October 12, 2023

New features and enhancements:

• Redesigned the Appliance Software User Interface, including upgraded controls and Shell features, to improve usability.
• Upgraded Angular versions to 15 for the Deployment & Configuration Wizard, Web Console, and SCL.
• Added a dark mode option in the Appliance Software User Interface user preferences.
• Improved functionality for Notifications in the Appliance Software User Interface:
  • Top 10 notifications more visible in the UI with more details provided
  • Added a link to view all notifications in Notifications grid where you can manage notifications and view more details about each notification.
• Replaced the Roles Editor page with the Appliance Feature Configuration page to better reflect the functionality it provides, which is the ability to modify the features and services running on your BeyondTrust U-Series Appliance. Also, updated the design of the functionality to improve usability as follows:
  • Replaced the tile design for each role with a toggle switch for each feature.
  • Each feature contains an expandable panel that allows the same settings customization that was available in the previous Roles Editor, with dependency checking built-in, and the ability to compare your pending changes against the current configuration.
• Replaced the Diagnostics application with a Performance Counters Dashboard that is now the Home page for the Appliance Software User Interface and added the following functionality:
  • Updated performance meters and a new performance over time graph, which allows you to switch from CPU to the other built-in performance counters.
  • Added the ability to view historical data and export it to CSV format.
  • Added a graphical slider to represent the performance counter thresholds, including the optional counters.
• Added a new Service Status page where you can:
  • Enable and disable alerts for status changes in services.
  • View the status of services.
  • Stop, start, and restart services.
• Added the ability to create a remote BeyondInsight database when configuring the BeyondInsight Database Access feature.
• Added new scheduling options, new logs, and granular control over which logs get exported on Log File Export page.
• Added new appliance health events to track both successful and failed logon attempts, as well as appliance reboots.
• Improvements made to the BeyondInsight for Unix & Linux feature configuration to make it more stable.
• Relocated the configuration settings for RDP and Console Access, IP, and BITS from the deprecated Maintenance application to the new Network page.
• Relocated the Ping Command and Network Configuration features from the deprecated Diagnostics application to the new Network page.
• Relocated the Backup and Restore settings from the deprecated Maintenance application to the new Business Continuity page and added granular visibility and control over backup contents.
• Relocated the Cold Spare setup from the deprecated Roles Editor to the new Business Continuity page.
• Relocated the ability to schedule an appliance reboot from the deprecated Maintenance application to the new Business Continuity page, under Power Options.
• Relocated the configuration of High Availability from the deprecated Roles Editor to the new Business Continuity page.
• Implemented a new wizard-like design for configuring High Availability, improving the user experience.
• Relocated the following features from the deprecated Maintenance application to the new Security and Compliance page: Administrator Credentials, Certificate Management, Security Protocols, Client Connections, Local Computer Policy, Pre-Login Banner, Data Encryption Key, and LCD Panel.
• Improved appliance hardening:
  • Added security event logs for exporting and downloading.
  • Added 15 character minimum password length.
• Relocated license validation features to implement banner warnings indicating which licenses are expired.
• Updated the Deployment & Configuration Wizard to reflect new appliance application terminology.
• Enforced custom password complexity rules set within BeyondInsight when changing the BeyondInsight Admin password.
• Proxy settings and database upgrades depend upon BeyondInsight version 23.2.
• Updated the Installer by removing outdated code and checks and support for Windows 2012.

Feature Mapping

Many features were relocated and renamed in the Appliance Software User Interface. The below table provides a mapping between the features in the 4.0 release and the new features in the 4.1 release.

Issues resolved:

• Resolved an issue where after an API key exchange, the appliance could not communicate.
• Resolved an issue where duplicate schedule records were created in conjunction with Cold Spare.
• Resolved an issue where disabling the option to allow incoming remote database connections for the SQL Server database was not taking affect.
• Resolved several Backup and Restore bugs.
• Resolved an issue where the Deployment & Configuration Wizard was forcing a re-run of the wizard when it timed out on the Completion page.
• Resolved an issue where restarting the BT Appliance System Info Service was causing dependent services to stop.
• Resolved an issue where testing email settings in an air-gapped environment was generating 500 Unexpected Internal error has occurred.
• Resolved an issue where applying roles was timing out when disabling multiple roles at once.

Known issues:

• Receive error when trying to change the timezone on a hardware image.
• Grid title bar in right corner on the Security Updates page doesn't hide the titles when scrolling the grid title.
• On the Appliance API Keys page, when the cursor is pointed at the center of the X button, the name of the button is not displayed, and it is not possible to delete the registration code.
• On the Backup and Restore page, the text above the Password box is too small. It is 10 pixels as opposed to the required 12 pixels.
• When resuming an incomplete deployment wizard, the machine name is populated but must be altered before proceeding.
• When an admin account is disabled, and you attempt to create the admin user in the deployment wizard, an error message is not returned to indicate the account is disabled.
• On the Appliance API Keys and Diagnostic Tools pages, the padding between the banner and white card is off for the Microsoft banner.

Notes:

• The installation of version 4.1 is dependent on BeyondInsight 23.2.
• This update is available through BT Updater or as a manual installer from the download tool.
• .NET Core 3.1.22 or later is required (available through BT Updater via Supporting Software SUPI subscription).
• .NET 6.0.13 or later is required (available through BT Updater via Supporting Software SUPI subscription).
• SUPI 3.2 is required (available through BT Updater).
• RADIUS Support within the Appliance Software (not BeyondInsight) has been removed. Users desiring RADIUS authentication to the Appliance application can enable single-signon for BeyondInsight user accounts.
• Medium Availability (a High Availability feature) has been removed. After upgrade to the 4.1 release, users with this configured automatically fail over without waiting for approval.

October 5, 2023

New features and enhancements:

This is a maintenance release. There are no new features to note.

Notes:

• Direct upgrades to this version are supported from all previous versions.
• Customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Privileged Access Management Agents > Resource Zones and clicking Download Installer.
• This release bundles version 23.1.3.1310 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: 11E092B716525D65A9550A08AA8D5B1C
• The SHA-1 signature is: 779D6F09F0B79EC9E776E40621D736C5DF3E9555
• The SHA-256 signature is: 8BEA03B9121EC47EB5508EADD3D73EB913E9380A31137D2EEF82606FADCC3973

October 5, 2023

New features and enhancements:

This is a maintenance release. There are no new features to note.

Notes:

• Direct upgrades to this version are supported from all previous versions.
• Customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Privileged Access Management Agents > Resource Zones and clicking Download Installer.
• This release bundles version 23.1.3.1310 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: 490E1101130455EA4B6488C00C88627D
• The SHA-1 signature is: 41C0EE4B9CCEE5895F91E3E6B1222AB93D229D8D
• The SHA-256 signature is: DA4E3914D9CFF588C5529F0B33DDB65B9B622B7A2CD1001C4AEC4D3AD02CF382

August 31, 2023

New features and enhancements:

None.

Issues resolved:

• Fixed an exception which could occur when retrieving the local time and date from a Linux target.
• Fixed a bug where default directories are not properly used for the location of SSH Authorization keys.
• Fixed a bug which allowed the abort time to be extended when additional abort commands are received.
• Fixed a bug which caused aborts to take too long to take effect.
• Fixed a bug where disabled Linux user accounts were not being marked as disabled.
• Eliminated duplicate domain user and domain group commands when the initial commands fail, causing scans to hang.
• Added additional timeouts to domain user and domain group commands to prevent the scans from hanging.

Known issues:

• The installation dialogs have string substitution errors.
• Certain special characters in a MongoDB password cause the connection string to be improperly formatted and the connection fails. Workaround: For this release, avoid using special characters in the MongoDB password.

Notes:

• Direct upgrades to this version are supported from versions 20.1.0 and later.
• This release is available by download from the BeyondTrust Client Portal at https://beyondtrustcorp.service-now.com/csm.
• There is a product dependency on having the .NET 6 Hosting package installed.
• The MD5 signature is: 4f535b119f28222c713bed247f7d413e
• The SHA-1 signature is: 6bdfe8e421792a13ad870d7e579963eb01caa8b2
• The SHA256 signature is: bea0c0adee3579e998bae42b8a672e5232be6dd1e5ab91e0079bec086929e4c3

August 24, 2023

Requirements:

• This BeyondTrust Password Safe Integration for ServiceNow 23.2.1 has been certified for production release.
• Requires Password Safe 22.2 or later.

ℹ️

Note

For more information, please see Supported Platforms.

New features and enhancements:

• New custom username field - added the ability to utilize a configurable custom field for username.

Issues resolved:

• Resolved a bug which prevented dialogs from rendering in workspace views. The dialog windows now display in both standard and workspace views as was originally intended.

Notes:

• This version of the Password Safe ServiceNow integration has passed technical and marketing reviews as part of the ServiceNow certification process.
• This integration supports upgrades from any prior release.
• Published to the ServiceNow Store and listed as BeyondTrust Password Safe Integration.
• Certified against ServiceNow San Diego, Tokyo, Utah, and Vancouver releases.
• Certified for GA.
• The SHA-256 signature is: d052fb53cd2836727ab4b976bb49343d77232a0c8037073c23d157498cd6ff79

July 17, 2023

New features and enhancements:

This is a maintenance release. There are no new features to note.

Issues resolved:

• Resolved issue where UserAudits PAPI - NULL AppAudit->UserName field caused Error 500.

Known issues:

None.

Notes:

• Direct upgrades to this version are supported from all previous versions.
• This release is available for download by BeyondTrust customers from the Configuration > Resource Zones > Download Installer of their Password Safe Cloud portal.
• This release bundles version 23.1.2 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/discovery-agent/discovery-agent-23-1-2.htm.
• The MD5 signature is: AD8768299D6112139D2EFA56992AB6BE
• The SHA-1 signature is: CB7182C946FB589529D22998246142817EA621B0
• The SHA-256 signature is: 0A117DEF9ACE7F55360E2CD3710537DD7074240612E4AA29163E5BB6A57D5DCB

July 17, 2023

Requirements:

• Requires version 23.1.2.1276 or higher of the BeyondTrust Discovery Agent.

New features and enhancements:

This is a maintenance release. There are no new features to note.

Issues resolved:

• When editing Scheduled Scan Detailed Discovery Options, the UI now displays a value in the Deploy Local Scan Service dropdown, which accurately reflects the value that was originally set upon scan creation.
• When editing Scheduled Scan Discovery Options, the UI now displays a value for the Limit Accounts Returned option, which reflects the value that was originally set upon scan creation.
• Registry Monitoring events now show up on the report, and are normalized to the database.
• When customizing the options for a Detailed Discovery Scan in the Scan Wizard, no validation error occurs if entering more than 100 users in the Limit Accounts Returned option.
• Smart Rule filtering now applies correctly on the Domain Linked Accounts grid when a Smart Rule contains an asset Smart Group selection criteria filter.
• Updated the SSH Session Manual Commands screen to be consistent with prior versions.
• Logfiles are now being properly generated for the Secrets Safe service.
• The Manage Ownership screen in Secrets Safe now assigns ownership of a secret to a Team. When assigning ownership when the Team contained a large number of members, there are no longer graphical issues.
• You can now successfully check out a managed account when the access policy has Multi-Day Checkout enabled and there is a time zone difference between the client and server.
• Resolved a grid row details issue (Asset > Advanced Details > Users). The SSH Key Count field will no longer be zero if there are SSH keys that exist for that user.
• Global keystroke search from the Completed Sessions grid has been restored. Additionally, Quick Filter search has been added to the Active Sessions and Completed Sessions grid.
• A password mismatch email is no longer sent upon a test of a functional account if the managed system is unreachable.
• The PUT Addresses/{id} API no longer creates a new address, but instead updates the existing entry.
• Unnecessary Smart Rule processing log system entries are no longer written to the database when no changes are applied.
• SSH session is now successful when there is an access policy with a location restriction using an X-Forwarded-For entry.
• An access policy configured as recurring daily on weekdays only no longer permits a request to occur on a weekend day.

Known issues:

There are no new known issues in this release.

ℹ️

Note

Issues discovered after release can be found within our product Knowledge Base.

Notes:

• Direct upgrades to 23.1.1 are supported from BeyondInsight versions 21.2 or higher.
• This release is available by download for BeyondTrust customers (https://beyondtrustcorp.service-now.com/csm) and by using the BeyondTrust BT Updater.
• The MD5 signature is: f28ff31a500600ed759e63f8de1b7c93
• The SHA-1 signature is: 43aa7e88ecba534a92d25f6499681ac8d7819eaf
• The SHA-256 signature is: 6d04703fcc51805efe739bdd33c44a75681a19f1b882ed56945be006fa4ca73f

July 11, 2023

Requirements

• Requires .NET 4.7.2 or later.

New features and enhancements:

• The grid on the main page is now wider.
• Added progress indicator for loading release panel.
• Changed default release notes version display.
• Chevron now collapses the Client Subscription details card.

Issues resolved:

• Lock now always locks the correct version on the Subscription page.
• There is no longer an error in the browser dev tools when selecting release notes.
• Resolved issue in which a Javascript error displayed when selecting subscription.
• Clicking on subscriptions lock now locks the version you are selecting rather than the latest version.
• BeyondInsight Release Notes now load when release notes menu item is clicked.
• Removed the multi-select ability on the Subscriptions page because there were no multi-select options.
• Retry button for a failed install was re-added to the web UI.

Known issues:

• The clear cache pop-up confirmation continues to be displayed after the login session ends.
• For settings through API, a password can be changed to contain one character.
• For settings through API, an email address can be changed against the format rules.

Notes:

• This update is available via BT Updater.

July 6, 2023

New features and enhancements:

This is a maintenance release. There are no new features to note.

Notes:

• Direct upgrades to this version are supported from all previous versions.
• This release is available for download by BeyondTrust customers from the Configuration > Resource Zones > Download Installer of their Password Safe Cloud portal.
• This release bundles version 23.1.2 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/discovery-agent/discovery-agent-23-1-2.htm.
• The MD5 signature is: D45487D6E1FCFD686C59D009FA47C509
• The SHA-1 signature is: 536FF5BDF86BAB4DE55846DD491B67E237055C92
• The SHA-256 signature is: 9EF7A954ADEEF1D49282D6057EE54A5F06B8D22246A645145A6AE392A0152C80

June 29, 2023

New features and enhancements:

• Switch to CLI mode when authenticating to a Junos device bash prompt.
• Improved Junos device enumeration with different account levels.
• Reduced the number of times the runtime options file is read and written in the log file.
• The remote agent is disabled if an I/O error is received.
• Removed logging of some well-known, non-error exceptions.
• Handles multiple path configurations for AuthorizedKeys.

Issues resolved:

• Resolved error in AIX user enumeration where number of returned users exceeded the configured max users.
• Resolved error where domain commands were not timing out or were timing out too early.
• Resolved an exception in parsing scheduled task data.
• Resolved error retrieving the AuthorizedKeys path in default Ubuntu.

Known issues:

• The installation dialogs have string substitution errors.
• Certain special characters in a MongoDB password cause the connection string to be improperly formatted and the connection fails. Workaround: For this release, avoid using special characters in the MongoDB password.

Notes:

• Direct upgrades to this version are supported from versions 20.1.0 and later.
• This release is available by download from the BeyondTrust Client Portal at https://beyondtrustcorp.service-now.com/csm.
• There is a product dependency on having the .NET 6 Hosting package installed.
• The MD5 signature is: 4f535b119f28222c713bed247f7d413e
• The SHA-1 signature is: 6bdfe8e421792a13ad870d7e579963eb01caa8b2
• The SHA256 signature is: bea0c0adee3579e998bae42b8a672e5232be6dd1e5ab91e0079bec086929e4c3