Enterprise Random Password Manager: Revision History

• Added: Web Service Interface, exposes hundreds of functions via SOAP & WSDL
• Added: Powershell CMDLets to make use of new web service interface and functions
• Added: Password Compartmentalization - 4-Eyes password retrieval (FR 379, 380)
• Added: Standalone zone processor installer (FR 309)
• Added: Certified McAfee EPO integration - EPO can consume information from ERPM
• Added: Certified Qualys Integration
• Added: Service Now help desk system integration - event sinks and ticket verification
• Added: Support for customized SAP database - database information not at default/expected location
• Added: Cisco node now handles VTY and alternative login credentials (FR 465)
• Added: Password check-out to a group (FR 354)
• Added: Support for SQL native client - adds support for OLEDB and high availability database mirroring (FR 441)
• Added: ObserveIT integration point within password retrieval website
• Added: Additional heartbeat monitoring to handle more RPC timeout cases for unhealthy systems
• Added: Auto-Index support for MS SQL 2012
• Added: Log archiving
• Added: Each platform now has own default password checkout limits
• Changed: TN3270 node types now use Linux logic - old answer files and process will not work
• Changed: Cached database connection handling to account for intermittent database unavailability
• Changed: Oracle password change no longer automatically attempts an account unlock; option is selected on password settings tab at job creation
• Changed: Audit logs are exported as a zip file rather than a potentially large CSV file
• Updated: Cisco node and response files to reflect new password change options
• Updated: Handling of propagation subsystem code to better handle memory leaks found in O/S stack
• Updated: Oracle connection code for better scaling
• Updated: Oracle connection pool handling
• Updated: Oracle DB algorithms to improve performance when using an Oracle backend
• Updated: Dashboards now use .NET framework 4 (do not use .NET 3.5 SP1)
• Updated: Updated license checks algorithm to improve program start time
• Updated: Handling of string replacement propagation when field became too large
• Fixed: TN3270 support was broken
• Fixed: SAP support was broken
• Fixed: Account Elevation jobs could immediately de-elevate when multiple deferred processors were active (Case 629)
• Fixed: Sybase ASE would not use a custom defined (non-default) port (Case 628)
• Fixed: Auto-SSH functionality would not work when passwords contained custom characters (Case 609)
• Fixed: Microsoft System Center Service Manager integration was not working for SCSM 2010
• Fixed: HP Service Manager integration was not working
• Fixed: File Store accessibility via SDK was not working as expected
• Fixed: IPMI scan was not properly associating credentials used during an IPMI scan when devices were found
• Fixed: IPMI did not commit IP address change when IP was changed on an existing device
• Fixed: System memory leak which led to system instability
• Fixed: System handle leak which led to system instability
• Fixed: Sorting the job queue could cause asserts
• Fixed: Function block error when checking in a non-Windows password and "Check if password in use option" enabled
• Fixed: Function block error when checking in a non-Windows password and "Log to application log if password in use option" enabled
• Fixed: Heartbeat monitor was not killing outstanding threads when enabled to do so
• Fixed: Missing SharePoint 2010 icons caused asserts in program log
• Fixed: Missing SharePoint 2010 icons orphaned elements under the "All discovered uses node" of an account
• Fixed: Account elevation comment could cause URL string to become to long and cause an operation to fail
• Fixed: Generate Stats Fullscan was not running against all DB tables
• Fixed: User supplied names for custom propagations were not persisting when propagation was created

• Removed: Support for Windows Server 2003 as a hosting platform
• Added: Additional user interface languages: Danish, Dutch, Finnish, Hebrew, Hindi, Japanese, Korean, Norwegian, Russian, Swedish, Tagalog
• Added: SAP Certified password management via SAP NetWeaver Gateway (We are now an SAP Partner)
• Added: More event sinks
• Added: Additional permissions for viewing password history
• Added: Additional permissions for viewing account activity
• Added: SDK options for file vault management
• Added: SDK options for shared password lists
• Added: Automatic Index Creation deadlock resolution via index deletion
• Added: Add account lockout for web access (website options)
• Added: Dialog to monitor user lockout status and reset logouts selectively
• Added: Control for number of rows to export when exporting audit logs from website (web site options)
• Added: Active Directory domain account restrictions to target OUs for user discovery or exclusion from discover
• Added: OLEDB timer override (Datastore Config) to aid in slow databases and long running queries
• Added: RPC Kill timer to help deal with hung RPC calls to unhealthy Windows systems
• Added: Password change provides new option to unlock an account (Windows)
• Added: SOAP web service interface
• Added: Explicit impersonation in the SOAP web service
• Added: OData web service interface
• Added: Support for international characters in email messages
• Added: For non-Windows systems, password jobs can now load any stored credential
• Added: Password history for shared password lists
• Added: Can now specify SSH port on auto-SSH connection per system
• Added: Can now auto-SSH for custom account store types that use SSH
• Added: Wild card search in website for account names when mandatory account search requirement is enabled
• Added: SDK option to retrieve stored passwords and ignore password checkout flags
• Added: Email field cache for password requests in the web interface when users do not have a pre-defined email address
• Changed: When a system is added to the restricted systems list after being added to a job, the job will remove the restricted system on subsequent run
• Changed: Cloned job status and last run are set to has not run rather than the cloned job's status
• Changed: Certain logging functions and heuristics to try and avoid confusing log messages
• Changed: Startup algorithm to improve console launch time when management set objects have overlapping ranges (duplicated systems)
• Changed: Installation routines for Dashboard visualization installations
• Changed: SDK password set command will add passwords to shared list if not found
• Changed: Changed several file vault logging messages to include the symbolic name of the file affected as well as the fileID
• Changed: When setting auto-logins, system will check for target computer's bit level (32 v 64) to write to the correct registry location
• Changed: When selecting multiple accounts to create a password change job and choosing the run immediately option, jobs get scheduled to run now rather than actually attempting to run immediately
• Updated: IntegrationComponents supplemental installer can now choose proper installation path for zone processor installations
• Updated: Microsoft RDP ActiveX component updated to version 5.2.3790.4252
• Updated: Updated EasyMail SMTP & SSL components to version 6.5
• Updated: ARCSight CEF output and parsing
• Fixed: Windows 2008 R2 systems OS TYPE was incorrectly reported as Windows 7 systems in web interface
• Fixed: Systems added to restricted systems list after being added to a job would cause job to fail
• Fixed: Cross-site scripting exploits
• Fixed: Service accounts defined via UPN are properly handled on first password change without requiring pre-discovery
• Fixed: Performing an IP scan for systems when OS type is set for Linux and the system responds could cause crash
• Fixed: Default button on website login page did not function
• Fixed: Integrated authentication in website did not work automatic login was not also enabled
• Fixed: Syslog CEF output of heartbeat monitor event sink would cause error rather than log
• Fixed: Certain scenarios could cause the job thread dispatcher to prematurely delete state resulting in memory leaks
• Fixed: When management set type was set to Linux, objects under the Linux/UNIX node would be added or removed simply because the management set was updated
• Fixed: Upgrade code when dealing with custom schemas
• Fixed: Database migration steps not present in v4.83.4 could cause basic password change jobs to fail
• Fixed: Database migration steps not present in v4.83.4 could cause propagation steps to fail from previously existing jobs
• Fixed: File store problems when using custom schemas
• Fixed: Compliance Database problems when using custom schemas
• Fixed: Custom LDAP filters for Active Directory domains were not working
• Fixed: Oracle password changes were not propagating
• Fixed: Oracle instances page would not show all correct oracle instances unless account had all access
• Fixed: Deleting a password from password history would delete all entries from the history for that computer/system
• Fixed: Could not enter the same system name into multiple custom account stores
• Fixed: RSA Login page in the web interface prevented set pin mode to work correctly
• Fixed: RSA SecurID did not work in next PIN mode
• Fixed: Displayed number of targets in a management set was not including custom account stores
• Fixed: Saving new passwords to the password store with encryption disabled would log asserts
• Fixed: Web interface account filters would not work if the user also had account masks defined in their delegations
• Fixed: Alternate administrator accounts access and stored credential access not working in certain scenarios
• Fixed: Web application would not show account filter if a non-All access user was logged in
• Fixed: Password recovery email alert used incorrect email template for notification
• Fixed: Main dialog would exit when admin reporting job could not be verified
• Fixed: Importing delegation identities and permissions to fail because it expected the import file to contain extra columns
• Fixed: Scenario where users could not create new delegation permissions on files in the file store
• Fixed: Text for requesting a password list password showed deny request
• Fixed: SDK (COM version) GetStatusSettings would fail
• Fixed: Users without grant all access cannot see accounts other than Windows
• Fixed: "Run job on new systems" was being erroneously set

Click this link for complete revision history.