Sassafras KeyServer Platform v7.7 (2021-05-26)

The table below documents revisions to the Sassafras KeyServer Platform v7.7 components up through the 2021-05-26 release date. Known issues slated for a fix in the next release can be viewed here. For important cautions that must be observed when installing components from this release, consult the Notes & Warnings document.

If you have version 7.6 components on your site (from an install of the previous version), the 7.6 Upgrade Warnings and 7.6 Component History documents may also be of interest.


  • Bug fix: Improved detection of VM host (macOS only) (5501)
  • Bug fix: Tunnel connections do not fail over to direct connections under certain circumstances (5516)
  • Change: Support tunnel transitions through proxies like nginx (5491)
  • Bug fix: Some stringified JSON objects are not formatted correctly in certain cases (5510)
  • Bug fix: Scheduled scripts use default settings instead of preset values (5514)
  • Change: Support tunnel transitions through proxies like nginx (5491)
  • Bug fix: Minor UI improvements (5486)
  • Bug fix: Dark Mode not detected correctly on Big Sur (macOS only) (5488)
  • Bug fix: Computer Last Audit and Base Audit are not set during import (5499)
  • Bug fix: Enforce correct maximum length of Notes for Computers, Users, and other objects (5503)
  • Bug fix: Windows take a long time to appear at launch, ongoing sluggishness while running (5517)
  • Change: Supply a constant-value column for use in import instructions (5509)
  • Bug fix: Potential crash in rare circumstances when under heavy load (5340)
  • Bug fix: Object alignment buttons on floorpan edit page are non-operational (5484)
  • Bug fix: Saved results of Primary Computer and Primary User extras is incorrect if some values contain commas (5487)
  • Bug fix: Service stops responding under very heavy load (5492)
  • Change: Add support for using host validation services to generate SSL certificate (5515)


  • Bug fix: High CPU usage in some cases when a process with DLL tracking is running (Windows only) (5455)
  • Change: Include contents of btrfs file systems in software audits (Linux only) (5467)
  • Bug fix: Idle events show with simultaneous start and stop times (5461)
  • Bug fix: Opening Purchase Detail windows can be slow in some cases when there are many purchase upgrades (5479)
  • Bug fix: Password cannot be set on a newly created account until the account details have been saved (5082)
  • Bug fix: Crash when enabling a script from the Settings page (5460)
  • Bug fix: Double-clicking a row expansion triangle on list pages can duplicate the expanded contents (5462)
  • Bug fix: Map set page does not show list view when embedded with frame-core prefix (5471)
  • Bug fix: After adding a map to a division-based map set, a new map cannot be added until the page is refreshed (5474)
  • Bug fix: Saving changes on Time Set details page does not adjust the UI to reflect the save (5475)
  • Change: Improve tag-based map creation, simplify how computers are added to maps (5452)
    Remote Broker
  • Bug fix: Remote Broker denies connection to the client when server clocks differ by even just a few seconds (5458)


  • Bug fix: Use a better default program name for electron-based programs (5391)
  • Bug fix: Erroneous connection errors can be displayed under certain circumstances after program launch (5397)
  • Bug fix: Program is allowed to run if auth against the server is cancelled, but there is a local node/lease license on the client (5424)
  • Bug fix: Error code returned from KeyObtain API is ambiguous in one particular case (5425)
  • Bug fix: Custom launch message is not updated in client-cached keys during online launch (5429)
  • Bug fix: Fail-over from direct connection to tunnel does not work in certain circumstances (5438)
  • Change: Improve identification of python-based programs (3840)
  • Change: Always send a software audit when the client is installed (4364)
  • Change: Support additional client installer customizations (5395)
  • Change: Improved identification of some programs that use a common launch executable (5398)
  • Change: Properly identify iOS apps installed on Apple Silicon Macs (5416)
  • Change: Improve discovery of the model names of computers from certain vendors (5422)
  • Bug fix: Printer IP addresses are not imported from PaperCut (5394)
  • Bug fix: On major upgrade, some audit files are copied when the option not to copy them has been checked (5414)
  • Bug fix: Custom filter that test for presence to a tag does not work in Policies window (5439)
  • Bug fix: Product start/stop events are not written along with certain offline program launch/quit events (5445)
  • Change: Always include the connection address in Admin Journal events when applicable (5399)
  • Change: Use single serial number ID type when setting computer ID types in web-based initial setup (5400)
  • Change: Increase the maximum length of purchase names (5410)
  • Change: Periodically import printer ink levels from PaperCut (5437)
  • Bug fix: Minor display glitch when a file is dragged onto a drop field in script dialogs (5390)
  • Bug fix: Auto-update Enabled setting is not displayed consistently between KC and KR (5393)
  • Bug fix: Some columns in Policies windows do not sort in the correct order (5405)
  • Bug fix: Custom columns do not display correct data in Policy Node lists (5423, 5433)
  • Bug fix: Clicking Browse in script prompt dialog shows wrong window title and type menu (Windows only) (5432)
  • Bug fix: Tag fields do not accept pasted text unless the edit field is active (5440)
  • Bug fix: In some cases the session icon is not displayed for a computer for a short time when someone is logged in (5451)
  • Change: Add support for importing Time Sets from a comma-separated text file (1927)
  • Change: Prohibit admins from deleting roles and groups of which they are members (5401)
  • Change: Minor UI improvements (5428)
  • Change: Indicate that a printer is disabled in Status field (5436)
  • Bug fix: During major upgrades, some KeyReporter configuration files are not copied to the new server data folder (5396)
  • Bug fix: The first document added to a purchase does not appear in the list until the page is refreshed (5431)
  • Bug fix: Updating Printers from PaperCut "Now" in Printer Settings does not run a full import, like it does in KC (5441)
  • Bug fix: Innocuous content in some error responses triggers a false positive report in some security scanners (5444)
  • Change: Support creation of new purchases in web UI (4409)
  • Change: Add options to Expiring Entitlements and Expiring Policies widgets (4891)
  • Change: Add customizable quick view of details on Computers, Printers, and Purchases pages (4981)
  • Change: Add support for editing install codes and owners on Purchase detail pages (5052)
  • Change: Integrate published Extras onto Extras Settings panel (5389)
  • Change: Minor UI improvements (5407, 5409, 5417, 5419, 5449)
  • Change: Add back-end support for more options in ServiceNow app (5418)
  • Change: Save selected (displayed) columns to Excel, Text, XML formats instead of saving all columns (5426)
    Report Modules
  • Bug fix: Name and time columns missing from Login Counts (DIV) and similar reports saved as Excel files (5427)
  • Change: Add more columns to Hardware report (3698, 4827, 5420)
  • Change: Rename some columns for clarity (5392)
  • Change: Show the number of unique computers on each line of Usage (PROD x user) reports (5443)
    Remote Broker
  • Change: Add support for audio output in remote broker (5446)


  • Bug fix: Launches of some Bentley programs can pause for several minutes (Windows only) (5140)
  • Bug fix: Server address is sometimes reverted to the default when installing an upgrade (Linux only) (5339)
  • Bug fix: In certain Linux configurations the client agent process is not started automatically at user login (Linux only) (5344)
  • Bug fix: Encrypted status of the system volume is not correctly reported in the hardware audit (Windows only) (5357)
  • Bug fix: Hardware information is not always sent to the server when logging in (5376)
  • Change: Improvements to program and version detection based on installed package information (Linux only) (4908)
  • Change: Detect and exclude special redundant volumes from audit scans (Mac OS only) (5058)
  • Change: Identify some additional Linux distributions (Linux only) (5367)
  • Change: Recognize and report the computer as virtual when running within VirtualBox (Linux only) (5371)
  • Bug fix: KSPurchaseCodeOwners table is not included in exported data (5106)
  • Bug fix: Primary Map setting does not take effect until KeyReporter is restarted or other config changes are made (5351)
  • Bug fix: OS Family name is not displayed for versions of macOS higher than 11.0 (5375)
  • Change: Potential for excessive CPU usage if Printer refresh interval is set too low (5348)
  • Change: Support AD Federation Service for admin auth (via OIDC) (5345)
  • Bug fix: Last Audit column in saved Hardware reports does not sort correctly (4842)
  • Bug fix: Sandboxing blocks valid report and import files from being selected in Open File dialogs (Mac OS X only) (4848)
  • Bug fix: In some cases using Tags as the targets produces a report with no results (5330)
  • Bug fix: Reconcile action makes improper suggestions when purchase start date is in the future (5331)
  • Bug fix: Minor UI improvements (5332, 5378, 5379)
  • Bug fix: Custom columns are not included in XML saved from Computers window (5346)
  • Bug fix: For main windows saved as KSR files, resulting file does not support saving as text format (5347)
  • Bug fix: Sample Computer in Program details windows displays raw ID instead of computer name for certain ID types (5349)
  • Bug fix: Current Usage column in Connected Clients window can show lower value than actual usage when many programs are tracked on a given client (5350)
  • Bug fix: Some reports fail when run against older server versions (5388)
  • Bug fix: State of displayed columns in saved report is not honored when opened in KeyConfigure (5335)
  • Bug fix: Minor UI improvements (4923, 4979, 5342, 5343, 5362, 5363)
  • Bug fix: In-page sign in on Dashboard page silently fails to authenticate, requiring re-login on the main login page (5354)
  • Bug fix: Admins mapped to Manager, Support, Staff accounts can't add one-click Reports and Extras to dashboards from within those pages (5358)
  • Bug fix: Search result page for primary map set shows geographic map when the map set has that option turned off (5363)
  • Bug fix: Screen reader data for some bar-chart widgets is reversed from visible values (5365)
  • Bug fix: Maps pages can be improperly or partially loaded when logged in with certain accounts using Active Directory authentication (5369)
  • Bug fix: Some Authentication modules cannot be configured on Settings page (5370)
  • Change: Add an option to include report files as enclosures in e-mail notifications (4388)
  • Change: Display Primary Map by default on main Maps page if a specific map is not given in the URL (5353)


  • Bug fix: Potential crash on systems that see many short login sessions (5307)
  • Bug fix: Clients connecting via tunnel will only audit on restart or login, don't get bulletin messages or notifications (5318)
  • Bug fix: Connections via tunnel can fail or stop working for a period of time (5323)
  • Bug fix: Potential crash when an audit is being sent on a client connected to the server via the tunnel (5329)
  • Change: Combine multiple serial launches of a process as a single instance to avoid excessive usage data (5292)
  • Bug fix: Running computer rules can change the login type if the computer is not anchored (5299)
  • Bug fix: Opening certain details windows can be slower than necessary when sub-tables are large (5314)
  • Bug fix: Renaming Admin roles, groups, and accounts in detail windows fails (5322)
  • Bug fix: Computers with long ID types are not properly added to the Assignments list of install codes (5327)
  • Change: Track actual (non-background/idle) program usage (5306)
  • Change: Record idle events when they happen instead of waiting for idle/active transition (5310)
  • Bug fix: Privilege to create Printer records is not listed in Admin details (5294)
  • Bug fix: Last Computer column in Users window is empty when the computer uses certain ID types (5315)
  • Bug fix: Minor UI improvements (5326)
  • Change: Set width of the left-hand list to default when switching to Standard View (5288)
  • Change: Add Install Codes panel to Computer and User details windows (5293)
  • Change: Apply "locked" option to all asset and custom fields in a computer record (5312)
  • Bug fix: Availability widget might display unwanted Divisions when limited to a Section (5285)
  • Bug fix: Force HTTPS option in Network settings does not change the setting when saved (5287)
  • Bug fix: Potential for short periods of unnecessary excessive CPU usage (5295)
  • Bug fix: In some cases computers cannot be moved into a different division (5300)
  • Bug fix: Under certain circumstances all users are blocked from map locations that are reserved (5301)
  • Bug fix: Potential hang under heavy load when certain connections are slow to start (5305)
  • Bug fix: Some files output in CSV format do not use standard quote-escaping (5313)
  • Bug fix: Minor UI improvements (5319)
  • Bug fix: Under rare circumstances, the first connection after startup can show as "KeyReporter Guest" (5324)
  • Change: Added a new widget to show number of policy users (5289)
  • Change: Show Custom computer columns on detail pages (5297)
  • Change: Added a way to save and import a report template (5311)
  • Change: Searching on Software pages will include matches within the product Notes field (5317)
    Report Modules
  • Bug fix: Some purchase reports might show incorrect cost amounts for multi-entitlement purchases (5290)
  • Bug fix: Saved reports can in some cases show all columns instead of just the columns selected in Builder (5296)
  • Bug fix: Some Purchase reports do not show total cost unless it has been entered for the purchase (5320)
  • Bug fix: Some Usage reports (for programs) can show lower usage if multiple versions of the same program are included (5325)


  • Bug fix: Clients with certain computer IDs cannot establish a connection through the HTTP tunnel (5277)
  • Bug fix: Minor UI corrections (Mac OS X only) (5279)
  • Change: Grant tunnel access based on private keys stored on the client (5255)
  • Bug fix: Minor UI corrections (5250)
  • Bug fix: Windows and lists filtered by tag are not correct after a tag has been removed from an object (5268)
  • Bug fix: Open Hours table on map Info tab is incorrect for the week after a switch to or from Daylight Savings Time (5270)
  • Bug fix: Certain computer ID types are incorrectly converted by KSdbConsist during upgrades (5272)
  • Bug fix: Server affinity file for tunnel service can get jumbled data in certain cases (5276)
  • Bug fix: In KeySight, server license usage is displayed based on computers instead of active clients (5262)
  • Bug fix: Reports don't include configured super-custom columns (Mac OS X only) (5266)
  • Change: Minor UI improvements (5264, 5281)
  • Change: Update Sassafras QS to version 14 in admin installer (Windows only) (5252)
  • Bug fix: When copying a map floorplan, only locations on the default map are listed as destinations (5257)
  • Bug fix: Under certain circumstances some fields on the Settings page are not displayed or are blank (5258)
  • Bug fix: Potential crash when adding an Extra archive that does not have the expected contents (5259)
  • Bug fix: Innocuous warning messages appear in browser console logs on some pages (5260)
  • Bug fix: Most Used Computers widget does not display any data (5261)
  • Bug fix: Incorrect column labels appear for super custom columns of computers (5267)
  • Bug fix: Intermittent or persistent failure to sign in, access to some data denied if sign in succeeds (5274)
  • Bug fix: Potential crash when internal connection to the server fails (5278)
  • Bug fix: Some reports show addresses formatted as IPv6 instead of IPv4 for clients connecting via tunnel server (5280)
  • Change: Minor UI improvements (5263, 5282)
    Report Modules
  • Bug fix: Some Purchase reports do not show total cost unless it has been entered for the purchase (5275)
    Remote Broker
  • Bug fix: Token errors result from Guacamole integration if KeyReporter Guest account is disabled (5251)
  • Bug fix: Remote Broker connections do not work over WebSockets in certain browsers (5254)


  • Bug fix: Client computers might appear as "off" on availability maps during background audits (5245)
  • Change: Support Copying of text in various client alert messages (5219)
  • Change: Track add-ins loaded into more host programs (Windows only) (5226)
  • Change: Suppress reporting of multiple launches for certain programs that spawn multiple processes (Windows only) (5239)
  • Bug fix: Computers show as "in use" after Software Audit Service makes a connection (5221)
  • Bug fix: Queries that join KSPurchaseItems table and KSPurchaseDocuments table return empty values for some columns (5240)
  • Bug fix: Vendor-supplied server licenses appear as AllSight instead of KeySight (5244)
  • Bug fix: Computers with certain ID types will not appear in the Product Audit data (5246)
  • Bug fix: Computers appear to be movable from read-only Sections, although the change is never committed (5212)
  • Bug fix: Custom fields appear as editable when the admin does not have permission, changes are not saved (5214)
  • Bug fix: Authentication module configs with "menu" controls are incorrectly displayed (5220)
  • Bug fix: Potential crash when reconfiguring authentication modules (Mac OS X only) (5224)
  • Bug fix: Potential for incorrect data conversion for some numeric values in ODBC results (Windows only) (5241)
  • Change: Allow Section Managers to create new Divisions within their section (3490)
  • Bug fix: Re-auth dialog on Dashboard page does not offer the Single Sign-on option when it should (5207)
  • Bug fix: Searching for certain computers results in "Not Found" details page even though the computers exist (5208)
  • Bug fix: Remote Broker connection shows a blank page when map names contain certain characters (5210)
  • Bug fix: Divisions created by a Section Manager are not placed within the section (5213)
  • Bug fix: Font family of in-map text objects defaults to serif when viewed in the Availability widget (5222)
  • Bug fix: Service seems to stop infrequently, possibly related to user load (5223)
  • Bug fix: Map reservations that restrict to a group are not available to certain authenticated users (5230)
  • Bug fix: Uploading an app archive to the Settings page sometimes fails (5233)
  • Bug fix: Add internal HTML markup to improve accessibility (5235)
  • Bug fix: Policy Users widget shows users who have had the policy reclaimed (5238)
  • Bug fix: Remote connection dialog stops showing the Download button until after a restart (5243)
  • Bug fix: Sign in always fails if the password contains "unicode" characters (5247)
  • Bug fix: Some reports are not listed on the Report Builder page when running stand-alone web UI (5248)
  • Change: Disable access to remote connection links for reserved locations unless user is a member of the reservation group (5232)
  • Change: Add a separate page to make access to App Extras easier (5234)
    Authentication Modules
  • Bug fix: Okta SSO authentication does not work with certain configurations (5217)
  • Bug fix: Single Sign-on might not be available for a few minutes after restarting the server (5225)
  • Change: Add a way to modify the user name passed to AD for authentication (Windows only) (5211)
  • Change: Add options for choosing the name format used by various authentication methods (5216)
    Report Modules
  • Change: Add indication of remote logins and usage in Event Dump and Session Dump reports (5228)
    Remote Broker
  • Change: Add configuration settings to set internal options passed to the guacamole tunnel (5242)


  • Bug fix: Under certain circumstances, a user can appear as logged in after they have been forced to log out (Mac OS X only) (5181)
  • Bug fix: Connections through a client tunnel service can fail if initial bootstrapping process was incomplete (5186)
  • Change: Configure the level of trust required for tunnel connections based on the "trust" option (5182)
  • Change: Update URL tracking to support newer versions of Edge browser (Windows only) (5188)
  • Change: Special case some program identifiers to distinguish between different programs (Windows only) (5206)
  • Bug fix: Copy additional files to the new KeyServer Data Folder when installing a major upgrade (Windows only) (5162)
  • Bug fix: Some new rights and privileges are not properly added to existing admin accounts after upgrading from earlier versions (5168)
  • Bug fix: Under certain circumstances, after one Admin Account is deleted other accounts cannot be deleted until after a restart (5172)
  • Bug fix: Printers are listed with disabled status after updating from PaperCut server version 19.x (5191)
  • Change: Only update the "Last Login" value for user sessions, not for background audit sessions (5153)
  • Change: Allow full administrators to connect remotely to computers even when they are in use (5178)
  • Change: Increase maximum length of external group names for mapping to admin accounts (5196)
  • Bug fix: Potential crash when copying and pasting or dragging and dropping Time Periods (5137)
  • Bug fix: Rename some admin permissions to more accurately reflect their purpose (5150)
  • Bug fix: Under certain circumstances, Scripts are not added to the Tasks menu until after a relaunch (5157)
  • Bug fix: Under certain conditions, "Show Dashboard in Browser" does not open the browser at all (5190)
  • Bug fix: Choosing "Check Product Definitions" does nothing when connected to a LabSight server (5199)
  • Bug fix: Innocuous warning message written to system logs by a system framework (Mac OS X only) (5200)
  • Change: Support external group for the built-in Administrators Role (5109)
  • Change: Computer login status is not shown as "in use" when the software audit service is the only active connection (5132)
  • Change: Minor UI improvements (5183)
  • Bug fix: Admin Alerts for new client versions are repeated even though the configuration has been accepted (5148)
  • Bug fix: Certain functionality is missing or altered when KeyReporter is running separately from the KeyServer (5154)
  • Bug fix: Configuration within the web UI of certain authentication modules does not work properly (5158)
  • Bug fix: KeyAccess auto-update is not triggered when client installers are configured in KeyReporter (5160)
  • Bug fix: Account details page is visible to external accounts mapped to built-in accounts even though there is no user information to display (5163)
  • Bug fix: Under some conditions searching for a product from the Software page will show no product matches (5170)
  • Bug fix: Install counts on Software page can grow arbitrarily large when filtering the list (5171)
  • Bug fix: Manage and PRS pages are viewable to anyone who knows the URL, although changes are not allowed (5173)
  • Bug fix: Product continues to appear on availability pages after changing map availability option on Manage page (5174)
  • Bug fix: Installed software list of a computer is displayed on map list page when clicking remote link (5177)
  • Bug fix: Copy IP (Host) Address buttons do not work in newer versions of certain browsers (5187)
  • Bug fix: Connection to specific computers from a map floorplan is unnecessarily rejected in certain cases (5195)
  • Bug fix: Map Availability setting cannot be saved in computer details page (5203)
  • Bug fix: Pop-up notification messages are positioned at the top of the page, so do not appear when the page is scrolled down (5205)
  • Change: Add Remote support for NoMachine (5113)
  • Change: Add allocated/available seat counts to Settings Information page (5146)
  • Change: Minor UI improvements (5147, 5149, 5192, 5193, 5204)
  • Change: Obscure sensitive authentication configuration fields on the Settings page (5152)
  • Change: Use hostname and suffix for "Host Address" remote connection option, other minor changes (5161)
  • Change: Refresh map page when a remote connection is denied, to show latest information (5175)
  • Change: Suggest "connect to any computer" button when a connection to a specific computer fails (5176)
  • Change: Improvements to remote connect failure messages (5179)
  • Change: Add "preload" keyword to Strict Transport Security header when HSTS is enabled (5197)
  • Change: Add support for additional settings when running as a stand-alone web service (5202)
    Report Modules
  • Bug fix: Targeting policies in Usage (PROD) an (PRGM) reports results in no data instead of constraining report to the policies (5180)
  • Change: Add new columns to Login and Usage reports to show statistics for remote connections (5165)
    Remote Broker
  • Change: Prevent Remote Broker URL (token) from being shared with others and used on more than one computer (5151)
  • Change: Minor UI improvements (5159)


    Initial release of Sassafras KeyServer Platform v7.7. All components are version at initial release.

Operating Systems Supported

The following table shows the operating systems supported by the versions of the major KSP v7.7 components, as of this release. While some components may operate correctly on operating system versions that are not listed, the versions that are listed are the only ones that are supported by Sassafras Software for this release. Specifically, the client components might work on older versions of Windows, but because these older OS versions are no longer included in Microsoft's API compatibility documentation, we can no longer guarantee correct operation on them.

Client Mac OS X 10.9 through 11.0Windows Vista, Windows 7, 8, 8.1, 10,
Server 2003, 2008, 2008 R2, 2012, 2012 R2, 2016, 2019
x86, x86_64
Kernel 2.2 +
   (glibc 2.3 +)
Solaris 9 and higher
(x86, sparc)
Server Mac OS X 10.9 through 11.0Windows Vista, Windows 7, 8, 8.1, 10,
Server 2003, 2008, 2008 R2, 2012, 2012 R2, 2016, 2019, Nano
x86, x86_64, armv7
Kernel 2.2 +
 (glibc 2.3 +)
Solaris 10 and higher (x86)
Admin Mac OS X 10.9 through 11.0Windows Vista SP2, Windows 7, 8, 8.1, 10,
Server 2008, 2008 R2, 2012, 2012 R2, 2016, 2019