Endpoint Privilege Management SaaS 24.3 Release Notes

May 7, 2024

This release notes document covers the following:

Requirements:

  • Microsoft .NET Framework 4.6.2 (required to use EPM Windows adapter)

For more information about Windows or macOS requirements, see the Privilege Management Release Notes.

Package Manager

  • Introducing the EPM Package Manager for macOS. The EPM Package Manager (Package Manager) is an optional feature in EPM which helps organizations install and maintain the Endpoint Privilege Management client and the EPM adapter. Package Manager can also automatically update when a new version is detected, taking even more burden off estate administrators. The new Configuration profile version 2.1.0 is recommended.
    • Configure the Package Manager installation string
    • Download the Package Manager installation executable
    • Configure update settings for a computer group
    • Track computer and computer group updates
    • Set throttling and preferred update times so that updates can be strategically and safely installed.

Console

New Features and Enhancements:

Analytics

  • Improved the clarity of the modal message shown when any unsupported event types are selected for the bulk action Add to Policy in the Events grid.
  • Added authorization events to the Events grid. You can now find and filter on events which required specific authorization/authentication criteria to determine if users are in an appropriate workstyle for their role.
  • Display and filter on macOS event property, Authorization Request URI, in the Events grid. You can now find macOS events which required specific authorizations.
  • Increased the width of filter fields to improve readability and provide ease of use in selecting the relevant filter.

General

  • Removed the limitation of creating a maximum of 10 API accounts. Creating an unlimited number of API accounts accommodates varying business requirements.
  • Removed the Notification API Configuration Details section from Authorization Request settings if it is not in use. This functionality moved to Configuration > API Settings > Create An API Account.
  • Added Google as an Open ID Connect provider. Customers have more options when configuring their Open ID Connect integration.

Issues Resolved:

Policy Editor

  • Resolved an issue with saving a computer filter (Workstyle > Filters > Computer Filter) with a host name ending with a - (hyphen).

Privilege Management Reporting

  • Resolved an issue with reports not loading when the On-Demand or Auto filter is applied to Target Types and the user clicks Host count or Process count.

Analytics

  • Improved the initial load time of the Dashboard.
  • Improved the query time of the Applications grid.

General

  • Resolved an issue with resyncs timing out when an Entra ID group was deleted.
  • Resolved an issue with the Edit Policies permission that was preventing users from promoting a policy to the latest revision.

Known Issues:

None.

EPM Windows Adapter

No updates.

EPM Mac Adapter

No updates.

Notes

None

Components:

  • PM Reporting Database: 23.9.13
  • Policy Editor: 24.3.206
  • PM Reporting UI: 24.3.110
  • Event Collector: 24.3.10
  • EPM SaaS: 24.3.766

Compatibility:

 

Do not install a new adapter version before you are running a version of Endpoint Privilege Management SaaS that supports it. Installing an unsupported adapter can result in endpoints that no longer connect. You will be notified before your instance of Endpoint Privilege Management SaaS is upgraded.

Supported Versions

  • PM Windows Adapter: Recommended: 24.3.766 | 24.2.499 | 24.1.581 | 23.9.578 | 23.8.515 | 23.7.356 | 23.6.562 | 23.5.516 | 23.4.424
  • PM for Windows: Recommended: 24.3.294.0 | 24.1.108.0 | 23.9.225.0 | 23.7.150.0 | 23.6.76.0 | 23.5.212 | 23.3.130.0 | 23.1.259.0 | 22.9.268 | 22.9.243 | 22.7.205.0 | 22.5.184.0 | 22.5.179.0 | 22.3.145.0 | 22.1.95 | 21.7.152 | 21.5.106 | 21.4.91.0
  • PM for macOS: Recommended: 24.3.0.1 | 24.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3 | 23.3.1.1 | 23.3.0.1 | 23.1.0.1 | 22.9.0.22 | 22.7.0.83
  • PM macOS Adapter: Recommended: 24.3.0.1 | 24.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3
  • PM Rapid Deployment Tool for macOS: Recommended: 24.3.0.1 | 24.1.0.1 | 23.1.0.1 | 23.9.0.1 | 23.7.0.1 | 23.5.0.1 | 23.3.0.1 | 23.1.0.1 | 22.7.0.9 | 22.5.1.1 | 22.5.0.1 | 22.3.145.0 | 22.1.0.1 | 22.1.0.74
  • PM Response Generator for Windows: Recommended: 24.3.294.0 | 24.1.108.0 | 23.9.225.0 | 23.7.150.0 | 23.5.212 | 23.3.130.0 | 23.1.259.0 | 22.9.268.0 | 22.9.243.0 | 22.7.205.0 | 22.5.184.0 | 22.5.179.0 | 22.3.145.0
  • PM Response Generator for macOS: Recommended: 24.3.0.1 | 24.1.0.1 | 23.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3 | 23.3.0.1 | 23.1.0.1 | 22.7.0.83 | 22.5.1.1 | 22.5.0.1 | 22.3.0.1

Supported, but Deprecated, Versions

These versions are compatible with EPM but best avoided. Support for deprecated versions will be removed in the future.

  • EPM Windows Adapter: 23.3.256 | 23.2.506 |23.1.942.0 | 22.9.393.0 | 22.8.396 | 22.7.271 | 22.6.273 | 22.5.144 | 22.4.227 | 22.3.310 | 22.2.584
  • EPM macOS Adapter: 22.5.1.1 | 23.3.0.1 |23.1.0.1 | 22.9.0.22 | 22.7.0.83 | 22.5.0.1 | 22.3.0.1 | 22.1.0.74
  • PM MMC snap-in: 23.9.225.0 | 23.7.150.0 | 23.5.212.0 | 23.3.130.0 | 23.1.264.0 | 22.9.268.0 | 22.9.243 | 22.7.205.0 | 22.5.184.0 | 22.5.179.0 | 22.3.145.0 | 22.1.95 | 21.7.152 | 21.5.106 | 21.4.91.0 | 21.3.135 | 21.2.98 | 21.1.133