Notes de publication

Added -AlwaysAskForOldPassword parameter to New-RDMRepository and Set-RDMRepository to require the current master password to be verified before it can be changed or cleared

Added -MasterPassword parameter to New-RDMRepository and Set-RDMRepository to protect the vault with a password

Added -OldMasterPassword parameter to Set-RDMRepository to supply the current master password when changing or clearing it on a vault with 'Always ask for old password' enabled

Added -Owners parameter to New-RDMRepository and Set-RDMRepository to assign vault owners

Added -SortPriority parameter to New-RDMRepository to set the vault's sort priority

Added -VaultSecurityLevel parameter to New-RDMRepository and Set-RDMRepository to set the security level of the vault (DVLS only)

Added -Visibility parameter to New-RDMRepository to control who can request access to the vault

Improved PSRepositoryInfo format to enable direct modification of more vault properties: AlwaysAskForOldPassword, ContentType, Owners, SortPriority, VaultSecurityLevel, and Visibility

Fixed an issue where Get-RDMOAuthToken would throw a type initializer exception for System.Text.Json.JsonSerializer

Fixed DPS cmdlets failing on Linux with "Microsoft.Data.SqlClient is not supported on this platform"

Fixed Export-RDMOptionFile -Datasources clearing datasource credentials from the current option file silently

Fixed an issue preventing connections to advanced data sources

Fixed an issue where the -DeobfuscateSensitives parameter of Export-HubEntriesForExport had no effect when exporting entries to CSV, causing passwords to remain encrypted

Breaking changes Removed support for Dropbox and Google Drive data sources. New-RDMDataSource no longer allows creating these types

Added Convert-DSGatewayKDCProxySettings to extract KDC proxy settings from a gateway

Added Enable-RDMTelemetry and Disable-RDMTelemetry cmdlets to control anonymous usage statistics collection in the PowerShell module

Added Get-DPSDatabaseVersion to retrieve the Devolutions Server database version

Added Get-DSLoginAttempt to retrieve login attempts

Added Get-RDMEntryPrivateKeyCertificateData cmdlet to retrieve embedded SSH certificate data as SecureString or plain text

Added Get-RDMEntryTags to retrieve an entry's tags

Added New-DSGatewayKDCProxySettings to create KDC proxy configuration objects

Added New-DSGatewaySecurity to create GatewaySecurity objects

Added Set-RDMEntryPrivateKeyCertificateData cmdlet to set embedded SSH certificate data and automatically configure the certificate type to Data

Added Set-RDMEntryTags to modify an entry's tags

Added Start-DSTrial cmdlet to activate a Devolutions Server trial license

Added -AsHandbook parameter to Get-RDMEntryDocumentation to return legacy PSHandbook format for backward compatibility

Added -Filter parameter to Get-RDMEntryDocumentation to search both title and content for backward compatibility

Added -NoEnumerate switch parameter to Invoke-RDMLoadFromInventorySession to optionally return results as a collection instead of individual objects

Added -PassphraseMaximumLength parameter to set a maximum length limit (0-100 characters) for generated passphrases in New-RDMRandomPassword

Added support for appending special characters to passphrase words in New-RDMRandomPassword to better meet password complexity requirements

Added support for using a raw database connection string in DPS cmdlets

Added warning when a user without a license connects to a SQL Server data source

Aliased redundant Session cmdlets to their equivalent Entry cmdlets (e.g., Get-RDMSession is now an alias of Get-RDMEntry)

Improved error messages when creating entry types that are not supported in certain vaults

Improved RDMEntryDocumentation cmdlets to provide clear error messages for unsupported data sources

Renamed -PassphraseLength parameter to -WordCount for clarity (the old parameter name still works as an alias) in New-RDMRandomPassword

Reworked telemetry collection in the PowerShell module to track anonymous usage statistics (cmdlet names, module version, data source type, and platform information)

Updated gateway cmdlets (New/Update for Gateway, VirtualGateway, and GatewayFarm) to accept the Security parameter

Updated New-DSGateway and Update-DSGateway to accept KDC proxy settings with the KdcProxySettings parameter

Fixed a null reference exception when using Set-RDMEntryDocumentation on a SQLite data source

Fixed an issue where multiple cmdlets incorrectly allowed the root entry to be provided

Fixed an issue where the Get-RDMEntry cmdlet would incorrectly return entries when the required license was not available

Fixed Get-DSEntry forcing users to provide a VaultID when -SearchAllVaults is specified

Fixed Get-RDMEntryPassword verifying unnecessary permissions

Fixed Invoke-RDMLoadFromInventorySession to process all sessions in an array instead of stopping after the first error

Fixed multiple cmdlets returning a "not found" error when provided with the root entry

Fixed New-RDMEntry with the Set parameter to not return a newly created entry if the save operation fails

Fixed PowerShell cmdlet validation to check entry subtypes against vault content type restrictions when creating new entries

Added cmdlets (Get-RDMSystemSettingsTags, Set-RDMSystemSettingsTags) for managing system tags at the data source level

Added ConvertTo-DSAccountLifecyclePolicyInfo to convert a provider's lifecycle policy to the user-friendly PSAccountLifecyclePolicyInfo format

Added Get-DSAccountLifecyclePolicy to retrieve account lifecycle policies

Added Get-DSPasswordPolicy to retrieve password policies

Added New-DSAccountLifecyclePolicyInfo to create a new account lifecycle policy object in the user-friendly PSAccountLifecyclePolicyInfo format

Added New-DSGatewayFarm to create new gateway farms

Added Set-DSEntryProperty cmdlet to modify an entry object's properties (including nested properties)

Added Update-DSGatewayFarm to update gateway farms

Added AccountLifecyclePolicy parameter to New-DSPamProvider and Update-DSPamProvider to set a PAM provider's account lifecycle policy

Added Application parameter to New-DSPamVault to set a PAM vault's permitted application identities

Added Description and WaitTime parameters to New-RDMPlaylistShared

Added DomainController parameter to New-DSPamProvider and Update-DSPamProvider, enabling users to set a PAM provider's domain controller

Added Gateway parameter to New-DSPamProvider and Update-DSPamProvider, enabling users to set a PAM provider's gateway

Added Name, Description, and WaitTime parameters to Set-RDMPlaylistLocal and Set-RDMPlaylistShared

Added validation to ensure WaitTime parameter cannot be set below 200 milliseconds to align with Devolutions Remote Desktop Manager application limits

Inverted position of Connections and Description parameters in NewRDMPlaylistLocal

Added Get-DSDeletedUser and Get-RDMDeletedUser cmdlets to retrieve paginated list of deleted users (Devolutions Server only)

Added Get-RDMForbiddenPassword to retrieve forbidden passwords

Added Remove-DSDeletedUser and Remove-RDMDeletedUser cmdlets to permanently remove deleted users (Devolutions Server only)

Added Remove-RDMPlaylistLocal to remove local playlists

Added Remove-RDMPlaylistShared to remove shared playlists

Added Restore-DSDeletedUser and Restore-RDMDeletedUser cmdlets to restore deleted users (Devolutions Server only)

Added Set-RDMForbiddenPassword to update the forbidden password list

Fixed "Not Implemented" exception when moving entries to an existing folder - users are now prompted to merge the folders or create copies

Fixed checkout validation logic that was incorrectly blocking all move operations with a "checkout active" error, even when no entries were checked out by other users

Fixed Open-RDMSession causing an unexpected guid format in Remote Desktop Manager

Added New-RDMStandalonePassword for password generation usable in all workflows (RDM, DS, Hub)

Fixed Get-RDMTemplate incorrectly filtering certain edge cases

Fixed stack overflow error occurring in specific scenarios when writing to the host

Added Backup-DPSConfigurationFile and Backup-DPSInstallationFiles to backup DVLS files before updates

Added Get-DPSProduct to download the latest DVLS version for Linux or Windows

Added Restore-DPSConfigurationFiles, Restore-DPSCustomFolders, and Restore-DPSAnomalyDetectionFolder to restore DVLS files after updates

Added the IsDefault property to PowerShell data source objects, allowing users to easily identify which data source is configured as the default when using cmdlets like Get-RDMDataSource

Export-RDMSession now adds the extension of the chosen format automatically

Fixed bug where Update-DSPamFolder would create a virtual folder on name update

Fixed issue where cmdlets used in a Linux context could not find the appsettings.json file due to case sensitivity

Added ApiKey parameter in New-DSSession to connect with a user's api key

Added Export-RDMCustomVariable to export custom variables

Added Get-DSEntryDocumentation to retrieve an entry's documentation

Added Get-RDMPasswordPolicy to fetch password policy by name

Added Get-RDMUserOfRole to retrieve the users of a group

Added Import-RDMCustomVariable to import custom variables

Added New-DSEntryDocumentation to create a documentation page

Added PasswordPolicy parameter to Set-RDMEntryPassword to generate password from policy

Added Remove-DSEntryDocumentation to delete a documentation page

Added support for attachments in Send-RDMMessageByShareableLink and Send-RDMMessageByEmail cmdlets

Added support for custom dictionaries in New-RDMRandomPassword passphrase mode generation

Added support for Netbox, Custom PowerShell, and JAMF synchronizers

Added Update-DSEntryDocumentation to update a documentation page

Deprecated Devolutions Onlive Drive is no longer supported and cannot be created in New-RDMDataSource

Added automatic checkout to Set-RDMEntry cmdlets

Added source code, json, configuration, dockerfile, and Terraform document support

Added the parameter TicketNumber to Invoke-DSPamCheckout to populate the checkout request with the specified value

Added warnings to deprecated parameters in Import-DSPamScanResult

Data source types FTP, SFTP, S3 and Hub Personal Legacy have been removed from the application

Improve the parameter AllowedApplicationsList in Set-DSVaultApplication to accept either the application ID or the name

Make VaultID parameter mandatory in Get-DSEntries when using the FolderID parameter instead of using a default value

Set-RDMDataSource now triggers a forced refresh of data sources in the active Remote Desktop Manager instance

Added handling for more group name edge cases in Set-DSEntityPermissions

Fix Get-DSEntries returning a null reference when trying to access to a forbidden vault

Fixed Get-RDMRole -Name parameter validation failing for newly created roles

Fixed New-DSPamFolder creating folders with obsolete type

Add Get-RDMAddOnId to obtain the connection subtype for an add-on entry

Enable modification of the HashiCorpVaultToken property by adding a setter

Fixed missing sqlite3secure.dll dependency on a clean Windows installation

Fixed missing System.IO.Pipelines dll in an Enter-PSSession context

Fixed missing types when creating entries

Clarification on modifiable properties within the PowerShellSetting property in PSScriptConfiguration object

Fixed changing the TargetResources property always returning an error in the PSScriptConfiguration object

Fixed Get-DSEntry ignoring VaultID when the All parameter is used

Fixed Get-DSEntry not returning subentries when the All parameter is used

Fixed missing default status when creating entries with RDM cmdlets

Fixed wrong property value on an AnyIdentity provider in PSScriptConfiguration object

Improve error message when sqlite3secure.dll is missing a dependency on a clean Windows install

Improve error message when unable to fetch public server information with New-DSSession

Fixed an issue where using Get-RDMEntry -VaultMode Global in PowerShell caused a crash on unsupported data sources such as SQLite

Fixed hub application not being allowed to import vault in existing vaults with Import-RDMRepository cmdlet

Fixed hub application requiring the "Manage Vault" right when using Import-RDMRepository cmdlet

Create a new PSPamPropScriptConfiguration object, which can be utilized to define the parameters for a PAM script configuration, with New-DSScriptConfiguration

Retrieve a PAM AnyIdentity template by its name using Get-DSPamProviderTemplate

Retrieve a specific PAM script configuration by its ID using Get-DSScriptConfiguration

Retrieve a specific PAM script configuration template by ID using Get-DSScriptTemplate

Return a summary of all PAM script configuration templates using Get-DSScriptTemplateSummary

Return a summary of all PAM script configurations using Get-DSScriptConfigurationSummary

Save a specified PAM script configuration using Set-DSScriptConfiguration

Enable Hub application identities to utilize the Import-RDMVault cmdlet with the appropriate permissions

Fixed all license assignments that are missing when the user is not an administrator when using Get-RDMLicense

Fixed DS cmdlets failing with the WebApiRedirect status

Fixed New-RDMEntry cmdlet ignoring the VaultMode parameter

Add a new cmdlet New-RDMConnectionPermission to instantiate the ConnectionPermission object

Improve error message for denied scripting access

Fix Active Directory filters not applied when using Open-RDMSyncSession

Fix New-RDMDataSource incorrectly loading the default data source when invoked as the first cmdlet

Add Get-RDMEntryFromSmartFolder cmdlet to retrieve entries from smart folder search results

Add Get-RDMUserRoles cmdlet to retrieve all groups associated with a specified user

Add VaultRoleOverride and CustomVaultAccess parameters to Update-DSGateway cmdlet to manage vault access in a gateway

Improve Get-RDMEntryOTPKey cmdlet to support all resolution modes instead of only the configured one

Fix Import-RDMEntry cmdlet to include attachments and documentation when the -Set parameter is used

Fix receiving prompt for shared vault password when accessing the user vault

Fix the non-functional Remove-DSUser cmdlet

Resolved issue with Get-DSPasswordsReport causing a deserialization error when an application identity is not utilized

Breaking changes Get-DSPamScanResult now returns a unified object across all result types, with certain properties either missing or renamed (upn => UserPrincipalName, FullName => Name) (HostID, DomainName, ADDomainID, AlreadyCreated, CanBeAdded are all removed)

Breaking changes Get-RDMEntryOTPKey requires an administrator or vault owner to use as it is required in RDM

Add Export-RDMX509Certificate cmdlet to export the certificate of an X509 certificate entry

Add Import-RDMX509Certificate cmdlet to import the certificate into an X509 certificate entry

Enable new permission to prevent modifications to session recording properties

Enable new permission to prevent modifications to VPN/Tunnel/Gateway properties

Add basic IIS support when creating a configuration with DPS cmdlets

Improve Get-RDMEntryOTPKey cmdlet to work with all entries with OTP directly configured instead of only OTP credentials

Support optional checkout mode for linked PAM account credentials

Resolve variables in the entry name in the confirmation message when unsealing the entry with Unprotect-RDMSealedEntry

Add 'Export-DPSEncryptionKeys' cmdlet to export an encryption key file from a Devolutions Server instance

Add 'Import-DPSEncryptionKeys' cmdlet to import an encryption key file into a Devolutions Server instance

Resolved connection issue with an application on a DVLS data source

Resolved issue related to data retrieval deserialization for users, roles, and entries with non-application users

Enhance Set-RDMCurrentRepository to apply the ID parameter before the initial load

Fixed folder created as a shortcut in XML data source

Fixed sql error occurring when calling Update-DPSDatabase

Integrate the New-RDMPamCheckouRequestInformation cmdlet to prefill a PAM checkout instead of using the default configuration

Reduce the default module PAM checkout duration from 2 hours to 1 hour

Fix null reference error when using Get-HubEntriesForExport

Fixed New-RDMSystemInformationReport failing to load a required resource

Fixed the permission Edit Assets being ignored

Add 'Get-DSOktaUser' and 'Import-DSOktaUser' cmdlets to enable the import of Okta users

Integrate 'Add-DSPlaylistEntry' to add connections to an existing playlist

Integrate 'New-DSPlaylistEntry' to establish a new playlist

Integrate 'Remove-DSPlaylistEntry' to remove connections from an existing playlist

'Get-RDMEntryOTP' and 'Set-RDMEntryOTP' now support OTP in password list by utilizing the new parameter 'PasswordListItemID' or receiving prompt

Enable setting the client secret of an Azure Key Vault entry directly from the PSConnection

Enable the property 'Key' in Set-RDMEntryOTP to accept either a string or a secure string

Include 'Name' property to the PSPasswordListItem object

Parameter 'Connections' added to 'New-RDMPlaylistShared' and 'Set-RDMPlaylistShared' cmdlets to facilitate adding connections in a playlist

Transform 'Get-RDMSessionOTP', 'Set-RDMSessionOTP', 'Get-RDMPrivateSessionOTP', and 'Set-RDMPrivateSessionOTP' as aliases to the corresponding 'RDMEntryOTP' cmdlet

Breaking changes Update the minimum PowerShell version requirement to 7.5.0

Add cmdlet "Unlock-RDMApplication" to access the application when it is password-protected

Include a notification in Get-DSServerLicense indicating that from DVLS version 2025.1.0.0 onwards, a server license is no longer necessary

Include a notification in Register-DSServerLicense indicating that from DVLS version 2025.1.0.0 onwards, a server license is no longer necessary

The parameter "PamAccount" of Update-DSPamAccount now accepts the PAM account ID

Fixed "Open-RDMSyncSession" failing when using the option "Use LDAP over SSL"

Fixed bypass of password-protected vault

Fixed missing file name in error message from Import-RDMSession

Fixed Set-RDMSession and Set-RDMEntry returning the error 'Connection has an invalid group specified' when saving multiple entries in Devolutions Server data source

Fixed SQL permission issue when non-admin user assigned to a group with admin rights

Resolved the issue with password resolution in Devolutions Server and Hub data sources for Get-RDMSessionPassword and Get-RDMEntryPassword

Fixed auto-approved PAM checkout object that was not recognized by Invoke-DSPamCheckin

Resolved issue with Remove-DSPamVault not accepting the object obtained when fetching all PAM vaults

Rework required permissions with Invoke-RDMParentSession to allow usage by non-administrators

Rework required permissions with Invoke-RDMUnparentSession to allow usage by non-administrators

Add the functionality to export entry templates using "Export-RDMTemplate"

Add the functionality to import entry templates using "Import-RDMTemplate"

Include the cmdlet "Get-DSServerLicense" to retrieve server license information

Include the cmdlet "Get-DSServerLicense" to retrieve server license information

Reintroduce the cmdlet "Get-HubVaultForExport" that has been missing since version 2024.3.4

Fixed the "Get-DSLicense" cmdlet so that it no longer returns licenses with missing maximum user capacity

Fixed the "Update-RDMEntries" cmdlet not refreshing the cache on a DVLS data source

Add "Get-DSEntityResolvedPermissions" cmdlet to allow an administrator to obtain the resolved permissions

Fix the client secret of Azure Service Principal not returned by Get-RDMEntryPassword

Resolved issue with the New-RDMSystemInformationReport cmdlet to ensure proper credential resolution

Enhance the documentation for the Set-DSEntityPermission cmdlet

Include the "IncludeDomainName" parameter in Get-DSPamAccount to retrieve the domain from the provider

Prevent Get-RDMDataSource from returning an error when searching with a non-existing name

CVE-2024-11621 Fixed missing certificate validation for non-windows platforms

Incorporate ID parameter in New-DSEntityPermission to bypass verification of user, user group, and application existence

Fix incorrect group assignment when creating entries from the template group

Fix issue where a nameless folder was created from the template group when using the New-RDMSession and New-RDMEntry cmdlets

Fix issue where only the first entry was saved when using the SetSession switch for entries created from the template group

Fix newly created domain PAM account incorrectly linked due to the missing SID

Resolve missing non-inherited view permission when using Get-DSPamAccountSecurity

Eliminate the requirement to specify criteria when using Search-DSEntry

Enhance the "AsBasicInformation" switch of Get-DSPamAccount to include Description and Group details

Include the "AccountID" parameter in Get-DSPamCheckout to retrieve the active checkout of a specific PAM account

Include the "AddActiveCheckoutID" parameter in Get-DSPamAccount to obtain the ID of the active checkout for each account

Add Export-RDMDataSource cmdlet to export data source configuration to an .rdd file

Fix issue where Import-DSPamScanResult was creating duplicate entries for already managed accounts

Fix system information report not being generated when fetching antivirus information on Windows Server

Add a post-refresh check to handle cases where the initial attempt to find the folder fails when creating an entry

Fix null reference exception when exporting entries using the IncludeAttachments or IncludeDocumentation switches

Fix Set-DSEntityPermission cmdlet not found error

Add Devolutions Send cmdlets

Fix error in Get-DSPamAccount when the VaultID parameter was omitted

Fix the PowerShell session hanging issue when calling exit

Fix wrong conversion occuring the GPOs loading

Fix issue where 'Import-DSPamScanResult' triggered an error instead of returning the imported PAM connections

Fix issue where connecting as an application to a Hub data source returned a null reference error

Fix issue where modifications to IsAllowedOffline were being ignored for vaults in Devolutions Server data sources

Fix issue with invalid data in the encryption file generated by 'New-DPSEncryptConfiguration'

Adapt DSPam cmdlets to new PAM connection type

Add a login prompt when going offline on a DVLS data source

Improve the cmdlet 'Copy-RDMSession' to support copying the document stored in the database for document entries