2024-06-May

Release Version: PK Protect Endpoint Manager (PEM) May 2024

General Availability Date: May 6, 2024

Introduction

The following ‘minor’ release provides new product functionality, resolution to customer reported issues and other general improvements to the PKWARE software.

Updated Components and Versions

PKWARE Component	New Version
PK Protect Endpoint Manager Administrator	v20.0.33
PK Protect Endpoint Manger Agent	v20.00.0004
PK Protect Transparent Server Agent	v3.90.7
PKWARE SDK	Java 2020.2.1 / .NET 2020.2.4
PK Protect Mobile App for iOS	2.1.0
PK Protect for Intune Mobile App for iOS	2.0.0
PK Protect Mobile App for Android	2.1.64
PK Protect for Microsoft 365	1.00.0001

PK Endpoint Manager / PK Endpoint Agent Application Version Compatibility

PEM Version

Archive Client Application Versions

PEM v20.0.33

May 2024

Endpoint Agent: 20.00.0004 (May 2024), 17.90.0004 (Feb 2024),17.80.0007 (Oct 2023), and 17.70.0005 (Jul 2023),

Transparent Server Agent (TDE): v3.90.7

Supported 3rd Party Platforms

The following PKWARE and 3^rd Party products and versions listed below represent those which have been tested for quality, interoperability, and functional operation. Customers are strongly encouraged to maintain their environment in accordance with the versions and dependencies listed below, to avoid unforeseen issues with compatibility or unexpected behavior.

PK Protect Endpoint Manager
Operating System Type	Version
Microsoft Windows	Windows Server 2022, 2019, 2016
Browser Type	Version
Edge	Edge 124.x
Firefox	125.x
Google Chrome	124.x
Safari	17
Database Type	Version
PostgreSQL	12
MSSQL	SQL Server 2016, 2014
Web Server	Version
Internet Information Server (IIS)	IIS 10.0
PK Protect Endpoint Agent
Operating System Type	Version
Microsoft Windows	Windows Server 2022, 2019, 2016 Windows 11, 10
MacOS	Sonoma (14), Ventura (13)
Linux – RedHat	RedHat 7 or later
Linux – SUSE	12 SP5 and 15 SP3 on x86_64
Linux - Ubuntu	16.04 (LTS) and greater on X86 and X86_64
UNIX – IBM AIX	7L version 7.1 (7100-00) or higher
UNIX - Solaris	10 and 11.3 on UltraSPARC and X86
Operating System Type - Mobile	Version
PK Protect for iOS	14.x
PK Protect for Android	11
SDK
Language	Version
Java v2019.7.1	Dependencies: Java 8 or higher JRE
Application Operating System	Version
MacOS	Monterey (12), Big Sur (11)
Windows	Windows Server 2019, 2016 Windows 10 (64-bit)
Linux – RedHat	RedHat Enterprise Linux 8 (64-bit)
Linux – SUSE	Linux Enterprise Server 12 (64-bit)
Linux – Ubuntu	Ubuntu 18.04 LTS
Language	Version
.NET v2020.2.4	Dependencies: .NET Framework 4.6.1 and higher on Windows .NET Core 2.1, .NET Core 3.1, .NET 6.0 on all platforms (LTS release from Microsoft)
Application Operating System	Version
Windows	Windows Server 2019, 2016 Windows 10 (32-bit + 64-bit)
MacOS	Sonoma (14), Ventura (13)
Linux – RedHat	RedHat Enterprise Linux 8 (64-bit)
Linux – Ubuntu	Ubuntu 18.04 LTS
Other PKWARE Components
Component	Version
PK Transparent Server Agent (TDE) - Server	Windows Server 2022, 2019, 2016
PK Protect Reader – Windows	Windows 10 and higher
PK Protect Reader – macOS	macOS 11 and higher

Features and Improvements

The following capabilities have been added to the Manager, Agent, or both in the current release.

PK Protect Endpoint Manager
PK Protect Endpoint Manager	Summary
Appliance / Windows Version 20.0.33	Features PK Protect for Microsoft 365 Brings the power of PEM to Microsoft 365. PEM administrators can create centralized policies in the PEM Administrator to detect and protect OneDrive and SharePoint files. Files triggering detections can be reported, deleted, or redacted. Targets Expanded Support Targets support has been expanded to AIX and Solaris platforms. Reset and re-encryption functionality has been added to Targets. These updates bring the full functionality of Assignments and Lockers into Targets. Secure Email Advancements Manual encrypt button added. This is the first manual override option that PKWARE has released. Image discovery has been added as a configurable feature giving PEM administrators the ability to decide whether image discovery is necessary. A major overhaul to Secure Email on Mac OS has been completed. These changes have significantly stabilized Secure Email on Mac OS. An enhanced dialog flow has been implemented. This change drastically improves the user experience around dialog prompts and transitions. PEM SaaS Significant backend work towards supporting PEM as a SaaS offering was completed. PEM SaaS will include the hosting and management of the PEM Administrator by the PKWARE team. There are many benefits SaaS brings to our customers including reduced infrastructure footprint and cost, reduced total cost of ownership, better scalability, automatic updates, and faster deployment and onboarding.
PK Endpoint Agent	Summary
Windows, Mac, Linux Version 20.00.0004	Features Targets Expanded Support Targets support has been expanded to AIX and Solaris platforms. Reset and re-encryption functionality has been added to Targets. These updates bring the full functionality of Assignments and Lockers into Targets.
Other	Summary
PK Protect for Microsoft 365	Features PK Protect for Microsoft 365 Brings the power of PEM to Microsoft 365. PEM administrators can create centralized policies in the PEM Administrator to detect and protect OneDrive and SharePoint files. Files triggering detections can be reported, deleted, or redacted.
Other	Summary
PK Protect for Microsoft 365	Features PK Protect for Microsoft 365 Brings the power of PEM to Microsoft 365. PEM administrators can create centralized policies in the PEM Administrator to detect and protect OneDrive and SharePoint files. Files triggering detections can be reported, deleted, or redacted.
Secure Email	Features Secure Email Advancements Manual encrypt button added. This is the first manual override option that PKWARE has released. Image discovery has been added as a configurable feature giving PEM administrators the ability to decide whether image discovery is necessary. A major overhaul to Secure Email on Mac OS has been completed. These changes have significantly stabilized Secure Email on Mac OS. An enhanced dialog flow has been implemented. This change drastically improves the user experience around dialog prompts and transitions.

Fixed Issues & Additional Improvements

Component	ID	Details	Fixed Version
PEM	PEM-936	Community Smartkey creation DSI audit record did not report security level or comment fields. This has been resolved.	20.0
PEM	PEM-830	PEM administrator login timeout setting called “Administrator Idle Session Timeout (minutes)” has added under Basics menu. This setting controls when administrators are automatically logged out after inactivity.	20.0
PEM	PEM-1219	Re-encryption support added to Targets.	20.0
PEM	PEM-1278	Added support for prefix, suffix and not equals query filters in dashboard panels.	20.0
PEM	PEM-1468	Reset support added to Targets.	20.0
PEM	PEM-1519	Azure AD connector was not auto-recovering after failure. This has been resolved.	20.0
PEM	PEM-1539	Azure AD groups were not permitted in Community Smartkeys. This functionality has been added.	20.0
PEM	PEM-1607	Azure AD groups were allowed selecting Azure-synced groups, but they are not supported in TDE. This was cleaned up to disable Azure AD groups in TDE.	20.0
Agent	PEM-1445	Encrypted .zip files last accessed dates were being modified when used to report back stats. This is not preserved.	20.0
Agent	PEM-1512	Data Security Intelligence flags were not being applied causing default settings to be applied. This has been fixed.	17.9
Secure Email	PEM-1565	A Microsoft update impacted how Base64 encoding and decoding handled special characters. This has been fixed.	1.5
Secure Email	PEM-1471	During processing of an email, a unique scenario caused failures if users quickly clicked out of the email before Secure Email completed processing. A new dialog flow was implemented.	1.5

PK Endpoint Manager Appliance – OS and Major Packages

For a full list of the packages included in your appliance, see the Systems/Packages page.

PKWARE Enterprise Manager Virtual Appliance
Package / OS	Version
Ubuntu	20.04.6 LTS
Dotnet-host	8.0.3-1
Dotnet-runtime-3.1	3.1.32-1
Dotnet-runtime-6.0	6.0.28-1
Apache2	2.4.41-4ubuntu3.16
Postgresql	12+214ubuntu0.1
Openssl	1.1.1f-1ubuntu2.22
Python3	3.8.2-0ubuntu2

PKWARE Software Checksums

New PEM Updates:

Type	Sha256 Checksum
Windows Installer	a83cbca422e9a8178a359aa388f20ab1f5e2cd160bf7f0cbd9f5e6ef6984a210
Appliance Upgrade	3d5a1a1e836c0f01a31776c05de328e2da4bad3f5b5fc1529146354688970953
Appliance OS Upgrade	9ed220cd2d3492a41ff43e86d73bb72139403eddcd0adc55c8cdcbb5365762ca

Base PEM VM:

Format	Sha256 Checksum
OVA	A7D372935FD5FFEDB21603355898C12E37562945D327B9FD608ED51865D4440
QCOW2	8B5474BDBE96BB9D0A00CE142BD0CAADA5FE2BC87CC82C74A47134AB42B0E5D
VHD	E2503B080E858F10DADBD340FD8B931535AE07D3DB9E7BA017C5C3121CBC816

PEM Supporting Software:

Product	Sha256 Checksum
PowerShell Azure App Helper (Create App)	e7ce0827a46b9b062eb2b74dad0ff8a184a31a5cef7c6f13dbe73d9271f581be
PowerShell Azure App Helper (Delete App)	189bbfb48022fce61146e3fa66bad3e438b70d816b6efb77cabebb185207dab8
Elasticsearch 7.9.2	1eaf78d94c37ea8acecf0b2702fc71e54e2a73259cd777056fa92361d8eb0890
AdoptOpenJDK 11	6eb277a3e9305fdf380900d20f4ef7a474f13fdbc92f7709b57945f6ffdc80fc

PK Protect Agent:

Platform	Sha256 Checksum
Windows 64-bit	d1098c079d90d44d7b9a814b7adbd2af6fef4e3d92e7a93bb0691bdda71928f8
macOS	0fbf78a1ae2bc3f7cc913b5a1eadd76769cebac17c7da398f0c76a9891d91486
Linux Debian 32-bit	465176bcacb34b6351b6073ee74cf2e6ea25c3a5e6328fcb3f7d17726dcf99c4
Linux Debian 64-bit	13e7a130b818af4cb185cd5b52de504600bd2f56777ae6116ed58baaf517ae85
Linux RPM 32-bit	56d5510b70f49189be8441c7abdaf02fa14eae5df118922c4f82503410ebf67d
Linux RPM 64-bit	84661eb9edb1cffaa659190b3b184caaba617f70d43aa77a5ee0ef2ad7bd942f
AIX	e968a0ff89f8f1ee89aa82da488fc7448bc4129aae7094885d8859ac4cd06fe7
Solaris SPARC sun4u pkg	c1d2ce26d396464f513e5953db515d203c87fb664ceecc44fd716b280e1ea5c9
Solaris x86 i86pc pkg	9ac5e65cafc2b9bec53f8fe735ad25b1dc06554446395a2deada77b48e190f20
Linux Discovery Supplemental Package	539a2372676a999a64c80b2734db9b06cee0bf787f2fd090f27fa3c6ab00cb3d

Windows Deployment JSONs:

Type

Sha256 Checksum

Upgrading from

16.9 or newer

d48645cbed6cea102785d566dde467cb709c86e809efb6bc12145320feb23f54

Upgrading from

16.8 or older

61502b10b5ca04b3f9bb2f09f39b70ed10bb64046bffe977063d718d934140e9

Secure Email Outlook Add-in:

Type	URL
Outlook Add-in	https://addin.pkware.com/v1.5/manifest.xml

Transparent Server and Desktop Agent (TDE)

Download	SHA256 Checksum
TDE Windows Server 64-bit	73e22c1e9b7828736e095f24feeb01300ef21cb5ea644b4378a41ce6ab8dcf51

Classification

Installers	SHA256 Checksum
Boldon James Manual Installer	f90f4deddd3a92f1397a2d8c5247fa1d4693026a6c1bceb6d9f90a0dba184b6f
PKWARE Bundled Installer	b832a7516e2e83915e9fe9753d0793bad0cc7b5c84953012b89445fbb8296cb7

PK Protect for Microsoft 365

Installers	SHA256 Checksum
PK Cloud Agent	a3e6e38b465d22affbd6c20bdf0d67e7b02bc1b0b69418bab5a9e33f775b634c
Azure Functions	ebbb9434abf95e1ac0762992d243bbe842d45c6810f9a0bc33361dc4ad46b376

Related Documentation

· https://support.pkware.com

Questions and Support

Support Hours and Contact Information

Monday through Friday 8-6 Eastern Time Zone
Technical Support 937.847.2687
Customer Service 937.847.2374
Request Tech Support Form

Support Links