2022-01-January

PKWARE Release Notes – January 2022

Release Version: PK Protect January 2022

General Availability Date: January 14, 2022

Introduction

The following ‘minor’ release provides new product functionality, resolution to customer reported issues and other general improvements to the PKWARE software.

Updated Components and Versions

PKWARE Component	New Version
PK Endpoint Manager	v19.1.103
PK Endpoint Agent - Persistent Data Encryption (PDE) Agent	v17.10.0017
PK Transparent Server Agent (TDE)	v3.7.2
PKWARE SDK	Java 2019.7.4 / .NET 2020.2.4
PK Protect Mobile App for iOS	2.0.0
PK Protect for Intune Mobile App for iOS	2.0.0
PK Protect Mobile App for Android	2.0.0
PK Protect for Intune Mobile App for Android	2.0.0

PK Endpoint Manager / PK Endpoint Agent Application Version Compatibility

PEM Version

Archive Client Application Versions

PEM v19.1.103

January 2022

Endpoint Agent: 17.10.0017 (Jan ’22), 17.00.0011 (Sept ’21), and 16.90.0006 (Jun ’21)

Transparent Server Agent (TDE): v3.7.2

Supported 3^rd Party Platforms

The following PKWARE and 3^rd Party products and versions listed below represent those which have been tested for quality, interoperability, and functional operation. Customers are strongly encouraged to maintain their environment in accordance with the versions and dependencies listed below, to avoid unforeseen issues with compatibility or unexpected behavior.

PK Endpoint Manager
Operating System Type	Version
Microsoft Windows	Windows Server 2022, 2019, 2016, 2012, 2012 R2
Browser Type	Version
Internet Explorer / Edge	Internet Explorer 11 / Edge 96.x
Firefox	95
Google Chrome	96
Safari	15
Database Type	Version
PostgreSQL	12.5
MSSQL	SQL Server 2016, 2014, 2012
Web Server	Version
Internet Information Server (IIS)	IIS 10.0, 8.5, 8.0, 7.5
PK Endpoint Agent
Operating System Type	Version
Microsoft Windows	Windows Server 2019, 2016, 2012, 2012 R2 Windows 11, 10, 8.1
MacOS	Monterey (12), Big Sur (11) (with M1 chip – using Rosetta 2), Catalina (10.15)
Linux – RedHat	RedHat 5 or greater
Linux – SUSE	10 and greater on x86, and x86_64
Linux - Ubuntu	12.04 (LTS) and greater on X86 and X86_64
UNIX – IBM AIX	7L version 7.1 (7100-00) or higher, 6L Version 6.1 (6100-00) or higher with required patches
UNIX - Solaris	10 or greater on UltraSPARC and X86
UNIX – HPUX	11iv2 with patches
IBM z/OS	Software: z/OS 2.4, z/OS 2.3, z/OS 2.2, z/OS 2.1, z/OS 1.13 Hardware: z10-EC, z10-BC, z-10, z196, z114, zEC12, zBC12, z13 (2964), z13 (BC (2965)), z14, zR1, z15
IBM i	Software: IBM i 7.4, 7.3, 7.2, 7.1 Hardware: Power 7, 8 and 9
Operating System Type - Mobile	Version
PK Protect for iOS	14
PK Protect for Android	11
SDK
Language	Version
Java v2019.7.1	Dependencies: - Java 8 or higher JRE
Application Operating System	Version
MacOS	Monterey (12), Big Sur (11)
Windows	Windows Server 2019, 2016, 2012, 2012 R2 Windows 10, 8.1 (64-bit)
Linux – RedHat	RedHat Enterprise Linux 8 (64-bit)
Linux – SUSE	Linux Enterprise Server 12 (64-bit)
Linux – Ubuntu	Ubuntu 18.04 LTS
Language	Version
.NET v2020.2.4	Dependencies: - .NET Framework 4.6.1 and higher on Windows - .NET Core 2.1 on all platforms (LTS release from Microsoft)
Application Operating System	Version
Windows	Windows Server 2019, 2016, 2012, 2012 R2 Windows 10, 8.1 (32-bit + 64-bit)
MacOS	Monterey (12), Big Sur (11)
Linux – RedHat	RedHat Enterprise Linux 8 (64-bit)
Linux – Ubuntu	Ubuntu 18.04 LTS
Other PKWARE Components
Component	Version
PK Transparent Server Agent (TDE) - Server	Windows Server 2016, 2012, 2012 R2
PK Transparent Desktop Agent (TDE) – Desktop	Windows 11, 10, 8.1
PK Protect Reader – Windows	Windows 8.1 and higher
PK Protect Reader – macOS	macOS 10.13 and higher

Features and Improvements

The following capabilities have been added to the Manager, Agent or both in the current release.

PK Endpoint Manager Manager
PK Endpoint Manager	Summary
Appliance / Windows Version 19.1.103	Features · Support for Former ‘Dataguise’ Discovery Engine in PK for Endpoints o New discovery engine is included in addition to the existing PK for Endpoints discovery engine o Customers can configure the discovery engine of their choice; default for upgrades is the existing PK for Endpoints discovery o All existing PK for Endpoints standard and customized discovery patters have been retained · Remediation of Encrypted Archives o When encountered, PKWARE can optionally discover and remediate files residing in encrypted archives o Support for encrypted archives can be enabled within existing locker / assignment configurations · Event Forwarding to External Targets o In addition to displaying events in the ‘Events’ screen, they can be forwarded to external target systems for collection, consolidation and analysis by those systems o Support for various format types including ElasticSearch, Syslog and Splunk · Event Log Purging o Admins have the ability to purge the event logs older than specified timeframes · Multiple Data Security Intelligence (DSI) Targets o Specified agents can send DSI to different locations, as an exception to a standard, defined default location · Support for Redaction on Linux o The ability to discover and redact files in Linux environments
PK Endpoint Agent	Summary
Windows, Mac, Linux Version 17.10.0017	Features · Support for Former ‘Dataguise’ Discovery Engine in PK for Endpoints o New discovery engine is included in addition to the existing PK for Endpoints discovery engine o Customers can configure the discovery engine of their choice; default for upgrades is the existing PK for Endpoints discovery o All existing PK for Endpoints standard and customized discovery patters have been retained · Remediation of Encrypted Archives o When encountered, PKWARE can optionally discover and remediate files residing in encrypted archives o Support for encrypted archives can be enabled within existing locker / assignment configurations · Event Forwarding to External Targets o In addition to displaying events in the ‘Events’ screen, they can be forwarded to external target systems for collection, consolidation and analysis by those systems o Support for various format types including ElasticSearch, Syslog and Splunk · Multiple Data Security Intelligence (DSI) Targets o Specified agents can send DSI to different locations, as an exception to a standard, defined default location · Support for Redaction on Linux o The ability to discover and redact files in Linux environments
Other	Summary

Fixed Issues

Component	ID	Description
PEM	MGR-2982	TDE Compliance getting stuck in "pending"
PEM	MGR-3377	Remediation Actions in read only mode not showing encryption algorithm
PEM	MGR-3768	SDK Keys with AD Group error on rename
PEM	MGR-3635	Erroneous DSI events logged on policy edits
PEM	MGR-3943	DSI event missing for PKCS11 retrieval
PEM	MGR-4073	Email vs UPN mode toggle not fixing PEM admins
PEM	MGR-4074	Email vs UPN mode toggle not fixing scope expressions
PEM	MGR-4476	Admin API changes to scope not being reported in DSI
Client	ARC-2870	Installer doesn't close all DiscoveryAgents running on upgrades
Client	ARC-2848	File associations on macOS not always working
Client	ARC-2846	macOS client crashing on particular .zip file extraction
Client	ARC-2836	Windows options displays assignment details incorrectly

Known Issues

After cloning an existing assignment, the newly created assignment doesn’t report compliance status correctly. As a workaround, if the admin selects ‘reset’, the new assignment will begin to accurately report its compliance status.

PK Endpoint Manager Appliance – OS and Major Packages

For a full list of the packages included in your appliance, see the Systems/Packages page.

PKWARE Enterprise Manager Virtual Appliance
Package / OS	Version
Ubuntu	20.04.3 LTS
Dotnet-host	6.0.1-1
Dotnet-runtime	3.1.22-1
Apache2	2.4.41-4ubuntu3.8
Postgresql	12+214ubuntu0.1
Openssl	1.1.1f-1ubuntu2.10
Python3	3.8.2-0ubuntu2

PKWARE Software Checksums

New PEM Updates:

Type	Sha256 Checksum
Windows Installer	73C0F8250E821CEC836E6162DF7873515EFC32320AF4ED480FEAFC77ACC8AB42
Appliance Upgrade	E1CC153D6B2FB55361F67399BAC60C8FF5E12951B2F6AF5FC2D675A848992328
Appliance OS Upgrade	81DBEEE7B0F42853409CD568A071983AEF9009DBABFC99E2B8B0645590990A56

Base PEM VM:

Format	Sha256 Checksum
OVA	A7D372935FD5FFEDB21603355898C12E37562945D327B9FD608ED51865D44404
QCOW2	8B5474BDBE96BB9D0A00CE142BD0CAADA5FE2BC87CC82C74A47134AB42B0E5DE
VHD	E2503B080E858F10DADBD340FD8B931535AE07D3DB9E7BA017C5C3121CBC816D

PEM Supporting Software:

Product	Checksum
PowerShell Azure App Helper (Create App)	C1D169C0B20980D4E7C80E883D149E345971F75CF6ED4DDFB5AFD7CC36802164
PowerShell Azure App Helper (Delete App)	189BBFB48022FCE61146E3FA66BAD3E438B70D816B6EFB77CABEBB185207DAB8
Elasticsearch 7.9.2	1EAF78D94C37EA8ACECF0B2702FC71E54E2A73259CD777056FA92361D8EB0890
AdoptOpenJDK 11	6EB277A3E9305FDF380900D20F4EF7A474F13FDBC92F7709B57945F6FFDC80FC

PK Endpoint Agent (Archive Agent):

Platform	Checksum
Windows Masking 64-bit	AC3C99C04B953BCBC216915B22C47B1FDB6B88D34B5DB77AA8E9104A6D946970
macOS	FE0772415EC582F5D65F58578D93EE235A203B36736BC7244A956FC46F80D7E7
deb 32-bit	EFE9667F8F368940C1B204FD101017AAAC78C51CB39AE04E2D1E6F24D4D9A7BD
deb 64-bit	8A3C51EA37D63FD8C1C9A2BCD7E9AB2A92C9869DECB537FD365AF9B888B03821
rpm 32-bit	A637241D9A1F098BD6FC11B5D5DD535F320695C30D7002BC7655106C4DA2B2BA
rpm 64-bit	92050EF9BFE2CAD873A30FF15C33416AE09A08C8A7C35B87BCFCC753097BE0CF
Linux Discovery Supplemental Package	043F76165EC47273030C00E55EC1722D0E4EDAADF396FEEFF8A34F192162566C
aix bff	4B6739EDC243ADBA82828FE9F541BDBBDA35BEE2F97A91B2930A4AF23756B6DC
sun4u pkg	E818C0594ACAC91D0D367A3550C058185ED62F16163FAED8AAA15E08D61FB37F
i86pc pkg	D4208FD318EE03A551D1AA8A91165D7EB1AAFCDF3530BCFD08DD5CD027A8033D

Windows Deployment JSONs:

Type	Checksum
Masking Version	0BB9BB85F19C65EE60401360255A6BC9CF423DA13B83CF5D24F8550539D1D106

Transparent Server and Desktop Agent (TDE)

Download	Checksum
DesktopTDE 64-bit	5D5C38F2592D2D4A8028AEE56DFB98CC7AE14BBA8DE76EEAEEBF821C9C71520A
DesktopTDE 32-bit	5CC847795F878A0C411AA2229476B8C5FDBA693BC31027FF90098F56DAD805CF
TDE 64-bit	1AE5A12C6BA3E3A1C71F1899C138471BB37983212C370DA88280FAD171E4D88B
TDE 32-bit	451331EB73B85F1EDEC74C8A3A083B1A49C335820FC3E04FCE28B0B868C1CCDB