Release notes v14.0

This topic includes release notes for Privilege Cloud v14.0 November 2023.

Released components

Component

Version

Internal Build Number

Privilege Cloud Connector

14.0

14.0.0.643

CPM

14.0

14.0.0.6

PSM

14.0

14.0.0.9

GPO hardening

2.2.0

 

PSM for SSH

14.0

RHEL 64-bit v13.2.0.15

RHEL-8 64-bit v13.2.0.15

Platform end of support

CyberArk may choose not to provide maintenance and support services for CyberArk Privilege Cloud for platforms and systems that have reached their formal End-of-Life date, as published by their respective vendors.

Component

Version

Description

Extensions

14.0

In accordance with our System Requirements, we will stop supporting the Microsoft SQL Server Management Studio (SSMS) platform versions 2008, 2012, 2016, 2017 and 2018 which have reached their formal End-of-Life date.

Privilege Cloud Portal

14.0

Get logged on user details API

Deprecated: https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/WebServices/PIMServices.svc/User.

No alterenative is available.

Platform end of support forenotice

CyberArk provides forenotice of CyberArk Privilege Cloud services that will no longer be supported in the next version.

Component

Version

Description

PSM

Next version

As of the next release (v14.1), TOAD connection component will be updated and will be based on Oracle Client 19 - 64 bits.

From the next version (v14.1), PSM Upgrade will install 64 bits (if not installed already on the machine) as part of the installation. As a result, the legacy TOAD 32-bit version will not be supported after the upgrade. You will need to install a TOAD 64-bit version, which will be supported

Privilege Cloud Portal

Next version

As part of CyberArk efforts to reduce vulnerabilities and security breaches, the following webservices Gen 1 APIs will be deprecated in the next version. The legacy APIs should be replaced with Gen 2 APIs:

  • Get account activity

    Deprecated: https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/WebServices/PIMServices.svc/Accounts/{AccountID}/Activities

    Replace with:

    https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/API/Accounts/<AccountID>/Activities

  • Change credentials immediately

    Deprecated: https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/WebServices/PIMServices.svc/Accounts/{AccountID}/ChangeCredentials

    Replace with:

    https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/API/Accounts/<AccountID>/Change
  • Server > Verify.

    Deprecated Gen 1 API: https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/WebServices/PIMServices.svc/Verify /PIMServices.svc/Verify/

    Replace with:

    Gen 2 API: https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/API/Verify/

  • Server > Logo.

    Deprecated Gen 1 API: https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/WebServices/PIMServices.svc/Logo? type={ImageType}/

    No replacement is available.

  • Add Pending Account

    Deprecated: https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/WebServices/PIMServices.svc/PendingAccounts

    Replace with:

    https://<subdomain>.privilegecloud.cyberark.com/PasswordVault/API/DiscoveredAccounts/

Privilege Cloud Portal

Next version

Privilege Cloud Portal features.

As part of the efforts for deprecating code from Privilege Cloud Portal code to reduce vulnerabilities and security breaches, here are the features which will be deprecated in the next version:

  • Files. If you have a legacy solution where you have saved files in your environment, Cyberark recommends the following steps to move all files to an alternative solution according to one of the following options:

  • Business users

  • Classic UI request screens. As an alternative, use the modern user interface:

    Accounts feed > Incoming requests and Accounts feed > My requests

    and

    Accounts feed > Incoming requests and Accounts feed > Incoming requests

Extensions

Next version

In accordance with our System Requirements, we will stop supporting the Microsoft SQL Server Management Studio (SSMS) platforms versions 2008, 2012, 2016, 2017 and 2018 which have reached their formal End-of-Life date.

PSM for SSH

Future version

PLINK (PuTTY link) support in PSM for SSH will be deprecated by end of year 2024.

System requirement changes

Review the following system requirement changes before installing or upgrading the components specified in Installation and upgrade notes.

Component

Description

Extensions

The CPM supports management of Cisco router for regular, enable, and terminal privileged accounts.

The platform is now supported also for Cisco routers that support IOS 15.X through SSH.

Download the latest Cisco Router Platform from the CyberArk Marketplace.

Extensions

The following platforms now support privilege accounts management on Fedora version 38:

Download the latest platform from the CyberArk Marketplace.

Extensions

The VMWare ESX/i via API and VMWare ESX/i via CLI platforms support remote account management for VMWare ESX/i accounts. These platforms now support ESXi v8 as well.

The ESXi plugin manages VMWare ESX/i privileged accounts via API or CLI.This platform now supports ESXi v8 as well.

For details, see ESXi plugin.

Extensions

SQL Server Management Studio.

The SQL Server Management Studio connection components create a secure session to Microsoft SQL Server Management Studio (SSMS) using either Windows accounts or Database accounts.

These connection components are now supported also for SQL Server Management Studio (SSMS) v19.1.

Download the latest connection components from the CyberArk Marketplace:

Extensions

Amazon Web Services (AWS) Access Keys Password Management Platform.

The Amazon Web Services Access keys Platform enables the CPM to rotate AWS Access Keys which are used by applications to connect to AWS API.

We have updated the AWS SDK third-party component that is used by the Amazon Web Services (AWS) Access Keys Platform to enhance security and apply technological improvements.

Download the latest Amazon Web Services (AWS) Access Keys platform from the CyberArk Marketplace.

The CPM supports the management of Amazon Web Services for Access Keys and IAM Accounts with AWS SDK v3.

Extensions

Amazon Web Services (AWS) Password Management Platform.

The Amazon Web Services (AWS) Platform enables the CPM to rotate the Amazon Web Services (AWS) IAM Users.

We have updated the AWS SDK third-party component that is used by the Amazon Web Services (AWS) Platform to enhance security and apply technological improvements.

Download the latest Amazon Web Services (AWS) platform from the CyberArk Marketplace

Extensions

Microsoft SQL Server accounts management.

The Microsoft SQL Server platform manages Microsoft SQL Server database privileged accounts using ODBC Driver.

We now support ODBC driver v18.3 and v17.10 in our newly added platforms.

Download the newly added platforms from our Marketplace:

Privilege Cloud Portal ServiceNow Ticketing System

Integrating privileged accounts workflow with ServiceNow Incident Management and Change Management is now supported for Vancouver version.

Behavior change notes

Component

Area

Description

PSM

 

Upgrade

The PSM upgrade process was enhanced to automate two manual steps that were previously required:

  1. Logs archiving -PSM logs will be zipped automatically and will be placed on a dedicated archive folder. The manual step was removed from the upgrade process.

  2. Previously, in case of a change in the default or domain PSMConnect or PSMAdminConnct user name, it was requested to replace the names in the PSMConfigureAppLocker.ps1 and PSMHardning.ps1 scripts.

From v14 onward, this step is automated and removed from the required upgrade steps.

Known issues

You can view the most updated select known issues online in our community.

To make your search easier, you can filter by product, component, status, and affected version. If you haven’t yet registered with the community, log in for self-registration using the relevant link: