GovTechSG · kpslp · Mar 19, 2025 · Mar 20, 2025 · Mar 20, 2025 · Mar 20, 2025
diff --git a/.DS_Store b/.DS_Store
diff --git a/README.md b/README.md
@@ -1,22 +1,37 @@
-# Home
+# Overview
 
 Welcome to the SEED documentation! 
-
-## Supported browsers and Operating Systems (OS)
 
-Ensure you are using one of the supported browsers and operating systems before getting started with SEED:
+Before you begin the process of onboarding your Internet Device to SEED, you need meet the necessary prerequisites. These prerequisites are vital for a successful onboarding experience. 
 
-**Supported browsers**:
+![onboarding](/images/onboarding-image.png)
 
-- Google Chrome
-- Safari
-- Microsoft Edge
-- Mozilla Firefox (Configuration needed, [learn more](https://support.mozilla.org/en-US/kb/setting-certificate-authorities-firefox))
+> **Note**: Each user can onboard **only one device** to SEED.  
 
-**Supported Operating Systems (OS)**:
+## Supported browsers and operating systems
+
+Supported browsers:
+
+ - Google Chrome
+ - Microsoft Edge
+ - Mozilla Firefox. If you are using Mozilla Firefox, you need to [configure Firefox to trust the root certificate store of your system](https://support.mozilla.org/en-US/kb/setting-certificate-authorities-firefox).
+ - Safari
+
+Supported operating system:
+
+
+| **Operating system** | **Version supported** |
+|---|---|
+| **macOS 15**        | 15.6.1 <br> **Note**: If you encounter issues accessing SGTS or GCC services after the update, please ensure that [FDA is enabled](https://docs.developer.tech.gov.sg/docs/security-suite-for-engineering-endpoint-devices/post-onboarding-instructions/macos-latest?id=ensure-full-disk-access-fda-is-enabled-for-seed-components) and reboot your device. <br> Do **not** install unsupported versions of macOS unless explicitly communicated via email by the SEED team.|
+| **macOS 14**        | 14.7.8 |
+| **macOS 13**        | 13.7.8 |
+| **Windows 10**      | 1507 (LTSC only, build 10240, minimally revision 21100) <br> 1607 (LTSC only, build 14393, minimally revision 8330) <br> 1809 (LTSC only, build 17763, minimally revision 7678) <br> 21H2 (LTSC only, build 19044, minimally revision 6216) <br> 22H2 (build 19045, minimally revision 6216) |
+| **Windows 11**      | 22H2 (build 22621, minimally revision 5768) <br> 23H2 (build 22631, minimally revision 5768) <br> 24H2 (build 26100, minimally revision 4946) |
+
+
+> **Note**:
+> Admin privilege is required to onboard to SEED.
 
-- macOS 13, 14 and 15
-- Windows 10 and 11 (Pro and Enterprise)
 
 
 ## Popular topics

diff --git a/_sidebar.md b/_sidebar.md
@@ -10,8 +10,13 @@
   - [Onboard as a public officer](/onboard-device/public-officer)
   - [Onboard as a vendor](onboard-device/vendor)
 - Post onboarding steps  
-  - [macOS 14 and 13 post onboarding guide](/post-onboarding-instructions/macos-latest.md)
+  - [macOS post onboarding guide](/post-onboarding-instructions/macos-latest.md)
   - [Windows post onboarding guide](/post-onboarding-instructions/windows.md)
+- macOS Platform SSO 
+  - [Set up Secure Enclave](set-up-secure-enclave.md)
+- SEED+
+  - [CyberArk dialogs and permissions (Users)](seed-plus/cyberark-dialog.md)
+  - [Approval guide (PoC)](seed-plus/poc-approver-guide.md)
 - Monitor using SEED Dashboard
   - [SEED Dashboard overview](/seed-dashboard/seed-dashboard-overview.md)
   - [SEED Dashboard tour](/seed-dashboard/seed-dashboard-tour.md)
@@ -24,11 +29,16 @@
   - [Onboarding FAQ](/faqs/onboarding-faq.md)
   - [Offboarding FAQ](/faqs/offboarding-faq.md)
   - [GCC 1.0 connectivity FAQ](/faqs/gcc1-connectivity-faq.md)
+- Update schedule
+  - [Patching schedule (OS updates)](update-schedule/os-patching-schedule.md)
 - Support
-  - [Raise a service request](/support/raise-service-request.md)
-  - [Troubleshooting issues](/support/troubleshooting-issues.md)
+  - [Cloudflare Certificate Update FAQ](/support/cloudflare-cert-update-guide.md)
+  - [Configuration of Common Tools FAQ](/support/configuration-of-common-developer-cli-tools-with-cloudflare-warp-guide.md)
+  - [Security hardening list](/support/hardening-list.md)
   - [Generate diagnostic files](/support/generate-diagnostic-files)
+  - [Troubleshooting issues](/support/troubleshooting-issues.md)
   - [View SEED service status](/support/seed-status.md)
+  - [Raise a service request](/support/raise-service-request.md)
 - Additional resources 
   - [Best practices](/additional-resources/best-practices.md)
   - [Split tunnel allowlisting](additional-resources/split-tunnel-allowlist)

diff --git a/announcements.md b/announcements.md
@@ -2,11 +2,24 @@
 
 | <div style="width:150px"><b>Date</b></div>  | Announcement |
 | --- | --- |
+| 13 August 2025 | **Cloudflare connection issue**<br><br>Users may encounter **Cloudflare connection** or **certificate errors** when using SEED.<br><br>**Impact:**<br>- Some users may be **unable to connect** or may see a security warning.<br>- The **SEED team is aware** and is currently investigating the issue.<br><br>We apologise for the inconvenience and will provide updates as soon as the service is restored.<br><br>For assistance, contact **[email protected]**.|
+| 23 July 2025 | **Scheduled maintenance for Tanium servers**<br><br>We will be performing a scheduled upgrade of the **Tanium servers** to ensure continued performance and reliability.<br><br>**Maintenance window:**<br>- **Date:** 31 July 2025 (Thursday)<br>- **Time:** 6:00 PM to 9:00 PM (SGT)<br><br>**Impact:**<br>- **SEED onboarding will be temporarily unavailable** during this period. Users are advised to plan onboarding activities **outside this window**.<br>- **Access to SGTS applications** for already onboarded users will **not be affected**.<br><br>If you encounter issues after the maintenance, please create an [incident support request](https://go.gov.sg/seed-techpass-support). |
+| 22 July 2025 | **Temporary onboarding limitation for public officers**<br><br>Public officers under Whole-of-Government (WoG) are currently **unable to onboard new SEED devices**.<br><br>**Impact:**<br>- Existing SEED usersare **not affected**.<br>- **Vendors** onboarding new SEED devices are **not affected**.<br><br>The SEED team is aware of the issue and is investigating. Updates will be provided as they become available.<br><br>For assistance, contact **[email protected]**. |
+| 24 June 2025 | Starting from **July 2025**, OS updates will be automatically pushed on a **fixed schedule — every 3rd Tuesday of the month**. The first two scheduled update dates are **15 July 2025** and **19 August 2025**.<br><br>As a one-time exception, the OS update for **June 2025** will commence on **24 June 2025 (Tuesday of the 4th week)** instead of following the standard schedule.<br><br>**Update window:**<br/>- Updates will be pushed between **8:00 AM and 5:00 PM (SGT)**.<br/>- Devices may **auto-reboot** to complete the update. Users are advised to **save work** beforehand to prevent data loss.<br><br>**Impact:**<br/>- Users with unpatched devices will be notified daily.<br/>- Devices not patched in time may be **blocked from accessing SGTS and GCC services**.<br><br>**No user action is required during the update process.**<br><br>For details on supported OS versions and the update calendar, refer to the [update schedule documentation](/update-schedule/os-patching-schedule.md).<br><br>For queries, please contact us at **[email protected]**. |
+| 02 June 2025 | **SEED onboarding issue**<br><br>Please note that we are aware of the issue where users are encountering errors while onboarding devices to SEED.<br><br>The SEED support team is actively investigating and working towards resolving the issue. We will provide timely updates as progress is made.<br><br>**Impact:**<br>- Users may experience failures or errors during the onboarding process.<br><br>For assistance or to report issues, please contact **[email protected]**. |
+| 21 May 2025 | SEED team will be conducting scheduled server maintenance on **21 May 2025, Wednesday, from 6:00 PM SGT onwards**.<br><br>This was previously announced via email broadcast on 8 May and published on the documentation portal.<br><br>**Impact:**<br/>- Users onboarding to SEED may experience intermittent errors or delays.<br/>- Users are advised not to onboard during this window or within 30 minutes prior.<br><br>For more assistance:<br/> Please contact us at [email protected] for any issues or concerns. |
+| 08 May 2025 | **Scheduled maintenance for Tanium servers** <br> We will be upgrading the Tanium servers to ensure continued performance and reliability. <br><br>**Maintenance schedule**:<br>The upgrading will be conducted from **6pm to 8pm, Wednesday, 21st May 2025**. <br><br>**Impact**:<br>- Onboarding may experience intermittent errors. Users are strongly advised to refrain from onboarding during this time and preferably avoid starting onboarding **30 minutes before the maintenance begins**.<br>- Access to SGTS for onboarded users should not be affected.<br><br>- If you encounter issues following the maintenance, please create an [incident support request](https://go.gov.sg/seed-techpass-support).|
+| 21 March 2025 | **Intermittent access issues with SGTS and GCC services** <br> We are aware that some users are experiencing access issues with SGTS and GCC services. Our team is actively investigating the cause and working on a resolution. <br><br> **Key details:** <br> - Some users may encounter difficulties accessing SGTS and GCC services. <br> - Other functionalities remain unaffected. <br><br> We apologise for any inconvenience caused. If you need further assistance, please contact us at **[email protected]**. |
+| 20 March 2025 | Enforcing OS Version Baselines for SEED Devices <br> To enhance the security of SEED devices, we will be enforcing OS version baselines for minor and patch versions. This ensures devices are patched against vulnerabilities in a timely manner. <br><br>Enforcement schedule:<br>- Windows baseline enforcement begins on 27 March 2025.<br>- macOS baseline enforcement begins on 9 April 2025.<br><br>Impact:<br>- Devices that do not meet the baseline will be notified and given a 7-day grace period to patch.<br>- After the grace period, devices that remain non-compliant will be blocked from accessing SGTS and GCC services.<br><br>What should I do?<br>- Check your OS version using the guide [here](https://docs.developer.tech.gov.sg/docs/security-suite-for-engineering-endpoint-devices/on[…]equisites?id=how-to-check-your-operating-system-version).<br>- Perform necessary updates if your device does not meet the baseline. Refer to the links below for update instructions:<br> - [Windows update guide](https://support.microsoft.com/en-us/windows/install-windows-updates-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a)<br> - [macOS update guide](https://support.apple.com/en-sg/108382)<br>- For macOS user updating to version 15.3.2, if you encounter issues accessing SGTS or GCC services after the update, ensure that Full Disk Access (FDA) is enabled and reboot your device refer to [guide](https://docs.developer.tech.gov.sg/docs/security-suite-for-engineering-endpoint-devices/post-onboarding-instructions/macos-latest?id=ensure-full-disk-access-fda-is-enabled-for-seed-components)<br><br>Future updates:<br>- Baselines will be adjusted periodically based on security reviews, and SEED users will be notified via email and the Documentation Portal.<br><br>For queries, contact us at [email protected]. |
+| 12 March 2025 | **Scheduled maintenance for Tanium servers** <br> We will be upgrading the Tanium servers to ensure continued performance and reliability. <br><br>**Maintenance schedule**:<br>The upgrading will be conducted from **6pm to 9pm, Tuesday, 18th March 2025**. <br><br>**Impact**:<br>- Onboarding may experience intermittent errors. Users are strongly advised to refrain from onboarding during this time and preferably avoid starting onboarding **30 minutes before the maintenance begins**.<br><br>- Access to SGTS for onboarded users should not be affected.<br><br>- If you encounter issues following the maintenance, please create an [incident support request](https://go.gov.sg/seed-techpass-support). |
+| 22 January 2025 | **Scheduled maintenance for Tanium servers** <br> We will be upgrading the Tanium servers to ensure continued performance and reliability. <br><br>**Maintenance schedule**:<br>The upgrade will be conducted from **6pm to  9pm, Thursday, 23rd January 2025**. <br><br>**Impact**:<br>- Onboarding may experience intermittent errors. Users are strongly advised to refrain from onboarding during this time.<br<br>- If you encounter issues following the maintenance, please create an [incident support request](https://go.gov.sg/seed-techpass-support). |
+| 26 December 2024 | **Update of Cloudflare Root Certificate** <br> In preparation for the Cloudflare rotation exercise, SEED team will be pushing down new certificates to all GMDs on 30th December 2024, Monday, from 12:00 PM to 02:00 PM SGT.<br><br>**Impact**:<br>There should be no impact to users during the period of certification provisioning. <br><br>**Action required**:<br>- If you have configured your developer CLI tools to trust the Cloudflare certificate previously, please update the certificates by referring to the [Configuration of Common Developer CLI tools with Cloudflare WARP Guide](https://docs.developer.tech.gov.sg/docs/security-suite-for-engineering-endpoint-devices/support/configuration-of-common-developer-cli-tools-with-cloudflare-warp-guide).<br>- If you face issues accessing SGTS and GCC from 13th January 2025, Monday, onwards, please refer to the [Cloudflare Certificate Update Guide](https://docs.developer.tech.gov.sg/docs/security-suite-for-engineering-endpoint-devices/support/cloudflare-cert-update-guide) for troubleshooting.<br><br>**Additional information**:<br>- If the issue persists after troubleshooting, please create an incident support request with [SEED support](https://go.gov.sg/seed-techpass-support). |
+| 24 December 2024 | **Wrapping up an incredible 2024!**<br>As we wrap up 2024, WOW, what a year! The TechPass and SEED teams absolutely crushed it, and it’s all thanks to your hard work, creativity, and dedication. You’ve made this year’s achievements not just possible, but extraordinary!<br><br>To our awesome users and bosses, a big shoutout to you too! Your feedback and support have been the secret sauce to our success.<br><br>**Looking ahead to 2025:**<br>- I’d love to hear your ideas, thoughts, or even wild dreams for what we can do next.<br>- Book time with me: [Schedule a session](https://outlook.office.com/bookwithme/user/[email protected]?anonymous&ep=pcard&isanonymous=true). Let’s make magic happen together!<br><br>Here’s to a well-deserved break, a joyful holiday season, and an even brighter New Year. You’ve earned it! 🎄🍾🎉<br><br>**Eunice Teo**<br>Product Manager of TechPass and SEED![TechPass](/images/impact.png)<br> |
 | 18 December 2024 | **Intermittent issue accessing Microsoft Sentinel on Azure portal**<br>TechPass has detected an issue where some users are experiencing intermittent difficulties accessing Microsoft Sentinel on the Azure portal. Our team is actively investigating the matter to resolve it as soon as possible.<br><br>**Key details:**<br>- The issue affects access to Microsoft Sentinel on the Azure portal.<br>- Sign-ins to downstream applications remain unaffected.<br><br>We apologise for any inconvenience caused. If you need further assistance, please contact us at **[email protected]**. |
 | 06 December 2024 | **Resolve *CF_DNS_Lookup_Failure* on macOS**<br>We have observed instances of users encountering the `CF_DNS_Lookup_Failure` error while using Cloudflare WARP on macOS. To address this issue, please follow the updated resolution steps.<br><br>**Key Recommendations:**<br>- **Upgrade macOS**: Update to macOS 15.1 or later to resolve several underlying issues.<br>- **Firewall Settings**: Ensure your firewall is turned on and configured to allow incoming connections for Cloudflare WARP.<br>- **Additional Steps**: Disable "block all incoming connections" in your firewall settings and explicitly allow connections for the Cloudflare WARP application.<br><br>[Read the full guide here](https://community.cloudflare.com/t/cf-dns-lookup-failure-cloudflare-zero-trust-gateway-with-wrap-on-macos-15/712557/2).<br><br>If you need further assistance, contact us at **[email protected]**. |
 | 26 November 2024 | **macOS Policy enforcement starting 27 November**<br>To maintain the security of our systems and protect against vulnerabilities, updates for Apple macOS versions 13, 14, and 15 will be enforced starting **27 November 2024**.<br><br>**Specific update requirement for macOS 15 and 15.1:**<br>Devices running macOS 15 or macOS 15.1 must immediately update to macOS 15.1.1. This update addresses significant vulnerabilities that could compromise system security (JavaScriptCore and WebKit).<br><br>**Key Details:**<br>- Devices on macOS 15 or 15.1 will be **blocked from accessing SGTS services starting 10 December 2024** until they are updated to macOS 15.1.1.<br>- Please prioritise this update to ensure uninterrupted access to services.<br><br>[Read about security notes here](https://support.apple.com/en-us/121753).<br><br>If you have any questions, please reach out to us at **[email protected]**. | 
 | 01 November 2024 | SEED is now officially supported on macOS 15 Sequoia. If you encounter any issues, please reach out to us at [email protected]. |
-| 20 September 2024 | A new banner feature has been introduced on the [SEED Dashboard](https://dashboard.seed.tech.gov.sg/) to push critical messages to SEED users.<br><br>.<br><br>**For more assistance**:<br>Email us at [email protected]. |
+| 20 September 2024 | A new banner feature has been introduced on the [SEED Dashboard](https://dashboard.seed.tech.gov.sg/) to push critical messages to SEED users.<br><br>**For more assistance**:<br>Email us at [email protected]. |
 | 16 September 2024 | SEED has not been officially tested on macOS 15 Sequoia, and we cannot provide support if users encounter issues. <br><br>For more assistance:<br>Email us at [email protected]. |
 | 30 August 2024 | The previously announced support for macOS 15 Sequoia, originally scheduled to begin on August 31, 2024, has been delayed until further notice.<br><br>**For more assistance**:<br>Email us at [email protected]. |
 | 5 August 2024 | SEED team has implemented the following changes:<br><br> - Enhanced notifications to help users troubleshoot access issues with SGTS services.<br> - Improved integrations between SEED components for a smoother user experience when accessing SGTS services.<br> - Expanded browser support, now including Safari for macOS users.<br> - Strengthened security measures for accessing GCC 2.0 AWS.<br><br>**For more assistance**:<br>Create an [incident support request](https://go.gov.sg/seed-techpass-support).|

diff --git a/assets/Cloudflare_CA.crt b/assets/Cloudflare_CA.crt
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----