Software Full Drive Encryption Release Notes

Version 1.2.1.17

Previous Version: 1.2.1.11

Special Notice

Starting with version 1.2.1.17, FDE requires the presence of the Microsoft UEFI CA 2023 secure boot certificate. The installer will prevent installation of FDE if this certificate is not present. For more information, see this Cigent Security Advisory.

Enhancements

• Added support for protection of user data partitions on boot drive.
• Added a partitions page to the EFI application to enable partition protection management.
• Added additional partition visibility to the windows application.
• Updated application naming and title text to use Full Drive Encryption consistently throughout the product.
• Updated the login page for a cleaner and more consistent user experience.
• Aligned title icons and text in the FDE application for improved visual consistency.
• Improved boot-next handling to support more reliable post-operation boot behavior.
• Improved erase-drive handling by clearing active keys held by the operating system during erase operations.
• Updated activity logging to include a source field for improved event tracking and troubleshooting.
• Improved font handling consistency in the EFI application.

Resolved Issues

• Resolved an issue where the Activity Summary page did not include all expected activity types.
• Resolved an issue where uninstalling through the CLI could add an invalid device entry to cigent_status output.
• Resolved an issue where uninstalling through the CLI could still boot into UEFI after the uninstall completed.
• Resolved an issue where validating a multi-serial license through the CLI could incorrectly report the license as invalid.
• Resolved an issue where the system could reboot immediately after CLI uninstall completed without warning.
• Resolved an issue where the login button displayed incorrect text.
• Resolved smart card enrollment failures that could prevent smart cards from being added to users.
• Resolved an issue where smart card PIN entry was limited to 8 characters.
• Resolved an issue where administrators could change the password of an existing user through the Add User workflow.
• Resolved an issue where self-enrolled users could add password authentication to their own user account.
• Resolved an issue where a User Admin could see invalid fields when viewing a self-enrolled user.

Version 1.2.1.11

Previous Version: 1.2.1.5

Enhancements

• Added a new UserAdmin role for administrators responsible for user management only. 

Resolved Issues

• Corrected username validation to properly accept required characters.
• Resolved an issue that caused an incorrect error message when adding a smart card to a new user.
• Addressed an issue preventing access to the UEFI screen after installation.
• Resolved a database error that occurred when changing a user password.
• Restored Self-Enroll button visibility when Enrollment is enabled.
• Corrected the error message displayed when creation of the initial administrator account fails.
• Resolved multiple credential-related errors encountered during MSI installation.
• Corrected an issue where re-enrolling a higher-role account caused it to be downgraded to a standard user.
• Improved Remember Me functionality so user sessions are retained as expected.
• Restored the logout notification shown after smart card credentials are removed following authentication.
• Corrected an issue that allowed the same smart card to be added to multiple users.

Version 1.2.1.5
Previous Version: 1.2.1.0

Resolved Issues

• Installing the MSI with an incorrect enrollment code now returns a clear and actionable error message.
• Launching the MSI directly as an executable no longer opens a broken or incomplete window.
• Self-enrolled users can now successfully add a password.
• Recovery backup creation now displays an error when non-matching passwords are provided.
• The 'Remember Me' option now functions correctly for Smart Card authentication.
• Built-in Smart Card readers on Getac systems are now properly detected.
• Getac K120 systems no longer boot twice after successful authentication.