Privileged Remote Access 22.1.1 Release Notes

January 20, 2022

Requirements:

  • This version of Privileged Remote Access has been certified for physical BeyondTrust Appliances, virtual BeyondTrust Appliances, and cloud deployment models.
  • 22.1.1 PA requires Base 6.2.0.

New Features and Enhancements:

  • Added manual association of accounts to Jump Items Associations. You can define a direct association between Vault accounts and specific Jump Items. You can further define the association between Vault account and Jump Items based on specified Jump Item attributes.
  • Vault Windows Service Account Management.
  • Added Vault account policies, which provide a method to define account settings relating to password rotation and credential checkout and apply those settings to multiple accounts at once.
  • Added Vault Scheduled Discovery. Define a preset day and time to automatically run Vault Domain Discovery jobs.
  • Vault account limits increased to 60,000 accounts for import, management, and rotation.
  • Vault Discovery error enhancements.
  • The Vault Account Index page now lets users configure which columns are displayed.
  • The Username column is now shown in the Vault Account view and search filters are remembered after editing.
  • Password Safe integration.
  • Administrators can assign session policies to all Jump Items, enabling additional granularity for Jump Item policies.
  • Added Dark Mode for the desktop access console.
  • Increased Vendor Group limit to 100.
  • Web Access Console now supports System Information.
  • Web Access Console now supports External Access Invite.
  • Web Access Console now supports larger file sizes in File Transfer.
  • New Privacy Screen for Windows 10 20H1+.
  • /console to /login authentication improvements.
  • Added load balancing to ECM clients to reduce response times.
  • Reports are now sorted newest first.
  • UI updates to /login, Web Access Console, and Click-To-Chat.
  • Added a new reporting API to download the zipped License Usage Report.
  • Added new option to the Power options Special Actions menu to bypass auto-Login. This option only displays if the ForceAutoLogon registry entry is set to 1, and the user has the Allow Elevated Access to Tools and Special Actions on the Endpoint permission.
  • Windows 11 is now supported.
  • macOS 12 Monterey is now supported.
  • Nutanix is now supported as a hypervisor for Virtual Appliance deployment.

Issues Resolved:

Administrative Interface

  • API
    • Increased API version to 22.1.
  • Vault
    • Resolved issue with canceling a Discovery job showing two status messages.
    • Resolved issue with importing the same endpoint in different ways, causing more than one endpoint license to be used.
  • Security Providers
    • Resolved issue in which non-admin users were not able to edit Jump Groups if the site had ECM enabled.
    • Resolved issue in which prompts from an RSA server did not show line breaks in /login.
    • Removed the Confirm New Password and Email Password Reset Link to User options from the User Edit page for External Security Providers.
  • Group Policies
    • Resolved issue with sometimes not being able to edit Group Policies.
  • Failover/Custering/Migration
    • Resolved issue in which invalid hostname errors clears out the input form.
    • Resolved issue in which Jump Item events created on a site in failover show duplicate Jump Item events run by SYSTEM after sync has been performed.
  • Miscellaneous
    • Resolved issue with checkmarks no longer being displayed in some autosave fields.
    • Resolved issue with using apostrophes in OutBound Event emails.

Clients

  • Access Console
    • Resolved issue in which application sharing did not display the dropdown menus for some windows.
    • Now, when a user stops typing or controlling the mouse, the keyboard and mouse ownership notifications become blank.
    • Resolved issue in which command shell sessions did not exit correctly.
    • Password fields now have focus if the username field is already populated.
    • Resolved issue in which email instructions were visible when email invitations were disabled.
    • Resolved issue with exporting registry keys within elevated sessions.
    • Resolved several issues with copying and pasting into the Windows login screen, lock screen, and UAC screen.
    • Web Access Console now falls back to Performance and Quality since Video-Optimized is not supported.
    • Resolved issue with logging backspace characters in a remote shell session.
  • Web Access Console
    • Resolved issue with closing a session while a file is being transferred on the File Transfer tab.
    • Resolved issue with the tab order in the Web Access Console.
    • Resolved issue with the access key invite being mistakenly displayed.
  • Shell Jump
    • Increased default Shell Jump terminal size to 132x42.
  • Mac
    • macOS 10.13 is no longer supported. macOS 10.14 is now the minimum supported version of macOS.
    • Resolved issue with access console running on a Mac and sending dead keys to the customer.
  • RDP
    • Resolved issue with using local printers through RDP sessions.
    • Resolved issue with RemoteApps through RDP proxy not starting correctly.
    • Resolved issue with the RDP Session Forensics Monitor failing when there were multiple concurrent users.
    • Resolved issue with not displaying Interactive logon events when connecting to RemoteApps.
    • Larger fixed RDP screen sizes have been added.
  • Linux
    • 32-bit Linux clients are no longer supported.
    • Resolved issue with Linux access consoles sometimes not sending the correct key injection type through RDP sessions.

Notes:

  • Supports upgrades from Privileged Remote Access 21.1.2 PA+.
  • Requires Integration Client 1.7.3.
  • Requires Endpoint Credential Manager (ECM) 1.6.0.
  • 22.1.1 PA includes VSC 1.2.5.3.
  • This release is certified with the following mobile versions: