pasUnity 4.39.0.0 RTM is now generally available.

This release of pasUnity contains changes to security, license, and certificate management.

Over the past year there have been some fairly significant changes made to the Microsoft .NET Framework, Windows Security updates, and security in the pasUNITY Enterprise Suite web services framework in the area of security.  The most significant change as it impacts pasUNITY products is a move towards HTTPS and TLS 1.2 as the primary communication and cryptography protocols.  This release lays the groundwork for upcoming changes that will move away from a hard-coded reliance on specific protocols and cryptographic libraries to those configured within the operating system itself.  This move will allow us and you to have greater control in the future over how pasUNITY applications are secured.

This release marks a change in the installation behavior.   The processing agent service (pasUnityProcessor) is now configured by default with Local System permissions instead of the previous Local Service permissions.  The elevated default security context allows the service to operate on the network using the machine account and enables certain common use scenarios not possible under Local Service.

The license management subsystem has been enhanced to automatically detect when changes are made to your license so that they can be downloaded and applied automatically in some scenarios and for informational messages to be displayed in others.  Essentially, when the application is launched by a user with administrative rights the application will check for a new license and if one is detected it will automatically update it for you.  If the application is launched without administrative privileges, the application will still check for a new license, but if one is found it will present a notice to the end-user to manually update the license.

A new certificate configuration dialog has been added to the application to allow you to view, manage, create, and apply X.509 certificates to application services without the need to edit configuration files by hand or use command line utilities to manage certificates.