Secure GxP

Release Notes

Releases

Secure GxP - Release Notes

Overview

Secure GxP 4.1.0 delivers targeted usability improvements, interface cleanup, and a major framework upgrade. This release introduces contextual SMTP configuration documentation to streamline server setup, removes the redundant Policy Commands section from the Machine Details Command Center to reduce interface clutter, and upgrades the Web Portal to .NET 10 for enhanced security, stability, and long-term platform support.

⚠️ Important: This release contains a breaking change. The .NET 10 Hosting Bundle must be installed on the server prior to deployment.

Improvements

⚙️ SGXP-387: SMTP Configuration Help Button & Documentation Added
Added a Help (question mark) button in the Configuration → SMTP Configuration card. Clicking the button redirects users to the SMTP Configuration section in the Help Center.
Also added SMTP Configuration instructions in the Help page, providing guidance for configuring the SMTP server address, port, SSL/TLS settings, authentication, and sending test emails.

Removed

❌ SGXP-414: Remove Policy Command Section from Command Center in Machine Details Popup
Removed the Policy Commands section and Sync Policies button from Machine Manager → In-Network Machine → Details popup → Command Center.
The Sync Policies command was never used because whenever a policy is applied, removed, updated, or when a machine is suspended or activated, the policy sync command is sent and executed in real-time on the machine.
The Command Center now includes only Machine Commands: Restart, Log Off, and Shutdown.

Breaking Changes

⚙️ SGXP-403: Secure GxP Web Portal Framework Upgrade to .NET 10
The Secure GxP Web Portal has been upgraded from .NET 9 to .NET 10 to improve overall security, stability, and system performance.
As part of this upgrade, the application framework and supporting libraries were updated, and the system was fully validated to ensure that all existing features continue to function correctly.
Note:
This version requires the .NET 10 Hosting Bundle to be installed on the server before deployment.
If the required runtime is not installed, the Secure GxP Web Portal will not start.

Secure GxP - Release Notes

Overview

Secure GxP 4.0.0 strengthens audit compliance, CRN-based governance, and policy management while improving system stability and performance.

This release introduces Machine Group audit logs, configurable CRN Tracking with mandatory enforcement, and CRN-based controlled Excel export. Policy handling has been refined with clear System-wide vs User-specific scope identification.

Key improvements include enhanced license enforcement, timezone accuracy fixes, standardized backup configuration, UI refinements, and performance optimizations.

⚠️ This version also includes audit logging optimization (Breaking Change), improving how policy activities are recorded for Machines and Machine Groups while maintaining full compliance traceability.

New Features

✅ SGXP-339: Policy Scope Refinement & System-Wide Identification
Previously, all policies were System-wide. This has been refined so only four policies remain System-wide, while all other policies are now User-specific.
A “System-Wide” badge is displayed on the Apply Policies (Machine/Group) page to clearly indicate system-wide policies.
✅ SGXP-272: Machine Group Audit Logs Implemented
Introduced automatic, value-based audit logging for Machine Groups to ensure a complete and accurate change history.
- Audit logs are created only when actual values change (no redundant or no-change entries).
- Tracks key events including Machine Group creation and modification, associated machine changes, and policy add / remove / change operations.
- Multiple related changes within a single operation generate one consolidated audit entry.
- Audit history is displayed on the Machine Group Details page in a dedicated card with a server-side paginated table, sorted by latest activity.
- Each audit entry records Event, Performed By, Timestamp, and Details (when available) to support full traceability and compliance.
✅ SGXP-98: Enable CRN Tracking Configuration & Audit Enforcement
Introduced a configurable Enable CRN Tracking option in Application Configuration to control CRN-based audit logging.
When enabled, CRN and Comment are mandatory for defined Machine, Machine Group, and Policy actions and are enforced via a blocking popup.
Audit Logs now conditionally support CRN filtering and CRN column visibility, with no regression in existing activity logging.
✅ SGXP-334: Bulk Machine Import UI Standardization & CRN Enforcement
Updated the Bulk Machine Import modal to align with the standardized import design used across other modules, including progress bar and structured status messaging.
When CRN Tracking is enabled, CRN and Comment fields are mandatory before saving. Frontend and backend validations are enforced, and CRN details are logged for audit traceability.
✅ SGXP-335: Enable Excel Export for Audit Logs Based on CRN
Added a controlled Excel export capability to the Audit Logs page, available only when CRN Tracking is enabled in Application Configuration.
- The Export option is conditionally enabled based on the EnableCRNTracking configuration setting.
- The Export button is hidden by default and becomes visible only after a valid CRN is entered and the Apply filter action is performed.
- Clicking Export displays a SweetAlert confirmation dialog clearly indicating the CRN for which audit logs will be exported, ensuring transparency and traceability.
- The exported Excel file includes only audit log records associated with the specified CRN.
- Any additional applied filters (Date Range, Event Type, Machine/Group, User) are fully respected during export.
- The Excel export contains only the following columns, in the specified order:
  - Event Type
  - Machine / Group
  - User
  - Timestamp
  - CRN

Improvements

⚙️ SGXP-280: Add "SendDeviationEmailTo" Multi-Select Dropdown in Application Configuration & Send Policy Deviation Emails
Enhanced the Configuration page, specifically the Application Configuration section, to allow selecting multiple users to receive policy deviation emails.
- Added a multi-select dropdown SendDeviationEmailTo.
- Validation ensures emails are not null, properly formatted, and unique.
- Selected emails are saved on add/update of application configuration.
- Policy deviations now trigger email notifications to all configured recipients.
- Emails include deviation details, rectification guide, and portal links.
- A reusable HTML email template highlights Critical and Important deviations for clear visibility.
⚙️ SGXP-192: SweetAlert Icons Removed
Default icons (success, warning, error, info) were removed from all SweetAlert popups to reduce UI clutter and improve clarity. All alerts now display text-only layouts with no visual or functional regressions.
⚙️ SGXP-314: Backup Frequency Helper Message Clarification
Improved the Backup Frequency helper message on the Configuration page to clearly explain backup behavior.
The UI now indicates that Daily backups perform a Full database backup on the first run followed by Incremental backups, while Weekly and Monthly schedules always perform Full database backups, helping administrators better understand backup execution without any backend changes.
⚙️ SGXP-337: Add User Filter on Audit Logs Page
Enhanced the Audit Logs page by adding a User filter to improve audit traceability and investigation efficiency.
Users can now filter audit logs by specific users.
⚙️ SGXP-336: Reset Filter Added to Audit Logs Page
Added a Reset button on the Audit Logs page to clear all applied filters (Date Range, Event Type, Machine/Group, User, CRN) and reload all audit log records without page refresh.
⚙️ SGXP-359: License Expired Alert Banner Added
Enhanced user awareness by displaying a prominent red license-expired alert banner on the Machine Manager and Registry Policies → Enforce Policies pages.
The alert clearly shows the license expiry date and informs users about disabled machine operations and policy enforcement actions, ensuring better clarity when features are restricted.
⚙️ SGXP-364: OS Support Updated for Shutdown Control Policy
Updated the supported operating systems for “Remove Shut Down, Restart, Sleep, and Hibernate” registry policy from ALL OS to Windows 10 and Windows 11, ensuring accurate OS enforcement.
⚙️ SGXP-386: Subscription Page Download Section Redesign & License Copy Enhancement
Redesigned the Subscription → Download section to simplify installer distribution and improve usability.
- Replaced OS-specific agent downloads with a single unified Agent Installer supporting Windows 7, 8, 10, and 11.
- Added a dedicated Auto Updater ZIP with installation guidance for server updates.
- Introduced a Windows 7 Prerequisites ZIP with a “Windows 7 Only” badge, including:
  - Platform Update (KB2670838)
  - Security Update (KB2813430)
  - Microsoft .NET Framework 4.6.2
- Implemented modal-based patch and software detail views with accordion support for affected product information.
- Added a License Copy button in the Subscription Information card with instant clipboard copy and confirmation message.
- Improved UI consistency, spacing, and responsiveness while removing legacy OS-specific download tiles.
⚙️ SGXP-394: Notifications Page Enhancement
Improved the Notifications page by adding a “Show Agent Notifications” toggle, keeping Agent Notifications hidden by default while allowing users to view them when enabled.
Added a new HostName column to clearly display the associated machine for Policy Deviations, Machine Suspended events, machine-specific Report Generated notifications, and Agent Notifications.
System-level notifications (e.g., Backup Completed) display blank when no machine is associated. Search, sorting, and pagination remain fully supported.
⚙️ SGXP-405: Refactor – Remove Unused Components & Optimize Performance
Refactored the system by removing unused components and eliminating unnecessary database calls, resulting in improved performance and a cleaner overall architecture.
⚙️ SGXP-412: Default Backup Path Standardized & Editing Disabled
Set the Backup Path in Configuration → Backup Configuration to the default value C:\inetpub\wwwroot\backup and made the field read-only. This prevents misconfiguration due to manual changes.

Removed

🗑️ SGXP-364: “Disable Power Button” Registry Policy Removed
Removed the obsolete “Disable Power Button” registry policy from the system. The policy is no longer visible, assignable, or enforced.

Bug Fixes

🐞 SGXP-308: UserManager Page Access Restriction Fixed
Resolved an issue where the UserManager page was accessible before completing the Configuration Setup, leading to runtime exceptions.
Access control has been corrected so that the UserManager page is now only accessible to SuperAdmin and VendorAdmin users, and only after Configuration Setup is completed. Unauthorized users are now properly restricted or redirected.
🐞 SGXP-315: Suspend Action Visibility Fixed in Machine Manager
Fixed an issue where the Suspend action was visible for all machines regardless of state.
The Suspend option is now displayed only when a machine is in Active state (policies applied), preventing invalid actions for Ready, Pending Agent, state machines.
🐞 SGXP-316: Export Policies for Suspended Out-Network Machines Fixed
Fixed an issue where policies could not be exported for suspended Out-Network machines.
- Previously, when individual machine policies were applied to an Out-Network machine and the machine was suspended, it was no longer visible under Enforce Policies → Individual Machine.
- Since only Ready or Active machines were listed, the policies.enc export option was unavailable, blocking offline enforcement and policy rollback workflows.
Resolution:
- The system now automatically generates and downloads the policies.enc file when an Out-Network machine is suspended from the Machine Manager.
- This behavior works independently of machine state visibility on the Enforce Policies page.
- No impact to existing workflows for In-Network or Active machines.
🐞 SGXP-317: Import Compliance Details Action Visibility Fixed for Out-Network Machines
Fixed an inconsistency where the Import Compliance Details option was not visible for Out-Network machines in the Ready state after all policies were removed.
- Previously, the option was available only when the machine was in Active state.
- After policy removal, the machine transitioned to Ready, causing the action to disappear incorrectly.
Resolution:
- The Import Compliance Details option is now consistently available for Out-Network machines in both Ready and Active states.
- Ensures uninterrupted compliance import workflows and a consistent user experience.
- No regression for In-Network machines.
🐞 SGXP-269: Safe Machine–Group Association for Individually Policy-Applied Machines
Refined the Machine Group association workflow to safely handle machines with existing individual policies.
- Removed premature individual policy removal during machine–group association.
- Individual policies are now removed only after the group is saved and the machine is successfully associated.
- Prevents unintended policy loss when users exit or cancel without saving.
- Logic simplified and aligned with database table refactoring, with no backend action triggered at confirmation time.
🐞 SGXP-340: Logout Exception Before Initial Configuration Fixed
Fixed an issue where an exception occurred when users attempted to log out before completing the initial configuration. The logout flow now works correctly, allowing users to log out safely without any errors.
🐞 SGXP-346: Topbar License Expiry Day Count Fixed
Fixed an off-by-one issue in the topbar license expiry badge that caused the license to be marked as expired one day early.
- License day calculation is now accurate.
- Displays “License expires today” when 1 day remains.
- Shows “License expired” only after validity ends.
🐞 SGXP-353: Bulk Import UI Issue Fixed
Fixed an issue where the Bulk Import popup did not close when existing or duplicate machine records were detected, causing background tables to overlap and UI inconsistency. The popup now closes correctly and duplicate/existing machine details are displayed clearly.
🐞 SGXP-352: Server Applied Time Double Conversion Fixed
Fixed an issue where Server Applied Time was converted twice during group policy application and machine reactivation when the Application Configuration timezone differed from the Server/Local timezone.
The Audit Machine Policies Report now consistently displays the correct Server Applied time without any additional timezone conversion.
🐞 SGXP-358: License Expiry Enforcement Fixed
Fixed an issue where users could apply/export policies and suspend/activate machines even after license expiry.
Restricted actions are now blocked, and a SweetAlert warning is displayed showing the license expiry date and renewal requirement.
🐞 SGXP-373: Server Applied Time Incorrectly Updated When Adding Machine to Existing Group
Fixed an issue where the Server Applied Time was recalculated and updated when a machine was added to an existing Machine Group that already had policies applied.
Previously, the timestamp was refreshed based on the selected Application Timezone, even though no new policy enforcement action occurred.
The system now preserves the original policy application timestamp from the Machine Group, ensuring accurate audit history and compliance reporting.
🐞 SGXP-374: Server Applied Time Missing After Machine Removal from Group
Fixed an issue where Server Applied Time was not displayed correctly after removing a machine from a Machine Group. The timestamp now accurately reflects the machine removal time in the Audit Machine Policies Report.
🐞 SGXP-279: App Restriction Entries Persist After Agent Reinstallation Fixed
Fixed an issue on the Enforce Policies Page → Machine → App Restriction section where previously added App Restriction entries reappeared in an unselected state after agent reinstallation. App Restriction entries are now permanently deleted on agent uninstall and no longer appear unless explicitly re-added.
🐞 SGXP-380: Time Zone Configuration Synced with Server
Fixed an issue where users could manually change the Time Zone on the Configuration page, causing inconsistencies with server time.
The Time Zone field is now read-only and always syncs with the server time zone, ensuring accurate audit logs and reports.
🐞 SGXP-385: SMTP SSL Configuration & Email Delivery Stabilized
Fixed an issue where email sending failed due to incorrect SSL configuration handling, resulting in SMTP handshake errors under secure configurations.
- Corrected SSL mode handling using MailKit SecureSocketOptions.
- Improved TLS negotiation and authentication handling.
- Added structured logging for SMTP connection and delivery status.
- Ensured proper resource disposal for stable and reliable email delivery.
🐞 SGXP-404: PowerShell Agent Install Temporarily Disabled
The “Install Agent via PowerShell” button in Machine Manager → Generate Installation Key modal has been disabled as the feature is currently not working correctly in this release.
The button remains visible but inactive and does not trigger any action.
⚠️ This functionality will be re-enabled in the next release.
🐞 SGXP-407: Alternate Policy File Path Invalid Format Validation Removed (Configuration Page)
Removed the strict drive-letter format validation for Alternate Policy File Path in the Configuration Page → Agent Configuration section.
The field remains mandatory, but no longer enforces Windows-specific path format validation. Any non-empty value is now accepted without triggering an invalid path error.
🐞 SGXP-408: Alternate Policy File Path Standardized & Installation Mismatch Fixed
Fixed an issue where agent installation was using the Alternate Policy File Path value that was set just before the machine was added, instead of reflecting any later updates. This caused inconsistencies between the expected configuration and the registry entries on client machines.
The field has now been made read-only, and a standardized default path is enforced across the system to ensure consistent agent installation behavior and uniform registry values on all machines.

Performance Enhancements

⚡ SGXP-361: Bulk Timezone Fetch Optimization
Optimized bulk Create and Update operations by retrieving the Application Timezone once per operation, reducing redundant database calls and improving performance for large datasets. No functional impact.

Breaking Changes

⚙️ SGXP-313: Policy Audit Logging Optimized
Improved how policy application and removal activities are recorded for Machines and Machine Groups.
- Policy changes are now captured in a more compact and efficient audit format.
- Reduces unnecessary system overhead when applying or updating multiple policies at once.
- Audit history retrieval is faster and more reliable, especially for large environments.
- Ensures a clear, consolidated audit trail for policy add, remove, and change operations.
- No functional impact to existing workflows or user experience.
This enhancement improves overall system performance and simplifies long-term maintenance while maintaining full audit accuracy and compliance.

Secure GxP - Release Notes

Overview

SecureGxP 3.5.0 introduces significant improvements to audit traceability, policy management, and system configuration. This release refines policy scope identification by transitioning most policies from system-wide to user-specific assignments, implements comprehensive machine group audit logging with value-based tracking, and adds configurable CRN (Change Request Number) tracking with conditional Excel export capabilities for enhanced compliance workflows. Additionally, the release includes critical bug fixes for machine state handling, license expiry enforcement, and timezone conversion issues, along with performance optimizations that improve bulk operations and policy audit logging efficiency.

New Features

✅ SGXP-339: Policy Scope Refinement & System-Wide Identification
Previously, all policies were System-wide. This has been refined so only four policies remain System-wide, while all other policies are now User-specific.
A “System-Wide” badge is displayed on the Apply Policies (Machine/Group) page to clearly indicate system-wide policies.
✅ SGXP-272: Machine Group Audit Logs Implemented
Introduced automatic, value-based audit logging for Machine Groups to ensure a complete and accurate change history.
- Audit logs are created only when actual values change (no redundant or no-change entries).
- Tracks key events including Machine Group creation and modification, associated machine changes, and policy add / remove / change operations.
- Multiple related changes within a single operation generate one consolidated audit entry.
- Audit history is displayed on the Machine Group Details page in a dedicated card with a server-side paginated table, sorted by latest activity.
- Each audit entry records Event, Performed By, Timestamp, and Details (when available) to support full traceability and compliance.
✅ SGXP-98: Enable CRN Tracking Configuration & Audit Enforcement
Introduced a configurable Enable CRN Tracking option in Application Configuration to control CRN-based audit logging.
When enabled, CRN and Comment are mandatory for defined Machine, Machine Group, and Policy actions and are enforced via a blocking popup.
Audit Logs now conditionally support CRN filtering and CRN column visibility, with no regression in existing activity logging.
✅ SGXP-335: Enable Excel Export for Audit Logs Based on CRN
Added a controlled Excel export capability to the Audit Logs page, available only when CRN Tracking is enabled in Application Configuration.
- The Export option is conditionally enabled based on the EnableCRNTracking configuration setting.
- The Export button is hidden by default and becomes visible only after a valid CRN is entered and the Apply filter action is performed.
- Clicking Export displays a SweetAlert confirmation dialog clearly indicating the CRN for which audit logs will be exported, ensuring transparency and traceability.
- The exported Excel file includes only audit log records associated with the specified CRN.
- Any additional applied filters (Date Range, Event Type, Machine/Group, User) are fully respected during export.
- The Excel export contains only the following columns, in the specified order:
  - Event Type
  - Machine / Group
  - User
  - Timestamp
  - CRN

Improvements

⚙️ SGXP-280: Add "SendDeviationEmailTo" Multi-Select Dropdown in Application Configuration & Send Policy Deviation Emails
Enhanced the Configuration page, specifically the Application Configuration section, to allow selecting multiple users to receive policy deviation emails.
- Added a multi-select dropdown SendDeviationEmailTo.
- Validation ensures emails are not null, properly formatted, and unique.
- Selected emails are saved on add/update of application configuration.
- Policy deviations now trigger email notifications to all configured recipients.
- Emails include deviation details, rectification guide, and portal links.
- A reusable HTML email template highlights Critical and Important deviations for clear visibility.
⚙️ SGXP-192: SweetAlert Icons Removed
Default icons (success, warning, error, info) were removed from all SweetAlert popups to reduce UI clutter and improve clarity. All alerts now display text-only layouts with no visual or functional regressions.
⚙️ SGXP-314: Backup Frequency Helper Message Clarification
Improved the Backup Frequency helper message on the Configuration page to clearly explain backup behavior.
The UI now indicates that Daily backups perform a Full database backup on the first run followed by Incremental backups, while Weekly and Monthly schedules always perform Full database backups, helping administrators better understand backup execution without any backend changes.
⚙️ SGXP-337: Add User Filter on Audit Logs Page
Enhanced the Audit Logs page by adding a User filter to improve audit traceability and investigation efficiency.
Users can now filter audit logs by specific users.
⚙️ SGXP-336: Reset Filter Added to Audit Logs Page
Added a Reset button on the Audit Logs page to clear all applied filters (Date Range, Event Type, Machine/Group, User, CRN) and reload all audit log records without page refresh.
⚙️ SGXP-359: License Expired Alert Banner Added
Enhanced user awareness by displaying a prominent red license-expired alert banner on the Machine Manager and Registry Policies → Enforce Policies pages.
The alert clearly shows the license expiry date and informs users about disabled machine operations and policy enforcement actions, ensuring better clarity when features are restricted.
⚙️ SGXP-364: OS Support Updated for Shutdown Control Policy
Updated the supported operating systems for “Remove Shut Down, Restart, Sleep, and Hibernate” registry policy from ALL OS to Windows 10 and Windows 11, ensuring accurate OS enforcement.

Removed

🗑️ SGXP-364: “Disable Power Button” Registry Policy Removed
Removed the obsolete “Disable Power Button” registry policy from the system. The policy is no longer visible, assignable, or enforced.

Bug Fixes

🐞 SGXP-308: UserManager Page Access Restriction Fixed
Resolved an issue where the UserManager page was accessible before completing the Configuration Setup, leading to runtime exceptions.
Access control has been corrected so that the UserManager page is now only accessible to SuperAdmin and VendorAdmin users, and only after Configuration Setup is completed. Unauthorized users are now properly restricted or redirected.
🐞 SGXP-315: Suspend Action Visibility Fixed in Machine Manager
Fixed an issue where the Suspend action was visible for all machines regardless of state.
The Suspend option is now displayed only when a machine is in Active state (policies applied), preventing invalid actions for Ready, Pending Agent, state machines.
🐞 SGXP-316: Export Policies for Suspended Out-Network Machines Fixed
Fixed an issue where policies could not be exported for suspended Out-Network machines.
- Previously, when individual machine policies were applied to an Out-Network machine and the machine was suspended, it was no longer visible under Enforce Policies → Individual Machine.
- Since only Ready or Active machines were listed, the policies.enc export option was unavailable, blocking offline enforcement and policy rollback workflows.
Resolution:
- The system now automatically generates and downloads the policies.enc file when an Out-Network machine is suspended from the Machine Manager.
- This behavior works independently of machine state visibility on the Enforce Policies page.
- No impact to existing workflows for In-Network or Active machines.
🐞 SGXP-317: Import Compliance Details Action Visibility Fixed for Out-Network Machines
Fixed an inconsistency where the Import Compliance Details option was not visible for Out-Network machines in the Ready state after all policies were removed.
- Previously, the option was available only when the machine was in Active state.
- After policy removal, the machine transitioned to Ready, causing the action to disappear incorrectly.
Resolution:
- The Import Compliance Details option is now consistently available for Out-Network machines in both Ready and Active states.
- Ensures uninterrupted compliance import workflows and a consistent user experience.
- No regression for In-Network machines.
🐞 SGXP-269: Safe Machine–Group Association for Individually Policy-Applied Machines
Refined the Machine Group association workflow to safely handle machines with existing individual policies.
- Removed premature individual policy removal during machine–group association.
- Individual policies are now removed only after the group is saved and the machine is successfully associated.
- Prevents unintended policy loss when users exit or cancel without saving.
- Logic simplified and aligned with database table refactoring, with no backend action triggered at confirmation time.
🐞 SGXP-340: Logout Exception Before Initial Configuration Fixed
Fixed an issue where an exception occurred when users attempted to log out before completing the initial configuration. The logout flow now works correctly, allowing users to log out safely without any errors.
🐞 SGXP-346: Topbar License Expiry Day Count Fixed
Fixed an off-by-one issue in the topbar license expiry badge that caused the license to be marked as expired one day early.
- License day calculation is now accurate.
- Displays “License expires today” when 1 day remains.
- Shows “License expired” only after validity ends.
🐞 SGXP-353: Bulk Import UI Issue Fixed
Fixed an issue where the Bulk Import popup did not close when existing or duplicate machine records were detected, causing background tables to overlap and UI inconsistency. The popup now closes correctly and duplicate/existing machine details are displayed clearly.
🐞 SGXP-352: Server Applied Time Double Conversion Fixed
Fixed an issue where Server Applied Time was converted twice during group policy application and machine reactivation when the Application Configuration timezone differed from the Server/Local timezone.
The Audit Machine Policies Report now consistently displays the correct Server Applied time without any additional timezone conversion.
🐞 SGXP-358: License Expiry Enforcement Fixed
Fixed an issue where users could apply/export policies and suspend/activate machines even after license expiry.
Restricted actions are now blocked, and a SweetAlert warning is displayed showing the license expiry date and renewal requirement.

Performance Enhancements

⚡ SGXP-361: Bulk Timezone Fetch Optimization
Optimized bulk Create and Update operations by retrieving the Application Timezone once per operation, reducing redundant database calls and improving performance for large datasets. No functional impact.

Breaking Changes

⚙️ SGXP-313: Policy Audit Logging Optimized
Improved how policy application and removal activities are recorded for Machines and Machine Groups.
- Policy changes are now captured in a more compact and efficient audit format.
- Reduces unnecessary system overhead when applying or updating multiple policies at once.
- Audit history retrieval is faster and more reliable, especially for large environments.
- Ensures a clear, consolidated audit trail for policy add, remove, and change operations.
- No functional impact to existing workflows or user experience.
This enhancement improves overall system performance and simplifies long-term maintenance while maintaining full audit accuracy and compliance.

Secure GxP- Release Notes

Overview

This release delivers significant advancements in compliance management, agent communication, and reporting accuracy. With new features like encrypted compliance file imports for Out-Network machines and a PowerShell-based agent installation option, Secure GxP becomes more flexible and secure. Additionally, usability improvements, refined state handling, and real-time SignalR integrations ensure smoother operations, while the removal of outdated Out-Network modules simplifies the platform and maintains reporting consistency.

New Features

✅ SGXP-287: Import Compliance ENC File for Out-Network Active Machines
Added support to import encrypted compliance details (.enc) files for machines that are Out-Network and in Active state.
A new Import Compliance Details option is available in the machine action dropdown.
Users can upload .enc files through a modal with validation, progress tracking, and success/error feedback.
Each successful import is logged in the Activity Log for auditing, ensuring compliance updates are secure and traceable.
✅ SGXP-210: Add PowerShell Script Installation Option in Generate Installation Key Modal
Introduced a new Install Agent via PowerShell option in the Generate Installation Key modal.
Users can now download a .ps1 script that installs the Secure GxP Agent automatically using the provided Installation Key.

Improvements

⚙️ SGXP-276: Make Policies Section Not Clickable Until Machine/Group is Selected
The Policies section (checkboxes + action buttons) on the Enforce Policies page now remains not clickable until a machine or group is selected.
This prevents users from attempting to apply, reset, or export policies without selecting a target.
Disabled elements display a not-allowed cursor on hover, improving usability and preventing accidental actions.
⚙️ SGXP-289: Time Zone Configuration Alert
An alert banner has been added to the Configuration Page, reminding users:
“Ensure that all machines running SecureGxP Agents are set to the same Time Zone as configured in the Configuration of the Portal.”
This improvement helps maintain consistency in logs and operations across all machines.
⚙️ SGXP-293: Update Machine State Display on Enforce Policies Page
- In the Enforce Policies → Individual Machine section, replaced the Active/Suspended badge with the Machine State badge.
  - Only machines with Ready or Active state (that are not associated with any group) are displayed here.
  - Valid states: Ready / Active.
- In the Enforce Policies → Machine Group section, the associated machines list now displays the Machine State instead of Active/Suspended.
  - Valid states: Active / Ready / Suspended.

Removed

❌ SGXP-288: Remove Out-Network Machines & Out-Network Deviation Pages and Restrict Policy Deviation Reports to In-Network Machines
- Removed the Out-Network Machines page from Advanced Report.
- Removed the Out-Network Deviation page from Advanced Report.
- On Reports & Analytics → Generate Report, when Report Type = Policy Deviation Report, only In-Network Machines are available for HostName search.
- On Dashboard widget and Pie chart, only In-Network Machine Deviation details are displayed.
- In Machine Details Popup → Compliance section, the field "Last Policy Deviation Import Time" has been removed.
❌ SGXP-293: Remove Sync Status Column from Machine Manager Active Machine List
- In Machine Manager → Active Machine List, the Sync Status column has been removed.
- The State column alone now represents the required machine status.

Bug Fixes

🐞 SGXP-284: Issues in Machine Manager, Machine Report, Machine Group, and Configuration Pages
Multiple UI/functional issues have been fixed across different modules:
- Machine Manager → Active Machine List (Policies Column)
  Fixed an issue where the applied policies count did not reset after uninstalling the agent (both In-Network via API and Out-Network via Import Uninstall Details).
  ✅ Now, policies count resets to 0 once the agent is uninstalled.
- Machine Report Page → Create Button
  Removed the unnecessary Create button from the card header.
- Machine Group Details Page → Associated Machines List
  Renamed column Status → State to maintain naming consistency.
- Configuration Page → SMTP Configuration Section
  - Username is now always marked with a red * (mandatory indicator).
  - When Require Authentication is checked, Password becomes required and dynamically shows a red * (mandatory indicator).

Breaking Changes

✅ SGXP-265: SignalR Integration for Machine Status & Commands
Enabled real-time SignalR communication between the Secure GxP portal and in-network agents.
- Displays machine Online/Offline status on View Details action.
- Shows Command Center tab with actions:
  - Sync Policies
  - Logoff
  - Restart
  - Shutdown
- Commands are sent via SignalR and logged in the Audit Log.
- Offline machines display a warning and Refresh button.
SGXP-282: Restart via Deviation Report Pages
- 🔁 On the In-Network Deviation Report page only, when a host is selected:
- A Restart button appears.
- If the machine is offline, a warning with Refresh is shown.
- If online, clicking Restart sends a SignalR command to the agent and marks all deviations as rectified.
✅ SGXP-279: Send Commands to In-Network Agents for Machine State Changes
Added backend logic to automatically send "sync" or "suspend" commands via SignalR to in-network agents based on machine or group state changes.
Scenarios include applying/removing policies, suspending/activating machines, adding/removing machines from groups with active policies, and individual machine policy removals via group create/edit, delete group.
All cases strictly check In-Network status and machine state before sending commands.
✅ SGXP-281: Commands to Agents on Config Updates
When Sync Time Interval or License Expiration Date is updated:
- A command will be broadcast to all in-network agents via SignalR.
- Each action will send a targeted command to the selected machine via SignalR.

Secure GxP - Release Notes

Overview

This release (v3.4.0) introduces powerful new PDF reporting capabilities, enhanced machine management tools, and a more streamlined policy deviation handling experience.
Users will benefit from centralized actions, improved compliance insights, and better system performance through both UI/UX upgrades and backend optimizations.
It also delivers usability improvements such as smarter button behaviors, clearer machine state tracking, and more intuitive controls for managing in-network and out-network machines.

New Features

✅ SGXP-109: Export Machine Report Based on Machine Created
Added a new Machine Report option under Reports & Analytics to export a PDF of machines created within a selected date range.
Supports optional filters: OS Name and Network Type.
The report includes Host Name, IP Address, OS Name, and Network Type, and appears in the Generated Reports section.
Filename format: Machine_Report_<yyyymmdd_HHmmss>.pdf
✅ SGXP-255: New! Download Individual Machine Compliance as PDF
You can now generate a clean, downloadable PDF report for any individual machine directly from the Reports & Analytics page.
Just select the report type as Compliance Report, choose the date range and host name, then click Generate Report.
Once the report is ready, you'll receive a notification, and it will appear in the Generated Reports section below for easy download.
The PDF includes all the key compliance details—such as the host name, total number of entries, overall policy status (Yes/No), and a detailed table showing the machine group, compliance received time, policy applied time, and whether policies were present.
✅ SGXP-256: New! Download Individual Machine Policy Deviation report as PDF
You can now generate a clean, downloadable PDF report for any individual machine directly from the Reports & Analytics page.
Just select the report type as Policy Deviation Report, choose the date range and host name, then click Generate Report.
Once the report is ready, you'll receive a notification, and it will appear in the Generated Reports section below for easy download.
The PDF includes all the key deviation details—such as the host name, total number of entries, and a detailed table showing the policy name, machine group, policy deviated time, severity, new value, server applied value, is rectified, rectified at.
✅ SGXP-257: Export Backup Report as PDF
Added a new Backup Report option under Reports & Analytics to export a PDF showing completed backups within a selected date range.
The report includes key details like Type, Frequency, Status, Backup Time, Size, and Duration, along with total entries and the generation timestamp.
Once ready, the report appears in the Generated Reports section and is downloadable with a filename like: Backup_Report_<yyyymmdd_HHmmss>.pdf
✅ SGXP-258: New! Generate Policies Per Machine PDF Report
Easily generate a PDF report showing all currently applied policies on any selected machine.
Just pick Policies Per Machine as the report type, choose a machine, and click Generate Report.
Once ready, the report appears in the Generated Reports section for download.
The PDF includes the host name, applied time, applied by, server applied time, comment, and a list of active policies with category and severity.
Filename format: Policies_Per_Machine_Report_<HOSTNAME>_<yyyyMMdd_HHmmss>.pdf
✅ SGXP-259: New! Generate Policies by Group PDF Report
Now you can generate a PDF report that shows all currently applied policies for a selected machine group.
Just choose Policies/Group Report as the report type, select the group name, and click Generate Report.
Once it's ready, the report will appear in the Generated Reports section for download.
The PDF includes:
- The group name, applied time, applied by, and generation timestamp
- A table of currently applied policies with their category and severity
- A list of associated machines, including their host name, OS name, network type, and status
Filename format: Policies_Per_Group_Report_<GROUPNAME>_<yyyyMMdd_HHmmss>.pdf
✅ SGXP-213: Enhanced Policy Deviation UI with Manual Rectification Guide
We've improved the In-Network and Out-Network Policy Deviation pages to help fix registry-related deviations more effectively:
- 🧠 New Info Card
  A clear guide now appears at the top of the report, showing step-by-step instructions to manually rectify deviations.
- 🧾 Table Layout Improvements
  - Renamed confusing columns like New Value ➝ Current Value, Server Applied Value ➝ Expected Value.
  - Removed unused fields like Old Value, Machine Group.
  - Grouped machine details under HostName with badge-style formatting.
These changes simplify the deviation review process and ensure a smoother manual rectification experience.
✅ SGXP-96: Agent Configuration Enhancements
⚙️ Configuration Management Updates
SuperAdmins can now view and edit Agent Configuration.
SuperAdmins can edit:
- Sync Time Interval
- Alternate Policy File Path
Validation: Sync Time Interval must not exceed 43,200 minutes (30 days).
A download icon is added next to Alternate Policy File Path for downloading the corresponding .reg file.
📥 Registry File Download (Out-Network)
On the Subscription Page, for out-network machines:
- A Download button is added near Subscription End Date.
- On click, downloads an encrypted .reg file with the license expiration date.
✅ SGXP-268: Machine State Tracking & Guide Modal
New MachineState Column added to track lifecycle: PendingAgent, Ready, Active, Suspended, Disabled.
Automatic state updates based on machine events:
- Machine created → Pending Agent
- Agent details synced → Ready
- Policy applied → Active
- Policy suspended → Suspended (stores previous state)
- Re-activate → Last known state
- Disable action → Disabled
- Re-enable → Pending Agent
- Agent uninstalled → Pending Agent
Active Machine List includes a new State column with color-coded badges.
Added ℹ️ Info icon to open a State Guide Modal with state details and transition flow.
✅ SGXP-266: Centralized Suspend/Activate via Machine Manager
Suspend and Activate machine actions are now fully managed from a centralized location:
➤ Machine Manager → Actions dropdown (per machine)
- The dropdown shows Suspend or Activate based on the machine's current state.
- Each action triggers a SweetAlert confirmation popup:
  - "Are you sure you want to suspend policies on this machine?"
  - "Are you sure you want to reactivate policies on this machine?"
- Upon confirmation, the respective backend method (SuspendMachine / UnSuspendMachine) is triggered, and the table refreshes automatically.
✅ SGXP-267: Limit Individual Machine View to Non-Grouped Machines
The Individual Machine section of the Enforce Policies page has been refined to enhance clarity and ensure that machines managed through groups are excluded from individual policy operations.
Now, this section displays only those machines that:
- Are in the Ready or Active state
- Are not assigned to any Machine Group
✅ SGXP-271: Show Applied Policy Count in Active Machine List
Added a new Policies column to the Active Machine List under the Machine Manager page, showing the total number of currently applied policies per machine.
The count auto-updates on policy apply/remove, suspend/unsuspend, and group changes.
✅ SGXP-263: Manual Rectification Guide, HostName Filter in Deviation Pages
Improved both In-Network and Out-Network Policy Deviation Report pages:
- 🛠️ Added a new Action column with a tool icon per row. Clicking it opens a detailed Rectification Guide modal to assist in manually fixing registry deviations.Users can mark the policy as Rectified once done.
- 🔍 Introduced a HostName dropdown filter (on both pages), showing only machines with deviations.

Improvements

⚙️ SGXP-117: Simplified how group policies are fetched and applied, making the system easier to manage and more efficient.
⚙️ SGXP-231: Replaced CDN Links with Local Client Libraries
Removed all external CDN references (e.g., jQuery, Bootstrap, FontAwesome) and added local versions to improve performance, reliability, and offline access.
⚙️ SGXP-114: Faster and Smoother Report Generation
Report generation now happens in the background, so you no longer have to wait on the screen.
As soon as the report is ready, you'll receive a notification, and it will appear in the list below the Generated Report section.
You can download the report with a single click. After downloading, it will be removed from the list to keep things clean and organized.
⚙️ SGXP-141: Enhanced Machine Group Details Page with Policy and Status Insights
The Machine Group Detail page has been upgraded to provide richer contextual data and better visibility.
- ✅ Added audit fields: Created By, Created At, Last Modified By, Last Policy Applied By, and Last Policy Applied At, formatted as MM-DD-YYYY HH:MM:SS.
- ✅ Extended the Associated Machines table with:
  - Status column (Active/Suspended) with color-coded labels.
  - Policy Status column (Compliant, Non-Compliant, Policy Not Applied) using distinct badge colors.
- ✅ Introduced a new Applied Policies section showing:
  - Policy Name, Category, Supported OS, Applied By, and Applied Time.
- ✅ Added a visual Compliance Rate bar at the bottom showing the percentage of compliant policies for the machine group.
⚙️ SGXP-131: Disable Button & Show Loader for Long Operations
To prevent duplicate submissions, action buttons are now disabled after the first click.
For long-running operations (e.g., DB calls), a loader is displayed to indicate progress.
This improves user experience and avoids unintended multi-click actions.
⚙️ SGXP-270: Merge Machine Association & License Overview Widgets in Machine Manager
Simplified the Machine Manager page by merging related widgets:
- Machine Association now combines "Associated to Group" and "Individual Machines", showing total count with badges for Associated to Group and Individual.
- License Overview now combines "Total License" and "Available License", displaying Available License and Occupied License in badges along with the total.

Removed

🔧 SGXP-117: Removed outdated tables and unused features to make the system cleaner and easier to maintain.
🔧 SGXP-254: Removed IP Address Validation for License Activation
The system no longer blocks license activation due to a mismatch between the server's IP address and the IP address embedded in the license key.
This update ensures a smoother license registration experience.
Super Admins can now activate or upgrade licenses without encountering IP mismatch errors.
🔧 SGXP-266: Removed Legacy Suspend/Activate Controls from Other Sections
To maintain a streamlined and consistent experience, we've removed outdated Suspend/Activate controls from the following pages:
- Enforce Policies → Individual Machines
- Enforce Policies → Machine Group → Machines List
- Machine Group → Edit → Assigned Machines List
🔧 SGXP-267: Removed Machine Group Disassociation Option from Enforce Policies → Individual Machine Section
Previously, selecting a machine that was part of a Machine Group triggered a confirmation popup to remove it from the group.
This functionality has been removed to enforce centralized machine group management.
Machines can now only be disassociated from groups via the Machine Group Manager.
🔧 SGXP-271: Removed Policy Status Column from Active Machine List
The Policy Status column was removed from the Active Machine List, as the new Machine State already reflects each machine's policy lifecycle (e.g., Active, Suspended, PendingAgent), making the old status redundant.
🔧 SGXP-275: Removed "Misc" Tab from Machine Details Popup
The "Misc" tab containing Miscellaneous Info has been removed from the Machine Details modal in Machine Manager as the information was outdated and no longer relevant, helping to streamline the UI and improve user focus on essential details.

Bug Fixes

🛠️ SGXP-250: Fixed an issue where the installation key didn't work correctly when the portal was opened on the server itself. Now it always generates the right link for client machines.
🛠️ SGXP-251: Renamed App Restriction Policy to Fix Apostrophe Display
The App Restriction parent policy "Don't run specified Windows applications" has been renamed to
"Do not run specified Windows applications" to resolve character encoding issues (e.g., ') appearing in PDFs and UI.
The new name now displays cleanly and consistently across reports and interfaces.

Roadmap

🚀 Upcoming & Dependent Features (Require Agent v3.1.0 or Above)

These features are planned or partially available, but require Agent version 3.1.0+ for full functionality:

✅ SGXP-265: SignalR Integration for Machine Status & Commands
Enabled real-time SignalR communication between the Secure GxP portal and in-network agents.
- Displays machine Online/Offline status on View Details action.
- Shows Command Center tab with actions:
  - Sync Policies
  - Logoff
  - Restart
  - Shutdown
- Commands are sent via SignalR and logged in the Audit Log.
- Offline machines display a warning and Refresh button.
SGXP-282: Restart via Deviation Report Pages
- 🔁 On the In-Network Deviation Report page only, when a host is selected:
- A Restart button appears.
- If the machine is offline, a warning with Refresh is shown.
- If online, clicking Restart sends a SignalR command to the agent and marks all deviations as rectified.
✅ SGXP-279: Send Commands to In-Network Agents for Machine State Changes
Added backend logic to automatically send "sync" or "suspend" commands via SignalR to in-network agents based on machine or group state changes.
Scenarios include applying/removing policies, suspending/activating machines, adding/removing machines from groups with active policies, and individual machine policy removals via group create/edit, delete group.
All cases strictly check In-Network status and machine state before sending commands.
SGXP-281: Commands to Agents on Config Updates
When Sync Time Interval or License Expiration Date is updated:
- A command will be broadcast to all in-network agents via SignalR.
- Each action will send a targeted command to the selected machine via SignalR.

📌 Note: Until all clients upgrade to Agent v3.1.0 or higher, these command-center and automation features will be limited or unavailable.

Secure GxP - Release Notes

Overview

This release (v3.3.1) introduces significant enhancements to configuration flexibility, policy management, and system logging. Key features include timezone-aware datetime handling, support for multiple user groups in application configuration, and the ability to suspend or activate individual machine policies. It also delivers UX improvements, new visibility into system details via the Help page, and a dedicated logging database to streamline performance. Numerous bug fixes ensure smoother machine management, cleaner dashboards, and more reliable notifications.

New Features

SGXP-162: Timezone Option in Application Configuration
Added a configurable Timezone option under the Application Configuration section in the Configuration page.
SGXP-70: TimeZone-Aware DateTime Handling
- Portal-based DateTime values are converted to the configured TimeZone before saving.
- Timestamps from agent data—such as Compliance Events, Policy Deviations, or Activation Reports—received via API or Import are saved without any timezone conversion, assuming they are already in the correct Application TimeZone.
- Ensures consistency across logs and audit entries.
SGXP-156: Multiple Group Support in Application Configuration
Enhanced the Application Configuration page to support multiple selections for UserGroup and SuperUserGroup using Select2 dropdowns with tagging enabled.
- Users can now type group names and press Enter to add them to the selection list.
- The dropdown allows selecting multiple groups, and duplicate group names and extra spaces are automatically cleaned.
- Login validation logic has been updated to check if a user belongs to any of the configured groups.
- If unauthorized, a user-friendly error message lists the allowed group names.
SGXP-178: Suspend/Activate Individual Machine Policies
Added checkbox-based control to toggle machine status as Active or Suspended in the Individual Machine policy section.
- Suspended machines receive all policies as removed when the agent pulls data.
- Reactivated machines automatically restore previously applied policies.
SGXP-174: Policy Status Column in Machine Table
Added a new Policy Status column to the Active Machine List for quick identification of policy states.
- Displays color-coded status badges: Applied (green), Suspended (red), and Unassigned (yellow)
- New machines automatically receive "Unassigned" status upon creation
- Supports column sorting and filtering by policy status for improved machine management
SGXP-142: General Details Section on Help Page
Introduced a General Details section on the Help page to display key product, system, installation, and database information, along with upgrade history, for better visibility into the deployed environment.
SGXP-115: Save Logs to a Different Database
Introduced a dedicated logging database for storing upgrade history, errors, and audit events.
- Existing logging mechanisms (e.g., Serilog/custom logging) now target this separate database, improving performance and maintainability.
Product Information: Shows product name, architecture, version, vendor, and agent version.
System Information: Displays host name, OS version, hosted platform, OS name, architecture, and server timezone.
Installation Information: Includes server port and installation directory path.
Database Information: Shows database type, logged-in DB user, and SQL Server version.
Upgrade Details Table: Lists all applied upgrades with version, agent version, installed date, and change type in descending order.
SGXP-240 – Total License Widget and UI Enhancements
Added a "Total License" widget on the Machine Manager page to display the total license count.
- Displays the total license count (e.g., 10) with a status badge.
- Status badge moved from Available License widget to Total License widget.
- Adjusted the Suspended Machine widget height to align with other widgets.
- Ensured consistent layout, padding, and elevation across all widgets.

Improvements

SGXP-191: Restructure Sidebar & Move Workflow/Help to Topbar
Improved navigation by organizing reports into collapsible sections:
- Essential Reports (always visible)
- Advanced Reports (shown if AddOnX is included in the subscription plan)
  Moved Workflow and Help to the topbar (under user dropdown), renamed Apply Policies to Enforce Policies, and removed the old Policies section.
SGXP-162: Configuration Page UI Enhancements
- Improved form alignment on the Configuration page.
- Standardized section heights for Application, Domain, and Backup Configuration.
SGXP-219: Enforce Unique Hardware ID During Machine Sync
Implemented a global uniqueness check for HardwareId across all In-Network and Out-Network machines. Sync operations now reject duplicate HardwareIds (excluding the syncing machine), ensuring accurate hardware tracking. Applies to both enabled and disabled machines, with detailed conflict logging.
SGXP-222: Enhancements for Better UX
- ✅ Apply Policies Page – Reset Button: Added a clear Reset button to quickly de-select all selected policies.
- ✅ Deviation Pages Alert Box: Added a beta warning at the top of In-Network and Out-Network Deviation pages:
  This feature is in beta preview and may produce inaccurate results. Use with caution and confirm any critical decisions.
SGXP-218: Registry Policy Severity Updates
Updated severities based on security impact:
- Standard → Important:
  Remove Run menu from Start Menu, Disable Navigation Pane from File Explorer, Remove File Explorer’s Context Menu, All Removable Storage Classes: Deny All Access, Remove Recycle Bin
- Standard → Critical:
  Removes the Folder Options, Hide entry points for Fast User Switching, Remove Task Manager, Prevent access to the command prompt, Hide Programs and Features, Disable Drag and Drop 1, Disable Drag and Drop 2, Restrict Send To, Restrict Rename, Restrict Paste, Restrict Properties, Restrict Move To, Restrict Empty Recycle Bin, Restrict Delete, Restrict Cut, Restrict Copy To, Disable Ribbon Control, Restrict Copy
SGXP-246: Update Icons on Sidebar Tabs
Updated outdated or mismatched icons on sidebar navigation tabs to improve visual clarity and user experience. Icons are now aligned, consistent with the design system, and visually representative of their respective sections.
SGXP-244: No More Environment Variable Setup
Database connection setup is now much easier — there's no need to create any environment variables on IIS.
Just add the DBServerHostName in the configuration file; the application handles the rest automatically.

Bug Fixes

SGXP-112: Create Single Audit Log Entry for Bulk Machine Import
Previously, a separate audit log entry was created for each machine during bulk import, leading to cluttered logs.
This has been optimized to generate a single consolidated audit entry that includes:
- Total number of machines imported with hostnames
- Performing user
- Timestamp
- Event name: "Bulk Machine Import"
  The consolidated entry is now visible in Recent Activity Logs with appropriate icon and styling.
SGXP-175: Implemented server-side validation to check if the specified Backup Path exists during Add or Update on the Configuration page. Shows a user-friendly error if the path is invalid and logs the error for audit purposes.
SGXP-222: UI and Data Consistency Fixes
- 🔧 Badge Color Consistency: "All" badge color now matches OS badges.
- 🔧 Rename "All" to "All OS" on the Apply Policies page.
- 🔧 User Icon Removed: Top navbar now appears cleaner.
- 🔧 Machine Group Display: Changed NA to N/A for better readability.
- 🔧 Disabled Machines: Now automatically clear all related policy deviations.
- 🔧 Dashboard Pie Charts: Standardized color usage to only green (compliant/applied) and red (non-compliant/suspended).
- 🔧 Dashboard Simplification: Removed unused cards – Critical Alerts, Apply Policies, and View Reports – for a cleaner experience.
SGXP-225: Notification, Policy, and License Display Fixes
Resolved multiple UI and logic issues across notifications, audit logs, and machine manager:
- Individual Machine Suspension Notification
  - Now persists for 15 days or until marked as read.
  - Visible to SuperAdmin/User roles in the notification section.
  - Always listed in the Notification Report.
- Registry Policy Rename
  - Renamed "Remove Task Manager" to "Disable Task Manager" for clarity.
- Policy Deviation Cleanup After Uninstall
  - On uninstall (In/Out-Network), related deviations are removed.
  - Machine is moved under "Policies Not Applied" in dashboard charts.
- Offline Export Fix
  - Fixed invalid policy data in exported files for suspended or grouped machines.
- Audit Log Username
  - Audit Log table now shows the correct user who rectified the deviation.
- License Badge in Machine Manager
  - When no license is added, badge now shows in Available license Widget "Pending" instead of "Expired".
SGXP-226: Disable Export for Pending Sync Machines
Fixed an issue on the Out-Network Machine page where the Export Policies dropdown allowed selection of machines whose sync status is Pending Sync.
Such machines are now disabled in the dropdown, preventing users from exporting policies until a successful sync is completed. This avoids confusion and ensures policy exports only target valid, synced machines.
SGXP-227: Backup Failed Notification Missing in Alerts Tab
Fixed an issue in the Notification panel where the "Backup Failed" notification was only visible under the "All" tab but not shown in the "Alerts" tab.
Now, all failure-type notifications are correctly categorized and appear under the Alerts tab as expected, ensuring better visibility of critical issues in the Notification panel.
SGXP-228: Hostname Mismatch During Out-Network Agent Uninstallation Import
Fixed an issue where importing .enc files for Out-Network agent uninstallation failed due to hostname mismatch.
The system was incorrectly treating decrypted JSON
SGXP-241 – App Restriction Delete Button Not Working
Fixed an issue where clicking the delete (trash) icon under App Restrictions did not trigger the SweetAlert confirmation dialog. Users can now properly delete entries like notepad.exe.
SGXP-247: Backup Job Timezone Fix
Fixed backup scheduling to respect the timezone set in Application Configurations instead of defaulting to UTC.

Secure GxP - Release Notes

Overview

Release 3.3.0 brings key enhancements to machine management, further strengthening system governance and user workflows. This update introduces GUID-based keys for better scalability, new email templates for streamlined access requests, and meaningful UI improvements and bug fixes for a smoother user experience.

New Features

SGXP-198: Add HardwareId Column to Machine Table
A new HardwareId column has been added to the Machine table. This will store the unique HardwareId for each machine after its details are synced once the agent is installed. The HardwareId is also displayed in the "Miscellaneous Info" section of the machine details popup.
SGXP-180: Machine Disable Limit Management Based on License
VendorAdmins can now configure how many machines users are allowed to disable based on the license details. A new setting allows them to define a percentage limit, ensuring better control. Other roles will see a warning if the limit is reached and won’t be able to disable more machines without VendorAdmins intervention.

Improvements

SGXP-132: Access Request Email Templates
Standardized HTML email templates for Access Request workflows:
- Access Request Received (Admin Notification)
  Sent to designated admin email addresses. Includes:
  - Requester's full name, work email, and reason for access
  - Domain name and required AD groups (fetched dynamically)
  - Instructions for adding the requester to appropriate Active Directory groups
- Access Request Approved (User Notification)
  Sent to the requester’s email. Informs them that their access request has been approved.
- Access Request Rejected (User Notification)
  Sent to the requester’s email. Politely notifies them of the rejection and optionally suggests contacting support for clarification.

Removed

SGXP-201: Removed Theme Customizer Option from UI
Removed the Theme Customizer feature from all UI locations to simplify the interface and apply a consistent default theme across all users. This change ensures a more streamlined user experience without custom theme adjustments.

Bug Fixes

SGXP-205: Removed LicenseKey from installation token.
This field is no longer needed and has been excluded from the encrypted data to simplify token generation.
SGXP-199: Prevented unnecessary regeneration of the installation key.
Fixed an issue where the installation key was being regenerated every time the "Get Installation Key" operation was triggered, even if no machine details had changed. The key is now only updated when there is a change in the machine data.
SGXP-206: Blocked editing of OS Name and Network Type if machine sync status is Synced.
A SweetAlert message is shown instructing users to remove all policies and uninstall the agent before making changes.
SGXP-126:
- Fixed redirection issue after rectifying Out-Network or Policy Deviation – now stays on the correct page.
- Fixed server applied time not updating on reapplying policies – now updates correctly every time.
SGXP-209: Fix UI inconsistencies, sorting issues, and functional bugs across Compliance Reports, Machine Management, and Policy sections
Addressed several UI and functionality bugs to enhance consistency and user experience:
- Compliance Report Data Ordering: Fixed incorrect ordering on In-Network & Out-Network Compliance Report pages. Data is now shown in descending order based on compliance receive time.
- Machine List Ordering: Machines on Machine Manager and Machine Report pages are now displayed in ascending order by hostName.
- Remove Button in Machine Group Edit: The remove button is now functional. Clicking it prompts a SweetAlert confirmation dialog. Confirming removes the machine from the group list and updates the UI; canceling keeps the machine.
- Policy Deviation Report Widget: Removed the "Overall Compliance" widget from the Policy Deviation Report page.
- Audit Log SyncStatus: SyncStatus is now properly logged (OldValue and NewValue) when an agent uninstall event occurs.
- Registry Policy Tabs Ordering: Tabs on the Apply Policies page are now shown in a fixed order: Taskbar, Explorer, System, Desktop, IO.

Breaking Changes

SGXP-126: Migrate Table Primary Keys from int to string (GUID)
All primary and foreign keys are now GUID-based instead of integers. Improves uniqueness and supports better scalability. No action needed from users.

Secure GxP - Release Notes

Overview

Version 3.2.2 focuses on improving system reliability and user control. With smarter sync handling and extended agent configuration options, managing machines and installations is now more efficient and intuitive. This update also introduces clearer license visibility and resolves key issues affecting machine re-enablement and data integrity.

New Features

SGXP-195: Sync Status Auto-Reset on Re-enable or Uninstall
Now, when a machine is re-enabled or its agent is uninstalled (via API or import), the system will:
- Automatically reset its Sync Status to Pending Sync
- Clear all previously synced data
SGXP-193: Agent Configuration Support in Application Configuration & Machine Models
This update enhances agent configuration and machine provisioning:
- Application Configuration:
  A new "Agent Configuration" section has been added, allowing VendorAdmins to set values like MaxDaysWithoutSync, TimeInterval, and AlternatePolicyFilePath.
- Machine Model:
  New machine settings, including ClientName (from license), MaxDaysWithoutSync, TimeInterval, and AlternatePolicyFilePath, are automatically populated when adding or editing machines.
- Installation Token Generation:
  The installation token now includes more detailed machine metadata to improve agent initialization and ensure traceability during setup.
This ensures a fresh start for the machine and keeps your data accurate and clean.

Improvements

SGXP-153: License Expiration Badge in Topbar
Displays license status badge (e.g., days left, expired, unavailable) in the top bar for quick visibility.

Bug Fixes

SGXP-190 - Bug: Cannot Re-enable Machine After License Limit Is Reached
Users have a license to enable a fixed number of machines (e.g., 10). They can disable and re-enable machines as needed.
Previously, after reaching the license limit and disabling a machine, users could add another, but were blocked from re-enabling the originally disabled machine due to incorrect license checks.
This issue has been fixed — users can now re-enable a machine as long as the total number of active machines remains within the license limit. An appropriate error message is shown only when the limit is truly exceeded.
SGXP-197 - Bug: New Machine Entry Overwrites Last Edited Machine
After editing a machine, adding a new machine without refreshing caused the new details to overwrite the previously edited machine. This has been fixed to ensure new entries are correctly created.

Secure GxP - Release Notes

Overview

This May 20, 2025 release introduces significant improvements to machine management workflows, enhanced UI controls, and strengthened security features. Key changes include mandatory input requirements when disabling machines, improved machine sync status tracking, and encryption of sensitive configuration data.

New Features

[SGXP-147] Enhanced Machine Disable & Re-Enable Controls
Added mandatory inputs (comment, reason) when disabling machines. Controlled re-enable with a max of 2 times per machine and dynamic warnings to guide users.
[SGXP-179] Machine Sync Status Tracking
Added a Status column to the Machines table and displayed it in the Active Machine List in Machine Manager.
- When a new machine is created, its status is set to "Pending Sync" by default.
- For In-Network Machines, the status becomes "Synced" after the Agent is installed. The Agent automatically sends the required machine details to the system.
- For Out-Network Machines, the status becomes "Synced" after the Agent is installed and a .enc file is generated. You must manually import this file using the “Import Details” action in Machine Manager for each out-network
This allows users to clearly track the sync state of each machine directly from the UI.
[SGXP-187] Installation Key Includes Base URL
The machine installation key now includes the portal's base URL as well along with other details.

Improvements

[SGXP-147] Disabled Machines List UI Enhancements
Updated list to accordion-style view showing machine details, disable reason, comment, and re-enable count with a clear "Re-Enable" button and confirmation popup.
[SGXP-176] Updated Alert Icon for Machines in a Group
Replaced the info icon with a warning icon on the "Apply Policy" page when removing a machine from a group. This highlights the seriousness of the action, as it will remove any applied policies from the machine.
[SGXP-183] Machine Manager UI Enhancements
- Updated Machine Manager Active and Disabled Machines table:
  - Removed IP Address and Network Type columns.
  - Displayed IP Address below Host Name in lighter/smaller text.
  - Added visual machine icon in Host Name column: 🟢 green for In-Network, 🔴 red for Out-Network.
- Enforced UI and backend restrictions:
- A machine can only be added to a Machine Group or Apply Policies on it after its status is "Synced".
- Tooltip shown: “Machine must be synced before this action can be performed.”
[SGXP-188] Dynamic Release Note Link Configuration
The Release Note link on the Configuration page is now dynamically loaded from the appsettings.json file using the ReleaseNoteUrl key.
This allows environment-specific configuration of the release note URL without code changes.

Removed

[SGXP-147] Multiple Machine Disable Option Removed
Users can no longer disable multiple machines at once. Disabling now requires individual machine selection for better traceability and validation.
[SGXP-183] EndPoint Monitor Tab Removed
Removed the “EndPoint Monitor” tab from the Reports section of the sidebar.
[SGXP-189] Removed Machine Group Support from Bulk Import
- The MachineGroup column has been removed from the Excel bulk import template.
- Users can no longer assign machines to groups during the bulk import process.
- Bulk import of machine groups via Group Manager has been removed.
- Backend logic related to group assignment during import has been deprecated.
- Validation is added to reject old templates with a user-friendly error message.

Bug Fixes

[SGXP-177] Machine Group Name Not Updating After Removal Fixed an issue where the Machine Group name on the individual machine card did not update to N/A after removal from a group on the Apply Policies page.

Security Updates

[SGXP-105] Encrypted Sensitive Configuration Data
Sensitive keys in appsettings.json—including database connection strings, JWT secret, and GitHub token—are now encrypted Decryption occurs at runtime when the values are needed for:
- Database context setup
- JWT token generation
- GitHub API communication
[SGXP-185] Moved Connection Strings to Environment Variables
The DefaultConnection and MySQLConnection strings have been removed from appsettings.json and are now sourced from environment variables.
- Enhances security by keeping sensitive data out of source control.
- Supports environment-specific configurations.
- Standardized variable names:
  - ConnectionStrings__DefaultConnection
  - ConnectionStrings__MySQLConnection

This release focuses on enhancing user experience, real-time notifications, dynamic configurations, and overall system usability.

🚀 Features & Enhancements

SGXP-144: SweetAlert on "Update to Latest" Button

Enhancement: Added informative SweetAlert dialog when clicking "Update to Latest" button on configuration page.

SGXP-129: Dynamic "Contact IT Support" Link

Enhancement: "Contact IT Support" email link on login screen is now dynamic.
Details:
- Fetched from ApplicationConfiguration table using key SendRequestAccessTo.
- Supports environment-specific configuration.

SGXP-139: Backup Completion Notifications via SignalR

Feature: Real-time notifications for backup completion/failure.
Details:
- SuperAdmin roles receive notifications.
- Topbar bell icon shows unread notifications (last 15 days).
- Full Notification List page implemented with pagination.
- "Mark as Read" & "Mark All as Read" functionality added.
- SignalR used for live updates.

SGXP-111: Machine Add/Edit Modal & UI Cleanup

Enhancement:
- Machine Add/Edit now handled via a modal popup.
- Removed OS Distribution Pie Chart from Machine Manage page.
- Improved user experience and UI consistency.

SGXP-127: Real-time Policy Deviation & Machine Suspension Alerts

Feature:
- SignalR notifications for Policy Deviation & Machine Suspension from Group events.
- Role-based visibility (SuperAdmin & User).
- Redirects user to specific report/detail pages on click.

SGXP-150: Authentication & Policy Pull Lock for Disabled Machines

Feature:
- Disabled machines blocked from authentication & policy pull.
- Returns 401 with encrypted removed policy list.

SGXP-163 / SGXP-168: Installation Key Management & Download Agents UI Updates

UI Enhancement:
- Updated Machine List Action Links to a dropdown menu for better usability and cleaner interface.
Installation Key Flow:
- Added "Generate Installation Key" option in the Machine List Actions dropdown.
- On selecting this option:
  - A new Installation Token is generated.
  - The token is saved in the database.
  - A popup modal displays:
    - The Installation Key with a Copy button.
    - Download Windows Agent button.
    - Copy Download Link button.
Subscription Page UI Improvements:
- Removed Windows 8.1 card from the Download Agents section.
- Added .NET Framework version information under each OS card (Windows 7, 8, 10, 11).
- Adjusted font sizes for better readability.

SGXP-164: Machine Details Enhancement

Feature:
- Extended Machine table with detailed hardware & system fields.
- API endpoint /activation-report for updating machine details.
- Modal popup displays enhanced machine info with tabs & sections.
- IP & MAC address validations
- activity logging.

SGXP-169: Import Machine Details via Encrypted File (Out-Network Machines)

Feature:
- New "Import Details" action for Out-Network Machines.
- Upload & decrypt .enc file to update machine info.
- Validations, logging, and error handling implemented.
- acrtivity logging.

SGXP-170: Available License Count & Status Widget

Feature:
- Displays available license count & status badge on Machine Manager page.
- Real-time updates & color-coded statuses:
  - Active (Green), Pending (Orange), Expired (Red).

SGXP-171: Disabled Machines List in Machine Manager

Feature:
- Separate table for Disabled Machines below Active Machines.
- View button opens detailed machine info modal.

SGXP-172: Out-Network Machines Menu Relocation

Change:
- "Out-Network Machines" menu moved to Reports section.
- Conditionally visible if License AddOnX is enabled.

❌ Removed

SGXP-161: Hide Timezone Field (UI Only)

Change: Timezone field hidden from Configuration page UI.
Note: Field retained in backend and database for future use.

Installation Notes

This release requires a database schema update
Please schedule a 30-minute maintenance window for the upgrade
Backup your current database before upgrading

This release focuses on major improvements to the database backup system, including better performance, user-initiated backups, detailed backup history, and simplified configuration management.

💾 Database Backup Enhancements

SGXP-116: New Backup History Page

Feature: View complete backup logs under Configuration Management
Details:
- Restricted to Super Admin and Vendor Admin roles
- Displays backups in descending order of time
- Data includes: Time, Type, Frequency, Status, Size, Duration, File Path, Error Message
- Status and type badges with colored indicators
- Fully responsive DataTable with server-side sorting and spinners

SGXP-130: "Backup Now" Option in Configuration

Feature: Added Backup Now button on Configuration page
Functionality:
- Triggers on-demand full database backup via Hangfire job
- Confirmation popup via SweetAlert
- Backup entry logged with metadata: Site, Time,Type, Status, Frequency = "OnDemand"
- Errors displayed with toastr notifications

SGXP-137: Optimized Backup Process for Large Datasets

Feature: Refactored backup process to support large databases (10GB+)
Improvements:
- Increased connection timeout to 10 minutes
- PerformBackupAsync method modularized for better maintainability

SGXP-133 Removed AutoUpdate Field

Change: Deprecated AutoUpdate column removed from
- 'Database (ApplicationConfiguration table)
- UI and backend logic

SGXP-134: Configurable Backup Path

Feature: Added required BackupPath field in ApplicationConfiguration
Details:
- UI validation with error messages for empty or invalid paths
- Backup logic now reads path from ApplicationConfiguration table
- Ensures backups are stored in designated location

Installation Notes

This release requires a database schema update
Please schedule a 30-minute maintenance window for the upgrade
Backup your current database before upgrading

This release includes several significant enhancements to the SecureGxP platform, focusing on improved reporting capabilities, user management, license validation, and system configuration.

🔍 Reporting & Analytics Enhancements

SGXP-93: Machine Audit Report PDF Export

Feature: Users can now export the Audit Report for individual machines as a PDF
Benefits:
- Review historical changes applied to machines in a clear, structured format
- Includes complete policy details for each applied timestamp
- Multi-page PDF with proper pagination for large datasets
- Standardized template with branding
- Easily shareable audit trail for compliance purposes
Export Format: AuditReport_[Hostname]_[YYYYMMDD].pdf

SGXP-108: Compliance Report PDF Export

Feature: Implemented PDF export for Compliance Reports (In-Network/Out-Network)
Benefits:
- Clean, styled PDF output based on Razor View templates
- Complete compliance data with machine name, group, policy timestamps
- Improved UX with loading indicators during export process
- Properly formatted headers and footers with metadata

SGXP-95: Enhanced Group Policy Export

Feature: Group policy exports now include a list of associated active machine hostnames
Benefits:
- Clear visibility of which machines the policy is currently applicable to
- Excludes suspended machines from the export
- Better insight into policy coverage across the environment

👥 User Management Improvements

SGXP-74: Enhanced User Management Interface

Feature: Redesigned user management with improved filtering and controls
Benefits:
- Tabular view with Name, Role, Status, Last Active, and Action columns
- Role and Status filters for quick user segmentation
- Search functionality for finding users by name
- One-click user enabling/disabling with immediate status update
- Responsive design with improved loading states

SGXP-103: Request Access Workflow Enhancement

Feature: Enhanced "Request Access" functionality with admin approval workflow
Benefits:
- Requests now stored in database for better tracking and management
- New Admin page to view, approve, or reject access requests
- Automated email notifications to users upon approval/rejection
- Complete history of access requests with status tracking

💻 Machine Management Updates

SGXP-50: Machine Disable Functionality

Feature: Replaced machine deletion with disable functionality
Benefits:
- Maintains historical record of previously used machines
- Disabled machines don't count against license limits
- Better tracking and control over machine usage
- Prevents unnecessary data loss
- Clear messaging that disabled machines cannot be re-enabled

🔑 License Management Enhancements

SGXP-46: License Validation and Subscription Improvements

Feature: Enhanced license management with improved validation logic
Benefits:
- Prevents duplicate license registration with clear error messaging
- Unique GUID generation for each license
- IP address validation to prevent unauthorized license transfers
- Machine count validation with helpful guidance for renewal scenarios
- License binding to machine objects with expiration date visibility
- Improved renewal workflow for partial machine count scenarios

⚙️ System Configuration Updates

SGXP-11: Enhanced Configuration and Backup Controls

Feature: Improved backup configuration with frequency control
Benefits:
- Removed unnecessary "File Size Limit" option
- Added Time Zone selection and Automatic Update toggle
- Flexible backup frequency options (Daily, Weekly, Monthly)
- Intelligent backup type selection (full vs. incremental)
- Enhanced backup history tracking
- Improved dashboard widget with status indicators and detailed backup information

Installation Notes

This release requires a database schema update
Please schedule a 30-minute maintenance window for the upgrade
Backup your current database before upgrading

🔐 Major Security & Policy Enhancements

Role-Based Access Management

Implemented comprehensive role-based access management to enhance security and control
Added role-based group management with super user column

Machine & Registry Policy Improvements

Policies can now be applied with group association checks
Added severity column to registry policies
Implemented management features for offline machines
Created registry policies to hide "Programs and Features" and "Installed Updates" in Control Panel (Windows 7)

Access Control Features

Added ability to suspend and unsuspend machines from Group Policy Section
Enhanced request access feature to store in database with super admin approval workflow
Added activity log entries for all critical actions including policy exports and machine group actions

📊 Compliance & Monitoring

Compliance Tracking

Added comprehensive compliance monitoring functionality
Introduced new module to manage compliance for offline machines
Implemented dedicated page for monitoring policy deviations outside the network

Reporting Enhancements

Generate PDF exports of compliance for In-Network/Out-Network monitoring
Export list of associated active machines hostnames when exporting group policies
Generate PDF export of individual machine audit report with multi-timestamp sections
Added report buttons in dashboard for quick access

🖥️ Dashboard & Interface Improvements

Dashboard Enhancements

Added new information widgets to the dashboard
Added suspended system widget for better visibility
Improved visibility of machine status and applied policies
Enhanced display of total records throughout the interface

Navigation & Layout

Overhauled Apply Policies page with better navigation and usability
Introduced card and table view layouts for machine group lists
Aligned sidebar logo to left and reordered sidebar menu sections for better workflow
Fixed card start position in all pages for consistency
Improved UI responsiveness when zooming out on login page

User Experience Improvements

Display total selected policy count on Apply Policy page
Improved UX for deleting machine group with SweetAlert confirmation without redirect
Enhanced UI for Out-Network Management
Added machine group edit page with tabs for all active and suspended machines
Added filter option to Activity Log list page

🛠️ Technical Improvements & Configuration

Framework & Performance

Upgraded project framework from .NET Core MVC 6 to .NET 9
Updated Serilog integration for SEQ logging
Fixed LoggingContentMiddleware issues
Added JSON serializer for better data handling

Configuration Enhancements

Enhanced configuration page and implemented backup frequency logic
Added email configuration with encrypted username and password
Added agent services list on app settings
Improved workflow management and validation across configuration settings
Updated database and username settings for UI

🐛 Bug Fixes

Policy Application

Resolved issues related to hiding drives when applying policies
Fixed NoDrive and NoViewOn policy application
Fixed registry policy name and description validation to prevent special character issues

User Interface

Fixed multi-select dropdown issues in Choices.js on Policy Create/Update pages
Fixed missing logs for machine suspension and activation actions
Corrected grammar errors in Apply Policies - Group section
Fixed issues with bulk import functionality
Resolved bugs in recent activities display

System Functionality

Fixed issue with EF Core migration creation
Resolved configuration access issues
Fixed machine group index page problems
Addressed issues with display of newly created machines
Ordered policies by name in machine and group views

✨ Added

🔍 Enhanced Machine Management
- ActivityLog row is now clickable
- Machine policies can be applied to individual machines not in groups
- Checkbox added for bulk machine deletion
- New template for Machine Bulk Import
- Validation prevents deletion of machines with policies or group membership
📊 Dashboard Improvements
- Report buttons on pie charts
- Policies Applied chart
- Suspended Machines widget
- App Version file display
🛠️ Configuration & Features
- Super User Group in Configuration Management
- Email Configuration section
- AddOnX integration with License
- Import options for Policy Deviation and Compliance Confirmation

🔄 Updated

📋 Policy Management
- Machine and Group Policies displayed in ascending order
- View associated machines of selected machine group
- System List added on Policies/Machine and Audit Policies reports
- Enhanced UI for policy application confirmation
💼 Machine Group Management
- Machine Status column in Group Details and Edit page
- Tabs for All, Active, and Suspended machines
- "In-Network" and "Out-Network" machine terminology
🔐 Role Updates
- VendorAdmin: Full access
- SuperAdmin: All except Policy Manager
- Admin: Restricted from Policy Manager, Configuration, and Subscription
🎯 App Restriction Validation
- No spaces allowed
- Must end with ".exe"
- Must be lowercase

🗑️ Removed

🔒 AD Login password storage in database
📍 Location field from Machine forms
📊 Model column from ActivityLog
📋 Standalone column from machine list displays

🐛 Fixed

🎨 Design and sorting issues
🔍 ActivityLog search functionality
🔄 API-related fixes for policies
📝 Various spelling corrections
🏷️ Error message improvements
📱 Footer version visibility

⚡ Performance

🔄 Error table management optimization
📊 ActivityLog performance improvements

🔒 Security

🛡️ Vulnerability fixes:
- CSRF protection
- XSS prevention
- Resource Management
- Cryptographic improvements

We are thrilled to introduce the third official release of Secure GxP

Release Date: 10-Jan-2024

Bug Fixes

Machine Group Handling: Fixed an issue where machine groups could not have spaces in their names.

New Features

CSV Integration: Added support for a new CSV format to improve data handling.
Policy Removal: If the machine group is not found, policies will still be sent, but they will be marked as "removed policies."
Machine Group Creation Timestamp: If no policy is added to a machine group, the ServerTimestamp will now default to the machine group creation time.

Upgrades

Login Page: Upgraded the login page to enhance user experience and security.
Server Applied Time: Added Server Applied Time to the policy logs for better traceability.
Connection String: Improved and optimized the connection string handling for enhanced performance and stability.

Thank you for choosing Secure GxP! We’re committed to continuous improvement, and your feedback is invaluable. If you encounter any issues or have suggestions, please reach out to our support team.

Happy securing! 🛡️💻

Release Date: 25-Sep-2023

We are thrilled to introduce the second official release of Secure GxP!

Fix:

Bulk import error resolution:
- In previous versions, there were issues related to bulk imports that occasionally led to the creation of duplicate machines. We’ve addressed this problem, ensuring that machine creation during bulk imports is now error-free.
Policy Cleanup:
- We’ve meticulously reviewed policies across various operating systems (OS) to enhance security and streamline functionality. As a result, we’ve removed incorrect, duplicate, and non-working policies. Here’s the list of policies we’ve adjusted:
  - Remove Notifications and Action Center
  - Hide the Notification Area
  - Disable the Display Control Panel
  - Hide Network Locations
  - Remove the Networking Icon
  - Hide Tasks View from Taskbar
  - Turn off Auto play
  - Disable QAT
  - Restore Old Right-click Context Menu in Windows 11: It is now part of Setup for Windows 11
Installer Fix:
1. Old Agent installation was failing to deploy all binaries, this has been fixed.

New Feature:

Subscription Page:

Want to stay informed about your subscription? The new Subscription Page provides essential details:
- Your current plan
- Differences between your existing plan and the current one
- Subscription start and end dates
- Total number of licenses procured

Thank you for choosing Secure GxP! We’re committed to continuous improvement, and your feedback is invaluable. If you encounter any issues or have suggestions, please reach out to our support team.

🔮 Future Enhancements

We are committed to continuously improving Secure GxP. Here’s what you can expect in future updates:

Advanced Policies: More than 50 plus additional policies.
Expanded Compliance Modules: Additional modules for industry-specific compliance standards.
Enhanced Reporting Features: More customizable reporting options and templates.
Advanced Threat Detection: Integration of agent monitoring for real time policy deviations.
Automated Compliance Checks:
- Scheduled Audits: Automatically conduct regular compliance checks and receive notifications of any deviations.
- Regulatory Compliance: Ensure adherence to industry standards and regulations, reducing the risk of non-compliance.
Policy Copying: Effortlessly copy policies from one Machine Group to another, streamlining the process of policy deployment across different groups.
Hierarchy Support: Manage your organization’s machine hierarchy, including Location, Department, and Machine Group, ensuring a clear structure for policy enforcement.

Happy securing! 🛡️💻

🚀 Announcing Secure GxP 1.0.0

Release Date: 23-Aug-2023

We are thrilled to introduce the first official release of Secure GxP! This version 1.0.0 is the result of extensive development and testing, bringing you a powerful tool for ensuring compliance and security across your organization's critical systems.

🌟 Key Features

1. 🔒 Comprehensive Security Management

Policy Enforcement: Define and enforce security policies consistently across your organization to maintain compliance.
Audit Trail: Keep a detailed log of all actions and changes, ensuring transparency and traceability.

2. 👥 User Access Control

Granular Permissions: Assign specific roles and permissions to users, ensuring only authorized access to sensitive information.

3. 📊 Centralized Management Console

Dashboard Overview: Monitor your system's security status with customizable widgets.
Policy Management: Easily create, modify, and deploy security policies across multiple machines and user groups.
Reporting: Generate detailed reports on compliance, policy enforcement, and security incidents.

4. 🖥️ Machine Manager

Machine Inventory: Track all machines within your organization, with detailed information such as hostname, IP address, and assigned policies.
Machine Subgroups: Organize machines into subgroups based on location, department, and machine group for easier management.

5. 🛠️ Machine Group Manager

Group Management: Create and manage machine groups to consistently apply policies across similar machines.

6. 🎛️ Group Policies

Centralized Policy Control: Manage and apply group policies from a single console.
Extensive Policy Library: Secure GxP comes with a comprehensive set of predefined policies to enhance security and ensure compliance. These include:
- Prevent changes to Taskbar and Start Menu Settings
- Hide Tasks View from Taskbar
- Remove Notifications and Action Center
- Hide the notification area
- Lock the Taskbar
- Remove Run menu from Start Menu
- Remove access to the context menus for the taskbar
- Prohibit access to Control Panel
- Disable the Display Control Panel
- Prevent access to the command prompt
- Remove Task Manager
- Hide entry points for Fast User Switching
- Turn off Autoplay
- All Removable Storage classes: Deny all access
- Remove Shut Down, Restart, Sleep, and Hibernate
- Disable Power Button
- Disable QAT
- Disable Drag and Drop 1
- Disable Drag and Drop 2
- Remove Recycle Bin
- Hide Network Locations
- Remove the networking icon
- Restrict Desktop
- Open Ribbon Control Minimized
- Remove the Folder Options
- Remove File Explorer's context menu
- Disable Navigation Pane from file explorer
- Restore old Right-click Context menu in Windows 11
- Restrict Burn To Disc
- Restrict Open With
- Restrict Cut
- Restrict Properties
- Restrict Copy
- Restrict Paste
- Restrict Copy To
- Restrict Rename
- Restrict Create Shortcut
- Restrict Share
- Restrict Delete
- Restrict Send To
- Restrict Empty Recycle Bin
- Restrict Move To
- Disable Ribbon Control
- App Restriction
- Drive restrictions

7. 🌐 Seamless Integration

Active Directory Support: Integrate seamlessly with your existing Active Directory infrastructure for user authentication and management.

8. 🏗️ High Availability and Scalability

Redundant Infrastructure: Designed for high availability, ensuring that your security management remains operational even during system failures.
Scalable Architecture: Easily scale your deployment as your organization grows, without compromising performance or security.

🔮 Future Enhancements

We are committed to continuously improving Secure GxP. Here’s what you can expect in future updates:

Advanced Policies: More than 50 plus additional policies.
Expanded Compliance Modules: Additional modules for industry-specific compliance standards.
Enhanced Reporting Features: More customizable reporting options and templates.
Advanced Threat Detection: Integration of agent monitoring for real time policy deviations.
Automated Compliance Checks:
- Scheduled Audits: Automatically conduct regular compliance checks and receive notifications of any deviations.
- Regulatory Compliance: Ensure adherence to industry standards and regulations, reducing the risk of non-compliance.
Policy Copying: Effortlessly copy policies from one Machine Group to another, streamlining the process of policy deployment across different groups.
Hierarchy Support: Manage your organization’s machine hierarchy, including Location, Department, and Machine Group, ensuring a clear structure for policy enforcement.

⚠️ Known Limitations

Compatibility with Older Operating Systems:
- Secure GxP may have limited functionality or compatibility issues with older versions of Windows (e.g., Windows XP, Windows XP Pro). Full support is guaranteed for Windows 7, Windows 8, Windows 10 and Windows 11.
Third-Party Software Conflicts:
- Certain third-party security software may interfere with the functionality of Secure GxP, particularly in policy enforcement and system monitoring.
Limited API Integrations:
- While Secure GxP provides API support, integrations with certain third-party systems may require additional custom development or may not be fully supported in this release.
Policy Conflicts:
- In some cases, certain policies might conflict with each other (e.g., restrictions on UI elements that are also disabled by other group policies), leading to unexpected behavior.
Real-Time Monitoring:
- Real-time monitoring is dependent on consistent network connectivity. Machines that go offline or have intermittent network access may not report changes immediately.
Policy Application Delay:
- Applying policies across a large network might experience delays depending on network traffic and the number of machines involved.
Manual Intervention for Certain Features:
- Certain advanced features, such as custom policy creation and API integrations, may require manual setup and configuration.

🛠️ System Requirements

To ensure optimal performance, Secure GxP requires the following:

Operating System: Windows 10 or higher (with limited support for older versions)
.NET Framework: .NET Framework 4.6.2 or higher is required for agents.
Web Portal:
- .NET Core: .NET Core 6.0 is required.
- Web Server: Hosted on IIS with the .NET Core Hosting Bundle.
- Database: SQL Server for data storage.
- Ports:
  - API: Port 443 (HTTPS) for secure communication. SSL Certificate required.
  - Web Portal: Port 80 (HTTP) for web traffic.
Hardware:
- Processor: 1 GHz or faster
- RAM: 2 GB or more
- Disk Space: 500 MB minimum

🚀 Getting Started

To get started with Secure GxP:

Request a Demo: Connect with our team to schedule a demo.
Technical Support: Contact our support team at admin@origamiitlab.com for assistance.

Home

Secure GxP

Release Notes

Releases

Secure GxP - Release Notes

Overview

Improvements

Removed

Breaking Changes

Secure GxP - Release Notes

Overview

New Features

Improvements

Removed

Bug Fixes

Performance Enhancements

Breaking Changes

Secure GxP - Release Notes

Overview

New Features

Improvements

Removed

Bug Fixes

Performance Enhancements

Breaking Changes

Secure GxP- Release Notes

Overview

New Features

Improvements

Removed

Bug Fixes

Breaking Changes

Secure GxP - Release Notes

Overview

New Features

⚙️ Configuration Management Updates

📥 Registry File Download (Out-Network)

Improvements

Removed

Bug Fixes

Roadmap

🚀 Upcoming & Dependent Features (Require Agent v3.1.0 or Above)

Secure GxP - Release Notes

Overview

New Features

Improvements

Bug Fixes

Secure GxP - Release Notes

Overview

New Features

Improvements

Removed

Bug Fixes

Breaking Changes

Secure GxP - Release Notes

Overview

New Features

Improvements

Bug Fixes

Secure GxP - Release Notes

Overview

New Features

Improvements

Removed

Bug Fixes

Security Updates

🚀 Features & Enhancements

SGXP-144: SweetAlert on "Update to Latest" Button

SGXP-129: Dynamic "Contact IT Support" Link

SGXP-139: Backup Completion Notifications via SignalR

SGXP-111: Machine Add/Edit Modal & UI Cleanup

SGXP-127: Real-time Policy Deviation & Machine Suspension Alerts

SGXP-150: Authentication & Policy Pull Lock for Disabled Machines

SGXP-163 / SGXP-168: Installation Key Management & Download Agents UI Updates

SGXP-164: Machine Details Enhancement

SGXP-169: Import Machine Details via Encrypted File (Out-Network Machines)

SGXP-170: Available License Count & Status Widget

SGXP-171: Disabled Machines List in Machine Manager

SGXP-172: Out-Network Machines Menu Relocation

❌ Removed

SGXP-161: Hide Timezone Field (UI Only)