|
Blake2 Migration
Blake2 will be migrated after our annual security testing flagged our old hashing technology as weak (AES256).
Blake2 is a more modern industry standard cryptographic hashing technology based on the SHA256 encryption algorithm.
Since data existing in the Scan2x database will be migrated, all Scan2x clients that communicate with the database need to be updated at the same time.
An older version of Scan2x communicating a migrated database, will attempt to revert the database back to use the old hashing technology and it will make it impossible for the new version of Scan2x to communicate with it properly. To ensure seamless migration, kindly read and follow the instructions below. Do not hesitate to contact your Scan2x support team if you require further clarification or assistance.
Migration procedure - The update should be performed on all Scan2x Windows clients prior to starting the migration process. The update should be done externally to Scan2x, i.e. Scan2x should not be opened: instead access the SCLWebUpdater folder (e.g. C:\Program Files (x86)\Scan2x\SCLWebUpdater) from the installed Scan2x directory (e.g. C:\Program Files (x86)\Scan2x) and run the SCLWebUpdater.exe in administrator mode. If the SCLWebUpdater folder does not exist in the installed Scan2x directory, run the SCLWebUpdater.exe as administrator mode from the root of the Scan2x directory (e.g. C:\Program Files (x86)\Scan2x\SCLWebUpdater.exe). If the update is being performed on a Scan2x Web Access Server server/virtual machine, Scan2x will take care of stopping and starting IIS. Once the update is completed, do not start Scan2x until all the Scan2x Windows clients are updated to the latest version.
Then, a single Scan2x Windows client should be selected to initiate the migration process. On first time access, a prompt will be presented with the option to perform the migration now or skip the migration until 1st January 2026. If the migration is opted for, the Scan2x database will be migrated to use the new hashing technology: this means that all data previously encrypted with AES256 will be migrated to Blake2. For Scan2x Windows and Scan2x Web Access server licenses, Scan2x also automatically takes a backup of the database prior to migration, and a backup of the database post-migration. Scan2x Online tenant databases are already equipped with automatic daily backups. From this point onwards, any other Scan2x Windows clients should simply work with the migrated database, as they would have already been updated.
Prerequisites - An internet connection for online licenses, or the offline update for Scan2x for clients that do not have an internet connection.
Ensure that all Scan2x Windows clients are updated to the latest version before starting the migration process. For more information refer to the Migration procedure section.
Rollback/Compatibility - Once the Scan2x database is migrated to the new version, it will immediately become incompatible with older versions of Scan2x.
If by mistake an older version of Scan2x is opened and the database becomes inaccessible, the next time Scan2x is opened on a newly updated version, the option to revert to the latest backup will be presented and should be used to rollback to the previously working version. Note that this only applies to Scan2x Windows and Scan2x Web Access Server licenses.
If any issues occur with migrating Scan2x Online tenant databases, kindly contact your Scan2x support team for assistance. The rollback procedure will have to be performed by the Scan2x technical team.
Technical Impact - Any data previously encrypted using AES256 will be migrated. A summary is included below:
•Job related configuration data
•User and authentication related data
•License related configuration data and license usage data
•Public keys related to web service requests
•Connection settings related to DB Queries
•Settings related to:
oActive Directory integration (Windows Active Directory, and Entra ID and Government CORP B2C)
oSMTP
oDigital Signature providers
oSharepoint
oTherefore
oInterfy
oFileDirector
oIManage
oDynamics 365
|
