Bug fixes 2022.2

This chapter contains information about bugs fixed with DriveLock version 2022.2. Our External Issue numbers (EI) serve as references, where applicable.

Reference

Application Control

Certificate checking for predictive whitelisting has been improved.

Temporary unlocking is now terminated correctly.

 

Reference

BitLocker Management / BitLocker To Go

Fixed an error when importing BitLocker management certificates into a policy.

EI-2203

When taking over existing BitLocker environments, it was possible that each time a policy update occurred, the BitLocker password was re-quested and re-set. This behavior was associated with the number of recovery keys that were entered for the system drive that was being being taken over.

The recovery key upload could fail if the policy update was not performed correctly or incompletely before.

 

Reference

Defender Management

When merging policies, string lists in the Defender configuration sometimes did not correctly overwrite string lists from other policies. If this behavior was desired, you must now set the "Append values" option in the string list.

EI-2137

Fixed a bug that prevents Windows Defender from registering under certain circumstances

 

Reference

Device Control

EI-2028

Some external drives experienced a timing issue that resulted in a Blue Screen of Death (BSOD) error.

EI-2038

Fixed an error that caused device collections to stop working under certain circumstances in conjunction with old db3 CSP policies.

EI-1846

Bluetooth devices were not available with the Marvell AVASTAR wireless chip if the WiFi device was disabled during boot. The error is fixed after reboot.

 

Reference

Disk Protection

EI-2098

Fixed an error that the datAshur stick triggered at system startup.

EI-2179

Fixed a BSOD (Blue Screen of Death) error that occurred when connecting an HP OfficeJet 200 printer.

 

Reference

DriveLock Agent

The status of the hard disk self-monitoring (S.M.A.R.T.) is now read out correctly again.

EI-2201

Fixed an error where the agent crashed when an extremely long serial number was present in a drive collection.

EI-1995

During an update, the Windows Installer may not have replaced all DriveLock files, resulting in an inconsistent installation.

EI-2188

For file access events, the process was truncated at 128 characters.

EI-2029

Fixed an error where the agent crashed when there were multiple remote connections.

The character combination "\n" (e.g. C:\windows\system32\notepad.exe) is now displayed correctly in message texts instead of replacing it with a line break.

For some remote control events, the agent now sends error information.

EI-2159

The agent no longer crashes when the registration of the agent fails.

EI-2122

In some cases, the DriveLock service took a long time to start when no user was logged in.

EI-2020

Changes to ports in the Windows Firewall policy are now transmitted to the agent computer.

EI-2190

Fixed an error that occurred in the DES certificate validation process that prevented certificate revocation list information from being retrieved.

 

Reference

DriveLock Enterprise Service (DES)

EI-2083

The DotNetZip library has been updated to version 1.16.0 (CVE-2018-1002205).

 

Reference

DriveLock Management Console (DMC)

The Device Scanner Database tab is now only displayed if there is matching content.

Note: For new installations of DriveLock, this tab no longer exists.

EI-2048

When creating a new SB group, an endless progress bar came up, if there were no DriveLock groups in the environment at all.

EI-2126

In the RSOP, in "Policies applied", the DMC tried to open the Centrally Stored Policies in the GPO Editor instead of the Policy Editor, resulting in an error message.

EI-2111

The definition of dynamic groups can no longer be edited in the DMC starting with version 22.1. In spite of this, the definitions were deleted when you viewed the group properties, which made the group unusable.

EI-2084

The number of conditional setting nodes per node was limited to 15. However, it was still possible to add as many as you wanted per node in the DMC, but after that the policy could not be opened in the DMC anymore - it crashed. The limit has now been increased to 50, you cannot add more than 50, and if you open a policy (unlikely) that contains more anyway, it will no longer crash.

EI-2054

After updating to 21.2 or newer, it was not possible to customize the agent configuration via DMC for agents older than 21.2.

 

 

 

Reference

DriveLock Operations Center (DOC)

EI-1980

Requesting the agent's local whitelist in the DMC now also works if the process takes up to 2 minutes. Previously, an error was displayed after 15 seconds.

If you modify a widget after creating it or create a custom widget, some properties that are no longer supported will be displayed as obsolete when you refresh them.

EI-2073

Entering an incorrect password in the DOC login screen no longer results in multiple incorrect login attempts being registered in the AD. This could lead to a temporary account suspension.

EI-2030

Fixed an error when displaying the application control license for agents older than 21.2.

When creating a filter for the Windows/DriveLock version for dynamic groups in the DOC, you are now also given a drop-down list with predefined values.

When grouping by text or event ID, the ID or text displayed for third-party events sometimes did not match that of the event.

The drive list did not show any drives when the policy was opened with DOC Companion.

EI-1525

A temporary unlocking by means of challenge/response via the DOC with weak codes did not show any error messages if the password or response code was incorrect.

 

Reference

DriveLock pre-boot authentication

EI-2118

Information about the fact that a PBA that had previously been deactivated was active again was displayed repeatedly.

Fixed the issue of not getting a Single Sign On the first time after updating the DriveLock PBA.

 

Reference

DriveLock tools

EI-1985

DriveLock Support Companion no longer crashes when collecting system information on Windows XP.

EI-1975

DOC Companion now supports wildcards for proxy bypass lists.

 

Reference

Encryption-2-Go

EI-2074

Drive rules in the DMC: If the forced encryption was activated and the dialog was closed without switching to the access rights tab, invalid values were stored for the rule.

 

Reference

Events

The user is now displayed in third-party events.

EI-2093

Some remote control events were missing parameters.

EI-1986

Event 443 now shows both the ID and the name of the components.

 

Reference

File Protection

File Protection decryption did not always work on network shares when the folder was mounted and the encrypted folder was directly in the share.

EI-2086

In the DMC, you could not import an AD user from another trusted domain (in DriveLock File Protection / Users and Groups).

 

  Licensing

EI-2018

An incorrect subscription end date was displayed when no Device Control license was present.

EI-2046

If you opened an old policy after an update and cancelled the License Activation Wizard, the license was removed from the policy. This sometimes resulted in unexpected system behavior. Now, a warning message is displayed when the wizard is canceled.

 

Reference

Logging

EI-2078

The settings for very detailed logging were not removed correctly.

EI-2049

Logging in the DMC is now enabled during installation.

 

Reference

System Management

EI-2021

After setting the remote ports of a firewall rule, they were correctly saved in the policy. However, after reopening the rule's properties dialog, it looked as if the ports had not been saved.

EI-1986

The components "Power Management" and "Local Users and Groups" can now be loaded under Windows XP and do not produce events with ID 443.

 

Reference

Terminal Services

EI-1497

Portable media devices (e.g. cameras, media players) are now managed in terminal service environments when connected via a terminal session (in ICA or RDP protocol).

EI-1915

It was not possible to mount encrypted containers under the same drive letter in two different Citrix terminal sessions when USB sticks were connected to the generic channel.