Fixes and Improvements
Enterprise License Enforcement
The product now records which devices run Advanced Workflows functions (Enterprise license) and compares this with the number of Advanced Workflows licences purchased. During licence activation (online, through a proxy or offline), the number of Advanced Workflows licences and the number of devices that used Advanced Workflows in the last 30 days are included in the license activation data, also when telemetry upload is disabled. This contains no device, user or document information. (SQC-8811)
Note: no function is restricted and no device is removed with this update.
Terminals, User Interfaces
The Lexmark embedded terminal has been updated to the latest Lexmark SDK (ESS.73.001), adding support for new devices including the C305ae, XC2432 and ZC364. (SBT-5610)
The terminal server now sends the HTTP Strict Transport Security (HSTS) header on its HTTPS ports, which security audits commonly reported as missing. The header is configurable. Some embedded terminals may stop working when two conditions are both met: certificate validation is turned off on the devices, and the terminal server is addressed by domain name rather than IP address (the networkAddress key in TerminalServer.exe.config). In that case, adjust or disable the header as described in the HSTS section of "Configuring secured connection between terminals and Terminal Server" in the documentation. (SBT-5560)
Restarting an HP device through SNMP v3 after installing the embedded terminal failed when SHA-256 authentication was configured, so the device had to be restarted manually. The restart now works with all SNMP v3 authentication protocols supported by HP devices. (SBT-5272)
The mobile application on iOS could accept an untrusted or self-signed server certificate on the login screen for one service while correctly rejecting it for another. Invalid certificates are now rejected consistently. (SBT-5043)
On Lexmark devices, the instruction text on the home screen asking the user to use their card was cut off. The full text is now displayed. (SBT-5618)
While a terminal server node was in offline mode, existing users could be assigned new user IDs starting from 1, and IDs assigned during offline mode could overwrite existing ones once the connection was restored, so card or user registrations stored on devices stopped matching and were rejected at the panel. Offline mode now uses the cached data correctly, recently assigned IDs are no longer reissued, and IDs assigned offline are checked for collisions before they are written back. (SBT-5632, SBT-5634, SBT-5642)
Installation and Administration
The Database Editor in the management interface is now accessible only from the Management server itself by default. To allow access from other machines, list their IP addresses or subnets in the new web.databaseEditor.allowedAddresses property in safeq.properties. If the management interface is reached through a reverse proxy, add the address of the proxy to the list. Existing installations receive the property automatically during the update. (SBT-5470)
In a Management server cluster, a configuration property changed or newly created on one node was not picked up by the other nodes until their management service was restarted, so those nodes kept propagating the old value to their Site Servers and terminals. Configuration changes are now applied on all nodes. (SBT-5577)
Under heavy replication load, a replication page between a Site Server and the Management server could grow without limit and permanently block all further replication, and after a restart a new replication page could collide with a stored one, so that job data was lost. Replication pages are now closed correctly and page numbering is restored after a restart. (SBT-5600)
Recreating database indexes as part of the database maintenance job failed after upgrading to PostgreSQL 16. Index recreation now works with PostgreSQL 16 and later. (SBT-5357)
The installers accepted Management Server and Site Server GUIDs containing whitespace characters, which are not supported and could prevent a Site Server from registering. The installers now reject GUIDs containing whitespace. (SBT-5581)
Installing the FlexiSpooler client failed with a "Failed to set ACL" error on computers where App Control for Business enforces dynamic code security. The client now installs successfully on these computers. (SBT-5616)
Printing
A5 print jobs from the Kyocera KX driver failed job analysis in FlexiSpooler, so page count, paper format, preview and accounting were not available for them. These jobs are now analyzed correctly. (SBT-5526)
On Konica Minolta devices with recent firmware, multi-copy print jobs were not collated correctly because of a print job adjustment that is only needed for older firmware. The adjustment is no longer applied by default, and can still be enabled for devices running older firmware. (SBT-5531)
Payment System
Refreshing an entitlement with several hundred or more specifically assigned users always failed and had no effect. Such entitlements now refresh successfully. (SBT-5555)
Opening and editing an entitlement with many specifically assigned users was extremely slow: with about 1,000 users, opening one took several minutes. Such entitlements now open and save in seconds. (SBT-5556)
Periodic recharge and entitlement refresh could stop working with a "MaxOpenPreparedStatements limit reached" error because database statements were not released. Statements are now released correctly. (SBT-5617)
Security Mitigation and Enhancements
Security improvements and fixes (SBT-4894, SBT-5354, SBT-5460, SBT-5468, SBT-5469, SBT-5488, SBT-5489, SBT-5490, SBT-5523, SBT-5565, SBT-5589, SBT-5598, SBT-5646, SBT-5652, SBT-5656)
Product extensions (or customizations)
Customers who use YSoft SafeQ extensions or customizations should contact their Y Soft RSM or Customer Support Services for compatibility verification with the new Build. We recommend testing all extensions before applying a Build update into a production environment.
You can find additional information on Partner Portal: https://portal.ysoft.com/products/ysoft-safeq/extension-store/print-job-extension