Secure Endpoint Agent 10.1 release notes

If automatic agent updates are disabled, you can assign an agent version to your account's Windows and Mac devices to prevent agent upgrades.

To determine if you want to assign agent version 10.1, review this topic to learn about the improvements included in this version of the Secure Endpoint Agent.

To learn about all features, enhancements, and fixes introduced in Absolute 10.1, see the Absolute 10.1 release notes.

About the Secure Endpoint Agent

The Secure Endpoint Agent is a small software client that resides on devices that are managed in the Secure Endpoint Console. After the agent is initially installed on a new device, it's activated with the first connection to the Absolute Monitoring Center.

Each agent package includes software specific to its supported operating system, including the agent and its associated agent components, an installer, and a readme file.

Secure Endpoint Agent 10.1 supports devices running the following operating systems:

Operating system Supported versions
Windows
  • Windows 11 Home
  • Windows 11 Pro
  • Windows 11 Enterprise
  • Windows 11IoT Enterprise editions
  • Windows 11 SE

    • Note that due to restrictions imposed by Microsoft, the following features aren't supported on Windows 11 SE:

    • Application Resilience: applications that require PowerShell for health checks, unless otherwise noted
    • Custom Data: data points that use PowerShell scripts
    • Reach Scripts: all PowerShell scripts

Windows 11 ARM-based devices are supported.
Mac
  • macOS 14, 15, and 26

The following agent components are associated with Secure Endpoint Agent 10.1:

Agent or component Windows version Mac version

Core agent The core agent (also known as rpcnet) is a small software client that resides in devices that are managed in the Secure Endpoint Console. After the core agent is initially installed on a new device, it is activated with its first connection to the Absolute Monitoring Center and the device is enrolled in Absolute. The core agent then makes scheduled connections every 24.5 hours. (rpcnet)

 6006 7002

Component manager The component manager (also known as CTES) is installed on top of the core agent and manages the agent components responsible for initiating device actions and collecting device data. Most agent components are controlled by policies, such as the Hardware and Installed Applications policies. The component manager typically connects to the Absolute Monitoring Center every 15 minutes, at a minumum, to send device data and receive instructions.

(CTES)

 1.0.0.3835 1.0.0.3835

Anti-Malware

(AVP)

 1.0.13.17 1.0.11.39

Application Resilience

(RAR)

 7.16.1.15 N/A

Custom Data

(CDC)

 1.0.13.30 N/A

Data Discovery

(DARAgent)

 10.0.3.4 10.0.3.4

Device Usage

(DUR)

 1.0.10.11 1.0.8.20

End User Messaging

(EUM)

 1.0.5.17 1.0.4.9

File Delete

(SDD)

 1.0.9.20 1.0.9.8
Freeze
(DFZ)		 1.0.9.46

1.0.5.18

Full-Disk Encryption
(ESP)

 1.0.11.14 1.0.10.24

Geolocation

(GEO)

 1.0.15.17 1.1.2.44

Hardware

(HDP)

2.0.17.14

 1.0.13.16

Installed Applications

(SNG)

 1.0.16.77 1.0.12.25

Manage Supervisor Password and
Playbooks
(PER)

1.0.7.35

 N/A

Reach Script

(ANS)

 1.0.5.15 1.0.7.5

Web Usage

(WMA)

 10.0.3.140 N/A

Wipe

(SDW)

 1.0.8.19 1.0.4.5

You can view the version number of a device's core agent and component manager on its Details > Summary page.

Absolute for Chromebooks Extension: 2.6.6.4

You can view the version number of a device's Chromebook extension by adding the Core agent version column to a device report.

Agent improvements and fixes

Version 10.1 of the Secure Endpoint Agent includes improvements and fixes to the following agent components:

Component Component version Fixes and improvements
Windows

Component manager

(CTES)

 1.0.0.3835

  • The CTES component now immediately retries sending geolocation payloads after the network connection is restored, instead of waiting up to 30 minutes. This improvement ensures location updates are sent to the server without unnecessary delays.

  • Security improvements.

Custom Data Collector

(CDC)

 1.0.13.30

  • Security improvement.
Freeze
(DFZ)		 1.0.9.46

  • When a device is unfrozen, its Windows settings for file sharing and Remote Desktop are now restored to the state they were in before the device was frozen. This enhancement helps to ensure user settings are preserved and automatically returned after unfreezing.

Geolocation

(GEO)

 1.0.15.17

  • The GEO component can now temporarily enable Windows Location Services on devices when they are disabled by an Intune policy, ensuring device location can be collected when needed.

  • Performance and logging improvements.

Hardware

(HDP)

 2.0.17.14

  • The HDP component now collects information about a Windows device's Trusted Platform Module (TPM). You can view this information in the console by adding the new TPM report columns to a device report.

  • A new BootOrderLocked status has been added to the BootInfo section of the payload. You can view this information in the console by adding the Boot Info > Boot Order Locked report column to a device report.

  • Security improvement.
Manage Supervisor Password and
Playbooks
(PER)		 1.0.7.35

  • Fixed an issue where devices running the Restore from image playbook could show the BitLocker recovery screen if a Microsoft user account and BitLocker were activated before Absolute’s self-healing process completed. Devices now complete recovery without unnecessary BitLocker prompts.

Application Resilience

(RAR)

 7.16.1.15

  • Performance and security improvements.

Wipe

(SDW)

 1.0.8.19

  • The SDW component has been updated to support the new Don’t wipe unencrypted free space option in Wipe requests.
Mac

Anti-Malware

(AVP)

 1.0.11.39

  • The AVP component now supports reporting the status of Apple’s XProtect security feature. This enhancement helps ensure XProtect is monitored and visible across your Mac devices.

  • Performance improvement.

Component manager

(CTES)

 1.0.0.3835

  • The CTES component now immediately retries sending geolocation payloads after the network connection is restored, instead of waiting up to 30 minutes. This improvement ensures location updates are sent to the server without unnecessary delays.

  • Performance and security improvements.
Freeze
(DFZ)		 1.0.5.18

  • To help prevent brute force attacks, a one-second delay has been added after each failed attempt to unfreeze a device using its passcode.

Full-Disk Encryption

(ESP)

 1.0.10.24

  • Performance improvement.

Geolocation

(GEO)

 1.1.2.44

  • Performance, logging, and security improvements.

Installed Applications

(SNG)

 1.0.12.25

  • The SNG component now supports reporting the status of Apple’s XProtect security feature. This enhancement helps ensure XProtect is monitored and visible across your Mac devices.

  • Performance improvement.