Sassafras KeyServer Platform v7.7 (2020-10-12)

The table below documents revisions to the Sassafras KeyServer Platform v7.7 components up through the 2020-10-12 release date. Known issues slated for a fix in the next release can be viewed here. For important cautions that must be observed when installing components from this release, consult the Notes & Warnings document.

If you have version 7.6 components on your site (from an install of the previous version), the 7.6 Upgrade Warnings and 7.6 Component History documents may also be of interest.


  • Bug fix: Client computers might appear as "off" on availability maps during background audits (5245)
  • Change: Support Copying of text in various client alert messages (5219)
  • Change: Track add-ins loaded into more host programs (Windows only) (5226)
  • Change: Suppress reporting of multiple launches for certain programs that spawn multiple processes (Windows only) (5239)
  • Bug fix: Computers show as "in use" after Software Audit Service makes a connection (5221)
  • Bug fix: Queries that join KSPurchaseItems table and KSPurchaseDocuments table return empty values for some columns (5240)
  • Bug fix: Vendor-supplied server licenses appear as AllSight instead of KeySight (5244)
  • Bug fix: Computers with certain ID types will not appear in the Product Audit data (5246)
  • Bug fix: Computers appear to be movable from read-only Sections, although the change is never committed (5212)
  • Bug fix: Custom fields appear as editable when the admin does not have permission, changes are not saved (5214)
  • Bug fix: Authentication module configs with "menu" controls are incorrectly displayed (5220)
  • Bug fix: Potential crash when reconfiguring authentication modules (Mac OS X only) (5224)
  • Bug fix: Potential for incorrect data conversion for some numeric values in ODBC results (Windows only) (5241)
  • Change: Allow Section Managers to create new Divisions within their section (3490)
  • Bug fix: Re-auth dialog on Dashboard page does not offer the Single Sign-on option when it should (5207)
  • Bug fix: Searching for certain computers results in "Not Found" details page even though the computers exist (5208)
  • Bug fix: Remote Broker connection shows a blank page when map names contain certain characters (5210)
  • Bug fix: Divisions created by a Section Manager are not placed within the section (5213)
  • Bug fix: Font family of in-map text objects defaults to serif when viewed in the Availability widget (5222)
  • Bug fix: Service seems to stop infrequently, possibly related to user load (5223)
  • Bug fix: Map reservations that restrict to a group are not available to certain authenticated users (5230)
  • Bug fix: Uploading an app archive to the Settings page sometimes fails (5233)
  • Bug fix: Add internal HTML markup to improve accessibility (5235)
  • Bug fix: Policy Users widget shows users who have had the policy reclaimed (5238)
  • Bug fix: Remote connection dialog stops showing the Download button until after a restart (5243)
  • Bug fix: Sign in always fails if the password contains "unicode" characters (5247)
  • Bug fix: Some reports are not listed on the Report Builder page when running stand-alone web UI (5248)
  • Change: Disable access to remote connection links for reserved locations unless user is a member of the reservation group (5232)
  • Change: Add a separate page to make access to App Extras easier (5234)
    Authentication Modules
  • Bug fix: Okta SSO authentication does not work with certain configurations (5217)
  • Bug fix: Single Sign-on might not be available for a few minutes after restarting the server (5225)
  • Change: Add a way to modify the user name passed to AD for authentication (Windows only) (5211)
  • Change: Add options for choosing the name format used by various authentication methods (5216)
    Report Modules
  • Change: Add indication of remote logins and usage in Event Dump and Session Dump reports (5228)
    Remote Broker
  • Change: Add configuration settings to set internal options passed to the guacamole tunnel (5242)


  • Bug fix: Under certain circumstances, a user can appear as logged in after they have been forced to log out (Mac OS X only) (5181)
  • Bug fix: Connections through a client tunnel service can fail if initial bootstrapping process was incomplete (5186)
  • Change: Configure the level of trust required for tunnel connections based on the "trust" option (5182)
  • Change: Update URL tracking to support newer versions of Edge browser (Windows only) (5188)
  • Change: Special case some program identifiers to distinguish between different programs (Windows only) (5206)
  • Bug fix: Copy additional files to the new KeyServer Data Folder when installing a major upgrade (Windows only) (5162)
  • Bug fix: Some new rights and privileges are not properly added to existing admin accounts after upgrading from earlier versions (5168)
  • Bug fix: Under certain circumstances, after one Admin Account is deleted other accounts cannot be deleted until after a restart (5172)
  • Bug fix: Printers are listed with disabled status after updating from PaperCut server version 19.x (5191)
  • Change: Only update the "Last Login" value for user sessions, not for background audit sessions (5153)
  • Change: Allow full administrators to connect remotely to computers even when they are in use (5178)
  • Change: Increase maximum length of external group names for mapping to admin accounts (5196)
  • Bug fix: Potential crash when copying and pasting or dragging and dropping Time Periods (5137)
  • Bug fix: Rename some admin permissions to more accurately reflect their purpose (5150)
  • Bug fix: Under certain circumstances, Scripts are not added to the Tasks menu until after a relaunch (5157)
  • Bug fix: Under certain conditions, "Show Dashboard in Browser" does not open the browser at all (5190)
  • Bug fix: Choosing "Check Product Definitions" does nothing when connected to a LabSight server (5199)
  • Bug fix: Innocuous warning message written to system logs by a system framework (Mac OS X only) (5200)
  • Change: Support external group for the built-in Administrators Role (5109)
  • Change: Computer login status is not shown as "in use" when the software audit service is the only active connection (5132)
  • Change: Minor UI improvements (5183)
  • Bug fix: Admin Alerts for new client versions are repeated even though the configuration has been accepted (5148)
  • Bug fix: Certain functionality is missing or altered when KeyReporter is running separately from the KeyServer (5154)
  • Bug fix: Configuration within the web UI of certain authentication modules does not work properly (5158)
  • Bug fix: KeyAccess auto-update is not triggered when client installers are configured in KeyReporter (5160)
  • Bug fix: Account details page is visible to external accounts mapped to built-in accounts even though there is no user information to display (5163)
  • Bug fix: Under some conditions searching for a product from the Software page will show no product matches (5170)
  • Bug fix: Install counts on Software page can grow arbitrarily large when filtering the list (5171)
  • Bug fix: Manage and PRS pages are viewable to anyone who knows the URL, although changes are not allowed (5173)
  • Bug fix: Product continues to appear on availability pages after changing map availability option on Manage page (5174)
  • Bug fix: Installed software list of a computer is displayed on map list page when clicking remote link (5177)
  • Bug fix: Copy IP (Host) Address buttons do not work in newer versions of certain browsers (5187)
  • Bug fix: Connection to specific computers from a map floorplan is unnecessarily rejected in certain cases (5195)
  • Bug fix: Map Availability setting cannot be saved in computer details page (5203)
  • Bug fix: Pop-up notification messages are positioned at the top of the page, so do not appear when the page is scrolled down (5205)
  • Change: Add Remote support for NoMachine (5113)
  • Change: Add allocated/available seat counts to Settings Information page (5146)
  • Change: Minor UI improvements (5147, 5149, 5192, 5193, 5204)
  • Change: Obscure sensitive authentication configuration fields on the Settings page (5152)
  • Change: Use hostname and suffix for "Host Address" remote connection option, other minor changes (5161)
  • Change: Refresh map page when a remote connection is denied, to show latest information (5175)
  • Change: Suggest "connect to any computer" button when a connection to a specific computer fails (5176)
  • Change: Improvements to remote connect failure messages (5179)
  • Change: Add "preload" keyword to Strict Transport Security header when HSTS is enabled (5197)
  • Change: Add support for additional settings when running as a stand-alone web service (5202)
    Report Modules
  • Bug fix: Targeting policies in Usage (PROD) an (PRGM) reports results in no data instead of constraining report to the policies (5180)
  • Change: Add new columns to Login and Usage reports to show statistics for remote connections (5165)
    Remote Broker
  • Change: Prevent Remote Broker URL (token) from being shared with others and used on more than one computer (5151)
  • Change: Minor UI improvements (5159)


    Initial release of Sassafras KeyServer Platform v7.7. All components are version at initial release.

Operating Systems Supported

The following table shows the operating systems supported by the versions of the major KSP v7.7 components, as of this release. While some components may operate correctly on operating system versions that are not listed, the versions that are listed are the only ones that are supported by Sassafras Software for this release. Specifically, the client components might work on older versions of Windows, but because these older OS versions are no longer included in Microsoft's API compatibility documentation, we can no longer guarantee correct operation on them.

Client Mac OS X 10.9 through 10.15Windows Vista, Windows 7, 8, 8.1, 10,
Server 2003, 2008, 2008 R2, 2012, 2012 R2, 2016, 2019
x86, x86_64
Kernel 2.2 +
   (glibc 2.3 +)
Solaris 9 and higher
(x86, sparc)
Server Mac OS X 10.9 through 10.15Windows Vista, Windows 7, 8, 8.1, 10,
Server 2003, 2008, 2008 R2, 2012, 2012 R2, 2016, 2019, Nano
x86, x86_64, armv7
Kernel 2.2 +
 (glibc 2.3 +)
Solaris 10 and higher (x86)
Admin Mac OS X 10.9 through 10.15Windows Vista SP2, Windows 7, 8, 8.1, 10,
Server 2008, 2008 R2, 2012, 2012 R2, 2016, 2019