--- title: "Segura® Platform v4.2.2" slug: "release-notes-v4-2-2" updated: 2026-08-24T20:04:19Z published: 2026-08-24T20:04:19Z canonical: "docs.senhasegura.io/release-notes-v4-2-2" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt > Use this file to discover all available pages before exploring further. # Segura® Platform v4.2.2 ## In this article - [About this release](/docs/release-notes-v4-2-2#about-this-release) - [Release highlights](/docs/release-notes-v4-2-2#release-highlights) - [Changelog](/docs/release-notes-v4-2-2#changelog) --- ## About this release On April 1, 2026, we released version 4.2.2 of Segura® Platform. The release includes 23 changes across 9 modules. - **Release date**: 2026-04-01 For information on how to update Segura® Platform, see [Update Segura®](/v4-2/docs/installation-update-senhasegura). --- ## Release highlights ### Post-Quantum Cryptography Support Version 4.2.2 introduces support for **Post-Quantum Cryptography (PQC)** in the Network Connector, ensuring long-term protection of secure communications. #### What's new - Support for post-quantum cryptographic algorithms. - A hybrid cryptography model combining: - Classical algorithms. - Post-quantum algorithms. - Secure communication channel between the platform and isolated environments. #### Customer impact This feature prepares organizations for future threats posed by quantum computing, ensuring that: - Sensitive data remains protected long-term. - Communication channels remain secure against emerging attack vectors. - Compliance requirements in regulated environments are met. It reinforces Segura's leadership in **forward-looking security innovation and cryptographic resilience**. **See the documentation**: - [About Post-Quantum Cryptography in Network Connector](/v4-2/docs/network-connector-about-post-quantum-cryptography-in-network-connector). - [How to enable Post-Quantum Cryptography in Network Connector](/v4-2/docs/network-connector-how-to-enable-post-quantum-cryptography-in-network-connector). - [Network Connector status log](/v4-2/docs/network-connector-status-log). --- ### Unified Audit Report for Applications (DSM / Elasticsearch / A2A) Segura® now introduces a **new unified audit report** designed to provide full visibility into **credential usage across applications**. This feature consolidates previously fragmented data into a **single**, **correlated view**, enabling security teams to efficiently support audit and compliance processes. #### What's new - New unified report correlating: - Applications. - Authorizations. - Secrets. - PAM and cloud credentials. #### Customer impact This capability significantly reduces the manual effort required during audits by providing a **single source of truth for credential consumption**. Organizations can now improve **audit readiness, governance, and compliance** while accelerating investigation and remediation of unauthorized or suspicious access. **See the documentation**: - [About audit export in DSM](/v4-2/docs/dsm-about-audit-export-in-dsm). - [How to perform an audit export in DSM](/v4-2/docs/dsm-how-to-perform-an-audit-export-in-dsm). --- ### CLM – GoDaddy Certificate Reissue Support Segura® now supports **certificate reissue (reissue) for GoDaddy certificates directly within CLM**, enabling more efficient certificate lifecycle management. #### What's new - Reissue of existing certificates via GoDaddy API. - Support for manual and automated reissue workflows. #### Customer impact This feature eliminates manual reissue processes in external portals, improving **automation, operational efficiency, and lifecycle control** of SSL certificates. **See the documentation**: - [About reissuing](/v4-2/docs/clm-about-reissuing). - [How to reissue GoDaddy certificates](/v4-2/docs/certificates-flow-how-to-reissue-godaddy-certificates). --- ## Changelog ### Certificate Manager #### Changed | Item | Description | | --- | --- | | **SSGR-9953** | Added GoDaddy certificate renewal functionality, available 60 days before to 30 days after expiration. **See the documentation**: - [About renewal](/v4-2/docs/clm-about-renewal). - [How to sign a request](/v4-2/docs/certificates-flow-how-to-sign-request). | | **SSGR-8339** | Added the **reissue** feature for GoDaddy certificates. Now, instead of generating a new certificate every time one expires, you can reissue GoDaddy certificates directly through **Certificate Manager**. **See the documentation**: - [About reissuing](/v4-2/docs/clm-about-reissuing). - [How to reissue GoDaddy certificates](/v4-2/docs/certificates-flow-how-to-reissue-godaddy-certificates). | --- ### DevOps Secret Manager #### Changed | Item | Description | | --- | --- | | **SSGR-3950** | Added the **Audit Export** menu in the **DSM**, allowing the generation of consolidated reports correlating applications, authorizations, secrets, and credentials (PAM, Cloud, and ephemeral). **See the documentation**: - [About audit export in DSM](/v4-2/docs/dsm-about-audit-export-in-dsm). - [How to perform an audit export in DSM](/v4-2/docs/dsm-how-to-perform-an-audit-export-in-dsm). | | **SSGR-9932** | Added support for storing key/value secrets with up to `16384` characters in **DevOps Secret Manager**. This enhancement increases the previous limit of `4096` characters and now applies to input submitted through both the interface and the API. | #### Fixed | Item | Description | | --- | --- | | **SSGR-9967** | Fixed an issue where selecting multiple secrets and triggering a bulk action (such as deactivate or activate) returned an HTTP 500 error and completed no operations. Bulk actions on secrets now complete successfully. | | **SSGR-9912** | Fixed an issue in **DevOps Secret Manager** where secrets selection and listing while creating or editing applications did not respect the user’s access policy. The interface now lists, searches, and selects only secrets within the authorized scope, and the system blocks attempts to associate out-of-scope secrets with an authorization error. | | **SSGR-9968** | Fixed an issue where special characters `<` and `>` in key/value secret fields were inconsistently encoded across the application. In the **Key/Value** edit tab, values were displayed as `&lt;` and `&gt;` respectively; in the **Details** view. API responses were also affected, returning HTML-encoded values instead of the original characters. Values are now stored and rendered consistently across all views and API responses. | | **SSGR-9965** | Fixed an issue where the API returned an empty string (`""`) instead of the value `"0"` (zero) when a key/value secret field was set to exactly `0`. The web UI correctly displayed and saved the value, only the API response was affected. | --- ### Discovery #### Fixed | Item | Description | | --- | --- | | **SSGR-8746** | Fixed an issue that prevented the automatic execution of device **Discovery** within the configured time interval. | --- ### EPM Linux #### Fixed | Item | Description | | --- | --- | | **SSGR-10060** | Fixed an issue where the EPM Linux agent installer failed on systems where the `/tmp` partition was mounted with the `noexec` option, preventing installation. The installer no longer depends on execution permissions in `/tmp`. | --- ### EPM Windows #### Fixed | Item | Description | | --- | --- | | **SSGR-9693** | Fixed an issue in the **EPM** installation that displayed incorrect or untranslated texts in the installer. | --- ### Framework #### Fixed | Item | Description | | --- | --- | | **SSGR-9919** | Fixed an issue in the **Settings > System parameters > Global > LDAP / Active Directory** screen where searching for a device in the **Domain settings** section did not filter the list of results correctly. | | **SSGR-8461** | Fixed an issue in the general search bar on **Segura® Platform**, which was returning credentials and devices regardless of their status (enabled or disabled). | | **SSGR-9881** | Fixed an issue in **PAM Core** that prevented the display of the region (geolocation) information in the user login history. | --- ### Network Connector #### Added | Item | Description | | --- | --- | | **SSGR-8578** | Introduced support for Post-Quantum Cryptography (PQC) to protect all data communications between the connector and the platform against future threats from quantum computing. **See the documentation**: - [About Post-Quantum Cryptography in Network Connector](/v4-2/docs/network-connector-about-post-quantum-cryptography-in-network-connector). - [How to enable Post-Quantum Cryptography in Network Connector](/v4-2/docs/network-connector-how-to-enable-post-quantum-cryptography-in-network-connector). - [Network Connector status log](/v4-2/docs/network-connector-status-log). | --- ### PAM Core #### Changed | Item | Description | | --- | --- | | **SSGR-7876** | Added support for generating personal temporary tokens for authentication in proxy sessions. With this enhancement, users authenticated through providers such as AD, SAML, or OpenID can generate a temporary token and use it as a password to access **Terminal Proxy**, **RDP Proxy**, and **Database Proxy** without exposing local credentials in native clients. **See the documentation**: - [About proxy access with temporary tokens](/v4-2/docs/pam-sessionmanagement-about-proxy-access-with-temporary-tokens). - [How to generate a temporary token for proxy access](/v4-2/docs/pam-sessionmanagement-how-to-generate-a-temporary-token-for-proxy-access). | #### Fixed | Item | Description | | --- | --- | | **SSGR-10046** | Fixed an issue in **PAM Core** where the `\` character was not recognized when saving automation fields for logins via **Web Proxy**, causing execution failures. | | **SSGR-7530** | Added support in the **RDP Proxy** to automatically apply the user workstation scaling factor to the remote session. | | **SSGR-9888** | Fixed an issue in **Active Directory** group synchronization where the **Department** field for users was set only during creation and was not updated in subsequent synchronizations. | | **SSGR-9905** | Fixed inconsistencies in last activity dates on **Security Panel** dashboard. | | **SSGR-9971** | Fixed an issue on the **PAM Core > Home > Last used credentials** panel where the device name associated with the credential was not displayed after changing its connection address. | | **SSGR-10026** | Fixed an issue on the **PAM Core > Credentials > All credentials** screen, which caused infinite loading when trying to bulk edit multiple credentials. | --- ### Proxy #### Fixed | Item | Description | | --- | --- | | **SSGR-8497** | Fixed the behavior of the **Session text log** report for SSH sessions via Web Proxy. | ---