Affected Products / Versions: None known at this time.
Publication Date: 21 December 2021
Summary: Audinate products and services have no known exposure to the Apache Log4j security vulnerability (CVE-2021-44228) at this time. This FAQ will be updated if this situation changes.
Details: There have been recent concerns regarding the widespread exploitation of a critical remote code execution vulnerability (CVE-2021-44228) affecting Apache Log4j, a Java logging framework. Audinate has looked for and not identified the use of the Log4j library in any of our public products and services. Our investigation continues, but Audinate products and services have no known direct exposure to this vulnerability at this point in time.
Beyond Audinate’s core products and services, Audinate utilises software products & cloud services from a range of third parties across our business. We will continue to systematically evaluate these for exposure and take remediation action as appropriate.
Remediation: None necessary at this time. This FAQ will be updated if this situation changes.
This means that the DVS software needs approval under the Mac’s Security settings. Go to the Security & Privacy pane in System Preferences and allow system software from Audinate to load. See https://developer.apple.com/library/content/technotes/tn2459/_index.html for more information.
If the error persists, in many cases this can be addressed by doing a full DVS reinstall via Library/Application Support/Audinate/DVS/Uninstall DVS, then install DVS again.
On some installs, the kernel extension can be blocked by the Mac’s System Integrity Protection resulting in the application not being shown within the Security and Privacy settings. At this time, the only option to address the issue is to disable SIP https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection.
When running DVS on macOS High Sierra (10.13 or higher), you may be presented with the following message when running the program. If this is the case, you will need to approve the kernel extension in your Mac’s Security and Privacy settings. Please see https://developer.apple.com/library/content/technotes/tn2459/_index.html for more information
On some installs, the kernel extension can be blocked by the Mac’s System Integrity Protection, resulting in the application not being shown within the Security and Privacy settings. At this time, the only option to address the issue is to disable SIP https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection.
Note: This issue applies to Intel Mac’s only. For M1 Mac’s, please refer to the following FAQ https://www.audinate.com/learning/faqs/dante-software-on-macos-big-sur-and-apple-m1-based-computers
No.
The USB-C to Lightning cables do not support the host/peripheral roles required to directly connect the Dante AVIO USB-C Adapter to an iOS device. This is a limitation defined by Apple. With the USB-C to Lightning cable, the Dante AVIO USB-C Adapter will provide power only to the iOS device.
Lightning to USB-C adapters (with USB type-A ports) can be used to connect either Dante AVIO USB Adapters (ADP-USB-2X2) or Dante AVIO USB-C Adapters (ADP-USBC-2X2) to iOS devices. When connected, the AVIO will appear as available input and output devices.
Apple devices with USB-C ports, such as new iPads, can be connected directly to a Dante AVIO USB-C Adapter with a USB-C to USB-C cable.
In November 2020, Apple announced both the release of macOS 11 (Big Sur) and new Mac computers that employ Apple Silicon, with the new M1 ARM SoC in lieu of x86 (Intel) processors.
Dante Controller, Dante Virtual Soundcard and Dante Via are fully supported on Intel based Mac’s running macOS 10.14, 10.15 and 11.
Dante Controller formally supports the Apple M1 ARM SoC (Rosetta only).
Dante Virtual Soundcard requires more significant work and is not expected until early 2022. Confirmation that Dante Via is also M1 ready requires further validation, however customers may find that Dante Via already works on M1, dependent on the features they are using.
To better ensure that DVS will continue to perform as you need, and accelerate the path to offering it to all customers, hundreds of people are currently assisting us with testing.
Applications to join the trial program are now closed. We are unfortunately not able to include everyone.
We understand that not supporting M1 is very inconvenient, and something that we want to solve as soon as possible.
In some macOS and switch configurations, IGMP snooping can interfere with PTP traffic to the computer’s network interface. This can prevent DVS achieving PTP sync with the network, which in turn prevents reliable audio transmission.
The easiest solution is to ‘Forward All’ multicast to the Mac. In effect, that disables IGMP snooping for that port. However, assuming the Mac has a Gigabit port, you should be fine.
This issue may also be due to the Mac’s built-in Ethernet port blocking communication from the leader clock. To confirm this as the issue, connect a Dante enabled hardware device directly to the computer so the switch is bypassed. If the issue is still present with a direct connection, try a USB to Ethernet adapter in place of the built-in Ethernet port, which should resolve the problem.
If this is your first installation of DVS on macOS High Sierra (10.13), you may be presented with the following message when running the program:
‘The DVS Manager service is not available, please try again in a few minutes’.
If this is the case, you will need to approve the kernel extension in your Mac’s Security and Privacy settings. Please see https://developer.apple.com/library/content/technotes/tn2459/_index.html for more information.
Overview
Dante devices that have been ‘misplaced’ are those that have been configured with a static IP address which falls outside the subnet that the Dante Controller computer is on (or more specifically, the subnet configured on the network interface which is selected in Dante Controller as the primary network interface).
Locating Misplaced Devices
Because Dante devices use MDNS multicast advertising, misplaced devices will always be visible in Dante Controller, if the computer is connected to the same physical network as the misplaced device.
However, the misplaced device and the computer must be either:
- Both using IP addresses inside the Link-Local address range (169.254.1.0 to 169.254.254.255 inclusive), or
- Both using IP addresses outside the Link-Local address range
First, assign a static IP address to your computer which is inside the Link-Local address range. If the device does not appear (as described below), assign an address which is outside the Link-Local address range and try again.
They will not appear in the Routing tab of the Network View, but they will appear (highlighted in red) in the Device Info, Clock Status and Network Status tabs of the Network View:
They will also appear (highlighted in red) in the device drop-down list in Device View (Ctrl + D):
Recovering Misplaced Devices
Note: ‘Recovering’ in this context is not the same as failsafe recovery.
To recover a misplaced device:
- Ensure the computer running Dante Controller has an IP address outside the Link-Local address range (either set a static address, or use DHCP).
- Open the device view for the device (either double-click the device in the Device Info, Clock Status or Network Status tabs, or open Device View and select the device from the drop-down list).
- Record the IP address listed in the first line of the Details section (after ‘Resolved device address on Dante interface is’)
- Configure your computer’s network interface with a static IP address in the same range as the IP address for the device. It is recommended that you use the same values for the first three octets – in this example, that would be 11.12.13 – and then choose a different number for the last octet (e.g. 15). The operating system will provide a suitable subnet mask (the last octet must be zero, however). In Windows, you can tab to the ‘Subnet mask’ field to auto-populate the field.
- Apply the changes to the computer’s IP address, and return to Dante Controller.
The device should now appear in the Routing tab of the Network View, and can be configured with a different address (or set to ‘Obtain an IP Address Automatically’) using the Network Config tab of the Device View.
- Set the computer’s network interface to obtain an IP address automatically (or restore it to its previous address).
The misplaced device will now appear in the main Dante network.
Note, that it may take a while for Dante Via to connect to our licensing server.
Should you receive the error, ‘Dante Via cannot connect to the Dante Via Manager Service’, this may be because your local hosts file (located at /etc/hosts) is corrupt.
You can check this by opening a Terminal window and typing, ‘cat /etc/hosts’. The output from Terminal should match the output as shown in this URL. Should the output differ, follow the instructions in the tutorial to reset your local hosts file.
A Dante Virtual Soundcard License can only be activated a limited number of times, and this activation limit has been exceeded.
Please be aware that the license for this software is for use on a single machine only (like a physical sound card license). The license agreement you acknowledged when you activated Dante Virtual Soundcard does not allow you to use the same license ID on multiple machines. In order to use Dante Virtual Soundcard on a second machine, you will need to purchase an additional license.
Reinstalling Dante Virtual Soundcard on a machine that it was previously installed on should not require an additional activation, and should be possible without limit.
If you believe this message is in error, please fill out this form, select ‘Move or Reinstall DVS’ and include your license ID.
- Check that the network cable is plugged in securely and that the activity lights are flashing rapidly.
- Check that the correct network interfaces are selected.
- Check that your network interfaces have the correct IP addresses (set to acquire IP address automatically).
- If there are two different wired network interfaces on your computer, ensure that they are in different subnets – or disable the unused network interface.
- Check that you have no firewall active – please see the Dante controller user guide for details of how to safely configure a firewall for use in a deployed network.
- Check that you have no antivirus software active (Dante uses ‘unusual’ port addresses, due to the ‘usual’ port addresses already being used by other common applications) – you will need to configure your antivirus software to allow the full function of Dante.