Need DCE 9.0 according to DHS, DCE 8.3 and earlier - Vulnerable

[ScottAZ]

CISA / DHS is reporting a vulnerability in DCE 8.3 and prior.  Remediation suggests upgrade to DCE 9.0 however it is not showing in the available DCE downloads.

https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-06

Scott Wickham

InfoSecAdmin

[JLehr]

Hi @ScottAZ,

As part of Schneider Electric’s initiative to streamline software management across all EcoStruxure IT solutions, license management for future versions of Data Center Expert will be moving from the Schneider Electric Entitlements Portal to the mySchneider Software Management website.

This change simplifies license handling and provides easier access to the latest software updates.

Please contact support for more information.

Best regards,

Jackie

[ScottAZ]

If this (screenshot) is NOT the correct location then why is the web page active ?????

Respectfully,

Scott 

[ScottAZ]

FYI - Tech Support -- Probably All of the USA

Tech support number is: 

877-908-2688, then select Option 1 for DCE tech support

[ScottAZ]

Thanks for reply(s)  the following is the BEST way to reach the suggested Tech Support:

FYI - Tech Support -- Probably All of the USA

Tech support number is: 

877-908-2688, then select Option 1 for DCE tech support

[JLehr]

Hi @ScottAZ, 

The link to download DCE software in the Entitlements portal is available for customers with active support contracts who need to update DCE servers to version 8.3.0.

[ScottAZ]

Hello Sisko,

I appreciate your attempt to assist.  However the DCE software v 9.0 is NOT available for download via the Entitlements page.

I had to call SE Support ---  877-908-2688, then select Option 1 for DCE tech support.

This critical update is ONLY available by talking to support directly.  I spent almost an hour online with the kind agent yesterday and had to provide a lot of detailed information about our particular installation.

This update is called a "Soft Update" and requires a call-in to SE.  In the future, the update will be available in a new manner that APC / Schneider is developing.

Respectfully,

Scott

[ScottAZ]

Hi Jackie,

Per my e-mail last week.  I have started the SW Update request process.  It is being completed by APC/SE and they hoped to get the DCE 9.0 software to me by the end of that week.

Thanks in advance,

Scott

[JLehr]

Hi Scott,

Thanks for letting me know that you have what you need. 

Best regards,

Jackie

[ScottAZ]

FYI - And thanks you to Community Support members and DCIM Tech support.  CALL FIRST to get this update, presently......   DCIM Technical Support: 1-877-908-2688

FYI ------------------->>>>

We are pleased to announce the release of EcoStruxure IT Data Center Expert (DCE) version 9.0, which includes:

• Significant web UI enhancements
• Critical security updates
• Additional capabilities designed to improve visibility, usability, and overall system performance

This release reflects our ongoing commitment to delivering secure, reliable, and future-ready solutions for your data center operations.
Licensing Transition
As part of Schneider Electric’s initiative to streamline software management across all EcoStruxure IT solutions, we will be upgrading your active DCE licenses under support contracts to version 9.0. This upgrade will also transition your license management into mySchneider Software Management, which simplifies license handling and ensures easier access to the latest software updates.

• Important: To use this new version, you will be moved to a new licensing model once your current support contract ends.
• Please note: You will be required to accept new Terms of Use as part of the upgrade process.

A Customer Success Manager (CSM) will contact you within 7 days to help align your system and generate updated license keys.
You can choose to download and install DCE 9.0 directly using the links below:  (CALL)

After installation, DCE 9.0 will operate in trial mode for 90 days. During this time, some features—such as server upgrades, device firmware updates, and surveillance clip retrieval—will be temporarily restricted (though clips will continue to be recorded).
You can mitigate the vulnerabilities in the 8.3 version of DCE by following the instructions in Security Handbook.

Security Notification
For details on the security vulnerabilities addressed in this release, please refer to our official security notification:
SEVD-2025-189-01 Security Notification
We are committed to working closely with you over the coming months to ensure a smooth and supported transition to the new system.
Thank you for your continued trust in EcoStruxure IT. If you have any questions or need assistance, please don’t hesitate to contact your support representative.

[ScottAZ]

Per the previous messages, this is an update....

After reaching out to SE / DCIM Tech support ( DCIM Technical Support: 1-877-908-2688
APC by Schneider Electric: 1-800-800-4272 ) I have the following, which they provided....

On Tue, Jul 29, 2025 at 5:54 AM DCIM Technical Support wrote:

Great news about the DCE 9.0.x release, referenced in the CISA / DHS Security Bulletin last week..

APC / Schneider is pleased to announce the release of EcoStruxure IT Data Center Expert (DCE) version 9.0, which includes:

• Significant web UI enhancements
• Critical security updates
• Additional capabilities designed to improve visibility, usability, and overall system performance

This release reflects our ongoing commitment to delivering secure, reliable, and future-ready solutions for your data center operations.
Licensing Transition
As part of Schneider Electric’s initiative to streamline software management across all EcoStruxure IT solutions, we will be upgrading your active DCE licenses under support contracts to version 9.0. This upgrade will also transition your license management into mySchneider Software Management, which simplifies license handling and ensures easier access to the latest software updates.

• Important: To use this new version, you will be moved to a new licensing model once your current support contract ends.
• Please note: You will be required to accept new Terms of Use as part of the upgrade process.

A Customer Success Manager (CSM) will contact me   (you, if you reach out)  within 7 days to help align your system and generate updated license keys.

After installation, DCE 9.0 will operate in trial mode for 90 days. During this time, some features—such as server upgrades, device firmware updates, and surveillance clip retrieval—will be temporarily restricted (though clips will continue to be recorded).
You can mitigate the vulnerabilities in the 8.3 version of DCE by following the instructions:

 Here Security Handbook.
Security Notification
For details on the security vulnerabilities addressed in this release, please refer to our official security SEVD-2025-189-01 Security Notification

Schneider is committed to working closely with you over the coming months to ensure a smooth and supported transition to the new system.

Best and thanks, Schneider Electric !

DCIM Technical Support: 1-877-908-2688
APC by Schneider Electric: 1-800-800-4272