ICE 3.6.5 Upgrade Notes
To upgrade from 3.6.0 to 3.6.5, consult the ICE 3.6.5 Upgrade Guide. For older versions, contact Instant Connect Support for instructions.
Instant Connect Enterprise 3.6.5 includes the following updates:
Important Changes to Certificate Management in 3.6.5Prior to 3.6.5, ICE Systems shipped with a 'default' certificate store containing certificates common to all Instant Connect systems. This certstore was utilized in both Enterprise and Tactical ICE environments. In version 3.5.0 (April 2024) a feature (Automatic Certstore Generation) was added enabling users to create and distribute their own certstores.
3.6.5 Change: As of version 3.6.5, ICE Systems no longer provides the 'default' certs and instead the ICE OS Installation Wizard generates a new set of certificates for you. These certificates, including the certificate authority (CA) used to generate and validate them, are entirely unique to the system being installed or upgraded.
In Tactical environments, where an ICE Server is not in use, ICE Mobile, ICE Desktop and ICE Agent components ship with a new, default, certstore.
For additional information, refer to Appendix J: ICE Private Certificate Stores.
Automated Certstore Creation During InstallAs stated above, manually creating an certstore for ICE certificates after installation is no longer required. When installing or upgrading a system, the ICE OS configuration wizard automatically generates a new and unique set of certstores and installs them for use by the ICE Server and clients. This is an automated process and does not require configuration.
For additional information refer to the ICE Installation Guide > ICE OS Configuration Wizard > ICE Server Installation > Server Certificates > Using ICE-Generated Certificates section.
Self-Signed TLS Certificate GenerationThe ICE Server requires a TLS certificate to enable HTTPS. In the ICE 3.6.5 and newer, the ICE Installation Wizard can now optionally generate a TLS certificate for you. The option to upload your own TLS certificate still remains available, but if you don't have a TLS cert during installation, ICE can generate one for immediate use. The TLS certificate generated is valid for 12 months only.
For additional information refer to the ICE Server Installation Guide > ICE OS Configuration Wizard > ICE Server Installation > Server Certificates > Using ICE-Generated Certificates section.
ICE Subordinate LicensingAdmins may now create Subordinate Child Licenses from existing Parent licenses, temporarily transferring some of their licenses to another Child Server. For more information see Subordinate Licensing. Additionally, ICE Lite deployments now require ICE Lite Licenses.
Archiver Server GroupsArchiver Servers are deployed via external ICE Agents and used to store audio recorded during operation. Previous versions of ICE did not provide an interface for Archive Servers, but they now appear in Settings > Archiver Servers. Archiver Server Groups are failover Groups, providing the ability to create and manage backup Archive Servers and election settings. For more information see Managing Archiver Servers.
GEOREDUNDANCY
Archiver servers in a georedundant system elect a leader using a default leader election configuration. If the network's configuration is altered (for example, if an administrator deletes the Rallypoint used by the Archiver), then no Archiver Server will become active and recordings may fail. To prevent this, you can now add backup Archiver Servers to the Group. If additional electors are required for leader election, they can now be added as well.
On an upgrade, all Archiver Servers will be in their own individual Group.
External Server CoastingExternal Servers are ICE Agent components such as Patch Servers, Static Repeaters, and Rallypoints. Previously, when one of these components was disconnected, it halted operation and waited for reconnection. This release adds 'Coast Mode' to external servers, allowing them to continue operating in their last configuration without a connection to the ICE Server so long as they maintain a Rallypoint or IGMP multicast group for leader election.
For full instructions see External Server Coasting.
Dynamic Talk Groups (DTG)ICE introduces Dynamic Talk Groups in this release. DTGs are a special type of Assigned Channel with the added ability to activate a patch of pre-configured channels. DTG channels are normal Assigned Channels until their patching capability is activated. DTG subscribers may include users, channels, groups of channels and/or users, and other DTG channels.
Use DTGs to create 'announcement' or 'emergency' or 'utility' channel to ensure specific people and/or channels are automatically included. When patched, all channels subscribed to the Dynamic Talk Group receive audio, notifications, and messages sent over the DTG. People assigned to the DTG will have access to the DTG channel at all times. People on channels subscribed to the DTG will receive audio on that channel only while the DTG is activated by a Patch Administrator in Settings > Dynamic Talk Groups.
For more information and operating instructions see the ICE Desktop User Guide > Operation > Dynamic Talk Groups section.
DFSI Supplemental Services (Alarm Alert)ICE now generates an alert when an ICE Gateway receives an emergency alarm from a P25 radio system. When an alarm is received, the alert is sent over the ICE channels associated with the radio system, and includes the Talker ID and Location of the radio unit (if known).
ICE Desktop and Mobile users will receive the transmission as an alert onscreen, in audio, and in the Alerts menu (as permitted by the ICE client's notifications settings).
The Alarm Alert feature requires no activation or configuration. It should be working and testable after the P25 radio system has been connected and audio is flowing.