On June 9th, iManage released a critical advisory (login required) regarding their Work 10 Desktop for Windows client application. The issue stems from a local certificate within the application that is set to expire on June 27th, 2020. Some builds of 10.x have a bit of a longer runway with an expiration of October 3, 2020. However, the most recent builds are the ones that expire within the next couple weeks. Once the certificate expires, core functionality such as checking out and editing documents will no longer function as expected.
See below for details regarding exactly which builds are affected.
| Versions | Affected (Yes or No) |
Date and time of certificate expiration (In GMT time) |
| 10.2.3.x – 10.2.6.105 | Yes | June 27, 2020 23:59:59 GMT |
| 10.1.x – 10.2.2.x | Yes | October 3, 2020 23:59:59 GMT |
| 10 – 10.0.2.x | No | No action required |
To resolve the issue, action must be taken prior to June 27th. iManage released a manual patch, which is available to be downloaded at the advisory page. Instructions are provided, but this patch is meant as a simple manual fix that requires several processes to be killed and two individual files to be replaced. iManage also released an automated method of patching that requires an updated configuration file be uploaded to the iManage Control Center, and then a client-side executable be run.
All that said, the recommended fix is to upgrade the Work Desktop Client to the latest build 10.2.6.107 (as of June 10th). This new build is available for download here from iManage directly (login required).
Please reach out hello@kraftkennedy.com if your firm needs any assistance packaging and deploying this new build to resolve this issue.