IBM InfoSphere Identity Insight Version 9.0 - Release Notes

These release notes contain information to ensure the successful installation and use of IBM® InfoSphere® Identity Insight Version 9.0. Included is information about updates, fixed problems, usage notes, and known problems.

About IBM InfoSphere Identity Insight
Summary of product enhancements and fixes for Identity Insight version 9.0
Modified views and tables
Install Scenarios for IBM InfoSphere Identity Insight version 9.0
Verifying Identity Insight 9.0 installation
Known issues and changes when using the product
System requirements updates

About IBM InfoSphere Identity Insight

IBM InfoSphere Identity Insight is an identity and social network analysis platform for discovering threats and fraud across large volumes of data. Its market leading identity and relationship disambiguation technology is combined with complex event processing to detect anomalous patterns in real-time. IBM InfoSphere Identity Insight helps organizations solve business problems related to recognizing the true identity of someone or something ("who is who”) and determining the potential value or danger of various relationships ("who knows who") among customers, employees, vendors, or other external entities. This analysis occurs in the context of existing business applications and provides immediate and actionable information to help prevent threat, fraud, abuse, and collusion in any industry or organization.

Summary of product enhancements and fixes for Identity Insight version 9.0

Version 9.0 includes the following product enhancements and fixes:

User interfaces

Explorer: The IBM InfoSphere Identity Insight Version 9.0 release includes the new Identity Insight Explorer application (based on the popular Identity Insight plug-in for i2 Analyst’s Notebook) that allows analysts to research entities and entity relationships, as well as research and disposition role-based and event-based alerts.
Analyst’s Notebook plug-in: The i2 Analyst’s Notebook plug-in gains the ability to view, research, and disposition role-based and event-based alerts, as well as numerous performance improvements and minor feature upgrades.
Console: A new configuration console simplifies the configuration of Identity insight by combining many old configuration screens into streamlined interfaces (complete with embedded user-assistance).
Graph: The thin-client graph application has been enhanced with new call-out and ‘baseball-card’ features.
API: All Identity Insight applications work with an extended SOA/Web-Services layer, which has been updated with many new configuration and alerting services.

WebSphere Liberty

All of this is powered by IBM WebSphere Liberty, which provides an extendable security model for integration into third-party authentication services, offers much faster start-up and stop times, and represents the latest in WebSphere technology. All Identity Insight applications and plug-ins now recognize the WebSphere Liberty basic authentication model which can be configured to work with other authentication providers.

Pipeline

Along with all bug-fixes and enhancements released since the last major release (8.1.0.4), Identity Insight version 9.0 includes the following enhancements: performance improvements for EnhancedQuery, disclosed relationship processing, and passive-load; and many minor fixes.

Platform Support

Identity Insight has been enhanced with the addition of support for Linux on Power Systems. Both HP-UX and Sun Solaris support have been removed for this version.

Database Support

Identity Insight will support IBM DB2 versions 10.5 and 11, Oracle 11 and 12c. IBM Informix and Microsoft SQL support have been removed.

Modified views and tables

Customized views overwritten or deleted during upgrade to IBM InfoSphere Identity Insight version 9.0:: BEST_NAME_CONFLICT; COG_CONFLICT_PATHS; COG_ENTITY_CONDATA; COG_ENTITY_DATA; COG_RELATIONSHIP_SUMMARY; COG_RESUME_CONFLICTS; SOA_COMPONENT_CONFIG_GROUPS; SOA_ROLE_ALRT_HDR_MULTI; VIS_0DEGREE_EXISTS; VIS_CONFLICT_LOG; VIS_ENTITY_CONDATA; VIS_ER_STATE_DT
New views when upgrading to IBM InfoSphere Identity Insight 9.0: COG_ATTR_ALERT_HISTORY; COG_EVENT_SIT_HISTORY; COG_GEM_EVENT_ALERT_UNASGN_SUM; COG_INBOX_ATTR_ALERT_SUMMARY; COG_INBOX_EVENT_ALERT_SUMMARY; COG_INBOX_ROLE_ALERT_SUMMARY; COG_MAA_UNASGN_SUM; COG_SEARCH_MATCH_DETAILS; SOA_CODES; SOA_DQM_RULES; SOA_GEM_EVENT_ALERT_UNASGN_SUM; SOA_INBOX_EVENT_ALERT_ASGN_SUM; SOA_INBOX_EVENT_ALERT_SUMMARY; SOA_UMF_EXCEPT
Modified tables / columns when upgrading to IBM InfoSphere® Identity Insight 9.0: CONFLICT_RULES - new column added: ENABLED; COMPONENT_GROUP - new column added: ENABLE_TAGS; UMF_QUERY_RESULT - modified to include data source codes for each entity; UMF_SEARCH_RESULT - modified to include data source codes for each entity; COMPONENT_CONFIG; COMPONENT_GROUP_DESC

Note: Backing up your modified view and tables to prevent loss is necessary if you are upgrading to Version 9.0. It is the responsibility of the customer to reapply any custom changes made to the schema or views.

Install Scenarios for IBM InfoSphere Identity Insight version 9.0

Identity Insight 9.0 can be installed as a new installation, or an upgrade can be performed from any level of Identity Insight 8.1. To migrate from earlier releases, contact IBM Support. For more information on planning, installation and configuration, see the Install Guide for Identity Insight version 9.0

Considerations and issues for Microsoft Windows users

If you use IBM InfoSphere Identity Insight on a Microsoft Windows client, be aware of the following before installing:

Windows Server for pipeline or Application Server with a DB2® database server:

A potential issue exists for IBM Identity Insight customers who are using Windows Server operating systems for the pipeline or Application Server and an IBM DB2 database server. Latin-1 or UTF-8 data may not be encoded correctly by Identity Insight Version 8.1 with this operating system-database combination. If you are using a DB2 database, you are strongly encouraged to install IBM Identity Insight Version 9.0 in a test environment and verify correct encoding of Latin-1 or UTF-8 data. Check the following columns:

Table=NAME
Columns=LAST_NAME, FIRST_NAME, MID_NAME,
NAME_PFX, NAME_SFX, NAME_GEN

Table=ADDRESS
Columns=ADDR1, ADDR2, ADDR3, CITY, STATE

Table=ATTRIBUTE
Column=ATTR_VALUE

If the data in any of these tables appear to be incorrectly encoded, check the following Environment variable is set on your Windows pipeline server:

DB2CODEPAGE

This should be set to the same value as the DB2 Database 'CODEPAGE' variable. For example, if the DB2 Database configuration is:

CODEPAGE=1208
CODESET=UTF-8

The DB2CODEPAGE environment variable should be set as follows:

set DB2CODEPAGE=1208

Considerations and issues for Oracle database users

If you use an Oracle database with IBM InfoSphere Identity Insight, be aware of the following additional known issues:

Do not segment or partition database tables that are used for UMF input transports: Database tables that are used for UMF input transports must not be segmented or partitioned. Segmenting or partitioning these transport tables will result in errors in the pipeline transport and lost data.

Verifying Identity Insight 9.0 installation

Verify that you have successfully installed Identity Insight 9.0

Verify that the pipeline has been updated. Run the pipeline command without options and confirm that the output shows:
```
** pipeline v9.0.0.20161104-2241
```
Verify that Web services have been updated. Open a Web browser and enter the URL for your installation. For example, http://hostname:13510/easws/api/soap. You should see the following:
```
 - 20161109_0959
- - - - - - - - - - - - - - - - - - - - 
SERVICE_NAME = EntityResolver
WRAPPED_DOCUMENT_LITERAL = true
RESOURCE_SUBDIRECTORY = soap
```

Known issues and changes when using the product

Be aware of the following considerations and known issues related to using the product:

SOA reopenAlert method: The SOA method reopenAlert lists a comment field as optional. However, the comment field is required for the method to be executed successfully.
DSN configuration setup: When setting up DSN configurations (for use in entity resolution or the getRelationshipBetweenEntities SOA method), the minimum path strength should be set to a value greater than 0 (1-100) to prevent web-service timeouts and excessive pipeline processing.
New WebSphere MQ creation: When creating a new queue in IBM WebSphere MQ, the 'Append RFH version 2 headers to messages sent to this destination' check-box must be un-checked in order for the Identity Insight pipeline to process MQ messages. This setting can be located in queue's advanced properties.

To see the latest information about known problems and issues

Known problems are documented in the form of individual technotes in the Support portal at http://www.ibm.com/support/entry/portal/Software/Information_Management/InfoSphere_Identity_Insight:

Use the Search Support feature and in the Enter terms, error code or APAR # field, enter a keyword, phrase, error code, or APAR number to search on.
Select Solve a problem.
Click Search.

As problems are discovered and resolved, the IBM Support team updates the Support portal. By searching the Support portal, you can quickly find solutions to problems.

At time of publication, there were no known installation problems. Check the Support portal for the most current information.

System requirements updates

For the latest information about hardware and software compatibility, see the detailed system requirements document at http://www.ibm.com/support/entry/portal/Software/Information_Management/InfoSphere_Identity_Insight.