Secure Endpoint Agent release notes - Version 9.2 hotfixes

If agent version control is enabled, you can assign an agent version to your account's Windows and Mac devices to prevent agent upgrades. To determine if you want to assign a particular agent version, review this topic to learn about the enhancements and fixes supported in each hotfix version of the Secure Endpoint Agent.

To learn about all features, enhancements, and fixes introduced in the Secure Endpoint 9.2 hotfixes, see the Secure Endpoint 9.2 hotfix release notes.

About the Secure Endpoint Agent

The Secure Endpoint Agent is a small software client that resides on devices managed in the Secure Endpoint Console. After the agent is initially installed on a new device, the agent is activated with its first connection to the Absolute Monitoring Center.

Each agent package includes software specific to its supported operating system, including the agent and its associated components, an installer, and a readme file.

The 9.2.0.x package bundles contain Secure Endpoint Agent software that support devices running the following operating systems:

Operating system Supported versions
Windows

  • Windows 11 Home, Pro, Enterprise, SE, and IoT Enterprise editions (64-bit)

    Note that due to restrictions imposed by Microsoft, the following features are not supported on Windows 11 SE:

    • Applications Resilience: applications that require PowerShell for health checks
    • Custom Data: data points that use PowerShell scripts
    • Reach Scripts: all PowerShell scripts
  • Windows 10 Home, Pro, Enterprise, and IoT Enterprise editions (32- and 64-bit)
Mac
  • macOS 13 to 15

The following agent components are associated with Secure Endpoint Agent 9.2.0.4.

Agent or component Windows version Mac version
Core agent The core agent (also known as rpcnet) is a small software client that resides in devices that are managed in the Secure Endpoint Console. After the core agent is initially installed on a new device, it is activated with its first connection to the Absolute Monitoring Center and the device is enrolled in Absolute. The core agent then makes scheduled connections every 24.5 hours. (rpcnet) 994 976

Component manager The component manager (also known as CTES) is installed on top of the core agent and manages the agent components responsible for initiating device actions and collecting device data. Most agent components are controlled by policies, such as the Hardware and Installed Applications policies. The component manager typically connects to the Absolute Monitoring Center every 15 minutes, at a minumum, to send device data and receive instructions.

(CTES)

 1.0.0.3619 1.0.0.3619

Anti-Malware

(AVP)

 1.0.13.15 1.0.11.28

Application Resilience

(RAR)

 7.16.1.7 N/A

Custom Data

(CDC)

 1.0.13.3 N/A

Data Discovery

(DARAgent)

 9.2.3.6 9.2.3.2

Device Usage

(DUR)

 1.0.10.5 1.0.8.7

End User Messaging

(EUM)

 1.0.5.15 1.0.4.9

File Delete

(SDD)

 1.0.9.20 1.0.9.8
Freeze
(DFZ)		 1.0.9.36 1.0.5.15

Full-Disk Encryption
(ESP)

 1.0.11.13 1.0.9.46

Geolocation

(GEO)

 1.0.12.12 1.1.2.38

Hardware

(HDP)

 2.0.16.6 1.0.13.4

Installed Applications

(SNG)

 1.0.16.70 1.0.12.7

Manage Supervisor Password and
Extended Resilience
(PER)

 1.0.6.82 N/A

Reach Script

(ANS)

 1.0.5.15 1.0.7.5

Web Usage

(WMA)

 9.2.3.3 N/A

Wipe

(SDW)

 1.0.8.14 1.0.4.5

You can view the version number of a device's core agent and component manager on its Details > Summary page.

Absolute for Chromebooks Extension: 2661

You can view the version number of a device's Chromebook extension by adding the Agent column to a device report.

Agent improvements and fixes

The following fixes and improvements are available in agent version 9.2.0.4:

Component Component version Fixes and improvements
Windows
Application Resilience
(RAR)		 7.16.1.7

  • Logging improvement.
Freeze
(DFZ)		 1.0.9.36

  • If the DFZ component was upgraded on a frozen device, the Freeze was removed from the device and the request’s action status in the console was updated to Freeze failed. This issue is now fixed.
Manage Supervisor Password and
Extended Resilience
(PER)		 1.0.6.82

  • Performance improvements.

Installed Applications

(SNG)

 1.0.16.70

  • Performance improvements.
Mac

Anti-Malware

(AVP)

 1.0.11.28

  • Previously, Microsoft Defender failed to be detected on some Mac devices. This issue is now fixed.
Freeze
(DFZ)		 1.0.5.15

  • Performance improvement.

The following fixes and improvements are available in agent version 9.2.0.3:

Component Component version Fixes and improvements
Windows

Data Discovery

(DARAgent)

 9.2.3.6

  • Security improvements.

Device Usage

(DUR)

 1.0.10.5

  • The DUR component has been updated to ensure that when a device’s IP address changes, it's reported in the next usage event, such as Login or Unlock, on the device’s Device Details > Usage page.
End User Messaging
(EUM)		 1.0.5.15

  • Security improvement.

File Delete

(SDD)

 1.0.9.20
Freeze
(DFZ)		 1.0.9.30

  • When unfreezing a device using its unfreeze code, an input field is now shown below the Freeze message on the device. Type the unfreeze code in the field, and then press Enter or Return to unfreeze the device. Learn more

  • Security improvement.

Full-Disk Encryption
(ESP)

 1.0.11.13

  • Previously, if a device became encrypted by BitLocker after McAfee Encryption was disabled, but not uninstalled, the ESP component may not have reported that the device is encrypted by BitLocker. This issue is now fixed.

Installed Applications

(SNG)

 1.0.16.66

  • The SNG component has been improved to not report the same file evidence for different installed versions of an application.

  • The SNG component now excludes websites installed as apps in Edge from the application report.

  • In specific scenarios, the SNG component reported the encryption status for Dell Encryption inconsistently. This issue is now fixed.

  • The SNG component no longer reports Trend Micro Full Disk Encryption Management for Microsoft BitLocker as an encryption application.

  • In some cases, an added or removed service triggered the SNG component to send a new payload unnecessarily. This issue is now fixed.

  • The SNG component has been improved to better track the health of the following applications:

    • Slack

    • Fuze

  • In some rare cases, the SNG component associated Microsoft Office file evidence to Microsoft One Note. This issue is now fixed.

  • In specific scenarios, the SNG component sent unnecessary payloads when an upgrade was in progress. This issue is now fixed.

  • The SNG component can now track the health of the Remote Desktop Connection application.

  • Stability improvements.
Manage Supervisor Password and
Extended Resilience
(PER)		 1.0.6.79
  • The PER component now supports Windows devices running Absolute Firmware Persistence version 2.x.x.x or higher.
  • When the PER component is in the process of provisioning a device, two reboots are now required. Previously, three or four reboots were required.
  • The PER component now receives new Run Playbook requests as they’re created, instead of checking for new requests at 5 minute intervals.

Reach Script

(ANS)

 1.0.5.15

  • Security improvement.
Wipe
(SDW)		 1.0.8.14

Web Usage

(WMA)

 9.2.3.3
Mac

Anti-Malware

(AVP)

 1.0.11.20

  • Previously, Crowdstrike Falcon failed to be detected on some Mac devices. This issue is now fixed.

File Delete
(SDD)

 1.0.9.8

  • Security improvement.
Freeze
(DFZ)		 1.0.5.12

  • When unfreezing a device using its unfreeze code, an input field is now shown below the Freeze message on the device. Type the unfreeze code in the field, and then press Enter or Return to unfreeze the device. Learn more

  • Security improvement.

Data Discovery

(DARAgent)

 9.2.3.2

  • Security improvement.
End User Messaging
(EUM)		 1.0.4.9
Reach Script
(ANS)		 1.0.7.5
Wipe
(SDW)		 1.0.4.5

The following fixes and improvements are available in agent version 9.2.0.2:

Component Component version Fixes and improvements
Windows
Component manager
(CTES)		 1.0.0.3619
  • If a Manage Supervisor Password request is in progress when a device receives instructions to deactivate its Extended Resilience policy, the Manage Supervisor Password request is now processed successfully.
  • Security improvement.

Application Resilience

(RAR)

 7.16.1.4

  • The RAR component has been updated to support a future enhancement.
Manage Supervisor Password and
Extended Resilience
(PER)		 1.0.6.54

  • If PER component 1.0.4.13 was installed on a Windows device when the Extended Resilience policy was activated, the component failed to upgrade to version required by the policy. This issue is now fixed.
Mac
Component manager
(CTES)		 1.0.0.3619

  • Security improvement.
Geolocation
(GEO)		 1.1.2.38

  • In some cases, device users were unable to allow Absolute to detect the device's location because "Absolute Secure Endpoint" was not included in the list of available applications in System Settings > Privacy & Security > Location Services. This issue is now fixed.

The following fixes and improvements are available in agent version 9.2.0.1:

Component Component version Fixes and improvements
Windows
Anti-Malware (AVP) 1.0.13.15

  • Previously, the AVP component failed to detect Carbon Black Cloud 3.7. This issue is now fixed.
Data Discovery
(DARAgent)		 9.2.1.3

  • The DARAgent component was updated to support the new feature, scan exclusions, which was introduced in this release.

  • Security improvements.
End User Messaging
(EUM)		 1.0.5.12

  • Stability improvement.
File Delete
(SDD)		 1.0.9.18
Freeze
(FRZ)		 1.0.9.9
Full-Disk Encryption (ESP) 1.0.11.8

  • Previously, the ESP component may have failed to report the following:

    • The correct version information for the VeraCrypt application

    • The Windows Device Encryption application on devices running Windows 10 Home

    • Both issues are now fixed.

  • Logging improvements.
Installed Applications (SNG) 1.0.16.34

  • Previously, the SNG component may have failed to report the following:

    • Application Name details for application files with no English language information

    • The Windows Device Encryption application on devices running Windows 10 Home

    • Both issues are now fixed.

  • The SNG component has been improved to better track the health of Google Chrome.

  • Payloads now exclude executable files that are incompatible with the platform of the device being scanned.

  • Stability, logging, and performance improvements.
Manage Supervisor Password and
Extended Resilience
(PER)		 1.0.6.53

  • The PER component has been enhanced. It now supports Extended Resilience, a feature that allows you to repair or restore compromised Windows devices. Learn more
Web Usage
WMA)		 9.2.1.2

  • Security improvement.
Wipe
(SDW)		 1.0.8.12

  • Stability improvement.
Mac
Data Discovery
(DARAgent)		 9.2.1.5

  • The DARAgent component was updated to support the new feature, scan exclusions, which was introduced in this release.

  • Security improvements.