2022-04-April
Release Version: PK Protect April 2022
General Availability Date: April 15, 2022
Introduction
The following ‘minor’ release provides new product functionality, resolution to customer reported issues and other general improvements to the PKWARE software.
Updated Components and Versions
PKWARE Component | New Version |
PK Endpoint Manager | v19.2.51 |
PK Endpoint Agent - Persistent Data Encryption (PDE) Agent | v17.20.0011 |
PK Transparent Server Agent (TDE) | v3.80.3 |
PKWARE SDK | Java 2020.2.1 / .NET 2020.2.4 |
PK Protect Mobile App for iOS | 2.0.0 |
PK Protect for Intune Mobile App for iOS | 2.0.0 |
PK Protect Mobile App for Android | 2.0.0 |
PK Protect for Intune Mobile App for Android | 2.0.0 |
PK Endpoint Manager / PK Endpoint Agent Application Version Compatibility
PEM Version | Archive Client Application Versions |
PEM v19.2.51 April 2022 | Endpoint Agent: 17.20.0011 (Apr ’22), 17.10.0017 (Jan ’22), 17.00.0011 (Sept ’21), and 16.90.0006 (Jun ’21) Transparent Server Agent (TDE): v3.7.2 |
Supported 3rd Party Platforms
The following PKWARE and 3rd Party products and versions listed below represent those which have been tested for quality, interoperability, and functional operation. Customers are strongly encouraged to maintain their environment in accordance with the versions and dependencies listed below, to avoid unforeseen issues with compatibility or unexpected behavior.
PK Endpoint Manager | |
Operating System Type | Version |
Microsoft Windows | Windows Server 2022, 2019, 2016, 2012, 2012 R2 |
Browser Type | Version |
Internet Explorer / Edge | Internet Explorer 11 / Edge 99.x |
Firefox | 99 |
Google Chrome | 100.x |
Safari | 15 |
Database Type | Version |
PostgreSQL | 12.5 |
MSSQL | SQL Server 2016, 2014, 2012 |
Web Server | Version |
Internet Information Server (IIS) | IIS 10.0, 8.5, 8.0, 7.5 |
PK Endpoint Agent | |
Operating System Type | Version |
Microsoft Windows | Windows Server 2019, 2016, 2012, 2012 R2 Windows 11, 10, 8.1 |
MacOS | Monterey (12), Big Sur (11) (with M1 chip – using Rosetta 2), Catalina (10.15) |
Linux – RedHat | RedHat 5 or greater |
Linux – SUSE | 10 and greater on x86, and x86_64 |
Linux - Ubuntu | 14.04 (LTS) and greater on X86 and X86_64 |
UNIX – IBM AIX | 7L version 7.1 (7100-00) or higher, 6L Version 6.1 (6100-00) or higher with required patches |
UNIX - Solaris | 10 or greater on UltraSPARC and X86 |
UNIX – HPUX | 11iv2 with patches |
IBM z/OS | Software: z/OS 2.4, z/OS 2.3, z/OS 2.2, z/OS 2.1, z/OS 1.13 Hardware: z10-EC, z10-BC, z-10, z196, z114, zEC12, zBC12, z13 (2964), z13 (BC (2965)), z14, zR1, z15 |
IBM i | Software: IBM i 7.4, 7.3, 7.2, 7.1 Hardware: Power 7, 8 and 9 |
Operating System Type - Mobile | Version |
PK Protect for iOS | 15 |
PK Protect for Android | 11 |
SDK | |
Language | Version |
Java v2019.7.1 | Dependencies: - Java 8 or higher JRE |
Application Operating System | Version |
MacOS | Monterey (12), Big Sur (11) |
Windows | Windows Server 2019, 2016, 2012, 2012 R2 Windows 10, 8.1 (64-bit) |
Linux – RedHat | RedHat Enterprise Linux 8 (64-bit) |
Linux – SUSE | Linux Enterprise Server 12 (64-bit) |
Linux – Ubuntu | Ubuntu 18.04 LTS |
Language | Version |
.NET v2020.2.4 | Dependencies: - .NET Framework 4.6.1 and higher on Windows - .NET Core 2.1 on all platforms (LTS release from Microsoft) |
Application Operating System | Version |
Windows | Windows Server 2019, 2016, 2012, 2012 R2 Windows 10, 8.1 (32-bit + 64-bit) |
MacOS | Monterey (12), Big Sur (11) |
Linux – RedHat | RedHat Enterprise Linux 8 (64-bit) |
Linux – Ubuntu | Ubuntu 18.04 LTS |
Other PKWARE Components | |
Component | Version |
PK Transparent Server Agent (TDE) - Server | Windows Server 2016, 2012, 2012 R2 |
PK Transparent Desktop Agent (TDE) – Desktop | Windows 11, 10, 8.1 |
PK Protect Reader – Windows | Windows 8.1 and higher |
PK Protect Reader – macOS | macOS 10.13 and higher |
Features and Improvements
The following capabilities have been added to the Manager, Agent or both in the current release.
PK Endpoint Manager Manager | |
PK Endpoint Manager | Summary |
Appliance / Windows Version 19.2.51 | Features · Support for provisional user accounts o A new ‘Authentications’ subpage has been added beneath the Identities page, which is the area that provisional user policies are created and managed. o Issuance of temporary accounts for users in domains that can’t authenticate with the PK Endpoint Manager (PEM) o Assign policies, lockers and assignments to users with provisional accounts o Facilitates the implementation of PK Protect across the entire enterprise · Expanded reporting filters o A new ‘filters’ section has been added to the report properties dialog, which is accessed from the gear icon in the title bar of the individual charts o Customize existing dashboard reports to filter the results on AD users, emails, files and action types o Further specify the content of high-level dashboard charts, based on administers specific needs for information · Dashboard search capability o A new ‘Search’ subpage has been added beneath the Dashboard page, which is the location where you can execute report search queries. o Allow administrators to define their own report content, using as AD users, emails, files and actions search / selection parameters o Ability to use individual or combinations of multiple criteria to fine-tune the results · Dashboard drill-downs o Administrators can select information inside a chart (example: click on a pie slice) to auto-create additional information, based on the context of their selection o Improve the ability to generate and share context based reports · TOTP for encryption and decryption actions o PK Protect’s multi-factor authentication capability has been expanded to support Time-based OTP (Time based one-time passcode) for manual encryption and decryption actions o Enhanced security for the protection of sensitive information by enforcing multi-factor authentication as a prerequisite · API support for the ‘Deployments’ feature o Support for using the PK Protect deployments feature through and API, as opposed to the PEM UI |
PK Endpoint Agent | Summary |
Windows, Mac, Linux Version 17.20.0011 | Features · Support for provisional user accounts o A new ‘Authentications’ subpage has been added beneath the Identities page, which is the area that provisional user policies are created and managed. o Issuance of temporary accounts for users in domains that can’t authenticate with the PK Endpoint Manager (PEM) o Assign policies, lockers and assignments to users with provisional accounts o Facilitates the implementation of PK Protect across the entire enterprise · TOTP for encryption and decryption actions o PK Protect’s multi-factor authentication capability has been expanded to support Time-based OTP (Time based one-time passcode) for manual encryption and decryption actions o Enhanced security for the protection of sensitive information by enforcing multi-factor authentication as a prerequisite · Windows 11 right-click menu support o PK Protect listing in primary right-click menu |
Other | Summary |
|
Fixed Issues
Component | ID | Summary | Details | Affected Version |
PEM | MGR-4582 | AD connection errors causes agents to unlink | PEM no longer returns exception to client when AD connection with PEM fails | 17.0+ |
PEM | MGR-4583 | PEM failed to import Discovery Filter Bundles with a regex pattern | When processing the upload, the PEM would fail to import due to issues with the regex being added. | 19.1+ |
PEM | MGR-4618 | Exhaustive Group Membership doesn't work across multiple unrelated forests | When the PEM was configured with multiple connectors for multiple forests, an exhaustive search setting was failing to perform the search across forests. | 18.5+ |
PEM | MGR-4596 | Error processing empty lines in dictionary uploads | The PEM failed to parse empty lines in a dictionary upload. | 18.0+ |
PEM | MGR-4581 | AD Connectors not staying in prioritized order | An issue processing an invalid character from legacy version of the PEM prevented edits to be saved | 18.0+ |
Client | ARC-2869 | Linux/Unix agents not honoring PKMETA_HOME variable | When setting an environment variable for advanced configurations, the agent was ignoring the value previously | 17.0+ |
Unpacker | ARC-2929 | PDF with wingdings font errors in discovery/redaction | No redaction character could be found in the font set, throwing an uncaught exception | 17.0+ |
Unpacker | ARC-2901 | UTF8 characters not being redacted | UTF8 characters in dictionaries not encoded/decoded properly in processing | 17.0+ |
PK Endpoint Manager Appliance – OS and Major Packages
For a full list of the packages included in your appliance, see the Systems/Packages page.
PKWARE Enterprise Manager Virtual Appliance | |
Package / OS | Version |
Ubuntu | 20.04.4 LTS (OS upgraded to address CVE #2022-0847) |
Dotnet-host | 6.0.3-1 |
Dotnet-runtime | 3.1.23-1 |
Apache2 | 2.4.41-4ubuntu3.10 |
Postgresql | 12+214ubuntu0.1 |
Openssl | 1.1.1f-1ubuntu2.12 |
Python3 | 3.8.2-0ubuntu2 |
PKWARE Software Checksums
New PEM Updates:
Type | Sha256 Checksum |
Windows Installer | CDCBACCB37A3E77982005E3C4A4755B5070EA0DDFDF28914FBD21188E50A31E9 |
Appliance Upgrade | 6B3217A938D796B1AB80C116132CA38AE387D94E51415BBB1C254A7C1257C45E |
Appliance OS Upgrade | 63B91F77FBEBD996E20D4CF98038C9BC1EAD0F8F6BC6582A30DF1F0600085080 |
Base PEM VM:
Format | Sha256 Checksum |
OVA | A7D372935FD5FFEDB21603355898C12E37562945D327B9FD608ED51865D44404 |
QCOW2 | 8B5474BDBE96BB9D0A00CE142BD0CAADA5FE2BC87CC82C74A47134AB42B0E5DE |
VHD | E2503B080E858F10DADBD340FD8B931535AE07D3DB9E7BA017C5C3121CBC816D |
PEM Supporting Software:
Product | Checksum |
PowerShell Azure App Helper (Create App) | C1D169C0B20980D4E7C80E883D149E345971F75CF6ED4DDFB5AFD7CC36802164 |
PowerShell Azure App Helper (Delete App) | 189BBFB48022FCE61146E3FA66BAD3E438B70D816B6EFB77CABEBB185207DAB8 |
Elasticsearch 7.9.2 | 4170906335279E5697FCE15C8C8326AEAF8255FB442D9FE6C5A7527E150B5526 |
AdoptOpenJDK 11 | 6EB277A3E9305FDF380900D20F4EF7A474F13FDBC92F7709B57945F6FFDC80FC |
PK Endpoint Agent (Archive Agent):
Platform | Checksum | ||
Windows Masking 64-bit |
| ||
macOS | 0d9993573b3ffa6b11f5bdc9d8357e122d71eef5e6d4c892af1db206e2e70030 | ||
deb 32-bit | a4f8bdb91f67aafdfea399fce3ebfaf5ff201a614ca39defa07d672023929484 | ||
deb 64-bit | ad50315861e701f955a9379b7bfd9141c52bb73e5635927f57491c961cc02605 | ||
rpm 32-bit | bc6cd25fb400a4ebabc85bfc439e8d3f9ed350ae9a7628fcf8cc70da661f65fa | ||
rpm 64-bit | a8a58b53fa434ab0725f171ac4587f5ec6a6185926c6eff7a9b786d73a1fd9a2 | ||
Linux Discovery Supplemental Package | 974590AECFBFB1B14C6F1B6791FE0FAE8D9BEDEA877654AC7BA629CEE1912287 | ||
aix bff | 24ff7a41a6038435fe9ca7b36ce6aa8f5a1ec14da681c3ba8bc665cae2e26a0a | ||
sun4u pkg | 6fba7a001d5936bd640c3f46374250446808d638c76adbf7240097cd791e718d | ||
i86pc pkg | c1625f24d3f5518f8d6a958801873012e480819455726897f332fbd63849be77 |
Windows Deployment JSONs:
Type | Checksum |
Upgrading from 16.9 or newer | D74F16F269A528ACE93F81417ED59628D3DC68F591C48ECB68C43AAC202D033B |
Upgrading from 16.8 or older | DDB814898B9EEE45F0674A5D367FC44BA8497936DFBA7253FD6F23BE58951970 |
Transparent Server and Desktop Agent (TDE)
Download | Checksum |
DesktopTDE 64-bit | 3882FB6F73DFF28573419BCF20ADBD7E96E578E7982561DB4CD1A02BE0FDB4BF |
DesktopTDE 32-bit | 2B7E93C30CF216D0F578EECD66413E8F42EE238ABACCB012BB989669215EBFE3 |
TDE 64-bit | 8D047EDCECE869601B1DF555DB395585DCDF4B8C6A516D14063B8A0A193E5E8B |
TDE 32-bit | 4C30539B5740AEFF70C008580D143999A9A7467BDF92A24974758B227E17E59D |
Classification
Installers | Checksum |
Boldon James Manual Installer | BA433550CD65DD99BF44527FF1D68B532C0DD5D59A8C9F10F71062DE8A5D1FEB |
PKWARE Bundled Installer | CB77049DF9935C33401C996660D674A32D23B841A8748DA23716F224160411A3 |
Related documentation
Questions and Support
Support Hours and Contact Information
- Monday through Friday 8-6 Eastern Time Zone
- Technical Support 937.847.2687
- Customer Service 937.847.2374
- Request Tech Support Form
Support Links
- Online Order Lookup
- Maintenance Renewal Form
- Report a Security Vulnerability
- Purchase PKWARE Software
- Remote Help Utilities
- FTPS & SFTP options for sending data to us securely
- FTP Server Info