Release Version: PK Protect July 2022

General Availability Date: July 22, 2022

Introduction

The following ‘minor’ release provides new product functionality, resolution to customer reported issues and other general improvements to the PKWARE software.

Updated Components and Versions

PKWARE Component

New Version

PK Endpoint Manager

v19.2.51

PK Endpoint Agent - Persistent Data Encryption (PDE) Agent

v17.20.0011

PK Transparent Server Agent (TDE)

v3.80.3

PKWARE SDK

Java 2020.2.1 / .NET 2020.2.4

PK Protect Mobile App for iOS

2.0.0

PK Protect for Intune Mobile App for iOS

2.0.0

PK Protect Mobile App for Android

2.0.0

PK Protect for Intune Mobile App for Android

2.0.0

 

PK Endpoint Manager / PK Endpoint Agent Application Version Compatibility

PEM Version

Archive Client Application Versions

 PEM v19.2.51

  April 2022

Endpoint Agent: 17.20.0011 (Apr ’22), 17.10.0017 (Jan ’22), 17.00.0011 (Sept ’21), and 16.90.0006 (Jun ’21)  

Transparent Server Agent (TDE): v3.7.2

Supported 3rd Party Platforms

The following PKWARE and 3rd Party products and versions listed below represent those which have been tested for quality, interoperability, and functional operation. Customers are strongly encouraged to maintain their environment in accordance with the versions and dependencies listed below, to avoid unforeseen issues with compatibility or unexpected behavior.


PK Endpoint Manager

Operating System Type

Version

Microsoft Windows

Windows Server 2022, 2019, 2016, 2012, 2012 R2

Browser Type

Version

Internet Explorer / Edge

Internet Explorer 11 / Edge 99.x

Firefox

99

Google Chrome

100.x

Safari

15

Database Type

Version

PostgreSQL

12.5

MSSQL

SQL Server 2016, 2014, 2012

Web Server

Version

Internet Information Server (IIS)

IIS 10.0, 8.5, 8.0, 7.5

PK Endpoint Agent

Operating System Type

Version

 Microsoft Windows

Windows Server 2019, 2016, 2012, 2012 R2

Windows 11, 10, 8.1

 MacOS

Monterey (12), Big Sur (11) (with M1 chip – using Rosetta 2), Catalina (10.15)  

 Linux – RedHat

RedHat 5 or greater   

 Linux – SUSE

10 and greater on x86, and x86_64

 Linux - Ubuntu

14.04 (LTS) and greater on X86 and X86_64

 UNIX – IBM AIX

7L version 7.1 (7100-00) or higher, 6L Version 6.1 (6100-00) or higher with required patches

 UNIX - Solaris

10 or greater on UltraSPARC and X86

 UNIX – HPUX

11iv2 with patches

 IBM z/OS  

Software: z/OS 2.4, z/OS 2.3, z/OS 2.2, z/OS 2.1, z/OS 1.13             

Hardware: z10-EC, z10-BC, z-10, z196, z114, zEC12, zBC12,

z13 (2964), z13 (BC (2965)), z14, zR1, z15



 IBM i

Software: IBM i 7.4, 7.3, 7.2, 7.1

Hardware: Power 7, 8 and 9

Operating System Type - Mobile

Version

PK Protect for iOS

15

PK Protect for Android

11

SDK                                                                      

 Language

Version

 Java

 v2019.7.1

Dependencies:

-      Java 8 or higher JRE

 Application Operating System

Version

 MacOS

Monterey (12), Big Sur (11)

 Windows

Windows Server 2019, 2016, 2012, 2012 R2

Windows 10, 8.1 (64-bit)

 Linux – RedHat

RedHat Enterprise Linux 8 (64-bit)

 Linux – SUSE

Linux Enterprise Server 12 (64-bit)

 Linux – Ubuntu

Ubuntu 18.04 LTS

Language

Version

  .NET

  v2020.2.4

Dependencies:

-      .NET Framework 4.6.1 and higher on Windows

-      .NET Core 2.1 on all platforms (LTS release from Microsoft)

 Application Operating System

Version

 Windows

Windows Server 2019, 2016, 2012, 2012 R2

Windows 10, 8.1 (32-bit + 64-bit)

 MacOS

Monterey (12), Big Sur (11)

 Linux – RedHat

RedHat Enterprise Linux 8 (64-bit)

 Linux – Ubuntu

Ubuntu 18.04 LTS

Other PKWARE Components

 Component

Version

PK Transparent Server Agent (TDE) - Server

Windows Server 2016, 2012, 2012 R2

PK Transparent Desktop Agent (TDE) – Desktop

Windows 11, 10, 8.1

PK Protect Reader – Windows

Windows 8.1 and higher

PK Protect Reader – macOS

macOS 10.13 and higher  


 

Features and Improvements

The following capabilities have been added to the Manager, Agent or both in the current release.

PK Endpoint Manager Manager

PK Endpoint Manager

Summary

Appliance / Windows

Version 19.2.51

Features

·       Support for provisional user accounts

o   A new ‘Authentications’ subpage has been added beneath the Identities page, which is the area that provisional user policies are created and managed.

o   Issuance of temporary accounts for users in domains that can’t authenticate with the PK Endpoint Manager (PEM)

o   Assign policies, lockers and assignments to users with provisional accounts

o   Facilitates the implementation of PK Protect across the entire enterprise

·       Expanded reporting filters

o   A new ‘filters’ section has  been added to the report properties dialog, which is accessed from the gear icon in the title bar of the individual charts

o   Customize existing dashboard reports to filter the results on AD users, emails, files and action types

o   Further specify the content of high-level dashboard charts, based on administers specific needs for information

·       Dashboard search capability  

o   A new ‘Search’ subpage has been added beneath the Dashboard page, which is the location where you can execute report search queries.

o   Allow administrators to define their own report content, using as AD users, emails, files and actions search / selection parameters

o   Ability to use individual or combinations of multiple criteria to fine-tune the results

·       Dashboard drill-downs   

o   Administrators can select information inside a chart (example: click on a pie slice) to auto-create additional information, based on the context of their selection

o   Improve the ability to generate and share context based reports

·       TOTP for encryption and decryption actions

o   PK Protect’s multi-factor authentication capability has been expanded to support Time-based OTP (Time based one-time passcode) for manual encryption and decryption actions

o   Enhanced security for the protection of sensitive information by enforcing multi-factor authentication as a prerequisite

·       API support for the ‘Deployments’ feature

o   Support for using the PK Protect deployments feature through and API, as opposed to the PEM UI


PK Endpoint Agent

Summary

Windows, Mac, Linux

Version 17.20.0011

Features

·       Support for provisional user accounts

o   A new ‘Authentications’ subpage has been added beneath the Identities page, which is the area that provisional user policies are created and managed.

o   Issuance of temporary accounts for users in domains that can’t authenticate with the PK Endpoint Manager (PEM)

o   Assign policies, lockers and assignments to users with provisional accounts

o   Facilitates the implementation of PK Protect across the entire enterprise

·       TOTP for encryption and decryption actions

o   PK Protect’s multi-factor authentication capability has been expanded to support Time-based OTP (Time based one-time passcode) for manual encryption and decryption actions

o   Enhanced security for the protection of sensitive information by enforcing multi-factor authentication as a prerequisite

·       Windows 11 right-click menu support

o   PK Protect listing in primary right-click menu



Other

Summary


 

 

Fixed Issues

Component

ID

Summary

Details

Affected Version

PEM

MGR-4582

AD connection errors causes agents to unlink

PEM no longer returns exception to client when AD connection with PEM fails

17.0+

PEM

MGR-4583

PEM failed to import Discovery Filter Bundles with a regex pattern

When processing the upload, the PEM would fail to import due to issues with the regex being added.

19.1+

PEM

MGR-4618

Exhaustive Group Membership doesn't work across multiple unrelated forests

When the PEM was configured with multiple connectors for multiple forests, an exhaustive search setting was failing to perform the search across forests.

18.5+

PEM

MGR-4596

Error processing empty lines in dictionary uploads

The PEM failed to parse empty lines in a dictionary upload.

18.0+

PEM

MGR-4581

AD Connectors not staying in prioritized order

An issue processing an invalid character from legacy version of the PEM prevented edits to be saved

18.0+

Client

ARC-2869

Linux/Unix agents not honoring PKMETA_HOME variable

When setting an environment variable for advanced configurations, the agent was ignoring the value previously

17.0+

Unpacker

ARC-2929

PDF with wingdings font errors in discovery/redaction

No redaction character could be found in the font set, throwing an uncaught exception

17.0+

Unpacker

ARC-2901

UTF8 characters not being redacted

UTF8 characters in dictionaries not encoded/decoded properly in processing

17.0+


PK Endpoint Manager Appliance – OS and Major Packages

For a full list of the packages included in your appliance, see the Systems/Packages page.

 

PKWARE Enterprise Manager Virtual Appliance

Package / OS

Version

Ubuntu

20.04.4 LTS  (OS upgraded to address CVE #2022-0847)

Dotnet-host

6.0.3-1

Dotnet-runtime

3.1.23-1

Apache2

2.4.41-4ubuntu3.10

Postgresql

12+214ubuntu0.1

Openssl

1.1.1f-1ubuntu2.12

Python3

3.8.2-0ubuntu2

 

PKWARE Software Checksums

New PEM Updates:

Type

Sha256 Checksum

Windows Installer

CDCBACCB37A3E77982005E3C4A4755B5070EA0DDFDF28914FBD21188E50A31E9


Appliance Upgrade

6B3217A938D796B1AB80C116132CA38AE387D94E51415BBB1C254A7C1257C45E


Appliance OS Upgrade

63B91F77FBEBD996E20D4CF98038C9BC1EAD0F8F6BC6582A30DF1F0600085080

 

 

Base PEM VM:

Format

Sha256 Checksum

OVA

A7D372935FD5FFEDB21603355898C12E37562945D327B9FD608ED51865D44404

 

QCOW2

8B5474BDBE96BB9D0A00CE142BD0CAADA5FE2BC87CC82C74A47134AB42B0E5DE

 

VHD

E2503B080E858F10DADBD340FD8B931535AE07D3DB9E7BA017C5C3121CBC816D

 

 

PEM Supporting Software:

Product

Checksum

PowerShell Azure App Helper (Create App)

C1D169C0B20980D4E7C80E883D149E345971F75CF6ED4DDFB5AFD7CC36802164


PowerShell Azure App Helper (Delete App)

189BBFB48022FCE61146E3FA66BAD3E438B70D816B6EFB77CABEBB185207DAB8


Elasticsearch 7.9.2

4170906335279E5697FCE15C8C8326AEAF8255FB442D9FE6C5A7527E150B5526

 

AdoptOpenJDK 11

6EB277A3E9305FDF380900D20F4EF7A474F13FDBC92F7709B57945F6FFDC80FC


 

PK Endpoint Agent (Archive Agent):

Platform

Checksum

Windows Masking 64-bit


C63865DE0DB0FD19D4801B42032A8FF5CE7EA1687B51DE196F93E50A7506D722

macOS

0d9993573b3ffa6b11f5bdc9d8357e122d71eef5e6d4c892af1db206e2e70030


deb 32-bit

a4f8bdb91f67aafdfea399fce3ebfaf5ff201a614ca39defa07d672023929484


deb 64-bit

ad50315861e701f955a9379b7bfd9141c52bb73e5635927f57491c961cc02605


rpm 32-bit

bc6cd25fb400a4ebabc85bfc439e8d3f9ed350ae9a7628fcf8cc70da661f65fa


rpm 64-bit

a8a58b53fa434ab0725f171ac4587f5ec6a6185926c6eff7a9b786d73a1fd9a2


Linux Discovery Supplemental Package

974590AECFBFB1B14C6F1B6791FE0FAE8D9BEDEA877654AC7BA629CEE1912287

aix bff

24ff7a41a6038435fe9ca7b36ce6aa8f5a1ec14da681c3ba8bc665cae2e26a0a


sun4u pkg

6fba7a001d5936bd640c3f46374250446808d638c76adbf7240097cd791e718d


i86pc pkg

c1625f24d3f5518f8d6a958801873012e480819455726897f332fbd63849be77


 

Windows Deployment JSONs:

Type

Checksum

Upgrading from 16.9 or newer

D74F16F269A528ACE93F81417ED59628D3DC68F591C48ECB68C43AAC202D033B


Upgrading from 16.8 or older

DDB814898B9EEE45F0674A5D367FC44BA8497936DFBA7253FD6F23BE58951970

 

 

Transparent Server and Desktop Agent (TDE)

Download

Checksum

DesktopTDE 64-bit

3882FB6F73DFF28573419BCF20ADBD7E96E578E7982561DB4CD1A02BE0FDB4BF


DesktopTDE 32-bit

2B7E93C30CF216D0F578EECD66413E8F42EE238ABACCB012BB989669215EBFE3


TDE 64-bit

8D047EDCECE869601B1DF555DB395585DCDF4B8C6A516D14063B8A0A193E5E8B


TDE 32-bit

4C30539B5740AEFF70C008580D143999A9A7467BDF92A24974758B227E17E59D


 

Classification

Installers

Checksum

Boldon James Manual Installer

BA433550CD65DD99BF44527FF1D68B532C0DD5D59A8C9F10F71062DE8A5D1FEB


PKWARE Bundled Installer

CB77049DF9935C33401C996660D674A32D23B841A8748DA23716F224160411A3


 

Related documentation


Questions and Support

Support Hours and Contact Information

  • Monday through Friday 8-6 Eastern Time Zone
  • Technical Support 937.847.2687
  • Customer Service 937.847.2374
  • Request Tech Support Form

Support Links