Release Notes Password Manager » Features » Release Notes

ManageEngine Password Manager Pro - Release Notes

Password Manager Pro Release 9.7 (9702) (27th July 2018)

Bug Fixes

Security Fix


Password Manager Pro Release 9.7 (9701) (29th June 2018)

Features & Enhancements

New system role with privacy administration privileges

From 9701 onwards, a new system role named "Privileged Administrators" will be available in Password Manager Pro. A privileged administrator will have the same capabilities as an administrator. Besides, they'll also have the privilege to configure privacy and security controls available under Privacy Settings, IP Restrictions, and Emergency Measures in the Admin tab.

Major Bug Fixes

Minor Bug Fixes


Password Manager Pro Release 9.7 (9700) (29th May 2018)

This release introduces strong controls in Password Manager Pro for protecting personal data stored and processed in the product, in compliance with privacy regulations.

New Features & Enhancements

Additional protection in web GUI while displaying personal data

Form fields that contain personal data such as Username, DNS Name, Email ID, Server Name and more will henceforth be masked at all times to enhance protection. Additionally, when a specific user unmasks and views any of the masked data fields, the action captured in the audit trails with a timestamp and the IP address of the machine from which the user viewed the data.

Canned report to demonstrate GDPR compliance stature

Password Manager Pro now comes with a canned report that tells you the stature of your compliance with specific requirements listed in Chapter 3 of the General Data Protection Regulation (GDPR), in terms of how users' personal data is handled within the product. This report, apart from providing a holistic view of how personal data is handled, will also prove useful while preparing for privacy audits.

Provision to authorize selective administrators with privacy administration privileges

From v9700 onwards, a new "Authorized Administrators" option will appear under Admin >> Settings. This option can be used to authorize only the desired administrators with the privilege to view, access, and modify the following Password Manager Pro settings:

Note:
When you upgrade to v9700 from earlier versions, users with the following roles will be automatically assigned as authorized administrators:

Password protected exports

Administrators can now include an additional layer of password protection for export operations across Password Manager Pro. This applies to,

The authorized administrator can either set a global passphrase which will be uniformly used for the aforementioned export operations or allow the users to define their own passphrase for their exported files.

Mandating administrator acknowledgement of data transfer while setting up integration with third party applications

Henceforth, when the Password Manager Pro administrator sets up integration with the services mentioned below, the administrator will be required to acknowledge the data transfer from Password Manager Pro server for each respective integration.

Support for Encryption at Rest (EAR) while using MS SQL server as the backend database

For Password Manager Pro installations that function with a MS SQL server as the backend database, Transparent Data Encryption (TDE) is supported henceforth to achieve EAR. TDE encrypts all the data and log files stored in the SQL server and the key used to encrypt the database is also secured further with a certificate to enhance protection.

Backup file encryption

Database backup (.zip) files in Password Manager Pro-both on-demand and scheduled, will hereafter be encrypted with the Password Manager Pro master encryption key and stored in the destination directory securely. In case of Password Manager Pro installation running a remote MS SQL server database, the backup file will be encrypted only if the specified backup destination is within the server in which Password Manager Pro is installed and not the remote machine.

Privacy controls for canned reports

Password Manager Pro now allows authorized administrators to configure privacy settings for canned reports. Administrators can choose from an exhaustive list of personal data, deciding whether each input in the list should be completely omitted from the reports or included as masked information.

IP restrictions

IP-based restrictions are now supported to limit inbound connections and minimize unwanted traffic to Password Manager Pro server. Restrictions can be configured for web access, API calls, communication from native mobile applications, browser extensions, and Password Manager Pro agents deployed on target machines. The IP restrictions can be set at various levels and combinations, such as defined IP ranges or individual IP addresses. The authorized administrator can either whitelist or blacklist the set of desired IP addresses.

Trash can for delete operations

Users and resources in Password Manager Pro can now also be moved to trash alternatively instead of permanent deletion, along with the option to restore from trash when needed. The trashed users and resources will be retained by Password Manager Pro only until the next rotation schedule is carried out for the master encryption key.

Purging selective session recordings

Earlier, session recordings and chat logs could only be purged in bulk by configuring to delete recordings that are older than a specified number of days. From v9700 onwards, session recordings can also be individually selected under Audit >> Recorded Sessions and purged. Additionally, chat logs for a specific session recording can also be deleted while retaining the recording itself and vice versa.

Managing unidentified email addresses in Password Manager Pro

A new provision has been added to enable administrators to track and remove unidentified email addresses in Password Manager Pro which do not belong to any of the users in the application. This provision currently allows management of unidentified email addresses which are captured in "User Sessions" audit as well as those that are configured as notification email recipients for scheduled tasks' completion statuses and license expiry alerts.

Emergency Measures

In the rare scenario that a suspicious activity is sensed within Password Manager Pro but has not yet been identified, a set of recommended best practices that can be carried out have been added under Admin >> Manage >> Emergency Measures. The illustrative list of incident response actions give the administrator a head start on stopping all inward and outward communication to and from Password Manager Pro server respectively, such as stopping API calls, blocking agent communication, and stopping the SSHD server.

Bug Fixes

Security Fix


Password Manager Pro release (9601) (08th May 2018)

Bug Fixes

Security Fix


Password Manager Pro release (9600) (04th April 2018)

New Features & Enhancements

SQL and SSH Remote Terminal Sessions with Windows Domain accounts

Secure Cloud Storage Options for Anytime, Anywhere Access to Passwords

Active Directory - Synchronization Enhancements

Version 9600 introduces a revamp to the 'Synchronization Schedules' screen under Active Directory (AD) configuration. The screen now includes a sidebar navigation tab that lists the AD domains that have synchronization schedules configured and also offers a separate view of synchronization schedules configured for users and resources respectively. The enhancements include:

Microsoft CA Certificate Signing

Password Manager Pro now allows users to get certificate requests signed from Microsoft Certificate Authority, thereby facilitating complete life cycle management for certificates issued by Microsoft Certificate Authority.

CMDB Integration for SSL Certificates Synchronization

Administrators can now sync SSL certificates stored in Password Manager Pro's repository with ManageEngine ServiceDesk Plus CMDB and map certificates to specific servers / applications in the CMDB. This allows them to monitor their usage and expiration from ServiceDesk Plus' CMDB.

SSL Certificate Groups

This enhancement allows users to organize SSL certificates into logical groups based on various criteria and execute actions in bulk for the groups.

Localization Support for Turkish

Introducing localization support for Turkish in Password Manager Pro's multi-language editions, in addition to Chinese, Japanese, Spanish, German, French, and Polish languages.

Disable Password Resets for Privileged Accounts

This enhancement to account creation and edit actions under Resources tab allows administrators to disable both local and remote password resets for all or a specific set of accounts associated with a resource.

Bug Fixes

Security Fix


Password Manager Pro release (9502) (20th February 2018)

Enhancements & Bug Fixes


Password Manager Pro release (9501) (31th January 2018)

Bug Fixes


Password Manager Pro release (9500) (11th January 2018)

Feature Enhancements

Bug & Security Fixes


Password Manager Pro release (9402) (15th December 2017)

Bug fixes:


Password Manager Pro release (9401) (11th December 2017)

Bug fixes:


Password Manager Pro Release 9.4 (9400) (30th November 2017)

New Feature

Key Manager Plus Integration

The tight integration brings all features of Key Manager Plus right inside Password Manager Pro to provide a complete Privileged Identity Management solution.This help enterprises centrally manage, monitor, control and audit the entire life cycle of privileged passwords, SSH keys and certificates from a single user interface.

Security fix:

Bug fixes


Password Manager Pro Release 9.3 (9300) (7th November 2017)

New Feature

Enhancements & Bug Fixes


Password Manager Pro Release 9.2 (9200) (12th October 2017)

New feature

IIS Web.config discovery

Password Manager Pro can now identify the domain accounts which are used in the connection string of IIS web.config files that are stored in PMP. While changing the password of the domain accounts stored in Password Manager Pro, it can automatically update the password in the IIS web.config files.

Enhancements and fixes

  1. Password Access Control Workflow has been upgraded. With this update:
    • One or more user groups can be designated to approve password access requests.
    • Earlier, some users can be excluded from access control. Now, you have an option to exclude both users and user groups from access control.
    • Users can specify when they want to access the password - now or later, while making a request and can also send a reminder mail before the access time.
    • Similarly, administrator can specify when the user can access the password - now or later, while processing the request.
    • In addition, users can be enforced to provide reason for password retrieval.
    • Reminder e-mail can be sent to the administrator to approve the password request before the stipulated time.
    • A grace time of upto 60 minutes can be provided to the user when the access time ends.
    • Auto check-in time can be specified when the request is approved by the administrator.
    • Maximum time period can be specified after which the pending access request becomes void.
  2. Password Manager Pro now integrates with ManageEngine ServiceDesk Plus by validating change request in addition to the ticket ID entered by the user in the ticketing system. And validated occurs only when the change ID provided is approved in ManageEngine ServiceDesk Plus.
  3. Password Manager Pro enables recording of RDP remote session launched from the product and you can trace the recorded RDP remote session through the resource name, user who launched the session, time at which the session was launched. In addition, start and stop audit for RDP remote session has been enhanced now.
  4. In v9000 and above, the mail notification sent to the users about the access permission shared or revoked contained blank values. This has been fixed now.
  5. In v9000 and above, 'resource actions' icon was not listed for user with custom role 'edit resource'. This has been fixed now.
  6. From v9200 and above, a resource can also be searched in the search column by providing the resource URL. Earlier, a resource can be searched only by providing the resource name, description or resource type.
  7. In v9000 and above, configure access control deactivation for resources in bulk was not working. This has been fixed now.
  8. In v9100 and above, when enabling two factor authentication - Duo security, the screen hangs at 'Initializing web client'. This has been fixed now.
  9. In v8704 and above, Secondary DNS field in WindowsDomain resource type was removed. This has been fixed now.
  10. Earlier, already existing resource type can be added again with change in alphabet case (lower case or upper case). This has been fixed now.
  11. Earlier, addon failed to auto-fill passwords to the websites in client org. This has been fixed now.
  12. Earlier, Access Snapshot was not working upon clicking 'View per page' to 50 / 75 / 100 resources. This has been fixed now.
  13. Earlier, Windows discovery fails when the username / password contained angular brackets and the harmful content audit has the actual password in clear text. This has been fixed now.

Password Manager Pro Release 9.1 (9101) (7th August 2017)

Enhancements & Fixes


Password Manager Pro Release 9.1 (9100) (13th July 2017)

New Features

Enhancements & Fixes


Password Manager Pro Release 9.0 (9003) (16th June 2017)

Bug Fixes


Password Manager Pro Release 9.0 (9002) (13th June 2017)

Bug Fixes


Password Manager Pro Release 9.0 (9001) (2nd June 2017)

New Features, Enhancements, Changes & Fixes

Security Fixes


Password Manager Pro Release 9.0 (9000) (28th April 2017)

New Features, Enhancements, Changes & Fixes


Password Manager Pro Release 8.7 (8704) (06th April 2017)

Security Fix


Password Manager Pro Release 8.7 (8703) (04th April 2017)

Issues & Fixes

Security Fix


Password Manager Pro Release 8.7 (8702) (09th March 2017)

Issues & Fixes


Password Manager Pro Release 8.7 (8701) (16th February 2017)

Enhancements & Fixes

Security Fixes


Password Manager Pro Release 8.7 (8700) (6th February 2017)

New Features, Enhancements & Fixes


Password Manager Pro Release 8.6 (8604) (23rd January 2017)

Security Fixes


Password Manager Pro Release 8.6 (8603) (30th December 2016)

Enhancements & Fixes

Security Fixes


PMP Release 8.6 (8602) (14th Dec 2016)

Bugs & Security Fixes


PMP Release 8.6 (8601) (2nd Dec 2016)

New Features

Enhancements

Bug Fixes

Security Fixes

A function level access control vulnerability resulted in unauthorized permission to edit Password Manager Pro's pre-defined password policies (Strong/Medium/Low/Offline Password Fil). In addition, the vulnerability also allowed the deletion of the password policy that has been set as default. This has been fixed now.


Password Manager Pro Release 8.6 (8600) (11th November 2016)

New Features & Enhancements


Bug & Security Fixes


Password Manager Pro Release 8.5 (8505) (18th October 2016)

Enhancements & Bug Fixes

Bug & Security Fixes


Password Manager Pro Release 8.5 (8504) (19th September 2016)

Enhancements & Bug Fixes

Bug & Security Fixes


Password Manager Pro Release 8.5 (8503) (25th August 2016)

Feature Enhancements & Bug Fixes


Password Manager Pro Release 8.5 (8502) (27th July 2016)

Feature Enhancements & Bug Fixes

Security Fixes


Password Manager Pro Release 8.5 (8501) (9th July 2016)

Feature Enhancements

Bug & Security Fixes


Password Manager Pro Release 8.5 (8500) (June, 2016)

Security Fixes & Enhancements:


Password Manager Pro Release 8.4 (8404) (May, 2016)

Security Fix


Password Manager Pro Release 8.4 (8403) (April, 2016)

New Features

Enhancements & Bug Fixes

Security Fixes


Password Manager Pro Release 8.4 (8402) (March, 2016)

Bug Fixes:


Password Manager Pro Release 8.4 (8401) (February, 2016)

Bug Fixes:


Password Manager Pro Release 8.4 (8400) (February, 2016)Video demo

New Features:

Enhancements & Bug Fixes


Password Manager Pro Release 8.3 (8303) (December, 2015)

Enhancements & Bug Fixes


Password Manager Pro Release 8.3 (8302) (November, 2015)

Enhancements & Bug Fixes


Password Manager Pro Release 8.3 (8301) (October, 2015)

Bug Fix:


Password Manager Pro Release 8.3 (8300) (October, 2015)

New Features & Enhancements

Bug Fix:


Password Manager Pro Release 8.2 (Build 8200) (August, 2015)

New Features & Enhancements

Bug Fix:


Password Manager Pro Release 8.1 (Build 8102) (July, 2015)

Bug Fixes


Password Manager Pro Release 8.1 (Build 8101) (July, 2015)

Bug Fixes


Password Manager Pro Release 8.1 (Build 8100) (June, 2015)

New Features & Enhancements

Changes & Bug Fixes


Password Manager Pro Release 8.0 (Build 8001) (May, 2015)

Bug Fixes


Password Manager Pro Release 8.0 (Build 8000) (May, 2015)

New Features & Enhancements

Changes & Bug Fixes


Password Manager Pro Release 7.6 (Build 7600) (March, 2015)

New Features / Enhancements:

Changes / Bug Fixes:


Password Manager Pro Release 7.5 (Build 7501) (Jan, 2015)

Enhancements & Bug Fixes:


Password Manager Pro Release 7.5 (Build 7500) (Jan, 2015)

New Features / Enhancements:

Changes / Bug Fixes:


PMP Build 7105 (Nov, 2014)

Bug Fixes & Enhancements


PMP Build 7104 (Oct, 2014)

Bug Fix


PMP Build 7103 (Sep, 2014)

New Features & Enhancements:

Bug Fixes

PMP Build 7102 (Aug, 2014)

Bug Fixes

PMP Build 7101 (Aug, 2014)

New Features / Enhancements

Bug Fix

Password Manager Pro Release 7.1 (Build 7100) (June, 2014)

New Features / Enhancements

Cloud Environment Password Management: New RESTful APIs: Share Resources from Home Tab & Global Search Results
Bug Fixes / Changes

PMP Release 7.0 (Build 7003) (June, 2014)

Changes & Bug Fixes

PMP Release 7.0 (Build 7002) (Apr, 2014)

New Features & Enhancements
Changes & Bug Fixes

PMP Release 7.0 (Build 7001) (Mar, 2014)

New Features & Enhancements Bug Fixes, Changes

PMP Release 7.0 (Build 7000) (Jan, 2014)

New Features & Enhancements
Changes & Bug Fixes
  • When auto logon for web apps had been configured through PMP bookmarklet, certain web sites and application do not allow auto submission of credentials for automatic login. To handle such cases, provision has now been made only to auto-fill the details. Submission can be done by the users. This can be configured from Resource >> More Actions.
  • Email notifications sent from PMP for password retrieval and change events did not contain the reason field. This has now been fixed
  • Earlier, when PMP web interface is launched in Internet Explorer, the login name of the custom categories created as part of 'Personal tab' were not getting displayed. This has been fixed.
  • In PMP v6902, when access control workflow had been enabled, when a user checks-in a password after exclusive use, it was not being reset. This has been fixed now.
  • When using global search in PMP with PostgreSQL as backend database, extended ASCII characters typed as search strings were not getting displayed. This has been fixed.
  • Earlier, when PMP web interface is launched in Internet Explorer, there were problems in playing back the RDP sessions recorded by PMP. This has been fixed.
  • Earlier, there were issues in generating custom reports with User Audit as the base. This has been fixed.
  • Earlier, the alerts on the status of High Availability (in PMP with MySQL as backend database) were not being sent. This has been fixed.

PMP Build 6904 (Nov, 2013)

Bug Fixes


PMP Build 6903 (Sep, 2013)

New Features / Enhancements

Bug Fixes


PMP Build 6902 (July, 2013)

New Features / Enhancements

Google Authenticator for Two Factor Authentication

Exporting Resource Groups

Bug Fixes


PMP Build 6901 (June, 2013)

New Features / Enhancements

Bug Fixes

PMP Release 6.9 (Build 6900) (May, 2013)

New Features / Enhancements

Bug Fixes


PMP Build 6803 (Mar, 2013)

Bug Fix


PMP Build 6802 (Feb, 2013)

Changes/Bug Fixes


PMP Build 6801 (Jan, 2013)

Enhancements/Changes/Bug Fixes


PMP Build 6800 (Dec, 2012)

Enhancement/Change


PMP Build 6701 (Oct, 2012)

Changes / Bug Fixes


PMP Build 6700 (Oct, 2012)

New Features & Enhancements

Privileged Session Recording

Auto Logon for Web Apps

Manipulating Explorer Tree

Password Access Control Report

Changes / Bug Fixes


PMP Build 6600 (July, 2012)

New Features & Enhancements

New Resource Types Support for Remote Password Synchronization

Super-Administrator as 'Break Glass Account'

Provision to keep the super-administrator role as a break-glass account for emergency access to passwords. Hitherto, any administrator could change the role of another administrator (not himself) as super-administrator. PMP now provides the option to prevent administrators from creating super-administrators. Super-administrator role can be used as break glass account as explained below:

PMP Agents

Password History

New Browsers Support

Reports

Bug Fixes & Changes


PMP Build 6504 & 6505 (June, 2012)

Bug Fix


PMP Build 6503 (March, 2012)

New Features/Bug Fixes/Changes


PMP Release 6.5 (March, 2012)

New Features & Enhancements
No-Frills Auto Logon for Launching Windows RDP and SSH Remote Terminal Sessions

Secure, Offline Access to Passwords with Auto Sync

New Resource Types for Remote Password Synchronization

  • Support for remote password reset and verification of VMWare ESXi and HP iLO resources

Custom Fields

  • Provision for creating additional fields to store file type input. Upto 4 files of any type can be attached to every resource and every account within a resource

Bug Fixes & Changes

  • The option to restrict the users from exporting passwords in plain-text has been moved from 'General Settings' to "Admin >> Customize >> Export Passwords - Offline Access" GUI. The option is also available in 'User' and 'User Group' tabs
  • Earlier, there were issues in displaying custom fields when creating/editing resources. This has been fixed.
  • In the GUI to create copies of resources/accounts and in the GUI to move accounts from one resource to another, the names of resources and accounts will henceforth be shown in alphabetical order
  • Earlier, in some specific scenarios (where authentication was required) there were issues in sending emails from PMP. This has been fixed.
  • Earlier, in the case of auto logon helper (browser plug-in deployment model) there was an issue in launching direct connection to target systems. This has been fixed.
  • Earlier, there were issues in launching PMP web-interface in Firefox 11. This has been fixed.

PMP Release 6.4 - Build 6404

New Features / Bug Fixes / Changes


PMP Release 6.4 - Build 6403

Bug Fixes / Changes


PMP Build - 6402

New Features / Enhancements
Password Manager Download

Bug Fixes / Changes


PMP Build - 6401

New Features / Enhancements
Password Manager Download

MS SQL Server as Backend Database

High Availability Support with MS SQL Server

AES 256 Encryption

Remote Password Reset of LDAP Servers

Password Reset Schedules

PMP Agents

LDAP - PMP User Database Synchronization

Active Directory

Copy Resources

Copy/Move Accounts

Configuring Server Settings, SSL Certificates through GUI

Custom SSH/Telnet ports

Instant Backup

Performance Enhancements

Changes / Bug Fixes


PMP Release 6.3

Enhancements

Changes & Bug Fixes

New Features / Enhancements
Password Manager Download

PhoneFactor Authentication

Smart Card Authentication

Custom Reports

High Availability

Changes & Bug Fixes


PMP Release 6.2 - Build 6201

New Features / Enhancements
Password Manager Download

SIEM Integration

Two Flavours of APIs for A-to-A Password Management

Local Service Account Password Rese

Enhancements in Bulk Password Reset

Reports

High Availability

Bug Fixes / Changes


PMP Release 6.1 - Build 6104

New Features / Enhancements
Password Manager Download

Nested Resource Groups

Password Explorer

Remote Password Synchronization for Juniper Netscreen Devices

Templates for Customizing Email Notification Content

Export Passwords of Resource Groups

Bug Fixes & Changes

 

PMP 6002 - Bug Fixes & Changes


PMP Release 6

New Features / Enhancements
Password Manager Download

Password Access Control Workflow

Two-Factor Authentication

Firefox 3 Plug-in

Flash 10 Support

Remote Password Reset

Password Policy

PMP Login GUI

New OS Support

Changes/Bug Fixes

Importing Resources

Resource Type

Active Directory Integration

Reports

Single SignOn

Usage of Single Quote in Email Address


PMP Release 5.4

New Features / Enhancements
Password Manager Download

Remote password synchronization for Oracle DB Server and Sybase ASE

On demand check for Password Integrity

New Resource Creation in A-to-A Password Management

Support for non-English characters

Use of 'sudo' for Privilege escalation

Agent-based password reset

Audit Views

Changes & Bug Fixes


PMP Release 5.3

New Features / Enhancements
Password Manager Download

Changes/Bug Fixes


PMP Release 5.2

New Features / Enhancements
Password Manager Download

Remote password synchronization for MySQL servers and HP ProCurve devices

PMP in two editions

Reports in .xls format

Changes / Bug Fixes


PMP Release 5.1

New Features / Enhancements
Password Manager Download

Remote password synchronization for Cisco devices, MS SQL servers

Helper for automatic login to target systems

SSL connection with external identity stores

Windows Scheduled Task Password Reset

Alerts for audit events

Activity, integrity and compliance Reports

Performance Improvements

Changes & Bug Fixes


PMP Release 5.0

New Features / Enhancements
Password Manager Download

High Availability Support

Uninterrupted access to passwords by deploying redundant PMP server and database instances

A-to-A, A-to-DB Password Management

Support for Application-to-Application/Database password retrieval and management by deploying 'Password Management APIs'

Windows Service Account Reset

Support for automatically resetting the passwords of associated windows service accounts when the domain account passwords are reset through PMP. Optionally the windows services could be restarted remotely to force the password change immediately

Password Reset Listener

Support for invoking a custom script or executable as a follow-up action to Password Reset action in PMP

Super Admin Support

Any administrator could be made as a 'Super Administrator' with privilege to view and manage all resources in PMP

Encryption Key Management

Provision for securely storing the unique encryption key (generated during PMP installation) somewhere outside PMP and instructing PMP to read it accordingly

Importing Users/Resources from Active Directory

Resource Type Customization

In addition to adding custom fields it is now also possible to remove built-in fields for the various resource types

Notification for Passwords Out of Sync

When the passwords present in PMP differ with those in the actual resource, notifications (informing the out of sync) could be sent to desired recipients

Dashboard Reports

Changes & Bug Fixes


PMP Release 4.8 (Build 4803)

New Features / Enhancements
Password Manager Download

Bug Fixes

Changes


PMP Release 4.7 - Build 4701

Bug Fix


PMP Release 4.7 (Build 4700)

New Features / Enhancements
Password Manager Download

Bug Fixes

Limitation


PMP Release 4.6 (Build 4600)

New Features / Enhancements
Password Manager Download

Changes

Bug Fixes

Password Manager Pro - Enterprise Password Management Software trusted by

Get
Quote
Technical Support Request Demo