December 5, 2023

New features and enhancements:

• This is a maintenance release. There are no new features or enhancements.

Issues resolved:

• None

Notes:

• Direct upgrades to 23.2.0.1748 are supported from all previous versions.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• This release bundles version 23.2.0.1370 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: F865DD9B53DCEC2497284FF121ED18A6
• The SHA-1 signature is: FFEE85DB274022ACFB61DBAF3615EE4E810288C7
• The SHA-256 signature is: 871F4B5FBE91142AE83EB7587CC50038BFA57AF35C37EB96F5945E96D2A294E1

November 28, 2023

Requirements:

• There is a product dependency on having the .NET 6 Hosting package installed.

New features and enhancements:

• Added support for SonicOS devices.
• Added support for F5/BigIP devices.
• Added support for Fortigate Virtual Document Object Models (VDOMs).
• Added an additional method for obtaining Fortigate admin users.
• Added logic to retrieve the BTExecService log files from the remote targets before shutting down the connection.
• Added a runtime option to use the BeyondInsight provided name for the asset name.
• Added a runtime option to return the NetBIOS domain name in the asset record.

Issues resolved:

• Resolved an issue with domain group recursion levels which increased the scan times.
• Added more timeouts to scan logic to reduce the possibility of a hanging scan.
• Added more abort checks to help speed up the abort detection and processing.
• Added logic to flush the SSH buffers when a command fails.

Known issues:

• The installation dialogs have string substitutions errors.

Notes:

• Direct upgrades to this version are supported from versions 20.1.0 and later releases.
• This release is available by download from the BeyondTrust Client Portal at https://www.beyondtrust.com/support/.
• The MD5 signature is: 14bb01b82ee5a3e7aeff342f7b71e066
• The SHA-1 signature is: de36e637b9d44b796f7eb566052326cfa625af85
• The SHA256 signature is: bfede01ab759fb52dbcb2a956bd6b83bfd350ffe476ec3e9d259719c20f8b376

November 9, 2023

Requirements:

• BeyondTrust ECM v1.6.0+

New features and enhancements:

• Added support for the retrieval of credentials for Web endpoints for External Jump Items list.
• Added support for the retrieval of directory accounts that are linked to cloud managed systems in Password Safe for Web Jump Items.

Issues resolved:

• Resolved an issue in which the plugin was attempting to process the same CredentialsUsed request multiple times at session end, which caused an unexpected value to return and stopped the ECM service.
• Resolved an issue in which the plugin was making duplicate authentication attempts to Password Safe for the same request and caused an authentication failure for credential injection.

Notes:

• Certified for GA
• Supports upgrades from any prior release

October 26, 2023

New features and enhancements:

• None

Issues resolved:

• Resolved an issue where management (Test and Change) of Microsoft SQL Server credentials - both Functional and Managed Accounts - was failing with an error.

Notes:

• Direct upgrades to 23.2.0.1744 are supported from all previous versions.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Privileged Access Management Agents > Resource Zones and clicking Download Installer.
• This release bundles version 23.1.3.1310 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: E316B1CDF69C03D1B542F632CC3DA731
• The SHA-1 signature is: 1C84C60E4DF05FD5C0C9F02650C9D56769BDB4BD
• The SHA-256 signature is: A3244D63179F74EDF6FB1AA46044E715E950145BB15202EFF9B72A16D79DB23B

October 17, 2023

Requirements

Requires BeyondTrust Password Safe version 23.2.0 or later release.

ℹ️

Note

For more information, please see at https://www.beyondtrust.com/docs/beyondinsight-password-safe/ps/supported-platforms/index.htm.

New features and enhancements:

This is a maintenance release. There are no new features to note.

Issues resolved:

• Resolved an issue where autofill of username and/or password was not working on various websites. Improvements were made to determine the appropriate fields for autofill for these sites. Now autofill works as expected.
• Resolved an issue where if a user had thousands of secrets, the icons for autofill took some time to appear on the website where they were required. Changes were made to improve the performance of initial extension load to show the icons in a more timely manner, regardless of the number of secrets. Now there is no delay in showing the icons even if the user has a large number of secrets.
• Resolved an issue where there was not a 1:1 relationship of secret retrieval to user audits. Changes were made to improve auditing of credential data retrieval, and now there is a 1:1 relationship of secret retrieval to user audits.
• Resolved an issue where users searching within a large number of secrets could take some time, but the user did not see any indication in the user interface that a search was taking place. Visual representation was added to the search action taking place so that now the user has feedback about it.
• Resolved an issue where search input was causing problems in the user interface while credential synchronization was occurring. Previously, the search input remained populated after a credential sync, even though no search was taking place at that time. The search input is now cleared after synchronizing credentials to more accurately reflect the current status of the user’s searching activity.
• Resolved an issue where session expiration sometimes happened unexpectedly when the user interacted with the extension popup. Improved management of the session lifespan so that now the session is routinely validated and quietly ended when appropriate.
• Minor user interface updates were made as follows:
  • Improved placement of inline menu trigger in form elements, which resolved multiple issues where the B icon could appear in the wrong place.
  • Ensured inline menu always appears over the top of page contents when opened. This resolved issues where form elements appeared inside containers whose overflow properties prevented the inline menu from being seen/used.
  • Updated the user experience and formatting of the browser extension options user interface to more closely resemble the Password Safe options user interface.

Known issues:

There are no known issues in this release.

ℹ️

Note

Issues discovered after release can be found within our product Knowledge Base.

Notes:

• Workforce Passwords is an add-on product which leverages the power of BeyondTrust Password Safe 23.2 or later release.
• This release is available in the Chrome Web Store and the (https://microsoftedge.microsoft.com/addons/Microsoft-Edge-Extensions-Home).

October 12, 2023

New features and enhancements:

• Redesigned the Appliance Software User Interface, including upgraded controls and Shell features, to improve usability.
• Upgraded Angular versions to 15 for the Deployment & Configuration Wizard, Web Console, and SCL.
• Added a dark mode option in the Appliance Software User Interface user preferences.
• Improved functionality for Notifications in the Appliance Software User Interface:
  • Top 10 notifications more visible in the UI with more details provided
  • Added a link to view all notifications in Notifications grid where you can manage notifications and view more details about each notification.
• Replaced the Roles Editor page with the Appliance Feature Configuration page to better reflect the functionality it provides, which is the ability to modify the features and services running on your BeyondTrust U-Series Appliance. Also, updated the design of the functionality to improve usability as follows:
  • Replaced the tile design for each role with a toggle switch for each feature.
  • Each feature contains an expandable panel that allows the same settings customization that was available in the previous Roles Editor, with dependency checking built-in, and the ability to compare your pending changes against the current configuration.
• Replaced the Diagnostics application with a Performance Counters Dashboard that is now the Home page for the Appliance Software User Interface and added the following functionality:
  • Updated performance meters and a new performance over time graph, which allows you to switch from CPU to the other built-in performance counters.
  • Added the ability to view historical data and export it to CSV format.
  • Added a graphical slider to represent the performance counter thresholds, including the optional counters.
• Added a new Service Status page where you can:
  • Enable and disable alerts for status changes in services.
  • View the status of services.
  • Stop, start, and restart services.
• Added the ability to create a remote BeyondInsight database when configuring the BeyondInsight Database Access feature.
• Added new scheduling options, new logs, and granular control over which logs get exported on Log File Export page.
• Added new appliance health events to track both successful and failed logon attempts, as well as appliance reboots.
• Improvements made to the BeyondInsight for Unix & Linux feature configuration to make it more stable.
• Relocated the configuration settings for RDP and Console Access, IP, and BITS from the deprecated Maintenance application to the new Network page.
• Relocated the Ping Command and Network Configuration features from the deprecated Diagnostics application to the new Network page.
• Relocated the Backup and Restore settings from the deprecated Maintenance application to the new Business Continuity page and added granular visibility and control over backup contents.
• Relocated the Cold Spare setup from the deprecated Roles Editor to the new Business Continuity page.
• Relocated the ability to schedule an appliance reboot from the deprecated Maintenance application to the new Business Continuity page, under Power Options.
• Relocated the configuration of High Availability from the deprecated Roles Editor to the new Business Continuity page.
• Implemented a new wizard-like design for configuring High Availability, improving the user experience.
• Relocated the following features from the deprecated Maintenance application to the new Security and Compliance page: Administrator Credentials, Certificate Management, Security Protocols, Client Connections, Local Computer Policy, Pre-Login Banner, Data Encryption Key, and LCD Panel.
• Improved appliance hardening:
  • Added security event logs for exporting and downloading.
  • Added 15 character minimum password length.
• Relocated license validation features to implement banner warnings indicating which licenses are expired.
• Updated the Deployment & Configuration Wizard to reflect new appliance application terminology.
• Enforced custom password complexity rules set within BeyondInsight when changing the BeyondInsight Admin password.
• Proxy settings and database upgrades depend upon BeyondInsight version 23.2.
• Updated the Installer by removing outdated code and checks and support for Windows 2012.

Feature Mapping

Many features were relocated and renamed in the Appliance Software User Interface. The below table provides a mapping between the features in the 4.0 release and the new features in the 4.1 release.

Issues resolved:

• Resolved an issue where after an API key exchange, the appliance could not communicate.
• Resolved an issue where duplicate schedule records were created in conjunction with Cold Spare.
• Resolved an issue where disabling the option to allow incoming remote database connections for the SQL Server database was not taking affect.
• Resolved several Backup and Restore bugs.
• Resolved an issue where the Deployment & Configuration Wizard was forcing a re-run of the wizard when it timed out on the Completion page.
• Resolved an issue where restarting the BT Appliance System Info Service was causing dependent services to stop.
• Resolved an issue where testing email settings in an air-gapped environment was generating 500 Unexpected Internal error has occurred.
• Resolved an issue where applying roles was timing out when disabling multiple roles at once.

Known issues:

• Receive error when trying to change the timezone on a hardware image.
• Grid title bar in right corner on the Security Updates page doesn't hide the titles when scrolling the grid title.
• On the Appliance API Keys page, when the cursor is pointed at the center of the X button, the name of the button is not displayed, and it is not possible to delete the registration code.
• On the Backup and Restore page, the text above the Password box is too small. It is 10 pixels as opposed to the required 12 pixels.
• When resuming an incomplete deployment wizard, the machine name is populated but must be altered before proceeding.
• When an admin account is disabled, and you attempt to create the admin user in the deployment wizard, an error message is not returned to indicate the account is disabled.
• On the Appliance API Keys and Diagnostic Tools pages, the padding between the banner and white card is off for the Microsoft banner.

Notes:

• The installation of version 4.1 is dependent on BeyondInsight 23.2.
• This update is available through BT Updater or as a manual installer from the download tool.
• .NET Core 3.1.22 or later is required (available through BT Updater via Supporting Software SUPI subscription).
• .NET 6.0.13 or later is required (available through BT Updater via Supporting Software SUPI subscription).
• SUPI 3.2 is required (available through BT Updater).
• RADIUS Support within the Appliance Software (not BeyondInsight) has been removed. Users desiring RADIUS authentication to the Appliance application can enable single-signon for BeyondInsight user accounts.
• Medium Availability (a High Availability feature) has been removed. After upgrade to the 4.1 release, users with this configured automatically fail over without waiting for approval.

October 5, 2023

New features and enhancements:

This is a maintenance release. There are no new features to note.

Notes:

• Direct upgrades to this version are supported from all previous versions.
• Customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Privileged Access Management Agents > Resource Zones and clicking Download Installer.
• This release bundles version 23.1.3.1310 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: 11E092B716525D65A9550A08AA8D5B1C
• The SHA-1 signature is: 779D6F09F0B79EC9E776E40621D736C5DF3E9555
• The SHA-256 signature is: 8BEA03B9121EC47EB5508EADD3D73EB913E9380A31137D2EEF82606FADCC3973

October 5, 2023

New features and enhancements:

This is a maintenance release. There are no new features to note.

Notes:

• Direct upgrades to this version are supported from all previous versions.
• Customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Privileged Access Management Agents > Resource Zones and clicking Download Installer.
• This release bundles version 23.1.3.1310 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: 490E1101130455EA4B6488C00C88627D
• The SHA-1 signature is: 41C0EE4B9CCEE5895F91E3E6B1222AB93D229D8D
• The SHA-256 signature is: DA4E3914D9CFF588C5529F0B33DDB65B9B622B7A2CD1001C4AEC4D3AD02CF382

August 31, 2023

New features and enhancements:

None.

Issues resolved:

• Fixed an exception which could occur when retrieving the local time and date from a Linux target.
• Fixed a bug where default directories are not properly used for the location of SSH Authorization keys.
• Fixed a bug which allowed the abort time to be extended when additional abort commands are received.
• Fixed a bug which caused aborts to take too long to take effect.
• Fixed a bug where disabled Linux user accounts were not being marked as disabled.
• Eliminated duplicate domain user and domain group commands when the initial commands fail, causing scans to hang.
• Added additional timeouts to domain user and domain group commands to prevent the scans from hanging.

Known issues:

• The installation dialogs have string substitution errors.
• Certain special characters in a MongoDB password cause the connection string to be improperly formatted and the connection fails. Workaround: For this release, avoid using special characters in the MongoDB password.

Notes:

• Direct upgrades to this version are supported from versions 20.1.0 and later.
• This release is available by download from the BeyondTrust Client Portal at https://beyondtrustcorp.service-now.com/csm.
• There is a product dependency on having the .NET 6 Hosting package installed.
• The MD5 signature is: 4f535b119f28222c713bed247f7d413e
• The SHA-1 signature is: 6bdfe8e421792a13ad870d7e579963eb01caa8b2
• The SHA256 signature is: bea0c0adee3579e998bae42b8a672e5232be6dd1e5ab91e0079bec086929e4c3

August 24, 2023

Requirements:

• This BeyondTrust Password Safe Integration for ServiceNow 23.2.1 has been certified for production release.
• Requires Password Safe 22.2 or later.

ℹ️

Note

For more information, please see Supported Platforms.

New features and enhancements:

• New custom username field - added the ability to utilize a configurable custom field for username.

Issues resolved:

• Resolved a bug which prevented dialogs from rendering in workspace views. The dialog windows now display in both standard and workspace views as was originally intended.

Notes:

• This version of the Password Safe ServiceNow integration has passed technical and marketing reviews as part of the ServiceNow certification process.
• This integration supports upgrades from any prior release.
• Published to the ServiceNow Store and listed as BeyondTrust Password Safe Integration.
• Certified against ServiceNow San Diego, Tokyo, Utah, and Vancouver releases.
• Certified for GA.
• The SHA-256 signature is: d052fb53cd2836727ab4b976bb49343d77232a0c8037073c23d157498cd6ff79