We are excited to announce general availability of DX Unified Infrastructure Management (UIM) 23.4 Cumulative Update 9 (CU9). This release extends DX UIM's capabilities to provide a secure, highly observable, and easily manageable infrastructure monitoring solution.
DX UIM 23.4 CU9 delivers powerful enhancements for multi-domain authentication, device tagging, deployment and credential security, and platform hardening. Below are important highlights in this release.
Note: The CU9 upgrade does not install optional probes by default; you only need to deploy them if your environment actively uses them. However, both the webservices_rest and uimdataservices optional probes contain the latest security fixes — deploy them if you require their functionality.
1. Multi-Domain LDAP Now Supported Across Every Login Surface
DX UIM's Hub-based LDAP integration now supports multiple domains, so organizations spanning several authentication domains can log in without manual workarounds. This support extends across the full login surface — Operator Console, Admin Console, SSO, and Infrastructure Manager.
• Configurable Priority: Configure multiple LDAP domains on the hub with a default domain and priority order.
• Automatic Conflict Resolution: Automatically resolves conflicts when the same user or group exists across domains, with an alert if a configured domain's LDAP server becomes unreachable.
• Consistent Multi-Domain Visibility: Operator Console login correctly resolves the default domain in multi-domain setups; Admin Console standalone login and SAML-based SSO support authenticating users from multiple LDAP domains; and Infrastructure Manager's access control screens now show the LDAP domain alongside the group name for easier identification.
2. Expanded Tagging for Your Full Device Inventory
System Tags (System Tag 1 and System Tag 2) now extend across your full device inventory, expanding tag-based filtering, grouping, alarm management, and dashboard display beyond robot-monitored devices:
• Tagging Parity for Non-Robot Devices: Assign and update System Tags on non-robot devices and hosts individually or in bulk using the UIM API, or manage them directly within the Operator Console via the Device Details and Inventory views.
• Unified Alarms and Reporting: Filter and group alarms, NAS pre-processing rules, and UIM BI dashboards using non-robot system tags, standardizing tag-based filtering and reporting across your device inventory workflow.
Fig 1: System Tags are now available for all inventory assets in DX UIM
3. Stronger Deployment and Credential Security
CU9 continues to harden how DX UIM authenticates to the infrastructure it deploys to and monitors:
• Modern SSH Algorithm Support: Passwordless SSH-based robot deployment, via the Automated Deployment Engine and Discovery Agent, now supports modern SSH key exchange, host key, and cipher algorithms — including on Rocky Linux 10, RHEL 9, and RHEL 10.
• Improved Credential Security for WASP and Alarm Enrichment: Database connection credentials for the WASP and Alarm Enrichment probes are now held securely in memory and refreshed dynamically at each restart, providing strong protection against credential exposure.
4. Database and Data Service Flexibility
• Custom SQL Server Filegroup Support: The DX UIM Server installer now lets you specify a custom FileGroup name during setup, giving you direct control over database storage placement — data and newly created partitions are directed to your designated FileGroup, with automatic fallback to the Primary FileGroup if none is specified.
• UIM Data Service Enhancement: The new resolveDateRange UIM Data service function converts relative or named date range inputs into explicit target timestamps and formatted display strings, ensuring your API queries calculate precise start and end date parameters across custom or relative time ranges.
5. Platform Updates and Security Hardening
• Version Updates: Java_Jre 21 (21.0.12.1_1), Java_Jre 8 (jre8u504b01), Log4j v2.26.1, and OpenSSL v3.5.8.
• Third-Party Remediations: Security updates for 29 third-party libraries, an upgraded Node.js runtime bundled with Dashboard Designer, a patched Apache Log4j across DX UIM components (CVE-2026-49844), and an upgraded Netty library (netty-resolver-dns) in the automated_deployment_engine probe to 4.2.15.Final (CVE-2026-45674).
• Hardened Web and Session Security: DX UIM web console HTTP responses now include the Permissions-Policy header to prevent unauthorized browser feature access, and session cookies retain the HTTPS attribute during logout or expiry to prevent transmission over unencrypted connections.
• Resolved Issues: Password expiration security configurations now correctly propagate to secondary hubs, and password encryption is enforced in the UIMAPI when configuring the Oracle probe with encryption enabled.
Getting Started with DX UIM 23.4 CU9
DX UIM 23.4 CU9 is now generally available. To know more about these new capabilities please refer to the full What's New in DX UIM 23.4 CU9. Contact Broadcom Support to begin planning for your upgrade.
#uim #Infrastructure #Monitoring #observability #release #security