Webinar recording

**IMPORTANT UPDATE**
Today, a fourth notice was released regarding the log4J vulnerability and as a result, we have updated our instructions to require updating to version 2.17.1 rather than version 2.16 or 2.15 as reported earlier.

We were recently notified of a newly discovered zero-day vulnerability in a logging component (log4j) that is used to enable logging in many popular applications which can be exploited to enable remote code execution on servers within Cloud/SaaS, Hosted and On-premise environments that are exposed to the internet. Web Central version 25.2 or above utilizes the affected version of log4j and presents a risk from the newly discovered arbitrary code execution exploit in the log4j library. This vulnerability is rated as Critical to Severe and patches should be applied immediately, no later than the end of the week.

For information about this log4j vulnerability, please visit the latest reports:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44832 *NEW
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105 *NEW
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228

This vulnerability impacts web applications using the Log4j2 versions less than or equal to 2.14.1. According to Apache, this impacts only the org.apache.logging.log4j:log4j-core. However, we are recommending that you replace all 3 log4j libraries in the Archibus war with updated versions. All Archibus SaaS environments have already been patched with the updated appropriate versions as described below.

This does not impact versions of Web Central 25.1 and below, but will impact all installations of Web Central 25.2 and above.

Updated Instructions:
Follow these steps to remediate this vulnerability:

1. Stop Apache Tomcat Service
2. Remove the “Catalina” folder from:
   • X:\Program Files\Apache Software Foundation\Tomcat 9.0\work
     
3. Remove all the files/folders inside the “temp” folder from:
   • X:\Program Files\Apache Software Foundation\Tomcat 9.0\temp
     DO NOT DELETE THE ENTIRE TEMP FOLDER
4. Remove the “schemaComplied” folder from:
   • X:\Program Files\Apache Software Foundation\Tomcat 9.0\webapps\archibus\
5. Go to the “lib” folder:
   • X:\Program Files\Apache Software Foundation\Tomcat 9.0\webapps\archibus\WEB-INF\lib\
     
6. Delete “log4j-api-2.1x.x.jar”, “log4j-core-2.1x.x.jar” and “log4j-slf4j-impl-2.1x.x.jar”
   
   
7. Download & extract Zip. Paste updated files inside the “lib” folder the following jar’s:
   • https://www.robotechcad.com/wp-content/uploads/2021/12/2.17.1.zip
     
8. Start the Apache Tomcat Service

If you have any questions, please feel free to reach out to [email protected].

Sincerely,

Robotech Support Team

Maintaining facilities takes an organized, concerted effort. There are so many facets of property upkeep to consider, each demanding its own approach to maintenance, repair, and improvement. Businesses need a tool on their side that enables not only visibility into these tasks, but also streamlined management of them. It’s why iOFFICE + SpaceIQ created Archibus OnSite.

Archibus OnSite is a new mobile solution that helps organizations efficiently manage preventive and corrective maintenance work orders, assets, and compliance. It’s designed with total facilities in mind, to enable groups and teams charged with keeping them up and running right.

Companies are taking a closer look at overhead

In the era of flex work, companies are paying more attention to the cost of overhead. What they’re finding are opportunities to cut back—not necessarily on space, but on the cost of maintaining that space. It’s all about cost optimization through better workplace efficiency.

Organizations are wasting too much time on administrative overhead: completing work orders in the office and planning work routes ahead of time. Instead, they need to efficiently maintain facilities and assets in a manner that optimizes for availability, uptime, good working order, compliance, and cost. They’re turning to Archibus OnSite to help them take a smarter approach to broad facility upkeep, and reaping the benefits that come with it.

How Archibus OnSite helps maximize overhead ROI

Archibus OnSite is built on a modern, mobile framework that makes facility teams and field workers more efficient. From fielding and sorting work orders, to built-in compliance checklists—Archibus OnSite puts critical resources in the hands of craftspeople charged with vital facilities tasks. Additional core features planned for the app include:

• Location awareness for easy work planning and routing
• Push notifications for instant reminders of what’s important
• Questionnaire framework for regulatory compliance maintenance checklists

Unlike other maintenance solutions that focus solely on ticket management, Archibus OnSite takes a holistic approach to facilities management. It connects asset, compliance, and maintenance management with floor plans and maps to optimize the management of tasks—including locating and planning work.

Archibus OnSite optimizes maintenance operations by bringing visibility and flexibility to the actions that enable them. Beyond realizing the need for maintenance, upkeep, or repair, Archibus OnSite helps facility teams execute with purpose, to get the job done more efficiently and at a lower cost to the organization.

Archibus OnSite is part of a full-featured IWMS

Archibus OnSite works seamlessly with other Archibus modules to enable an even more streamlined approach to facility upkeep. The Archibus integrated workplace management system (IWMS) delivers a full profile of relevant data to Archibus OnSite users, giving them even more capabilities in the field, so they can do their job better. Over time, core synergies will include:

• Connect to assets for a complete asset inventory and maintenance history to inform lifecycle decisions.
• Extend to compliance and condition assessment solutions for a comprehensive view of assets under management.
• Connect to space data and GIS to include floor plans, campus plans, and maps for wayfinding, planning, and locating.

Archibus OnSite allows facility teams to do more, faster. Robust integrations provide immediate, relevant data for an informed response to any support ticket, no matter where it originates or what the scope of work is.

Archibus OnSite as a comprehensive maintenance solution

As overhead costs loom large over organizations, Archibus OnSite ensures a higher standard of upkeep and quicker responsiveness that reduces asset maintenance costs and maximizes the ROI of the workplace using:

• Robust and configurable workflows (approvals, estimating, scheduling, checklists, etc.)
• Labor scheduling and workforce management and coordination tools
• Part inventory management for simplified inventories and better cost control
• Asset lists, maintenance history, reference documents, and compliance sheets

Archibus OnSite brings a broader level of oversight to facility upkeep and puts organizations more in-control of their response to everyday facilities tasks. No matter where or when maintenance demands arise, Archibus OnSite ensures a well-coordinated response.

The time for smarter asset management is now

Overhead costs may seem like a burden, but it’s vital to remember that real estate is an asset. To maximize asset ROI and more than justify the overhead costs that come with it, companies need to focus on the variables they can control—namely, their response to facilities maintenance.

Archibus OnSite is a ready-to-deploy, easy-to-integrate, versatile app that transforms the way an organization manages its largest asset. With seamless connectivity to other Archibus solutions, availability in seven languages, and the full support of iOFFICE + SpaceIQ behind it, Archibus OnSite will change the way companies think about and approach facility maintenance.