Contents x
    v4.0 Changelog
    • 14 minutes to read
    • Print
    • Dark
      Light
    • PDF
    Contents

    v4.0 Changelog

    • 14 minutes to read
    • Print
    • Dark
      Light
    • PDF
    Article summary

    Release date: TBD

    Check below the new features, improvements, and errors fixed in this version of senhasegura.

    💡 New UI Changes in Version 4.0

    Version 4.0 brings a complete redesign of the entire software interface, not limited to just a single module or product. We have improved navigation, updated visual elements, and optimized layouts to enhance usability and provide a more intuitive experience throughout the platform.

    PAM Core

    Bug fixes

    ItemDescription
    SSGR-3095Fixed a bug that occurred when users attempted to access SSH key history within the PAM Core module.
    SSGR-5162Fixed an issue with spreadsheet imports in Portuguese where the "Ativo*" field was ignored, causing all users to be marked as inactive despite being set to "Sim."

    Product Updates

    ItemDescription
    SSGR-2912The Device registration workflow has been redesigned for improved usability and efficiency.
    SSGR-5805Added the display of TOTP Token information on the Credential View screen. This field will only be shown if the credential has a registered Secret Key; otherwise, it will remain hidden.

    PAM Core - Sessions

    Product Updates

    ItemDescription
    SSGR-1963The error has been fixed where, when searching for users, the system user data appeared in the "Users by Group" report.
    SSGR-2764The fields on the System Parameters screen have been reorganized, now arranged according to the type of session to be configured.
    SSGR-121Fields have been added to the Exceptional Access report, providing more information for the administrator.
    SSGR-4189The options "Authentication via app" and "Authentication via web" have been removed from the "Type" field when creating a RemoteApp.

    PAM - Settings

    Bug fixes

    ItemDescription
    SSGR-3116Fixed the Content-Type returned by the SCIM API during integration with Microsoft. The API now correctly responds with 'application/scim+json' when requested.
    SSGR-3702Fixed an inconsistency in the IDs returned by the SCIM API. IDs now correctly match those used in API operations, eliminating user reference errors and ensuring greater reliability in SCIM integrations.

    Translation Fixes

    Item IDDescription
    SSGR-1561Fixed a localization issue for users with French language preference. Information messages are now correctly displayed when clicking on information icons.
    SSGR-1561Adjusted the information message layout in the Domum access group.
    SSGR-3790The information string in Settings > Security policies and network > ITSM > Add > GLPi ITSM has been properly localized according to the user's chosen language.

    Orbit Server Manager

    User Behavior

    Product Updates

    ItemDescription
    SSGR-1813Screen changes made to the User Behavior module: The Session settings and Password view settings sections have been turned into menus and are now located under User Behavior > Management. The Continuous identification section has been removed from the User Behavior module and is now located under Settings > Security and network policies > Authentication security.
    SSGR-4951Fixed the colors of the lines and bars in the Sessions and Views graphs in User Behavior > Dashboard > Behavior analysis to reflect the senhasegura visual identity.

    A2A

    Bug fixes

    ItemDescription
    SSGR-4315Fixed the issue that caused a "Database Error" when attempting to save an application with an empty "Amazon AWS ARN".

    Discovery

    Bug fixes

    ItemDescription
    SSGR-3609The error in the Blocked field of the Discovery credentials report has been fixed, where it was not correctly reflecting the actual value of the field.
    SSGR-4988Fixed the issue where AWS type certificates were not being listed in the registration.
    SSGR-5001Corrected the typing error when saving an edited record.

    EPM Windows

    Bug fixes

    ItemDescription
    EPM-22Fixed: Workflow with emergency access was not functioning, preventing new requests or emergency access after expiration. Now allows new requests and emergency access.
    EPM-94Fixed: Exception occurred when closing the elevation workflow screen after access expiration. Implemented clear notifications for expired access time.
    SSGR-344Fixed: Applications like Speech Recognition and Quick Assist are now elevated correctly without errors.
    SSGR-478Improved: Normalized user token group and privilege elevation to prevent access errors in certain applications.
    SSGR-1594Fixed: Applications in denylist paths are correctly blocked from execution despite temporary paths.
    SSGR-1623Fixed: Resolved impersonation error with AD elevation by retrieving the start directory from the service.
    SSGR-2141Fixed: Corrected misleading activation messages when entering invalid data.
    SSGR-2324Fixed: Resolved issue where Malware Analysis with API Token did not generate events.
    SSGR-2362Fixed: Corrected approval flow to ensure policy precedence follows the hierarchy of User > Workstation > General, preventing general settings from overriding device-specific policies.
    SSGR-2373Fixed: SSH sessions now function correctly with EPM Windows 3.31.0.3 and EPM Windows Agent 3.31.1-7.
    SSGR-2374Fixed: RDP sessions now work properly under the same client and server configuration.
    SSGR-2383Fixed: The installer now generates and updates version numbers correctly, starting from 3.31.0.4.
    SSGR-2439Fixed: Application elevation in Windows Server 2016 functions correctly under version 3.28 configurations.
    SSGR-2460Fixed: Application type automations are now executed without generating errors.
    SSGR-2462Fixed: Directory and file scan configurations now show file creation and deletion actions.
    SSGR-2463Fixed: Network block access now functions in all browsers, including Edge, Chrome, and Firefox.
    SSGR-2539Fixed: Session recording errors have been resolved with updated parameters and list access settings.
    SSGR-2561Fixed: Client interface issues resolved, maintaining application availability and MFA token insertions without errors.
    SSGR-2563Fixed: Adjustments made for UAC and credential storage rules impacting offline mode.
    SSGR-2580Fixed: Automatic updates now function correctly, allowing seamless client version installations.
    SSGR-2581Fixed: Web automations are now executed with the latest Chrome version, resolving incompatibility issues.
    SSGR-2595Fixed: DLL errors during "runas" operations resolved by refining elevation flow and error logging.
    SSGR-2601Fixed: Issues with web automation execution resolved; Chrome driver updated to 121.0.6167.85.
    SSGR-2689Fixed: Addressed errors and privileges issues preventing application automation execution.
    SSGR-2759Fixed: MFA for login now operates correctly, prompting for authentication as expected.
    SSGR-2801Fixed: Errors with token and IP input during client setup have been resolved, allowing full functionality.
    SSGR-2861Fixed: Error (1332) in impersonated user application elevations corrected, ensuring credential resolution.
    SSGR-2897Fixed: Workflow approval errors during application elevation resolved, ensuring valid workflow handling.
    SSGR-2922Fixed: Resolved domain user issues with EPM Windows.
    SSGR-2931Fixed: Provided a clear message when accessing Client from an inactivated device.
    SSGR-2981Fixed: Resolved privilege elevation issues within specific directory settings.
    SSGR-2994Fixed: Corrected event report errors, ensuring complete data packets before server submissions.
    SSGR-3091Fixed: Unhandled exceptions in service logs resolved to prevent service termination.
    SSGR-3094Fixed: Access emergency option now correctly displayed under configured application approval conditions.
    SSGR-3100Fixed: Remote App automations are now executed without initialization errors.
    SSGR-3114Fixed: Justification submission for applications functions correctly, preventing server response errors.
    SSGR-3261Fixed: Elevation and justification processes are now complete successfully, addressing prior failures.
    SSGR-3270Fixed: Addressed intermittent client freezing issues, ensuring responsive operation.
    SSGR-3320Fixed: Occasional "Unexpected Error" during elevation with justification and governance ID corrected.
    SSGR-3361Fixed: Resolved "Error on process operation" preventing application elevation.
    SSGR-3391Fixed: Resolved "Object reference" errors during "run as" operations under specific conditions.
    SSGR-3393Fixed: Database error during segregated parameter saving now corrected.
    SSGR-3918Fixed: Resolved browser-related automation error occurring on the first execution with the new client version.
    SSGR-4225Fixed: Resolved a 500 error in the application approval flow that occurred whenever an approval request was sent to the server, ensuring smoother request processing and response handling.
    SSGR-4229Fixed: Addressed Recorder issues causing indefinite loading and client alerts, specifically for ONS.
    SSGR-4325Fixed: Addressed blue screen errors during mass installation by refining installer integration on Windows.
    EPM-154Fixed: Typographical error in remote session error message. Corrected to "The secret of this credential is not available right now."

    Product Updates

    ItemDescription
    EPM-194Improved: Added compatibility of EPM Windows Automation module with latest Chromium version to support new Chrome updates.
    SSGR-373Improved: Added MFA parameter for application elevation with options for OTP and Smart Card authentication.
    SSGR-972Improved: Added "Client" filter in Events report to specify platform reports.
    SSGR-3135Improved: Enhanced approval workflow for viewing/copying credential passwords, maintaining expected functionality.

    New Feature

    ItemDescription
    SSGR-1525Improved: Enabled policy application based on users, OUs, and security groups, increasing configuration flexibility.

    Security

    ItemDescription
    SSGR-3200Improved: Enhanced privacy by ensuring the EPM installation token is no longer visible in logs during some installations conditions, aligning with security best practices.

    EPM Linux

    Bug fixes

    ItemDescription
    SSGR-4224Fixed an error where, in certain situations, the installation of the EPM Linux client triggered the error message "too many arguments."
    EPM-23Fixed an error where, on older supported systems (Red Hat 6, Suse 11, and CentOS 6), Access Policies were not applied correctly, including the execution control of the vim process and the blocking of the ls process for specific users. The problem where the command to view active policies on the device did not display results on these distributions was also fixed.

    Product Updates

    ItemDescription
    EPM-444Multifactor Authentication (MFA) support has been added for EPM Linux domain users. The new feature allows the configuration of different MFA methods (TOTP, FIDO2, Push Notification) for users authenticated via Active Directory.
    EPM-441A new silent installer has been added for EPM Linux, allowing installation without the need for manual intervention. This update enables batch installation on multiple devices simultaneously, eliminating dependence on MDM and individual physical/remote access, significantly optimizing the rollout process in large corporate environments.
    2838MFA authentication has been implemented for EPM Linux users.
    EPM-218Added support for Ubuntu 22.04 LTS and Oracle Linux 8/9 to the list of operating systems compatible with EPM Linux.
    EPM-36Added support for Red Hat 7.9 and Red Hat 8.9 to the list of operating systems compatible with EPM Linux.

    Product Updates

    ItemDescription
    SSGR-1777An option to clone a profile has been added to the Credentials Profile screen.

    Translation fixes

    ItemDescription
    SSGR-2837The error with the Approve icon in the Action column on the Operations List screen has been fixed, where the label always appeared in Portuguese regardless of the selected language.
    SSGR-4185The translation of the All operations screen name has been corrected.
    SSGR-4125The translation of the search results in the fields Change template, Enabling template, and Disabling template in the Configure Device Execution Profile window has been corrected.
    SSGR-4127Fixed the translation error in the cloning confirmation string.

    MySafe

    Bug fixes

    ItemDescription
    SSGR-2846Fixed the issue where the header of MySafe printed reports displayed the filter id even after clearing all filters.
    SSGR-4004Fixed the issue that prevented the completion of password import from LastPass.

    Product Updates

    ItemDescription
    SSGR-2144Added email notifications for MySafe users who receive a shared item from MySafe. In this email, the user receives a link that directs them to the screen with the shared item.

    New Feature

    No changes.

    MySafe Browser Extension

    Bug fixes

    ItemDescription
    SSGR-2935Implemented an error message informing the user of the extension's connection failure with MySafe.

    Product Updates

    ItemDescription
    SSGR-1885Added a feature that opens the extension in Current tab mode when the user has saved credentials for the website they are browsing.
    SSGR-1885Added a badge indicating the number of saved passwords for the current tab.
    SSGR-1885Added search behavior to automatically focus on the field when clicking the magnifying glass and filter records in real-time as the user types, eliminating the need to press Enter to perform the search.
    SSGR-1885Added automatic clearing of the search filter after clicking the Back button.
    SSGR-1885Added an option to disable a password.
    SSGR-1885Added a Help button in the Settings menu that redirects to the extension's documentation.
    SSGR-1885Added the functionality to open the vault connected to the extension in a new tab when clicking the senhasegura logo or the MySafe name.
    SSGR-1885The Login action was renamed to Fill credentials to more accurately reflect that the extension only fills in the username and password fields on the open tab, without opening the website or clicking the login button.
    SSGR-1885Added an error message if the user clicks on Fill credentials without any fields to fill in on the page.
    SSGR-1885Added automatic clearing of the username and password fields before filling them in to prevent authentication errors caused by duplicate or concatenated data.
    SSGR-1885Added automatic password strength calculation while typing.
    SSGR-1885Added the functionality to change the criteria for generating the random password by senhasegura.
    SSGR-1885Changed the Tags component to display each tag as a chip or badge instead of plain text, improving the visibility and identification of the tags.
    SSGR-1885Added the functionality to auto-fill the URL field with the current tab's URL during password creation.
    SSGR-1885Changed the color of example values in the fields to a lighter shade to avoid the impression that the fields are already filled.
    SSGR-33Added compatibility of the MySafe extension with the Firefox browser.
    SSGR-2983Added the automatic reauthentication feature: when clicking the login field, if the extension session has expired, the extension will open automatically and request reauthentication.
    SSGR-3340Adjusted the timeout parameters for the extension's connection to the vault: 30 days for session expiration and 7 days for inactivity expiration.

    senhasegura mobile app

    Product Updates

    ItemDescription
    SSGR-2337Added email notifications for MySafe users who receive a shared item from MySafe. In this email, the user receives a link that directs them to the screen with the shared item.
    SSGR-2337Added the option to filter passwords and notes by Tags.
    SSGR-2337Added the option for senhasegura to generate a random password and configure the password criteria.
    SSGR-2337Added automatic password strength calculation during typing/generation.

    Domum Remote Access

    Bug fixes

    ItemDescription
    SSGR-3384Fixed a bug where the Internal Users report wasn't updating after a new internal user was created.

    Product Updates

    ItemDescription
    SSGR-1570Improved Domum e-mails to now have more data related to vaults and environments.
    SSGR-2306Improved Domum's error message when a user tries to log in from a blocked location.

    Translation fix

    ItemDescription
    SSGR-5481Fixed a bug where, when viewing the full password in Domum, the button name was displayed in Portuguese despite the language of the vault.

    Certificate Manager

    Bug fixes

    ItemDescription
    SSGR-2349Fixed a bug where, by exporting the .csv file of the Automated Certificates, the Status column was blank.
    SSGR-4205Fixed a bug where strings were not properly written on the Publishing profile menu.
    SSGR-4592Fixed a bug where certificates couldn't be published in IIS servers after updating senhasegura to version 3.33.
    SSGR-4545Fixed a bug where A1 certificates weren't being discovered.
    SSGR-4815Fixed a bug where the user couldn't publish certificates using the Apache plugin.

    Product Updates

    ItemDescription
    SSGR-4903Updated the product to standardize the Status column from specific reports.

    Translation fix

    ItemDescription
    SSGR-4193Fixed a bug where two menus had strings shown in French despite the language of the vault.
    SSGR-4195Fixed a bug where the timer was only shown in Portuguese despite the language of the vault.
    SSGR-4194Fixed a bug where strings were shown in Portuguese despite the language of the vault on the Certification Information menu.

    Network Connector

    DevOps Secret Manager

    Bug fixes

    ItemDescription
    SSGR-3285Fixed an error where, when creating an application and navigating to the authorizations, the application was not visible for interaction.
    SSGR-4085Fixed an error in the display of duplicate name error messages when creating DSM and A2A applications. Previously, when creating a DSM application with a name that already existed in A2A, the message was displayed in Portuguese regardless of the language configured in the vault.
    SSGR-4084Fixed an capitalization error on the "New Secret" button in the Portuguese interface, which was previously displayed as "new secret" without the initial capital letter.
    SSGR-4816Fixed an error where profile settings were removed during GitLab integration via CLI, and authorization permissions did not allow proper access to the application's provisioned secrets.

    Product Updates

    ItemDescription
    SSGR-2906The endpoint for listing Secrets in DSM was improved to include important details of the linked credentials.
    SSGR-2942The encoding of data encrypted by DSM was enhanced. Cryptographic keys now return data in base64 format instead of plain text.
    SSGR-1791An "IP" field was added to the return variable for database credentials.
    SSGR-5316The title of the dashboard tab in the DSM side menu was changed from "Dashboard" to "Dashboards," properly reflecting the existence of multiple dashboards in the module.

    Cloud IAM

    Bug fixes

    ItemDescription
    SSGR-4158Fixed a bug where the user was receiving errors when connecting an AWS account in Cloud IAM version 4.0.
    SSGR-4159Fixed a bug where a non-formatted string was shown when the user connected a Google Cloud account in Cloud IAM.

    Product Updates

    ItemDescription
    SSGR-5766Added the columns Environments and Systems in the Credentials report.

    New Feature

    ItemDescription
    SSGR-4796Added a new Identities machine report in the Report panel.

    Deprecated

    ItemDescription
    SSGR-1330All features related to OpsWorks in Cloud IAM are deprecated.

    Task Manager

    No changes.

    Arbitrator

    No changes.

    Load Balancer

    No changes.

    senhasegura APIs

    ItemDescription
    SSGR-3368Implemented the restriction that prevents the creation of credentials via API with special characters in the identifier field. This change ensures consistency between operations performed via API and the graphical interface, preventing usability issues and potential security vulnerabilities, ensuring that identifiers follow the same pattern in both interfaces.
    SSGR-4522Fixed an issue that caused the automatic update of the identifier when updating a credential with username, hostname, and ip values. Now, the identifier will only be updated if the user explicitly enters a new value when updating the credential.

    Other versions

    You can see the older documentation versions here.

    Was this article helpful?
    What's Next
    Digital sovereignty is a fundamental right for citizens, institutions, and society. That’s why we work every day.
    Connect With Us
    SENHASEGURA
    LEARN
    EXPLORE
    Copyright © senhasegura. All Rights Reserved