BeyondTrust Appliance U-Series Software 4.1.0 release notes
over 1 year ago
October 12, 2023
New features and enhancements:
- Redesigned the Appliance Software User Interface, including upgraded controls and Shell features, to improve usability.
- Upgraded Angular versions to 15 for the Deployment & Configuration Wizard, Web Console, and SCL.
- Added a dark mode option in the Appliance Software User Interface user preferences.
- Improved functionality for Notifications in the Appliance Software User Interface:
- Top 10 notifications more visible in the UI with more details provided
- Added a link to view all notifications in Notifications grid where you can manage notifications and view more details about each notification.
- Replaced the Roles Editor page with the Appliance Feature Configuration page to better reflect the functionality it provides, which is the ability to modify the features and services running on your BeyondTrust U-Series Appliance. Also, updated the design of the functionality to improve usability as follows:
- Replaced the tile design for each role with a toggle switch for each feature.
- Each feature contains an expandable panel that allows the same settings customization that was available in the previous Roles Editor, with dependency checking built-in, and the ability to compare your pending changes against the current configuration.
- Replaced the Diagnostics application with a Performance Counters Dashboard that is now the Home page for the Appliance Software User Interface and added the following functionality:
- Updated performance meters and a new performance over time graph, which allows you to switch from CPU to the other built-in performance counters.
- Added the ability to view historical data and export it to CSV format.
- Added a graphical slider to represent the performance counter thresholds, including the optional counters.
- Added a new Service Status page where you can:
- Enable and disable alerts for status changes in services.
- View the status of services.
- Stop, start, and restart services.
- Added the ability to create a remote BeyondInsight database when configuring the BeyondInsight Database Access feature.
- Added new scheduling options, new logs, and granular control over which logs get exported on Log File Export page.
- Added new appliance health events to track both successful and failed logon attempts, as well as appliance reboots.
- Improvements made to the BeyondInsight for Unix & Linux feature configuration to make it more stable.
- Relocated the configuration settings for RDP and Console Access, IP, and BITS from the deprecated Maintenance application to the new Network page.
- Relocated the Ping Command and Network Configuration features from the deprecated Diagnostics application to the new Network page.
- Relocated the Backup and Restore settings from the deprecated Maintenance application to the new Business Continuity page and added granular visibility and control over backup contents.
- Relocated the Cold Spare setup from the deprecated Roles Editor to the new Business Continuity page.
- Relocated the ability to schedule an appliance reboot from the deprecated Maintenance application to the new Business Continuity page, under Power Options.
- Relocated the configuration of High Availability from the deprecated Roles Editor to the new Business Continuity page.
- Implemented a new wizard-like design for configuring High Availability, improving the user experience.
- Relocated the following features from the deprecated Maintenance application to the new Security and Compliance page: Administrator Credentials, Certificate Management, Security Protocols, Client Connections, Local Computer Policy, Pre-Login Banner, Data Encryption Key, and LCD Panel.
- Improved appliance hardening:
- Added security event logs for exporting and downloading.
- Added 15 character minimum password length.
- Relocated license validation features to implement banner warnings indicating which licenses are expired.
- Updated the Deployment & Configuration Wizard to reflect new appliance application terminology.
- Enforced custom password complexity rules set within BeyondInsight when changing the BeyondInsight Admin password.
- Proxy settings and database upgrades depend upon BeyondInsight version 23.2.
- Updated the Installer by removing outdated code and checks and support for Windows 2012.
Feature Mapping
Many features were relocated and renamed in the Appliance Software User Interface. The below table provides a mapping between the features in the 4.0 release and the new features in the 4.1 release.
| Feature in 4.0.x Appliance Software User Interface | Feature in 4.1.0 Appliance Software User Interface |
|---|---|
| Roles Editor | Features and Services > Appliance Feature Configuration |
| High Availability | Business Continuity > High Availability |
| Diagnostics > Dashboard > Disk / CPU / SQL Memory / RAM Usage | Home (Dashboard) |
| Diagnostics > Dashboard > Total CPU Usage Over Last Week | Home (Dashboard) |
| Diagnostics > Dashboard > Services Running | Features and Services > Service Status |
| Diagnostics > Dashboard > Analyzer Report | Deprecated |
| Diagnostics > Dashboard > Windows Activation | Software and Licensing > Product Licensing |
| Diagnostics > Appliance Health > Started / Stopped Services | Features and Services > Service Status |
| Diagnostics > Appliance Health > Service Alerts | Features and Services > Service Status |
| Diagnostics > Tools > Network Configuration | Network > Diagnostic Tools |
| Diagnostics > Tools > Ping | Network > Diagnostic Tools |
| Diagnostics > Appliance Logs > Appliance Logs | Features and Services > Appliance Logs |
| Diagnostics > Appliance Logs > Log Export | Integrations > Log File Export |
| Diagnostics > Release Notes (external link) | Deprecated |
| Diagnostics > Performance Counters > Notification Settings | Features and Services > Performance Counters |
| Diagnostics > Performance Counters > Base & Selectable Counters | Features and Services > Performance Counters |
| Maintenance > BeyondTrust Updates > Appliance Software Versions | Software and Licensing > Software Versions |
| Maintenance > BeyondTrust Updates > Security Updates | Software and Licensing > Security Updates |
| Maintenance > BeyondTrust Updates > Update Method | Deprecated |
| Maintenance > Schedule a Reboot > Restart Settings | Business Continuity > Power Options |
| Maintenance > Backup and Restore > Backup | Business Continuity > Backup and Restore |
| Maintenance > Security Settings > Download CryptoKey Options | Security and Compliance > Data Encryption Key |
| Maintenance > Security Settings > Upload CryptoKey Options | Security and Compliance > Data Encryption Key |
| Maintenance > Security Settings > Event Service SSL Requirement | Security and Compliance > Client Connections |
| Maintenance > Security Settings > FIPS Compliance Checking | Security and Compliance > Local Computer Policy |
| Maintenance > Security Settings > HTTP Strict Transport Security | Security and Compliance > Client Connections |
| Maintenance > Security Settings > Analytics and Reporting Web Service Endpoints | Features and Services > Appliance Feature Configuration > SQL Server Reporting Service |
| Maintenance > Security Settings > Upload Certificate | Security and Compliance > Certificate Management |
| Maintenance > Security Settings > Generate SSL Certificate | Security and Compliance > Certificate Management |
| Maintenance > Security Settings > Export Client Certificate | Security and Compliance > Certificate Management |
| Maintenance > Security Settings > Security Protocols | Security and Compliance > Security Protocols |
| Maintenance > Network and RDP Settings > Remote Desktop Protocol | Network > RDP & Console Access |
| Maintenance > Network and RDP Settings > IP Settings | Network > IP Settings |
| Maintenance > Network and RDP Settings > Appliance SMTP Settings | Network > Email |
| Maintenance > Network and RDP Settings > BeyondInsight SMTP Settings | Network > Email |
| Maintenance > Network and RDP Settings > Proxy Settings | Network > Proxy Server |
| Maintenance > Network and RDP Settings > BITS Throttle Settings | Network > BITS |
| Maintenance > Accounts and Licensing > Evaluation Details | Software and Licensing > Product Licensing (BeyondInsight tab) |
| Maintenance > Accounts and Licensing > Product Serial Numbers | Software and Licensing > Product Licensing (BeyondInsight tab) |
| Maintenance > Accounts and Licensing > Activate Product Serial Numbers | Software and Licensing > Product Licensing (BeyondInsight tab) |
| Maintenance > Accounts and Licensing > Windows License Status | Software and Licensing > Product Licensing (Microsoft tab) |
| Maintenance > Accounts and Licensing > Activate Windows | Software and Licensing > Product Licensing (Microsoft tab) |
| Maintenance > Accounts and Licensing > SQL Server License Status | Software and Licensing > Product Licensing (Microsoft tab) |
| Maintenance > Accounts and Licensing > Microsoft Key Management Server Configuration | Software and Licensing > Product Licensing (Microsoft tab) |
| Maintenance > Accounts and Licensing > Appliance Software Versions | Software and Licensing > Software Versions |
| Maintenance > Accounts and Licensing > Change Admin Password | Security and Compliance > Software Versions |
| Maintenance > Accounts and Licensing > Configure RADIUS Authentication | Deprecated |
| Maintenance > General Settings > Date/Time Settings | Integrations > Date and Time Configuration |
| Maintenance > General Settings > NTP Server & Auto Synchronization Options | Integrations > Date and Time Configuration |
| Maintenance > General Settings > BeyondInsight License Cache | Deprecated |
| Maintenance > General Settings > Pre-Logon Banner Settings | Security and Compliance > Pre-Login Banner |
| Maintenance > General Settings > Customize System Email 'From' Address | Integrations > Email |
| Maintenance > General Settings > LCD Panel (Hardware Only) | Security and Compliance > LCD Panel (Hardware Only) |
| Maintenance > Appliance Hardening | Security and Compliance > Local Computer Policy |
| Maintenance > API Key Maintenance > API Key Maintenance | Integrations > API Key Maintenance |
| Maintenance > Database Utilities > Create a Remote BeyondInsight Database | Features and Services > Appliance Feature Configuration > BeyondInsight Database Access |
| Notifications > Appliance Notifications > View All Notifications | Notifications > View All Notifications |
| Notifications > Configure Notifications > Email Address for Current User | Profile > Change Email |
| Notifications > Configure Notifications > Email Notification Settings | Notifications > Configure Notifications |
| Notifications > Configure Notifications > Forwarding Health Events to BeyondInsight | Integrations > Health Event Forwarding |
| Settings > Default Mode / Dark Colors | Profile > Preferences > Theme |
Issues resolved:
- Resolved an issue where after an API key exchange, the appliance could not communicate.
- Resolved an issue where duplicate schedule records were created in conjunction with Cold Spare.
- Resolved an issue where disabling the option to allow incoming remote database connections for the SQL Server database was not taking affect.
- Resolved several Backup and Restore bugs.
- Resolved an issue where the Deployment & Configuration Wizard was forcing a re-run of the wizard when it timed out on the Completion page.
- Resolved an issue where restarting the BT Appliance System Info Service was causing dependent services to stop.
- Resolved an issue where testing email settings in an air-gapped environment was generating 500 Unexpected Internal error has occurred.
- Resolved an issue where applying roles was timing out when disabling multiple roles at once.
Known issues:
- Receive error when trying to change the timezone on a hardware image.
- Grid title bar in right corner on the Security Updates page doesn't hide the titles when scrolling the grid title.
- On the Appliance API Keys page, when the cursor is pointed at the center of the X button, the name of the button is not displayed, and it is not possible to delete the registration code.
- On the Backup and Restore page, the text above the Password box is too small. It is 10 pixels as opposed to the required 12 pixels.
- When resuming an incomplete deployment wizard, the machine name is populated but must be altered before proceeding.
- When an admin account is disabled, and you attempt to create the admin user in the deployment wizard, an error message is not returned to indicate the account is disabled.
- On the Appliance API Keys and Diagnostic Tools pages, the padding between the banner and white card is off for the Microsoft banner.
Notes:
- The installation of version 4.1 is dependent on BeyondInsight 23.2.
- This update is available through BT Updater or as a manual installer from the download tool.
- .NET Core 3.1.22 or later is required (available through BT Updater via Supporting Software SUPI subscription).
- .NET 6.0.13 or later is required (available through BT Updater via Supporting Software SUPI subscription).
- SUPI 3.2 is required (available through BT Updater).
- RADIUS Support within the Appliance Software (not BeyondInsight) has been removed. Users desiring RADIUS authentication to the Appliance application can enable single-signon for BeyondInsight user accounts.
- Medium Availability (a High Availability feature) has been removed. After upgrade to the 4.1 release, users with this configured automatically fail over without waiting for approval.