Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

Centrify 21.3 Release Notes

7 April,21 at 02:03 PM

New Features

  • Privilege elevation for CClient – Phase 1. This release includes the first phase of privilege elevation support for Centrify CClient, allowing users with limited access to request to elevate their access in order to perform privileged operations..
     
  • Multiple domain administrative accounts are now supported for the same domain, allowing more granular administrative control over various accounts in different tiers in the Active Directory infrastructure.
     
  • An installer is now provided as part of the Centrify Hyper-scale Privilege Access Service package to quickly and easily set up a system for evaluation and demonstration on a single node. Note that this is designed specifically for evaluation and cannot be used for initial install of a non-evaluation system as non-evaluation systems always require more than one node.
     

Notice of discontinuation

  • The Centrify Android app will discontinue support for Android 4.4 with release 21.4. Users with Android 4.4 devices may continue to use the release 21.3 Android app, however functionality introduced after 21.3 may not work as expected.
     
  • With the 21.5 release we are planning to drop browser extension support for Microsoft Internet Explorer version 11, due to Microsoft end-of-life-ing the product and to improve the security posture of the cloud service.
     
  • In the 21.5 release support for TLS 1.1 will be fully deprecated from Centrify cloud products, including mobile apps. Only TLS 1.2 and above will be allowed. Note: previously this was communicated for release 21.3; the timeline has been pushed back to allow customers additional time to prepare for this change.
 

Changes

The following list records issues resolved in this release and behavior changes.

 
  • Generic LDAP support now allows two base DNs, one for users and and an optional one for groups. In order to use this support it is necessary to use connector release 21.3 or later (CC-77801).
     
  • The user and account column in the audit analyzer -> audit sessions page now correctly shows the cloud user’s name (CC-77899).
     
  • Deleted discovered local accounts are now blacklisted, preventing them from being discovered again once the discovery profile re-runs (CC-77845).
     
  • Centrify Hyper-scale Privilege Access Service installation no longer fails on Azure-hosted Postgres installations (CC-77627).
     
  • Adding permission for a role to a large system set no longer causes timeouts (CC-77873).
     
  • The option to enable / disable the App Gateway service on connectors has been reinstated (CC-77574).
     
  • PAS desktop apps now will open correctly with the native RDP client without the Remote Access Kit installed (CC-77594).
     

Supported Platforms

Centrify Connector

  • Windows Server 2012r2, Server 2016, Server 2019

Self-hosted Centrify Privileged Access Service

  • Windows Server 2012r2, Server 2016, Server 2019

Hyper-scalable Centrify Privileged Access Service

  • Windows Server 2016, Server 2019

Centrify Clients for Linux

Client for Red Hat 6:
  • Red Hat Enterprise Linux 6.9, 6.10, 7.5, 7.6, 7.7, 7.8, 7.9, 8.0, 8.1
  • CentOS 6.9, 6.10, 7.5, 7.6, 7.7, 7.8, 8.0
  • Fedora 30, 31
  • Oracle Linux 6.9, 6.10, 7.5, 7.6, 7.7, 7.8, 7.9
  • Amazon Linux AMI 2017.09, 2018.03
  • Amazon Linux 2 2017.09, 2018.03
     
Client for Red Hat 7 (ARM architecture):
  • 7.5, 7.6, 7.7, 7.8, 7.9, 8.0, 8.1
     
Client for CoreOS
  • Latest stable release 2345.3.0

Client for SUSE 12
  • SUSE 12, 15

Client for Debian 9
  • Debian 9
  • Ubuntu 16.04LTS, 18.04LTS, 18.10, 19.04

Centrify Client for Microsoft Windows

  • Windows Server 2012r2, Server 2016, Server 2019

Windows PAS Remote Access Kit

  • Windows 10, Server 2012r2, Server 2016, Server 2019

Centrify app for Android

  • Android 4.4 (API level 19) and later

Centrify app for iOS

  • iOS 11 and above


(Tested systems and devices for Privileged Access Service are listed in the documentation)