Software Status Bulletin

OpenLAB ECM XT     M8640AA

Preface
-------------------------
This Software Status Bulletin (SSB) documents all known problems in the software
product designated above. The SSB is derived from Known Problem Reports (KPR)
which result from user problems that have been classified as documentation
problems or software defects. When a KPR is written, an identifying number is
assigned to it, and the KPR is added to the next edition of the SSB.

User inputs that have been classified as Enhancement Requests are not documented
in the SSB. User problems that have been submitted, but that have not been
classified by the time the SSB is generated are not included in the SSB.

How to use the SSB
-------------------------
When you experience a problem with a product, first check this SSB to see if the
problem has been reported already, and if there is a temporary workaround
available for the problem, or if the problem has already been fixed by a new
revision. If the problem is not listed in this SSB then you may wish to report
it to the Response Center or to your field support representative.

To determine if your problem is documented in this SSB, first look in the
Keyword Index section of the SSB. Under each keyword is a listing of one-line
descriptions of related KPRs. If any of these sound like yours, locate the KPR
# in the Known Problem Reports section of the SSB, and read the full KPR. The
KPRs in the Known Problem Reports section are sorted by KPR #.

There are two sections in the SSB:
Keyword Index: This index is categorized by keyword. For each KPR there is a
brief description and a KPR #. A KPR may be associated with more than one
keyword.

Known Problem Reports: This section contains KPRs, with all the available
information relevant to the problem. KPRs in this section are sorted by KPR #.

Keyword Glossary

Keyword Index

Keyword: Acquisition

KPR#:635218 "Agilent Test Services" and "Agilent Test Services Central Management" services are not started after a server restart
KPR#:1048903 AIC replication issue in mixed CDS / MassHunter systems

Keyword: Admin Reports

KPR#:940702 Roles and Privileges Report causes error

Keyword: Administration

KPR#:376731 Not possible to delete project related files form the Content Management user interface.
KPR#:477707 No specific privilege is required to access the CM Admin console
KPR#:487437 Java JMX RMI vulnerability
KPR#:534773 Restore fail when the new server is on a different subnet
KPR#:535524 After restoring a Backup taken by the Backup Utility, the Sample Scheduler Service is not started
KPR#:549030 Archive fails if a file with the same name has already been archived
KPR#:567527 Backups can fail if the available C disk storage space is too small
KPR#:567986 Backup aborts due to timeout error
KPR#:577035 Installation stalls at Agilent Distributed Transaction coordinator install step
KPR#:586964 Reverse proxy configuration API could be used to maliciously redirect credentials.
KPR#:588444 Archive of file fails if it is checked-out when using automated archive
KPR#:588447 If one archive job fails, the others should continue
KPR#:588450 Archive jobs get stuck, requiring a cleanup
KPR#:588458 Archive job in a sub-folder should be removed when manually archiving a parent
KPR#:600186 Data files with names including semicolons (;) cannot be uploaded to Content Management
KPR#:604986 Error message occurs if server name in Storage Locations contains dot on Content Paths page
KPR#:663493 OpenLab ECM XT not affected by security issues in log4j-1.2.17
KPR#:687074 Customer IT scan identified vulnerability CVE-2021-4104
KPR#:694366 Script to update system passwords seems to update the wrong registry elements
KPR#:708013 Include latest BSSN Update for log4j
KPR#:714173 Analytics.json moved to OpenLab Platform and no longer listed in Diagnostics save files
KPR#:720429 OpenLab Server and OpenLab ECM XT v2.7 won't add user in a multi-forest domain
KPR#:751588 Multiple domain support is lost after upgrade
KPR#:775015 Using different capitalization when loggin in to the Content Browser with a new user causes error
KPR#:809534 DHE Vulnerabilities
KPR#:954003 Cannot resotre FB database
KPR#:954006 Rest API crashes with domain users in CP but removed from domain
KPR#:975586 OpenLab ECM XT support for IMDSv2
KPR#:978567 Alfresco license file is removed
KPR#:1031959 Apache Log4j 1.x Security Vulnerabilities
KPR#:1048901 The AGTOL.log file is missing from 2.7 systems
KPR#:1050877 PostgreSQL 14 Update
KPR#:1088692 Previewing chromatography file gives error in alfresco log
KPR#:1098043 "Admin console-Support tools-Active sessions" displays error message
KPR#:1108931 Running "OpenLab Storage System Test" of Test Services fails at folder creation step
KPR#:1115817 Details page shows reason carried over from the previous version if itself doesn't have a reason
KPR#:1128203 Recurring "Unable to replicate; The attachment is out of date" error in the server.log file
KPR#:1150035 Bulk Import Tool misses files
KPR#:1203418 Unable to log in when LDAP is configured to use Kerberos authentication
KPR#:1203885 The Content Management Activity Log is not updated
KPR#:1255854 AWS S3 Storage Locations are not migrated when upgrading to 2.8

Keyword: Administration,User Interface

KPR#:267323 Activity Log in OLCP does not record the Application name when login from the Web UI

Keyword: Configuration

KPR#:108727 Installation fails without any further information on computer where Sample Scheduler Agent or Sample Scheduler Lims Agent should be installed.
KPR#:733079 Slow login performance when server and user domain don't match forest name
KPR#:804967 OpenLab CDS is not starting due to invalid host name
KPR#:967789 On Server Installed update page shows 'Agilent OpenLab CDS 2.6 Update 11'
KPR#:1049554 Apache HTTP Server vulnerabilities

Keyword: Data Analysis

KPR#:127347 Search field does not return all applicable results when searching for a result name

Keyword: Performance

KPR#:178350 New domain users can't access content management to save methods or any other file
KPR#:401255 SQL Server Database - 100% CPU Usage
KPR#:492041 C:\ProgramData\Agilent\SecureFileSystem is growing significantly
KPR#:580689 Active Directory query searches the entire forest and causes login slowness.
KPR#:597114 Injection data can potentially be lost during a server reboot.
KPR#:609704 Control Panel freezes when many users launch Acquisition and Data Analysis at the same time in a client server system.
KPR#:628048 SQL Parameter xact abort prevents Data from being uploaded
KPR#:638587 Improvements to address archive problems
KPR#:651438 Excessive logins can cause com.agilent.datastore.cache file to grow and impact performance
KPR#:664390 Uploading two new files of the same name will result in one of the uploads failing.
KPR#:723298 Slow performance when loading projects tab in Control Panel
KPR#:733131 Duration of project creation is extremely long
KPR#:750171 Performance Indexes missing in OpenLab Server / ECM XT v2.7
KPR#:751591 High CPU Load with ActivityLog disabled (SharedServicesHost/ApacheHTTPServer)
KPR#:767591 Unable to open method, sequence, and result files in Data Analysis
KPR#:954001 OutOfDate is not reset after first instrument's data is read (multi-instrument)
KPR#:954005 Loading Sequence from result set takes >1 minute for Browse box to appear
KPR#:954008 OpenLab Shared Services Crashes frequently
KPR#:962671 Unable to process result sets with big ACAML files from Terminal Server
KPR#:1048793 Poor performance when renaming, moving, archiving, or dearchiving folders
KPR#:1128202 Leading/trailing spaces trigger an "Import data failed" error when importing data in DA
KPR#:1188072 Zip files with a ".template" extension will fail to upload
KPR#:1203419 AIC replication may fail on systems using Oracle

Keyword: Performance,Roles and Privileges

KPR#:304709 New domain users can't access content management to save methods or any other file

Keyword: Performance,User Interface

KPR#:580691 Control Panel Lab-At-A-Glance display of instruments is slow.

Keyword: Reports

KPR#:963168 Print out of Content Browser search results displays an incorrect message

Keyword: Roles and Privileges

KPR#:207007 Users can delete their own data without deletion permission via web client
KPR#:968731 New user group is unable to access the projects after upgradation to CDS 2.7
KPR#:976277 Users added to a domain group can't access content management

Keyword: Roles and Privileges,User Interface

KPR#:318470 Orphan Property ID leading to sync failure

Keyword: User Interface

KPR#:110421 After "Edit in microsoft office", the preview is not updated
KPR#:130075 Search cannot handle Metadata which contains a µ
KPR#:151319 dx file cannot be previewed after upgrade but the rx file can be previewed in XT
KPR#:159369 Previewing the content of EZChrom files may fail upon viewing the file details on the first try
KPR#:168842 PDFs Which Include Localized Characters Can Appear Garbled in Web UI Previews
KPR#:180338 First time login to the Content Management Web UI can take up to 60s
KPR#:194111 Delay observed in searching for newly added or deleted files in Content Management
KPR#:307134 Pagination disappears when search returns more than 250 results
KPR#:372530 Incorrect rendering of MS Office documents in preview
KPR#:420532 Sampler graphic not displayed in preparative results, if first sample did not run
KPR#:576609 Backup Utility is failing fail at verification step due to exhausting connections to the MS SQL server
KPR#:605536 Error message occurs if server name in Storage Locations contains dot on Content Paths page
KPR#:623684 "modified" timestamp after sequence has been archived triggered by filtering for PDF
KPR#:665419 Japanese Language Files are not included in Content Management Security Update 01
KPR#:705719 ECM-XT Scheduler UI not accessible
KPR#:708010 Japanese characters cannot be previewed in the Content Browser for ANSI encoded .txt files uploaded using an Import Scheduler task
KPR#:953611 Click Jacking Vulnerability
KPR#:968860 Backup Verification of v2.7 Backup Utility may fail on File uploads from older Datastore Versions
KPR#:976274 Installation of Cary-UV server plugin removes Security and storage test.
KPR#:1050337 Test Services Workflow test is not compatible with Cary UV Instrument Controller

Keyword: Workflow

KPR#:1289465 OpenLab storage system test fails with ECM 3.6.7 backend

Keyword: 

One-line Description:

Upgrade from v2.1 fails when the application is installed on a folder name with short name

Problem:

Upgrade from v2.1 fails when the application is installed on a folder name with 2 or less characters

Temporary Solution:

Do not install the application on folder where the name is  less than 3 characters

Fix Information:

n/a

Keyword: 

One-line Description:

The "Modifier" value of a folder created by a project creation in OpenLab Control Panel is set to "System" a few minutes after the folder is created. 

Problem:

In Content Management, the "Modifier" value of a folder resulting of a project creation in OpenLab Control Panel is set to "System" a few minutes after the folder is created. The "Modified Date" is also updated, even if there was no change done to the folder.

This change is caused by the synchronization between the OpenLab Control Panel and the Content Management happening every 5 minutes. 
This scheduled sync process runs as the 'system' user. It updates the permissions on the folder performed by user 'system' and also updates modifier" to 'system' and "modified date" to current timestamp .

Affected version(s): v2.3, v2.4

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab Server v2.5 and Openlab ECM XT v2.5

Keyword: 

One-line Description:

"Manage Security" is restricted to delete files/folders outside of a project

Problem:

With the privilege "Manage Security" you can delete files/folders in Content Management - as long as the files/folders are not within a project!  When in a project, only projects related privileges are applied, therefore it will not be possible to delete files in a project if you have the Manage Security privilege
 Inside a project, there is also a role called everything. If you grant this role to a user within that project, he will be able to do everything, including deleting files.  
Manuals and online help will be improved to point this behavior out more clearly. 

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: 

One-line Description:

CDS2.3 Update 5 cannot be installed

Problem:

In case customer is using an external NAS ... the user for the Tomcat service is not local system but as example openlabadmin
This leads to the problem that the installation of CDS 2.3 Update 5 stops at 33% because the user for the Tomcat service is switching to local system during the installation and  therefore was not able to start the service (got stuck at 700 MB).

Temporary Solution:

Stop the Tomcat service manually and change the user to e.g.: openlabadmin again. Afterwards the service started and the update will proceed. 

Fix Information:

This issue is fixed in the OpenLab CDS v2.5  OpenLab ECM XT v2.5
This issue is fixed in the following updates:
OpenLab CDS 2.4 Update 6 and OpenLab ECM XT 2.4 Update 02
OpenLab CDS 2.3 Update 10 and OpenLab ECM XT 2.3 Update 07
OpenLab CDS 2.2 Update 07 and OpenLab ECM XT 2.2 Update 01

Keyword: 

One-line Description:

Alfresco Tomcat Service Credentials Lost

Problem:

The installation of OpenLab Server 2.4 Update04 / ECM XT 2.4 Update 01 on respective server will fail / get stuck if the customer’s server is using UNC paths to store data or uses domain users to run alfrescotomcat/content management search service. During the installation of the patch, the users will be reset to the respective service System accounts of the local machine.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in the OpenLab CDS v2.5 OpenLab ECM XT v2.5
This issue is fixed in the following updates:
OpenLab CDS 2.4 Update 6 and OpenLab ECM XT 2.4 Update 02
OpenLab CDS 2.3 Update 10 and OpenLab ECM XT 2.3 Update 07
OpenLab CDS 2.2 Update 07 and OpenLab ECM XT 2.2 Update 01

Keyword: 

One-line Description:

Software Update resets solr.host property in the alfresco-global.properties file.

Problem:

During a Software Update on the Content Management Server(s) of a Scalable System or on a 4-Server Solution it may be possible that the solr.host property in the C:\Program Files (x86)\Agilent Technologies\OpenLAB Data Store\tomcat\shared\classes\alfresco-global.properties is reset form the :"Indexing Server Hostname" to "localhost". This problem is observed in Version 2.4.

Temporary Solution:

After a Server Update is applied to the Content Management Server(s) of a Scalable System or a 4-Server Solution, check that the solr.host property in the C:\Program Files (x86)\Agilent Technologies\OpenLAB Data Store\tomcat\shared\classes\alfresco-global.properties file is still pointing to the Index Server of the system. If not, the solr.host property can be manually updated to point to the Index Server.

Fix Information:

This Problem is addressed in an future update of OpenLab ECM-XT or OpenLab Server

Keyword: 

One-line Description:

Compatibility with OLSS Version 3.2.3.23

Problem:

In order to have OpenLab CDS v2.4 software updates supported on OpenLab ECM XT v2.4, OLSS version 3.2.3.23 needs to deployed on the server

Temporary Solution:

n/a

Fix Information:

Resolved with OpenLab ECM XT 2.4 Update 03

Keyword: 

One-line Description:

Port 6629 is required for communication

Problem:

Port 6629 is required to be open on the Agilent Instrument controller. This port is used for secure HTTPS data transfer to and from the remote work area.

Temporary Solution:

n/a

Fix Information:

Documentation updated in version 2.6

Keyword: 

One-line Description:

Latest version of OpenLab Shared Services is not included in CDS Update

Problem:

The latest version of OpenLab Shared Services is not included with CDS Update installation.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab ECM-XT v2.5 Update 01.

Keyword: 

One-line Description:

Sporadically the "OpenLab Shared Services" service on the OpenLab Server is turned off

Problem:

During the replication of data to the AICs (for operational continuity / failover), OLSS server may crash with “OutOfMemoryException” because the data being replicated are too big and there is not enough memory for the OLSS process to handle this.  The likelihood of the issue increases with the number and type of instruments, for example if Mass Spectrometers are involved.  In that case you can reduce the likelihood by deleting unnecessary tune files. 

Temporary Solution:

The replication can be turned off.  Please contact Agilent Support for details. 
Note that under this condition there is only limited operational continuity on the AICs,

Fix Information:

The issue is fixed in CDS 2.4 Update 10 and CDS 2.5 update 05. 
The fix will also be in CDS 2.6. 
At this time there is no fix for CDS 2.3.

Keyword: 

One-line Description:

IQ report fails after the installation of update 1 for Sample Scheduler 2.5

Problem:

After the installation of the Update 01 package for Sample Scheduler 2.5, the IQ report fails, reporting 3 deviations: 
.\Sample Scheduler for OpenLab\documentation\xml\sample_scheduler_for_openlab_command_guide.chm
.\Sample Scheduler for OpenLab\bin\zh-hans\agilent.scheduler.cds.icdsinstrument.resources.dll
.\Sample Scheduler for OpenLab\bin\ja-jp\agilent.scheduler.cds.icdsinstrument.resources.dll
These deviations can be ignored.  Update 01 does not contain / replace these files, The error is caused by an erroneous IQ xml reference file of Update 01. 

Temporary Solution:

n/a

Fix Information:

The issue will be fixed with a future update. 

Keyword: 

One-line Description:

Uploading many files causes the web UI to freeze with 0% progress

Problem:

Uploading a large number of files using drag and drop in the content management web interface may result in a frozen interface showing no progress  

Temporary Solution:

n/a

Fix Information:

There is a limitation on the number of files one can drag and drop via a browser at one time, and this is due to a limitation on the browser type and OS combined that we have no control over. Each browser type may have a different limitation. If you have thousands of files and folders to upload via a browser, please consider upload them in separate batches.

The documentation in the next release will be updated to include this information.

Keyword: 

One-line Description:

New Firmware update utility available which allows for updates using SCP (secure copy protocol) over SSH instead of FTP

Problem:

With recent changes to Microsoft Defender default firewall policies - an increase in reports of failed firmware updates have been received. To improve the robustness of the firmware update process - we have released a new firmware update utility to deliver the same firmware via SSH instead of FTP. These update utilities are available on SubscribeNet with the label "SSH" contained in the title.

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: 

One-line Description:

Document Template fails for Stability Report

Problem:

Data loaded on Stability_Report.rdl gives an error message 
"Failed to document the template" on trying to use the Document Template function.

Temporary Solution:

n/a

Fix Information:

This issue has been fixed on:
OpenLab CDS 2.5 Update 08
OpenLab CDS 2.6 Update 03

Keyword: 

One-line Description:

TCP port 5443 required during installation 

Problem:

TCP port 5443 is required during installation for the reverse proxy setup. This port is not mentioned in the manual.  During operation port 443 is used and port 5443 is no more needed. 
This will be fixed in CDS 2.7.  From then on, TCP port 5443 will not be required any longer. 

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: 

One-line Description:

ECM XT v2.6 Installation fails at step 4 after a restore

Problem:

Installing OpenLab ECM XT v2.6 after restoring a backup from v2.6.3 will fail during step 4 due to a version mismatch.

Temporary Solution:

n/a

Fix Information:

There are 2 options to restore OpenLab Server v2.6 or ECM XT v2.6
1. Install the application and the latest software update and then restore your backup or,
2. Restore your backup, install the application and before running step 4, install the latest software update. 

Keyword: 

One-line Description:

Workflow Test is failing on CDS2.5 System under specific circumstances

Problem:

If you run the workflow test with QualA on a CDS2.5 does not have the everything privilege, the workflow test will be failing if you run the test a second time. As part of the workflow test the Sequence Template for the earlier Test must be deleted. This is only possible with the everything privilege

Temporary Solution:

Execute the Workflow Test with a User which has the everything privilege or delete the Sequences from the content manually with a different user which has the required privilege.

Fix Information:

This Problem is fixed in OpenLab CDS2.6 onwards with introduction of a delete privilege in the Control Panel.

Keyword: 

One-line Description:

A logging library running on the remote host has multiple vulnerabilities.

Problem:

A customer found multiple vulnerable versions of Log4j in their security scans, specially the one which were reported in CVE-2021-4104, CVE-2019-17571 nor CVE-2021-4104 and are affecting
Alfresco, the underlaying Product of Agilent OpenLab.

Temporary Solution:

n/a

Fix Information:

According to the Alfresco support (https://hub.alfresco.com/t5/alfresco-content-services-forum/log4j-vulnerability-impact-on-alfresco-community-edition/m-p/311033#M26495) Alfresco is not affected by CVE-2021-4104, CVE-2019-17571 nor CVE-2021-4104. In order to be exposed to those vulnerabilities you need to enable explicitly some Log4j services that are off when using Alfresco by default in Agilent OpenLab.

Keyword: 

One-line Description:

Software seizes when refreshing Analytical Instruments 

Problem:

The configuration part of the Agilent Online LC Monitoring Software requires all instrument(s) (configured in OpenLab CDS) to be loaded prior to evaluating the suitability for Online Monitoring. Each connection to a configured instrument temporarily consumes a administration license from CDS. In case more instruments are configured than licenses are available, the loading instruments seizes.

Temporary Solution:

Best practice:
In OpenLab CDS assign a Default Project to your Online LC instrument. When configuration is anticipated, refresh / load only these project which refers to the respective "Default Project" of your instrument. 

Fix Information:

n/a

Keyword: 

One-line Description:

Installing OpenLab ECM XT v2.7 after restoring a backup from v2.7.1 or later will fail during step 4 due to a version mismatch

Problem:

There are 2 options to restore OpenLab Server v2.7 or ECM XT v2.7
1. Install the application and the latest software update and then restore your backup or,
2. Restore your backup, install the application and before running step 4, install the latest software update.

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: 

One-line Description:

Apache HTTP Server vulnerability CVE-2023-25690 on CDS and ECM XT

Problem:

There has been uncertainty if and to which extent the Apache HTTP Server vulnerability CVE-2023-25690 (see https://httpd.apache.org/security/vulnerabilities_24.html) has impact on CDS and ECM XT.  
A pre-requisite for this vulnerability are specific settings in the httpd.conf configuration file that can be found in c:\Program Files\OpenLab Reverse Proxy\Apache24\conf.  The settings that enable an abuse can be found under https://httpd.apache.org/security/vulnerabilities_24.html. 
Note: The httpd.conf as it gets installed by CDS and ECM XT does NOT have settings that enable security breaches.  Hence, there is no risk, unless httpd.conf gets intentionally modified to include these kind of settings.  

Temporary Solution:

For the time being, the recommendation is to protect unauthorized httpd.conf changes by related Active Directory / OS measurements.  
This concerns the following machine types: Workstation, Workstation Plus, AIC,  OpenLab Server, ECM XT, Index server.  

Fix Information:

Agilent is preparing a patch to update Reverse Proxy in CDS 2.6 and 2.7 to the latest stable Apache version. This will not roll up in a CDS Update, but be released independently of CDS.

Keyword: 

One-line Description:

Content management fails to start after restore 

Problem:

After a data restore to a new installation, Content Management does not start. The alfresco.log file shows, for example,
Module 'amp-olss' version 2.6.2-REL_2.6.2.15 is currently installed and must be uninstalled before version 2.6.0-REL_2.6.0.664 can be installed.
This happens when the software installation does not match the patch level of the source software installation where the backup was generated.

Temporary Solution:

There are two restore scenarios that use the Restore Utility outlined in the OpenLab CDS Workstation Plus Guide and the OpenLab ECM XT Administration Guide: restore on a system where the OpenLab application is already installed or restore on a clean machine and then install the application afterward. Both approaches work without issue when the backup's source system does not have any OpenLab updates installed. However, if OpenLab updates have been installed on the source system, then the following procedure should be used:
Install the application on the target system (Workstation Plus or OpenLab Server / ECM XT server) and apply the same OpenLab CDS or OpenLab Server updates that were installed on the source system when the backup was performed. After this is done, restore the system successfully.

Fix Information:

This problem will be addressed in future releases of OpenLab software.

Keyword: 

One-line Description:

A restored System can create a Cluster with the Source System

Problem:

In cases where a restored system will run at the same time as the source
system (where the backup was taken,) it is imperative that the restored system is on a network isolated from the source system. For example, if a test system is created from a backup of the production system, it must be on a network that is isolated from the production system. If the test system and the production system are on the same network, it may cause the two servers to create a cluster and interact with each other. This can lead to data corruption and loss and upgrades on the restored system may fail.

Temporary Solution:

To prevent this you can do the following steps:
1.- On the restored server, open C:\Program Files (x86)\Agilent Technologies\OpenLAB Data Store\tomcat\shared\classes\alfresco-global.properties.
Find the alfresco.cluster.enabled property and set it to false, as follows:
alfresco.cluster.enabled=false
2.- Restart the AlfrescoTomcat service.

Alternatively you can isolate the restored system and the source system by adding a firewall rule, that the system cannot access each other.

Fix Information:

This Problem is fixed in Version 2.6 onwards.

Keyword: 

One-line Description:

System Preparation Report fails on supported LTSC version 2019

Problem:

In case of Windows LTSC 2019, the CDS/ECM XT system preparation tool that runs before the installation reports a failure in the O/S section.  This failure can be ignored - Windows LTSC 2019 is fully supported.  A fixed version of the system preparation tool  is planned for the next CDS/ECM XT release. 

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: 

One-line Description:

PostgreSQL 11 Update

Problem:

OpenLab CDS 2.6 and OpenLab Server/ECM XT 2.6 can install multiple instances of PostgreSQL 11 depending on the configuration. The Agilent OpenLab Data Repository component is present on every OpenLab CDS 2.6 and OpenLab Server/ECM XT 2.6 system and a PostgreSQL 11.9.1 instance is installed as part of this component. On OpenLab CDS 2.6 Workstation Plus systems, OpenLab Server/ECM XT All-in-One servers where PostgreSQL is selected as the Database Type, and Shared Services Servers (connecting to ECM 3.x) where PostgreSQL is selected as the Database Type, an additional PostgreSQL 11.5 instance is installed. 

PostgreSQL 11 is now end-of-life and will no longer receive security and bug fixes. PostgreSQL 11.22 is the final release of PostgreSQL and addresses a number of known vulnerabilities discovered in early PostgreSQL 11 releases. 

Temporary Solution:

n/a

Fix Information:

OpenLab CDS 2.6 Update 14 and OpenLab ECM XT 2.6 Update 14 will update all OpenLab-installed PostgreSQL 11 instances to PostgreSQL 11.22.

Keyword: 

One-line Description:

Installation of RabbitMQ fails when user profile is on a network share

Problem:

If the user profile is on a network share the installation of CDS 2.8 and ECM XT 2.8 may fail at RabbitMQ. 
It may be necessary for the customer to create an admin account, which has NO mapping of the user home drive to a network folder to allow the installation to complete.

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: 

One-line Description:

An error is seen when opening DA or running injections with existing projects but not seen with new projects.

Problem:

An error is generated when trying to open Data Analysis or running injections from ACQ using old existing projects. The issue can be resolved by checking that users which have been deleted from the Domain are removed from OpenLab Control Panel. Shared Services service must be restarted after the change is made.

Temporary Solution:

n/a

Fix Information:

The issue is fixed in CDS / ECM XT 2.8.  A fix is planned for a future 2.6 and 2.7 Update.  

Keyword: 

One-line Description:

An error is seen when opening DA or running injections with existing projects but not seen with new projects.

Problem:

An error is generated when trying to open Data Analysis or running injections from ACQ using old existing projects. The issue can be resolved by checking that users which have been deleted from the Domain are removed from OpenLab Control Panel. Shared Services service must be restarted after the change is made.

Temporary Solution:

n/a

Fix Information:

The issue is fixed in CDS / ECM XT 2.8.  A fix is planned for a future 2.6 and 2.7 Update.  

Keyword: 

One-line Description:

An error is seen when opening DA or running injections with existing projects but not seen with new projects.

Problem:

An error is generated when trying to open Data Analysis or running injections from ACQ using old existing projects. The issue can be resolved by checking that users which have been deleted from the Domain are removed from OpenLab Control Panel. Shared Services service must be restarted after the change is made.

Temporary Solution:

n/a

Fix Information:

The issue is fixed in CDS / ECM XT 2.8.  A fix is planned for a future 2.6 and 2.7 Update.  

Keyword: 

One-line Description:

Agilent OpenLab Configuration Utility and folder not removed after uninstalling

Problem:

The Agilent OpenLab Configuration Utility Installer component status shows as 'Detected', and the OpenLab Configuration Utility is not removed from C:\Program Files (x86)\Agilent Technologies after uninstallation.

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab CDS 2.7 Update 10.

Keyword: 

One-line Description:

Security Vulnerability finding in Test Services

Problem:

A security vulnerability was detected in Agilent Test Services 3.5 and 3.6 which ship with OpenLab CDS and OpenLab Server/ECM XT 2.7 and 2.8, respectively. This vulnerability could allow an attacker to read files from the server's file system or load a file dynamically from a remote location.

This vulnerability only impacts systems with valid Agilent Test Services licenses, including systems running on a 60-day startup license or a 60-day emergency license. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in Agilent Test Services 3.5 Patch 01 and Agilent Test Services 3.6 Patch 01. This vulnerability is also fixed in OpenLab CDS 2.7 Update 10, OpenLab Server 2.7 Update 10, OpenLab CDS 2.8 Update 07 with Feature Pack 01, and OpenLab Server 2.8 Update 07. 

Keyword: 

One-line Description:

Test Services cannot load 

Problem:

When too many unresolved AICs/CIDs are configured to the same OpenLab server, Test Services cannot load. The problem is due to how Test Services loops through every AIC/CID connected to the server and this operation might take too long to complete on systems with many registered and unresolved AICs/CIDs.

Temporary Solution:

Deleting AICs/CIDs with a network status of "Not resolved" from the Administration>Instrument Controllers page of the OpenLab Control Panel fixes the problem.

Fix Information:

This issue is fixed in Agilent Test Services 3.5 Patch 01 and Agilent Test Services 3.6 Patch 01. This issue is also fixed in OpenLab CDS 2.7 Update 10, OpenLab Server 2.7 Update 10, OpenLab CDS 2.8 Update 07 with Feature Pack 01, and OpenLab Server 2.8 Update 07.

Keyword: 

One-line Description:

Activity Log unavailable due to Certificate Trust issue between CM and Index Servers

Problem:

On a 4-server or Scalable OpenLab Server/ECM XT 2.7 system with Update 08 or higher, the Activity Log may not be accessible via the Control Panel. The issue appears as the Content Management (CM) server(s) cannot establish a secure connection to the Index server.

Although the OpenLab Root certificate is shared and trusted across both servers (same serial number), the server certificate is flagged as potentially corrupted or altered when viewed from the counterpart server.

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: 

One-line Description:

Customer Vulnerability finding in Test Services

Problem:

Agilent OpenLab CDS 2.6 and OpenLab Server / ECM XT 2.6 are affected by a file inclusion vulnerability. Multiple download endpoints trust the user-provided path parameter for loading files.

Temporary Solution:

n/a

Fix Information:

There is no fix for OpenLab CDS 2.6 and OpenLab Server / ECM XT 2.6. To fix this issue, please upgrade to OpenLab 2.7 or 2.8. 

Keyword: 

One-line Description:

Data Repository database partially unavailable after installing 2.7 Update 10 or 2.6 Update 14

Problem:

As part of OpenLab Server 2.7 Update 10 or 2.6 Update 14, a new minor version (14.15) of PostgreSQL 14 gets installed. This minor version fixes several security vulnerabilities. During this PostgreSQL update installation, the server certificates associated with the PostgreSQL database are reverted to the default PostgreSQL certificates. As a result, specific server-hosted OpenLab services can no longer communicate with the Data Repository database. The impacted client applications are  Cary UV and MassHunter Networked Workstations. 

OpenLab Server/ECM XT v2.7 or 2.6 systems with any of the following software applications are affected:
- Cary UV Networked Workstation
- LC/MS TQ Acquisition MassHunter Networked Workstation
- GC/MS TQ Acquisition MassHunter Networked Workstation
- MassHunter Quantitative Analysis
- LC/MS Q\TOF Acquisition MassHunter Networked Workstation
- MassHunter Bioconfirm

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 11 and OpenLab CDS 2.7 Update 11, or OpenLab Server 2.6 Update 15 and OpenLab CDS 2.6 Update 15

Keyword: 

One-line Description:

Software update adds the Configuration Utility to Add/Remove Programs

Problem:

The Configuration Utility should not appear in the Add/Remove Programs after a software update.

Temporary Solution:

n/a

Fix Information:

The Configuration Utility will no longer appear in the Add/Remove Programs after installing OpenLab Server 2.7 Update 12 or OpenLab CDS 2.7 Update 12.

Keyword: 

One-line Description:

After a cleanup of a user's temp directory, the OpenLab activity log displays "Error: Activity log is not ready"

Problem:

It has been reported that after a cleanup of a user's Windows temp directory the OpenLab and instrument's activity log index is no longer ready for usage and the activity log is not accessible.  
This error can be seen if the OpenSearch service is not running.

This defect only affects systems running on OpenLab Server/ECM XT 2.8 and OpenLab Server/ECM XT 2.7 Update 04 and higher.

Temporary Solution:

Navigate to the Windows services panel and start up service OpenSearch 2.11.1.  In case the service does not start up successfully, open Windows explorer and navigate to folder
"C:\Users\<USERNAME>\AppData\Local\Temp\opensearch".  The <USERNAME> is the user that installed OpenLab CDS.

If the folder "opensearch" does not exist, the "OpenSearch 2.11.1 (opensearch-service-x64)" service is not starting.  Create the folder "opensearch" manually and start the service OpenSearch 2.11.1 again.

Fix Information:

This issue was fixed in OpenLab Server 2.8 Update 08 and OpenLab Server 2.7 Update 12.

Keyword: 

One-line Description:

The RabbitMQ service is missing

Problem:

After installing OpenLab Server 2.7 Update 11 or OpenLab CDS 2.7 Update 11, the RabbitMQ service will be removed. If Online LC Monitoring Software is installed, it cannot be launched or used. No other functions related to OpenLab Server/ECM XT 2.7 or OpenLab CDS 2.7 are impacted.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 12 and OpenLab CDS 2.7 Update 12.

Keyword: 

One-line Description:

OpenSSL vulnerabilities in Backup Utility delivered with OpenLab CDS 2.6 and 2.7

Problem:

The OpenLab Backup Utility ships with components that use OpenSSL versions up to v1.1.1l. Several Low and Medium security vulnerabilities have been discovered with versions under v.1.1.1t. Below is a list of security vulnerabilities that Agilent has investigated:
•	CVE-2023-0286
•	CVE-2023-0464
•	CVE-2023-0465
•	CVE-2023-2650
•	CVE-2023-3817
•	CVE-2023-4807
•	CVE-2023-5678
•	CVE-2024-0727
•	CVE-2024-2511
•	CVE-2024-4741

The affected files are only used on a Client-Server-System using an external Postgres Database Server and can be removed from the Backup Utility folder of all other topologies.

Temporary Solution:

OpenLab CDS Workstation, Workstation Plus, OpenLab Server/ECMXT with Microsoft SQL and OpenLab Server/ECMXT with local Postgres SQL: 
Delete the folder “pgsql” in the installation location of the BackupUtility. Default path: "C:\ProgramFiles(x86)\Agilent Technologies\OpenLab Backup Utility"

OpenLab Server/ECMXT with external Postgres SQL: 
Copy all binaries from the Data Repository Postgres binaries location (Default Path 2.6: "C:\Program Files\PostgreSQL\11\bin" Default Path 2.7: "C:\Program Files\PostgreSQL\14\bin") to the installation location of the BackupUtility (Default path: "C:\ProgramFiles(x86)\Agilent Technologies\OpenLab Backup Utility\pgsql\bin") and replace all existing files.

Fix Information:

n/a

Keyword: Acquisition

One-line Description:

"Agilent Test Services" and "Agilent Test Services Central Management" services are not started after a server restart

Problem:

It has been observed occasionally that the "Agilent Test Services" and "Agilent Test Services Central Management" services are not started after a server restart. These services depend on the "Agilent OpenLab Data Repository Base Service" and will fail to start if that service is not yet started.

Temporary Solution:

Set the "Agilent Test Services" and "Agilent Test Services Central Management" services to "Automatic (Delayed start)"

Fix Information:

The issue is fixed in OpenLab CDS v2.7.

Keyword: Acquisition

One-line Description:

AIC replication issue in mixed CDS / MassHunter systems

Problem:

The replication on OpenLab CDS 2.x AICs fails if MassHunter 11 or 12 is installed in mixed mode with OpenLab CDS v2.6, or v2.7.  As a result, OpenLab  CDS AICs cannot run in failover mode. The issue is caused by duplicate privileges and roles in the OpenLab Shared Services database. 

Temporary Solution:

n/a

Fix Information:

The issue is fixed in OpenLab CDS v2.8, OpenLab Server v2.8, OpenLab CDS v2.7 Update 06, and OpenLab Server 2.7 Update 06.

Keyword: Admin Reports

One-line Description:

Roles and Privileges Report causes error

Problem:

With MassHunter Walkup software the Roles and Privileges Report causes error

Temporary Solution:

n/a

Fix Information:

Is fixed in OpenLab CDS 2.7

Keyword: Administration

One-line Description:

Not possible to delete project related files  form the Content Management user interface.

Problem:

Delete processing method, delete sequence templates or delete reports templates isn’t working via DA. Even when all available privileges except “everything” are given to the user. Directly from CM it’s also possible.


With the privilege "Manage Security" you can delete files/folders in Content Management - as long as the files/folders are not within a project! When in a project, only projects related privileges are applied, therefore it will not be possible to delete files in a project if you have the Manage Security privilege
 Inside a project, there is also a role called everything. If you grant this role to a user within that project, he will be able to do everything, including deleting files.

Temporary Solution:

n/a

Fix Information:

Manuals and online help have been improved to point this behavior out more clearly in the version 2.5

Keyword: Administration

One-line Description:

No specific privilege is required to access the CM Admin console

Problem:

The Admin Console of the Content Management Web page can be opened by any user with the privilege "Project - Access Content using Web client".

Temporary Solution:

The Admin Console is read only and no information that compromises security is available on the Admin page

Fix Information:

n/a

Keyword: Administration

One-line Description:

Java JMX RMI vulnerability

Problem:

Java JMX RMI is accessible with common credentials (unauthenticated check). This could be a security issue on an OpenLab CDS Workstation Plus, an OpenLab Server or an OpenLab ECM XT Server.

Temporary Solution:

On OpenLab Server or ECM XT v2.5, add the following line to the alfresco-global.properties file to resolve the issue.

messaging.broker.url=vm://localhost?broker.persistent=false&broker.useJmx=false

Fix Information:

This issue is resolved in version OpenLab Server v2.6 and OpenLab ECM XT v2.6

Keyword: Administration

One-line Description:

Restore fail when the new server is on a different subnet

Problem:

When you have a 2-server system with postgres, restore fail with the Agilent OpenLab Restore Utility when the new server is on a different subnet or you try to restore on a All-in-One server.

The restore will fail at the end while running the Server Configuration Utility.

Temporary Solution:

Workaround1:  When the new 2-server environment is in a different subnet 
Edit the pg_hba.conf on the new db server to reflect the correct subnet
Run the Server Configuration Utility (from the start program menu)Run the restore utility and select to run the Verification Only

Workaround2:  When you restore on an All-in-one server
Rerun the Restore utility and use the hostname of the new server (don't use localhost)

 

Fix Information:

n/a

Keyword: Administration

One-line Description:

After restoring a Backup taken by the Backup Utility, the Sample Scheduler Service is not started

Problem:

After restoring a Backup taken by the Backup Utility, the Sample Scheduler Services are not started. During the restore, OpenLab CDS Services including the Sample Scheduler Services are stopped. After the restore, the OpenLab CDS Services are started but the Sample Scheduler Services are not started

Temporary Solution:

After a restore, reboot the Machine to make sure that all Services are started in the required order.

Fix Information:

This is fixed in Version 2.7

Keyword: Administration

One-line Description:

Archive fails if a file with the same name has already been archived

Problem:

If a user attempts to archive a file that has the same name as a file that already exists in the archive location, the archive will fail. 

Temporary Solution:

Dearchive the original file before uploading the new file with the same name. Then upload the new file as a new version of the original file. All versions of that file can then be archived without error. 

Fix Information:

n/a

Keyword: Administration

One-line Description:

Backups can fail if the available C disk storage space is too small

Problem:

During the backup process, the database is cached on the C drive before it is moved to the specified backup destination. If the C drive is too small to store the database cache, then the backup will fail. 

Temporary Solution:

n/a

Fix Information:

This is resolved in the 2.6 Backup & Restore update.

Keyword: Administration

One-line Description:

Backup aborts due to timeout error

Problem:

In case of a slow connection between the OpenLab or ECM XT Server and an external Microsoft SQL Server, the backup execution might run into a timeout error.  This is due to a built-in timeout of 30 sec. for a SQL command execution.  The issue has been observed sporadically for servers with version 2.6. 

Temporary Solution:

n/a

Fix Information:

The issue will be fixed by a separate release of the backup tool, which is planned for Nov. 2021. 

Keyword: Administration

One-line Description:

Installation stalls at Agilent Distributed Transaction coordinator install step 

Problem:

The installation stops at the Agilent Distributed Transaction coordinator install step. The distributed-transaction-coordinator-configurator.log shows:

[ERR] MigrateSchema:
Configuration step has failed.
System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

The CertService.log shows
[ERR] CustomServiceBase - OnStart error
System.InvalidOperationException: Requested domain name 'CSM' does not match the service's domain 'CSM'
at Agilent.OpenLab.CertService.CertServiceCore.Certificates.CertFactoryService.GetServerCert(String hostName, String domainName, IEnumerable`1 dnsSuffixes) 

The problem is caused by a domain name that does not conform to the RFCs/standard. In this case it was missing the top level domain.
Two letter domain names that are not routed on the internet cause the same problem.

Temporary Solution:

Change the domain name to a domain name that matches the RFCs/standards for non routable domains.

Fix Information:

Will not be fixed

Keyword: Administration

One-line Description:

Reverse proxy configuration API could be used to maliciously redirect credentials.

Problem:

The reverse proxy configuration API could potentially be used  by a malicious user to programmatically redirect credentials and other requests to a malicious endpoint.  

Temporary Solution:

n/a

Fix Information:

The issue is addressed with OpenLab ECM XT 2.6 Update 01 
With this software update, the API is  being disabled for any period of time that it is not directly being used.  It is only being used for a very short period when running the Server Configuration Utility to configure a certificate.

When running the Server Configuration utility from the menu, a process handler (HandleMachineRename.exe) will enable the API while the Certificate Setup screen is displayed and disable it again after.

If you run the Server Configuration Utility (aka Step 4) from the installation media, the Certificate Setup step will not move forward until you enable and start the  Agilent OpenLab Proxy Configuration Service. When the reconfiguration is done, you will need to manually stop and disable the Agilent OpenLab Proxy Configuration Service.

After the installation of 

Keyword: Administration

One-line Description:

Archive of file fails if it is checked-out when using automated archive

Problem:

Currently check-out files won’t be archived by the Automated Archive process, nor will they be reported on the Archive Queue page of the Admin Console. Since these check-out files will not stop the archive process from archiving other files and folders on the same folder level, users can easily identify these files once everything else is archived as the check-out files will be the only files remaining in the folder.

Temporary Solution:

It is the user’s responsibility to manage their checked-out files. This can be done by clicking the “I’m Editing” link to easily view all files that are checked out by the current user. 

Fix Information:

N/A

Keyword: Administration

One-line Description:

If one archive job fails, the others should continue

Problem:

If multiple folders are queued to be archived, the failure of one archive job will prevent the remaining folders in the queue from being successfully archived. Any new folder selected to be archived will also fail if there is currently a failed archive job in the queue. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab CDS 2.5 Update 11 and OpenLab ECM XT 2.5 Update 06, as well as OpenLab CDS 2.7 and OpenLab ECM XT 2.7

Keyword: Administration

One-line Description:

Archive jobs get stuck, requiring a cleanup

Problem:

If an archive job fails, it will remain in the archive queue until it is manually cleaned up.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab CDS 2.5 Update 11 and OpenLab ECM XT 2.5 Update 06, as well as OpenLab CDS 2.7 and OpenLab ECM XT 2.7

Keyword: Administration

One-line Description:

Archive job in a sub-folder should be removed when manually archiving a parent

Problem:

If a successfully archived folder contains a sub-folder with an automatic archive task assigned to it, the sub-folder's automatic archive task will remain listed in the Automatic Archive Tasks page of the Content Browser Admin Console. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab CDS 2.5 Update 11 and OpenLab ECM XT 2.5 Update 06, as well as OpenLab CDS 2.7 and OpenLab ECM XT 2.7

Keyword: Administration

One-line Description:

Data files with names including semicolons (;) cannot be uploaded to Content Management

Problem:

In OpenLab CDS 2.6, semicolons (;) should not be used when naming a data file. Data files with names including semicolons will trigger a system error in the File Upload Queue and will not be automatically uploaded to Content Management

Temporary Solution:

n/a

Fix Information:

This defect is fixed in OpenLab ECM XT 2.6 Update 06 / OpenLab CDS 2.6 Update 09 and is also fixed in the 2.7 release of OpenLab ECM XT, OpenLab Server, and OpenLab CDS.

Keyword: Administration

One-line Description:

Error message occurs if server name in Storage Locations contains dot on Content Paths page

Problem:

When running Step 4 of an installation or the Server Configuration Utility, the below error will display when validating the information provided on the Content Paths page if a dot (.) character is included in one of the specified Content Storage Locations and/or Archive Storage Locations:
“Storage locations with incorrect path format detected. 
Please edit the storage locations. Use the following patterns below:
C:\location\
\\server\location”

Temporary Solution:

As a workaround, an IP address can be used instead of a server name. 

Fix Information:

This issue will be fixed with a future update.

Keyword: Administration

One-line Description:

OpenLab ECM XT not affected by security issues in log4j-1.2.17

Problem:

OpenLAB ECM XT is not using non-default logging configurations that include the JMS Appender. So it is not vulnerable to the known exploits. See
https://solr.apache.org/security.html#apache-solr-affected-by-apache-log4j-cve-2021-44228

Temporary Solution:

n/a

Fix Information:

No fix planned

Keyword: Administration

One-line Description:

Customer IT scan identified vulnerability CVE-2021-4104

Problem:

After a regular vulnerability scan the OpenLab Server / ECM-XT system is classified as Vulnerable to CVE-2021-4104 NVD - CVE-2021-4104 (nist.gov)

Temporary Solution:

N/A

Fix Information:

According to https://hub.alfresco.com/t5/alfresco-content-services-forum/log4j-vulnerability-impact-on-alfresco-community-edition/m-p/311033#M26495 OpenLab Server / ECM-XT is not vulnerable to CVE-2021-4104 NVD - CVE-2021-4104 (nist.gov).

Keyword: Administration

One-line Description:

Script to update system passwords seems to update the wrong registry elements

Problem:

The dr-db-set-system-passwords.ps1 script that is located in the following default location is not functional:
C:\Program Files\Agilent Technologies\OpenLab DataRepository\Data Repository\Data Repository\Service\Scripts\PostgreSQL\Mgmt\dr-db-set-system-passwords.ps1

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab CDS 2.7 Update 02 and OpenLab Server 2.7 Update 02. 

Keyword: Administration

One-line Description:

Include latest BSSN Update for log4j

Problem:

While recent Apache log4j vulnerabilities have already been mitigated, it was decided to move to a new webhorse.war for BSSN previews that was developed that removes the usage of log4j by replacing it with Java's own logging implementation.  

Temporary Solution:

n/a

Fix Information:

The new webhorse.war will be implemented when OpenLab Server 2.7 Update 01 is installed. 

This issue got fixed in OpenLab Server 2.8.

Keyword: Administration

One-line Description:

Analytics.json moved to OpenLab Platform and no longer listed in Diagnostics save  files

Problem:

The analytics.json file contains information on a system's configuration that is helpful in troubleshooting. The analytics.json file can no longer be saved from the Control Panel's Administration>Diagnostics page. 

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab CDS 2.7 Update 02 and OpenLab Server 2.7 Update 02. 

Keyword: Administration

One-line Description:

OpenLab Server and OpenLab ECM XT v2.7 won't add user in a multi-forest domain

Problem:

Failed adding and authenticating users from a multi-domain forest. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed with OpenLab Server 2.8 and OpenLab Server 2.7 Update 01.

Keyword: Administration

One-line Description:

Multiple domain support is lost after upgrade

Problem:

Multiple domain support is lost after upgrading from OpenLab ECM XT v2.5 or v2.6 to v2.7. When using an Authentication Provider of Windows Domain, after upgrading to v2.7 only one Domain will be displayed in the Domain dropdown menu of the OpenLab Control Panel Login page. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.8 and OpenLab Server v2.7 Update 01. 

Keyword: Administration

One-line Description:

Using different capitalization when loggin in to the Content Browser with a new user causes error

Problem:

When a recently created internal user tries to log in to the Content Browser before the synchronization between OpenLab Shared Services and Content Management is done, the user log-in attempt will fail if a different capitalization is used for the username. The error "Failed to login "Null"" is displayed and the alfresco.log shows the error:
Error updating database.  Cause: com.microsoft.sqlserver.jdbc.SQLServerException: Cannot insert duplicate key row in object 'dbo.alf_auth_status' with unique index 'idx_alf_auth_usr_stat'. The duplicate key value is (USERNAME, 1).

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 06.

Keyword: Administration

One-line Description:

DHE Vulnerabilities

Problem:

A customer's IT security scan identified CVE-2002-20001 and CVE-2022-40735. Both vulnerabilities are related to the usage of the Diffie-Hellman Key Agreement Protocol, which is employed by some TLS 1.2-supported cipher suites. OpenLab Server/ECM XT supports all TLS 1.2 cipher suites, including those that use the DHE Key Exchange. 

Temporary Solution:

n/a

Fix Information:

DHE ciphers are no longer supported for Alfresco or Solr components in OpenLab Server 2.7 Update 06 and higher. To ensure that the system is not vulnerable to CVE-2002-20001 and CVE-2022-40735, it is strongly recommended that customers still use security policies to disable any weak or vulnerable cipher suite. OpenLab Server/ECM XT will not be impacted if any weak or vulnerable cipher suite is disabled by your IT policies. 

Keyword: Administration

One-line Description:

Cannot resotre FB database

Problem:

When restoring a backup of the OpenLab Shared Services database using the OpenLab Shared Services Maintenance tool, the restore can fail with the following error: "Database cannot be accessed right now." 

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab Server 2.8, OpenLab CDS v2.8, OpenLab Server 2.7 Update 04 and OpenLab CDS 2.7 Update 04. 

Keyword: Administration

One-line Description:

Rest API crashes with domain users in CP but removed from domain 

Problem:

On OpenLab CDS 2.7 client/server systems using OpenLab Sample Scheduler, the Rest API used by Sample Scheduler to query for users can crash if the OpenLab authentication provider is set as the domain and a user that was added to OpenLab has since been removed from the domain. 

Temporary Solution:

Remove all users from CDS which are no more available in the domain when the Rest API consuming application crashes or stops.

Fix Information:

This issue has been resolved in OpenLab Server 2.8, OpenLab CDS v2.8, OpenLab Server 2.7 Update 04 and OpenLab CDS 2.7 Update 04. 

Keyword: Administration

One-line Description:

OpenLab ECM XT support for IMDSv2

Problem:

OpenLab ECM XT v2.7 does not support the use of ASW EC2 Instance Metadata Server Version 2 (IMDSv2). 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 06. 

Keyword: Administration

One-line Description:

Alfresco license file is removed

Problem:

On OpenLab Server / ECM XT servers upgraded to v2.7 from an older version, the Alfresco license file may be missing. This does not have any impact on the usability of the system, as the license is already installed, but it makes it more difficult to recover in the unlikely event of an Alfresco license corruption. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 06. 

Keyword: Administration

One-line Description:

Apache Log4j 1.x Security Vulnerabilities 

Problem:

OpenLab Server / ECM XT ships with components that use Apache Log4j 1.2.17. Apache Log4j version 1 is past its End of Life, and several security vulnerabilities have since been discovered. Below is a list of security vulnerabilities that Agilent has investigated and determined do not impact Log4j 1.2.17 as it is implemented by OpenLab Server / ECM XT:

•	CVE-2019-17571
•	CVE-2020-9488
•	CVE-2021-4104
•	CVE-2022-22950
•	CVE-2022-22963
•	CVE-2022-22965
•	CVE-2022-23302
•	CVE-2022-23305
•	CVE-2022-23307
•	CVE-2023-26464

Temporary Solution:

n/a

Fix Information:

Apache Log4j v1.2.17 for Alfresco and Solr is updated to v2.22.0 in OpenLab Server 2.7 Update 06. All Log4j v1.2.17 components are upgraded to v2.22.0 in OpenLab ECM XT 2.6 Update 09 and OpenLab Server 2.7 Update 08. 

Keyword: Administration

One-line Description:

The AGTOL.log file is missing from 2.7 systems

Problem:

The AGTOL.log file is usually generated after a license file is added to an OpenLab system but fails to generate on 2.7 systems. Its location is dependent on the Installation Folder specified when installing the system. On systems using the default Installation Folder, it can be found at the following path: C:\Program Files (x86)\Agilent Technologies\OpenLab Services\Licensing\Flexera\logs.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.8, OpenLab CDS v2.8, OpenLab CDS 2.7 Update 06 and OpenLab Server 2.7 Update 06. 

Keyword: Administration

One-line Description:

PostgreSQL 14 Update

Problem:

Depending on the configuration, OpenLab CDS 2.7 and OpenLab Server/ECM XT 2.7 can install multiple instances of PostgreSQL 14. The Agilent OpenLab Data Repository component is present on every OpenLab CDS 2.7 and Openlab Server/ECM XT 2.7 system, and a PostgreSQL 14.1 instance is installed as part of this component. On OpenLab CDS 2.7 Workstation Plus systems, OpenLab Server/ECM XT All-in-One servers where PostgreSQL is selected as the Database Type, and Shared Services Servers (connecting to ECM 3.x) where PostgreSQL is selected as the Database Type, an additional PostgreSQL 14.1 instance is installed. 

Temporary Solution:

n/a

Fix Information:

OpenLab CDS 2.7 Update 10 and OpenLab Server 2.7 Update 10 will update all OpenLab-installed PostgreSQL 14 instances to PostgreSQL 14.15.

Keyword: Administration

One-line Description:

Previewing chromatography file gives error in alfresco log

Problem:

After installing OpenLab Server Update 06, error messages stating "An established connection was aborted by the software in your host machine" will be captured in the alfresco.log file when previewing .acaml, .rx, or .dx files in the Content Browser. There is no functional impact. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab ECM XT 2.6 Update 14 and OpenLab Server 2.7 Update 08. 

Keyword: Administration

One-line Description:

"Admin console-Support tools-Active sessions" displays error message

Problem:

On an OpenLab ECM XT Scalable (clustered) System, when opening the URL http://<OL-SERVER>/alfresco/s/enterprise/admin/admin-activesessions to show the active sessions in the Admin Console "Server Error" is displayed and the Alfresco.log shows:

<TIME AND DAT STAMP>13 Feb 2024 14:05:25,135 ERROR [org.springframework.extensions.webscripts.AbstractRuntime] Exception from executeScript: 01130443 Wrapped Exception (with status template): 011313704 Failed to execute script 'classpath*:alfresco/enterprise/webscripts/org/alfresco/enterprise/repository/admin/support-tools/admin-activesessions.get.js': java.lang.ClassCastException
org.springframework.extensions.webscripts.WebScriptException: 01130443 Wrapped Exception (with status template): 011313704 Failed to execute script 'classpath*:alfresco/enterprise/webscripts/org/alfresco/enterprise/repository/admin/support-tools/admin-activesessions.get.js': java.lang.ClassCastException

Temporary Solution:

This page is designed to give live troubleshooting information in case of problems with the system. The design does not take into account the frequent calling of this page for monitoring purposes. Errors reported on this page do not indicate a problem with the system. They can only be used as indicators for further troubleshooting activities in case of problems.

Fix Information:

No fix planned

Keyword: Administration

One-line Description:

Running "OpenLab Storage System Test" of Test Services fails at folder creation step

Problem:

The Storage System Test of Test Services fails when the Operating System language on the OpenLab Server/ECM XT server has been changed since OpenLab Server/ECM XT was installed. 

Temporary Solution:

Set the Operating System language on the OpenLab Server/ECM XT server back to the language that was set at the time OpenLab Server/ECM XT was installed.  

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 08.

Keyword: Administration

One-line Description:

Details page shows reason carried over from the previous version if itself doesn't have a reason

Problem:

If a new file version is uploaded without a reason entered, the reason specified for the previous version will be "carried over". 

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab Server 2.7 Update 08. 

Keyword: Administration

One-line Description:

Recurring "Unable to replicate; The attachment is out of date" error in the server.log file

Problem:

By design, the replication of GCMS tune files on OpenLab CDS AICs for failover mode is limited to files used in the last 30 days. For GCMS tune files older than 30 days, each time the replication cycle runs (every 30 minutes) a "Unable to replicate; The attachment is out of date" error is recorded in the server.log file. On systems with a large number of GCMS tune files, this can lead to the server.log file getting filled with these repeating error messages. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 08 and OpenLab Server 2.8 Update 05.

Keyword: Administration

One-line Description:

Bulk Import Tool misses files

Problem:

When using the Bulk Import Tool, some files may be missed and the tool will still report that the import was successful. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab ECM XT 2.6 Update 14. 

Keyword: Administration

One-line Description:

Unable to log in when LDAP is configured to use Kerberos authentication

Problem:

On systems using Windows Domain authentication, users will not be able to log in if LDAP is configured to use Kerberos authentication. In such cases, a "Connection to the selected server failed" error will be displayed when launching the Control Panel, and a "Could not connect to authentication provider" error will be displayed when attempting to log in to the Content Browser. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 10. 

Keyword: Administration

One-line Description:

The Content Management Activity Log is not updated

Problem:

On systems where the OpenLab Server/ECM XT server does not meet the minimum hardware requirements for CPU and RAM, it has been observed that the system activity log is not updated. 

Temporary Solution:

n/a

Fix Information:

Ensure the hardware requirements for the OpenLab server are met to avoid running into this situation. 
Restart the OpenLab Server/ECM XT server to start generating the activity log entries again.

Keyword: Administration

One-line Description:

AWS S3 Storage Locations are not migrated when upgrading to 2.8

Problem:

If an OpenLab Server / ECM XT server is configured with AWS S3 storage locations, these storage locations may not be migrated when the server is upgraded to OpenLab Server / ECM XT v2.8.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.8 Update 08. For this fix to be effective, OpenLab Server 2.8 Update 08 (or higher) must be installed on a system immediately after upgrading to OpenLab Server/ECM XT 2.8, before executing the Agilent OpenLab Database Import / Transfer Service application.

Keyword: Administration,User Interface

One-line Description:

Activity Log in OLCP does not record the Application name when login from the Web UI

Problem:

The Activity Log in the OpenLab Control Panel does not record the Application Name (e.g. Content Management) when a user connect to the Content Management web interface, only the action of login in and the user name is recorded.

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab Server v2.5 and Openlab ECM XT v2.5

Keyword: Configuration

One-line Description:

Installation fails without any further information on computer where Sample Scheduler Agent or Sample Scheduler Lims Agent should be installed.

Problem:

During the installation firewall exceptions are added to the local firewall through the "Windows Firewall" service.
If the windows firewall service is not running this fails and the installation is rolled-back, leaving the system in a clean state without having applied any changes to the system.

Temporary Solution:

Start the "Windows Firewall" service temporarily, even if not normally needed on the specific machine, during the installation of Sample Scheduler for OpenLAB. The service can be stopped again after
the installation succeeded.

Fix Information:

Fixed in revision 2.1 of Sample Scheduler for OpenLAB

Keyword: Configuration

One-line Description:

Slow login performance when server and user domain don't match forest name

Problem:

The login performance is slow and the server.log file on the OpenLab Server shows the entry "Global catalog for the domain <AAA.BBB> was not found".
This is caused when the user and server domain name don't match the forest name, for example.
Doman name: AAA.net
Forest Name: BBB.net
In cases like this, CDS and ECM XT do not use the Global Catalog, hence login slowness can be observed. 

Temporary Solution:

n/a

Fix Information:

This is fixed in version 2.7Update02

Keyword: Configuration

One-line Description:

OpenLab CDS is not starting due to invalid host name

Problem:

A host name ending or beginning with a "-" will cause the OpenLab certificate service to not provide valid certificates for the host. This does cause problems in the communication between servers, AICs, clients as well as within Workstations.  As a result, Acquisition, Data Analysis, or the OpenLab Control Panel do not start. 

Temporary Solution:

Do not use PC and server host names ending or beginning with a "-". 

Fix Information:

This issue got resolved in OpenLab CDS v2.8.

Keyword: Configuration

One-line Description:

On Server Installed update page shows 'Agilent OpenLab CDS 2.6 Update 11'

Problem:

On Server Installed update page shows 'Agilent OpenLab CDS 2.6 Update 11'.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab CDS v2.6 Update 13.

Keyword: Configuration

One-line Description:

Apache HTTP Server vulnerabilities 

Problem:

OpenLab CDS and ECM XT 2.6 and 2.7 have the Apache HTTP Server (also referred to as Reverse Proxy) integrated. Depending on the exact Apache version installed, 3rd party security software reports a list of security vulnerabilities, see https://httpd.apache.org/security/vulnerabilities_24.html for details.  

Temporary Solution:

n/a

Fix Information:

OpenLab Reverse Proxy Update 06 contains Apache Reverse Proxy 2.4.65 and supersedes OpenLab Reverse Proxy Update 05.
OpenLab Reverse Proxy Update 05 contains Apache Reverse Proxy 2.4.62 and supersedes OpenLab Reverse Proxy Update 04.
OpenLab Reverse Proxy Update 04 contains Apache Reverse Proxy 2.4.59 and supersedes OpenLab Reverse Proxy Update 03.
OpenLab Reverse Proxy Update 03 contains Apache Reverse Proxy 2.4.58 and fixes all Apache vulnerabilities up to release 2.4.57.  

The mentioned updates are available on SubscribeNet and can be applied to CDS and ECM XT 2.6 and 2.7.  

For OpenLab CDS and ECM XT v2.8 the issue was resolved.  

Keyword: Data Analysis

One-line Description:

Search field does not return all applicable results when searching for a result name

Problem:

Searching data with the keyword (option-search text in data selection) is not displaying all results and showing fewer results than actual. Any result sets that have aborted injection with time stamp 1601-MM-DD-HH:MM:SS will not be searchable.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab CDS v2.3 and OpenLab ECM XT v2.3.

Keyword: Performance

One-line Description:

New domain users can't access content management to save methods or any other file

Problem:

It has been observed in rare occasions that after adding new domain users or after editing roles and privileges of existing users, these users can't access the content management to save files or that new permissions are not taken. 

The alfresco.log file , usually located in C:\Program Files (x86)\Agilent Technologies\OpenLAB Data Store\tomcat\logs,  will show the following error(s): 
" ERROR [org.quartz.core.JobRunShell] Job DEFAULT.ldapPeopleJobDetail threw an unhandled Exception:
org.springframework.dao.DataIntegrityViolationException: No property value exists for ID <ID Number> "

This issue is caused by the DEFAULT.ldapPeopleJobDetail and the propTablesCleanupJobDetail jobs running at the same time and leaving incomplete entries in two tables. These incomplete entries will prevent further automatic or manual synchronization with the content management database.

Temporary Solution:

As a temporary solution you can perform the following steps:

1. Delete the orphaned ID's in the datastore tables. 

These IDs are safe to delete as they do not contain any values/properties related to existing Chromatographic results or files.

Use the Alfresco log to get the affected ID's and run the following SQL commands to remove them:

     DELETE FROM alf_prop_unique_ctx WHERE prop1_id = <ID> 
     DELETE FROM alf_prop_root WHERE id = <ID>

2. Reconfigure the propcleaner job as implemented in version 2.3 to avoid the 2 jobs to run at the same time

a) Edit the file C:\Program Files (x86)\Agilent Technologies\OpenLAB Data Store\tomcat\shared\classes\alfresco-global.properties

b) Add the following 4 lines at the end of the file

     # Scheduled job to clean up unused properties from the alf_prop_xxx tables.
     # Default setting of "0 0 3 ? * SAT" is to run every Saturday at 3am.
     # Changed to run every Saturday at 3:03 am to avoid conflicting with OLSS sync that runs every 5 minutes.
     attributes.propcleaner.cronExpression=0 3 3 ? * SAT

Note: There is a space after each character and after ?

   c) Restart AlfrescoTomcat Service

Fix Information:

This issue is resolved with OpenLab Server v2.3 and OpenLab ECM XT 2.3 by changing the schedule of the propTablesCleanupJobDetail job.

Keyword: Performance

One-line Description:

SQL Server Database - 100% CPU Usage

Problem:

On heavily used OpenLab Server or ECM XT using Microsoft SQL Server 2014 or newer, the CPU can go to 100% making the system very slow and unusable.

With Microsoft SQL Server 2014, Microsoft introduced a new mechanism to plan and execute queries and due to the new Cardinality Estimator (CE), certain type of queries slows down due to plan regression.

Plan regression happens when SQL Server starts to use a sub-optimal plan to execute a query. This behavior impacts the CPU (or Memory) resources of the system.
 

Temporary Solution:

While the recommended weekly maintenance plan  to update database statistics and rebuild indexes  works for the majority of the OpenLab Server or ECM XT implementations, systems with many instruments and user sessions running concurrently or systems with high throughput instruments may need to increase the frequency of the “Update Statistics” maintenance plan to keep the SQL Server statistics up to date such that the plan regression does not occur. 
Queries involving the alf_prop_value and alf_prop_string_value tables will show plan regression as they are widely used by applications integrating with OpenLab Server or ECM XT such as OpenLab CDS Acquisition or OpenLab CDS Data Analysis. 
 
To bring back performance to normal
 
1.       Review the currently implemented maintenance plan(s) on the SQL Server. 
2.       Check if the maintenance plan(s) is/are set as per our recommendation and adjust as needed.
3.       Check when was the last time maintenance plan(s) got executed. 
If the 100% CPU on the SQL Server continues to appear:
4.        Create an additional maintenance plan to update the statistics and rebuild the index [optional] of the alf_prop_value and alf_prop_string_value tables 
5.       Start with a twice a week schedule for the new plan and then to daily as the load to the system increases. 
Example(s):
A > Weekly General Maintenance Plan scheduled to run on Sundays.
B > Intermediate Maintenance plan for the alf_prop_value and alf_prop_string_value tables
 
Day   S  M  T  W  T  F  S  S
Plan   A      B          B      A 
 
Day   S  M  T  W  T  F  S  S
Plan  A  B  B   B   B  B  B  A

The other solution is to upgrade to Microsoft SQL Server 2017 Enterprise Edition or Microsoft SQL Server 2019 Enterprise edition and enable the Automatic Tuning feature. 

Upgrading Microsoft SQL Server may require an upgrade of the OpenLab Server or ECM XT application (see the Extra Information section for details)
In response to the performance degradation observed with Microsoft SQL Server 2014 and 2016, Microsoft introduced a new feature in Microsoft SQL Server 2017 called Automatic Tuning that addresses plan regression automatically. The Automatic Tuning feature is only available with the Enterprise Edition.

To enable Automatic Tuning on Microsoft SQL Server 2017 Enterprise Edition or Microsoft SQL Server 2019 Enterprise edition, run the following 3 statements:
 
DBCC FREEPROCCACHE 

ALTER DATABASE [DataStore]
SET QUERY_STORE = ON
    (
      OPERATION_MODE = READ_WRITE,
      CLEANUP_POLICY = ( STALE_QUERY_THRESHOLD_DAYS = 90 ),
      DATA_FLUSH_INTERVAL_SECONDS = 900,
      QUERY_CAPTURE_MODE = AUTO,
      MAX_STORAGE_SIZE_MB = 1000,
      INTERVAL_LENGTH_MINUTES = 60,
      SIZE_BASED_CLEANUP_MODE = AUTO,
      MAX_PLANS_PER_QUERY = 200,
      WAIT_STATS_CAPTURE_MODE = ON
    );
ALTER DATABASE [DataStore]
SET AUTOMATIC_TUNING ( FORCE_LAST_GOOD_PLAN = ON );

 The weekly general maintenance as instructed in the OpenLab ECM XT Administration guide is still needed to update statistics and check index fragmentation.

Additional Information:

OpenLab Server / SQL Server Compatibility 

         2014  2016  2017  2019
v2.3      Y      Y
v2.4      Y      Y      Y
v2.5      Y      Y      Y       Y
 
Microsoft Documentation: Additional Information on Database Statistics, Automatic Tuning and the Query Store database can be found at the following links:
•	https://docs.microsoft.com/en-us/sql/relational-databases/automatic-tuning/automatic-tuning?view=sql-server-ver15
•	https://docs.microsoft.com/en-us/sql/relational-databases/statistics/statistics?view=sql-server-ver15
•	https://docs.microsoft.com/en-us/sql/relational-databases/performance/best-practice-with-the-query-store?view=sql-server-ver15
 



 

Fix Information:

Upgrade SQL Server to 2017 Enterprise version and enable auto tuning

Keyword: Performance

One-line Description:

C:\ProgramData\Agilent\SecureFileSystem is growing significantly

Problem:

The folder C:\ProgramData\Agilent\SecureFileSystem contains the secure workarea for OpenLab products. When OpenLab ECM 3.X is used as a storage backend and the data is stored in SSIZIP format the cleanup process of temporary files within the workarea might fail. This leads to unlimited growth of this folder. 

Temporary Solution:

n/a

Fix Information:

The issue is fixed in the following releases:
OpenLab CDS 2.5 Update 05
OpenLab CDS 2.4 Update 10

Keyword: Performance

One-line Description:

Active Directory query searches the entire forest and causes login slowness.

Problem:

In a multi domain environment Active Directory queries are searching the entire AD Forest causing a slow login.

Temporary Solution:

A fix for this issue is available in OpenLab ECM XT v2.5 Update 03

Fix Information:

The application is now searching in the user domain first.

Keyword: Performance

One-line Description:

Injection data can potentially be lost during a server reboot.

Problem:

On systems using Microsoft SQL Server, if a file is uploaded from an AIC to Content Management while the database server is rebooting, the file can be lost. In these cases, the file can be seen in Content Management but will only have a size of 0 KB. 

This issue only exists in versions 2.6 and 2.7. It did not exist in earlier versions.

Temporary Solution:

n/a

Fix Information:

This problem is fixed in OpenLab CDS v2.6 Update 07 / OpenLab ECM XT v2.6 Update 04 and in OpenLab Server v2.7 Update 02.

Keyword: Performance

One-line Description:

Control Panel freezes when many users launch Acquisition and Data  Analysis at the same time in a client server system.

Problem:

When many users are launching Acquisition and Data Analysis sessions 
at once, the OpenLab Server / ECM XT Server performance can slow as 
the requests are processed. The user experiences slow performance or 
freezing of the Control Panel. 

The underlying cause of this performance symptom is that the Apache 
HTTPD employed by the Reverse Proxy server is configured by default to 
support 64 ThreadsPerChild/Sessions. Because of this, high-traffic 
Servers can slow-down or become unresponsive. 

To verify whether this is the cause of a system’s poor performance, 
review the error.log file located by default in C:\Program Files 
(x86)\Agilent Technologies\OpenLab Reverse Proxy\Apache24\logs for 
entries similar to those below: 

[Thu Nov 18 23:24:45.624673 2021] [mpm_winnt:error] [pid 26544:tid 
2884] AH00326: Server ran out of threads to serve requests. Consider 
raising the ThreadsPerChild setting 

[Fri Nov 19 00:12:52.828373 2021] [mpm_winnt:notice] [pid 26488:tid 
604] AH00422: Parent: Received shutdown signal -- Shutting down the 
server

Temporary Solution:

Please contact Agilent Support for Service Note D0015693 which contains detailed instructions on how to resolve this issue using a powershell script.

Fix Information:

n/a

Keyword: Performance

One-line Description:

SQL Parameter xact abort prevents Data from being uploaded

Problem:

SQL Server has  a variety of settings to optimize the transaction behaviour of the Database. It turns out that if the parameter xact abort is checked in the SQL Server configuration a Data Upload to the ECM-XT/OpenLab Server is not possible anymore

Temporary Solution:

Recommendation is to set the xact abort value back to the default setting (not checked).

Fix Information:

The reason is that the Application needs to manage the transaction and do multiple updates within a single transaction, and by turning XACT_ABORT on, it hands the transaction management over to the database, which causes the error.

Keyword: Performance

One-line Description:

Improvements to address archive problems

Problem:

Archive tasks can take a long time to complete and consume a lot of memory, which can negatively impact system performance.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab CDS 2.5 Update 11 and OpenLab ECM XT 2.5 Update 06; OpenLab CDS 2.6 Update 14 and OpenLab ECM XT 2.6 Update 14; and OpenLab CDS 2.7 and OpenLab ECM XT 2.7

Keyword: Performance

One-line Description:

Excessive logins can cause com.agilent.datastore.cache file to grow and impact performance

Problem:

Excessive logins to the web interface of content management by automated processes can cause the file C:\Program Files (x86)\Agilent Technologies\OpenLAB Data Store\tomcat\temp\com.agilent.datastore.cache to grow. This will affect startup performance of of the content management system. 

Temporary Solution:

n/a

Fix Information:

No fix planned

Keyword: Performance

One-line Description:

Uploading two new files of the same name will result in one of the uploads failing.

Problem:

If two files of the same name are uploaded to a Content Management location where no file of that name currently exists, then one of the two files will fail to upload instead of creating a new version of the file. This only impacts systems using Microsoft SQL Server. 

Temporary Solution:

n/a

Fix Information:

This problem is fixed in OpenLab CDS v2.6 Update 07 / OpenLab ECM XT v2.6 Update 04 and in OpenLab Server v2.7 Update 02.

Keyword: Performance

One-line Description:

Slow performance when loading projects tab in Control Panel

Problem:

Slow performance when loading a large number of projects in the Project tab of the OpenLab Control Panel.

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.8, OpenLab ECM XT v2.6 Update 05 and OpenLab Server v2.7 Update 01.

Keyword: Performance

One-line Description:

Duration of project creation is extremely long

Problem:

Creating a project in system that has a significant amount of projects (1000 or more) is seeing a significant performance degradation such that the creation can take several minutes.

Temporary Solution:

None

Fix Information:

This is fixed in CDS 2.5 Update 03 and higher

Keyword: Performance

One-line Description:

Performance Indexes missing in OpenLab Server / ECM XT v2.7

Problem:

On heavily used OpenLab Server / ECM XT systems using Microsoft SQL Server, cases have been observed where the database server CPU can go to 100% and makes the system very slow and unusable. New performance indexes were developed to address this, but they need to be installed manually.

Temporary Solution:

n/a

Fix Information:

The new performance indexes will now be installed automatically with OpenLab Server 2.7 Update 06. 

Keyword: Performance

One-line Description:

High CPU Load with ActivityLog disabled (SharedServicesHost/ApacheHTTPServer)

Problem:

The Apache HTTP Server and SharedServicesHost processes may consume a large amount of the CPU load on the server. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.8, OpenLab Server v2.7 Update 01. 

Keyword: Performance

One-line Description:

Unable to open method, sequence, and result files in Data Analysis

Problem:

It was observed on an OpenLab CDS client/server system where the CDS clients were installed on laptops that some larger result sets could not be opened in Data Analysis after they were acquired. Attempting to open one of these result sets would trigger an error message stating that the .acaml file has an invalid or missing checksum.

Temporary Solution:

n/a

Fix Information:

This issue is fixed OpenLab ECM XT 2.6 Update 06 / OpenLab CDS 2.6 Update 09 and in OpenLab Server 2.7 Update 06 / OpenLab CDS 2.7 Update 06. 

Keyword: Performance

One-line Description:

OutOfDate is not reset after first instrument's data is read (multi-instrument)

Problem:

On OpenLab CDS AICs with multiple instruments configured, there is the possibility that instrument replication for failover will fail for all instruments if there is an error in the first instrument's replication. 

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab Server 2.8, OpenLab CDS v2.8, OpenLab Server 2.7 Update 04 and OpenLab CDS 2.7 Update 04. 

Keyword: Performance

One-line Description:

Loading Sequence from result set takes >1 minute for Browse box to appear

Problem:

In OpenLab CDS Acquisition when using OpenLab ECM 3.x as the configured storage type, it can take over one minute for the Browse window to be displayed when attempting to load a sequence from a result set. 

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab Server 2.8, OpenLab CDS v2.8, OpenLab Server 2.7 Update 04 and OpenLab CDS 2.7 Update 04. 

Keyword: Performance

One-line Description:

OpenLab Shared Services Crashes frequently

Problem:

On systems with large numbers of entries in the System Activity Log, instabilities in OpenLab Shared Services and the OpenLab Control Panel could lead to the system crashing resulting in an "internal server error". This would cause all user sessions to disconnect and for any currently running or queued samples to be acquired in Failover mode. 

Temporary Solution:

n/a

Fix Information:

This issue is resolved in OpenLab Server 2.8, OpenLab CDS v2.8, OpenLab Server 2.7 Update 04 and OpenLab CDS 2.7 Update 04. 

Keyword: Performance

One-line Description:

Unable to process result sets with big ACAML files from Terminal Server

Problem:

It was observed on systems using thin CDS clients installed on a Terminal Service that large .acaml files (~200MB) can get stuck in the File Upload Queue when reprocessing result sets with the error message: "A system error occurred while uploading a file. Please contact the system administrator." 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab CDS 2.6 Update 11, OpenLab ECM XT 2.6 Update 08, OpenLab CDS 2.7 Update 06, and OpenLab Server 2.7 Update 06.

Keyword: Performance

One-line Description:

Poor performance when renaming, moving, archiving, or dearchiving folders

Problem:

Renaming, moving, archiving, or dearchiving folders that contain a lot of subfolders and files can consume a lot of resources on the server and impact system performance. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab ECM XT 2.5 Update 09, OpenLab ECM XT 2.6 Update 09, and OpenLab Server 2.7 Update 08.

Keyword: Performance

One-line Description:

Leading/trailing spaces trigger an "Import data failed" error when importing data in DA

Problem:

When using OpenLab ECM 3.x as a backend, an "Import data failed" error can occur when importing a .olax result set in OpenLab CDS Data Analysis containing files with either a leading or trailing space. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 08 and OpenLab CDS 2.7 Update 08. 

Keyword: Performance

One-line Description:

Zip files with a ".template" extension will fail to upload

Problem:

On systems using OpenLab Server/ECM XT 2.6 or 2.7 as a storage backend, zip files with a ".template" extension will fail to upload and get stuck in the File Upload Queue. 

The automation.log file on the client where the failure occurred will state: "Agilent.OpenLab.Storage.ExternalStorageException: A system error occurred while uploading a file. Please contact the system administrator."

The alfresco.log file on the OpenLab Server/ECM XT server will state: "java.lang.NoClassDefFoundError: org/apache/commons/io/build/AbstractStreamBuilder". 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab ECM XT 2.6 Update 14 Patch 01 and OpenLab Server 2.7 Update 11 Patch 01. It is also planned to be fixed in OpenLab Server 2.7 Update 12.

Keyword: Performance

One-line Description:

AIC replication may fail on systems using Oracle

Problem:

Instrument replication on OpenLab CDS 2.7 AICs for operational continuity/failover may not work on systems using Oracle-hosted databases. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 10.

Keyword: Performance,Roles and Privileges

One-line Description:

New domain users can't access content management to save methods or any other file

Problem:

New domain users can't access content management to save methods or any other file and Synchronize in OpenLab Control Panel fails.

Temporary Solution:

As a temporary solution you can perform the following steps:

1. Delete the orphaned ID's in the datastore tables. 

These IDs are safe to delete as they do not contain any values/properties related to existing Chromatographic results or files.

Use the Alfresco log to get the affected ID's and run the following SQL commands to remove them:

     DELETE FROM alf_prop_unique_ctx WHERE prop1_id = <ID> 
     DELETE FROM alf_prop_root WHERE id = <ID>

2. Reconfigure the propcleaner job as implemented in version 2.3 to avoid the 2 jobs to run at the same time

a) Edit the file C:\Program Files (x86)\Agilent Technologies\OpenLAB Data Store\tomcat\shared\classes\alfresco-global.properties

b) Add the following 4 lines at the end of the file

     # Scheduled job to clean up unused properties from the alf_prop_xxx tables.
     # Default setting of "0 0 3 ? * SAT" is to run every Saturday at 3am.
     # Changed to run every Saturday at 3:03 am to avoid conflicting with OLSS sync that runs every 5 minutes.
     attributes.propcleaner.cronExpression=0 3 3 ? * SAT

Note: There is a space after each character and after ?

   c) Restart AlfrescoTomcat Service

Fix Information:

The application has a job to clean obsolete property values in the database (Prop Cleaner Job) and one to synchronize users from LDAP to the Content Management (User Sync Job).

The Orphan Property ID issue occurs when the Prop Cleaner Job runs at the same time as (or within close time proximity of) the User Sync Job, resulting in deletion of property values that should not have been deleted and causing dangling references inside the database that prevents the application from doing further user synchronizations.

This issue affects the following Products and Versions:
OpenLab CDS v2.2, v2.3 and v2.4
OpenLab Server v2.2, v2.3 and v2.4
OpenLab ECM XT v2.2, v2.3, and v2.4

Keyword: Performance,User Interface

One-line Description:

Control Panel Lab-At-A-Glance display of instruments is slow.

Problem:

In environments with many instruments, displaying the list of instruments can be very slow.
The issue is caused by a permission check done for every instrument location and instrument for the connected user in the OpenLab Control Panel. 
This issue is affecting OpenLab Server and OpenLab ECM XT v2.4 and v2.5

Temporary Solution:

This issue is fixed with OpenLab ECM XT v2.5 update 03.

Fix Information:

n/a

Keyword: Reports

One-line Description:

Print out of Content Browser search results displays an incorrect message

Problem:

Printouts of the search results page in the Content Browser will display "No results found" followed by a message stating that a problem was encountered. 

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server 2.7 Update 06 and OpenLab ECM XT 2.6 Update 09. 

Keyword: Roles and Privileges

One-line Description:

Users can delete their own data without deletion permission via web client

Problem:

Users who have only "read" and "write" permission (Edit content of project) in OpenLab CDS 2.3 with content management can delete their own generated data via content managment web client. 

Temporary Solution:

For workstation plus and client/server system, we recommend restricting user access to content management client by removing the permission "Access content using web client" from the users.

Fix Information:

This issue is fixed in OpenLab CDS v2.4 and OpenLab CDS v2.3 Update 05. 

Keyword: Roles and Privileges

One-line Description:

New user group is unable to access the projects after upgradation to CDS 2.7

Problem:

New user group is unable to access the projects after upgradation to CDS 2.7

Temporary Solution:

n/a

Fix Information:

In OpenLab CDS you have 2 Archive Types, Archive Online (in place) which locks the selected file or folder from any further modifications and leaves them in their current locations or Archive Online (archive folder) which locks the selected file or folder from any further modifications and moves them into the 'Archive' system folder.

For archived projects, even existing users that once had write access will now become read-only. No one will have write access to that project folder even for existing users. It is not possible to add new Groups or users to an archived Project. The only way to add a new user to an existing archived Project is to add this user to an existing group that's already applied to the Project.

Keyword: Roles and Privileges

One-line Description:

Users added to a domain group can't access content management

Problem:

After an OpenLab system is moved to a new domain, users that are added to domain groups can't access content management.
The alfreso.log file shows the error
----------------
[org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] User authenticated but failed to sync with user registry com.agilent.datastore.olss.service.ServerDownException: Not Found {"error":"The object was not found.","errorCode":"ObjectNotFound"}
----------------
This will be the case if the old domain is no longer available.

Temporary Solution:

As a workaround, manually cleanup the table ExternalUsers of the OLSharedServices database. Remove all entries for users of the old domain.

Fix Information:

n/a

Keyword: Roles and Privileges,User Interface

One-line Description:

Orphan Property ID leading to sync failure

Problem:

The application has a job to clean obsolete property values in the database (Prop Cleaner Job) and one to synchronize users from LDAP to the Content Management (User Sync Job).

The Orphan Property ID issue occurs when the Prop Cleaner Job runs at the same time as (or within close time proximity of) the User Sync Job, resulting in deletion of property values that should not have been deleted and causing dangling references inside the database that prevents the application from doing further user synchronizations.

This issue affects the following Products and Versions:
OpenLab CDS v2.2, v2.3 and v2.4
OpenLab Server v2.2, v2.3 and v2.4
OpenLab ECM XT v2.2, v2.3, and v2.4

Temporary Solution:

n/a

Fix Information:

This issue is fixed in OpenLab Server v2.5 and OpenLab ECM XT v2.5

This fix is also available in the following Software Updates:  
- OpenLabCDS v2.4 Update 04  and ECM XT 2.4 Update 01
- OpenLab CDS v2.3 Update 10  and ECM XT 2.3 Update 03
- OpenLan CDS v2.2 Update 07 and ECM XT 2.2 Update 01

Keyword: User Interface

One-line Description:

After "Edit in microsoft office", the preview is not updated

Problem:

After "Edit in Microsoft Office", the preview is not updated.
Affected version: Opelab ECm XT v2.2

Temporary Solution:

Download the file and make edits or use a different browser.

Fix Information:

This issue is addressed in version ECM XT 2.3

Keyword: User Interface

One-line Description:

Search cannot handle Metadata which contains a µ

Problem:

When a document containing a µ symbol is uploaded, searching the document with a string using that symbol ( e.g. >5µl ) will not return any hit.

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: User Interface

One-line Description:

dx file cannot be previewed after upgrade but the rx file can be previewed in XT

Problem:

After upgrade dx files acquired with CDS version older than 2.2 can't be previewed in the CM web interface due to an old data mime type (application/dx)
Data acquired with CDS 2.2 or later will have a mime type dx/-dx

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: User Interface

One-line Description:

Previewing the content of EZChrom files may fail upon viewing the file details on the first try

Problem:

Previewing the content of EZChrom files may fail upon viewing the file details on the first try through the web interface.

Temporary Solution:

n/a

Fix Information:

Try the following: 
1. Refresh the browser for the preview to render again
or
2.Open a command prompt as administrator and type "C:\Program Files (x86)\Agilent Technologies\Content Management Converters\EZChrom\ChromInfoRegistrationTool.exe /install"
or
3. Open file explore and go to C:\Program Files (x86)\Agilent Technologies\Content Management Converters\EZChrom and  Run chrominfo.exe as Administrator

Keyword: User Interface

One-line Description:

PDFs Which Include Localized Characters Can Appear Garbled in Web UI Previews

Problem:

PDFs containing localized characters can appear garbled when viewed through the Web UI preview screens.

Temporary Solution:

n/a

Fix Information:

The PDFs can be downloaded and viewed through any PDF reader application.  They will show up correctly.

Keyword: User Interface

One-line Description:

First time login to the Content Management Web UI can take up to 60s

Problem:

After a reboot of the server or a restart of the services, login in to the Content Management Web UI can take up to 60 seconds. This is mainly caused by the Access Control List and permissions checks on repository objects required to build the dashboard.

Temporary Solution:

n/a

Fix Information:

No fix planned for this issue.

Keyword: User Interface

One-line Description:

Delay observed in searching for newly added or deleted files in Content Management

Problem:

When new files are added to Content Management, searching may not immediately find them. The Index and Search service running on the application server or on a separate index server may take few minutes to  processed them on a large deployment. The same is true for deleted files.

Temporary Solution:

n/a

Fix Information:

The indexing typically runs every 15s and looks for new files added or deleted to be processed.

Keyword: User Interface

One-line Description:

Pagination disappears when search returns more than 250 results 

Problem:

The pagination on the search results page disappears when more that 250 hits are found.

Temporary Solution:

n/a

Fix Information:

The Search User Interface as been redesigned in version 2.4, pagination is no longer displayed. User needs to keep scrolling down to see the search results

Keyword: User Interface

One-line Description:

Incorrect rendering of MS Office documents in preview

Problem:

MS Office documents previews are not showing up correctly.

Temporary Solution:

n/a

Fix Information:

No Fix planned for this issue, As a workaround, download the files and view in their native office applications.

Keyword: User Interface

One-line Description:

Sampler graphic not displayed in preparative results, if first sample did not run

Problem:

When the first sample of a purification task with multiple samples is not being processed e.g. by deselection, the preparative results view of that completed task will not show a graphical representation of the sampler. The preparative sample results are all displayed also in the fraction collector graphics, and fractions can be exported.

Temporary Solution:

Sample information can be found in the tabular view instead of the graphic.
Setup your prep sequence such that the first sample is running.

Fix Information:

A fix is planned in a future revision of Purification Software.

Keyword: User Interface

One-line Description:

Backup Utility is failing fail at verification step due to exhausting connections to the MS SQL server

Problem:

If you use the Backup Utility for OpenLab 2.6 with an SQL Database Engine, the Verification at the end of the Backup will fail if the Number unique files in Content Management exceeds 5000+  Files and the default verification setting is at 10%.

Temporary Solution:

n/a

Fix Information:

This  Problem will be fixed in an upcoming OpenLab 2.6 update

Keyword: User Interface

One-line Description:

Error message occurs if server name in Storage Locations contains dot on Content Paths page

Problem:

When running Step 4 of an installation or the Server Configuration Utility, the below error will display when validating the information provided on the Content Paths page if a dot (.) character is included in one of the specified Content Storage Locations and/or Archive Storage Locations:
“Storage locations with incorrect path format detected.
Please edit the storage locations. Use the following patterns below:
C:\location\
\\server\location”

Temporary Solution:

n/a

Fix Information:

n/a

Keyword: User Interface

One-line Description:

"modified" timestamp after sequence has been archived triggered by filtering for PDF

Problem:

It has been observed that if you Filter for .pdf Reports in an archived Sequence some sequences display a "Modify by ...." date/time subsequent to the "archived" date/time. The Activity log and version history correctly state that no changes have been committed after the sequence has been archived.

Temporary Solution:

n/a

Fix Information:

The Problem will be  fixed in OpenLab CDS 2.7 and OpenLAB ECM-XT 2.7

Keyword: User Interface

One-line Description:

Japanese Language Files are not included in Content Management Security Update 01 

Problem:

With the release of Content Management Security Update for OpenLab CDS 2.6 or OpenLab ECM XT 2.6 some language related Files (Japanese) are not included in the underlying Product (Hyland Alfresco). Users might see a "Failed to load plugin" warning on the left-hand side when accessing specific Pages in the Content manager WEB-UI. The Functionality of the software is not affected

Temporary Solution:

n/a

Fix Information:

This problem is fixed in OpenLab CDS v2.6 Update 07 / OpenLab ECM XT v2.6 Update 04 and in OpenLab Server / ECM XT v2.7.

Keyword: User Interface

One-line Description:

ECM-XT Scheduler UI not accessible

Problem:

ECM-XT Scheduler UI not accessible after Launching it after Installation.

Temporary Solution:

N/A

Fix Information:

It was observed that it takes some minutes until the ECM-XT Scheduler WEB-UI can be accessed after the Installation of the ECM-XT 2.7 Scheduler Add On. This happens only for the first Login. For consequent Logins the startup of the WEB-UI is faster.

Keyword: User Interface

One-line Description:

Japanese characters cannot be previewed in the Content Browser for ANSI encoded .txt files uploaded using an Import Scheduler task

Problem:

If an ANSI encoded .txt file containing Japanese characters is uploaded in Content Management using an Import Scheduler task, the Japanese characters will not be displayed properly in its Content Browser preview. 

Temporary Solution:

This issue is only present when the .txt file is uploaded using the Import Scheduler. As a temporary workaround, affected files can be manually uploaded via the Content Browser.

Fix Information:

This issue is fixed in OpenLab Server 2.8, OpenLab Server v2.7 Update 01 and is planned to be fixed in OpenLab ECM XT v2.6 Update 05.

Keyword: User Interface

One-line Description:

Click Jacking Vulnerability

Problem:

A potential clickjacking vulnerability was discovered. 

Temporary Solution:

n/a

Fix Information:

This vulnerability is addressed in OpenLab Server 2.7 Update 06 and OpenLab ECM XT 2.6 Update 09.

Keyword: User Interface

One-line Description:

Backup Verification of v2.7 Backup Utility may fail on File uploads from older Datastore Versions

Problem:

It has been observed on migrated v2.7 Systems where the Systems contains Data uploaded from older Versions i.e. A02.02, that the Verification of the v2.7 Backup Utility may fail. This does not mean that the Backup is not valid, only the Information which is taken for verification is not available for this old Data. 

Temporary Solution:

N/A

Fix Information:

N/A

Keyword: User Interface

One-line Description:

Installation of Cary-UV server plugin removes Security and storage test.

Problem:

After the installation of the Cary-UV Server plug-in the OpenLab Security Test and the OpenLab storage System Test are no longer available. 

Temporary Solution:

As a workaround these tests can be run from a Client or an AIC. Technically this would be equivalent to running it on the server. This Problem will be fixed in Version 2.8

Fix Information:

The Installation of Cary UV Software in a Networked Workstation Mode connected to a Central ECM-XT or OpenLab Server requires the installation of the Cary-UV Server plug-in on the Server. After the installation the Test services related OpenLab Security Test and the OpenLab storage System Test are no longer available on the Server

Keyword: User Interface

One-line Description:

Test Services Workflow test is not compatible with Cary UV Instrument Controller

Problem:

After the installation of the Cary-UV Server plug-in the Workflow test will not execute when running Test Services on an AIC.

Temporary Solution:

As a workaround, the Cary UV Instrument Controller can be removed from OpenLab Control Panel. This will not have any impact on Cary UV.

Fix Information:

n/a

Keyword: Workflow

One-line Description:

OpenLab storage system test fails with ECM 3.6.7 backend

Problem:

Due to changes introduced with ECM 3.6 Update 07, the storage system test fails when OpenLab 2.7 is configured with ECM 3.6.7 as the storage backend.

Temporary Solution:

None

Fix Information:

This issue is fixed in OpenLab CDS 2.8 Update 08 with Feature Pack 02. For OpenLab CDS 2.7 there is no fix.