Vault Release 17.4.1

Released on Nov 3, 2025

Enhancements

• VAUL-7458, KDE-1799: Fixed an issue causing slow file uploads in KeeperPAM connections.

• KDE-1790: Integrated Keeper Forcefield 1.1.0 with Windows x64 and ARM64 support.

• VAUL-6783: We implemented the ability to restrict saving TOTP fields from role policy.

• VAUL-7662: We added numerous KeeperPAM connection parameters listed below.

• New SSH Connection Parameters

  • Public Host Key

  • Font Name

  • Scrollback Size

  • Read-Only

  • Remote Command Execution

  • Language/Locale

  • Time Zone

  • Server "keepalive" Interval

  • Terminal Behavior - Backspace Key Send Option

  • Terminal Type

  • Clipboard usage

  • See detailed documentation on SSH parameters

• New RDP Connection Parameters

  • Initial Program Execution

  • Session "client name"

  • Keyboard Layout

  • Timezone

  • Enable multi-touch

  • RDP Administrative Console

  • Display Width/Height/Resolution

  • Color Depth

  • Force lossless compression

  • Read-only

  • Resize Method

  • Clipboard settings

  • Line ending normalization

  • Remote App Execution - Program, Working Directory, Parameters

  • Device Redirection for audio input/output

  • Printing support

  • Enable Wallpaper

  • Enable theming

  • Enable font smoothing

  • Enable full-window drag

  • Enable desktop composition (Aero)

  • Enable menu animations

  • Disable bitmap caching

  • Disable off-screen caching

  • Disable glyph caching

  • Load Balancing cookie

  • Pre-connection PDU (Hyper-V) RDP Source ID and Preconnection Blob

  • SFTP default upload directory

  • SFTP Keepalive interval

  • See detailed documentation on RDP parameters

• New Remote Browser Isolation Connection Parameters:

  • Disable audio

  • Audio capabilities (Stereo/Mono, Bit Depth, Sample Rate)

• New VNC Connection Parameters:

  • Read-only

  • Swap red/blue components

  • Force lossless compression

  • Encoding

  • Cursor local/remote setting

  • Color depth

  • Audio enable

  • Text Encoding

  • VNC Repeater host/port

  • See detailed documentation on VNC parameters

• New Database Parameters (MySQL, PostgreSQL, SQL Server):

  • Font Name

  • Font Size

  • Maximum Scrollback Size

  • Read-only

---

Bug Fixes and Improvements

• VAUL-7530: Fixed an issue where devices with long names in KSM caused the UI to break.

• VAUL-7665: Updated the APIs for the security audit data.

• VAUL-7907: We modified the GovCloud vault to use the GovCloud krelay servers.

• VAUL-5424: Fixed an issue where legacy usernames did not display the primary username correctly.

• VAUL-7802: Implemented a sticky footer so that save options remain visible without requiring users to scroll to the bottom of the page.

• VAUL-7927: Improved reliability when downloading and decrypting PAM session recordings by updating the decryption process to use a new, more secure salt value method.

• VAUL-7945: Added some RBI Connection Parameters.

• KDE-1750: Confirmed MacOS Tahoe (Version 26) compatibility.

• VAUL-7800: Fixed an issue where a shared folder remained visible after team removal if it was assigned to multiple teams and the user did not belong to the remaining team.

• VAUL-7431: Fixed progress bar when usage exceeds limits for file attachments.

• VAUL-7496: Enhanced the error message displayed when a Kubernetes connection fails to provide more explicit guidance.

• VAUL-7780: Made the database "type" a required field when launching a connection with an ephemeral account.

• VAUL-7821: We fixed a Vault scroll bar issue.

• VAUL-7856: Fixed an issue where the Session Activity filter did not update correctly when the Risk Score option was unchecked.

• VAUL-7871, 7876, 7858: We fixed several PAM AI bugs.

• VAUL-7897: Fixed an issue where “Enable Remote Browser Isolation” was not automatically selected when creating a new RBI connection, causing users to manually enable it after setup.

• VAUL-7809: Disabled partial selection and click-to-copy functionality for the username and custom fields.

• VAUL-7919: Fixed a problem where resizing the remote window with the +/- buttons caused parts of the screen to become unclickable.

• VAUL-7928: Fixed a minor typo in the Gateway’s Docker Compose AppArmor profile name for improved consistency.

• VAUL-7935: Fixed a bug that caused rotation schedules to run on the wrong day in Monday-first locales (like Europe/UK).

• VAUL-7942: Fixed an issue where records created via right-click or the Create New button were saved outside the selected folder or shared folder (SF).

• VAUL-7944: Fixed a problem where the Save button didn’t re-enable after closing an error message.

• VAUL-7884: Fixed an issue where the Vault did not display more than two queued discovery jobs.

• KDE-1693: We fixed an issue with \ or / in the download file.

• KDE-1788: Fixed Snap Store install errors.

• KDE-1734, 1729: Fixed Hotkey issues

• KDE-1685: Fixed an issue where passwords imported from Windows appeared empty when using the latest version of Chrome.

• KDE-1780: Fixed an issue where Keeper Desktop did not start correctly after proxy authentication was completed.

• KDE-1794: Fixed an issue where filling into a macOS Parallels VM caused a crash when certain characters were entered.

• KDE-1797: Fixed an issue where new Chrome windows could not be opened on macOS when KFFE was active.

• KDE-1793: Fixed an issue on macOS where using the hotkey Cmd + Shift + P to fill passwords did not work when targeting a password field, but worked in non-password fields.

• KDE-1803: Fixed an issue where the TOTP field from BitWarden CSV was not importing.

• KDE-1804: Fixed a problem where Bitwarden CSV imports with multiple URLs only saved the first URL in Keeper.