Revision History

This section describes enhancements implemented and issues resolved in the last three major releases of Sentinel Run-time Environment.

The revision history for earlier versions of Sentinel Run-time Environment is available at: https://docs.sentinel.thalesgroup.com/ldk/LDKdocs/RTE_History/Default.htm

Enhancements in Version 10.12

Reference Description
SM-172774

In the table on the Products page in Sentinel Admin Control Center: If no seats are available to be detached, the value "0" is now displayed in the Available column. Previously, the value was left blank if no seats were available.

Issues Resolved in Version 10.12

Reference Description
SM-178590

After upgrading to Sentinel LDK 10.0, Sentinel LDK License Manager would fail at random on the user's machine.

SM-175242

In Sentinel Admin Control Center, the Products page and Features page would not load if the friendly name field of the Product or the Feature contained the newline character.

SM-179396

Given the following circumstances:

>The license server for cloud licensing is hosted by Thales.

>The RTE on the user's machine has been upgraded to 10.11.

When attempting to run the protected application, the end user would receive the message "Certificate verification failed".

Enhancements in Version 10.11

Reference Description
 

Communication between:
- the Licensing API or local license manager

AND
- vendor-hosted CL service or Thales-hosted CL service
is now supporting using the HTTPS protocol.

SM-153755 Idle Timeout of Session can be set to Unlimited in ACC now.

Issues Resolved in Version 10.11

No issue are resolved in this release.

Enhancements in Version 9.16

No enhancements are included in this release.

Issues Resolved in Version 9.16

Reference Description
SM-161002

Certain important security issues were resolved. For more information, see the reference to article KB0028187 in the Thales Security Updates page: https://sentinel.gemalto.com/technical-support/security-updates-sm/

Thales acknowledges and thanks Julian Horoszkiewicz (Eviden Red Team) for responsible disclosure of these vulnerabilities.

Enhancements in Version 9.15

Reference Description
SM-156845

Improved support of multiple applications when rate limiting is applied. The rate limiting mechanism now uses a separate bucket for each application.

 

The Run-time Environment is now additionally supported for:

> Windows 11 23H2

> Windows 11 ARM 23H2 (only when protected with Licensing API)

Issues Resolved in Version 9.15

Reference Description
SM-153766

Given the following circumstances:

1.A proxy setting is placed in hasp_<vendorId>.ini along with a client identity.

2.The application calls hasp_transfer to detach a license from the cloud license server successfully.

An error was returned when the application called hasp_update to apply the detached license.

SM-156906

The process for installing a client identity on a user's machine using the provided URL would fail if a different identity with the same server already existed on the user's machine. Now a relevant message is displayed to notify the user of the conflict.

SM-156932

The processid parameter in a session created by the REST API was not properly set in Admin API output. The parameter contained an unexpected 19-digit value instead of the expected value.

SM-158487

When configuring a trusted client in Admin Control Center, it was not possible to specify a range of IP addresses.

Enhancements in Version 9.14

Reference Description
SM-147888

Certain enhancements have been implemented for working with Sentinel LDK CL (Cloud Licensing) Service.

Issues Resolved in Version 9.14

Reference Description
SM-148071

When using the hasp_transfer function in Sentinel Licensing API to transfer an SL key, hasp_transfer would generate the return code 50 (HASP_SCOPE_RESULTS_EMPTY) when attempting to detach the SL key from the source machine.

SM-148693

The Sentinel Keys page in Sentinel Admin Control Center would not display if a key to be listed on the page contained a newline character in its "friendly" key name (in the <keydescription> field).

Enhancements in Version 9.13

Reference Description
SM-133552

The login_scope function in Sentinel Licensing API can limit login to cloud licenses. Login can be limited to:

>A cloud license

>A license that originated from a cloud license

>A license that is detached from a cloud license

>A non-cloud network license

The get_info function can return attributes that differentiate between these license types.

SM-134759

The login_scope funtion in Sentinel Licensing API can specify that login should be limited to a specific key ID. The same call with the same key ID can also limit login to a license detached locally from that key. (Users typically have multiple auto-detached keys from different CL keys.)

Issues Resolved in Version 9.13

Reference Description
SM-145573

In Sentinel Admin Control Center 9.12, if the user attempted to access Configuration > Client Identities > Add Client Identity > Help, the resulting help page was blank.

SM-143338

The Diagnostics page in Admin Contol Center would display the operating system as Windows 10 on a Windows 11 machine.

SM-138618

When using manual detach for a license in Admin Control Center, the user can specify an expiration date using day, month, and year fields, or they can select a date from a calendar. If the user selected a date from the calendar, the day, month, and year fields were not synchronized to the selected date, but the detach license would expire according to the values in the day, month and year fields.

SM-145002 SM-144828

Resolved issues in access control when cloud licenses are accessed by a remote machine with a client identity using Sentinel Licensing REST API.

SM-145528

Uploading an XML file for mapping Vendor ID, Products and Features to Admin Control Center required much more time than was required in earlier versions of Admin Control Center.

Enhancements in Version 9.12

Reference Description
SM-137293

Sentinel LDK Run-time Environment and protected applications are both supported under Windows 11 ARM 22H2.

SM-137232 Maximum idle timeout for sessions has been increased to 72 hours.
SM-134021

Access to Sentinel Admin API can now be restricted so that it is only available for users from the local network. This can be enforced using firewall rules. Administrator-level requests would be allowed only on a specific port or network interface (or both).

SM-105690 The License Manager now supports the new Sentinel Licensing REST API.
SM-104883 The License Manager now accepts a V2C file to clear the the time-tampered status for an SL key.

Issues Resolved in Version 9.12

Reference Description
SM-134020

Under certain circumstances, UDP packets may be lost. Broadcast search now repeats the UDP transmission multiple times to overcome the loss of UDP packets.

SM-136775

The License Manager was not able to keep track of more than 2,000 clients' LM identifiers. This could result in incomplete information when listing detached licenses in the server Admin Control Center pages.

The limitation of 2,000 LM identifiers has been removed.

SM-139869

Previously, when a proxy was configured in ACC, the LM would attempt to resolve DNS names, even if they were not resolvable in the local network. This resulted in connection failures. Now, when a proxy is defined in ACC, the LM no longer attempts to resolve DNS names. Instead, it allows the proxy to handle DNS resolution.

SM-139963

When a seat was detached from a license with no vendor name defined, the H2R file would contain invalid information in the vendor name field.

SM-140200

Sentinel Admin API was not able to retrieve client identity information when the client identity was defined with multiple key IDs and admin_get was called using a specific key ID in the scope.

SM-141007

If the session username contains the "&" character, the GetInfo function would report the value in the XML structure as specified, resulting in an invalid XML file. For example:

<session username="G&D" />

Now, the character is reported back as an XML entity. For example:

<session username="G&amp;D" />

Enhancements in Version 8.53

Reference Description
SM-134244

Sentinel LDK Run-time Environment and protected applications are both supported under Windows 10 22H2.

Issues Resolved in Version 8.53

Reference Description
SM-134170

Given the following circumstances:

1.The vendor asssigned multiple key IDs in the Limit to Key ID field for a client identity on the license server.

2.The vendor sends the identity string for the client identity to the licensed user.

After the licensed user applies the identity string on their machine, only one key ID is shown on the user's machine.

Enhancements in Version 8.51

Reference Description
SM-98674

Sentinel License Manager now supports client identity registration on a user's machine when the user click a provided link. The License Manager Service can parse and decode the URL to copy the identity string to the local INI file.

SM-128094 Sentinel Admin API can now be used to obtain a C2V file or fingerprint file from a user's machine.

Issues Resolved in Version 8.51

Reference Description
SM-122150 The License Manager would fail on machines with a CPU from before 2010.
SM-123325

The recipient list of detaches was incomplete when working with secure storage. (The list is complete when working with trusted storage.)

Note: This issue did not affect functionality - it only affected the user interface.

SM-123370 Certain errors would occur in the detection of Parallels VMs.
SM-124009
SM-130468

The PMType2 clone detection scheme did not work correctly under certain unusual circumstances.

SM-126115

The Admin License Manager would always checks the idle timeout, while the Runtimeless API never checks it. As a result, when installing or uninstall the RTE, conflicting behavior might occur for an HL Driverless key.

Now, if the logged-in Feature on the key is not enabled for network access, idle timeout is skipped.

SM-127056 The listing in Admin Control Center of products with detachable features did not paginate correctly.
SM-128810

For Sentinel Licensing API, when a call to hasp_login_scope() fails, the event is now logged with the related feature_id, as was already occuring with hasp_login(). Until now, the behavior for the two functions was inconsistent.

SM-130023 Errors in DNS resolution with client identity are now handled better.
SM-130889

The License Manager Service was not able to access a cloud license manager hosted by Google Cloud Platform with proxy settings.

SM-131117 In Admin Control Center, automatic detach was not taking friendly names for Feature and Product names.

Enhancements in Version 8.43

No enhancements are included in this release.

Issues Resolved in Version 8.43

Reference Description
SM-120179

The zlib library has been upgraded to version 1.2.12.

SM-121566

During installation of Run-time Environment 8.41 on a machine with an old CPU, installation would fail with a message similar to:

Error when starting the Sentinel License Manager service with parameters 1280 0 0.
This is an internal error.

SM-123325

In Admin Control Center, the displayed recipient list of detached licenses was incomplete when the Sentinel License Manager worked with Secure Storage. This issue would not occur when working with Trusted Storage. This issue did not affect functionality of the License Manager.