Release Notes

Introduction 

The release notes provide brief, high-level descriptions of HaloENGINE GenNXT's new features. Before installing HaloENGINE GenNXT, it is recommended to read the release notes to understand any current limitations or bugs that may apply to this version of the software.

Product Description

HaloENGINE GenNXT is a Java-based classification engine that applies business logic and integrates with the Microsoft Purview Information Protection service to fetch the sensitivity labels for configuration in the admin portal. Using metadata, it classifies and organizes data while enforcing schemas and action rules, serving as the core component that works with the HaloCAD for PLM/PDM solution to protect data.

Prerequisites

Before installing the HaloCAD component, ensure that the following prerequisites are met:

1. An application of type Web is registered with Microsoft Entra ID.

2. An active Office 365 subscription is available.

3. Access to the recommended URLs is enabled.

4. TLS 1.2 or later is enabled on all client workstations to ensure secure communication.

For more information, refer to the Installation Manual.

Requirements

This section describes the system requirements for installing and running HaloENGINE GenNXT. It specifies the supported operating system, database, and other software requirements.

Requirements

Code Quality and Security

Secude focuses on software quality and security. This is accomplished by adhering to and exceeding best practices in development, testing, and quality control. Secude has chosen SonarQube as the first building block for building and implementing a robust continuous code quality assurance (QA). SonarQube is a platform for static code analysis for continuous inspection of code quality. It performs automatic reviews of code to detect bugs, code smells, unit test coverage, and security issues in 29 programming languages.

SonarQube is utilized throughout the development process at Secude, and only the highest marks are accepted for a product to be released. It helps to regulate code quality from the beginning of development, find and repair issues promptly, and improve overall software stability.

Each build report can be found under its relevant version heading in this release notes.

Reliability Rating 

1. A = 0 Bugs

2. B = at least 1 Minor Bug

3. C = at least 1 Major Bug

4. D = at least 1 Critical Bug

5. E = at least 1 Blocker Bug

Security Rating

1. A = 0 Vulnerabilities

2. B = at least 1 Minor Vulnerability

3. C = at least 1 Major Vulnerability

4. D = at least 1 Critical Vulnerability

5. E = at least 1 Blocker Vulnerability

Security Review Rating 

The Security Review Rating is a letter grade based on the percentage of Reviewed (Fixed or Safe) Security Hotspots.

1. A = >= 80%

2. B = >= 70% and <80%

3. C = >= 50% and <70%

4. D = >= 30% and <50%

5. E = < 30%

Maintainability Rating 

A=0-0.05, B=0.06-0.1, C=0.11-0.20, D=0.21-0.5, E=0.51-1

The Maintainability Rating scale can be alternatively stated by saying that if the outstanding remediation cost is:

1. <=5% of the time that has already gone into the application, the rating is A

2. Between 6 to 10%, the rating is a B

3. Between 11 to 20%, the rating is a C

4. Between 21 to 50%, the rating is a D

5. Anything over 50% is an E

Build 1.0

This chapter provides an overview of the updates and quality insights included in this release. It covers the fixed issues, improvements, limitations, new features, and known issues, along with a summary of SonarQube’s key parameters to highlight code quality metrics and analysis results.

New Features

This section highlights the new features in the current release.

1. Redesigned HaloENGINE Admin Portal
   HaloENGINE GenNXT introduces a fully redesigned Admin Portal with a modern, intuitive, and user-friendly interface. The new UI simplifies system management and improves overall usability compared to version 6.9.

2. Configuration without service restart and reload
   Administrative configuration changes no longer require restarting and reloading the HaloENGINE Tomcat service, significantly reducing downtime and operational overhead.

3. Installer-based certificate installation

   Integrated certificate installation in the installer eliminates the need for separate certificate configuration in the Admin Portal. To replace a certificate, use the Admin Portal and restart the Tomcat service.

4. Log management improvements
   Log management is simplified in the Admin Portal. Logs are displayed in the default JSON format and can be downloaded in Excel and JSON.

5. Notification

   HaloENGINE GenNXT displays a notification when the license is nearing expiration. The notification appears on the Notifications icon and shows the remaining validity period.

6. User Menu

   Added a User menu that displays the signed-in user's name on hover and allows users to view and update account information; only Super Administrator account details can be edited, while Microsoft Entra ID-authenticated accounts cannot be edited.

Removed features

The following pages and configurations have been removed as part of the UI redesign and workflow consolidation:

• Certificate Configuration

• Choose Locales

• Assign User Permission

• Assign Systems

• Monitor Log Validation

• Reload and Restart of the application

• Silent Mode

Improvements

This section lists improvements added to the current release.

1. Streamlined administrative workflows through consolidated configuration pages.

2. Reduced portal navigation complexity, resulting in faster, more efficient system administration.

3. The documentation has been significantly updated to reflect the redesigned Admin Portal and new workflows introduced in HaloENGINE GenNXT 1.0.

4. The HaloENGINE GenNXT Admin Portal now redirects users to the Inactive Session page after the session times out. HENGDB-125

5. Renamed System Type to Client Type.

6. HaloENGINE GenNXT communicates over HTTPS and supports self-signed and CA-signed certificates. Clients connecting to HaloENGINE GenNXT must install the appropriate certificate in Trusted Root Certification Authorities. HENGDB-259

   1. For a self-signed certificate, install the public key.

   2. For a CA-signed certificate, install the Root CA.

7. In the legacy version, the MPIP App and Key values were stored in plain text in the HaloENGINESVCMIPInfo.enc file. In this release, these values are securely stored in an encrypted file instead of the JSON file. HENGDB-233

8. Notification: Added a notification when the HaloENGINE GenNXT license is nearing expiration. The notification appears on the Notifications icon and displays the remaining validity period.

9. User Menu: Added a menu to view and update account information, such as the login name and email address. Only Super Administrator account details can be edited. User accounts authenticated through Microsoft Entra ID cannot be edited.

Limitations

This section lists the limitations of the current release.

During installation, if an incorrect database username is entered, the database connection error is displayed, but HaloENGINE does not display a database-specific error message.

Fixed Issues

This section provides a list of the fixed issues in the current release.

1. Fixed an issue where the System Type and Profile Name properties were not displayed in the Monitor log when downloading or uploading files from the Vault client. HENGDB-157

2. Fixed an issue where the Hostname field was case-sensitive in the SIEM/Syslog Configuration page, preventing logs from being updated on the syslog server (PuTTY) when uppercase or lowercase values were configured. HENGDB-289

3. Fixed an issue that caused an error on the Retain Label page when a user account had a license that did not include the Teamcenter client. HENGDB-291

Known Issues

This section provides a list of the known issues in the current release.

1. The Classification by Policy Name chart should be updated only for file downloads with an applied label. Blocked downloads and downloads without a label or protection should not be included in the chart. HENGDB-172

2. The Rule and Schema configuration windows close when clicking outside the windows. HENGDB-304

3. When uploading a large protected file to a Vault folder, the Before Size is updated correctly, but the After Size is displayed as 0 in the HaloENGINE GenNXT Monitor log. HENGDB-306

4. The Author Name column is not updated in the exported Excel sheet, even though the values are displayed correctly on the Monitor Log page. HENGDB-309

5. Users can create duplicate retain label rules on the Retain Label page. HENGDB-313

Quality Gate Report

Please see the table below for a list of SonarQube's key parameters for this version. Refer to the "Code Quality and Security" section for more information on rating definitions.

Quality Gate report

Last updated: October 26, 2026