the viya_admin user.

Hope this helps.

[fnajera]

Hey @cj_blake thank you so much for the update. We'll run the re-deploy and keep you posted about the result 🙂 

Thanks!