K2 v7.4 Release History

K2 v7.4 (2018-04-25 Image)

When this document is part of a downloaded image, it may no longer be the latest version. If the icon above is not green, then check online for the latest component history and upgrade warnings. Go to downloads for the latest installers.

The table below documents revisions to the K2 v7.4 components up through the 2018-04-25 image date. Known issues slated for a fix in the next release can be viewed here. For important cautions that must be observed when installing components from this image, consult:

Notes & Warnings

If you have version 7.3 components on your site (from an install of the previous version), the 7.3 Upgrade Warnings and 7.3 Component History documents may also be of interest.


  • Bug fix: In some cases the "G" computer ID is not used when it should be, due to a delay in the OS/VM (Windows only))
  • Bug fix: In some environments, KeyAccess system daemon is blocked by a hung OS call, preventing all tracking (Mac OS X only)
  • Change: Special case "PHSHELEM" stamp to distinguish between different programs (Windows only)
  • Change: Ignore file in various System Backup folders during audit scans (Windows only)
  • Change: Report usage of various DLLs loaded within SAS processes (Windows only)
  • Change: Reduce some esoteric client API functionality in support of certain legacy custom tools
  • Bug fix: Status e-mail is not sent immediately after an Admin Alert occurs
  • Bug fix: Certain incorrectly formatted purchase records are not fixed during upgrades
  • Bug fix: Firewall rules are not removed during uninstall (Windows only)
  • Bug fix: Purchase reports targeted by tag give no results
  • Bug fix: Purchase Tags are sometimes deleted after installing a new server
  • Bug fix: Some KS helper programs always use verbose logging
  • Change: Add an option to export package audit when program audit is not exported
  • Change: Prompt for "project" only on first launch of a multi-launch policy
  • Bug fix: Renaming a Division can break the layout of an associated Availability map
  • Bug fix: Dates in node lock lists are translated incorrectly for JavaScripts
  • Bug fix: Histogram Logins (DIV) layout is incorrect when viewed in KeyReporter
  • Bug fix: Map background image in PNG format is not renamed along with Division rename
  • Bug fix: Click-through report for "Computers by Last Login" widget can sometimes be incorrect
  • Bug fix: REST API returns no results for certain filtered requests
  • Bug fix: Under certain circumstances, REST API results will not show division/folder names for contained objects


  • Bug fix: Linux client does not update the computer on/off state (Linux only)
  • Bug fix: Linux version of kaud utility does not gather software audit data (Linux only)
  • Bug fix: Special case "MOE" and "PHOTO" stamps to distinguish between different publishers (Windows only)
  • Bug fix: Special case some bundle IDs to use more appropriate values for program stamp (Mac OS X only)
  • Bug fix: Added option to export only applications in the KSAudits table
  • Bug fix: PRS updates do not get applied in many cases depending on network configuration
  • Bug fix: Rare corruption of data on servers with heavy load, eventually causes a server crash
  • Bug fix: File changes are immediately written to disk by default, affecting general server performance
  • Change: Added a new "Editors" built-in admin group
  • Change: Added command line options for changing some configuration settings at startup
  • Bug fix: Division list is not updated in a timely manner when new divisions are created by OU mapping
  • Bug fix: Adding a script from a local ".jst" file will delete that file instead of copying it
  • Bug fix: Some product definitions can be imported initially with no name/version information
  • Bug fix: Computer Utilization widget displays "No Data" for sections with a space in the name
  • Bug fix: Browsers might be redirected to a different address when server is running on a multi-homed host
  • Bug fix: Custom origin (and sslorigin) values without schema prefix result in strange URLs
  • Change: Added internal mechanisms for branding and customizing styles
  • Change: Allow for cases where KS/KR ports are port-mapped externally
    Export Modules
  • Bug fix: MySQL export module links to an old version of the MySQL client library (Linux only)
    Report Modules
  • Bug fix: Product Suggestion report might fail to include some manual products
  • Bug fix: Large data sets with many corruptions generate a large log file, which can make the update process take a long time


  • Bug fix: Microsoft Visual Studio 2017 editions are not properly distinguished (Windows only)
  • Bug fix: PowerGEOPAK process continues to run even after the GUI has been exited (Windows only)
  • Change: Add a configuration option to use the local host name for the computer name
  • Bug fix: When Division mapping and rule filters both apply to a computer, division can change back and forth
  • Bug fix: Login Peaks (DIV) report (and some similar) cannot be exported by ks-rex helper utility
  • Change: Support suffix wildcarding when using Division names for Policy scope
  • Bug fix: Division color cannot be set for divisions with very long names
  • Bug fix: Option "Use Product Database in Product Reports" is can't be changed in General Settings by non-full Admin
  • Bug fix: Some General Settings don't have associated privilege settings in Admin Access windows
  • Bug fix: Division nesting is not displayed in some cases for some non-full Admins
  • Bug fix: Security vulnerabilities detected by some web analyzers
  • Bug fix: Software Availability search does not return all results in some cases
  • Bug fix: Availability widget and list do not show "Closed" indication if division name and time set name differ in case
  • Bug fix: REST API returns no results for certain requests when server is running on Linux (Linux only)
  • Bug fix: Placement of computer icons in an availability map does not visually correspond to drop location
  • Bug fix: Moving an item on a map using the arrow keys might also scroll the window
  • Bug fix: Some URLs are not re-written with frame prefix when embedding pages
  • Bug fix: Language selection menu on Log In page shows each language twice
    Authentication Modules
  • Change: Use all OUs for division mapping by default in LDAP and Kerberos auth


  • Bug fix: Trusted Service connections fail when client or server is
  • Bug fix: Invalid serial numbers might be used as Computer IDs
  • Change: Ignore certain computer UUIDs that are known to be invalid
  • Bug fix: Possible crash at startup if certain files are in use by another process
  • Bug fix: Possible failure during install/upgrade when attempting to copy a database file that needs to be fixed
  • Change: Reclaim entitlements that are assigned by audit once the product has been installed, even if there has been usage
  • Bug fix: Clicking a URL to run a report causes a crash
  • Bug fix: Arrow and Return keys cause unwanted behavior when editing a box name for Availability Maps
  • Bug fix: Name of selected computer in an Availability map displays underneath other computer icons
  • Bug fix: Computer utilization widget does not use useful labels for longer time ranges
  • Bug fix: Login as Guest fails sporadically
  • Bug fix: In some browsers, dragging the box property sheet interferes with editing the box name
  • Change: Added a configuration option to limit connections to certain versions of SSL/TLS
  • Change: Scale entire availability map to fit width of page
    Report Modules
  • Bug fix: Login Peaks report is off by a day when run on entire data set


  • Bug fix: Some hardware serial numbers that are available are not reported to the server (Linux only)
  • Bug fix: Some filesystems are not scanned during audits or included in disk space calculations (Linux only)
  • Change: Client will try to delay auditing when the computer is on battery power
  • Change: Report Active Directory domain to server when known (Mac OS X only)
  • Change: Estimate the OS install date for Linux systems (Linux only)
  • Bug fix: Policies from vendor license files do not retain certain customized settings like Folder and Name
  • Bug fix: Status e-mail fails with certain types of mail servers
  • Change: Show custom launch message once per policy use instead of once per program launch
  • Change: Add a new admin privilege for accessing data via the REST API
  • Change: Policy Node and User lists now accessible via JavaScript and REST API
  • Change: Add support for using user tags to set policy scope
  • Bug fix: Report Builder shows "." instead of "Uncategorized" for save folder
  • Bug fix: Warning 1946 occurs when installing KeyConfigure on some systems (Windows only)
  • Bug fix: Threshold slider in the Queued widget does not show actual value
  • Bug fix: Reports downloaded as text from KeyReporter do not have a meaningful file name
  • Bug fix: Menu of computer icon sizes in edit mode of Availability page is displayed behind computer objects
  • Change: Add a legend of the computer icons on the Availability Maps page
    Report Modules
  • Bug fix: Audit Products includes an additional product purely because of a package ID


  • Bug fix: Sub-processes tracked within host processes are never considered "foreground" for idle time management
  • Bug fix: In some environments, KeyAccess user agent is blocked by a hung OS call, preventing all tracking (Mac OS X only)
  • Bug fix: GEOPAK process continues to run even after the GUI has been exited (Windows only)
  • Bug fix: Adobe Animate is incorrectly identified on Windows as ANIMATE--ADOB (Windows only)
  • Bug fix: Bentley DLLs loaded by Power Geopak are not tracked (Windows only)
  • Bug fix: Special case "TESTEXEC" stamp to distinguish between different publishers (Windows only)
  • Bug fix: Improve special case of "DEVENV" for Enterprise edition (Windows only)
  • Change: Special case EA to distinguish between standard, trial and "lite" editions (Windows only)
  • Change: Special case "PROCESSCREATOR*" stamp to avoid program DB bloat (Windows only)
  • Bug fix: External Admin accounts from AD can show up with and without domain prefix
  • Bug fix: REST API calls that need to make changes might fail when using certain external auth accounts
  • Bug fix: Date range tag used for exported reports (ks-rex) can be off by one
  • Bug fix: Exported definitions for Product families have extra characters in edition IDs
  • Bug fix: Section column of Access Summary window shows numbers instead of section names
  • Bug fix: Incorrect date range summary displayed in Reports list window and report window header
  • Bug fix: KeyConfigure crash when opening a product details window
  • Change: Add an option to disable linking to other pages from the Availability widget
  • Change: JWT support for REST API access
    Report Modules
  • Bug fix: Product Suggestions report fails on Windows
  • Bug fix: Upgrade Discoveries (PRGM) report might not list some upgraded programs
  • Bug fix: Statistics (PROD) report Installs column has incorrect values when Audit Product database is not available


  • Bug fix: Some SQL Server editions do not appear in audit data (Windows only)
  • Bug fix: Audit scan visits some directories with uninteresting files, taking longer than necessary
  • Bug fix: In some environments, KeyAccess user agent is blocked by a hung OS call, preventing all tracking (Mac OS X only)
  • Bug fix: Change special casing on some programs to separately identify programs with common names (Windows only)


  • Bug fix: Crash soon after startup in certain cases when client is upgraded from 7.3
  • Bug fix: Improved detection and identification of some programs that share identifiers (Windows only)
  • Bug fix: Custom (user) computer ID type is not stored in an editable location (Linux only)
  • Bug fix: Improved detection and identification of Tableau (Windows only)
  • Bug fix: Improved detection and identification of SQL Server editions (Windows only)
  • Bug fix: Certain apps that use external code engines are not detected as running (Mac OS X only)
  • Change: Do not include the new SCCM cache and Download cache locations during audits (Windows only)
  • Bug fix: Queued Widget can show a very long value for "Longest"
  • Bug fix: Startup scripts are not installed when upgrading from older server on RedHat (rpm-based) systems
  • Bug fix: Long serial numbers are truncated in exported data
  • Bug fix: A certain table join is not optimized, so can lead to a slow query
  • Bug fix: Computers window refresh can be slow on large servers
  • Bug fix: In rare circumstances some products might not appear as installed on a computer in Audit Products reports
  • Bug fix: Duplicating a purchase places the upgrade date into the renewal date field
  • Bug fix: Radio buttons are not correctly updated in some cases in Purchase filter windows
  • Bug fix: Right-click section doesn't pass correct subject parameters to Report Builder
  • Bug fix: Some columns do not sort correctly in reports loaded from a KSR
  • Bug fix: OS Family name for OS X Sierra is not always added to the terminology tables
  • Bug fix: Computer division cannot be set to Uncategorized via scripts or REST API
  • Bug fix: Dragging and dropping computers into the main Computers window sets them to Dedicated
  • Change: Show "Unanchor Computer" option in context menu without need to hold down special keys
  • Change: Add Journal Event for changes to client auto-update settings
  • Change: Support Custom Column names as computer fields in REST API and JavaScript objects
  • Bug fix: Standard MIME type text/plain is not accepted as plain text input for some POST requests
  • Bug fix: REST API can fail to send a response if the JSON content is invalid
  • Bug fix: Basic authentication fails for REST API calls when server uses AD/Kerberos authentication
  • Change: Support REST API access to the internal data in saved reports
  • Change: Add a link to the Software Availability page from the Product Catalog page
    Report Modules
  • Bug fix: Duplicates reports pause when starting on large servers


  • Change: Improved detection and identification of virtualized programs (Windows only)
  • Change: Improved identification of Altium Designer (Windows only)
  • Change: Improved detection and aggregation of certain programs that use random executable file names (Windows only)
  • Bug fix: Status e-mail is sent repeatedly, but no new important conditions are given in the message
  • Bug fix: Server installation fails during KSDbConsist when certain unexpected product data is encountered
  • Bug fix: Potential crash when using Referral servers with certain policy configurations
  • Bug fix: SQL auth sporadically does not authorize users
  • Change: Use the systemd mechanism when available to start the server process (Linux only)
  • Change: Improvements to export performance when using ODBC export method (Windows only)
  • Change: Increase maximum length of Division names so long mapped names are not truncated
  • Bug fix: Imported Purchases do not match on External ID unless that column is displayed
  • Bug fix: Changing PO number does not remove the old Purchase from the Purchases window until hard refresh
  • Bug fix: Variants with legacy IDs are added as Applications in New Product Wizard
  • Bug fix: Reseller information is not copied when duplicating a Purchase
  • Bug fix: Start date is not copied when duplicating a Purchase
  • Bug fix: Creating a renewal purchase to resolve an Alert copies original product, not effective product
  • Bug fix: Nested divisions are not displayed correctly when sub-trees are split between sections
  • Bug fix: Computers become Anchored when changing Login status
  • Change: Add support for Tags on Purchase items
  • Change: Check Name and Description fields when quick-finding in Purchases window
  • Change: Speed improvements for importing a large number of Purchases
  • Bug fix: Queued Policy widgets do not show any clients as queued
  • Bug fix: Binary column data is returned as NULL in JDBC queries
  • Bug fix: Results from REST API calls can sometimes be empty
  • Bug fix: Potential crash when retrieving tables in JDBC driver
  • Bug fix: JDBC driver fails with ksODBC "connection error" (Linux only)
  • Change: Add option to Division Availability widget to open detail page in a new window
    Report Modules
  • Bug fix: Product Suggestions report display is not correctly organized, show duplicates and incorrect products
  • Change: Improvements to product guessing based on programs and packages


  • Bug fix: Computer name incorrectly sent as host.domain.org by default instead of just the host name (Windows only)
  • Change: Internal changes in support of self-update functionality
  • Bug fix: Potential crash when server is very busy
  • Bug fix: Drag and drop of text is not accepted in most text fields (Windows only)
  • Bug fix: Text fields that should be read-only allow for text to be entered (Windows only)
  • Bug fix: Potential crash after running a JavaScript that gives a scripting exception (Mac OS X only)
  • Bug fix: Purchase Wizard does not allow PO number to be cleared so a random one can be generated
  • Bug fix: Text fields in Authentication dialogs appear empty, but changing focus shows they are not (Mac OS X only)
  • Change: Optionally display Divisions in a hierarchy based on a delimiting character
  • Bug fix: External Admin accounts cannot log into KeyReporter
  • Bug fix: Saved reports cannot be downloaded from the report page
  • Change: Better visual styling of computer icons on Availability Maps
  • Change: Include PO number in searches initiated from the Find Purchase widget
    Report Modules
  • Change: Improvements to how different versions of the same product are accounted for in Compliance reports


All Windows installers will now update the “Apps & features” (aka Programs & Features, aka Add/Remove Programs) settings with the full version of the installed component.
  • Bug fix: Computer name clipped to 15 chars (NetBIOS maximum) even though a longer name is available (Windows only)
  • Change: Improved identification of Wolfram CDF Player to distinguish from Mathematica (Windows only)
  • Change: Shortcut to KeyAccess is added to the Start menu on newer Windows versions (Windows only)
  • Change: Internal changes in support of self-update functionality
  • Bug fix: PRS fails to get all expected products in some cases
  • Change: Provide remote, external access to the server's data via a new JDBC driver
  • Bug fix: Quick Find in Purchases window does not return any results due to malformed internal query string
  • Bug fix: Dragging an attachment from mail into the Documents of a Purchase only copies part of the file (Windows only)
  • Bug fix: Some stored time values from certain time zones are not correctly converted for display
  • Bug fix: Importing Purchases from native XML format fails for Purchases that don't include a product
  • Bug fix: Purchase filter on Department uses incorrect field name, giving incorrect results
  • Bug fix: Entitlements per Unit that start with the number 1 cannot be entered without first entering another digit (Windows only)
  • Bug fix: Item Description field in New Purchase wizard truncates input to fit visible text box (Window only)
  • Bug fix: Cannot Paste into numeric fields when the clipboard contains non-numeric characters (Windows only)
  • Change: Locally saved report KSR files can be dragged onto the Reports window to save them in KeyReporter's Archive
  • Change: Policies list in Product details window indicates any policies that are disabled
  • Change: KeyConfigure 64-bit executables installed in the wrong folder by default (Windows only)
  • Change: Server host name and Admin name are shown in the main window title bar (Windows only)
  • Change: Set alert thresholds for server seat usage in Alerts and Status dialog
  • Change: Various UI improvements and clarifications
  • Change: Various improvements for accessing data in JavaScripts
  • Bug fix: Certain numeric result column data from SQL queries can be incorrect on 64-bit unix platforms
  • Bug fix: URL arguments encoded as base64 that include a "+" can cause a crash
  • Change: Login page provides feedback when name or password is incorrect or unacceptable
  • Change: Support arithmetic and functions in GROUP BY clause of SQL statements
  • Change: Redesigned REST API for easier and more complete access to data on the server
    Report Modules
  • Change: New report to gather usage and audit statistics for Products


  • Change: Gather BIOS Release Date for new column in Computers window
  • Change: Recognize newer format of ISO 19770-2 software tags
  • Change: Various improvements for future extendability
  • Bug fix: Assign by Audit sets the "Last Used" date, which affects some reports in an undesirable way
  • Bug fix: Potential crash or hang when server is stopped while an export is in progress
  • Bug fix: Computers removed from the node list for an assign-by-audit policy when even usage has occurred
  • Bug fix: Helper processes sub-launched by the server can show extra "conhost" sub-processes (Windows only)
  • Bug fix: Audit Packages Index Database gets mangled on upgrade by KSdbConsist
  • Bug fix: Usage reports show usage of one product, Audits show a different version of that product is installed
  • Bug fix: ks-jst tool does not load archived .jst bundles, only expanded .jst bundles
  • Bug fix: Groups that do not have Computer members don't open after deleting Computer Database
  • Bug fix: Groups with long names cannot be deleted
  • Bug fix: Seat count on server is displayed incorrectly when it is higher than 65535
  • Bug fix: Resolve Comment field in Resolve Alert window does not word wrap text
  • Bug fix: Saved reports larger than 2GB do not open, or open and show no contents
  • Bug fix: Summarize Access shows an extra level of ACL nesting for Report folders
  • Bug fix: Product mappings set during Purchase import are not always saved in some cases
  • Bug fix: Bad character data (non-UTF) from external sources can cause exceptions in JavaScripts
  • Change: Change column name in Connected Clients window to match terminology used in details windows
  • Change: Use purchase external IDs to help find matching Purchases during import
    Authentication Modules
  • Bug fix: External admin account in AD cannot log in when using user@domain form of login name
    Export Modules
  • Bug fix: Possible crash when exporting to a remote ODBC data source and connection is lost
  • Bug fix: Export fails for no apparent reason on a heavily loaded server with a large data set
    Report Modules
  • Bug fix: Possible crash when running various Audit-related reports on 64-bit platforms
  • Bug fix: In rare case with complex multi-site and multi-metric policy configurations, Compliance (PROD x comp) might not show some computers


  • Bug fix: Some hardware attributes are not accurate for Linux clients (Linux only)
  • Bug fix: Client computer ID can sometimes be a V ID instead of a G ID (virtual host name) (Windows only)
  • Bug fix: Client computer ID might be blank in some cases when retrieving G ID (virtual host name) (Windows only)
  • Change: Support using KS API from within a sandboxed application (Mac OS X only)
  • Change: Change special casing on various programs for improved identification
  • Bug fix: Potential data corruption of Audit Packages files leading to server crash
  • Bug fix: Potential crash when there is a referral server available to clients
  • Bug fix: Potential crash of the PRS update process, causing PRS updates to fail
  • Bug fix: Evaluation license is used in preference to a vendor-provided server license
  • Bug fix: Process does not stop in a timely manner (or ever) in some cases when client load is heavy
  • Bug fix: Importing Computer rules does not set the 'Set Login To' and 'Set Audit To' options
  • Bug fix: Suggested programs in New Product wizard cannot be selected (Windows only)
  • Bug fix: Product mapping choices made during purchase imports are not remembered
  • Bug fix: Nested tag list is not displayed correctly if there are tags that begin "tags."
  • Bug fix: Importing is not correct when using a CSV file with line breaks surrounded by quotes
  • Bug fix: Top level categories (e.g.,Referenced, Unreferenced) are ignored when applied to reports via right-click
  • Bug fix: Report Options are not included in a new report built using "Create Similar" option in Reports window
  • Bug fix: Report window filter for "Category is Miscellaneous" gives empty results
  • Bug fix: Javascript Odbc class does not return correct column names when certain drivers are used
  • Bug fix: JavaScript Odbc class does not properly handle UTF-16 character data
  • Bug fix: Minor UI bug when selecting an Export method for the first time
  • Bug fix: Marketing names for Mac OS X Sierra editions are missing from the UI
  • Bug fix: Custom messages for keyed programs might not be displayed in the details window
  • Bug fix: Hover text for Enforcement setting in Policy details is incorrect when window is first opened
  • Bug fix: Report header shows text remnants in some cases after changing the view
  • Bug fix: Importing purchases from CSV file does not correctly parse empty field values
  • Bug fix: Export progress seems to show KSAudits table exporting twice when data is very large
  • Bug fix: Cannot change just the character case of Folder/Division names
  • Change: Separate suggested programs in New Product wizard to indicate those that have been launched
  • Change: Indicate which columns have been mapped to at least one target column in import definition dialog
  • Change: Add a Delete item to the context menu of Tag edit controls
  • Change: Improvement to filter window UI that results from a “Find” in main windows
  • Change: Improvements to purchase import UI, file parsing, and product mapping
  • Change: Support PNG format files as background images of Availability Maps
    Export Modules
  • Bug fix: Exporting to CSV, Text, or XML generates incorrect Admin Alert indicating failure to export
    Report Modules
  • Bug fix: Certain Product-based reports do not sort correctly by Status column
  • Bug fix: Login OS Percent reports have columns that are empty
  • Bug fix: Audit Products (PROD x div) does not appear in the report chooser on the Builder page
  • Change: Default value for Compliance report "recent usage" changed to 90 days
  • Change: Add new Login Users (COMP) report


  • Bug fix: Upgrading client with Linux installers can overwrite setting for server address (Linux only)
  • Bug fix: Certain non-X processes are not detected quickly on Linux (Linux only)
  • Bug fix: Keyed programs sometimes can't get keys on OS X systems with many different logins (Mac OS X only)
  • Bug fix: Delayed startup of user agent can block keyed programs for a up to a minute after login (Mac OS X only)
  • Change: Tracking of DLL modules enabled for additional processes (Rhino, Sketchup) (Windows only)
  • Change: Improve identification of some products that all use the same executable (ANSYS) (Windows only)
  • Change: Improve identification of some Eclipse-based applications (Mac OS X only)
  • Change: Improvements to process management for tighter license enforcement
  • Change: Change special casing on VRAY plugin to distinguish between different editions (Windows only)
  • Bug fix: The "Send Program management settings to clients during audits" setting does not persist
  • Bug fix: Installer for 64-bit server runs 32-bit KSdbConsist (Windows only)
  • Bug fix: Upgrading to new Vendor licenses sometimes requires two server restarts
  • Bug fix: Potential crash when reconfiguring client authentication when many client sessions are active
  • Bug fix: Loading an authentication method after making a change will sometimes take longer than it should
  • Bug fix: Potential crash during upgrade installs when KSdbConsist processes data, leaving older data in place
  • Bug fix: Potential crash when Usage Log contains corrupt data of a certain pattern
  • Bug fix: ODBC export fails on some tables with a query syntax error
  • Bug fix: KSUsage.usageDivisionID can be returned blank in some SQL queries and in exports
  • Change: Add an Admin Alert event when multiple vendor .lic files have the same ID but different settings
  • Bug fix: Computer icon for known Virtual Machine shows as normal computer (blue)
  • Bug fix: Right-clicking in edit text items selects all text, so sub-selection cannot be Copied etc. (Windows only)
  • Bug fix: Policies created during Reconcile do not inherit expiration date from purchases
  • Bug fix: Starting a report causes a very long pause (not responding) in some rare network scenarios
  • Bug fix: Importing computer Rule filters does not set the Division target of the rule
  • Bug fix: Context menu option "Unanchor from Division" is not available on Windows in some cases
  • Bug fix: Virtual Host and Virtual flag cannot be set in JavaScripts
  • Bug fix: Some columns in the Policy window show the wrong column data
  • Bug fix: Binary data retrieved with ODBC in JavaScripts is double-encoded
  • Bug fix: Using multiple ODBC queries in JavaScripts requires separate open/close calls for each query
  • Bug fix: In some cases JavaScripts cannot get results from LDAP queries due to permissions
  • Bug fix: Selecting items by ID in JavaScripts views does not work for certain tables
  • Bug fix: Potential for an exception/crash when tabbing and arrowing through Report Builder window
  • Bug fix: Selecting KeyConfigure Help from Help menu shows help in the legacy browser (Windows only)
  • Change: Improvements to the mechanism for canceling reports in order to avoid long delays
  • Change: Add contextual menu Cut/Copy/Paste for edit fields (Mac OS X only)
  • Change: Improvements to arrow key navigation in lists
  • Change: Add column for original report name to Reports window
  • Change: Improvements to arrow key navigation in lists
  • Change: Support ISO 19770-3 files for importing purchases
  • Change: Highlight Issued/In-use column in Policies window when a policy is over-limit
  • Change: Right-click variants in Program Details windows to create a New Product
  • Change: Mark suggested programs in New Product wizard as application or utility
  • Change: Switch position of some dialog buttons to match platform conventions
  • Bug fix: Potential vulnerability to "HTTP Response Splitting"
  • Bug fix: Security vulnerabilities detected by some web analyzers
  • Bug fix: Possible to create Report folder names that have undesirable characters
  • Change: Adjustable sizes for computer icons on Availability Maps
  • Change: Add a menu on the Archive page to show that older reports are not listed
  • Change: Disable autocomplete for the password field on the Login page
  • Change: Hide report templates from admins who don't have the Run Reports privilege
  • Change: New widget displays a list of report folders, links to a page with contents of clicked folder
  • Change: Move the "server" tag to the Type line in the widget picker to make those widgets easier to find
    Authentication Modules
  • Change: Add option to disable SQL authentication in cases where the external database is not available
  • Change: Internal options for failover and fault tolerance when SQL auth connections are not reliable
    Report Modules
  • Bug fix: Audit Products doesn't show last used time if it is older than one year
  • Bug fix: Compliance (PROD x comp) run on single product incorrectly titles the report
  • Bug fix: In some cases the Compliance report counts computers against multiple metrics when it could determine the one correct metric
  • Bug fix: Compliance report does not count some computers for a product if Section is applied to one policy
  • Bug fix: Compliance (PROD x comp) report shows incorrect Section for computer lines
  • Change: Dim the Witness column in Compliance report when the assignment is not definitive
  • Change: Include Base Audit date in Hardware report


  • Bug fix: Change special casing on some programs to separately identify programs with common names
  • Bug fix: In some cases, stand-alone AutoCAD will be reported with incorrect identifier (Windows only)
  • Bug fix: Installer fails to stop KeyAccess service if a controlled program is running (Windows only)
  • Bug fix: Installer prompts for a restart in even if set to run "quietly" (Windows only)
  • Bug fix: Install fails with error "the specified account already exists" if a previous install used a renamed MSI file (Windows only)
  • Bug fix: When reversing parts of a mapped division, a name with a single part will be reversed incorrectly
  • Bug fix: Reports run with Policy Folders as targets have no results
  • Bug fix: Non-admin can't see values in policyAllocated field for some policy types
  • Bug fix: Excessive CPU usage eventually leading to a hang (no client or admin service)
  • Bug fix: Potential crash during heavy load, exporting, or report processing
  • Bug fix: "Highest Purchase" widgets show "no data" unless connected with full Administrator permissions
  • Bug fix: During upgrade, excluded and dormant computers are removed from all groups
  • Change: Allow more than one recipient for status e-mail
  • Bug fix: Filter panel in Group details window is not sized correctly
  • Bug fix: Double-clicking scope icon when scope is negated does not open correct group details
  • Bug fix: Purchase import does not set name to the default when it is not specified in the import file
  • Bug fix: Potential crash when saving Policies window as an XML or KSR file
  • Bug fix: Clicking on Add button in the Manage Scripts dialog shows "Choose a program to Key"
  • Change: Allow drag and drop into a Division/Folder window to change the division/folder
  • Change: Minor clarifications in some UI strings
  • Change: Warning message when trying to create more policies than supported by the server license
  • Change: Limit reports run by right-clicking in a Division/Folder window
  • Change: Don't move a computer into Dedicated when the admin drags the record into a Group
  • Change: Support matching on OEM Serial number when importing computers
  • Bug fix: Policy Users widget does not display User column for User policies
  • Bug fix: Config and Close controls are not visible in some widgets with color themes applied
  • Change: Include Limit column in report displayed from clicking More in Policies Near Limit widget


  • Bug fix: Policies with Strict enforcement can be allowed to run offline in some cases
  • Bug fix: Incorrect message is displayed when clicking Logon in control panel if server is not reachable
  • Bug fix: With Division mapping and name-reversal enabled, Division names can get scrambled or cause a crash
  • Bug fix: New versions of some support files are not installed by the latest installers (Windows only)
  • Bug fix: If two different kinds of objects are added to Report Builder's Target panel only the first will be used to limit the report
  • Bug fix: Right-click of a folder or division doesn't restrict report results
  • Bug fix: Changing policy deactivation date doesn't make window dirty
  • Bug fix: Backslash in item names can cause some widgets to show “no data”
    Report Modules
  • Bug fix: Config reports crash when run on 64-bit Windows (Windows only)
  • Bug fix: Upgrade Discoveries (PRGM) includes some programs with long IDs even though there are no previous versions in products


  • Bug fix: Installing on some older Linux distributions fails with a dependency error (Linux only)
  • Bug fix: Potential crash when the server name does not resolve
  • Bug fix: Change special casing on some programs to separately identify programs with common names (Windows only)
  • Bug fix: Possible failure to properly identify certain instances of AutoCAD-based programs at launch (Windows only)
  • Change: More descriptive message for when launch is denied because server could not be reached
  • Change: Allow dot-notation for tag names defined by rules in tags.xml files
  • Bug fix: Possible crash when doing a backup of the data files (schedules or on-demand)
  • Bug fix: Status e-mail has a "Warnings" header when there are no warnings
  • Bug fix: Potential crash if server uses AD client authentication, when KeyConfigure gathers the list of groups
  • Bug fix: KSbConsist does not run on Windows XP, leading to failure during server installation (Windows only)
  • Bug fix: Slow response to admin connections when server is under extremely high client load
  • Bug fix: Core license calculation does not include special casing for some AMD processors
  • Change: Optionally send program management information to clients during an audit
  • Bug fix: Some objects cannot be located by ID in JavaScripts
  • Bug fix: Clicking on an item in a background window in order to drag it brings the window to the foreground (Windows only)
  • Bug fix: KeyConfigure continues to run after an unexpected critical error, but in an unreliable state
  • Bug fix: Shift-click on Sassafras logo or Support link in About window does not show Sassafras QS button
  • Bug fix: In Use and some Issued counts are not displayed in the Policies window (Windows only)
  • Bug fix: Reports run with specific Programs as subjects do not show any results
  • Bug fix: Infrequent hang or "not responding" when quitting or disconnecting
  • Bug fix: Scripts can be selected but do not run when a report window is frontmost
  • Bug fix: Dragging a window can cause garbage to be drawn within the window area (Windows only)
  • Change: Enable the multi-launch option for Lease policies (to allow it to be unchecked)
  • Change: Improvements to selection behavior and highlighting in all lists
  • Bug fix: Computer Utilization widget shows incorrect times along the x-axis
    Report Modules
  • Bug fix: Event Dump limited to a set of targets does not include server events


Because of an upgrade in our build process for K2 v7.4, the 32-bit Windows installers were made incompatible with Windows XP. Starting with, the 32-bit Windows installers are once again compatible with Windows XP.

  • Bug fix: Activity Monitor on some older versions of OS X sometimes shows "kass" as "not responding" (Mac OS X only)
  • Change: Include the number of CPU packages as part of hardware audit
  • Change: Change special casing on some programs to distinguish between editions (Windows only)
  • Change: Change special casing on some programs to avoid potential compatibility problems (Windows only)
  • Bug fix: System memory usage is very high while the KeyServer process is running on Windows Server 2008 (Windows only)
  • Bug fix: Status e-mail does not display server license expiration date
  • Bug fix: Status e-mail has a "Warnings" header when there are no warnings
  • Change: New Alert Topic added for full KeyServer
  • Change: Add Socket metric for counting entitlements by the number of CPU sockets
  • Change: Calculate default PVU value based on the number of cores
  • Bug fix: JavaScript Odbc object does not get date fields for some ODBC drivers
  • Bug fix: Reconcile wizard recommends upgrading to a product that has no Release date
  • Bug fix: Policy filters cannot be set with metric types PVU, Core, and Special
  • Bug fix: Adding an ignored shell product to a policy or purchase might not import the programs immediately
  • Bug fix: Typing Escape to hide the Find bar causes the current list selection to be cleared (OS X only)
  • Bug fix: Unchecking the Start or Expire Date checkboxes in Purchase details does not clear the setting
  • Bug fix: If "New Version Upgrade" checkbox is checked in Purchase details, "Backward coverage" checkbox will be cleared on save
  • Bug fix: Keyboard shortcut cmd-E (ctl-E) is repeated for all Report list windows instead of just main Reports window
  • Bug fix: Custom computer fields don't display properly in Computers window
  • Bug fix: Switching between two purchases in the same Purchase detail window can sometimes mark one item as changed
  • Bug fix: Administrator password appears editable by other (full) admins, although any change is not saved
  • Bug fix: Scroll bars in detail windows can appear in the wrong direction in some cases (Windows only)
  • Bug fix: Opening a filtered list window sometimes reloads data from the server unnecessarily
  • Change: Add a "Test" button to the Alerts and Status E-Mail settings
  • Change: Support standard keyboard navigation and selection in edit text fields
  • Change: Shift key extends list selection when navigating with arrow keys
  • Change: Double-click a column resize bar to auto-size the column to the best width
  • Change: Creating a new report from a Report window for a folder defaults the new report to that folder
  • Change: Support for adding items of various types via JavaScript
  • Change: Include the product name in simple searches of Purchases window
  • Change: Find next match when hitting Return key with Find bar in focus
  • Change: Open a Search window with the matching items when clicking the dot button in the Find bar
  • Change: Right-click on a purchase item and select New Purchase to copy that purchase's settings into the new purchase wizard
  • Change: Support import and export of Product tags in a Product Definitions file
  • Bug fix: Renaming a division doesn't rename the css/gif files used for KeyReporter availability maps
  • Bug fix: Report archive shows default report name instead of configured Display Name for templates
  • Bug fix: Policies Near Limit shows Observed Policies and ignores selected time range
    Report Modules
  • Bug fix: Compliance report does not use the consumed entitlements for PVU, Core, and Special metrics
  • Bug fix: Some reports might show an incorrect aggregate Name when aggregating on Valued Tags
  • Change: Checking the aggregation option for Hardware report adds a column to the results
  • Change: Add option to always count computers on the node list as consuming an entitlement in Compliance reports


  • Bug fix: Signing out a portable key in KeyCheckout results in an error (-10018)
  • Change: Change special casing on some programs to avoid potential compatibility problems (Windows only)
  • Bug fix: Connected Client seats are not freed up in some cases, leading to clients being denied access to the server
  • Bug fix: Conversion to KS 7.4 can fail due to errors in new copy of Computers Database
  • Bug fix: Potential crash of KSdbConsist during upgrade from older versions of server (Mac OS X only)
  • Bug fix: Empty items listed in User details Policies list after a user policy is deleted
  • Bug fix: Insertion caret position is not updated when typing a disallowed character for a Report Folder name
  • Bug fix: Installing a script via kcfg URL does not load the script until KC restarts
  • Bug fix: Removing a script that is in a submenu can cause KC to duplicate the Tasks menu hierarchy
  • Bug fix: JavaScript Odbc class's open method ignores the parameter object
  • Bug fix: Items in Target panel of report builder persist for next time the report is selected
  • Bug fix: Certain computers will not be added to the Report Builder's Target panel when right-clicking to run a report
  • Change: Add a Clear button to make it easier to remove all Targets in Report Builder window


    Initial release of K2 v7.4. All components listed below were version at initial release.

2018-04-25 Component Versions

The following table shows the current versions of the major K2 v7.4 components, as of this release. Files with no version listed are updated as needed by the main component installers.

      Mac OS
file names
file names
file names
KeyAccess       KeyAccess.app keyacc32.exe KeyAccess
KeyConfigure       KeyConfigure.app keycfg32.exe --  
KeyServer       ks ks.exe ks
KeyReporter       kr kr.exe kr
KeyCheckout       KeyCheckout.app keychk32.exe --  
KeyVerify       KeyVerify.app keyvfy32.exe keyverify
KSRViewer       KSRViewer.app ksrview.exe --  
KSdbConsist KSdbConsist.app KSdbConsist.exe dbconsist
ksODBC       ksODBC.bundle ksodbc32.dll --  
      Mac OS X
file names
file names
file names
Active Directory       --   Active Directory.dll   --  
All Authent       All Authent.so   All Authent.dll   All Authent.so  
CAS       CAS.so   CAS.dll   CAS.so  
Kerberos       Kerberos.so   Kerberos.dll   Kerberos.so  
LDAP       LDAP.so   LDAP.dll   LDAP.so  
Single Password       Single Password.so   Single Password.dll   Single Password.so  
SQL       --   SQL.dll   --  
Text Authent       Text Authent.so   Text Authent.dll   Text Authent.so  
Unix       Unix.so   --   Unix.so  
Windows NT       --   Windows NT.dll   --  
      Mac OS X
file names
file names
file names
Disabled       Disabled.so   Disabled.dll   Disabled.so  
ODBC       ODBC.so   ODBC.dll   --  
MySQL       MySQL.so   --   MySQL.so  
PostgreSQL       PostgreSQL.so   --   PostgreSQL.so  
CSV       CSV.so   CSV.dll   CSV.so  
Text       Text.so   Text.dll   Text.so  
XML       XML.so   XML.dll   XML.so  

Operating Systems Supported

The following table shows the operating systems supported by the versions of the major K2 v7.4 components, as of this release. While some components may operate correctly on operating system versions that are not listed, the versions that are listed are the only ones that are supported by Sassafras Software for this release of K2. Specifically, the client components might work on older versions of Windows (98, 98SE, ME, NT4, 2000), but because these older OS versions are no longer included in Microsoft's API compatibility documentation, we can no longer guarantee correct operation on them. As for OS versions newer than those listed below, check the online component history for the most up-to-date information on support and compatibility.

Server       Mac OS X 10.6 through 10.13   Windows XP, Vista, Windows 7, 8, 8.1, 10,
Server 2003, 2008, 2008 R2, 2012, 2012 R2, 2016, Nano
  x86, x86_64, armv7
Kernel 2.2 +
 (glibc 2.3 +)
  Solaris 10 and higher (x86)  
Reporter       Mac OS X 10.6 through 10.13   Windows XP, Vista, Windows 7, 8, 8.1, 10,
Server 2003, 2008, 2008 R2, 2012, 2012 R2, 2016, Nano
  x86, x86_64
Kernel 2.2 +
 (glibc 2.3 +)
  Solaris 10 and higher (x86)  
Client       Mac OS X 10.6 through 10.13   Windows XP, Vista, Windows 7, 8, 8.1, 10,
Server 2003, 2008, 2008 R2, 2012, 2012 R2, 2016
  x86, x86_64
Kernel 2.2 +
   (glibc 2.3 +)
  Solaris 9 and higher
(x86, sparc)
Admin       Mac OS X 10.6 through 10.13   Windows XP, Vista, Windows 7, 8, 8.1, 10,
Server 2003, 2008, 2008 R2, 2012, 2012 R2, 2016
  --   --