Lira RDP Security

PRODUCT DOCUMENTATION · WINDOWS AGENT

Lira RDP Agent release notes

A dated engineering record of earlier Windows agent releases. These legacy binaries are no longer offered for download; entries describe only changes supported by available engineering records.

Latest documented legacy releasev2.7.39

Release history

MaintenanceLatest documented legacy release

v2.7.39 · Native uninstall and reliable signed updates

  • Portal-script installations now appear in Windows Apps/Programs with interactive and quiet removal commands; MSI installations keep their own registration.
  • RSA-PSS manifests now use the SHA-256 digest-length salt accepted by the pinned .NET verifier, and the builder verifies every generated signature.
  • Update execution is serialized across heartbeat, realtime and polling channels. The global target is 2.7.39; 22 of 25 active agents upgraded automatically, while three remained online on 2.7.34 after failing closed on missing signing-root trust.
Maintenance

v2.7.34 · Event collection fault isolation

  • Update-check failures can no longer interrupt Windows Security event collection; idle update manifests are handled defensively.
  • The signed pilot caught up to checkpoint=head and completed a signed read-only command. Global target remains 2.7.31.
Maintenance

v2.7.33 · Reliable updater failure reporting

  • Every updater exit path now records the current target version and exact failure, and stale results from earlier releases are ignored.
Historical release

v2.7.32 · Stronger update, command and MFA safeguards

  • Agent updates now require a signed manifest and verify the trusted Lira publisher before updater and staged components run.
  • Remote commands are bound to the individual agent, signed with an expiry and protected against duplicate execution across connection fallback and service restarts.
  • Administrators can choose a compatible fail-open mode or a strict fail-closed MFA outage policy after validating an independent recovery path.
  • MFA identities now retain Windows domain or UPN qualification so equally named accounts in different domains remain separate.
Historical release

v2.7.31 · Safer recovery and faster allowlist reconciliation

  • Adding an address to the allowlist now removes matching local Windows Firewall restrictions immediately, including when the policy has just changed.
  • If the portal is temporarily unavailable during an MFA-protected sign-in, the agent avoids leaving the server indefinitely inaccessible while retaining the saved MFA policy for automatic recovery.
  • Subscription suspension and reactivation now preserve the configured MFA policy and apply the current protection state consistently.
  • Enrollment, secure credential renewal and portal connectivity recovery no longer require a service restart.
Historical release

v2.7.28 · Safer enrollment and event processing

  • Fresh enrollment now establishes a clean starting point for security events, reducing unintended blocks from older records.
  • Event processing now handles clock differences and out-of-window records more safely.
  • Compatibility with Microsoft Defender exclusions for supported database workloads was improved.
Maintenance

v2.7.25 · Agent maintenance build

  • The retained agent core was refreshed for staged distribution.
  • No separate administrator-facing change is documented for this final build of the date.
Historical release

v2.7.24 · Verified release packaging

  • Installer and update packages now receive additional code-signing validation before publication.
  • Published Windows packages include timestamped Authenticode signatures.
Historical release

v2.7.23 · Improved connectivity and update reliability

  • The agent now uses available portal connectivity more efficiently and switches automatically to a fallback when needed.
  • Lengthy Windows Update work no longer causes an active agent to appear offline during servicing.
Historical release

v2.7.15 · Outbound RDP sign-in compatibility

  • Lira sign-in protection remains limited to supported Windows sign-in and workstation-unlock scenarios.
  • Outbound RDP prompts retain standard Windows behavior while MFA remains available for protected inbound RDP access.
Maintenance

v2.7.10 · Agent maintenance build

  • The agent received a maintenance refresh for staged distribution.
  • No administrator action or configuration change is required for this build.
Maintenance

v2.7.5 · Agent maintenance build

  • The agent received a maintenance refresh for staged distribution.
  • No administrator action or configuration change is required for this build.
Historical release

v2.7.0 · RDP TLS and endpoint compatibility

  • Certificate and endpoint handling was improved for environments where public and internal RDP settings differ.
  • Required RDP service changes are now applied in a controlled manner only when certificate or security settings change.
Historical release

v2.6.99 · RDP MFA reliability and protection

  • Password and one-time-code sign-in reliability was improved for protected Windows users.
  • MFA challenges and recovery codes now receive stronger protection against expiry, replay and reuse.
Historical release

v2.6.92 · Agent status and rollout reliability

  • Agent status reporting now distinguishes normal inactivity from delayed processing and operational errors more accurately.
  • Update rollout improvements preserve monitoring continuity and event catch-up during servicing.