BeyondTrust Appliance U-Series Software 4.3.3 release notes

December 6, 2024

Requirements

• .NET 8.0.0 or later (available through BT Updater via Supporting Software SUPI subscription)
• SUPI 3.2 (available through BT Updater)

New features and enhancements

• DLL upgrades:

  • Upgraded Microsoft.Data.SqlClient

    • Replaced System.Data.SqlClient 4.8.6 with Microsoft.Data.SqlClient 3.1.7
    • Upgraded Quartz from 3.3.2 to 3.13.1
    • Removed Removed redundant Microsoft.Windows.Compatibility
    • Removed Removed redundant Microsoft.PowerShell.*

  • Updated deps.json files to eliminate false positives generated by vulnerability scanners

  • Resolved Dependabot issues

  • Fixed vulnerable packages found by XRay

  • Updated NATs server version

  • Addressed System.Drawing.Common.dll v4.5.2 vulnerability

Issues resolved

• Resolved an issue HA setup failed if backup process failed to complete within the allowed time.

Notes:

• Security Management Appliance Installer is dependent on BeyondInsight 24.1.
• Security Management Appliance package in BT Updater is dependent on BeyondInsight 24.1.
• This update is available through BT Updater or as a manual installer from the download tool.

November 19, 2024

Requirements

• BeyondTrust ECM v1.6.0+

Issues resolved

• Resolved a minor issue that could cause duplicate copies of the same credential to be returned in specific scenarios.

Notes

• This maintenance release replaces any usage of v24.1.x.
• Supports upgrades from any prior release.

BT Updater 3.3.1 release notes

November 7, 2024

Requirements

• .NET 4.7.2 or later
• IIS to be enabled on host

Issues resolved

November 5, 2024

Requirements

• We recommend a restart after this update.

New features and enhancements

• There are no new features or enhancements.

Issues resolved

• Resolved an issue where, after applying the Windows Update KB5040435 for Windows 11, RDP sessions experienced display artifacts, making the session unusable. Sessions are now usable with no artifacts.
• Resolved an issue affecting web Applications using PS Automate when using the latest Chrome and Edge web browsers where applications didn't work as expected. They are now working as expected.

Notes

• Direct upgrades to 24.2.0.1870 are supported from all previous versions.
• This release bundles version 24.2.0.1501 of the BeyondTrust Discovery Agent. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm
• .NET hosting bundle v8.0.8 is included.
• Session Monitoring Agent (pbsmd) has been updated to 24.2.45.
• Enhanced Session Monitoring Agent (pbpsmon) has been updated to 24.2.45.
• PS Automate has been updated to build 10925527552.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• The MD5 signature is: FFC61FF2E28B0B963CE227A9A54D9A50
• The SHA-1 signature is: 8E9ABB73DDF4FBE6E3CB7D55ABDFFFB31F65A41E
• The SHA-256 signature is: F9C388B0917229F551E4D4AEF3F1765CA8EAD48A688C54F92E1638C087986DFD

November 5, 2024

Requirements

• We recommend a restart after this update.

New features and enhancements

• There are no new features or enhancements.

Issues resolved

• Resolved an issue where, after applying the Windows Update KB5040435 for Windows 11, RDP sessions experienced display artifacts, making the session unusable. Sessions are now usable with no artifacts.
• Resolved an issue affecting web Applications using PS Automate when using the latest Chrome and Edge web browsers where applications didn't work as expected. They are now working as expected.

Notes

• Direct upgrades to 24.1.1.1846 are supported from all previous versions.
• This release bundles version 24.1.0.1426 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm
• .NET hosting bundle v8.0.4 is included.
• Session Monitoring Agent (pbsmd) has been updated to 24.2.45.
• Enhanced Session Monitoring Agent (pbpsmon) has been updated to 24.2.45.
• PS Automate has been updated to build 10925527552.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• The MD5 signature is: 4A6CFDAEC81689392C0D57FB7F0B99EC
• The SHA-1 signature is: 482F6B35A7E3983CE071B40DCF4BD81A01AFD3C7
• The SHA-256 signature is: B6226D6BE18BED730029B7B60A319ED5F7329B5485299EE13D68277725843ADA

November 5, 2024

Requirements

• We recommend a restart after this update.

New features and enhancements:

• There are no new features or enhancements.

Issues resolved:

• Resolved an issue where, after applying the Windows update KB5040435 for Windows 11, RDP sessions experienced display artifacts, making the session unusable. Sessions are now usable with no artifacts.
• Resolved an issue affecting web applications using PS Automate when using the latest Chrome and Edge web browsers where applications didn't work as expected. They are now working as expected.

Notes:

• Direct upgrades to 24.1.0.1835 are supported from all previous versions.
• .NET Core hosting bundle 6.0.29 is included.
• .NET hosting bundle updated 7.0.18 is included.
• Session Monitoring Agent (pbsmd) has been updated to 24.2.45.
• Enhanced Session Monitoring Agent (pbpsmon) has been updated to 24.2.45.
• PS Automate has been updated to build 10925527552.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• This release bundles version 23.2.1.1376 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: 9E56BA2BF38D7C1F167BFAC7621C2720
• The SHA-1 signature is: 0C02A523AA555D8005D4BB646E20E5E8E6B78A4F
• The SHA-256 signature is: F189FC49D091A19842917991BF2FB6C72B7A80D8E93BAEF7417D645A842BC83F

November 5, 2024

Requirements

• We recommend a restart after this update.

New features and enhancements:

• There are no new features or enhancements.

Issues resolved:

• Resolved an issue where, after applying the Windows update KB5040435 for Windows 11, RDP sessions experienced display artifacts, making the session unusable. Sessions are now usable with no artifacts.
• Resolved an issue affecting web applications using PS Automate when using the latest Chrome and Edge web browsers where applications didn't work as expected. They are now working as expected.

Notes:

• Direct upgrades to 23.3.0.1797 are supported from all previous versions.
• .NET Core hosting bundle 6.0.29 is included.
• .NET hosting bundle 7.0.18 is included.
• Session Monitoring Agent (pbsmd) has been updated to 24.2.45.
• Enhanced Session Monitoring Agent (pbpsmon) has been updated to 24.2.45.
• PS Automate has been updated to build 10925527552.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• This release bundles version 23.2.1.1375 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: 8E002FF0F38A2C3614F98E10FD57F5C5
• The SHA-1 signature is: CD2D615373D34FB5EB0529B4B0FA67C4874FEF6A
• The SHA-256 signature is: 3B9D10ED3D2D7997B4B4F5F29269E841D54085895E23EA463EF92FFCA60E74A4

October 3, 2024

Requirements

• .NET 4.7.2 or later
• IIS to be enabled on host

New features

• We've added a subscription for Active Directory Bridge.

Enhancements

• You can now install your chosen version of the Appliance Management software without performing incremental updates. Simply select the version you want to install from the Subscription Details drop-down list.
• On the Subscriptions page, the Version drop down list displays the locally-installed subscription version number.
• On the Client Subscription pages, we’ve updated the available options in the Versions drop-down:
  • Do Not Update (formerly 0.0.0): No changes are made to downstream clients.
  • `version.number`: Unlock the selected version to all downstream clients.

Issues resolved

• When you update the Endpoint Privilege Management: Web Policy Editor Bundle, BT Updater now stops the underlying services before installing.
• When you update Endpoint Privilege Management for Unix/Linux using BT Updater 3.3.0, the updater no longer creates any numbered folders and instead downloads all files directly in the C:\ProgramData\BeyondTrust\Pbsmc\Software folder.
• Some users who attempted to subscribe to AD Bridge received an incorrect error message stating they could not subscribe without first installing AD Bridge; however, the subscription was successful. That error message no longer displays erroneously.
• An issue where some correctly-updated users experienced a Warning: for BeyondInsight/Password Safe you are required to manually update to the same lock version on all BeyondTrust Updaters or it could result in a loss of service error message is resolved.
• Resolved an issue when the Appliance User Interface page was used to change the username and password, and the SALT and Encryption string displayed in the Updater log file.
• Now, upon subscription, EPM bundles auto-lock as expected.

September 26, 2023

Requirements:

Requires BeyondTrust Password Safe version 23.2.0 or later release.

New features and enhancements:

• Password Safe Terraform Provider has been removed from the Resource Kit, and is now available in the Terraform Registry.
• Signature verification files have been added to allow validation of the Ansible collection (see ).
• Updated Enhanced Session Utility.
• Updated Python API sample to support the latest changes in the BeyondInsight and Password Safe 23.2 release API.
• Updated Password Safe Cache.

ℹ️

Note

New versions of the Password Safe Cache are available for RHEL 8 and 9. There are no new versions for RHEL 7. The last supported version for RHEL 7 is 23.1.24.

Notes:

• The SHA-256 signature is: ebf3fd206d83b39a3bfa010444d33ddfd838fbfc756e17330fcc7a499eaec14c
• This release is available to download for BeyondTrust customers at https://beyondtrustcorp.service-now.com/csm.

September 26, 2023

New features and enhancements:

• .NET Core hosting bundles updated from 6.0.20 to 6.0.21.
• .NET hosting bundle updated from 7.0.9 to 7.0.10.

ℹ️

Note

A restart of the Resource Broker host may be required after this update.

Notes:

• Direct upgrades to 23.2.0.1741 are supported from all previous versions.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Privileged Access Management Agents > Resource Zones and clicking Download Installer.
• This release bundles version 23.1.3.1310 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: 52BCBA3265345F5F6BBAFE6E2B29CFEC
• The SHA-1 signature is: 18CD66CEC3E39BCFF880E1FB1B93FA11CEF06BBD
• The SHA-256 signature is: F10CEEE4957F379B1441417766424817139549BF100291BB8D62C94090D5393A