4.0

4.0.3507

Bugfixes

Production package action sets can be dragged.
Registry filters value types of binary and multi sz are handled incorrectly.
Microsoft System Center Configuration Manager connector produces error message: "The call is ambiguous between the following methods or properties".

4.0.3482

Bugfixes

Universal Agent (Windows) fails to install if started with non-administrator privileges.

4.0.3477

Bugfixes

Webserver doesn't recognize TLS offloading.

4.0.3476

Bugfixes

Webserver doesn’t correctly redirect requests in all cases.
Update SixLabors.ImageSharp library within the Liquit UserHost to resolve CVE-2024-27929.
Action "Stop-Process" doesn't work when device context is used.
"_" and "~" characters produce incorrect search results within the workspace.

4.0.3433

Bugfixes

Package filter “Mac App installed version” fails if the app is not installed.

4.0.3426

Changes

Added support for Windows 11 23H2.

Bugfixes

Options of the tray icon are missing after Agent switches to the offline mode.
Possible to have the both launcher and login window active when a relog is triggered.
An error occurs when importing a registry file that contains delete actions for non-existent registry values.

4.0.3412

Bugfixes

Changes to a filter on a deployment action aren't directly available for Agents.
Deployments ending with filtered actions after the last reboot action aren't creating server events.

4.0.3391

Bugfixes

macOS applications with symbolic links can break code signature with the "Install Mac App" and "Install uploaded Mac App" actions.

4.0.3360

Bugfixes

AVD connector incorrectly detects RDPW certificate changes.

4.0.3356

Bugfixes

Uploaded RDP file and Remote RDP actions can generate "Invalid connection file" message.
Permalink for the credential store pages can direct to the user credentials.

4.0.3349

Bugfixes

The progress bar of a Liquit Task in PowerShell is not disposed of after the task finishes.
AVD connector requires credentials while not needed with SSO.
Updating an existing IPP printer on Windows can cause a UserHost crash.
VMware connector stops synchronizing when an application has no icon.
The filter defined in the User Portal is incorrectly used in Offline mode.
Universal Agent can take a long time to display the workspace icons.

4.0.3328

Bugfixes

Uploaded icons with the Universal Agent can become corrupted.
HSTS headers are only sent for REST requests.
Icons in the previously specified start menu folder are not removed.
Universal Agent can be missing the username of stored credentials.

4.0.3314

Bugfixes

An application shortcut generated by the ShellAPI, when it is pinned to the icon, it can be that of another application
A package with a refresh workspace action can trigger a loop if it is also entitled to a refresh trigger event.
Entitlement synchronization options are available for some connectors which do not support synchronization.
IPv6 filter can generate errors.
Userhost can be closed even when the close option is set to false.
Setup store updates can cause a deadlock in the database.

4.0.3305

Bugfixes

Unable to launch package when the primary shortcut is disabled..
On macOS the dock icon can be shown even when it should be hidden.
Launcher is enabled while deployment mode is active on macOS.
A "System error" can occur when refreshing the Universal Agent.
Removed packages are shown as blank packages in deployments.
“Windows client” is not detected properly in the “Platform version” filter.
Actions in a deployment can be skipped after a reboot.
“Object reference not set” exception can be shown after configuring an invalid subnet.
Old system updates are not cleaned up.
Setup Store packages can trigger “Trying to modify Entity object which is in read-only state” error.

4.0.3264

Bugfixes

Unable to launch secondary shortcuts through ShellAPI when primary shortcut is disabled.
Liquit dock icon is visible when no windows are open on macOS.

4.0.3252

Bugfixes

Workspace icons with auto launch enabled are missing.
Launcher window is not displayed in taskbar for Universal Agent on Windows.

4.0.3251

Changes

Renamed Azure AD to Microsoft Entra ID (Azure AD).
Server status API now reports in the body if the 503 is caused by maintenance.
Support new macOS versions in filters.
AVD connector now recognizes changes in the RDPW certificate and sees it as an update.

Bugfixes

Okta connector can be created as push connector which isn’t supported.
Action sets order can be changed when applying update from Liquit Setup Store.
Triggers can be run with the wrong stage when assigning multiple stages of the same package in the Universal Agent.
Disabling the Launcher in the Universal Agent doesn’t work on macOS.
Unable to delete zone when zone certificate is set.
Launcher icon still visible when disabled in zone settings in the Universal Agent.
Removing a zone / domain certificate doesn’t update the webserver TLS bindings.
The Universal Agent will become unresponsive after pressing F5 or dropping a file on the launcher.

4.0.3227

Changes

Support longer timeout for systray icon while using a 3rd party Windows shell.

Bugfixes

Network credentials can fail when using UPN syntax.
Deployment does not continue after a reboot action in the Universal Agent.
Newly installed Liquit Workspace environments have the Workspace agent as default download instead of the Universal Agent.
ShellApi is unable to launch secondary shortcuts if the package is specified by name.
Support content tokens for portal integrations.
Images for smart icons can disappear within portal integrations.

4.0.3209

Bugfixes

Packages with removed entitlements could be started via ShellApi.
UserHost SysTray icon doesn't always show up.
Newly installed Liquit environment without TLS certificate doesn't work.
Universal Agent doesn't work on pre-Windows 10 devices. It displays a message about missing GetDpiForWindow.
Slow authentication through an LDAP Identity Source within large environments.
Action 'Delete Printer' does not work.
Workspace Agent keeps user auto launch enabled after disabling.
Incorrect size of multiple prompts when using different DPI settings in the Universal Agent.
SetupStore connect doesn't show correct error message if there are connectivity issues.
Citrix integration doesn't close the Liquit Browser popup after completion (Also it requires the latest version of the Citrix StoreFront integration script).

4.0.3175

Bugfixes

Double clicking on a resource in the connector resource overview does not show the creation wizard.
Condition set stage is wrongly translated in the Workspace connector.

4.0.3174

Bugfixes

Some documentation links are blocked by the Content Security Policy.
Configured connector publishing stage is not used when creating a new resource.
Unable to select Install dependency in the Microsoft RDS connector.
Universal Agent tray icon remains enabled after disabling it in the agent configuration.
Auto start is not working in the Universal Agent deployment dialog.
Universal Agent Launcher position and size are not saved during logoff / reboot.
Condition sets are not correctly synchronized by the Workspace connector.
SCCM connector UI allows the synchronization method which is not supported.

4.0.3160

Changes

Filters MSI installed (version) support GUID’s wrapped in curly brackets.

Bugfixes

When a certificate is replaced, it isn’t updated by the webserver until restart.
Condition sets are not correctly synchronized by the Workspace connector.
Not all files of the Universal Agent are digitally signed.

4.0.3154

Bugfixes

Some anti-virus scanners block the installation of the Universal Agent because of an unsigned DLL.
Install (uploaded) font action can overwrite an existing font if the filenames are the same with the Universal Agent.
Install (uploaded) font action can result in a duplicate font if it already exists with a different filename with the Universal Agent.

4.0.3139

Bugfixes

Universal Agent registration fails until reboot, if the device is deleted from the server.
Universal Agent registration can fail after Sysprep.
Content Security Policy blocks the Power BI dashboard.
Satellite server remote update can produce a timeout error.
Package icons are not updated correctly in detailed view.

4.0.3126

Changes

Added PowerShell CmdLet Copy-LiquitDeployment.

Bugfixes

Universal Agent dialog pop-up can be too narrow.

4.0.3112

Changes

Content security policies are stricter.
Improved webserver performance under heavy load.
Improved DC Location logic for the Active Directory Identity Source.
Improved retry logic for content downloading within the Universal Agent.

Bugfixes

Workspace connector can give a permission denied error.
Timeout on uploading content through the Universal Agent after 100 seconds.
Universal Agent doesn't perform an automated refresh when device-based registration is enabled.
Universal Agent tray icon stays enabled while it's disabled within the configuration.
When closing the Universal Agent launcher on macOS, a WebKit instance stays active.
Universal Agent dialogs have wrong dimensions.
Connector with scheduled task can result in bad request message.
Arrow keys (up/down) do not work in multiline text fields.
Connector synchronization profile doesn't respect static values on new package creation.

4.0.3090

Changes

ShellAPI will only log task progress changes instead of repeating the same status.

Bugfixes

Not all registration settings are migrated from the Workspace Agent to the Universal Agent.
Images for smart icons can disappear within portal integrations when not using an agent.
Unable to open LDAP contact that has a manager defined.
LDAP contact photos will not be displayed when photos are enabled in Query mode.
Invalid input type for parameter -ConditionSet for PowerShell cmdlet Set-LiquitEntityFilter.
Null reference error can occur while doing a device deployment started through the Bootstrapper from Intune.

4.0.3080

Changes

Remove previously downloaded update after installation of the latest server update.

Bugfixes

Random RPC Timeout / null reference errors can occur between the Universal Agent and the UserHost.
Drag and drop can produce an invalid path for the Universal Agent.

4.0.3069

Changes

Implemented Private Network Access RFC for browser access to the local agent.
Implemented file drag & drop support for the Windows Universal Agent.
Number of purchased licenses are now always shown in the license usage report.

Bugfixes

System Updates sometimes incorrectly reports that no update is queued for a server.
Agent Settings within the management page can have a blank selection.
Unable to move actions within a new action set on a managed package.

4.0.3056

Changes

Improved refresh performance of the Universal Agent.

Bugfixes

Action Uploaded RDP file without agent result in wrong file extension.
The title of a package is double escaped in an error dialog.
Team and personal packages can stay disabled when located on a network path.
Manage zone button in zone overview isn't working.
Condition Set filters might not work when configured on action sets or actions.
Universal Agent refresh might fail on the server with 'System.ArgumentException: An item with the same key has already been added'.
Spanish translation for 'Category' is incorrect.
Creating package 'Install Mac App' through the wizard results in a launch action set instead of an install action set.

4.0.3041

Changes

Improved refresh performance for the Universal Agent.
Improved compatibility between the Universal Agent and devices running Windows 8.1 or lower.
Improved resume download in Universal Agent.

Bugfixes

Download button can have wrong icon alignment.
Missing team icons within the workspace when using the Universal Agent.
Condition sets don't work when using Workspace Agent 3.10.
Windows 10 platform detection filter fails for Workspace Agent 3.8 or older.
Universal Agent refresh can sometimes trigger 'System.InvalidOperationException'.
Manage zone option will always open the target zone with HTTP.
Agent Deployment can fail for some non-latin languages.
Deleting a non existing Azure blob can produce an error in the server log.
LDAP delta synchronization within large environments only fetches some of the users and groups.
Microsoft Store creates package filters that don’t allow ARM packages on ARM64 platforms.

4.0.3019

Changes

Option to get the packages entitled to a user or group through PowerShell.

Bugfixes

Satellite installer gives incorrect message about missing .NET framework.
Universal Agent opens applications in background with Windows 11 22H2.
Universal Agent automatic refresh triggers a load screen within the Launcher.
UserLogin and UserLogout events are not triggered at second login on the same device without a reboot.
Microsoft Store Connector can report an error when the selected package has a neutral architecture.
User logout will not trigger federated logouts like Azure AD.

4.0.2997

Bugfixes

The action ContentRdp isn't working.
LDAP Identity Source is unable to connect to a manual configured TLS server.

4.0.2992

Changes

Added support for SecurePassword to New-LiquitUser cmdlet.

Bugfixes

Creating a new zone in build 4.0.2989 produce a DAL error.
ShellAPI CmdLine option is being ignored.

4.0.2989

Bugfixes

After upgrading to 4.0, the Universal Agent is made the default download within the Workspace portal.
Newly created LOCAL users need a password reset before able to login.

4.0.2984

Bugfixes

4.0.2982

Universal Agent for Windows and macOS

The Liquit Universal Agent brings Windows and macOS into a single workflow. The result: Transparent and seamless application management for all applications across thousands of users demanding countless configurations. The IT team continues to manage all applications for macOS and Windows at the same time with our Universal Agent. End-users still access their applications seamlessly and without disruption.

Can be installed on modern macOS and Windows devices
Supports ARM (for macOS) and Intel devices
Install and launch native applications for macOS and Windows
Filter and context cross platform

Universal Agent enhancements

In addition to enabling multi-platform support, we are introducing a substantial number of other functionalities that will prove of immense value.

Override agent configuration settings from the zone

Make changes to the agent from the zone. This feature lets you override agent settings per user, group, or context.

Intelligent content distribution

Only content will be downloaded for packages based on filter prediction (platform and device filters) and if actions or filters are supported for the current platform.

Download resume support for content

A download will not get aborted after the connection is lost, but continues where it was aborted, reducing both waiting time and bandwidth consumption.

Certificate based device registration

Certificate based device authentication

The agent generates a unique agent authentication certificate. After the device registration, the agent uses the generated certificate for authentication. As a result, the agent.json configuration does not need to keep the registration settings which in turn is one less credential that can be compromised.

Connectors

Connectors are important to deliver application management without boundaries. You make the technology choices; we help you manage applications. With Liquit Workspace 4.0 we are introducing three new Connectors.

Microsoft Store Connector

This brand-new Connector imports applications directly from the Microsoft Store into Liquit Workspace. This Connector grants you access to applications only available via the Windows Store and gives the possibility to patch these applications automatically.

VMware Horizon Connector

The VMware Horizon platform runs and delivers virtual desktops and apps across the hybrid cloud to simplify, automate, and secure desktop and app management for administrators while supplying a consistent experience across devices and locations for users. The Liquit Workspace VMware Horizon Connector takes anywhere, anytime access to virtual desktops and apps to another level by making it easy to import all your WAVD applications and publish them in a Liquit environment next to any other type of application or platform like Citrix, Microsoft 365, Nutanix, etc. Our Smart Icons give your end -users the control they demand to launch an application or service with technology connections and contextual needs and security managed transparently in the background.

Nutanix Frame Connector

Liquit Workspace adds more functionality to Frame, the Desktop-as-a-Service solution by Nutanix. The Liquit Connector makes your enterprise app experience transparent for end-users while being fast and flexible for IT. Admins get automation control over importing remote applications and desktops.

More connector improvements

Branch column in resources view for Setup Store Connector

We have made improvements to the resources view for the Setup Store Connector. The new view helps to show the correct branch easier (for example x86 or x64 architecture).

Request Setup for the Setup Store

When a setup is not available in the Liquit Setup Store, you can request it via the Liquit Setup Store directly. Simply click the ‘Request product’ button under the Setup Store resources and you will be able to submit your application to the Liquit Setup Store team.

RDS Connector supports remote desktops

Full Desktop package support has been added to the Microsoft RDS Connector, you can optionally import packages that connect to the RDS farm with a full desktop RDP session.

Connector entitlement identity matching using properties

Connectors that support entitlement synchronization now have the possibility to match identities across different identity sources based on matching attributes like name or display name fields. For example, this lets a VMware Horizon environment that is connected to Active Directory to synchronize entitlements in Liquit that is configured against Azure AD.

Categories and tags creation/assignment support for Connectors

Import categories and tags from the Liquit Setup Store and Liquit Workspace Connectors. Categories and tags defined on packages in the source environment will be created in the local environment.

Condition Sets

Reuse your globally defined filter sets in Packages and Deployments. With the help of Condition Sets you can create common scenarios globally and use them repeatedly within your packages. Saving valuable time.

Dynamic Device Collections

In addition to static device collections, in the new release it is possible to create device collections based on filters. This allows you to easily create device collections based on common characteristics like platform version. As a result, these lists do not have to be manually kept.

Insight in Liquit license usage

Do you want to know how the billable users are calculated? This new feature supplies more insight into license usage.

New Filters

Filter galore. We are sure that at least one of them will make your workday easier.

MSI Installed version filter

In addition to checking whether a MSI is used to install a specific application, you can also check if the version of the MSI corresponds with the desired version.

Printer exists filter

A filter to check if a printer exists on a system.

Agent type filter

This new filter can detect if the old agent is still running, making it easier to move people to the Liquit Universal Agent.

Network Ping filter

Ping a remote address to check if a network address is reachable for an agent.

URL scheme exists filter Check if a URL schema is available (i.e., excel://)

You can use this to verify if an application need installing before you are able to use the URL schema.

Liquit variable exists and value filters

A set of filters that help you to check whether Liquit variables are defined and/or compare the value to a static value or contents of other Liquit variables.

Agent offline mode filter

Check to see if the local agent is running in offline mode and does not have any connectivity with the Liquit servers.

Package installed filter

new filter that detects if a package is installed on the local device.

Package distributed filter

With this filter the system detects if a package is distributed on the local device.

Package availability filter

This filter detects if a package is available based on the dependent package’s filters.

New Actions

Stop current action set

With the ‘Skip action' you can skip the current action set, action sets or the entire package. This is useful in combination with filters to easily stop further execution if criteria are not met, removing the need to apply the same filters on every action.

Delete printer

Delete an existing printer installed on the local device.

IPP (Internet Printing Protocol) printer support

The ‘Connect printer’ action has been extended with new options. For example, it is possible to connect IPP printers via Liquit Workspace.

Identity Source

LDAP Delta Synchronization support

Liquit Workspace supports synchronization of changes made in an Active Directory identity source, resulting in shorter waiting times.

Domain Controller discovery

Simplify the configuration of Active Directory by only needing to specify the domain name. LDAP servers will be detected using the DC Locator process, keeping respect to Active Directory sites and use the closest LDAP servers for each Liquit server.

PowerShell

In addition to adding support for the new features in 4.0, we have made other changes that are worth mentioning.

PowerShell Module as NuGet

Use the PowerShell NuGet distribution framework to download and install the latest Liquit PowerShell module.

Search and Name parameters for PowerShell get cmdlets

Search for objects by name or other text fields.

Setting server state/info via PowerShell cmdlet: Set-LiquitServer cmdlet to set Server properties, like maintenance state and description.

Other Notable Features

This new release is loaded with so many new features. These may seem small but could prove helpful to you and your organization.

Native icons on hidden entitlements/multi-platform

Adding further flexibility on how you present the workspace to the end-user. For example, you can deploy a Smart Icon to the start menu and hide it from the user in the workspace.

Agent option to override the packageTempDir

We offer the ability to specify an alternative location for temporary package installation files from the agent configuration.

Azure AD authentication for Azure SQL database

Authenticate to a SQL database with Azure AD credentials.

Agent download within introduction

For inexperienced users, we have added the option to download the agent following the introduction.

Support variables within Prompt User action

Take advantage of the use of variables to display a tailored re-usable message to users, groups, or contexts.

Support variables in WMI filters

Take advantage of variables in WMI filters.

Auto-fill file size and file version

File size and file version will now be filled automatically based on the selected file.

High Contrast Theme

Say hello to the High Contrast Theme in Liquit Workspace. A brand-new feature that uses a limited color palette with contrasting colors to make the interface easier to use. End-users with photosensitivity or contrast issues as well as people in low-light environments get the major benefit from using the high contrast mode on their computer.

Support for multiple domains/virtual hosts for a single zone

Support multiple domain names to access a single zone. Useful if company undergoes a name change to allow a rollout migration or if multiple organizations connect to the same zone, it allows to customize the branding per domain using contexts while still delivering the same applications from a single zone.

Redirect URI support for OAuth2 authentication

Use a customized redirect URL to be configured and sent to the OAuth2 endpoint, an extra option has been introduced to send the endpoint a redirect URL based on the incoming domain a user comes from. This feature is needed to properly support Azure AD in combination with multiple domains.

Revert user settings to default

Reset users to the default settings, defined by either admin or the system. After changing the theme, the user will be asked if they want to reset their settings to default.

Direct Access CDN for Azure Blob Storage

Distribute content globally using a CDN provider. This permits web browser/agent to download content directly from Azure Blob Storage near the local device. Which improves content distribution times and increases scalability.

Variable support in transforming values for identity providers

Use variables in the rewrite rules for identity providers, for example you can transform an Azure AD attribute to a compatible attribute for Active Directory.

Obsolete agent bootstrapper

It is no longer possible to select the ‘Preconfigured Executable’ to download the agent from the Liquit portal, when this has been configured before an upgrade, this feature will still be available if it is configured before.

In the next release of Liquit Workspace the ‘preconfigured executable’ will become entirely unavailable. All customers are recommended to switch to the ‘Windows Installer’ method. Or use the new bootstrapper with more features available at: https://liquit.com/support/#downloads

Way to hide unused platform targets for packages

Possibility to hide unused platform targets for packages to hide Actions and filters that are exclusive for a platform not in use within the organization.

Improved disabled package error codes and messages

An enhancement has been made to make it easier for an administrator to find and fix problems in packaging errors.

Support for group display names as IDP attribute

Next to the ID of groups, the display names can be used as attribute value.

Improved ShellAPI

Ability to specify packages by name, built-in help (--help) and new actions and options.

New bootstrapper version

Support for the Windows Universal Agent, new possibility to override the zone in the agent configuration and the ability to add custom MSI properties.

Portal Integrations

Microsoft Viva Integration: Microsoft Viva is an employee experience platform that brings together communications, knowledge, learning, resources, and insights. This new release offers integration with Microsoft Viva connections offering a full workspace experience within your intranet.