.NET version

m.taylor
m.taylor Member Posts: 1 ✭
in Remote Monitoring and Management

It looks like the current Atera agent automatically installs v6.0.35 of the .NET runtime framework which can then be upgraded to v6.0.36 however version 6 became end of support last week - see here:

https://devblogs.microsoft.com/dotnet/dotnet-6-end-of-support/

Our patch management tools have lit up like a Christmas tree with every computer that has Atera installed now showing as vulnerable. A number of our clients have to be remediated within 14 days to remain compliant with either their Cyber insurance policies or the various Cyber Security Frameworks (e.g. Cyber Essentials).

We've been advised by Atera support via chat that the agent doesn't work on the newer versions of .NET - what's everybody doing to remain compliant as this is potentially a rather large headache…..

Comments

  • jcase
    jcase Member Posts: 1 ✭

    Investigating this currently. We really need them to move onto a new version of .NET - and quickly.

  • jclark
    jclark Member Posts: 1 ✭

    Any Update on this? We mandated security audits for customers are failing because of this.

  • adip
    adip Administrator, Internal Posts: 68 admin

    Thank you for reaching out!

    We completely understand your concern and wanted to share that we’ll be transitioning to .NET 8 soon!

    We will keep you updated in the community when we have an ETA.

  • stuarthill
    stuarthill Member Posts: 17 ✭✭

    Thank you @adip for confirming that you are working to bring the agent onto .NET8, but if I may point out the obvious Atera would have been aware that .NET6 was going EOL and should have migrated to .NET8 prior to that date.

  • tristan.curtis
    tristan.curtis Member Posts: 1 ✭

    @adip Do you have any updates on this? Our vulnerability scan is not happy that NET6 is still installed, and we would like to move to .NET 8 as quickly as possible.

  • gilgi
    gilgi Administrator, Moderator, Internal Posts: 414 admin

    @tristan.curtis

    We had a chat with our support team and they said that there are edge cases which the NET6 can remain installed, but this can be assisted.
    Please reach out via ticket, in app or through email support@atera.com

  • stuarthill
    stuarthill Member Posts: 17 ✭✭

    @tristan.curtis in light of gilgi's response have you removed any .NET from your machines now ?

  • matthewmurray
    matthewmurray Member Posts: 1 ✭

    Cyber essentials accreditation requires that the EOL .net 6 is removed from all machines in order achieve accreditation. Its now been 3 months since it went EOL and no sign of the promised new agent. What are we supposed to do? if we remove .net 6 from all our customers machines will it break atera, what will happen?

  • gilgi
    gilgi Administrator, Moderator, Internal Posts: 414 admin

    @matthewmurray
    I'm opening a ticket on your behalf - our support will be in contact with you to understand more.
    The new agent is yet to be released, but I don't want to incorrectly say if it will assist with the issue you are experiencing, hence why I opened the aforementioned ticket for you.

    Keep us posted it they were able to help!

  • gilgi
    gilgi Administrator, Moderator, Internal Posts: 414 admin

    I saw that our support team has replied, sharing with everyone for future references:
    —
    To address the .NET 6 query, our teams have made a new release to completely remove runtime 6.0 dependencies on version 1.8.7.2.

    Please note that as long as runtime 8.0 is installed in your environment, runtime 6.0 can be safely removed.

    Please proceed with removing runtime 6.0 and let us (Support) know if any additional assistance is needed.

Topics