Release notes

Redtrust 4.42.3

07/02/2026

New features

Description	Requires agent update?
New agent installation mode for unattended environments that require browser use without taking control of navigation.	✅
New System > Services section to configure the authentication process when consuming the Sign API in internal integrations.	➖

Bug fixes

Description	Requires agent update?
Fixed the security warning that Windows displayed when system processes used the Redtrust cryptographic providers.	✅
Corrections to the handling of port changes for the IdP Login service. To keep the current integration with Guadaltel, change the IdP Login service port to 8083.	➖
Fixed the error that prevented setting the user PIN correctly for users in SAML domains.	➖

Known issues

The standard procedure no longer allows downgrading to earlier versions due to internal changes. Before applying the update, create a snapshot of the machine state and perform a backup using the administration console. Download the package and apply the OpenRDPv2.bin file to ensure emergency access if needed. After the server update, complete the process using the second package included in the ZIP file.

Redtrust 4.42.2

05/22/2026

Enhancements to existing features

Description	Requires agent update?
Added usage and denial alerts to the Signtrust module, the Agent API, and the Sign API.	➖
Simplified the certificate expiration alert generation process to avoid sending alerts when certificates have already expired.	➖
Refactored the internal logging system to improve its management across the various Redtrust server services.	➖
Improved navigation control when using the Cl@veFirma gateway in browsers' incognito mode.	➖
Migrated the Redtrust services to .NET 10.	➖
Migrated the Windows Agent to .NET 10.	✅
Migrated the Linux Agent to .NET 10.	✅
Improved the certificate upload process to simplify its behavior. By default, the user PIN policy is not to use it, regardless of whether an owner was assigned during upload.	➖
Added additional third-party documentation, including files such as THIRD_PARTY_NOTICES.txt, to provide greater transparency about the components used.	✅
Improved the Auth client service responses.	➖
Improved Accept-Language header processing to adapt API responses to the expected language.	➖

Bug fixes

Description	Requires agent update?
Fixed the issue that prevented using elliptic curve (ECC) certificates generated with the RA API in the Signtrust module.	➖
Fixed the issue that prevented MSP server administrators from completing the issuance of Firmaprofesional certificates.	➖
Fixed the issue that duplicated sites and applications when changing a policy's role.	➖
Fixed issues with the personal portal session after a period of inactivity.	➖
Fixed the issue with the distribution of unsigned executable files in the Windows Agent installer.	✅
Fixed the Redtrust logging system issue that caused excessive disk space consumption on the server.	➖
Fixed the issue that prevented correct auditing of events related to agent sign-in.	➖
Fixed the issue that prevented using certificates in Signtrust when the user PIN is required.	➖
Fixed the issues that prevented correct sorting of the user list in a domain's detail view.	➖
Fixed the issue that prevented creating certificate usage alerts when certificates were selected individually.	➖

Known issues

The standard procedure no longer allows downgrading to earlier versions due to internal changes. Before applying the update, create a snapshot of the machine state and perform a backup using the administration console. Download the package and apply the OpenRDPv2.bin file to ensure emergency access if needed. After the server update, complete the process using the second package included in the ZIP file.

Redtrust 4.42.1

04/17/2026

New features

Description	Requires agent update?
The Windows Agent is now available as a native ARM64 build.	✅
Site groups in Policies now include an Advanced configuration section with a Mapped sites field. When a site grants access to multiple downstream sites after authentication — as is common with centralized authentication mechanisms such as AOC or izenpe — this field lets you list those host names and apply certificate use policies to each downstream site independently.	✅
The Sign API now includes default signing configuration management through new endpoints.	➖
The Sign API now includes new REST endpoints for digital signing of PDF files. You can configure the position and format of the visual signature, include a signature image, and select the pages on which it appears.	➖

Enhancements to existing features

Description	Requires agent update?
The partner configuration sections in the admin console include user experience improvements.	➖
The configuration for certificates requested through Firmaprofesional now incorporates changes to increase the security level.	➖

warning

If you have the Firmaprofesional module, contact the support team before applying this update.

Bug fixes

Description	Requires agent update?
Policy When conditions no longer throw an error when the start or end time has a null value.	➖
Role queries no longer throw an error when the user has a null role assigned.	➖
User groups are now correctly displayed alongside individual users in the policy list.	➖
Fixed an error in the consumer registration of the Agent API.	➖
The Firmaprofesional module now allows certificate requests in roles without backup download permissions.	➖
User groups assigned to roles now appear in the role list view.	➖
Minor corrections across various product modules to improve platform stability.	➖

Known issues

The standard procedure no longer allows downgrading to earlier versions due to internal changes. Before applying the update, create a snapshot of the machine state and perform a backup using the administration console. Download the package and apply the OpenRDPv2.bin file to ensure emergency access if needed. After the server update, complete the process using the second package included in the ZIP file.