Run-time Environment for Mac

This topic contains the revision history of enhancements and issues resolved in Sentinel LDK Run-time Environment for macOS.

Enhancements in Version 8.43

No enhancements are included in this release.

Issues Resolved in Version 8.43

Reference	Description
SM-120179	The zlib library has been upgraded to version 1.2.12.
SM-123325	In Admin Control Center, the displayed recipient list of detached licenses was incomplete when the Sentinel License Manager worked with Secure Storage. This issue would not occur when working with Trusted Storage. This issue did not affect functionality of the License Manager.

Enhancements in Version 8.41

Reference	Description
SM-97094	You can now set an expiration date for client identities. This enables vendors to: >Easily manage trial by providing users with expiring identities that consume the same license. This removes the need to generate a new key and a new license for each trial. >Manage which users can access a concurrency license and for how long.
SM-111379	The License Manager now supports the use of dynamic memory for SL AdminMode keys . To support this functionality, VLIB 8.41 or later must be deployed with the Run-time Environment.

Reference

Description

SM-97094

You can now set an expiration date for client identities. This enables vendors to:

>Easily manage trial by providing users with expiring identities that consume the same license. This removes the need to generate a new key and a new license for each trial.

>Manage which users can access a concurrency license and for how long.

SM-111379

The License Manager now supports the use of dynamic memory for SL AdminMode keys .

To support this functionality, VLIB 8.41 or later must be deployed with the Run-time Environment.

Issues Resolved in Version 8.41

Reference	Description
SM-119586	After connecting to a VPN, when you click Submit on the Access to Remote ACC panel, a false-positive warning similar to the following was sometimes displayed: "A duplicate License Manager ID exists on this server and on the server at address 10.42.49.253. This is typically caused by cloning a VM. Licenses on these two servers may be inaccessible"
SM-119327	If no host is specified, AdminAPI uses "localhost" to connect to the License Manager. But in modern machines, localhost is resolved to "::1". This may not work because the IPv6 option may be disabled in the License Manager. AdminAPI now uses "127.0.0.1" instead of "::1".
SM-115393	When the client identity is installed in Admin Control Center, and the License Manger received a detached license from a remote machine, a local API was affected by the local License Manager detachable configuration. However, the local License Manager should have only acted as the forwarder in this case.

Reference

Description

SM-119586

After connecting to a VPN, when you click Submit on the Access to Remote ACC panel, a false-positive warning similar to the following was sometimes displayed:

"A duplicate License Manager ID exists on this server and on the server at address 10.42.49.253. This is typically caused by cloning a VM. Licenses on these two servers may be inaccessible"

SM-119327

If no host is specified, AdminAPI uses "localhost" to connect to the License Manager. But in modern machines, localhost is resolved to "::1". This may not work because the IPv6 option may be disabled in the License Manager.

AdminAPI now uses "127.0.0.1" instead of "::1".

SM-115393

When the client identity is installed in Admin Control Center, and the License Manger received a detached license from a remote machine, a local API was affected by the local License Manager detachable configuration. However, the local License Manager should have only acted as the forwarder in this case.

Enhancements in Version 8.31

Reference	Description
SM-108300	Admin Control Center help system now describes how to set a user name for the ACC administrator. Setting a user name helps to improve security for Admin Control Center. For details, open the Admin Control Center help. From the list of links at the bottom of the pages, click Configuration > Managing User Access to Admin License Manager Information > Setting a User Name for the ACC Administrator.

Reference

Description

SM-108300

Admin Control Center help system now describes how to set a user name for the ACC administrator. Setting a user name helps to improve security for Admin Control Center.

For details, open the Admin Control Center help. From the list of links at the bottom of the pages, click Configuration > Managing User Access to Admin License Manager Information > Setting a User Name for the ACC Administrator.

Issues Resolved in Version 8.31

No issue are resolved in this release.

Enhancements in Version 8.23

Reference	Description
SM-17686	A customer can now detach one or more seats with concurrency from a cloud license server and install them on a machine with a client identity. Applications on remote machines in the same LAN can then consume seats from this machine. This enables customers to: > Set up second-level license servers. > Control the number of local hardware resources used by an application.
SM-99835	The Admin License Manager now supports Internet Protocol version 6 (IPv6).

Reference

Description

SM-17686

A customer can now detach one or more seats with concurrency from a cloud license server and install them on a machine with a client identity. Applications on remote machines in the same LAN can then consume seats from this machine. This enables customers to:

> Set up second-level license servers.

> Control the number of local hardware resources used by an application.

SM-99835

The Admin License Manager now supports Internet Protocol version 6 (IPv6).

Issues Resolved in Version 8.23

Reference	Description
SM-98723	The License Manager would log each individual Feature request from other License Managers. This resulted in an excessive number of entries in the License Manager log file.
SM-99308	When connecting with port 80, Login/Logout/Encrypt API calls to cloud SL keys installed on a cloud license server would cause repeated WSAECONNREFUSED and ESELECTTIMEDOUT errors on the client machine.

Enhancements in Version 8.21

Reference	Description
	Admin Control Center has been updated to keep it consistent with changes in the appearance of Sentinel LDK user interfaces and documents to match other Thales products.
	The Run-time Environment supports Apple Silicon running under Rosetta 2.

Issues Resolved in Version 8.21

Reference	Description
SM-91083	A user of Admin Control Center was not able to clear the password for accessing or configuring the License Manager once a password has been set.
SM-93806	Sentinel Admin API would return invalid XML when the Issue To field of client identities contains some special characters.
SM-93811	When a user would attempt to rehost a license from RTE 8.1x to an RTE version lower than 8.11, the error 30 HASP_INV_SIG was returned.
SM-94573	With cloud licensing, when opening a remote session, the session would be closed after 15 minutes if no hasp call was made on the session. This resolution fixes the keep-alive timeout.
SM-96073	The License Manager would fail under certain circumstance when working with client identities.
SM-96715	Memory leak while using identity sessions have been resolved.
SM-97123	Firewall compatibility for identity communications has been improved.

Issues Resolved in Version 8.16

Reference	Description
SM-93994	Under macOS 10.15.7, the License Manager was fetching an incorrect V-clock time value.

Enhancements in Version 8.15

Reference	Description
	The documentation for the Sentinel Run-time Environment (RTE) is now provided in HTML5 format. As a result, the documentation is modular and easier to navigate. Because of this change, the path for accessing the documents online has changed. If you created shortcuts to access RTE documentation from the Thales web site, you must modify your shortcuts accordingly. The paths for accessing the online RTE Readme files can be taken from: https://docs.sentinel.thalesgroup.com/ldk/rte.htm
SM-13165	Admin Control Center enables a customer to specify which users can access a license on a license server machine. You can now include domain names as part of the restrictions that they specify for this purpose. For example, you can now specify: allow=username@hostname.domainname,... allow=khsingh@noi-2n39623.thaesgroup.com For more information, see the description of the User Restrictions parameter on the Configuration > Users page of Admin Control Center.
SM-82156	Network licenses will be accessible even if port 1947 is not open in the firewall. To enable this enhancement, you must select the option Listen for clients also on port 80 in the Admin Control Center configuration.
SM-83530	When setting or changing the password for making changes in the Admin License Manager (using Admin Control Center or Sentinel Admin API), you must now specify a strong password. The password must satisfy the following requirements: >At least eight characters long >At least one uppercase letter (A-Z) and one lowercase letter (a-z) >At least one number (0-9) OR one special character (for example: *! @ # $ % ^ & " ( ) . , - +**) These requirements are enforced when a password is added or changed. There is no warning or action required if the existing password does not satisfy these requirements.
SM-83532	When you enable remote access to Admin Control Center, you must enable password protection for accessing the configuration pages for Admin Control Center. You have the option of requiring a password to access any part of Admin Control Center.
SM-85983	Sentinel LDK Run-time Environment now supports the ability for Sentinel LDK-EMS to push produced entitlements directly to a license server machine without need to exchange C2V and V2C files. This simplifies the process for software vendors to maintain cloud licenses on their license server machine.
SM-86109	Sentinel LDK Run-time Environment now supports a new method for detaching licenses: Automatic Detach. This method is especially useful when working with cloud licenses. When Automatic Detach is enabled, a protected application automatically detaches a network seat from an SL key (that supports concurrency) when the application requires a license. As a result, the application can continue to operate even if the connection to the SL key is interrupted. The application retains the license for a predefined number of hours. For more information, see the description of detaching licenses in the Admin Control Center help system.
SM-88183	When creating a client identity for cloud licensing and specifying the Limit to Key ID parameter, you can now specify multiple key IDs for a given client identity.

Issues Resolved in Version 8.15

Reference	Description
SM-85071	An internal API error would occur when applying a v2c in a machine where haspvlib 8.13 and Runtime 8.11 were installed.
SM-86348	Under rare circumstances, the following error was logged: log_error("Failed udp accept() call " SYS_ERROR_FORMAT "\n", SYS_ERROR_ARGS). This was caused by a read_UDP with a wait. This issue has been resolved.
SM-89355 SM-89307	A security issue regarding certain protection keys has been resolved.

Reference

Description

SM-85071

An internal API error would occur when applying a v2c in a machine where haspvlib 8.13 and Runtime 8.11 were installed.

SM-86348

Under rare circumstances, the following error was logged:

log_error("Failed udp accept() call " SYS_ERROR_FORMAT "\n", SYS_ERROR_ARGS).

This was caused by a read_UDP with a wait. This issue has been resolved.

SM-89355 SM-89307

A security issue regarding certain protection keys has been resolved.

Enhancements in Version 8.13

Reference	Description
SM-50563	Enhancements to clone protection scheme VMType3 are now supported by the Admin License Manager. This scheme now supports the Amazon EC2 cloud computing service in addition to Microsoft Azure. This provides enhanced clone protection for protected applications that execute on these platforms.
SM-66926	You can now generate a C2V file for a Master key or Developer key using the Sentinel Keys page in Admin Control Center.
SM-70231	Disk serial number is now included in the fingerprint of the end user's machine, regardless of third party driver versions (for example: Intel RAID).
SM-80982	Sentinel Run-time Environment now supports the cloud licensing functionality that was added to Sentinel Admin API. Using this new functionality, you can now use Admin API to automate the management of identity clients instead of performing manual operations in Sentinel Admin Control Center.
SM-81994	The field "Issued to Client" on the configuration page for client identities has been renamed "Issued to".

Issues Resolved in Version 8.13

Reference	Description
SM-80253	Certain security vulnerabilities have been resolved. Thales would like to acknowledge Positive Technologies for responsible disclosure of these vulnerabilities.
SM-80941	Given the following circumstances: >RTE version 8.11 is installed on a license server machine. >A license with multiple products (SL or HL) is installed. >User restrictions are defined. For example: `deny=USER_A@all,product:1 allow=USER_A@all,product:2` >USER_A attempts to consume a license from Product 1. The request is denied. > Using the same login scope, USER_A then attempts to consume a license from Product 2. The second attempt would also fail, even though the user is authorized to consume a license from Product 2.
SM-81033	The following issues were resolved: >When performing an offline license detach, the expiration date field in the H2R file did not contain a value for the year. For example: <tr><td>expiration</td><td><b>Sun Jul 12, 15:59:30 UTC</b></td></tr> >When using Admin API for .NET: If you call the API “AdminApi.Get” (any scope, element :ExpirationDate) the expiration date information did not contain a value for the year.
SM-81658	Given the following circumstances: >RTE version 8.11 is installed on a license server machine. >User restrictions on the license server are set to: `deny=all@all` A client attempting to consume a license from the server would get the return status code 40/HASP_REMOTE_COMM_ERR instead of the expected status code 53/USER_ACCESS_DENIED.

Enhancements in Version 8.11

Reference	Description
SM-7201	This release of Sentinel LDK Run-time Environment introduces cloud licensing to serve network license seats to remote machines over the Internet. A remote machine with the required identity information will be able to consume a network seat or detach a license from the license server machine. The license server machine can be hosted on a cloud server either by the software vendor (for all customers) or by the individual customers for users in their organizations.

Reference

Description

SM-7201

This release of Sentinel LDK Run-time Environment introduces cloud licensing to serve network license seats to remote machines over the Internet. A remote machine with the required identity information will be able to consume a network seat or detach a license from the license server machine. The license server machine can be hosted on a cloud server either by the software vendor (for all customers) or by the individual customers for users in their organizations.

Issues Resolved in Version 8.11

Reference	Description
SM-63276	Allocation of network seats from a remote License Manager with duplicate Features has been optimized.
SM-71776	When an update to a 6.x Firmware key contains a large number of Features, a timeout would occur.
SM-73072 SM-73074	"Denial of Service" vulnerabilities were resolved.

Enhancements in Version 7.103

Reference	Description
SM-51158	Admin API now supports the use of HTTPS for communication with a remote Admin License Manager.
SM-12702	A local or remote user can now use the "Sentinel Keys Available" page of Admin Control Center (instead of the RUS utility) to generate a fingerprint. Note: For Linux or Mac (where Admin Control Center is available), only SL AdminMode fingerprints can be generated.

Reference

Description

SM-51158

Admin API now supports the use of HTTPS for communication with a remote Admin License Manager.

SM-12702

A local or remote user can now use the "Sentinel Keys Available" page of Admin Control Center (instead of the RUS utility) to generate a fingerprint.

Note: For Linux or Mac (where Admin Control Center is available), only SL AdminMode fingerprints can be generated.

Issues Resolved in Version 7.103

Reference	Description
SM-66308	Certain important security issues were resolved. For more information, see the reference to article KB0020564 in the Gemalto Security Updates page: https://sentinel.gemalto.com/technical-support/security-updates-sm/ Gemalto acknowledges and thanks Vladimir Dashchenko from Kaspersky Lab ICS CERT for responsible disclosure of these vulnerabilities.

Reference

Description

SM-66308

Certain important security issues were resolved. For more information, see the reference to article KB0020564 in the Gemalto Security Updates page: https://sentinel.gemalto.com/technical-support/security-updates-sm/

Gemalto acknowledges and thanks Vladimir Dashchenko from Kaspersky Lab ICS CERT for responsible disclosure of these vulnerabilities.

Issues Resolved in Version 7.102

Reference	Description
SM-26322	Certain important security issues were resolved. For more information, see the reference to article KB0020199 in the Gemalto Security Updates page: https://sentinel.gemalto.com/technical-support/security-updates-sm/ Gemalto acknowledges and thanks Artem Zinenko from Kaspersky Lab ICS CERT for responsible disclosure of these vulnerabilities.
SM-62256	Under certain circumstances, it was possible to misuse detached licenses.
SM-64582	Under MacOS 10.15, changing the local host name would add unexpected characters into the computer name.

Reference

Description

SM-26322

Certain important security issues were resolved. For more information, see the reference to article KB0020199 in the Gemalto Security Updates page: https://sentinel.gemalto.com/technical-support/security-updates-sm/

Gemalto acknowledges and thanks Artem Zinenko from Kaspersky Lab ICS CERT for responsible disclosure of these vulnerabilities.

SM-62256

Under certain circumstances, it was possible to misuse detached licenses.

SM-64582

Under MacOS 10.15, changing the local host name would add unexpected characters into the computer name.

Enhancements in Version 7.101

Reference	Description
SM-61960	The Run-time Environment now supports controlling the generation of the License Manager ID files. This is done using the Enable Detaching of Licenses configuration check box in Admin Control Center. When selected, the License Manager generates ID files. When cleared, the License Manager stops generating any new ID files. However, the existing ID files are retained. By default, the Enable Detaching of Licenses check box is cleared.

Reference

Description

SM-61960

The Run-time Environment now supports controlling the generation of the License Manager ID files. This is done using the Enable Detaching of Licenses configuration check box in Admin Control Center. When selected, the License Manager generates ID files. When cleared, the License Manager stops generating any new ID files. However, the existing ID files are retained.

By default, the Enable Detaching of Licenses check box is cleared.

Enhancements in Version 7.100

Reference	Description
SM-22182	The Run-time Environment now supports pure 64-bit macOS.
SM-44008	The Run-time Environment now supports the use of Apple notary service.
SM-47546	The Run-time Environment now supports the ability of the Licensing API to check remaining idle time before a protection key login session is terminated. Checking the remaining idle time does not reset the session.

Issues Resolved in Version 7.100

Reference	Description
SM-56397	Given the following circumstances: >A license for a Product is detached from a customer's license server and applied on a different machine >In Sentinel LDK-EMS, the original entitlement for the Product is copied and used to create an update to the Product. The update is applied to the license server machine. >The detached license is canceled and returned to the license server. The number of available seats of the Product on the license server would not reflect that the license had been returned.
SM-56968	New License Manager configuration options provide protection against secure storage corruption in the event of power failure or operating system failure.
SM-57376	In certain situations, an SL license would disappear after system reboot.
SM-57569	Under certain circumstances, the License Manager clock would freeze during hibernation or in stand-by mode.

Issues Resolved in Version 7.92

Reference	Description
SM-50889 SM-50902 SM-50900	Certain important security issues were resolved. For more information, see the reference to article KB0018794 in the Gemalto Security Updates page: https://sentinel.gemalto.com/technical-support/security-updates-sm/ Gemalto acknowledges and thanks Artem Zinenko from Kaspersky Lab ICS CERT for responsible disclosure of these vulnerabilities. As part of the resolution for these issues, Admin Control Center no longer supports importing external language packs (either online or offline). Translated user interface files are included in the RTE installer. The end user now selects the desired language for the interface by clicking the name of the language instead of clicking a country flag image.

Reference

Description

SM-50889 SM-50902 SM-50900

Certain important security issues were resolved. For more information, see the reference to article KB0018794 in the Gemalto Security Updates page: https://sentinel.gemalto.com/technical-support/security-updates-sm/

Gemalto acknowledges and thanks Artem Zinenko from Kaspersky Lab ICS CERT for responsible disclosure of these vulnerabilities.

As part of the resolution for these issues, Admin Control Center no longer supports importing external language packs (either online or offline). Translated user interface files are included in the RTE installer. The end user now selects the desired language for the interface by clicking the name of the language instead of clicking a country flag image.

Enhancements in Version 7.90

Reference	Description
SM-17431	The License Manager now supports the use of custom clone protection schemes.
SM-34308	In Admin Control Center, the configuration parameter Allow Remote Access to ACC and Admin API has been split into two independent parameters: >Allow Remote Access to ACC >Allow Remote Access to Admin API This provide more granular control of access from a remote machine. You can now allow or deny access separately for Admin Control Center and for Admin API. (A corresponding split for configuration parameters was implemented in Sentinel Admin API.) When the License Manager is upgraded to version 7.90, each new parameter is assigned the value that was assigned to the original parameter. As a result, after the upgrade, there is no change in access granted.

Reference

Description

SM-17431

The License Manager now supports the use of custom clone protection schemes.

SM-34308

In Admin Control Center, the configuration parameter Allow Remote Access to ACC and Admin API has been split into two independent parameters:

>Allow Remote Access to ACC

>Allow Remote Access to Admin API

This provide more granular control of access from a remote machine. You can now allow or deny access separately for Admin Control Center and for Admin API. (A corresponding split for configuration parameters was implemented in Sentinel Admin API.)

When the License Manager is upgraded to version 7.90, each new parameter is assigned the value that was assigned to the original parameter. As a result, after the upgrade, there is no change in access granted.

Enhancements in Version 7.81

Reference	Description
SM-27901	The revision history of all enhancements implemented and issues resolved for earlier versions of the RTE is now available online at: https://docs.sentinel.thalesgroup.com/ldk/LDKdocs/RTE_History/Default.htm
SM-30222 SM-30886	Several security improvements have been implemented.

Issues Resolved in Version 7.81

Reference	Description
SM-28148	The hasp_login function would fail to log in to a HASP4 parallel port key (the function would not fail with HASP4 UBS keys). The login would fail with the error code HASP_HASP_NOT_FOUND = 7. This issue would occur with RTE version 7.52 and later.

Issues Resolved in Version 7.80

Reference	Description
SM-12155	If a customer applies a V2C update from a remote machine that has the Vendor library but no license from the same vendor, the error returned was HASP_UPDATE_TOO_NEW, which was confusing. Now the error returned is HASP_KEYID_NOT_FOUND.
SM-14373	When installing the Run-time Environment in a CentOS 7.x Docker, the message "Unsupported Linux distribution" was generated.
SM-18502	Defining an excessive number of User Restrictions in Admin Control Center would cause the License Manager Service to fail.
SM-19981	hasp_update would return an internal error for an HL Key when the license definition contains empty content in the default memory section.
SM-26543	Under certain circumstances, Sentinel License Manager would crash on the REST interface with long packets.
SM-6477	Given the following circumstances: >A customer uses SSH to connect to a remote Linux machine. >On the remote machine, the customer uses multiple tmux sessions to run a protected application. >hasp_login was called in each session. A license was consumed for each session. (If the Feature is defined to count workstations and not sessions, only one license should have been consumed for a single SSH session from the same workstation.)

Issues Resolved in Version 7.65

Reference	Description
SM-21408	The Admin Control Center help system was missing information regarding the new “Idle Timeout of Session” configuration parameter.
SM-23320	A possible security issue related to License Manager failure due to stack overflow on deep XML data (reported by Kaspersky) has been resolved.
SM-23402	A possible security issue related to buffer overflow (reported by Kaspersky) has been resolved.

Enhancements in Version 7.63

Reference	Description
SM-13505	In the past, the timeout for an idle License Manager session was fixed at 12 hours. You can now set the timeout to any value between 10 minutes and 720 minutes (12 hours). The timeout value can be set as follows: >In Admin Control Center, on the Basic Configuration page. Use the Idle Timeout of Session parameter. >In the hasplm.ini file. Assign the timeout value to idle_session_timeout_mins.
SM-14894	Admin Control Center now adds the update counter in C2V files in clear text - for example: <update_counter>5</update_counter> It is no longer necessary to decode the C2V file in order to view this information.
SM-19483	Admin Control Center now recognizes the new V2CP format to update protection keys. This supports planned enhancements in Sentinel LDK v.7.8.

Reference

Description

SM-13505

In the past, the timeout for an idle License Manager session was fixed at 12 hours. You can now set the timeout to any value between 10 minutes and 720 minutes (12 hours). The timeout value can be set as follows:

>In Admin Control Center, on the Basic Configuration page. Use the Idle Timeout of Session parameter.

>In the hasplm.ini file. Assign the timeout value to idle_session_timeout_mins.

SM-14894

Admin Control Center now adds the update counter in C2V files in clear text - for example: <update_counter>5</update_counter>
It is no longer necessary to decode the C2V file in order to view this information.

SM-19483

Admin Control Center now recognizes the new V2CP format to update protection keys. This supports planned enhancements in Sentinel LDK v.7.8.

Issues Resolved in Version 7.63

Reference	Description
SM-11734	When a Licensing API operation was performed repeatedly for an extended period of time with an HL key, the hasp_login function would fail with HASP_DEVICE_ERR=43. (Disconnecting and reconnecting the key would resolve the issue.)
SM-15922	Admin Control Center no longer requires the <?xml header in a V2C file.
SM-17175	After system reboot/service restart, an SL AdminMode detached license would disappear from a recipient machine that had no other licenses.

Enhancements in Version 7.60

Reference	Description
SM-9520	The structure of the files in Sentinel_Runtime_Rebranded.sh has been changed. As a result, it is no longer necessary to execute the Runtime Environment installer with sudo privileges.
SM-8672	The Run-time Environment for Mac has been modified so that it no longer writes data to system locations (in particular, it no longer writes to /usr/libexec/aksusbd and /usr/libexec/hasplmd). As a result, protected applications are not affected by system integrity protection that been implemented for Mac OS starting from Mac OS X 10.11.
SM-1286	You can now enter the URL to access Sentinel LDK-EMS in your Web browser without changing the EMS URL to lowercase.
SM-901	Admin Control Center (under Windows) can now display and apply updates to local SL UserMode keys. (Session information and certificate information for SL UserMode keys is not displayed.)
SM-4237	To display SL UserMode keys in Admin Control Station, License Manager runs an additional process (hasplmv) on the machine. If you are willing to accept that SL UserMode keys will not be displayed, you have the option to prevent hasplmv from executing by clearing the relevant check box on the Configuration page in Admin Control Center.
SM-6525	In the past, Admin Control Center and Admin API provided a configuration parameter that determined whether a remote user could access and perform actions in Admin Control Center. However, this parameter did not control remote access to Admin API. Now, the parameter Allow Remote Access to ACC and Admin API (in Admin Control Center) and the tag <accremote> (in Admin API) control remote access to both Admin Control Center and Admin API.

Issues Resolved in Version 7.60

Reference	Description
SM-515	It was possible to rehost a cloned license to another machine.
SM-518	The Diagnostics report in Admin Control Center (Diagnostics > Generate Report) displays information on "Recent Clients" and "Recent Users". Each entry contained a time stamp but not a date stamp. The report has been corrected to display both a time stamp and a date stamp for each entry.
SM-552	On Linux and Mac machines, Admin Control Center would fail to download additional languages when the user clicked the More Languages option.
SM-942	Under certain circumstances, Sentinel LDK License Manager Service would crash. The exception code would map to STATUS_STACK_OVERFLOW in __chkstk API.
SM-6102	When building a Run-Time Environment installer using Wix, an error message similar to the following was generated: Invalid product version '7.53.1.66350' in package HASP_Setup.msi'. When included in a bundle, all product version fields in an MSI package must be less than 65536. This error no longer occurs.

Enhancements in Version 7.55

Reference	Description
SM-4748	Sentinel Admin Control Center can now be used to configure the License Manager for the following additional considerations: >Allow specific named users to access specific Batch Codes, protection keys (haspID), or Product IDs. > Use the "*" wildcard character for IP and hostname. > Use subnet mask notation (for example: 172.18.8.0/21) for IP addresses For more information, see "Configuring User Settings" in the Admin Control Center online help.

Reference

Description

SM-4748

Sentinel Admin Control Center can now be used to configure the License Manager for the following additional considerations:

>Allow specific named users to access specific Batch Codes, protection keys (haspID), or Product IDs.

> Use the "*" wildcard character for IP and hostname.

> Use subnet mask notation (for example: 172.18.8.0/21) for IP addresses

For more information, see "Configuring User Settings" in the Admin Control Center online help.

Issues Resolved in Version 7.55

Reference Description

SM-4942 Various crash conditions in the License Manager that could be used for denial-of-service attacks or privilege-escalation attacks have been resolved.

SM-7748

Reference	Description
SM-4942	Various crash conditions in the License Manager that could be used for denial-of-service attacks or privilege-escalation attacks have been resolved.
SM-7748	When a user issues a "detach license" request from a remote Admin Control Center, the user name cannot be included in request. As a result, User Restrictions (defined in ACC on the license server machine) that are based on the user name are handled as follows: >“allow” user restrictions that are based on a specific user name are not applied because the user name is not available to the License Manager on the license server. If a different restriction such as `deny=all@all` is also specified, the detach request will be denied. >If any “deny” user restriction that is applicable for the request in all respects other than username exists, that restriction is applied even if the user name specified in the restriction does not match. For example: If the detach request was sent from a machine with the hostname host123, and a user restriction has been specified `deny=skr@host123` on the license server machine, the detach request is denied even the user requesting the detach has a different username. Sentinel Admin Control Center online help has been updated to describe these limitations.

When a user issues a "detach license" request from a remote Admin Control Center, the user name cannot be included in request. As a result, User Restrictions (defined in ACC on the license server machine) that are based on the user name are handled as follows:

>“allow” user restrictions that are based on a specific user name are not applied because the user name is not available to the License Manager on the license server. If a different restriction such as deny=all@all is also specified, the detach request will be denied.

>If any “deny” user restriction that is applicable for the request in all respects other than username exists, that restriction is applied even if the user name specified in the restriction does not match. For example: If the detach request was sent from a machine with the hostname host123, and a user restriction has been specified deny=skr@host123 on the license server machine, the detach request is denied even the user requesting the detach has a different username.

Sentinel Admin Control Center online help has been updated to describe these limitations.

Enhancements in Version 7.54

Reference	Description
SM-883	When a Sentinel LDK-EMS user performs an action in a Java-free Web browser that affect Sentinel protection keys in Sentinel LDK-EMS Vendor Portal or Customer Portal, the user would get the following message: “Either Runtime is not installed or the LDK-EMS portal URL is not configured in ACC. Download the Latest Runtime Installer (EXE / DLL)”. This message appears when the installed RTE is not configured to communicate with the Sentinel LDK-EMS machine. Until now, this configuration had to be performed manually. Now, when a user installs RTE 7.54 (or later) that was rebranded by Sentinel LDK-EMS 7.5.4 (or later), the installed RTE is already configured as required. No manual configuration is required.

Reference

Description

SM-883

When a Sentinel LDK-EMS user performs an action in a Java-free Web browser that affect Sentinel protection keys in Sentinel LDK-EMS Vendor Portal or Customer Portal, the user would get the following message: “Either Runtime is not installed or the LDK-EMS portal URL is not configured in ACC. Download the Latest Runtime Installer (EXE / DLL)”. This message appears when the installed RTE is not configured to communicate with the Sentinel LDK-EMS machine. Until now, this configuration had to be performed manually.

Now, when a user installs RTE 7.54 (or later) that was rebranded by Sentinel LDK-EMS 7.5.4 (or later), the installed RTE is already configured as required. No manual configuration is required.

Issues Resolved in Version 7.54

Reference	Description
SM-3696	The Run-time Environment version number was not displayed in the RTE Installer welcome screen. Now this version number is displayed. The version number for drivers has been removed from the screen as this information is not required.
SM-4808	Given the following scenario: 1.Generate a re-branded installer for MAC using Sentinel LDK-EMS. 2.Ensure that the installer installer contains a license file. 3.Run the installer twice. On the second run, the installer generates an error message stating that license installation failed, followed by a second message stating that (RTE) installation failed. However, in fact, only the license installation would fail. The RTE is installed successfully. Now, in the scenario described above, the second message will indicate that the RTE was installed successfully.

Reference

Description

SM-3696

The Run-time Environment version number was not displayed in the RTE Installer welcome screen. Now this version number is displayed. The version number for drivers has been removed from the screen as this information is not required.

SM-4808

Given the following scenario:

1.Generate a re-branded installer for MAC using Sentinel LDK-EMS.

2.Ensure that the installer installer contains a license file.

3.Run the installer twice.

On the second run, the installer generates an error message stating that license installation failed, followed by a second message stating that (RTE) installation failed.
However, in fact, only the license installation would fail. The RTE is installed successfully.

Now, in the scenario described above, the second message will indicate that the RTE was installed successfully.

Enhancements in Version 7.53

Reference	Description
SM-820	Sentinel LDK Run-time Environment is now supported under macOS Sierra.
SM-882	When used together with this Run-time Environment, Sentinel LDK-EMS 7.5 and later can now be used from a Web browser under Mac OS X, including operations that previously required Java applets in the Web browser (such as activation of entitlements by the end user).

Issues Resolved in Version 7.53

Reference	Description
SM-1201	Given the following scenario: 1.Obtain a C2V file for an SL Legacy key. 2.Prepare an update to upgrade the SL Legacy key to an SL AdminMode key in Sentinel License Generation API, but do not apply the update. 3.Prepare a second update using the first update as the current state for the key. 4.Apply the second update to the key. The update would return a status of OK even though the update fails.
SM-1549	Given the following scenario: 1.Connect a Sentinel HL (HASP configuration) key to a machine and generate a C2V file for the key. 2.Create an update in Sentinel License Generation API to upgrade the key to a Sentinel HL (Driverless configuration) key, but do not apply the update. 3.Prepare a second update to the key using the first update as the current state for the key. 4.Apply the second update to the key. The update would return a status of OK even though the update fails.

Reference

Description

SM-1201

Given the following scenario:

1.Obtain a C2V file for an SL Legacy key.

2.Prepare an update to upgrade the SL Legacy key to an SL AdminMode key in Sentinel License Generation API, but do not apply the update.

3.Prepare a second update using the first update as the current state for the key.

4.Apply the second update to the key.

The update would return a status of OK even though the update fails.

SM-1549

Given the following scenario:

1.Connect a Sentinel HL (HASP configuration) key to a machine and generate a C2V file for the key.

2.Create an update in Sentinel License Generation API to upgrade the key to a Sentinel HL (Driverless configuration) key, but do not apply the update.

3.Prepare a second update to the key using the first update as the current state for the key.

4.Apply the second update to the key.

The update would return a status of OK even though the update fails.

Issues Resolved in Version 7.51

Reference	Description
LDK-16443	Given the following circumstances: >A V2C file was applied to a new SL AdminMode license on a given machine. >The same V2C was applied a second time to the license. Instead of generating an error message and rejecting the update, the License Manager would generate the error message and then remove the original SL AdminMode license from the machine. (The license would be restored when the License Manager was restarted.)

Reference

Description

LDK-16443

Given the following circumstances:

>A V2C file was applied to a new SL AdminMode license on a given machine.

>The same V2C was applied a second time to the license.

Instead of generating an error message and rejecting the update, the License Manager would generate the error message and then remove the original SL AdminMode license from the machine. (The license would be restored when the License Manager was restarted.)

Issues Resolved in Version 7.50

Reference	Description
LDK-13136	Sentinel Licensing API would identify a Max Micro key as a Max key under certain circumstances.
LDK-13455	Given the following circumstances: >A license server machine and the recipient machine are in different time zones >A detachable license is transferred online from the server to the recipient machine. The detached license would expire earlier than expected.
LDK-13838	After installing RTE version 7.40 and enabling 'Broadcast Search for Remote Licenses' option, the ACC access log would contain a message similar to the following: `A duplicate License Manager ID exists on this server and on the server at address ::ffff:10.164.28.231. This is typically caused by cloning a VM. Licenses on these two servers may be inaccessible.`
LDK-14274	Given the following circumstances: >An SL AdminMode or SL Legacy license is located on a physical machine. >From a remote VM, hasp_get_info() is called to fetch values of the "disabled" and "usable" tags for the SL license. The incorrect values disabled=true and usable= false were returned.
LDK-14280	HASP HL keys are not recognized correctly by the License Manager when keys from two or more vendors are connected to a given machine.
LDK-14805	The Run-time Environment did not support RAID controllers that create symbolic links as \Device\RaidPort.
LDK-15306	On the Diagnostics page of Admin Control Center, the Requests counter would count a request to local licenses as a remote request.
LDK-15307	Given the following circumstances: 1.SL Legacy licenses from two different vendors were present on a machine. 2.The license from one of the vendors is removed. 3.The License Manager service is restarted. The remaining SL Legacy license was no longer visible in Admin Control Center.
LDK-16113	When a V2C file to clear the “cloned” status of an SL Legacy license was applied, The “clear clone” operation was not applied correctly until the user restarted the machine.

Enhancements in Version 7.40

Reference	Description
LDK-10079	The diagnostic panel in Admin Control Center now displays the version number for the Run-time Environment.
LDK-10107	The Admin Control Center log file now indicates the version number for the Licensing API.
LDK-10279	The button in Admin Control Center for generating C2V files is now blocked for HASP HL keys and Sentinel HL (HASP configuration) keys.
LDK-11335	Admin Control Center now displays the module name (in addition to the Feature ID) for Sentinel Master keys and Sentinel Developer keys.
LDK-6938	The Run-time Environment now supports Sentinel HL Drive microSD keys.

Issues Resolved in Version 7.40

Reference	Description
LDK-7237	Under certain circumstances, Admin Control Center would continue to show active sessions for an HL key after all sessions had logged out of the key.
LDK-10273	Admin Control Center would allow a license to be detached even though the termination date for the detach was invalid.
LDK-10564	The Vendor ID of a Master key was not the same in Admin Control Center pages and in diagnostic reports.
LDK-11825	Admin Control Center was not able to display an invalid HL key. Now such a key is visible in Admin Control Center with an indication that the key is not valid.

Enhancements in Version 7.32

Reference	Description
LDK-6934	Sentinel LDK Run-time Environment now supports the SentinelHL Drive microSD key (patent pending). This key has been tested with the following microSD cards: >Sandisk: 16 GB, 64 GB >Transcend: 16 GB, 64 GB >Toshiba: 32 GB >Samsung: 64 GB >Kingston: 64 GB, 256 GB, 512 GB

Reference

Description

LDK-6934

Sentinel LDK Run-time Environment now supports the SentinelHL Drive microSD key (patent pending). This key has been tested with the following microSD cards:

>Sandisk: 16 GB, 64 GB

>Transcend: 16 GB, 64 GB

>Toshiba: 32 GB

>Samsung: 64 GB

>Kingston: 64 GB, 256 GB, 512 GB

Issues Resolved in Version 7.32

Reference	Description
LDK-9325	Given the following circumstances: >An SL key contains a Feature that allows concurrency but does not allow virtual machines. >The SL key is installed on a physical machine. When the SL key is displayed in Admin Control Center on a second physical machine, the Feature is shown as "disabled". However, a protected application that includes that Feature operates correctly.
LDK-8862	When attempting to access a remote License Manager, Sentinel Admin API would return the incorrect error code SNTL_ADMIN_LM_NOT_FOUND (6002).
LDK-7237	Given the following circumstances: 1.A license with concurrency is installed on a Sentinel protection key. The count criteria is "Per Login". 2.Protected applications that consume seats from the license are started. 3.While the applications are active, the license is updated to change the count criteria (for example, from "Per Login" to "Per Process"). 4.One or more protected applications are closed. The Login count for the license would no longer match the number of actual applications active. As part of the resolution for this issue, when the count criteria for a network license is modified, all active sessions are automatically terminated.
LDK-10293	Given the following situation: >The user installed a version of the Run-time Environment prior to version 7.32 under Mac OS X 10.9 or 10.10. > During the installation, the firewall prompted the user to deny or allow incoming network connections for hasplmd. The user clicked Deny. As a result, it was necessary for the user to temporarily disable the firewall in order to access Admin Control Center. Starting with Run-time Environment v.7.32, driver binaries are signed. As a result, the firewall no longer prompts the user to deny or allow incoming network connections for hasplmd. However, when Run-time Environment v.7.32 is installed over an earlier version for which incoming network connections had been blocked as described above, it is necessary to reboot the machine after the installation. After the machine is rebooted, the user will be able to access Admin Control Center without the need to disable the firewall.
LDK-10572	During installation of a rebranded Run-time Environment on the end user’s machine, if the installation of the bundled V2C would fail for any reason, no error message was displayed. Now, such a failure generates the message: "License installation failed. Contact your software vendor for assistance."

Enhancements in Version 7.3

Reference	Description
LDK-4468	The template for customizing entries for the Access log in Sentinel License Manager has been enhanced. >A new log element (functionparams2) is available. >Tags for special characters that could not be used in the template until now are provided. >Existing elements (sessioncount, logincount, loginlimit) that did not provide reliable results have been corrected. >The following events are now logged correctly: session timeout, orphaned session logout, manual disconnect, AdminAPI disconnect. In addition, the template is now used for log entries generated by Embedded License Managers and External License Managers. For information on the log template, see the Edit Log Parameters screen and related help screen in Admin Control Center. (Click the Edit Log Parameters button from the Configuration - Basic Settings screen.)
LDK-735	Admin Control Center now enables the user to generate a C2V file without the requirement of installing the RUS utility. This is supported for Windows, Mac and Linux platforms. The following limitations apply: >HL Basic keys are not supported. >C2V files fetched from HASP HL and Sentinel HL (HASP Configuration) keys will not work with Business Studio. The C2V file can be generated for locally-connected Sentinel HL, HASP HL, and SL AdminMode keys.
LDK-5113	Stack usage in Sentinel Licensing API has been optimized. The vendor can use the maximum stack size. Sentinel Licensing API limits its stack usage to the minimum possible.

Reference

Description

LDK-4468

The template for customizing entries for the Access log in Sentinel License Manager has been enhanced.

>A new log element (functionparams2) is available.

>Tags for special characters that could not be used in the template until now are provided.

>Existing elements (sessioncount, logincount, loginlimit) that did not provide reliable results have been corrected.

>The following events are now logged correctly: session timeout, orphaned session logout, manual disconnect, AdminAPI disconnect.

In addition, the template is now used for log entries generated by Embedded License Managers and External License Managers.

For information on the log template, see the Edit Log Parameters screen and related help screen in Admin Control Center. (Click the Edit Log Parameters button from the Configuration - Basic Settings screen.)

LDK-735

Admin Control Center now enables the user to generate a C2V file without the requirement of installing the RUS utility. This is supported for Windows, Mac and Linux platforms. The following limitations apply:

>HL Basic keys are not supported.

>C2V files fetched from HASP HL and Sentinel HL (HASP Configuration) keys will not work with Business Studio.

The C2V file can be generated for locally-connected Sentinel HL, HASP HL, and SL AdminMode keys.

LDK-5113

Stack usage in Sentinel Licensing API has been optimized. The vendor can use the maximum stack size. Sentinel Licensing API limits its stack usage to the minimum possible.

Issues Resolved in Version 7.3

Reference	Description
LDK-7948	The Fridge daemon would fail to load when the machine has more than 128 devices participating in the fingerprint algorithm.

Issued Resolved in Version 7.1

Reference	Description
LDK-1926	Under Mac OS X 10.8 on a Mac Retina Mac Book Pro 10 machine: Hasplmd would become inaccessible when the machine was awakened after sleeping for more than 60 minutes.

Issued Resolved in Version 7.0

Reference	Description
LDK-1926	Under Mac OS X 10.8 on a Mac Retina Mac Book Pro 10 machine: Hasplmd would become inaccessible when the machine was awakened after sleeping for more than 60 minutes.

Enhancements in Version 2.5.2

Reference	Description
LDK-4468	The template for customizing entries for the Access log in Sentinel License Manager has been enhanced. >A new log element (functionparams2) is available. >Tags for special characters that could not be used in the template until now are provided. >Existing elements (sessioncount, logincount, loginlimit) that did not provide reliable results have been corrected. >The following events are now logged correctly: session timeout, orphaned session logout, manual disconnect, AdminAPI disconnect. In addition, the template is now used for log entries generated by Embedded License Managers and External License Managers. For information on the log template, see the Edit Log Parameters screen and related help screen in Admin Control Center. (Click the Edit Log Parameters button from the Configuration - Basic Settings screen.)
LDK-735	Admin Control Center now enables the user to generate a C2V file without the requirement of installing the RUS utility. This is supported for Windows, Mac and Linux platforms. The following limitations apply: >HL Basic keys are not supported. >C2V files fetched from HASP HL and Sentinel HL (HASP Configuration) keys will not work with Business Studio. The C2V file can be generated for locally-connected Sentinel HL, HASP HL, and SL AdminMode keys.
LDK-5113	Stack usage in Sentinel Licensing API has been optimized. The vendor can use the maximum stack size. Sentinel Licensing API limits its stack usage to the minimum possible.

Reference

Description

LDK-4468

The template for customizing entries for the Access log in Sentinel License Manager has been enhanced.

>A new log element (functionparams2) is available.

>Tags for special characters that could not be used in the template until now are provided.

>Existing elements (sessioncount, logincount, loginlimit) that did not provide reliable results have been corrected.

>The following events are now logged correctly: session timeout, orphaned session logout, manual disconnect, AdminAPI disconnect.

In addition, the template is now used for log entries generated by Embedded License Managers and External License Managers.

For information on the log template, see the Edit Log Parameters screen and related help screen in Admin Control Center. (Click the Edit Log Parameters button from the Configuration - Basic Settings screen.)

LDK-735

>HL Basic keys are not supported.

>C2V files fetched from HASP HL and Sentinel HL (HASP Configuration) keys will not work with Business Studio.

The C2V file can be generated for locally-connected Sentinel HL, HASP HL, and SL AdminMode keys.

LDK-5113

Stack usage in Sentinel Licensing API has been optimized. The vendor can use the maximum stack size. Sentinel Licensing API limits its stack usage to the minimum possible.

Issues Resolved in in Version 2.5.2

Reference	Description
LDK-7948	The Fridge daemon would fail to load when the machine has more than 128 devices participating in the fingerprint algorithm.
LDK-674	When OS X is upgraded or the hard disk is repartitioned, Secure Storage was sometimes corrupted.