Secure Endpoint Agent 10.0 release notes

If automatic agent updates are disabled, you can assign an agent version to your account's Windows and Mac devices to prevent agent upgrades.

To determine if you want to assign agent version 10.0, review this topic to learn about the improvements included in this version of the Secure Endpoint Agent.

To learn about all features, enhancements, and fixes introduced in Absolute 10.0, see the Absolute 10.0 release notes.

About the Secure Endpoint Agent

The Secure Endpoint Agent is a small software client that resides on devices that are managed in the Secure Endpoint Console. After the agent is initially installed on a new device, it's activated with the first connection to the Absolute Monitoring Center.

Each agent package includes software specific to its supported operating system, including the agent and its associated agent components, an installer, and a readme file.

Secure Endpoint Agent 10.0.0.1 supports devices running the following operating systems:

Operating system Supported versions
Windows

  • Windows 11 Home, Pro, Enterprise, SE, and IoT Enterprise editions (64-bit)

    Note that due to restrictions imposed by Microsoft, the following features aren't supported on Windows 11 SE:

    • Application Resilience: applications that require PowerShell for health checks, unless otherwise noted
    • Custom Data: data points that use PowerShell scripts
    • Reach Scripts: all PowerShell scripts
  • Windows 10 Home, Pro, Enterprise, and IoT Enterprise editions (32- and 64-bit)
Mac
  • macOS 13 to 15

The following agent components are associated with Secure Endpoint Agent 10.0.0.1:

Agent or component Windows version Mac version
Core agent The core agent (also known as rpcnet) is a small software client that resides in devices that are managed in the Secure Endpoint Console. After the core agent is initially installed on a new device, it is activated with its first connection to the Absolute Monitoring Center and the device is enrolled in Absolute. The core agent then makes scheduled connections every 24.5 hours. (rpcnet) 994 976

Component manager The component manager (also known as CTES) is installed on top of the core agent and manages the agent components responsible for initiating device actions and collecting device data. Most agent components are controlled by policies, such as the Hardware and Installed Applications policies. The component manager typically connects to the Absolute Monitoring Center every 15 minutes, at a minumum, to send device data and receive instructions.

(CTES)

 1.0.0.3744 1.0.0.3744

Anti-Malware

(AVP)

 1.0.13.17 1.0.11.28

Application Resilience

(RAR)

 7.16.1.7 N/A

Custom Data

(CDC)

 1.0.13.24 N/A

Data Discovery

(DARAgent)

 9.2.3.6 9.2.3.2

Device Usage

(DUR)

 1.0.10.6 1.0.8.14

End User Messaging

(EUM)

 1.0.5.17 1.0.4.9

File Delete

(SDD)

 1.0.9.20 1.0.9.8
Freeze
(DFZ)		 1.0.9.36 1.0.5.15

Full-Disk Encryption
(ESP)

 1.0.11.14 1.0.10.14

Geolocation

(GEO)

 1.0.13.11 1.1.2.38

Hardware

(HDP)

 2.0.17.11 1.0.13.16

Installed Applications

(SNG)

 1.0.16.70 1.0.12.22

Manage Supervisor Password and
Playbooks
(PER)

 1.0.6.90 N/A

Reach Script

(ANS)

 1.0.5.15 1.0.7.5

Web Usage

(WMA)

 9.2.3.3 N/A

Wipe

(SDW)

 1.0.8.14 1.0.4.5

You can view the version number of a device's core agent and component manager on its Details > Summary page.

Absolute for Chromebooks Extension: 2.6.6.2

You can view the version number of a device's Chromebook extension by adding the Agent column to a device report.

Agent improvements and fixes

  • Version 10.0.0.1
  • Version 10.0

Version 10.0 0.1 of the Secure Endpoint Agent includes improvements and fixes to the following agent components:

Component Component version Fixes and improvements
Windows

Component manager

(CTES)

 1.0.0.3744
  • The CTES component has been updated to support a future enhancement.

Geolocation

(GEO)

 1.0.13.11

  • Security improvement.

Manage Supervisor Password and Playbooks

(PER)

 1.0.6.90

  • When deleting a custom policy group that is assigned a higher agent version than the Global Policy Group, the PER component on each moved device is now successfully downgraded to the lower version. Note that this action prompts a device to restart three times to complete the downgrade process.
Mac

Component manager

(CTES)

 1.0.0.3744
  • The CTES component has been updated to support a future enhancement.

Version 10.0 of the Secure Endpoint Agent includes improvements and fixes to the following agent components:

Component Component version Fixes and improvements
Windows

Anti-Malware

(AVP)

 1.0.13.17

  • When a device user updated a device's date & time setting to a format that was not recognized by the server, an error occurred and the AVP payload was not processed correctly. The issue is now fixed.

Component manager

(CTES)

 1.0.0.3623

  • Performance and security improvements.

Custom Data Collector

(CDC)

 1.0.13.24
  • When a CDC payload can't be created due to very low disk space, an empty payload is no longer uploaded.
  • Security improvement.

Device Usage

(DUR)

 1.0.10.6

  • Previously, an invalid format may have been used to report the date and time of a device usage event, and it couldn't be processed. This issue is now fixed.

Messages

(EUM)

 1.0.5.17

  • Logging improvement.

Full-Disk Encryption

(ESP)

 1.0.11.14

  • When a device user updated a device's date & time setting to a format that was not recognized by the server, an error occurred and the ESP payload was not processed correctly. The issue is now fixed.

  • Security improvement.

Geolocation

(GEO)

 1.0.13.6

  • Logging improvement.

Hardware

(HDP)

 2.0.17.11

  • Security and logging improvements.
Mac

Component manager

(CTES)

 1.0.0.3623

  • Performance and security improvements.

Device Usage

(DUR)

 1.0.8.14

  • Previously, the Public IP address associated with a device usage event may have been incorrect. This issue is now fixed.

Full-Disk Encryption

(ESP)

 1.0.10.14

  • Security improvement.

Hardware

(HDP)

 1.0.13.16

  • After a Mac device was frozen, the device's username was reported in the console as root, instead of the last logged in user. This issue is now fixed.

  • When a hardware field contains a special character, such as an apostophe ('), the character is now displayed correctly in the console.

  • In some rare cases, a new Hardware scan was not triggered when a Mac device's SSID changed. This issue is now fixed.

Installed Applications

(SNG)

 1.0.12.22
  • The SNG component now successfully detects application usage information for the Rapid7 application.
  • For Microsoft applications, such as Remote Desktop, Word, and Excel, the reported install date and time is now correct.
  • The name of Trend Micro Apex One Security Agent is now reported consistently across the console as Apex One (Mac) Security Agent.
  • Previously, the SNG component detected the name of Sophos AntiVirus as "Sophos Scan", and didn't detect that it was an anti-malware application. This issue is now fixed.
  • The SNG component has been enhanced to improve the accuracy and completeness of the application information it detects.
  • The SNG component now successfully detects the health of the following built-in macOS components:
    • Gatekeeper
    • Firewall
    • XProtect
    • FileVault

  • Performance and logging improvements.