In this article
About this release
On July 20, 2026, we released version 4.2.10 of Segura® Platform. This release includes 22 changes across 9 modules, focusing primarily on fixes (13), alongside 4 translation fixes, 3 changes, and 2 additions. EPM received the highest number of changes, with 6 items.
- Release date: 2026-07-22
- Patch: segura | v4.2.10-1
For information on how to update Segura® Platform, see Update Segura®.
Release highlights
Segura® Platform 4.2.10 introduces enhancements that improve password rotation compatibility across modern enterprise environments while expanding automation capabilities for web-based applications.
This release focuses on strengthening Active Directory integrations and increasing the flexibility of password rotation workflows, enabling organizations to automate credential management across a broader range of enterprise systems.
Kerberos Authentication Support for the LDAPS Executor
Version 4.2.10 introduces support for Kerberos authentication in the LDAPS executor, enabling automated password rotation in Active Directory environments where NTLM authentication has been disabled or restricted.
This enhancement expands compatibility with enterprise environments adopting Microsoft's recommended authentication model while preserving support for existing LDAPS configurations.
What's new
- Kerberos authentication support for LDAPS password rotation
- Authentication method configurable directly in the credential
- Execution logs identify the authentication method used
Customer Impact
Organizations can now automate password rotation in Active Directory environments that require Kerberos authentication without modifying existing operational workflows.
This enhancement improves compatibility with modern Windows security policies, supports organizations transitioning away from NTLM, and enables broader adoption of automated credential rotation in regulated and enterprise environments.
More information in:
1. How to change a credential password via LDAP with Kerberos authentication.
2. Credentials registration.
ActionChains Simplifies Selenium Automation Templates
Version 4.2.10 enhances the automation experience using Selenium.
What's new
We've added the ActionChains library to the executions module, which is native to Selenium. Now, when selecting Selenium as the template's technology, you have direct access to this feature to simulate advanced interactions.
This improvement expands the range of web applications that can be automated, eliminating the need for manual modifications to the platform after updates.
Why this matters
Some web applications have interfaces that don't allow direct element location via traditional selectors (such as By.ID or By.XPATH). Common cases include forms inside iframes, modal pop-ups, and screens that require navigation via keyboard combinations (TAB, ENTER).
With the library available natively, creating templates for automation in more complex web applications becomes simpler, more stable across versions, and requires no intervention outside the platform.
What changes
- Selenium templates now support, by default, chained action sequences — such as keyboard combinations, interaction with iframes, and navigation via shortcut keys.
- Existing templates continue working without any behavior change.
See the documentation: Web environments executors.
Changelog
API
Fixed
| Item | Description |
|---|---|
| SSGR-11140 | Removed the Access Policies menu (A2A > Access Control > Access Policies), which was no longer used by the A2A module or the application. |
Certificate Manager
Fixed
| Item | Description |
|---|---|
| SSGR-11237 | Fixed an issue where the Reissue certificate button was not displayed for certificates imported from GoDaddy, blocking the reissue flow. |
EPM
Fixed
| Item | Description |
|---|---|
| SSGR-10351 | Fixed a translation error of the string "General" in the Policies > Windows > Commands report. The string is now displayed correctly. |
| SSGR-10368 | Fixed a translation error of the string "General" in the Policies > Windows Addons > Directory and File Control report. The string is now displayed correctly. |
| SSGR-10384 | Fixed a translation error of the string "General" in the Policies > Windows Addons > Directory and File Scan report. The string is now displayed correctly. |
| SSGR-10397 | Fixed a translation error of the string "General" in the Policies > Windows Addons > System Registry Control report. The string is now displayed correctly. |
| SSGR-11332 | Fixed the confirmation messages when activating or deactivating a record in the Devices and Installers reports. The messages now follow the product's terminology. |
| SSGR-11348 | Fixed an issue in the System Registry Control, Devices, and Users reports where disabled records were not being correctly flagged. |
EPM macOS
Fixed
| Item | Description |
|---|---|
| SSGR-11085 | Fixed an issue in the Authorization Rights > Criteria and Rules > Signature field that prevented saving the authorization right. The field now has a bigger character limit, avoiding any save errors. |
EPM Windows
Fixed
| Item | Description |
|---|---|
| SSGR-11366 | Fixed an invalid key error during malware analysis. The analysis now executes correctly. |
| SSGR-11402 | Fixed an issue when performing web automations in Google Chrome and Mozilla Firefox. Automations now work correctly in both browsers. |
Executions
Added
| Item | Description |
|---|---|
| SSGR-10572 | Added support to the ActionsChains class in the Selenium executor. Now, by creating execution templates through Selenium you can use this class. See the documentation: Web environments executors. |
Changed
| Item | Description |
|---|---|
| SSGR-4890 | Improved the LDAP executor to support Kerberos authentication for password changes over LDAPS, eliminating dependency on NTLM. See the documentation: - How to change a credential password via LDAP with Kerberos authentication. - Credentials registration. |
Fixed
| Item | Description |
|---|---|
| SSGR-11304 | Fixed an issue where automatic credential rotation for SSH keys created in a different product version would fail. Now, rotations succeed regardless of the version in which the credential was created. |
PAM Core
Fixed
| Item | Description |
|---|---|
| SSGR-7645 | Fixed an issue where the playback video for long-duration recorded sessions failed to generate, leaving it unavailable for download. |
| SSGR-10803 | Fixed the HOSTNAME tag in domain credentials returning the Active Directory server's hostname instead of the selected device's hostname during JIT sessions. |
| SSGR-11257 | Fixed DB Proxy Oracle sessions failing with a "No cert defined for this credential" error in SaaS environments. |
Platform Settings
Added
| Item | Description |
|---|---|
| SSGR-10559 | Added configurable ITSM ticket validation rules to access policies, replacing the previous fixed ticket-status check with granular, per-policy criteria for ServiceNow tickets submitted as access justification. See the documentation: ITSM ticket validation settings. |
Changed
| Item | Description |
|---|---|
| SSGR-10071 | Added background monitoring of the connection between the browser and the server, with a health indicator in the header that gives users real-time visibility into their connection quality. See the documentation: About the connection status indicator. |
Fixed
| Item | Description |
|---|---|
| SSGR-11410 | Fixed an issue where ITSM break-glass fallback access was always denied, even when the access group was configured to allow emergency access. |
Proxy
Changed
| Item | Description |
|---|---|
| SSGR-10772 | Improved the RDP and Terminal proxy experience with an on-screen message shown while waiting for Duo Push approval, guiding the user to approve the notification on their device. |
Fixed
| Item | Description |
|---|---|
| SSGR-11155 | Fixed an issue where guacd processes would get stuck consuming 100% CPU. |