SecureDoc Enterprise Server

Release Notes

Product Version: 9.1 HF2

Published October 12^th, 2024

SecureDoc Support

WinMagic strongly recommends that you install the most recent software release to stay up to date with the latest functional improvements, stability fixes, security enhancements and new features.

Please visit Knowledge Base Article 1397 for more information on End of Life and End of Support timelines for SecureDoc software releases.

About This Release

This document contains valuable information about the current release. We strongly recommend that you read the entire document.

Recommended – WinMagic recommends this service release for all environments. Apply this update at your earliest convenience.

NOTE:  End of Life date for Hotfixes is the same as the Version or Service Release upon which they are based.

Download the latest release notes for each version listed within Knowledge Base Article 1756.

System Requirements

If using features that use the TPM (e.g., MagicEndpoint, or other TPM-based authentication such as TPM protection for Key Files), devices must have TPM 2.0 – TPM 1.2 or earlier are not supported.

For server and client system requirements: https://www.winmagic.com/support/technical-specifications

For supported devices, drives, smartcards, and tokens: https://www.winmagic.com/device-compatibility

Note:  It is strongly recommended to initially install Full-Text Indexing feature (Full-Text Search) into the Database Engine, before performing an SES installation.

More information is available here: http://msdn.microsoft.com/en-us/library/ms143786(v=sql.100).ASPX

During the installation of SES, if Full-Text Indexing has not been installed, a message will appear indicating the absence of the Full-Text Indexing. This message will not allow the user to stop the installation of SES which will require retrofitting Full-Text Indexing into an existing SQL Server.

Note:  Use of the SES Console will require the user to have at least local admin rights on the server or client device (e.g., Admin desktop) on which it runs for the console to function properly.

Client OS Support

Devices utilizing MagicEndpoint authentication must have Windows 10 or 11 – Windows 7 is not supported.

For a detailed view of which specific versions of SecureDoc are supported under various versions of Windows, macOS or Linux:  See: https://www.winmagic.com/support/technical-specifications

Mobile Token-based authentication using Bluetooth is not supported on any pre-Windows 10 Operating Systems

The KnownConfigs.XML File

Customers are strongly advised to download the most current KnownConfigs.XML file, then replace the current version (if older) in the SES Application folders and

Installation Packages.

WinMagic strongly recommends that you seek out the most up-to-date version of the KnownConfigs.XML file and incorporate it into your SES implementation on a regular basis (e.g., monthly). This will help ensure your SES Version will take advantage of new client installation override settings that have been added since the version of the KnownConfigs.XML file that came with your version of SES. This will improve installation success on any new device makes/models you might purchase since installing SES, utilizing the new special settings available in newer versions of this file.

Customers are advised to look to the SecureDoc Knowledge Base for a link to the available KnownConfigs.XML files, then check that document (e.g., on a monthly basis) for updates to this file, then use the new version to replace all versions of the KnownConfigs.XML file in their SES Implementation folder structure. For example:

1. Position Windows Explorer to: c:\Program Files(x8)\WinMagic\SDDB-NT, then

2. Search for files like *.xml.

3. Sort the resulting search list by name

4. In each directory where a KnownConfigs.XML file is found, replace it with the new one that you have downloaded from the WinMagic Knowledge Base article.

Additional information can be found here: Installing or updating the KnownConfigs.xml file (Applies to SES from Version 7.5 onward).

The latest versions of the KnownConfigs.XML files can be found at the following links:

• SecureDoc Device KnownConfigs.XML File for SES V8.2 And Later- Download the

latest version of this here: https://na80.salesforce.com/articles/Service/SecureDoc-Device-KnownConfigs-XML-File-for-SES-V8-2-Download-the-latest-version-of-this-here

• SecureDoc Device KnownConfigs.XML File for SES V7.5 - Download the latest

version of this here: https://na80.salesforce.com/articles/Service/SecureDoc-Device-KnownConfigs-XML-File-for-SES-V7-5-Download-the-latest-version-of-this-here

The contents of the KnownConfigs.XML file are reserved to be developed and advanced by WinMagic solely. While customers might consider enhancing it, WinMagic cannot be held responsible for issues that might arise from such modifications and may (at its sole discretion) levy an additional support charge to any customers that encounter support issues that can be traced back non-sanctioned customer-initiated changes to KnownConfigs.XML.

WinMagic welcomes customer ideas and suggestions on how KnownConfigs.XML can be extended and improved, but WinMagic reserves the sole right to test, approve and to publish any changes to KnownConfigs.XML that it deems to be in the broader customer interest, and makes no commitment to act upon or publish all, or indeed any customer-recommended changes.

Version 9.1 SR1 HF2

IMPORTANT

Starting with version 9.1, support for 32-bit operating systems has been discontinued to align with industry trends and focus on optimizing performance, security, and features for modern 64-bit environments.

Customers deploying version 9.1 SR1 HF2 on devices with Self-Encrypting Drives (SEDs) may encounter unexpected messages during installation. If this occurs, we recommend contacting WinMagic Support for assistance. To ensure compatibility with the latest developments and take full advantage of our software’s capabilities, users are encouraged to transition to 64-bit operating systems.

Which customers should upgrade to 9.1 SR1 HF2?

Version 9.1 SR1 HF2 is a release upgrade to the SecureDoc Enterprise Client and Server.

All customers are recommended can safely upgrade to 9.1 SR1 HF2

Why upgrade?  https://winmagic.com/blog/5-reasons-to-update-your-winmagic-securedoc-investment/

Note:  

To use Microsoft Azure AD instead of on-premises Active Directory, you must upgrade to version 9.0 or higher. Earlier versions of SecureDoc Enterprise Server do not support Azure AD.  

For Azure AD-joined devices, ensure they are either initially installed with version 9.0 or higher, or upgrade existing devices to version 9.0 (or later) before joining them to Azure AD.

NOTE: SecureDoc installer now no longer supports installation on macOS Mojave. Version 9.1 ends support for macOS Mojave, and as a result the macOS Mojave target has been removed from the SecureDoc executables framework, installation, and run-time scripts.

End of Life Notice:

macOS Catalina has officially reached its End of Life (EOL). We no longer support this version, and users are strongly encouraged to upgrade to a newer macOS version to maintain security and functionality.

IMPORTANT: For customers wishing to utilize SecureDoc’s Bluetooth Low Energy mobile device-based authentication at Pre-Boot:

1 - The device Profile must specify the Linux-based Pre-Boot for UEFI devices – termed as PBLU in this documentation.  Phone-based authentication (whether using Bluetooth Low Energy communication or network-based communication) does not work with

2 – Bluetooth must be enabled in the endpoint computer’s hardware configuration (BIOS or UEFI settings), as use of Bluetooth Low Energy mobile device-based authentication is a compelling security feature.,

NOTE: These release notes are presented in a new format compared to prior releases. A) Rather than leading with the ticket number(s), these will include the ticket(s) at the end of each release note; b) Issues and improvements will be grouped into meaningful groups that discuss specific aspects of the product (e.g., Authentication, Server, client, and other groupings).

How to Install/Upgrade

Customers with an active support plan should contact [email protected] to receive the latest download link for their SecureDoc upgrade.

Improvements

SecureDoc Console or SESWeb Console

SDClient CredentialProvider Can Now Retrieve Keyfile from SES if Not Available Locally.

Description: New functionality allows the SDClient CredentialProvider to get a keyfile from SES when it's missing locally, ensuring users can still log in to Windows. SES checks if the user is allowed to log in, retrieves the keyfile securely, and completes the login process automatically. If the keyfile isn’t found, users just need to enter their username, and the system will handle the rest. If password retrieval fails, users can still log in manually.

Solution: This update supports PW/BLE/Network Phone users to log in using PBConnex via both SES and Client-SDCP.

Note: Users should have their final password ready. The system smoothly associates PBN users with their devices after username submission.

Affected tickets: SD-48926

IDP

Support for Additional AD Attributes in SAML Assertion.

Description: We have introduced new Active Directory attributes needed for SAML assertions to improve system integration and compatibility with service providers. This update helps ensure that user attributes are accurately mapped during the SAML authentication process.

Solution: A new attribute, sAMAccountName, has been added to the IdP portal. This attribute is now supported for user mapping when configuring service providers using SAML, making the setup process smoother and more efficient.

Affected tickets: SD-48928

Fixed Bugs

SecureDoc Console or SESWeb Console

Enhanced Reliability for IdP Network Phone Authentication.

Description: We've improved the process for network phone authentication to ensure smoother login experiences, even when multiple clients (desktop and mobile) are active. Previously, authentication could occasionally end prematurely, particularly when switching between login methods or devices.

Solution: The system now verifies the correct authentication method before proceeding, ensuring compatibility with the client type. As well as optimized the handling of responses from multiple devices to prevent interruptions and provide a seamless authentication flow.

Affected tickets: SD-49161

New Option to Manage Debug Logging During Installation.

Description: In WinMagic v9.1, a new feature has been introduced to provide users with control over debug logging during installation. This feature allows users to disable debug logs when they are not needed, making the installation process more streamlined.

Solution: A new setting, "Disable installation-time debug log", has been added to the SES Console. By default, this option is "disabled", meaning debug logging is active during installation. Users can enable this option if they want to turn off debug logging. This feature is currently available for Windows packages, offering greater flexibility during installation.

Affected tickets: SD-49052

Enhanced Search Functionality for SES Web Query Fields.

Description: We’ve improved the search functionality in SESWeb, allowing for more granular searches across different fields. While the User ID remains the main search field, customers can now perform detailed searches on individual columns, including First Name, Last Name, and Email, to locate specific records.

Solution: Full-text search for users has been reintroduced, though it remains disabled by default. To utilize this feature, customers will need to enable Full-Text Search in their SQL Server and activate the option in SESWeb under global settings. Once enabled, the search function will return all relevant data based on the entered keywords across the User ID, First Name, Last Name, and Email fields.

This enhancement is currently available on the user support page, where all fields can now be searched.

Note:

- The search now supports prefix searches, allowing users to find results efficiently.

- Search functionality covers key fields, including User ID, First Name, Last Name, and Email, providing a focused and effective search experience.

Affected tickets: SD-48927

SDWeb Sign-in Issue with Multiple Domains.

Description: After upgrading from version 9.0 SR4 to 9.1, some users experienced difficulties signing into SDWeb, particularly when they had accounts for multiple domains in SES using the same User ID.

Solution: The issue related to multi-domain sign-ins has been resolved, and users can now log in successfully.

Affected tickets: SD-48811

Linux

Improved Display for Primary Ownership Password Entry.

Description: We resolved an issue where, after pressing "Enter" during the "SecureDoc Primary Account Set-up" dialog, a blank screen appeared instead of the password prompt for the current user.

Solution: The issue has been resolved, and the password prompt now displays correctly during the set-up process.

Affected tickets: SD-49071

SecureDoc Client

Improved Wi-Fi Scanning for Dell Precision 3580 in Preboot.

Description: Users experienced issues when scanning for Wi-Fi networks in preboot on the Dell Precision 3580, receiving an "Access Point not found (3)" error with no networks displayed.

Solution: The issue has been resolved with improvements to the Wi-Fi scanning tool and logic, ensuring a smoother connection process in preboot.

Affected tickets: SD-48776

Upgrade from v9.1 to v9.1 SR1.

Issue: Some users experienced an issue while upgrading from v9.1 to v9.1 SR1 using the standalone installer, receiving an error related to an existing installation.

Solution: This issue has been resolved in v9.1 SR1 HF2, allowing for a smooth and successful upgrade.

Affected tickets: SD-4901648811

Wi-Fi Detection Issue Resolved After Hibernation on HP ZBook Firefly G10.

Description: An issue was identified where the Wi-Fi connection was not detected after resuming from hibernation on HP ZBook Firefly G10 devices. While everything else worked as expected, a reboot was needed to restore Wi-Fi.

Solution: The issue has been resolved with an update, ensuring the Wi-Fi connection is properly restored after hibernation without requiring a reboot.

Affected tickets: SD-48439

Shutdown Blue Screen Issue Resolved

Problem: On Panasonic Let’s note CF-SV1 systems running SecureDoc 9.1.0.1349, some users encountered a blue screen during shutdown. Instead of shutting down, the system would restart. A second shutdown attempt usually completed successfully, and the issue did not occur if SecureDoc was uninstalled.

Root Cause: According to internal analysis, the issue was caused by a driver not responding in time during the shutdown sequence, resulting in a deadlock that triggered the blue screen.

Solution: The issue was originally resolved in SecureDoc 9.1 SR1. For customers who remain on SecureDoc 9.1 and cannot upgrade SES at this time, the fix is also included in SecureDoc 9.1 Hotfix 2. All later versions contain the fix as well.

Affected Ticket: SD-51466

Limitations

SecureDoc Console or SESWeb Console

"MagicEndpoint Auto-Logout" Option Displays Incorrectly After Upgrade.

Description: After upgrading from SES version 9.0 SR4 to 9.1 SR1, the "MagicEndpoint auto-logout" option in SES Web UI shows an incorrect message. Instead of automatically logging users out after a set time, it now indicates that users will remain logged in unless they manually log out or log out of Windows.

Solution: This is a known limitation and will not be addressed in this fix.

Affected tickets: SD-48714

Contact WinMagic

Acknowledgements

This product includes cryptographic software written by Antoon Bosselaers, Hans Dobbertin, Bart Preneel, Eric Young ([email protected]) and Joan Daemen and Vincent Rijmen, creators of the Rijndael AES algorithm.

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.OpenSSL.org/).

WinMagic would like to thank these developers for their software contributions.

©Copyright 1997 – 2025 by WinMagic Corp. All rights reserved.

Printed in Canada Many products, software and technologies are subject to export control for both Canada and the United States of America. WinMagic advises all customers that they are responsible for familiarizing themselves with these regulations. Exports and re-exports of WinMagic Inc. products are subject to Canadian and US export controls administered by the Canadian Border Services Agency (CBSA) and the Commerce Department’s Bureau of Industry and Security (BIS). For more information, visit WinMagic’s web site or the web site of the appropriate agency.

WinMagic, SecureDoc, SecureDoc Enterprise Server, Compartmental SecureDoc, SecureDoc PDA, SecureDoc Personal Edition, SecureDoc RME, SecureDoc Removable Media Encryption, SecureDoc Media Viewer, SecureDoc Express, SecureDoc for Mac, MySecureDoc, MySecureDoc Personal Edition Plus, MySecureDoc Media, PBConnex, SecureDoc Central Database, SecureDoc Cloud Lite, MagicEndpoint and MagicEndpoint FIDO Eazy are trademarks and registered trademarks of WinMagic Inc., registered in the US and other countries. All other registered and unregistered trademarks herein are the sole property of their respective owners. © 2023 WinMagic Corp. All rights reserved.

© Copyright 2025 WinMagic Corp. All rights reserved. This document is for informational purpose only. WinMagic Corp. makes NO WARRANTIES, expressed or implied, in this document. All specification stated herein are subject to change without notice.