What’s New in SAS 9.

4 M8

Margaret Crevar

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
Today’s Agenda

1. What is new in SAS 9.4

M8?
2. Plan before you start
your update
3. Q&A

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 9.4 Release Timeline

Initial
Release M1 M2 M3 M4 M5 M6 M7 M7
M8
July Dec Aug July Nov Sept Nov Aug Feb Jan

2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023
9.4
10
Years

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
What is new in
SAS 9.4 M8?
• Security Enhancements
• Third Party Component Upgrades, Static
and Dynamic Security Scan & Enterprise
Security Integration
• Modernization
• Supported Operating Systems
• Retired SAS products list expanded
• Some SAS Solutions not moving
• Hot Fixes

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 Security Enhancements:
Third Party Changes and Upgrades
• Spring upgraded from version 3 to version 5
• Log4j Version 1 upgraded to Version 2
• CAS (Aprero Central Authentication Service) used by SAS Logon Manager upgraded
from CAS 3.x to CAS 6.x
• Hundreds of third-party jars upgraded
• SAS will use the Operating System SSL libraries available in the customer’s
environment.
 On z/OS, the IBM SSL libraries will be used.
 The SAS Web Server and Postgres will continue to be compiled with OpenSSL
 OpenSSL 1.0.2 support upgraded to OpenSSL 3
 SAS added support for TLS 1.3

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 Security Enhancements:
Third Party Changes and Upgrades

• The use of Struts in SAS 9.4M8 is eliminated (except for a few Solutions)
• Enhancements to SAS Support for Microsoft Windows Defender Credential
Guard and Constrained Delegation are delivered
• Support added for IBM z/OS Pervasive Encryption

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 Security Enhancements:
Enterprise Security Integration

• Windows Integrated Authentication

• IBM WebSeal
• Broadcom SiteMinder (used to be CA SiteMinder)
• Powerful Fallback Authentication
• FIPS
• SAML Authentication

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 Security Enhancements:
Static and Dynamic Security Scans

• BlackDuck scan for third party Java projects

• Checkmarx scan for all Java, Groovy and JSP source code
• Klocwork scan for all C source code
• OWASP ZAP scan for all SAS Web Applications and HTTP(S) endpoints

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 Modernization
• SAS Private JRE is now based on Java 11 (MVS is Java 8)
• SAS Cache Locator is now based on OpenSource Geode instead of Gemfire
• Geode version is at the most recent release stream
• SAS Web Application Server is now based on OpenSource Tomcat instead of
VMware tcServer
• Tomcat version is Tomcat 9 instead of Tomcat 8
• SAS Web Server is upgraded with OpenSSL 3 and FIPs support out-of-box
• SAS Messaging Engine is upgraded to use 5.17.x
• SAS Transaction Manager upgraded to Atomikos Extreme Transactions instead
of OpenSource Atomikos (Transaction Essentials)
• SAS Content Server upgraded to use the newest version of JackRabbit
• SAS Middle Tier Platform (WIP) Services modernized to support the above
changes

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 SAS 9.4M8 Updated Operating Systems
Linux
• Oracle 7.9 and 8.3
• Red Hat Enterprise Linux 7.9 and 8.4
• SUSE/SLES 12.5 and 15
UNIX
• AIX 7.2
• Solaris 11.4 for x64/x86 and SPARC 64 bit
Windows (32 bit (when available) and 64 bit)
• Windows Server 2012, 2012R2, 2016, 2019, 2022, Windows 10 and Windows 11
(SAS Note 69854)
z/OS 31 bit and z/OS 64 bit for the Metadata Server
• z/OS 2.5

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 SAS 9.4 M8 Deprecated Operating Systems

Support for the following operating system versions are dropped with SAS 9.4 M8

• Windows 7 and Windows Server 2008 and 2008R2

• Red Hat Enterprise Linux 6
• Solaris 10
• AIX 7.1 TL5
• HP UX Itanium
• SUSE 11

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 SAS 9.4 M8 Products

For a complete list, go to

SAS Help Center: What’s New in SAS 9.4 Guide to Software Updates

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 SAS 9.4 M8 Deprecated Products

Support for the following products are dropped with SAS 9.4 M8

• SAS AppDev Studio

• SAS BI Portal
• SAS Information Delivery Portal -
SAS Help Center: Transitioning from a SAS Enterprise BI Server Deployment That Uses
SAS Information Delivery Portal
• SAS/ACCESS Interface to Oracle on the z/OS platform

For a complete list, go to

SAS Help Center: What’s New in SAS 9.4 Guide to Software Updates

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 SAS Solutions shipping with SAS 9.4 M8
a. Initially Available
Initially Available
• Risk and Quantitative Solutions (many are releasing)

Shortly after Initial Release:

• Fraud and Security Solutions (Anti Money Laundering, Customer Due
Diligence, Fraud Management, Currency Transaction Reporting)
• SAS Compliance Solutions
• Internet of Things
• Retail (many are releasing)
• Risk (SAS Asset and Liability Management)

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 Upgrading is a Process

Design/ Prepare Execution Validation and

Planning 20% 15% Rollout
30% 35%

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 SAS Migration Utility (SMU) vs. Upgrade In Place (UIP)

Pros Cons

SAS Migration Utility SAS Migration Utility

• SAS processing is not disrupted • Additional hardware costs
• New installation of SAS is created • Higher implementation cost
• Allows for hardware and operating • Lengthier time to complete migration
system version upgrades

Upgrade In Place Upgrade In Place

• No additional hardware cost • SAS processing is disrupted until the
• Lower implementation cost upgrade is complete (or a backup
• Shorter time to complete upgrade restored)
• Preserve customizations • Not available if running on a deprecated
operating system

Learn more about the SAS® 9.4 Intelligence Platform: Migration Guide, Second Edition and Upgrade In Place in the SAS Guide to Software Updates document
Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
Upgrade Process Flow

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
The SAS® 9 Content Assessment helps organizations
understand their SAS® 9 systems.

SAS 9 Inventory SAS 9 Profile SAS 9 Code Check SAS 9 System Evaluation

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
SAS® 9 Content Assessment Applications are available
to customers from Downloads on support.sas.com

2. Scroll to the S category.

1. Navigate to Downloads & Hot Fixes and choose the A-Z tab. 3. Find the SAS 9 Content Assessment download.
Go to the SAS 9 Content Assessment download

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
Evaluates the current system to identify known issues

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
Know what products are installed

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
 Have Questions or Need Assistance?
• Your SAS Account team is here to help.

• SAS 9.4 Maintenance 8 is available

• SAS 9.4 M8 Product Documentation

 For a summary of highlights see the 9.4 M8 sections of the 
SAS 9.4 Guide to Software Updates and Product Changes 

 The  SAS Content Assessment System Evaluation Tool v2023.01 

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
The time is now!
Move to SAS 9.4
M8

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.
Questions?

Co py r i gh t © SA S I ns ti t u t e I n c. Al l r i g h ts re se r v e d.