Version 6 of the MOMI software introduces a new logon dialog and default security setting more restrictive than in previous releases.
Generally speaking, the enhanced security mode does not affect existing installations of MOMI. New installations of MOMI, by default, operate in the enhanced security mode and includes users of mini-MOMI. An existing installation of MOMI, or an update of an existing installation, is when the CONFMOMI file on the NonStop System originates from a version 5 or earlier release.
The enhancements were made as the result of the ever changing world of security and user feedback which said 1) add support for multi-factor authentication, and 2) no data should be displayed prior to a user log on.
Support of multi-factor authentication, from MOMI's perspective, was to change our logon window to support a dialog or a series steps to logon. This means that each step of the logon process is provided to the NonStop Operating System and if accepted causes MOMI prompts for the next piece of logon information. A piece may be a password, pin or some other item of information as directed by the O/S security subsystem. The logon process initially prompts for the User ID. This change has no setting within MOMI and is entirely driven by the O/S security subsystem.
Support for not displaying data prior to logon means the MOMI PC Client displays a virtually blank screen prior to logon, the default for new installations. Existing installations, may see data prior to logon as was true in previous releases. Here is what this means:
In both of these situations, the display of data prior to logon is initially controlled by the CONFMOMI keyword CLIENT-LOCKDOWN-MODE. Additionally, Client_Access continues to allow control over what screens are visible to individual users or groups.
A version 5 client can be used with the version 6 server. The client must be 5.21 or later (older clients will crash shortly after start-up).
A version 6 client can be used with the version 5 server, however new screens and some features dependent on the server will not function or automatically downgrade.
In both of these mixed version situations, support of mufti-factored authentication is not available and the older logon process is used.
An existing installation, where MOMI 5 is installed and running, may upgrade the server to version 6 using their existing configuration and files. Database files created by version 5 are compatible with version 6. Clients must be 5.21 or later.
An existing installation, where MOMI 6 was installed over an existing version 5, may fallback to version 5 server software.
A new installation, where MOMI 6 is installed in a subvolume for the first time, may NOT fallback and use the version 5 server software. Database files created by Version 6 are not compatible with version 5 and the MOMI server will fail during start up should this situation occur.
For overall best performance, a new installation of the MOMI server software is required.