Shavlik Protect Version History

9.2.5119.0 Update 3

Released 7/7/2016

Resolved Issues

• Resolved an issue where disabling the Microsoft Scheduler Service causes Shavlik Scheduler deployments (STDeploy) to fail.
• Resolved an issue where the maximum value for the Randomize scheduled time option was limited to 240 minutes. The new maximum is 1 minute less than the interval defined. For a daily patch task this can be randomized to a new maximum of 23 hours and 59 minutes.
• Resolved an issue where the Report Gallery closes after generating the report.
• Resolved an issue where hosted virtual deployments would only run the first custom action in the deployment template.
• Resolved an issue where a scan could return an Error 13 if deployment breadcrumb information is missing.
• Provided additional logging around custom actions during deployment.
• Resolved an issue where a scan with Auto-deploy could hang if you deploy to the same machine twice in a row. Specifically, this occurred if a test deployment was run followed by a real deployment.
• Resolved an issue in role-based administration where an unspecified user could gain full access to Protect. This bypassed the role-based feature set, but did not allow a user who was less than a full administrator to access Protect.
• Resolved an issue where jobs scheduled to execute between 6pm-12am would fail to schedule when using the Microsoft Scheduler.
• Resolved an issue where the Shavlik Protect console would crash if a VMware VM had an IP with a space at the end.
• Resolved an issue where clicking on “View results” in the Operations Monitor would change the navigator pane to show the “Results” window.
• Resolved an issue where connecting to an ESXi Hypervisor with duplicate VMs would cause an SQL exception error in Shavlik Protect when opening the console.
• Resolved an issue where, after upgrading an endpoint to Windows 10, a deployment would fail due to part of the Task Scheduler folder structure being removed if the folders were empty.
• Resolved an issue where deployment child processes timed out after 30 minutes.
• Added support for customers in disconnected environments, allowing them to export to a CSV file the list of patches that need to be downloaded. The CSV file can be moved to an internet-connected machine and the patches can be downloaded from that machine.
• Added the ability to change an agent policy without sending a check-in request to listening agents.
• Resolved an issue where a Protect manifest update that is missing a data delta in the hierarchy could cause an exception in a distribution server synchronization.
• Resolved an issue where the Deployment Notification Report is not sent if a deployment is scheduled rather than set to Deploy Now.

9.2.5046.0 Update 2

• Resolved an issue where a German console deploying to an English target would hit an exception when scheduling reboot.
• Resolved an issue where an incomplete agent result would be imported if processed with a batch of complete results.
• Resolved an issue where a vCenter Server that is configured with duplicate Service Content settings keys would cause the Protect UI to crash.
• Resolved an issue where a custom patch with a file defined for detection, but no version number defined in detection logic, would cause the scan to return an error 900.
• Resolved an issue where making a copy of a deployment template with custom actions defined would crash the console.
• Resolved an issue where using the Patch Drive Path feature with a root drive and (no sub folder) would fail to create the deployment sandbox.
• Resolved an issue where deployment to a target with C$ and a C_drive share with read-only permissions would try to copy to C_drive share and fail due to permissions.
• Resolved an issue where generating a report and filtering by a specific patch group would result in a crash.
• Resolved an upgrade issue where a certain combination of upgrade steps would result in a bad SQL query, causing certain reports to fail to generate.
• Resolved an issue where a custom action running an executable could pop up an interactive dialog on systems with “interactive session” enabled.
• Resolved an issue from Protect 9.1 and earlier where a deployment to a system that runs out of disk space gave a generic “failed” error instead of the more descriptive “not enough disk space” message.
• Resolved an issue where Predictive Patch Download would error out if any of the defined downloads do not have a URL.
• Resolved an UI discrepancy that made a deployment appear it would perform a reboot even though the deployment template was set to “no reboot.”

9.2.4988.0 Update 1

• Resolved an issue for customers who upgraded from the 9.2 beta to later versions where performing a file refresh would fail.
• Resolved an issue where upgrading from the 9.2 beta to a later version could cause a database error due to duplicate CVE data references.
• Resolved an issue where two scans running simultaneously and using different variations of the Scan Only filter could filter out all machines.
• Resolved an issue where certain environment configurations could cause content deltas to not download, resulting in a crash on startup.
• Resolved an issue where all variations of a selected patch did not download from View > Patches unless it was included in a scan result.
• Resolved an issue where, after upgrading to Protect 9.2, initial data imports failed or timed out.
• Resolved an issue where the intended behavior of patch scan templates that referenced patch groups was not always preserved after upgrading to Protect 9.2.

9.2.4918.0

• Patch Assessment and Deployment Engines
  • The engines used for patch assessment, packaging and execution of updates have been upgraded. The new engines include a number of performance, content and reliability enhancements that enable many of the new features in this release.
• Patch Content
  • The patch assessment and deployment data that Shavlik Protect consumes has been repackaged and improved in many ways.
• Patch Scan Template Filtering
  • More metadata has been added to the patch content. In addition, the Filtering tab on the Patch Scan Template dialog has been updated to allow for more precision when scanning.
• Patch View / Patch Group
  • Patch View has been completely redesigned and updated. It leverages the new content format, enabling you to view patch information in a more concise way. In addition, patch groups are now created and managed from within Patch View. This allows you to research patches and create patch groups in a more unified manner.
• Scheduled Tasks
  • Scheduled tasks on the console now use the Microsoft Task Scheduler. A new dialog, available via the Manage > Scheduled Console Tasks menu, enables you to view and manage these tasks.
• Reports
  • A new End-of-Life by Product report is now available. In addition, a new Schedule Report dialog, available via the Tools > Schedule Report menu, enables you to automatically generate a report at some time in the future.
• Predictive Patch
  • This new option enables Shavlik Protect to automatically download patches that are likely to be deployed in the near future. Downloading patches in advance of their anticipated deployment will help speed the deployment process.

• Patch Tuesday + X (days) Scheduling
  • When scheduling console scans, you now have the ability to delay a recurring scan by a number of days to coincide with a regular event. For example, you might schedule a monthly patch scan to occur the day after Patch Tuesday by using the new Add delay (days) option.
• End of Life Notification
  • Going forward, if the version of Shavlik Protect that you are using is nearing its end of life (EOL) date, a notification will be displayed when you start Shavlik Protect.
• New Prerequisites
  • Windows 10 (Pro or Enterprise Editions) is now supported on client machines
• User Interface Changes
  • Patch View has been completely redesigned.
  • Patch groups are now created and managed from within Patch View.
• In Machine View:
  • The top pane contains three new columns: Virtual Server, VM Name, and Path
  • The Virtual Assets tab has been removed from the middle pane
  • In the bottom pane, the Machines Missing and Machines Installed tabs have been combined into one new tab named Affected Machines.
• On the patch deployment template:
  • Office Install Points and Original Media support has been removed
  • The Backup files for uninstall and Quiet Mode options have been removed; they are now always enabled
  • The Distribution Servers tab has been redesigned to help identify the order in which download sources will be used
• On the patch scan template:
  • The Filtering tab has been completely redesigned
    • User criticality has been removed
    • The Software Distribution tab only shows products that have not been superseded
  • In an agent policy, all tasks are now able to be created without a recurring schedule. This allows you to define tasks that will run only via the agent user interface or by remote task initiation from the console.
  • In a machine group, the Test Existence and the Test Credentials options have been combined and are implemented by performing a power status scan.
  • In Scan View, the Scan Summary sub-pane is no longer collapsible
  • Scheduled tasks are now separated into two separate dialogs: Manage > Scheduled Remote Tasks and Manage > Scheduled Console Tasks
• In Tools > Options:
  • Display: Contains a new check box named Show service packs in View > Patches
  • Notifications & Warnings: Contains a new check box named Warn before opening 7 or more bulletins and removed the Warn before scheduling operations when the Default Credentials do not match the current user check box
  • Patch Languages: This tab has been removed.
  • Scans: Contains a new check box named Always enforce machine group exclusions
  • Deployment: Removed the Deployment Tracker address option. The address is now defined using the Console Alias Editor.
  • Logging: Contains a new check box named Diagnostic patch scanning

• The following platforms are no longer supported for use on target machines:
  • Windows 2000
  • Windows 2000 Server
  • Windows 2000 Advanced Server
  • Windows 2000 Datacenter Server
  • Windows 2000 Small Business Server
• Virtual asset summaries are no longer available from within Machine View. All virtual asset information is now available using the Virtual Inventory feature.
• Removed the Virtual Machine Hardware Detail, Virtual Machine Memory Usage, and Virtual Machine Disk Usage reports.
• TIF, TXT, and RTF report export formats are no longer supported. Reports can still be exported to PDF, XLS, TSV, CSV, and XML formats.

• Threat Management
  • Shavlik is announcing that Protect 9.2 will be the last version to support threat management (antivirus and Active Protection). Users who purchase Shavlik Protect 9.2 on or before December 31, 2015, will have access to the threat management features and will continue to receive updated threat definition files until December 31, 2016. Users who purchase Shavlik Protect 9.2 after December 31, 2015 will not have access to the threat management features.
• Support for Agents on Legacy Windows Platforms
  • Agents will not be supported on Windows XP, Windows Server 2003, or Windows Server 2008 R2 Gold operating systems after December 31, 2016. This is due to a movement in the industry to migrate from the use of SHA-1 certificates to SHA-2 certificates. Shavlik is participating in this movement and by the end of 2016 will begin requiring the use of SHA-2 certificates for communication between Shavlik Protect agents and the Shavlik Protect console. The three operating systems listed above do not support SHA-2 certificates, so when the shift from SHA-1 to SHA-2 becomes permanent, they will no longer be valid agent platforms. Windows XP, Windows Server 2003, and Windows Server 2008 R2 Gold will continue to be supported for agentless scans.

• Resolved an issue where selecting multiple distribution server synchronization tasks would not allow ad hoc execution using the “Run Now” option.
• Resolved an export issue in Patch View where export to CSV exported all patches instead of just those that were visible.
• Resolved an issue where downloading patches through Patch View would not prompt with a size alert unless the total size of patches to be downloaded exceeded 1GB.
• Resolved an issue in role-based administration where the AD search could cause a crash if there were invalid characters in the user name.
• Resolved an upgrade issue where a database created in a much earlier version of Shavlik Protect could have a -1 value or missing foreign key relationship, which could cause the upgrade to fail.
• Resolved an issue where Deployment Notification report would not send if one of the systems was an offline VM.
• Resolved an issue were a custom patch would not display in Patch View if it was not properly associated with a bulletin.
• Resolved an issue in custom patch where DWORD value could be saved with an empty string, which would result in a failed assessment due to invalid data.
• Resolved an issue where a scan would fail to schedule if the name of operation was too long.
• Resolved an issue where Machine View patch counts could be off because of a UI duplication issue.
• Resolved a discrepancy in an error message where it called a failure to scan when a machine failed deployment due to an invalid network path.
• Resolved an issue on database setup where if “Has alternate credentials” is checked an invalid authentication option would be available in the dropdown list.
• Resolved an issue where an agent installed on Windows 8.1 N x64 (English-United Kingdom) would pass the wrong LangID resulting in failed patch downloads due to _ENU being appended to the file download.
• Resolved a console hang in Scan View when a large number of systems are selected and the user tries to deselect several devices.
• Resolved a distribution server synchronization issue where the PowerShellModules folder did not inherit permissions, causing the synchronization to fail with an access denied error.
• Resolved an issue in Threat View where some threat scans did not display information when selected.
• Resolved an issue in OU resolution where a domain server name would not prepend if DC= is lower or mixed case.
• Resolved an issue where machine exclusions were not being honored if using OU and nested groups.
• Resolved a race condition which could result in ad hoc report email to fail due to a “file not found” error.
• Resolved an issue in scheduled reoccurring jobs where a time change on the system would not be taken into account until the next occurrence.
• Resolved an issue where making a change to the Console Alias list would result in the console agent threat engine to stop and not automatically restart.
• Resolved an issue where an agent would fail to check in if a service pack group combo box contained empty spaces.
• Resolved an issue where a VM that contained an IP of 0.0.0.0 or 255.255.255.255 would cause the Shavlik Protect console to crash.
• Resolved an issue where Shavlik Scheduler failed in an IP-only environment because the scheduler install was using NetBIOS name.
• Added additional tracing and allowed Protect Cloud download timeout to be configured.
• Resolved an issue were Product End-of-Life date would not update if content changed.
• Resolved an issue where Detailed Summary report would not send when scanning a nested group.
• Resolved an issue where attempting to add VMware ESXi hypervisors with the same host name, but different object references, would fail due to “An item with the same key has already been added”.
• Resolved an issue where agent results from data rollup would not show up in Executive Summary report.
• Resolved an issue in Machine Status by Patch Count (IAVA) report where pie graph did not match individual machine counts.
• Resolved a consistency issue in Machine Hardware Detail Report where the View Current Status check box logic was reversed.
• Resolved an issue where Shut Down SQL Server deployment option would not work with named instances of SQL Server.
• Resolved an issue in the Executive Summary report where Machines Not Scanned information was confusing due to duplicates.
• Resolved an issue in the Executive Summary report where the Machine Group and Scan Template Name columns could overlap.
• Resolved an issue in Condensed Patch Listing report where two systems with the same name, but different domains, would consolidate under one machine and a merged view of the patches detected.

Protect 8.0

8.0.2.4027

• Added support for the vCenter Protect installer to detect PowerShell 3 as a prerequisite for PowerShell.
• Resolved an issue where Java Runtime would uninstall the current version and then fail to install due to file(s) in use.
• Removed a dependency on two Microsoft components (oHotFix and Qchain) as they are reaching end of availability from Microsoft Corporation.
• Resolved an issue where an offline virtual machine on an ESXi Hypervisor would fail to scan with an Error 4000.
• Resolved an issue where deployments using Install at next reboot could execute immediately.
• Added installation support for Windows 8 and Windows Server 2012.
• Added support for installations using SQL Server 2012 databases.

8.0.3965.1

• Integration with VMware Licensing
  • Support for multiple license keys, allowing for valid VMware vSphere and Accelerator Kit bundle licenses to activate along with VMware vCenter Protect licenses.
  • Retain support for the legacy (Shavlik) license keys and make key combinations additive.
  • Update to license services within VMware vCenter Protect, allowing active licenses to refresh without user intervention. Customers no longer have to manually refresh their active licenses when Support or data renewals occur, etc.
• Updated Product Activation
  • VMware vCenter Protect now has the ability to activate a trial within the product.
  • VMware vCenter Protect Free version is now activated through the same activation dialog as Trial or Product\Bundle keys.
• Renaming of the Product
  • VMware vCenter Protect Essentials is renamed to VMware vCenter Protect Standard
  • VMware vCenter Protect Essentials Plus is renamed to VMware vCenter Protect Advanced

• Resolved a rendering issue in the Patch View where you could select one of the affected patches and the Patch Details would not display correctly resulting in an application crash.

8.0.3787.0

• Enhanced ITScripts engine to provide more user-friendly error messages.
• Resolved an issue where scheduled value in Tracker and deployment status was showing date and time the job was scheduled on, and not the date and time the job would execute.
• Resolved an issue in the STAgent.exe where a race condition could cause a crash.
• Resolved an issue in the IAVA reporter where Patch Status Detail would crash if viewed by specific product and service pack combinations.
• Resolved an issue in the Help file where a link for ITScripts would redirect to custom patch instead.
• Resolved an issue where refreshing a license after viewing a power status scan result could result in a crash.
• Resolved an issue where Browse Active Directory feature in Machine Groups did not list child OUs.
• Updated Help file to correct steps for creating a manual install script for agent installation.
• Resolved an issue where upgrade from 7.x to 8.x results in agents running threat protection needing to be re-installed.
• Resolved an issue where STAgentUpdater could crash when creating SSL registration.
• Resolved an issue where the service could crash when retrieving system credentials due to size of credential store.
• Resolved a regression where the patch pane in Machine View defaulted to expanded instead of collapsed.
• Resolved an issue in Custom Patch where a string registry value always returned missing.
• Resolved an issue where database upgrade fails with uniqueness constraint violation. This only affects 7.x upgrade to 8.0.
• Resolved an issue where agents would be unable to deploy a custom patch.

8.0.3756.0

• ITScripts
  • Powerful scripting capabilities just clicks away
  • Catalog of scripts including maintenance scripts, application and OS-level configuration, configuration of GPOs, monitoring and informational scripts, and more
  • Ability to import custom scripts and take advantage of the ITScript engine features to make machine discovery and credentials usage a breeze
• Credentials Manager
  • Addition of the Credentials Manager to centralize the creation and maintenance of credentials
  • User-friendly UI to allow access to your credentials anywhere in the product and specify credentials in a matter of clicks without the need to retype username and password
• Power Status Scan
  • Addition of a new scan type that allows extremely fast discovery of the power status of your machines. Discover hundreds of machines in minutes across a broad IP range or validate the power status of your machines using host name, domain, or any of the other methods available in the machine group.
  • Right-click power status scan option from Machine View for validating that a machine is online
  • Power Status Scan result located in the Results section of the Navigation Bar for historical reference to Power Status Scan results
  • Power Status Report for proof of compliance and to provide the validation that is often required by energy providers for power rebates
• Multiple Administator Support in Console
  • Support for multiple unique administrators to access the same Protect console simultaneously
  • Notification if the same account is attempting to open the console simultaneously

• Patch Scan Performance Enhancements
  • Increased scan speed
  • Reduced memory footprint
• New Operations Home Page
  • Quicker access to common operations like patch and asset scans, power status scan, ITScript runs, etc.
• Integration with Remote Desktop Protocol (RDP)
  • Initiate from Machine View against a target machine
  • Utilize existing credentials
  • Connect via hostname or IP
  • Option to connect as admin session for specific maintenance tasks that require session 0
• Integrated Deployment into Operations Monitor for Better Deployment Progress Monitoring
  • Increased visibility during deployment
  • Better progress tracking of deployments while being staged
  • Easy access to deployment results and Tracker results
• Antivirus/Threat Protection Enhancements
  • Threat protection is now registered in Microsoft Security Center / Action Center
  • Enhanced control over the “disable” and “temporarily suspend” Active Protection features within the agent policy

• Resolved an issue the Agent could be unable to deploy a deployable SP.
• Resolved an issue where Office patches with client and full patch types download only the first patch type listed in pd5.
• Resolved an issue where the selecting Patch Download Status would not download a patch if you downloaded, deleted, then attempted to download again.
• Resolved an issue where Patch Download Status does not sort after the first time.
• Resolved an issue attempting to add a Service Pack to a patch group would result in a blank patch group.
• Resolved an issue in documentation: a mapped drive for a Download Center Path is not supported.
• Resolved an issue where agents would fail to deploy other Service Packs and Patches if errors were encountered on a Service Pack install.
• Resolved an issue where upgrading a database from 7.6 to 7.8 fails with id cannot be null.
• Resolved an issue in documentation: SQL 2008 Express and SQL 2008 R2 were not listed in the database pre-reqs.
• Resolved an issue where machine summation counts may not be accurate in Machine View.
• Resolved an issue where deleting a hosted virtual machine produces collation conflicts
• Resolved an issue where attempting to non-deploy a service pack results in Protect crash
• Resolved an issue where Patch summary report advanced filter does not properly filter by bulletin or Qnumber.
• Resolved an issue where scheduled deployments with pre install reboot run the deployment after any reboot, not the scheduled reboot.
• Resolved an issue where scheduled deployment with pre install reboot would not execute if system clock resets to a time prior to scheduling.
• Resolved an issue where the schedule dialog could change from PM to AM under certain circumstances.
• Resolved an issue where threat manifest cannot be downloaded from an http distribution server when vendor as backup is disabled.
• Resolved an issue where scan my domain does not work correctly with similar qualified domains.
• Resolved an issue where find users in the machine group domain browser would find the user by simple domain name.
• Resolved an issue where copy machine group created by a different logged in user with an ESX server setup in hosted virtual machine causes a crash.
• Resolved an issue with Protect 7.8 where Safereboot does not reboot on Windows 2000
• Resolved an issue where Agent downloads fail due to file not found error
• Resolved an issue where Deleting the last patch scan for a machine doesn't null out the patch-specific machine measures
• Resolved an issue where At least one window within Protect causes an indefinite freeze for the entire application when a WM_SETTINGSCHANGE message is received
• Resolved an issue in Custom Patch where there would be two validation checks for each XML
• Resolved an issue in the threat engine where Ultra VNC and Remote Task Service are killed during agent Full threat scan
• Resolved an issue where Report only users are able to do more than specified
• Resolved an issue where Operations Monitor does not sort correctly by numerical order.
• Resolved an issue where a license due to expire in one day could not be activated properly.
• Resolved an issue where distribution server sync space required is multiplied by 5.
• Resolved an issue where an Error in STCore::IO::CPath::GetFullPath() causes deployment of office patches with install point to fail
• Resolved an issue where Dutch Windows 7 SP1 is not detected correctly by the prereq installer
• Resolved an issue where Software Distribution checkbox is able to be modified for Security Patch Scan Template
• Resolved an issue where Agent System Requirement documentation incorrect
• Resolved an issue where customer encountered error running machine software detail report.
• Resolved an issue where recurring jobs are deleted when they fail if credentials were invalid.
• Resolved an issue where Scheduled Task Manager could cause Window's user accounts to be locked out
• Resolved an issue which resulted in Duplicate Service Packs in the Patches Table
• Resolved an issue in documentation stating multiple consoles sharing the same DB on Domain Controllers with the same SID is not supported.
• Resolved an issue where Copy of Asset template does not store the name in the correct table
• Resolved an issue Upgrading protect overwrites st.servicehost.exe.config where we must store proxy information so the service can access the internet
• Resolved an issue when Console culture is not supported by our patch data languages, the application will crash during deployment when download is about complete.
• Resolved an issue where Running Executive summary report from a scan results has **multiple** in the machine group field.
• Resolved an issue where agents could not be deployed as a Custom Patch
• Resolved an issue where protect would crash when a required file was not in the manifest.
• Resolved an issue where Protect crashes when user attempts to open an existing template after upgrade from 7.6 to 7.8.
• Resolved an issue where an invalid distribution server credential gets an agent in an infinite check-in loop.
• Resolved an issue where Patch scan path information not being fully painted
• Resolved an issue in Power State Template where Shut Down when “Alert user, perform action when user logs off” is checked results in a reboot.
• Resolved an issue in the Deployment Detail report when using Domain as an advanced filter results in an error invalid field smachDomainName.
• Resolved an issue where Agent check-in failed due to IP Range for Primary Distribution Server being Blank.
• Resolved an issue when trying to do multiple deployments at once crashes Deployment Tracker due to a dead lock.
• Resolved an issue where deployments would reboot targets, but no patches were being deployed.
• Resolved an issue where Agent patch deployment fails when the temp dir is not on the c drive
• Resolved an issue where the Service Pack release date shows as 01/01/0001 due to UTC + 1 or higher being set.
• Resolved an issue in documentation to state the Workstation Service is required by the VMware vCenter Protect Agent
• Resolved an issue where export to CSV from machine view from Hardware Assets tab crashes the application.
• Resolved an issue where a distribution server could have an agent framework and engine mismatch.
• Resolved an issue where large numbers of agent policies cause the distribution server confirmation screen to be cut off.
• Resolved an issue where scheduled jobs that encounter an error while running are deleted and do not show up in the log or the scheduler.