Devolutions Server Version 2026.3.5.0 (September 15, 2026)

If you are using a client (RDM, PowerShell, etc.), version 2026.3 is required for this DVLS version

NEW FEATURES

• Core - Added a new encryption format for RDM export files

• Core - Added a one-time self-service extension for expired trials

• Core - Added custom user tags for filtering, sorting, reporting, and conditional access

• Core - Added granular administrative roles for more precise permission management

• Core - Added individual forbidden password rules with configurable matching modes

• Core - Added PostgreSQL support as a Devolutions Server database backend

• PAM - Added an option to keep Microsoft 365 and Active Directory JIT accounts between checkouts

• PAM - Added self-rotation for PAM provider credentials

• PAM - Added the ability to extend active PAM checkouts without checking in and requesting access again

• PAM - Merged PAM and shared vaults, allowing PAM credentials to be stored in regular high-security vaults

• Web - Added a compact kiosk view displaying web-launchable sessions as tiles

IMPROVEMENTS

• Core - Added a setting to configure how long log files are retained on disk

• Core - Added checkout support for folders and multiple selections

• Core - Added expiration dates for user accounts

• Core - Added missing Remote Desktop Manager variables so scripts and entries now resolve them correctly

• Core - Added paging for large Active Directory group lists used by automatic user creation filters

• Core - Added SSH key support to Bitwarden synchronization

• Core - Added the ability to check out linked entries directly from the overview

• Core - Hidden the "Submit a support ticket" action when internet features are disabled

• Core - Imports now warn about entries with forbidden or policy-violating passwords instead of blocking them

• Core - Improved performance when moving entries to vaults containing thousands of entries

• Core - Improved support for vault templates when saving system settings

• Core - Linked credentials are now automatically checked out when used

• Core - Prevented connection logs linked to session recordings from being archived or purged

• Core - Removed unusable PSU licenses from the interface

• Core - Trimmed leading and trailing spaces from usernames during emergency login

• PAM - Added a dedicated permission for manually creating PAM accounts

• PAM - Added an option to skip TLS validation for the Windows provider

• PAM - Added AnyIdentity provider support through Devolutions Gateway and on Linux using cross-platform PowerShell remoting

• PAM - Added on-demand account discovery directly from the PAM providers list

• PAM - Added visibility of inherited checkout policy values

• Web - Added a session recording log viewer with an activity timeline

• Web - Added support for DVLS Privileged Account credentials

• Web - Added the "Allow password in variable" security setting to username and password credentials

• Web - Added the ability to delete multiple attachments at once

• Web - Added the ability to download multi-part session recordings as a single ZIP file

• Web - Added the ability to run saved Scripts/Macros entries in web PowerShell and SSH terminals

• Web - Added the ability to run scripts in PowerShell sessions opened through Devolutions Gateway

• Web - Converted legacy Website entries to the current entry type

• Web - Improved AI Assistant answer and approval prompt positioning

• Web - Improved the search and advanced search experience

• Web - Refreshed the user menu side panel layout

• Web - Restored ticketing administration for Jira, ServiceNow, and HaloPSA

FIXES

• Core - Fixed a SQL timeout when renaming folders containing more than 3,500 entries

• Core - Fixed administrators being unable to reset a contractor's password

• Core - Fixed an issue where moving entries between vaults failed and could break linked credentials

• Core - Fixed an issue where moving entries to another vault no longer worked

• Core - Fixed an issue where the "Force MFA" setting could remain enabled after migrating from SQL to DVLS with no way to disable it

• Core - Fixed an issue where the server could remain permanently in maintenance mode after an interrupted maintenance run

• Core - Fixed automatic database retention cleanup not running when using a non-English SQL login

• Core - Fixed contractors being able to change or remove their own 2FA configuration without re-entering their password

• Core - Fixed database upgrades timing out during long-running steps, particularly on Azure SQL

• Core - Fixed notification preference emails containing a mix of translated and English text

• Core - Fixed partially translated email notifications and improved their date formatting

• Core - Fixed renamed folders and their contents disappearing from the connection tree

• Core - Fixed scheduled database retention incorrectly archiving or purging records within the configured retention period

• Core - Fixed support ticket submissions reporting success without creating a support case

• Core - Fixed the offline synchronization document size limit exceeding the value supported by Remote Desktop Manager

• Core - Fixed the scheduler service crashing when a custom log retention policy contained invalid values

• Core - Fixed the User column appearing blank in Global Open Sessions when Remote Desktop Manager was connected to a Devolutions Server data source

• Core - Fixed ticket prompts accepting free-form text when an existing ticket was required

• Core - Fixed user vault entry errors after migrating a SQL data source to DVLS

• Core - Fixed vault and folder password complexity policies being displayed as inherited without being enforced

• Core - Harmonized checkout and check-in behavior across platforms

• Gateway - Fixed an error when trusting a Devolutions Gateway certificate on Kestrel-hosted instances

• Gateway - Fixed incorrect gateway host and port resolution for native iLO and SQL Server sessions

• Gateway - Fixed session recording failures for Active Directory Console entries using a Devolutions Gateway farm

• Gateway - Fixed session recordings being larger than expected because configured frame rate and resolution settings were ignored

• PAM - Fixed accounts incorrectly appearing as Out of sync in Remote Desktop Manager

• PAM - Fixed Active Directory discovery, OU browsing, and group lookups failing with trusted domain controller certificates

• PAM - Fixed Active Directory TLS certificate validation and trusted certificate issues affecting discovery, OU browsing, and group retrieval

• PAM - Fixed an error when filtering containers during account discovery

• PAM - Fixed an issue where Active Directory account discovery returned no accounts for child domains when the forest root was unreachable

• PAM - Fixed an issue where moving a PAM entry to a folder in another vault failed

• PAM - Fixed checkouts not expiring and scheduled password rotations not running when many accounts were checked out simultaneously

• PAM - Fixed Cisco and MySQL password reset providers being uneditable after creation and restored the Cisco username field

• PAM - Fixed PAM account lifecycle and checkout policies being creatable without a valid PAM license

• PAM - Fixed PAM accounts incorrectly appearing as "Out of sync" in Remote Desktop Manager

• PAM - Fixed the "Automatically check in PAM account" setting displaying the wrong value

• PAM - Fixed the total checkout time being displayed incorrectly when an account was automatically checked in

• PAM - Fixed the View and Copy one-time password actions being unavailable in Remote Desktop Manager for checked-out PAM accounts with OTP configured

• PAM - Fixed users with a PAM provider role losing access to the Privileged Access section

• Web - Fixed closing a session from the kebab menu redirecting to Administration > Vaults instead of the current vault, and corrected the disconnect message

• Web - Fixed entries disappearing from the Connections tree when moved by drag and drop while a filter was active

• Web - Fixed long entry names being truncated in the Sessions tree and hiding the session recording indicator

• Web - Fixed Telnet sessions terminating unexpectedly

• Web - Fixed terminal sessions leaving network connections open after being ended from the server side

• Web - Fixed the "Find by name (user vault)" dialog displaying irrelevant results when no entry matched

• Web - Fixed the Connections tree not refreshing after deleting an entry while a filter was active

• Web - Fixed the Credentials dropdown offering "Linked (cross vault)" for user vault entries when the option was disabled

• Web - Multiple UI fixes

** CONSOLE RELEASE NOTES **

FIXES

• Fixed a "Could not apply least permissions" error when updating a server instance

• Fixed an error when editing and saving a Kestrel instance in maintenance mode

• Fixed an upgrade removing the scheduler account's permissions on the encryption configuration file

• Fixed duplicate Light and Dark theme options under Support > Options > Theme

• Fixed server instance changes made from the Console not being saved

• Fixed the command-line interface crashing when upgrading a server instance

• Fixed upgrades removing the scheduler account's permission to access the encryption configuration file