In this article
About this release
On August 3, 2026, we released version 4.2.11 of Segura® Platform. This release includes 16 changes across 8 modules.
- Release date: 2026-08-03
- Patch: segura | v4.2.11-1
For information on how to update Segura® Platform, see Update Segura®.
Release highlights
RDP Proxy Support for Microsoft Windows App on macOS
Version 4.2.11 introduces official support for establishing privileged RDP sessions through the Microsoft Windows App on macOS.
Users can now access remote Windows systems using Microsoft's native RDP client while benefiting from the same privileged access controls and session management capabilities already available on Windows.
What's new
- Official support for the Microsoft Windows App on macOS.
- Support for:
- Managed credentials.
- Personal credentials.
- Domain credentials.
- Just-in-Time (JIT) credentials.
- Compatibility with RemoteApp and RDP file connections.
- Support for multi-hop RDP sessions.
Customer impact
Organizations can now provide a consistent privileged access experience for both Windows and macOS users without changing existing operational workflows.
This enhancement allows macOS users to leverage Microsoft's recommended RDP client while maintaining centralized auditing, session recording, privileged access controls, and compliance policies through Segura® Platform.
By extending the same governance model across operating systems, organizations improve user adoption, reduce operational friction, and strengthen privileged access management in mixed endpoint environments.
See the documentation:
Access Policies API v2: manage the dynamic access model from code
This release adds a v2 REST API for access policies, so the whole policy lifecycle is available programmatically.
What's new
- Full lifecycle over
/api/v2/pam/access-policies: create, list with pagination, retrieve, replace, partially update, and soft-delete a policy. - Every configuration section in the payload: password access, session access, approver settings, matching criteria, and access-limitation windows.
Customer impact
Organizations can now manage the governance of their access policies in an automated way, seamlessly integrating these actions into other applications and workflows through the API.
See the documentation: Access Policies API.
Changelog
API
Changed
| Item | Description |
|---|---|
| SSGR-8335 | Added a v2 Access Policies API, with endpoints to create, list, view, update, delete, activate, and deactivate access policies. |
Fixed
| Item | Description |
|---|---|
| SSGR-10375 | Fixed an issue where the API logs report in Orbit Server Manager did not display A2A requests that returned HTTP status code 200. |
Certificate Manager
Fixed
| Item | Description |
|---|---|
| SSGR-9832 | Fixed a typo in the Portuguese version of the “Additional names” string in the SSL/TLS Cloud requests report and the Add/Edit request form. The text is now displayed correctly. |
| SSGR-11148 | Fixed an issue where an error was displayed when attempting to disable an Azure certificate. Azure certificates can now be disabled successfully. |
Discovery
Fixed
| Item | Description |
|---|---|
| SSGR-8748 | Fixed a translation error in the Connectivities section of the Discovery > Discoveries > Devices > Import Device form. The string is now translated correctly. |
EPM Backend
Fixed
| Item | Description |
|---|---|
| SSGR-10884 | Fixed the naming for EPM in the Audit tracking report. EPM is now displayed with the correct naming. |
| SSGR-11327 | Fixed the icons to activate or deactivate a record in the Policies and Management reports. The icons now conform to the product’s design. |
Framework
Fixed
| Item | Description |
|---|---|
| SSGR-10682 | Fixed an issue where the text fields did not appear when adding a remote partition on the Backup tab of the configuration wizard. |
| SSGR-11459 | Fixed an issue where pending email notifications in the outbox were duplicated on each processing cycle instead of being reprocessed. |
Network Connector
Fixed
| Item | Description |
|---|---|
| SSGR-10984 | The Uptime card on the Network Connector Status screen now shows how long the service has been running, instead of always showing zero. |
PAM Core
Changed
| Item | Description |
|---|---|
| SSGR-10233 | Added an Application (app-only) OAuth2 flow for Microsoft SMTP accounts, so tenants that require administrator approval can authorize email sending with a single admin consent. See the documentation: Configure OAuth2.0 authentication for SMTP and IMAP via Azure. |
Fixed
| Item | Description |
|---|---|
| SSGR-11292 | Fixed an issue where the web proxy started a session even when the connectivity type was disabled on the credential, bypassing the credential's access restriction. |
Proxy
Changed
| Item | Description |
|---|---|
| SSGR-10729 | Added support for RDP Proxy sessions started from macOS with the Windows App, with the same session controls and auditing available on Windows. See the documentation: - RDP Proxy. - How to connect to a remote device with RDP Proxy. |
Fixed
| Item | Description |
|---|---|
| SSGR-11045 | Fixed an issue where audited commands were enforced inconsistently across Linux devices, allowing restricted commands to run in some sessions. |
| SSGR-11372 | Fixed an issue where pasting multi-line text into the nano editor over the web proxy did not preserve line breaks. |
| SSGR-11406 | Fixed an issue where SSH sessions to Ubuntu 26 devices displayed garbled text through the web and terminal proxies. |