RSA Archer 6.5 and Later Release Notes

Release Notes
6.5 and Later

Contact Information
Go to the RSA corporate web site for regional Customer Support telephone and fax numbers:
https://community.rsa.com/community/rsa-customer-support.
Trademarks
RSA, the RSA Logo, RSA Archer, RSA Archer Logo, and Dell are either registered trademarks or trademarks of Dell
Corporation ("Dell") in the United States and/or other countries. All other trademarks used herein are the property of their
respective owners. For a list of RSA trademarks, go to www.emc.com/legal/emc-corporation-trademarks.htm.
License agreement
This software and the associated documentation are proprietary and confidential to Dell, are furnished under license, and may
be used and copied only in accordance with the terms of such license and with the inclusion of the copyright notice below. This
software and the documentation, and any copies thereof, may not be provided or otherwise made available to any other person.
No title to or ownership of the software or documentation or any intellectual property rights thereto is hereby transferred. Any
unauthorized use or reproduction of this software and the documentation may be subject to civil and/or criminal liability.
This software is subject to change without notice and should not be construed as a commitment by Dell.
Third-party licenses
This product may include software developed by parties other than RSA. The text of the license agreements applicable to third-
party software in this product may be viewed on RSA.com. By using this product, a user of this product agrees to be fully
bound by terms of the license agreements.
Note on encryption technologies
This product may contain encryption technology. Many countries prohibit or restrict the use, import, or export of encryption
technologies, and current use, import, and export regulations should be followed when using, importing or exporting this
product.
For secure sites, Dell recommends that the software be installed onto encrypted storage for secure operations.
For customers in high security zones, Dell recommends that a full application sanitization and reinstallation from backup occur
when sensitive or classified information is spilled.
Note on Section 508 Compliance
The RSA Archer® Suite is built on web technologies which can be used with assistive technologies, such as screen readers,
magnifiers, and contrast tools. While these tools are not yet fully supported, RSA is committed to improving the experience of
users of these technologies as part of our ongoing product road map for RSA Archer.
The RSA Archer Mobile App can be used with assistive technologies built into iOS. While there remain some gaps in support,
RSA is committed to improving the experience of users of these technologies as part of our ongoing product road map for the
RSA Archer Mobile App.
Distribution
Use, copying, and distribution of any Dell software described in this publication requires an applicable software license.
Dell believes the information in this publication is accurate as of its publication date. The information is subject to change
without notice. Use of the software described herein does not ensure compliance with any laws, rules, or regulations, including
privacy laws that apply to RSA’s customer’s businesses. Use of this software should not be a substitute for consultation with
professional advisors, including legal advisors. No contractual obligations are formed by publication of these documents.
THE INFORMATION IN THIS PUBLICATION IS PROVIDED "AS IS." DELL INC. MAKES NO REPRESENTATIONS OR
WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY
DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Copyright © 2010-2019 Dell Inc. or its subsidiaries. All Rights Reserved.

January 2019
Release Notes
Contents
Preface 4
RSA Archer Documentation 4
Support and Service 5
Other Resources 5
Release 6.5 Patch 2 7

Localization in Release 6.5 Patch 2 7
Fixed Issues in Release 6.5 Patch 2 7
Known Issues in Release 6.5 Patch 2 10

Fixed Issues in Release 6.5 Patch 1 18
Known Issues in Release 6.5 Patch 1 22
Release 6.5 30
What's New in RSA Archer 6.5 and Later 30
Fixed Issues in Release 6.5 41
Known Issues in Release 6.5 43
3
Release Notes
Preface
RSA Archer Documentation

You can access RSA Archer documentation on the Archer Customer/Partner Community on RSA
Link at: https://community.rsa.com/community/products/archer-grc/archer-customer-partner-
community/
The following table describes each document.
Document Description
Release Notes A list of issues fixed in the release and a list of issues known at the time of the
release. Available in PDF format.
What's New Overview of the new and updated features in the current release. Overview of the
Guide differences between RSA Archer version 5.x and version 6.x. Suggestions on
planning for moving from 5.x to 6.x are included. This information is available in
the RSA Archer Online Documentation and in PDF format.
Installation Instructions for installing the latest RSA Archer release, and upgrading from 5.x
and Upgrade and 6.x to the latest release. Available in PDF format.
Guide
Online Information for using RSA Archer including how to set up and maintain the
Documentation Platform, how to use the Platform features, how to use the RESTful and Web
APIs, security configuration information, and how to install and use the solution
use cases. Available from within the product in HTML5 format using context-
sensitive links, as well as in a Zip format for local installation. The Online
Documentation is also available in full on the RSA Archer Community on RSA
Link at: https://community.rsa.com/community/products/archer-grc/archer-
customer-partner-community/. Content from the Online Documentation system is
also available in PDF format, divided in to the following guides:
l Administrator's Guide
l User's Guide
l RESTful API Guide
l Web API Guide
l Content API Guide
l Security Configuration Guide
l Use Case Guides (one guide for each of the available solution use cases)
Preface 4
Release Notes
Document Description
Archer Control Information for using the RSA Archer Control Panel module to manage the
Panel (ACP) internal settings of the Platform, such as license keys, global paths and settings.
Help Available from within the ACP module, in a ZIP format for local installation, and
in PDF format.
Planning Information about how to plan for your new RSA Archer installation. This
Guide document is intended for system administrators who are responsible for installing
and managing RSA Archer. Available in PDF format.
Support and Service
Customer Support Information https://community.rsa.com/community/rsa-customer-support
Customer Support E-mail archersupport@rsa.com
Other Resources
Resource Description
RSA Archer Our public forum, on the RSA Link Community platform, brings together customers,
Community prospects, consultants, RSA Archer thought leaders, partners and analysts to talk
on about GRC as a practice, and includes product demos, GRC videos, white papers,
RSA Link blogs and more.
https://community.rsa.com/community/products/archer-grc
RSA Archer Our private community, is a powerful governance, risk and compliance online
Customer / network that promotes collaboration among RSA Archer customers, partners,
Partner industry analysts, and product experts. Engaging with the RSA Archer Community
Community on RSA Link enables you to collaborate to solve problems, build best practices,
on establish peer connections and engage with RSA Archer thought leaders.
RSA Link https://community.rsa.com/community/products/archer-grc/archer-customer-partner-
community
RSA Ready RSA's Technology Partner Program is where third parties gain access to RSA
Software in order to develop an interoperability and have it documented and
certified. RSA Ready certifications are posted to an online community and
supported by RSA Support.
https://community.rsa.com/community/products/rsa-ready
Preface 5
Release Notes
Resource Description
RSA The RSA Exchange for RSA Archer offerings help you rapidly deploy adjacent or
Exchange supporting risk business processes, quickly integrate new risk data sources, and
for implement administrative utilities to make the most out of their risk and compliance
RSA Archer investment.
https://community.rsa.com/community/products/archer-grc/exchange
Preface 6
Release Notes
Release 6.5 Patch 2

RSA Archer Release 6.5 Patch 2 Release Notes contain the following sections:
l Localization
l Fixed Issues
l Known Issues
Localization in Release 6.5 Patch 2

RSA Archer 6.5 Patch 2 includes localized versions of the Platform, use cases, and documentation
for the following languages:
l Chinese (Simplified)
l French
l German
l Italian
l Japanese
l Portuguese
l Spanish
All use cases and use case documentation are localized, with the exception of RSA Archer Public
Sector use cases (RSA Archer Assessment and Authorization, RSA Archer Continuous Monitoring,
and RSA Archer Plan of Action & Milestones Management). The RSA Archer use case documents
are available for download on RSA Link.
For information about fixed and known issues in the localized version, see Fixed Issues in Release
6.5 Patch 2 and Known Issues in Release 6.5 Patch 2.
Fixed Issues in Release 6.5 Patch 2

This section lists issues that are fixed in the current release.
Component Issue Description
Appearance, ARCHER- On the Appearance page, the labels for the Field Name
Globalization and 62311 Alignment options are not translated in Spanish language
Localization locales.
Application ARCHER- Changes to a values list order are incorrectly saved after users
Builder 57087 navigate away without clicking Save.

Release Notes
Application ARCHER- Users can save an inherited record permissions field even when
Builder 57124 the referenced field is invalid.
Application ARCHER- History fields display an invalid warning message when the
Builder 57786 Options tab is not visited after tracked fields are selected.
Application ARCHER- When users delete a field, the warning dialog lists the name of
Builder 59833 the target application instead of the questionnaire name.
Application ARCHER- After a user deletes a module in the user interface, the
Builder, 61711 DeleteModuleContentMetadataWorkflow () system job does
Database not remove it from the database.
Application ARCHER- Auto-generated findings do not automatically enroll in

Builder, Jobs 63022 Advanced workflow for a questionnaire that targets a Findings
application.
Calculations, ARCHER- An inherited record permissions field based on a calculated

User Interface 59006 cross-reference field does not populate.
Charts and ARCHER- The Heat Map report displays incorrect data.
Graphs 57970
Content API ARCHER- Tableau fails to retrieve Content API metadata for users who
60939 are not system administrators.
Content API ARCHER- Content API generates a 500 internal server error (Content
62020 Data source is not found).
Data Driven ARCHER- When a calculated text field that is hidden from the layout and
Events 61002 has no controls present in the user interface, making a change
to the text field triggers a data driven event. This DDE then
fails because the Controller,js file was not loaded in the default
page.
Database, ARCHER- Values list operators are incorrectly removed from the
Install/Upgrade 62804 supported operator.
Globalization and ARCHER- For French language locales, using the report option "Refresh
Localization, 60159 rate every 24 hours" displays an error message because of the
Reports thousand separator value.
Install/Upgrade, ARCHER- Advanced Workflow (AWF) fails to start if an HTTPS/SSL

Workflow (AWF) 56909 option is selected during installation.

Release Notes
Job Framework ARCHER- Restarting the job server in a multi-host job engine setup
56122 incorrectly clears all reserved jobs.
Jobs ARCHER- The Self-Assessment record fails to load data if too many risks
63043 are associated with it. The request times out, but there is no
error message to the end user.
LDAP ARCHER- On the TestLDAPSchema.aspx page, the Query LDAP Schema

Synchronization 57210 and Parse LDAP Schema options do not have descriptions of
functionality.
Navigation, ARCHER- The navigation path differs between closing a report after
Search and 58349 modifying it versus closing it without modifications.
Search Results
Questionnaires, ARCHER- A cross-reference to an application is saved on a questionnaire

Workflow (AWF) 56026 when Advance Workflow is enabled.
Record Page ARCHER- Filtering on drop-down values lists does not clear when all the
59470 filtering text is removed at the same time.
Record Page ARCHER- The warning message "Other text is required for field" displays
59987 when there is a value in the "Other" text box.
Record Page ARCHER- The Source Code Editor window for a text area field closes
63014 abruptly without saving entered HTML suggestions.
Report Object ARCHER- Report objects do not load in a collapsed section of the layout
57599 when users navigate to a record page from a display report
page.
Reports, User ARCHER- The Change Language option on an existing report does not
Interface 63195 display a scrollbar.
Reports, User ARCHER- The Cross-Reference field state is not correct when
Interface 63253 transitioning from Conflict Resolution to Edit Mode.
Reports, ARCHER- The Statistical Report's formatting options are not properly
Workspaces, 61572 displayed when the report is part of a links list iView
Dashboards, and configured with the Embed in New Window action.
iViews
Search and ARCHER- Filter values are incorrectly cleared out for sub-form fields
Search Results 58986 after saving a report.

Release Notes
Search and ARCHER- The Grouping column in the Sorting section on the Advanced
Search Results 60644 Search page is grayed out when the Find function is used to
search for the Field to Evaluate selection.
Workflow (AWF) ARCHER- After an RSA Archer upgrade that contains new properties in
56418 Advanced Workflow (AWF), when a system administrator
navigates away from AWF when there have been no changes,
an unsaved changes message sometimes displays.
Workspaces, ARCHER- The Linklist iView displays the message "File or directory not
Dashboards and 60629 found" when any .PDF file is configured in an open new
iViews window configuration.
Workspaces, ARCHER- General users cannot export a global dashboard in PowerPoint

Dashboards and 60674 (PPTX) format without the workspace being enabled for adding
iViews personal dashboards.
Workspaces, ARCHER- When a links list is configured with an external URL using the
Dashboards and 61012 option Embed in New Window, the configured web page does
iViews not display.
Known Issues in Release 6.5 Patch 2

This section lists reported issues that remain unresolved as of the latest release. Wherever a
workaround is available, it is noted or referenced in detail. For many of the workarounds in this
section, you must have administrative privileges.
Access ARCHER- When searching for the Everyone group, the Edit and Delete icons
Control 31183 are available, even if the Everyone group is set to Read-Only.
Access ARCHER- When attempting to edit an access role that provides Create, Read,
Control 41738 Update, and Delete rights to Schedule and Content, a UI exception
occurs.
Application ARCHER- If each value is not saved individually after drag and drop, values-
Builder 63482 list hierarchy is not saved.
Workaround:
Save individual values after dragging and dropping.

Release Notes
Application ARCHER- If a user has an application with a calculated cross-reference

Builder 48566 pointing to its own parent application, any records that meet the
match criteria are not included until a full recalculation is manually
launched from the Application Builder.
Application ARCHER- Default text in the text area field is not removed by clicking the
Builder 48798 field.
Workaround:
Manually select and delete the default text within the text area
field.
Application ARCHER- An empty tab set causes the application copy process to generate an
Builder 44013 error and prevents data-driven event rules from being copied.
Application ARCHER- When closing the editing of a values list on the 2nd level of a
Builder 53760 leveled application, the left-pane Administration menu may continue
to display.
Application ARCHER- The Less Than (<) symbol does not appear in the global values list
Builder 58876 for Unicode values.
Bulk ARCHER- When bulk update is enabled, the Create and Enable Delete options
Operations 40769 do not display.
Bulk ARCHER- When navigating through Quick Links, the Schedule page does not
Operations 41474 close.
Bulk ARCHER- When searching for inactive users on Schedule Actions, inactive
Operations 41442 users display in the search results.
Bulk ARCHER- After completing a Bulk Create or Bulk Update action, the Bulk
Operations 41644 Actions menu is still displayed.
Bulk ARCHER- When users attempt to access a schedule or action to which they do
Operations 41755 not have access using deep links, an alert message stating that the
users do not have access does not display.
Bulk ARCHER- You cannot add the Manage Schedule link to the Quick Reference
Operations 41779 tab.
Bulk ARCHER- If any of the records selected for Bulk Delete have already been
Operations 41838 deleted, Bulk Delete fails.

Release Notes
Bulk ARCHER- The Bulk Action report shows repeated global validation messages.
Operations 41841
Bulk ARCHER- While Bulk Delete is in progress, search results show some records
Operations 41866 with no value. After Bulk Delete completes, this behavior is not
observed.
Bulk ARCHER- When you attempt to create a new reference using Bulk Create,
Operations, UI 41500 sometimes part of the Date & Time field name is unreadable behind
the field.
Calculated ARCHER- When saving Inline Edit changes, the page does not automatically
Cross- 46348 refresh.
reference Workaround:
Do one of the following:
l Save. Cancel the Inline Edit. The page should automatically
refresh.
l Save. Manually refresh the browser.
l Save. Navigate away. Return to the page.
Calculated ARCHER- Applications that point to their parent application in a calculated

cross- 48566 cross-reference do not update automatically.
Manually force a recalculation from the Application Builder.
Charts and ARCHER- From the Edit button on the homepage, users cannot select charts
Graphs; 31276 saved as Global Reports with the Display Options set to enable
Reports Display Total and Display Zero Values.
Content API ARCHER- For content retrieval, the application name or alias is incorrectly
57843 case sensitive.
Data Feeds ARCHER- When a large source file is added to the Source Definition tab, an
47727 exception occurs.

Release Notes
Data Feeds ARCHER- When running a data feed using XSLT 3.0, if the RSA Archer
48616 environment does not have internet access, it cannot validate the
DTD and gives an error.
Workaround:
When running data feeds using XSLT 3.0, verify that your RSA
Archer environment has internet access.
Data Feeds ARCHER- When running the VSR Import data feed, the following error is
52938 included in the log files:
Violation of PRIMARY KEY constraint 'PL_tbllVUserContent'
Data Import ARCHER- A faulted data import erroneously lists the number of records in the
40928 file as having been created, when in fact it created none.
Documentation ARCHER- A calculated cross-reference can filter on Related Records. The

48940 RSA Archer Online Documentation currently lists Related Records
as unsupported by calculated cross-references.
Field ARCHER- The Self-Reference Calculation field can be marked for encryption.
Encryption 41772 Encrypted fields cannot be used in calculations.
Workaround:
While editing the self-calculated field, if encryption related warning
is shown, disable the encryption status, and then save the field.
Globalization ARCHER- While changing the order of values list values the following values
and 48080 are not translated:
Localization l Drop In
l Drop After
l Drop Before
Inline Edit ARCHER- When a Hierarchical Values List field display is not set to drop-
41827 down, the last value does not display correctly.
Inline Edit, ARCHER- When updating a dependent field in inline edit, and that field is part
Search and 46348 of a calculated cross-reference calculation, the results are not
Search Results immediately seen on the search page, even though the calculated
cross-reference field has recalculated after changes are saved.
Workaround:
Refresh the page.

Release Notes
Navigation ARCHER- After clicking a quick link that opens in a new window, the new
48703 window does not display correctly.
Navigation ARCHER- When using Internet Explorer or Safari, if the user routes through a
52673 text field on a page that does not use Microsoft Silverlight and then
immediately clicks on a button, the user must click a second time to
initiate the action.
Offline Install ARCHER- When users upgrade Archer Offline access from a version pre-6.5
58656 to 6.5 or later, the offline installer does not update the SQL Server
2012 LocalDB to SQL Server 2017 LocalDB and also the registry
key. As a result, the offline access sync does not complete.
Workaround
Uninstall SQL Server LocalDb manually, and also delete a key
from the registry using the Registry Editor in order to upgrade a
client that previously had Offline Access installed on it.
The registry key depends on unique IDs and user names, but will
look similar to the following example:
Computer\HKEY_CURRENT_
USER\Software\Microsoft\Microsoft SQL Server\UserInstances\
{0A643155-0194-4FCF-84D3-FA5DF16E36B1}
The key that needs to be removed will have a DataDirectory value
similar to the following:
C:\Users\usernameGoesHere\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\OfflineArcher
Offline Sync ARCHER- Offline users are not alerted when a record conflict causes an
54312 offline record synchronization failure. The following warning
message does not appear in system tray:
Sync failed with Conflicts
Workaround:
After the sync fails due to record conflict, the user must navigate to
the Offline Access Library page and select Resolve Conflicts.
Questionnaires ARCHER- Creating a questionnaire and selecting the option of populating

41655 questions from the Question Library throws an unexpected error if
the Question Library is not licensed.

Release Notes
Questionnaires ARCHER- If a questionnaire has Advanced Workflow configured with the

43967 Updated Records and User Initiated enrollment options, the User
Initiated button does not appear.
Questionnaires ARCHER- In a Questionnaire configuration, creating a campaign with the

55683 same name as an existing campaign generates an error.
Record ARCHER- After selecting the Sort option for a column containing ampersand
Browser 41195 (&) and colon (:), the application returns no records.
Record Page ARCHER- When you add and attempt to copy a record containing the Last
41877 Updated field, the time in the Last Updated field changes while in
Copy mode.
Record Page ARCHER- Under Global Value lists, expanding the hierarchy value lists which
55888 has approximately 350 children generates an unexpected error.
Record Page ARCHER- The Source Code Editor window for a text area field closes abruptly
60946 when HTML suggestions are selected using the mouse.
Workaround:
Use the keyboard to choose the suggestions instead of a mouse
click, or type in the HTML tags without using the suggestions.
Reports ARCHER- Accessing a report with filter criteria applied to the Numeric Range
57564 with No Selection value generates an error.
Reports ARCHER- When a statistical report grouped on a sub-form values list field is
58502 drilled down and modified, the sub-form values list field values do
not show in the filters.
Reports ARCHER- When a Statistical report with a group-by-hour condition on the First
59389 Published date or Last Updated date is drilled down, the records
having the respective date timestamp as 59th minute of the hour do
not display.
Reports, User ARCHER- The Change Language option on an existing report does not display
Interface 61478 a scrollbar.
Workaround: Use the up and down arrow keys on the keyboard to
select the language.
Search and ARCHER- A blank field appears when reordering selected fields in statistics
Search Results 48246 search. The search is saved.

Release Notes
Search and ARCHER- After selecting a global or personal report, the Select Report dialog
Search Results 48980 box displays the text "false". This window appears briefly before
properly routing to the requested report.
Search and ARCHER- In Advanced Search, in the Fields to Display, Filters, and Sorting
Search Results 37717 sections, you must click a field twice to select it.
Search and ARCHER- When a statistical search field is moved up or down in the order, the
Search Results 38890 associated statistical operation is lost and must be reselected.
Search and ARCHER- Count drill-in when sorting by a Values List value that is in the 2nd
Search Results 56179 or more level does not display results.
Section 508 ARCHER- The JAWS screen reader does not read the full Access Control
Compliance 53101 Reports name in the Access Control menu. The screen reader
should read "Access Control. Access Control Reports."
Section 508 ARCHER- TAB does not navigate away from a text area field.
Compliance 52842 Workaround:
Use the mouse to navigate away from the next field.
Shared UI ARCHER- In Mozilla Firefox, the default focus is on the description box,
Components 40896 which prevents users from entering values for other fields.
User Interface ARCHER- When using Record Lookup from an Apple iPad, the OK and
48935 Cancel buttons are not available.
User Interface ARCHER- Users are unable to export a report that has a Card format, but for
53613 which the Export format is PDF.
User Profile ARCHER- When selecting a locale, the user interface focus and selection does
40833 not display correctly.
Workflow ARCHER- When working in the Advanced Workflow builder, interacting with
(AWF) 47401 the process or node properties pane causes the pane to scroll to the
top, which makes configurations difficult to control.
Workflow ARCHER- Orphan tasks that are in progress cannot complete after restarting
(AWF) 55655 Advanced Workflow.

Release Notes
Workspace ARCHER- After creating a new application, items in the Workspaces menu are
Display 41616 duplicated.
Workaround:
Refresh the page.
Workspaces, ARCHER- Users with Create, Read, Update, and Delete rights to global
Dashboards, 41794 dashboards from the Administration menu cannot edit global
and iViews dashboards in the end-user interface.
Workspaces, ARCHER- On the Layout tab of the administration Manage Dashboards page,
Dashboards, 53878 in the Dashboard Layout section, administrators cannot remove
and iViews iViews for general users.
Workspaces, ARCHER- In Google Chrome version 56, executable scripts are blocked. This
Dashboards, 53893 browser blocking creates the following issues:
and iViews l The Administrative Quick Links iView does not contain working
links.
l On the Layout tab of the administration Manage Dashboards
page, the Dashboard Layout section does not display.
Workaround:
Use Internet Explorer or Mozilla Firefox.

Release Notes
Release 6.5 Patch 1

RSA Archer Release 6.5 Patch 1 Release Notes contain the following sections:
l Fixed Issues
l Known Issues
Fixed Issues in Release 6.5 Patch 1

Access Control, ARCHER- When a user who does not have create rights attempts to create
Appearance, 58213 a record for the second time, the OK button in the error
User Interface message that appears is unresponsive.
Admin ARCHER- The Admin Dashboard does not populate data in the Australian
Dashboard 52696 timezone.
Appearance, ARCHER- The date picker color scheme does not display correctly when
Record Page, 58969 the field border is enabled on the Appearance page.
User Interface
Application ARCHER- The CAST (Score Card ) field does not display linked records
Builder 54389 when the user clicks Total or View individual status.
Application ARCHER- Users are unable to load large values lists on the Manage
Builder 57818 Values List Administration page without generating an error.
Application ARCHER- The Formula Builder adds a backslash (\) character to fields
Builder 59043 with an apostrophe in the field name.
Application ARCHER- Values List values do not display in View mode in a Cross-
Builder, Record 58324 Reference or Related Record field.
Page
Application ARCHER- The solution description disappears after users click Save and
Builder, Solutions 58660 then reopen the solution.
Archer Control ARCHER- The tblDataFeedHistory and tblDataFeedMessage tables retain

Panel, Data 53750 history and message information beyond the end of the
Feeds specified retention period.

Release Notes
Bulk Operations, ARCHER- System administrators are not able to access the Schedules
Calculations 58537 page when there are Bulk and Calc out-of-the-box schedules
for non-licensed modules.
Charts and ARCHER- The rendering of Values List values in Charts and Data is
Graphs 57973 inconsistent.
Charts and ARCHER- A chart bar corresponding to graph items is missing in the
Graphs 57974 statistical report.
Charts and ARCHER- The Heat Map displays value labels in the wrong location.
Graphs 58761
Data Driven ARCHER- The data driven event (DDE) re-runs unexpectedly after a
Events 54334 Conflict Resolution is processed.
Data Feeds, ARCHER- Data feeds are unable to import identical data mappings in non-
Globalization and 58734 English locales.
Localization
Database ARCHER- The performance of proc usp_get_object_content_user_group

57460 has been improved.
Database ARCHER- The performance of usp_get_object_content_precomputed_

58517 authorization_by_field for large numbers of records in the
tblPreComputedContentAuthorization table has been improved.
Database, Search ARCHER- The performance of usp_get_object_content_select_value has

and Search 54218 been improved.
Results
Database, ARCHER- The performance of Advanced Workflow when tables are large
Workflow (AWF) 59731 has been improved.
Global Search, ARCHER- Lengthy text area fields require two clicks to access records
Navigation, User 58121 from Global Search.
Interface
Globalization and ARCHER- The abbreviations for days of the week are not localized in the
Localization 59493 Date Picker on the Records page.
Globalization and ARCHER- Task Management actions are not localized.

Localization 59495

Release Notes
Globalization and ARCHER- Language imports fail because of a bad token error.
Localization 57730
Install/Upgrade ARCHER- The Archer Control Panel (ACP) and the Installer do not have
58536 the same messaging and behavior concerning database version
requirements.
Job Framework, ARCHER- Questionnaires intermittently experience a lack of success in

Questionnaires 51074 returning findings.
Login Home ARCHER- REST Web Services responses may not contain Archer
Page, Print and 59728 technology-specific diagnostics information.
Export, Security
Print and Export ARCHER- Exporting large numbers of records containing fields in Anchor-
48001 to-PDF format generates a DevExpress printing error.
Questionnaires ARCHER- Findings do not generate for questionnaires with all incorrect
55680 answers.
Questionnaires, ARCHER- Deleting an application record while it is enrolled in Advanced

Workflow (AWF) 55903 Workflow generates a warning message.
Record Page ARCHER- Attached files are lost from records when users transition from
42009 View mode to Edit mode.
Record Page ARCHER- Hyperlinks and Jump Links to Anchors in the same record
57546 reveal a hidden Submit button and cut off the record page at the
top.
Record Page ARCHER- Attempts to open a particular record generate an unexpected

57842 error.
Record Page ARCHER- Saving the parent record after adding a cross-reference record
61386 generates the following error message when there is no change
in the parent record:
Violation of PRIMARY KEY constraint 'PK_
tblIVModuleContent'. Cannot insert duplicate key in object
'dbo.tblIVModuleContent'.
Record Page ARCHER- Cross-reference field values are not linked to the parent record
61387 when the record is closed without saving.
Record Page, ARCHER- The OK and Cancel buttons on the Unsaved Changes window
Section 508 60381 do not function when using the keyboard in Internet Explorer.

Release Notes
Reports ARCHER- The Chart and Data report does not display the No Selection
56825 value.
Reports, Security ARCHER- The Error handler in the REST API may generate improperly
58515 encoded pop-up messages.
Search and ARCHER- Other text from a Values List value displays only from the first
Search Results 58643 record.
Security ARCHER- A ZURB sub-component cross-site scripting issue in Tool Tips

59813 allows the use of script-related tags.
Security, IIS Web ARCHER- The RSA Archer Installer stores some DLLs in a non-standard
Server 56022 directory.
ARCHER-
59507
User Interface ARCHER- Numerous third-party UI Web controls have been upgraded.
61252 The third-party spell-check control has been replaced by the
spell-check capabilities of each individual Archer-supported
browser.
User Interface ARCHER- The error dialog indicating restricted access while navigating to
57409 an application through the iViews does not respond after
clicking OK.
View Mode ARCHER- The rendering of ValueList values is not consistent.

(Record) 57971
Workflow (AWF) ARCHER- Enrolling a record into Advanced Workflow generates the error
58610 Workflow Job Failed to Start.
Workflow (AWF) ARCHER- Deleting an application record that is enrolled in Advanced

59693 Workflow generates a warning message.
Workflow (AWF) ARCHER- Advanced WorkFlow does not update the WorkFlow job status
60269 when a job is in an error state.
Workspaces, ARCHER- The Select iViews option on the Layout tab on Administration
Dashboards and 60067 dashboards is unavailable for non-English locales.
iViews

Release Notes
Known Issues in Release 6.5 Patch 1

Access ARCHER- When searching for the Everyone group, the Edit and Delete icons
Control 31183 are available, even if the Everyone group is set to Read-Only.
Access ARCHER- When attempting to edit an access role that provides Create, Read,
Control 41738 Update, and Delete rights to Schedule and Content, a UI exception
occurs.

match criteria are not included until a full recalculation is manually
launched from the Application Builder.
Workaround:
field.
Application ARCHER- An empty tab set causes the application copy process to generate an
Builder 44013 error and prevents data-driven event rules from being copied.
Application ARCHER- When closing the editing of a values list on the 2nd level of a
Builder 53760 leveled application, the left-pane Administration menu may continue
to display.
Application ARCHER- The Less Than (<) symbol does not appear in the global values list
Builder 58876 for Unicode values.
Bulk Actions ARCHER- When bulk update is enabled, the Create and Enable Delete options
40769 do not display.
Bulk Actions ARCHER- When navigating through Quick Links, the Schedule page does not
41474 close.
Bulk Actions ARCHER- When searching for inactive users on Schedule Actions, inactive
41442 users display in the search results.

Release Notes
Bulk Actions ARCHER- After completing a Bulk Create or Bulk Update action, the Bulk
41644 Actions menu is still displayed.
Bulk Actions ARCHER- When users attempt to access a schedule or action to which they do
41755 not have access using deep links, an alert message stating that the
users do not have access does not display.
Bulk Actions ARCHER- You cannot add the Manage Schedule link to the Quick Reference
41779 tab.
Bulk Actions ARCHER- If any of the records selected for Bulk Delete have already been
41838 deleted, Bulk Delete fails.
Bulk Actions ARCHER- The Bulk Action report shows repeated global validation messages.
41841
Bulk Actions ARCHER- While Bulk Delete is in progress, search results show some records
41866 with no value. After Bulk Delete completes, this behavior is not
observed.
Bulk Actions, ARCHER- When you attempt to create a new reference using Bulk Create,
UI 41500 sometimes part of the Date & Time field name is unreadable behind
the field.
Calculated ARCHER- When saving Inline Edit changes, the page does not automatically
Cross- 46348 refresh.
refresh.
l Save. Navigate away. Return to the page.
Calculated ARCHER- Applications that point to their parent application in a calculated

cross- 48566 cross-reference do not update automatically.
Charts and ARCHER- From the Edit button on the homepage, users cannot select charts
Graphs; 31276 saved as Global Reports with the Display Options set to enable
Reports Display Total and Display Zero Values.

Release Notes
Content API ARCHER- For content retrieval, the application name or alias is incorrectly
57843 case sensitive.
Data Feeds ARCHER- When a large source file is added to the Source Definition tab, an
47727 exception occurs.
48616 environment does not have internet access, it cannot validate the
DTD and gives an error.
Workaround:
Violation of PRIMARY KEY constraint 'PL_tbllVUserContent'
Data Import ARCHER- A faulted data import erroneously lists the number of records in the
40928 file as having been created, when in fact it created none.
Documentation ARCHER- A calculated cross-reference can filter on Related Records. The

48940 RSA Archer Online Documentation currently lists Related Records
as unsupported by calculated cross-references.
Field ARCHER- The Self-Reference Calculation field can be marked for encryption.
Encryption 41772 Encrypted fields cannot be used in calculations.
Workaround:
While editing the self-calculated field, if encryption related warning
is shown, disable the encryption status, and then save the field.
Globalization ARCHER- While changing the order of values list values the following values
and 48080 are not translated:
l Drop After
l Drop Before
Inline Edit ARCHER- When a Hierarchical Values List field display is not set to drop-
41827 down, the last value does not display correctly.

Release Notes
Inline Edit, ARCHER- When updating a dependent field in inline edit, and that field is part
Search and 46348 of a calculated cross-reference calculation, the results are not
Search Results immediately seen on the search page, even though the calculated
cross-reference field has recalculated after changes are saved.
Workaround:
Refresh the page.
Job ARCHER- When running data feeds, if you use the JSON File Iterator
Framework 48077 navigation method, RSA Archer cannot process JSON files larger
than 1 GB.
Navigation ARCHER- After clicking a quick link that opens in a new window, the new
48703 window does not display correctly.
Navigation ARCHER- When using Internet Explorer or Safari, if the user routes through a
52673 text field on a page that does not use Microsoft Silverlight and then
immediately clicks on a button, the user must click a second time to
initiate the action.
Offline Install ARCHER- When users upgrade Archer Offline access from a version pre-6.5
58656 to 6.5 or later, the offline installer does not update the SQL Server
2012 LocalDB to SQL Server 2017 LocalDB and also the registry
key. As a result, the offline access sync does not complete.
Workaround
Uninstall SQL Server LocalDb manually, and also delete a key
from the registry using the Registry Editor in order to upgrade a
client that previously had Offline Access installed on it.
The registry key depends on unique IDs and user names, but will
look similar to the following example:
Computer\HKEY_CURRENT_
USER\Software\Microsoft\Microsoft SQL Server\UserInstances\
{0A643155-0194-4FCF-84D3-FA5DF16E36B1}
The key that needs to be removed will have a DataDirectory value
similar to the following:
C:\Users\usernameGoesHere\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\OfflineArcher

Release Notes
message does not appear in system tray:
Workaround:
After the sync fails due to record conflict, the user must navigate to
the Offline Access Library page and select Resolve Conflicts.

41655 questions from the Question Library throws an unexpected error if
the Question Library is not licensed.

43967 Updated Records and User Initiated enrollment options, the User
Initiated button does not appear.

Record ARCHER- After selecting the Sort option for a column containing ampersand
Browser 41195 (&) and colon (:), the application returns no records.
41877 Updated field, the time in the Last Updated field changes while in
Copy mode.
Record Page ARCHER- Under Global Value lists, expanding the hierarchy value lists which
55888 has approximately 350 children generates an unexpected error.
Record Page ARCHER- The Source Code Editor window for a text area field closes abruptly
60946 when HTML suggestions are selected using the mouse.
Workaround:
Use the keyboard to choose the suggestions instead of a mouse
click, or type in the HTML tags without using the suggestions.
Reports ARCHER- Accessing a report with filter criteria applied to the Numeric Range
57564 with No Selection value generates an error.
Reports ARCHER- When a statistical report grouped on a sub-form values list field is
58502 drilled down and modified, the sub-form values list field values do
not show in the filters.

Release Notes
Reports ARCHER- Exporting a report in Statistics mode intermittently generates an

59353 unexpected error.
Reports ARCHER- When a Statistical report with a group-by-hour condition on the First
59389 Published date or Last Updated date is drilled down, the records
having the respective date timestamp as 59th minute of the hour do
not display.
Reports, User ARCHER- The Change Language option on an existing report does not display
Interface 61478 a scrollbar.
Workaround: Use the up and down arrow keys on the keyboard to
select the language.
Reports, ARCHER- The Statistical Report's formatting options are not properly
Workspaces, 61572 displayed when the report is part of a links list iView configured
Dashboards, with the Embed in New Window action.
and iViews
Search and ARCHER- A blank field appears when reordering selected fields in statistics
Search Results 48246 search. The search is saved.
Search and ARCHER- After selecting a global or personal report, the Select Report dialog
Search Results 48980 box displays the text "false". This window appears briefly before
properly routing to the requested report.
Search and ARCHER- In Advanced Search, in the Fields to Display, Filters, and Sorting
Search Results 37717 sections, you must click a field twice to select it.
Search and ARCHER- When a statistical search field is moved up or down in the order, the
Search Results 38890 associated statistical operation is lost and must be reselected.
Search and ARCHER- Count drill-in when sorting by a Values List value that is in the 2nd
Search Results 56179 or more level does not display results.
Search and ARCHER- The Grouping column in the Sorting section on the Advanced
Search Results 60644 Search page is grayed out when the Find function is used to search
for the Field to Evaluate selection.
Workaround:
Scroll and select Field to Evaluate manually without using Find.

Release Notes
User Interface ARCHER- Users are unable to export a report that has a Card format, but for
53613 which the Export format is PDF.
User Profile ARCHER- When selecting a locale, the user interface focus and selection does
40833 not display correctly.
Workflow ARCHER- When working in the Advanced Workflow builder, interacting with
(AWF) 47401 the process or node properties pane causes the pane to scroll to the
top, which makes configurations difficult to control.
Workflow ARCHER- Orphan tasks that are in progress cannot complete after restarting
(AWF) 55655 Advanced Workflow.
Workspace ARCHER- After creating a new application, items in the Workspaces menu are
Display 41616 duplicated.
Workaround:
Refresh the page.
Workspaces, ARCHER- On the Layout tab of the administration Manage Dashboards page,
Dashboards, 53878 in the Dashboard Layout section, administrators cannot remove
and iViews iViews for general users.

Release Notes
Workspaces, ARCHER- In Google Chrome version 56, executable scripts are blocked. This
Dashboards, 53893 browser blocking creates the following issues:
and iViews l The Administrative Quick Links iView does not contain working
links.
Workaround:

Release Notes
Release 6.5
RSA Archer Release 6.5 Release Notes contain the following sections:
l What's New in 6.5
l Fixed Issues
l Known Issues
What's New in RSA Archer 6.5 and Later

This section describes the new and updated features in RSA Archer 6.5 and Later since the 6.4 SP1
release.
For complete details on the features added for release 6.5 and Later, see the RSA Archer Online
Documentation.
Platform Enhancements
The following table describes the Platform enhancements in this release.
Enhancement Description
Advanced The following changes were made to Advanced Workflow:

Workflow l Bulk Update Jobs provides RSA Archer the ability to update active
Advanced Workflow jobs to reflect the changes that are made to the
Advanced Workflow process. You can manually run Bulk Update Jobs from
the interface using the Workflow Process Designer. For more information,
see "Using the Advanced Workflow Interface" in the RSA Archer Online
Documentation.
l You can now maximize the Workflow Process Designer to fill your browser
window. For more information, see "Using the Advanced Workflow
Interface" in the RSA Archer Online Documentation.
l In the Workflow Process Designer, the new default value for the Wait for
Content Update node is No Delay. For more information, see "Building
Advanced Workflows" in the RSA Archer Online Documentation.
Release 6.5 30
Release Notes
APIs In the Content API, related records fields are now supported.
The following Content API mobility calls have been added in this release:
l Content Save. Helps save the contents of an application.
l Get Workflow Actions. Retrieves available user workflow actions.
l Save Workflow Actions. Commits the workflow action chosen by the user.
l Get Cross-Reference or Related Records Relationships. Returns a list of all
the records referenced by either a cross-reference or related records field.
In the RESTful API, the new Get User Tasks resource retrieves all the tasks
assigned to a user in the current RSA Archer instance.
Bulk Actions In the Group By feature, to populate the target field, you can now configure the
Field Value Expression section to link strings and available field values.
For more information, see "Performing On-Demand Bulk Actions" and
"Scheduling Bulk Actions" in the RSA Archer Online Documentation.
Calculated The Editable Grid Display option enables users to inline edit calculated cross-
Cross reference and related record fields. Administrators select which fields to display
Reference in the grid for editing.
Charts The appearance of charts has been modernized and improved. Examples of the
improvements are:
l Default shading is changed from Glass to Standard.
l Default axis color is no longer black.
l Spacing between legend items has improved legibility.
l Borders in legend item color cells are removed.
l New color palette is added.
Release 6.5 31
Release Notes
Data Feed The following two data feed tokens were updated or introduced in this release:
Tokens l BatchContentSave (updated). Content changes made by data feeds with the
BatchContentSave token are not captured within any RSA Archer History
Logs. However, the updates are noted within the Field Audit History
Information.
l EnableBatchContentSaveHistoryLog (new). Enables the History Log when
the BatchContentSave token is in use.
Note: When the EnableBatchContentSaveHistoryLog token is enabled, the

cross reference and related record fields are not updated in the History Log.
Data Privacy You can now encrypt new and existing Image and Attachment fields. Existing
field data is moved to the Encrypted folder in the file repository. Encrypted
fields display data in the record as normal text. Files and images associated with
encrypted attachment and image fields are decrypted when downloaded. Archer
to Archer data feeds support encrypted attachments.
For more information about encryption, see "Encrypting Data" in the RSA
Archer Online Documentation.
Database Support for Microsoft SQL Server 2016 SP1 and Microsoft SQL Server 2017
Server Support brings several Enterprise Edition capabilities to the Standard Edition, which
many customers run to power their RSA Archer implementations. RSA Archer
6.5 does not support Microsoft SQL Server 2014 and Microsoft SQL Server
2016 below Service Pack 1. Microsoft SQL Server 2016 Enterprise Edition is
still supported.
Upgrade your database servers to 2016 SP1 or higher, before you upgrade to
RSA Archer 6.5. For more information
see: https://community.rsa.com/community/products/archer-grc/archer-customer-
partner-community/blog/2018/09/13/getting-future-ready-database-edition.
Release 6.5 32
Release Notes
Elasticsearch Elasticsearch for Keyword and Global Search allows the optional, independent
licensing of Elasticsearch to support faster and more efficient indexing of
content for search purposes, performing "at scale" when large record volumes
are present. The third-party software search engine, Elasticsearch, is now
available for Keyword and Global Searches in RSA Archer. Elasticsearch can
be enabled in the Archer Control Panel Installation Settings. The following
features are included:
l The ability to rebuild Elasticsearch indexes is available to system
administrators in instance and installation settings. This option is also
available when an instance name is right-clicked.
l As an Elasticsearch index is rebuilt, the ACP displays a status indicator
showing the build’s progression.
Note: Elasticsearch is a third-party component that is not included in the RSA

Archer install package. For information on deploying Elasticsearch, see
https://www.elastic.co/.
Export The following export updates are included in this release:

l You can now export a dashboard to an external Microsoft PowerPoint
presentation file (PPTX).
l When you export a record, an appointment, or a report (except RSA Archer
system reports) to Microsoft Excel format, the extension on the exported file
is now XLSX.
l When you export a report, the exported file name is now the original saved
report name instead of SearchResults.
Job Framework You can now set a maximum number of threads per job type that simultaneously
run. This functionality improves job processing by allowing some threads to be
available for other jobs while the larger jobs run. Setting a maximum thread
count for larger jobs, such as data feeds or bulk actions, allows the job engine to
simultaneously run smaller jobs, such as notifications. More jobs can be
processed when larger job types have a set maximum thread.
Navigation You can now move the mouse diagonally in workspace menus while the menu
remains open. You can move the mouse from the workspace name to the Quick
Links and Solutions columns without navigating in vertical and horizontal lines
through each column. For more information, see "5.x to 6.5 User Interface
Comparison" in the RSA Archer 6.5 What's New Guide on RSA Link.
Release 6.5 33
Release Notes
Questionnaires Contrast is improved between questions and sections for easier readability. Field
and Record names in record pages and questionnaires are bold by default. Bold field names
Pages improve the screen contrast for an accessible user experience.
For more information, see "Branding Your System" in the RSA Archer Online
Documentation.
Rich Text The following updates are included in this release:

Editor l The overall appearance is more modern looking and user friendly.
l Font Family displays which current font is selected and no longer just
displays Font Family. It is now one list and does not require scrolling.
l Font Size is now a set list of sizes in a drop-down. Sizes are listed as pixels
instead of points.
l Source code editor now has highlighting, suggestions, and line numbers.
l Tables now have a more modern look. Clicking on a table provides a context
menu with easy editing options, like new table, remove table, add
row/column, and remove row/column.
l Larger icons are now provided.
l Grouping is not as evident.
Security The following changes have been made to the Security Configuration Guide:
Configuration l A new topic has been added explaining how to ensure secure operation of
Guide RSA Archer by hardening the underlying components of the host so that the
server will properly function and options for vulnerabilities are removed.
l A customer advisory to never enable active content when opening CSV files
with spreadsheet applications has been added.
l A Remote Procedure Call (RPC) requirement has been added to the Port
Usage section to address an RPC server unavailable error in Archer Job log
and Windows event log.
Release 6.5 34
Release Notes
Values Lists The new No Selection value improves data-driven event performance and
reduces end-user errors. Users can select No Selection instead of leaving fields
blank. When users complete fields for a selection that they later change, the
field values revert to No Selection, which eliminates unnecessary data-driven
events.
Administrators can set a values list action to remove all selections when a
predefined value is entered. If a rule is set to result in No selection, any existing
selections for the field are cleared.
For more information, see "Set Values List Selection Action" in the RSA
Archer Online Documentation.
Use Case Enhancements

The following table describes the use case enhancements in this release.
Business The RSA Archer Business Continuity & IT Disaster Recovery Planning

Continuity (BC/DR) use case includes the following updates:
& IT Disaster
Recovery
Planning
Release 6.5 35
Release Notes
Applications
l In the Roles and Responsibilities application, the existing Primary Lead,
Secondary Contact, and Tertiary Contact fields were deleted and replaced
with the Performed By and Watched By record permissions fields. The
Performed By field allows you to select any users or groups to have read and
update rights to the record. The Watched By field allows you to select any
users or groups to have read-only rights to the record.
l In the Roles and Responsibilities application, an off-layout Default Record
Permissions field was added, giving access rights to the following roles: The
BCM Program Leader and the BCM Admin roles have create, read, update,
and delete access rights. The BCM Business Process Owner role has create,
read, and update access rights. The BCM Program Team Member and the
BCM Executive Management roles have read-only access rights.
l In the Recovery Tasks application, the Performed By cross-reference field
was renamed to Roles and Responsibilities, and was also changed to a grid
view.
l In the Recovery Tasks application, the Performed By and the Watched By
inherited record permissions fields were added.
l In the Recovery Tasks application, an off-layout Default Record Permissions
field was added, giving access rights to the following roles: The BCM
Program Leader and the BCM Admin roles have create, read, update, and
delete access rights. The BCM Business Process Owner role has create,
read, and update access rights. The BCM Program Team Member role has
read and update access rights. The BCM Executive Management role has
read-only access rights.
l In the Activated Plans application, at the Recovery Tasks level, a new task
status of Skipped has been added. You can set the status of a task to Skipped
if the task was deemed unnecessary. When you set the task status to Skipped,
the skipped task is included as part of the Tasks Completed and the %
Complete calculated fields at the Recovery Strategies level.
l In the Activated Plans application, at the Recovery Tasks level, you can now
select users or groups in the Performed By field. Additionally, the Watched
By field was added.
l In the Requirements application, the Required Role cross-reference field was
updated by removing the Primary Lead and Secondary Contacts fields, and
adding the Performed By and Watched By fields.
l In the Contacts application, under the Business Continuity Management tab,
the BCM Plan Involvement section was deleted.
Release 6.5 36
Release Notes
Reports
l The Business Continuity Plan by Primary Lead report in the Roles and
Responsibilities application was replaced with the Business Continuity Plan
by Performed By report.
l The Roles and Responsibilities report in the Roles and Responsibilities
application was updated to remove the Primary Lead, Secondary Contact, and
Tertiary Contact fields, and replaced with the Performed By and Watched By
fields.
l The Recovery Tasks by Task Performer report in the Recovery Tasks
application was renamed to Recovery Tasks by Roles.
l The Test Exercises To Activate (Data Feed) report in the Testing/Exercise
application was updated to include the new Performed By and Watched By
fields from the Recovery Tasks application.
Data Feeds
The Test Exercise - Activate Plans data feed has been modified to include the
new Performed By and Watched By fields.
For more information about BC/DR, see "Business Continuity & IT Disaster
Recovery Planning" in the RSA Archer Online Documentation.
Crisis The RSA Archer Crisis Management use case includes the following updates:
Management l In the Crisis Events application, when a plan is activated, you can now set
the status of a task at the Recovery Tasks level to Skipped if the task was
deemed unnecessary. When you set the task status to Skipped, the skipped
task is included as part of the Tasks Completed and the % Complete
calculated fields at the Recovery Strategies level.
l The Crisis Events To Activate (Data Feed) report in the Crisis Events
application was updated to include the new Performed By and Watched By
fields from the Recovery Tasks application.
l The Crisis Events - Activate Plans data feed has been modified to include the
new Performed By and Watched By fields.
For more information about Crisis Management, see "Crisis Management" in the
RSA Archer Online Documentation.
Release 6.5 37
Release Notes
Issues The following field names have been changed in the Company, Division, and
Management Business Unit applications:
l The CEO Loss Event Sign-off Threshold field has been renamed to CEO
Sign-off Threshold.
l The CEO Loss Events Notification Amount field has been renamed to CEO
Notification Amount.
l The CFO Loss Event Sign-off Threshold field has been renamed to CFO
Sign-off Threshold.
l The CFO Loss Event Notification Amount field has been renamed to CFO
IT Security The Business Processes application contains new updates, and is now included
Vulnerabilities in the IT Security Vulnerabilities Program use case package. If you have
Program Business Processes application licensed with a use case other than ITSVP you
(ITSVP) can obtain the latest application updates.
Note: The Business Processes application is not included as part of the ITSVP
license. The following updates are only available if Business Processes is
licensed as part of another use case.
The Business Processes application includes a new summary section.

The following new report objects have been added:
l Open Vulnerability Scan Results Trending Last 30 Days
l Vulnerability Scan Results Severity Trending (30 days)
l Vulnerability Scan Results Status Trending (Last 30 Days)
The following new reports have been added:

l Open Vulnerability Scan Results by Severity per Business Process
l Vulnerability Scan Results Severity Trending (30 Days)
l Vulnerability Historical Data – Business Process
l Vulnerability (VSR Overall Status Vulnerability Historical Data – Count of
Business Process Devices)
l Vulnerability Historical Data – Count of Business Process Devices Scanned
(Last 30 Days)
Release 6.5 38
Release Notes
Loss Events The following field names have been changed in the Company, Division, and
Business Unit applications:
l The CEO Loss Event Sign-off Threshold field has been renamed to CEO
Sign-off Threshold.
l The CEO Loss Events Notification Amount field has been renamed to CEO
l The CFO Loss Event Sign-off Threshold field has been renamed to CFO
Sign-off Threshold.
l The CFO Loss Event Notification Amount field has been renamed to CFO
Release 6.5 39
Release Notes
Top Down Risk You can now create different risk scenarios from existing Risk Register records
Assessment and create and manage risk scenario templates. This release includes the
following updates for risk scenarios:
Applications
l Risk Scenario is a new application that enables Risk Managers to create
unique scenarios from existing Risk Register records by defining different
conditions and parameters. Defined risk scenarios can then be assessed to
provide a better risk analysis.
l Risk Scenario Library is a new application that enables users to create and
manage risk scenario templates. Risk scenario templates allow users to
create risk scenario records using pre-defined conditions and parameters. By
linking to an existing Risk Register record, Risk Managers can create new
risk scenario records linked to that risk.
Data Feeds
l TDR: Create Scenarios from Library is a new data feed that analyzes the
Risk Scenario Library application to determine which records are ready for
processing. The data feed creates copies of the Risk Scenario Library
records as new records in the Risk Scenario application and links them to the
pre-selected Risk Register records.
l TDR: Create Scenarios from Risk Register is a new data feed that analyzes
the Risk Register application to determine which records are ready for
processing. The data feed creates copies of the associated Risk Scenario
Library records as records in the Risk Scenario application and links them to
the parent Risk Register records.
Reports
l Scenario Last Assessment Date is a new report that lists the last assessment
date for each Risk Scenario record and related Risk Register records.
l Scenario List is a new report that lists all Risk Scenario records by Business
Unit and Risk Register record. This report also includes additional
information, such as Risk Level and Last Assessment Date.
You can also now define acceptance levels for risk records at the Business Unit
level. This allows risks to be sent for review to the user with the appropriate
level of authority. This release includes the following updates for risk approvals:
Questionnaires
Release 6.5 40
Release Notes
Risk Approval Assessment is a new questionnaire that enables Risk Managers

to generate and send a risk approval sign-off notification to the appropriate users
based on the level of risk that needs to be approved.
Reports
l Risk Manager Approval Threshold is a new report that lists users with
defined risk approval permissions and their sign-off thresholds and compares
that data to the Risk Approval amount defined in the Risk Register record.
l Business Unit Owner Risk Approval is a new report that lists Risk Approval
Assessments linked to Risk Register records and the current review status of
each assessment.
For more information, see the Top Down Risk Assessment Use Case Guide on
RSA Link.
Fixed Issues in Release 6.5

Note: All applicable fixed issues from previous versions of RSA Archer, including service packs
and patch releases, are also fixed in this release. For more information on issues fixed in previous
releases, see the Release Notes for each platform version on RSA Link.
Application ARCHER- The CAST (Score Card) field displays the linked records when you
Builder 54389 click Total or View individual status-based.
Application ARCHER- In certain cases where the browser zoom is not set to 100%, the
Builder 48931 warning message and corresponding window may display
incorrectly.
Bulk ARCHER- The Schedules > Bulk Action configuration with the Group By
Operations 55328 option enabled does not install through a package.
Charts and ARCHER- Custom chart colors are lost until users refresh, even after the
Graphs 57184 report is saved.
Documentation ARCHER- The RSA Archer Platform Installation and Upgrade Guide and the
53344 RSA Archer Platform Planning Guide incorrectly state the
Microsoft .NET Framework version as 4.5. RSA Archer is
qualified on Microsoft .NET Framework 4.6.1 and 4.6.2.
Release 6.5 41
Release Notes
Documentation ARCHER- When the Documentation section is filtered by the Size column on
53758 the Manage Solutions and Manage Global iViews pages, the filter
is not effective and provides incorrect results.
Documentation ARCHER- The RSA Archer logo is not displayed in the header of the
54365 RSA Archer Online Documentation.
Documentation ARCHER- The "Upgrading Business Continuity & IT Disaster Recovery

58641 Planning" section is missing from the RSA Archer Online
Documentation. Upgrade instructions for RSA Archer Business
Continuity & IT Disaster Recovery Planning can be found in the
RSA Archer Business Continuity & IT Disaster Recovery Planning
Use Case Guide on RSA Link.
Documentation ARCHER- The RSA Archer Incident Management Use Case Guide does not
57208, list additional licenses needed to complete the tasks documented
ARCHER- for the Incidents application.
56027
Documentation ARCHER- Due to sanitization of HTML content for vulnerabilities in Archer

55430 system, a few HTML tags such as <?xml>, <form>, <textarea>,
<option>, <select>, <meta>, <body> are stripped while saving the
field definition. This occurs even though they appear initially
before a save on the UI because of the default Rich Text Editor
properties.
Documentation ARCHER- The abbreviation for Scheduled Report Distribution in the "Adding
57508 Scheduled Report Distributions" topic in the RSA Archer Online
Documentation is incorrect.
Documentation ARCHER- The RSA Archer IT Security Vulnerabilities Program Use Case
55873 Guide provided default parameter settings that were insufficient for
IT Security Vulnerabilities Program. The following topics have
been updated to resolve the discrepancies:
l Configuring JavaScript Transporter Settings
l Adding Standard JavaScript Data Feeds
Note: The integration data feed content for RSA Archer IT

Security Vulnerabilities Program has been moved to RSA Ready.
For the latest integration documentation, including updates related
to this issue, see RSA Ready.
Release 6.5 42
Release Notes
Documentation, ARCHER- Content changes made by data feeds with the BatchContentSave
Help System 56155 token are not captured within any RSA Archer History Logs.
However, the updates are noted within the Field Audit History
information.
Documentation, ARCHER- The RSA Archer Qualified and Supported Environments document
Appearance 54275 does not specify that only 100% magnification is supported for
Internet Explorer.
Navigation ARCHER- The Navigation menu selection moves down when the mouse
Menu, User 56115 cursor moves right.
Interface (UI)
Record ARCHER- When saving a Devices record that has an Application Technology
Performance 54750 value which contains the same value as multiple records in the
Vulnerability Library and the CPE applications, RSA Archer
creates a timeout error in the logs.
Reports ARCHER- The Licensing Information Report link does not function.
48238
Search and ARCHER- In the Advanced Search Map Display, customized pin colors are
Search Results 41765 not displayed.
Known Issues in Release 6.5

Access ARCHER- When searching for the Everyone group, the Edit and Delete
Control 31183 icons are available, even if the Everyone group is set to Read-
Only.
Access ARCHER- When attempting to edit an access role that provides Create,
Control 41738 Read, Update, and Delete rights to Schedule and Content, a UI
exception occurs.
Release 6.5 43
Release Notes
Access ARCHERSOL- The BCM: Crisis Team role in the RSA Archer Crisis
Control 4483 Management use case does not have access to any
applications. The BCM: Crisis Team role should have Create,
Read, Update, and Delete rights to the Crisis Events,
Notifications History, and Lessons Learned applications in
RSA Archer Crisis Management.
Workaround:
Manually update the BCM: Crisis Team role with Create,
Read, Update, and Delete access rights to the Crisis Events,
Notifications History, and Lessons Learned applications.
Advanced ARCHER- When working in the Advanced Workflow Process Designer,

Workflow 47401 interacting with the process or node properties pane causes the
pane to scroll to the top, which makes configurations hard to
control.
Advanced ARCHER- Orphan tasks that are in progress cannot complete after
Workflow 55655 restarting Advanced Workflow.
Appearance, ARCHER- After upgrading from RSA Archer 5.x, section header, button,
Upgrade 58535 and dialog boxes have a very light contrast. Themes from
earlier versions are not converted.
Workaround:
Reset the appearance.
1. Go to the Manage Appearance page.
a. From the menu bar, click Admin menu.
b. Under Appearance, click Appearance.
2. Click Reset to Default.
For more information, see "Branding Your System" in the
RSA Archer Online Documentation.

match criteria are not included until a full recalculation is
manually launched from the Application Builder.
Release 6.5 44
Release Notes
Workaround:
field.
Application ARCHER- An empty tab set causes the application copy process to
Builder 44013 generate an error and prevents data-driven event rules from
being copied.
Application ARCHER- When closing the editing of a values list on the second level of
Builder 53760 a leveled application, the left-pane Administration menu may
continue to display.
Application ARCHER- When an attached file with a depth greater than 100 levels of
Builder 57027 hierarchy is imported into an ExtJs version of Global Values
Lists, logs do not appear on the server and an unexpected error
message is displayed.
Bulk Actions ARCHER- When bulk update is enabled, the Create and Enable Delete
40769 options do not display.
Bulk Actions ARCHER- When navigating through Quick Links, the Schedule page does
41474 not close.
Bulk Actions ARCHER- When searching for inactive users on Schedule Actions,
41442 inactive users display in the search results.
Bulk Actions ARCHER- After completing a Bulk Create or Bulk Update action, the
41644 Bulk Actions menu is still displayed.
Bulk Actions ARCHER- When users attempt to access a schedule or action to which
41755 they do not have access using deep links, an alert message
stating that the users do not have access does not display.
Bulk Actions ARCHER- You cannot add the Manage Schedule link to the Quick
41779 Reference tab.
Bulk Actions ARCHER- If any of the records selected for Bulk Delete have already
41838 been deleted, Bulk Delete fails.
Bulk Actions ARCHER- The Bulk Action report shows repeated global validation
41841 messages.
Release 6.5 45
Release Notes
Bulk Actions ARCHER- While Bulk Delete is in progress, search results show some
41866 records with no value. After Bulk Delete completes, this
behavior is not observed.
Bulk Actions, ARCHER- When you attempt to create a new reference using Bulk
UI 41500 Create, sometimes part of the Date & Time field name is
unreadable behind the field.
Bulk ARCHER- When using the calculated operator and defining the calculation
Operations 56677 expression, usage of the following characters outside of their
intended meaning causes validation errors: [ ] { } & " . ,
The usage of \ to escape these characters is unsupported and
may lead to unexpected behavior.
Calculated ARCHER- When saving Inline Edit changes, the page does not
cross- 46348 automatically refresh.
refresh.
l Save. Navigate away. Return to page.
Calculated ARCHER- Applications that point to their parent application in a

cross- 48566 calculated cross-reference do not update automatically.
Charts and ARCHER- From the Edit button on the homepage, users cannot select
Graphs, 31276 charts saved as Global Reports with the Display Options set to
Reports enable Display Total and Display Zero Values.
Release 6.5 46
Release Notes
Content Save ARCHER- When a user attempts to add a cross-reference record to a

and Delete 57607 leveled application, the following exception is encountered:
“An unexpected error has occurred in the system. The error
Log Reference ID is: 092018-095342-4784. Please try your
request again. If problems persist, please contact your system
administrator.”
Workaround:
1. Navigate to the Application Builder for this application.
2. Navigate to the Layout tab of the application level in
question.
3. Click Save.
4. Repeat for every impacted level.
Data Feeds ARCHER- When a large source file is added to the Source Definition tab,
47727 an exception occurs.
48616 environment does not have internet access, it cannot validate
the DTD and gives an error.
Workaround:
Violation of PRIMARY KEY constraint 'PL_
tbllVUserContent'
Data Feeds ARCHER- Batch Content Save enabled data feeds do not accurately insert
56732 records across multiple levels.
Workaround:
If inserting content with references to multiple children,
separate the feeds into two separate records; one for the parent
application records, and another one for the child records.
Alternatively, turn off the token.
Release 6.5 47
Release Notes
Data Import ARCHER- The Data Import Wizard hangs during validation while trying to
48350 import data into a sub-form.
Workaround:
Do the following to import data into a sub-form.
1. Import the records in the parent application.
2. Import records into the sub form with the Application Field
(s) mapping provided.
Data Import ARCHER- A faulted data import erroneously lists the number of records in
40928 the file as having been created, when in fact it created none.
Documentation ARCHER- A calculated cross-reference can filter on Related Records.

48940 The RSA Archer Online Documentation currently lists Related
Records as unsupported by calculated cross-references.
Documentation ARCHER- The following use cases list the incorrect product version
58661 number in the respective installation sections of the RSA
Archer 6.5 Online Documentation:
l Issues Management
l Loss Events Management
The correct version number is included in the PDF Use Case

Guide for each use case, and is available on RSA Link.
Documentation ARCHER- The ability for users to rebuild Elasticsearch indexes is

58664 incorrectly documented in the RSA Archer Control Panel Help.
The command to do this rebuilds only the Elasticsearch index
for the selected index.
Documentation ARCHER- The description of Elasticsearch in "Enabling Elasticsearch" in

58665 the RSA Archer Control Panel Help requires an update to state
that it improves how quickly data gets indexed, rather than just
helping a search return records faster.
Documentation ARCHER- The acp_menu_instance.png image is outdated and needs to be

58666 replaced with an updated screenshot of the instance menu
reflecting the new Rebuild Elasticsearch Index option.
Release 6.5 48
Release Notes
Documentation ARCHER- The RSA Archer Online Documentation must be updated to

58667 show that a reference to the third-party software tool, IIS
Crypto, has been removed from "Host Hardening" in the
RSA Archer Security Configuration Guide.
Documentation ARCHER- The RSA Archer Online Documentation must be updated to

59005 show that Elasticsearch version 6.2.4 is the only version
qualified to work with Archer 6.5 in the RSA Archer Qualified
and Supported Environments Guide.
Field ARCHER- The Self-Reference Calculation field can be marked for

Encryption 41772 encryption. Encrypted fields cannot be used in calculations.
Workaround:
While editing the self-calculated field, if encryption related
warning is shown, disable the encryption status, and then save
the field.
Globalization ARCHER- While changing the order of values list values the following
and 48080 values are not translated:
l Drop After
l Drop Before
Inline Edit ARCHER- When a Hierarchical Values List field display is not set to
41827 drop-down, the last value does not display correctly.
Inline Edit, ARCHER- When updating a dependent field in inline edit, and that field is
Search and 46348 part of a calculated cross-reference calculation, the results are
Search Results not immediately seen on the search page, even though the
calculated cross-reference field has recalculated after changes
are saved.
Workaround:
Refresh the page.
Job ARCHER- When running data feeds, if you use the JSON File Iterator
Framework 48077 navigation method, RSA Archer cannot process JSON files
larger than 1 GB.
Release 6.5 49
Release Notes
Login Home ARCHER- Changes made to the Default Home Page field from the back
Page, Task- 58558 office Manage Users page do not reflect on the dashboard of
driven Landing that user.
Screen Workaround:
Do either of the following:
l The end user can modify the default home page setting using
the Edit button, next to the Home button in the Home Page
Configuration dialog.
l The user can log out and then back in again.
Navigation ARCHER- After clicking a quick link that opens in a new window, the
48703 new window does not display correctly.
Navigation ARCHER- When using Internet Explorer or Safari, if the user routes
52673 through a text field on a page that does not use Microsoft
Silverlight and then immediately clicks on a button, the user
must click a second time to initiate the action.
message does not appear in the system tray:
Workaround:
After a sync fail due to record conflict, users must navigate to
Offline Access Library page and select Resolve Conflicts.

41655 questions from the Question Library throws an unexpected
error if the Question Library is not licensed.

43967 Updated Records and User Initiated enrollment options, the
User Initiated button does not appear.

Record ARCHER- After selecting the Sort option for a column containing
Browser 41195 ampersand (&) and colon (:), the application returns no records.
Release 6.5 50
Release Notes
Record ARCHER- With Inline Edit enabled, values for a Values List field type
Browser 44033 checkbox do not display.
41877 Updated field, the time in the Last Updated field changes while
in Copy mode.
Record Page ARCHER- Under Global Value Lists, expanding the hierarchy value list
55888 that has approximately 350 children generates an unexpected
error.
Reports ARCHER- Accessing a report with filter criteria applied to the Numeric
57564 Range with No Selection value generates an error.
Search and ARCHER- A blank field appears when reordering selected fields in
Search Results 48246 statistics search. The search is saved.
Search and ARCHER- After selecting a global or personal report, the Select Report
Search Results 48980 dialog box displays the text "false". This window appears
briefly before properly routing to the requested report.
Search and ARCHER- In Advanced Search, in the Fields to Display, Filters, and
Search Results 37717 Sorting sections, you must click a field twice to select it.
Search and ARCHER- When a statistical search field is moved up or down in the
Search Results 38890 order, the associated statistical operation is lost and must be
reselected.
Search and ARCHER- Count drill-in when sorting by a Values List value that is in the
Search Results 56179 2nd or more level does not display results.
Search and ARCHER- When the job engine and indexing services are both enabled,
Search Results 57800 and a module delete is performed, the FieldDelete and
MetadataDelete messages are incorrectly queued in the
ElasticsearchMessageQueue instead of the ModuleDelete
message.
Release 6.5 51
Release Notes
Shared UI ARCHER- When the Show All link on a record page is clicked for a
Components 53320 reference field (either cross-reference or related record), if the
size of the results exceeds the grid limit, an error message may
be generated.
Signatures ARCHER- If an attachment field configured to capture record snapshots

57627 though the Advanced Workflow Signature process is deleted,
the system ID number of that field remains on the signature
configuration screen in the attachment field drop down until a
new selection is saved.
User Interface ARCHER- Users are unable to export a report that has a Card format, but
53613 for which the Export format is PDF.
User Profile ARCHER- When selecting a locale, the user interface focus and selection
40833 does not display correctly.
Workspace ARCHER- After creating a new application, items in the Workspaces

Display 41616 menu are duplicated.
Workaround:
Refresh the page.
Workspaces, ARCHER- On the Layout tab of the administration Manage Dashboards

Dashboards, 53878 page, in the Dashboard Layout section, administrators cannot
and iViews remove iViews for general users.
Release 6.5 52
Release Notes
Workspaces, ARCHER- In Google Chrome version 56, executable scripts are blocked.
Dashboards, 53893 This browser blocking creates the following issues:
and iViews l The Administrative Quick Links iView does not contain
working links.
Workaround:
Release 6.5 53

RSA Archer 6.5 and Later Release Notes

Încărcat de

Informații document

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

RSA Archer 6.5 and Later Release Notes

Încărcat de

Drepturi de autor:

Formate disponibile

Release Notes

6.5 and Later

Copyright © 2010-2019 Dell Inc. or its subsidiaries. All Rights Reserved.

Release 6.5 Patch 2 7

Release 6.5 Patch 1 18

RSA Archer Documentation

Support and Service

Customer Support Information https://community.rsa.com/community/rsa-customer-support

Customer Support E-mail archersupport@rsa.com

Release 6.5 Patch 2

Localization in Release 6.5 Patch 2

Fixed Issues in Release 6.5 Patch 2

Component Issue Description

Release 6.5 Patch 2 7

Component Issue Description

Application ARCHER- Auto-generated findings do not automatically enroll in

Calculations, ARCHER- An inherited record permissions field based on a calculated

Install/Upgrade, ARCHER- Advanced Workflow (AWF) fails to start if an HTTPS/SSL

Release 6.5 Patch 2 8

Component Issue Description

LDAP ARCHER- On the TestLDAPSchema.aspx page, the Query LDAP Schema

Questionnaires, ARCHER- A cross-reference to an application is saved on a questionnaire

Release 6.5 Patch 2 9

Component Issue Description

Workspaces, ARCHER- General users cannot export a global dashboard in PowerPoint

Known Issues in Release 6.5 Patch 2

Component Issue Description

Release 6.5 Patch 2 10

Component Issue Description

Application ARCHER- If a user has an application with a calculated cross-reference

Release 6.5 Patch 2 11

Component Issue Description

Calculated ARCHER- Applications that point to their parent application in a calculated

Release 6.5 Patch 2 12

Component Issue Description

Documentation ARCHER- A calculated cross-reference can filter on Related Records. The

Release 6.5 Patch 2 13

Component Issue Description

Questionnaires ARCHER- Creating a questionnaire and selecting the option of populating

Release 6.5 Patch 2 14

Component Issue Description

Questionnaires ARCHER- If a questionnaire has Advanced Workflow configured with the

Questionnaires ARCHER- In a Questionnaire configuration, creating a campaign with the

Release 6.5 Patch 2 15

Component Issue Description

Release 6.5 Patch 2 16

Component Issue Description

Release 6.5 Patch 2 17

Release 6.5 Patch 1

Fixed Issues in Release 6.5 Patch 1

Component Issue Description

Archer Control ARCHER- The tblDataFeedHistory and tblDataFeedMessage tables retain

Release 6.5 Patch 1 18

Component Issue Description

Database ARCHER- The performance of proc usp_get_object_content_user_group

Database ARCHER- The performance of usp_get_object_content_precomputed_

Database, Search ARCHER- The performance of usp_get_object_content_select_value has

Globalization and ARCHER- Task Management actions are not localized.

Release 6.5 Patch 1 19

Component Issue Description

Job Framework, ARCHER- Questionnaires intermittently experience a lack of success in

Questionnaires, ARCHER- Deleting an application record while it is enrolled in Advanced

Record Page ARCHER- Attempts to open a particular record generate an unexpected

Release 6.5 Patch 1 20