Hi,

I have MAS8.11 and MAS manage 8.7.4 installed on our OpenShift cluster.  When working with Maximo Mobile RBA on an iPad and using the web browser Safari (online, so NOT the Native app!), I am able to use the scan function in the search bar, as well as scanning an asset or location on a new created work order. This works fine with both Safari and Google Chrome browser. My iPad is an older on (iPad Air 2 and iOS version 15.1). When I try to do the exact same scenario on my iPhone (opening the web browser to connect to MAS Manage and open the browser based Technican RBA application), the scan function results in a system error message "The operation is insecure".

I assume that either:

A) Maximo Mobile web version is not supporting iOS 17 or higher,
B) iOS 17 isn using different security setting that prohibits to open the scan feature while using a web browser


Is there anyone faces the same error?

Some screenshots from my iPad iOS V15.1 (camera is opened when pressing the scan button, and I am able to select either the front- or back camera

Screenshot from iPhone iOS V17.2 (camera is trying to open, but then an system message pops up)

------------------------------
Jan-Willem Steur
Manager Business Development
ZNAPZ b.v.
Breda
+31 6 25639950
Jan-Willem
------------------------------

I was able to recreate the issue on iOS 17.2.1 and iOS 17.3 with an 8.7.3 Manage environment. I couldn't find any known issues so I opened a case to try and get a defect.

------------------------------
Steven Shull
------------------------------

There is a solution for the issue I posted before:

There is a system property mxe.sec.header.Content_Security_Policy which requires the addition of worker-src 'self' blob: ; 

The default value for this property is:

font-src 'self' data: https://1.www.s81c.com *.walkme.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.walkme.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.walkme.com; img-src 'self' d2qhvajt3imc89.cloudfront.net data: *.walkme.com; object-src 'self' *.walkme.com;

Just replace the default property with this:

font-src 'self' data: https://1.www.s81c.com *.walkme.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.walkme.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.walkme.com; img-src 'self' d2qhvajt3imc89.cloudfront.net data: *.walkme.com; object-src 'self' *.walkme.com; worker-src 'self' blob: ;

After a life refresh, the scan function will work on an iPad (or iPhone) using the web page to open Maximo Mobile Technician

------------------------------
Jan-Willem Steur
Manager Business Development
ZNAPZ b.v.
Breda
+31 6 25639950
Jan-Willem
------------------------------