U-Series Appliance 4.4 Release Notes

January 27, 2025

Requirements

.NET 8.0.0 or later (available through BT Updater via Supporting Software SUPI subscription)
SUPI 3.3 (available through BT Updater)

Before proceeding with the installation, we strongly recommend a system reboot as certain system dependencies may need to be reset before applying this update.

New features and enhancements

Added IPv6 support

The 4.4 image requires firewall rules to add IPv6 to the local policy.
The Active side’s address is now registered on the passive side during the “initial set up steps”.
IPv6 support is now live in the U-Series Appliance, enabling future software development for Password Safe. This update ensures seamless compatibility with both IPv4 and IPv6 environments, including individual or hybrid setups. Other products must also support IPv6 before it can be fully utilized.
The High Availability page allows the user to select an IPv6 address from the list on the partner initialization page.

Improved password creation and validation

Local Policy - Password minimum length is 15 char, unless using the BI Password policy and it is less than 15.
Local Policy - Password minimum length is 16, unless using the BI Password policy.
Password Policy - BI Admin API returns all required information.

Deployment API v2

Customers and partners can now use new AutomaticDeplopyment endpoints to configure IPSettings, both IPv4 and IPv6.
Using the quartz schedule options for the backup service, the api model is maintained for backward compatibility. V2 includes the proper field structure for the backup schedules.

SUPI engine

Enhancements were made to the SUPI engine to support modernization changes to .Net updates. This change extends the SUPI engine to manage third party dependencies installed on the Appliance. Frameworks will be modified in future monthly security updates.

Appliance software now works without NT AUTHORITY/SYSTEM having SQL sysadmin privileges.

Issues resolved

Issues resolved where packages that would be skipped were kept until packages are processed. Superseded packages are now removed when a new package is received which will provide more accurate space and time requirements.
Resolved an issue where the NEXT button on the IPSettings ConfigWizard step only respected changes to selected adaptors. The NEXT button now respects changes to multiple adaptors.
Resolved an issue where the password for beyondtrust_user met complexity rules but was not accepted.
Resolved an issue where SQL Server Database Password could be updated from API without any restrictions and rules.

Notes:

Security Management Appliance Installer is dependent on BeyondInsight 24.1.
Security Management Appliance package in BT Updater is dependent on BeyondInsight 24.1.
This update is available through BT Updater or as a manual installer from the download tool.