Announcement

FIXES UI displays user twice on invite Various front end issues with the widget/dashboard

NEW FEATURES Core - Added custom vault dashboard widgets with reordering Core - Added new Contractors account type with expiration date support Licenses - Simplified license assignment IMPROVEMENTS Core - Added a credential selection prompt when launching a web session configured with "Prompt on connection" for linked vault credentials Core - Added support for importing entries from .rdm files and exporting entries to .rdm format Core - Added tag inheritance to automatically propagate to all contained entries Core - Added the ability to restore soft-deleted hubs directly through Portal Core - Added the ability to set a display sort priority on vaults Core - Removed the user interface profiles feature Core - Update some semantics and translation Entries - Added support for SSH key certificates Entries - Added support for SSH terminal and SSH port forward connections using credentials stored in linked external vaults Entries - Added support for using Linked (External Vault) credentials as an OTP Entries - Fixed an issue preventing entries from being opened when credentials were configured through User Specific Settings PAM - Added a "Skip TLS validation" option in PowerShell Settings PAM - Added an administrator setting to configure the default behavior for automatically checking in a PAM account when an entry is closed PAM - Improved PAM checkout failure error messages Password Generator - Added an "Exclude ambiguous characters" option to the Password Generator FIXES Core - Fixed - Administration - Logging option visibility PAM - Fixed a validation issue allowing PAM approvers to set a checkout duration below the enforced minimum of 10 minutes PAM - Fixed administrators to configure risk levels for Active Directory / roles and groups PAM - Fixed an issue preventing additional groups from being added to the JIT list in an OU when a group was already selected PAM - Fixed an issue where service failed to start automatically after a machine reboot PAM - Fixed an issue where the "Test Connection" button on a PAM provider was disabled PAM - Fixed an issue where the JIT group name appeared duplicated in the PAM checkout PAM - Fixed an issue where the PAM service token was not being properly enforced when launching sessions via the Gateway using "Open in Web." PAM - Fixed an issue where the password stored in a PAM Propagation Configuration could not be viewed after the configuration was saved PAM - Fixed JIT group selection to include groups located in the Active Directory Built-in organizational unit PAM - Fixed Linux privilege sets section not appearing for local user SSH providers PAM - Fixed PAM task endpoint permissions (infinite loading or access denied errors) PAM - Fixed service updates on Docker to use a simple container restart instead of requiring the Devolutions Agent service PAM - Fixed the default checkout policy indicator not appearing in the PAM accounts list column PAM - Fixed the default checkout policy not being automatically pre-selected in checkout policy PAM - JIT Provisioner account improvements Various bug fixes and improvements

IMPROVEMENTS Various bug fixes and improvements

FIXES Administration - Resolve logging icon visibility issue Licenses - Correct license labels that could cause confusion Various bug fixes and improvements

FIXES Minor bug fixe and improvement

IMPROVEMENTS Core - Added a Verify Account option in the account chooser for improved account management Core - Moved the reset favorites button to the footer for improved user interface organization Core - Removed the User Interface Profiles feature from the application Entries - Add entry tags inheritance from system settings, root to entries Entries - Deprecate entry - Deprecated the Crypto Wallet entry type from the system PAM - Added admin configuration option to set the default behavior for automatically checking in PAM accounts when closing entries FIXES Entries - Fixed an issue where entries could not be opened when credentials were set from User Specific Settings PAM - Fixed missing TriggerType value in webhook payloads for PAM events Various bug fixes and improvements

FIXES Better error handling occurs in certain localization validations

NEW FEATURES Core - Added ability to export vault data to encrypted JSON format protected by master password Licenses - Added license purchase functionality within Hub IMPROVEMENTS BREAKING CHANGE Unlicensed Hubs now start a 30-day trial automatically and will downgrade to Free (single user) if a license is not added before the trial ends Core - Removed automatic creation of application services to provide more manual control Entries - Added documentation link in webhook creation dialog for easier access to help Entries - Added hierarchical tag inheritance system from system settings through root to entries Entries - Removed unnecessary certificate password field from X.509 certificate configuration Gateway - Removed unnecessary Vaults/Groups/Users tabs from virtual gateway interface Various bug fixes and improvements FIXES Core - Fixed "select all" button not saving selected users when assigning permissions Core - Fixed checkout prompt errors and functionality when prompt is enabled Core - Fixed error occurring when editing root-level permissions Core - Fixed privileged account information not being saved in user-specific settings Core - Fixed session recorders not terminating correctly after sessions are closed Entries - Fixed incorrect LDAPS default port changed from 389 to correct port 636 Gateway - Fixed gateway token generation to check if force virtual gateway setting is enabled first Gateway - Fixed SSH credentials not auto-filling when opening sessions through gateway with linked SSH keys Gateway - Fixed virtual gateway not linking to physical gateway in Remote Desktop Manager when added through Hub web interface PAM - Fixed PAM providers incorrectly appearing in account selection for credentials PAM - Fixed PAM vault count not displaying correctly in the dashboard vault widget on web client PAM - Fixed users with "Manage PAM providers" system permission unable to access PAM section Password Generator - Fixed missing space in passphrase generator when appending character to last word

IMPROVEMENTS Better error handling occurs in certain concurrence situations

IMPROVEMENTS Core - Better management of the Client secret expiration date Core - Default Require Valid Hub Key Hash to true Core - Update some semantics and translation Entries - Add "Allow Any port" option in WebSite entry type Entries - Added "Automatically log off when disconnecting" as a user-specific setting Licenses - Better liences management Password Generator - Added characters limit Password Generator - Added special characters in passphrase Password generator - Added symbol to the default template Password management - Added compromised check logic FIXES Core - App identity failure based on the name used Core - Can edit PAM account when checkout Core - Missing folder structure for some import models Entries - Show custom-fields on Document type entry Fixed Various bug fixes and improvements

FIXES Auth - Application identities authentication Core - Issue creating the Application Service

IMPROVEMENTS Core - Update some semantics and translations Licenses - Improved free and trial license workflows FIXES Entries - Checkout message does not update in real time Entries - SSH connection fail when private key as a password override Gateway - Encountering a 500 error when accessing a recording from RDM PAM - Checkout banner don't update automatically PAM - Checkout policy for a root providers with root inherited breaks PAM - Incorrect privileged access permission check PAM - RDP recordings prompt incorrect error PAM - Session not launching in web when using privileged account credentials Various bug fixes and improvements

FIXES Fixed issue where users were being locked out of the web client due to an invalid favorite entry

NEW FEATURES Gateway - Added live session shadowing IMPROVEMENTS Administration - Fixed a UI issue when cancelling confirmation Core - Hub region is now visible next to the version Entries - Improve the OTP code color based on time remaining Entries - Improved password readability in dashboard overview and edit form Gateway - Updates can be started directly from the web FIXES Administration - Force disable GeoIP if no MaxMind account is set Devolutions Send - Fixed not being able to share a link without editing the form Entries - Fixed a missing screen setting field with ARD entries Entries - Fixed an SSH key prompt when no key is selected Entries - Fixed default port for ARD entries Entries - Fixed gateway not editable on entry creation Entries - Fixed missing custom field tab in website entries Entries - Fixed opening in web with user-specific settings Entries - Fixed redirection from the gateway administration page to the entry's page Entries - Fixed user specific settings not showing when jump is enabled Gateway - Fixed launching sessions with an inherited gateway and host Gateway - Fixed virtual gateway defaut port and status PAM - Fixed account discovery destination vault showing deleted vaults PAM - Fixed edit permission showing a blank dialog Password Generator - Fixed an invalid error message when generating from custom mode Search - Fixed search list vanishing when including all fields Users - Fixed UI issues with the filters

Tell us what you think! In this new series spotlighting features you might have missed, we’d love to hear from you! Share in a comment your first impressions or how you’ve been using it in your day-to-day. Your experiences help inspire others in the community and play a key role in shaping the future of our products. You can now push Devolutions Hub Business and Devolutions Server (DVLS) events to external systems via webhooks . Send JSON messaging on triggers to your SIEM, ticketing platform, or chat tools (e.g., Slack or Microsoft Teams) to automate reviews, create tickets, or notify runbooks. Configure endpoints and event scopes in Administration, then point them at standard incoming webhooks. [image]

Tell us what you think! In this new series spotlighting features you might have missed, we’d love to hear from you! Share in a comment your first impressions or how you’ve been using it in your day-to-day. Your experiences help inspire others in the community and play a key role in shaping the future of our products. Operate multiple virtual Gateway instances to segment traffic as needed in Devolutions Hub Business, Devolutions Server (DVLS), and Remote Desktop Manager (RDM). Separate by IP, subnet, IP range, or DNS while combining multiple allow and deny rules. This, along with Gateway farms, improves isolation and flexibility without deploying additional Gateway instances. [image]

NEW FEATURES Gateway - Added virtual gateway support; requires RDM 2025.3.16+ PAM - Conditional policies based on elevation (JIT); requires PAM Service 2025.3.1+ IMPROVEMENTS Core - Owners can now delete the Hub from the Administration screen Entries - New lowercase username format support Security - Fixed where managing scheduled reports weren't accessible even if the permission was granted Users - Fixed user filters and sorting FIXES Core - Fixed an issue with passphrase dictionaries not opening the right screen Entries - Fixed an issue where vault migration was stuck Entries - Fixed prompt for comment on reveal credentials needed a full page refresh to view again Entries - Removed the lock for edit on root entries causing the vault to load indefinitely PAM - Fixed privileged account credentials not working when set to inherited

IMPROVEMENTS BREAKING CHANGE Administration - Encryption service now ignores IP allowlist configured; use Enable IP restriction from the application service to enforce a given IP Entries - Added host in entry overview when configured Entries - Spaces are now automatically removed from OTP codes PAM - Added a custom end time for checkout requests PAM - Support different username format on PAM accounts Vaults - Standardize vaults order in the application FIXES Entries - Fixed a linking issue between a host and subentry of type RDP when using a gateway Entries - Fixed an error when using passphases Entries - Fixed an issue when opening an entry in the web with a the operator role set on the user Entries - Fixed an issue where the edit screen was locked after a password validation warning Entries - Fixed creating folders when importing Entries - Fixed OTPs from Password List not linkable to other entries Entries - Fixed popular entries not showing up in the entry picker dialog Entries - Fixed secure notes not being editable in the web Entries - Fixed user specific settings not available on website entries Licenses - Fixed an issue where licenses might be automatically assigned to an admin after a manual refresh PAM - Fixed an issue with some users not being able to accept another user's checkout request PAM - Fixed checkout message disappearing until a full page refresh is done PAM - Fixed checkout policy inheritance ignoring root value PAM - Fixed edit being locked after a heartbeat PAM - Fixed global providers not being shown correctly Various bug fixes and improvements

IMPROVEMENTS Added license name when confirming the deletion of a license FIXES Fixed inconsistent sorting of vaults Fixed missing invite user button when using SSO without SCIM Fixed password history not logging every time a previous password is viewed Various bug fixes and improvements

FIXES Fixed system dictionaries generating passphrases in English no matter the chosen language

FIXES Fixed the button to activate the encryoption service

NEW FEATURES Core - Added support for custom dictionary Core - Added support for Linked (external vault) as credential source in entries Core - Added webhooks for automation Send - Passphrase can now be made mandatory via system settings IMPROVEMENTS Core - Application identities can now be disabled and re-generated Core - Password templates has been renamed to password policies Core - Password templates now support an expiration policy Core - Password viewed now logs even when previously viewed FIXES Various bug fixes and improvements

FIXES Fixed entry creation in specific scenarios

FIXES Fixed entry creation in specific scenarios

IMPROVEMENTS Reporting an issue can be sent to entire user groups Send messages to entire user groups Various bug fixes and improvements Visual UI improvements to the Add Entry dialog FIXES Fixed capitalization issues in the passphrase generator when using French dictionary