ThinManager Release Notes
ThinManager
- 14.1 SP1
- ThinManager [Release: 9]- Fixed certificate dialog check to see if certificate is selected
- ThinServer [Release: 9]- Added additional logging to synchronization process
- Improved tracking of session data so that session info can be maintained after session is disconnected
- Fixed delay start Display Clients not functioning as expected
- Fixed new events not being displayed in ThinManager after creation
- Fixed HTTPS server not restarting when the server certificate is updated - 14.1
- ThinManager [Release: 3480]- Added support for Factory Talk Optix container image and application
- Added display client option to specify container image version
- Added module filtering based on terminal model features
- Updated certificate management to use the Windows certificate store
- Improved startup performance
- Fixed editing of a display client from the terminal configuration tree - ThinServer [Release: 3480]- Added override endpoints to API
- Additional logging for AD password rotation
- Added registry setting for thread pool size
- Improved database performance for systems with extensive use of overrides
- Fixed handling of AD user groups with an invalid SID
- Fixed VNC and container host POST endpoints
- Fixed logging for thread pool
- Fixed handling of editing events - TermCap2 [Release: 14.1.143]
- ThinManager Web [Release: ]- Updated terminal shadow tab to scale session to window
- Updated terminal statistics charts - 14.0 SP3
- ThinManager [Release: 38]- Improved startup performance
- Fixed editing of display client from terminal tree - ThinServer [Release: 38]- Added additional logging for AD password changes
- Improved performance for very large configurations in certain cases
- Updated backup database API endpoints to prevent saving outside of the ThinManager ProgramData directory, only consumes filename instead of file path.
- Updated file deletion to check if file is owned by the ThinServer service account or administrators group before deleting
- Fixed VNC and container host POST endpoint not saving correctly
- Fixed new events not being displayed in ThinManager after creation - 14.0 SP2
- ThinManager [Release: 14002]- Fixed Display Server tree for virtual screen and container host display clients
- Fixed validation for display names
- Fixed saving of login methods and hotkeys during terminal or user creation
- Fixed locking and unlocking of event objects - ThinServer [Release: 14002]- Fixed CVE-2025-3617 privilege escalation
- Fixed CVE-2025-3618 ThinServer crash
- Fixed handling of camera URLs with special characters
- Fixed user delay start setting
- Fixed hotkey configuration
- Fixed password rotation for overridden credentials - TermCap2 [Release: 14.1.134]
- 14.0 SP1
- ThinManager [Release: 14001]- Fixed saving of new events
- Fixed memory leak in AD sync account dialog - ThinServer [Release: 14001]- Fixed CVE-2024-10386 unauthenticated SQL
- Fixed CVE-2024-10387 ThinServer crash
- Fixed new events not being run until restarting service
- Fixed display client override credentials not being saved correctly from terminal endpoint
- Fixed missing auth requirements and methods from terminal and user endpoint
- Fixed missing hotkey and permissions from terminal endpoint
- Fixed system config endpoint failing for most updates
- Fixed updates run on replica server endpoints not being replicated
- Fixed issue with API keys not being replicated - TermCap2 [Release: 14.0.118]
- ThinManager Web [Release: ]- Fixed startup error related to required SIMD support
- 14.0
- ThinManager [Release: 14000]- Added initial ThinManager web user interface
- Added internally generated ThinManager Events
- Added settings to disable ThinManager Events
- Added option for maximum session time for ThinManager Users
- Added option to enable/disable VNC clipboard
- Updated wizards to be completed if AD users cannot be verified
- Updated wizards to be completed without credentials if they would not be used
- Updated VLC libraries
- Fixed icon displayed for containers with an override - ThinServer [Release: 14000]- Added support for Syslog RFC5424 format
- Added https server config file for advanced configuration
- Added DisableDeviceAuthentication registry entry
- Updated API endpoints and data models to better support the web UI
- Updated FTA client library version to 7.14.00.0004
- Fixed license permission enforcement for FTA licenses
- Fixed user synchronization for multiple OUs when moving users between Ous
- Fixed EnableAPI registry setting for synchronized systems
- Fixed synchronization of firmware in some circumstances where package exists only on one ThinServer - TermCap2 [Release: 14.0.116]
- Installer [Release: ]- Added support for InstallDrive and InstallLocation command line properties
- Added option to disable device authentication
- Updated to FTAM 5.01.01 - 13.2 SP5
- ThinManager [Release: 33]
- ThinServer [Release: 33]- Fixed VNC and container host POST endpoint not saving correctly
- Updated backup database API endpoints to prevent saving outside of the ThinManager ProgramData directory, only consumes filename instead of file path.
- Updated file deletion to check if file is owned by the ThinServer service account or administrators group before deleting - 13.2 SP4
- ThinManager [Release: 13074]
- ThinServer [Release: 13074]- Fixed CVE-2025-3618 ThinServer crash
- Fixed handling of camera URLs with special characters - TermCap2 [Release: 14.1.134]
- 13.2 SP3
- ThinManager [Release: 13073]
- ThinServer [Release: 13073]- Fixed CVE-2024-10386 unauthenticated SQL
- Fixed CVE-2024-10387 ThinServer crash - TermCap2 [Release: 14.0.118]
- 13.2 SP2
- ThinManager [Release: 13072]- Fixed retry when setting terminal login for AD user
- Fixed potential crash during tree updates when selected terminal is restarted
- Fixed potential freeze in terminal override dialog - ThinServer [Release: 13072]- Fixed CVE-2024-7986 path traversal read
- Fixed CVE 2024-7987 path traversal write
- Fixed CVE 2024-7988 remote code execution
- Fixed multiple Organizational Unit AD synchronization
- Fixed container files not being cleaned up if installation fails
- Fixed licensing permissions for FTA licensing mode
- Fixed API not responding when requesting an endpoint returning system schedule data for certain configurations
- Fixed potential crash when starting/stopping HTTPS server multiple times in quick succession - TermCap2 [Release: 14.0.116]
- 13.2 SP1
- ThinManager [Release: 13071]- Updated terminal wizard to allow finish without credentials if the credentials are not needed
- Fixed connection status of a terminal hosted container
- Fixed display after logging is disabled
- Fixed icon of a container display client with overrides - ThinServer [Release: 13071]- Updated to legacy boot loader 2.6, fixes IP address display of the current ThinManager server
- Fixed error in firmware synchronization
- Fixed display client override credentials not being saved correctly when set via API
- Fixed API documentation for /system/licensing/tma/license POST endpoint
- Fixed API documentation for /system/licensing/fta/licenses POST endpoint
- Fixed system/licensing/mode endpoints not functioning as expected for some configurations
- Fixed crash when requesting system config endpoint for configurations with non-system events defined
- Fixed potential crash during HTTP server restart - TermCap2 [Release: 13.2.100]
- 13.2
- ThinManager [Release: 13070]- Added Device Authentication (See note below)
- Added option to provide a certificate to authenticate synchronization connection
- Added option to specify whether signed or unsigned containers are allowed
- Added preload container images setting
- Added logon timeout option for ThinManager User logins
- Added RDS server core count to terminal server properties tab
- Added login requirements and methods to user configuration tab
- Fixed API key expiration date not displaying properly for dates after 2038
- Fixed group not being automatically populated when creating a new item within a group
- Fixed hotkey group setting when no hotkeys are defined
- Fixed automatic refreshing of the terminal summary tab
- Fixed dialog to reflect inheritance of container settings - ThinServer [Release: 13070]- Added support for firmware packages that support Secure Boot
- Added support for firmware packages that support wireless thin clients
- Added additional logging for TFTP failures due to packet size
- Added additional logging when ThinServer can't write to the registry
- Updated logging for HTTPS server
- Updated HTTPS timeouts
- Updated default Active Directory synchronization interval
- Updated the max number of concurrent connections to HTTPS server
- Fixed copying Display Client having the wrong parent
- Fixed database password handling for scheduled backups
- Fixed PXE server DHCP ARP check performance issue
- Fixed URL encoding issue for certain API requests
- Fixed preloaded container images being sent twice in certain configurations
- Fixed terminal restart required icon erroneously on terminal after terminal replacement - TermCap2 [Release: 13.2.100]
- Package 9.3 [Release: 13.2.0-9.3]
- Package 9.2 [Release: 13.2.0-9.2]
- Package 8.2 [Release: 13.2.0-8.2]
- Package 5 [Release: 5.0.5]
- 13.1 SP6
- ThinManager [Release: 40]
- ThinServer [Release: 40]- Fixed VNC and container host POST endpoint not saving correctly
- Updated backup database API endpoints to prevent saving outside of the ThinManager ProgramData directory, only consumes filename instead of file path.
- Updated file deletion to check if file is owned by the ThinServer service account or administrators group before deleting - 13.1 SP5
- ThinManager [Release: 13055]
- ThinServer [Release: 13055]- CVE-2025-3618 ThinServer crash
- TermCap2 [Release: 14.1.134]
- 13.1 SP4
- ThinManager [Release: 13054]
- ThinServer [Release: 13054]- Fixed CVE-2024-10386 unauthenticated SQL
- Fixed CVE-2024-10387 ThinServer crash - TermCap2 [Release: 14.0.118]
- 13.1 SP3
- ThinManager [Release: 13053]- Add option to specify TLS certificate to use for synchronization
- ThinServer [Release: 13053]- Fixed CVE-2024-7986 path traversal read
- Fixed CVE 2024-7987 path traversal write
- Fixed CVE 2024-7988 remote code execution
- Fixed multiple Organizational Unit AD synchronization
- Fixed container files not being cleaned up if installation fails
- Fixed licensing permissions for FTA licensing mode
- Fixed API not responding when requesting an endpoint returning system schedule data for certain configurations
- Fixed potential crash when starting/stopping HTTPS server multiple times in quick succession - TermCap2 [Release: 14.0.116]
- 13.1 SP2
- ThinManager [Release: 13052]- Fixed connection status of a terminal hosted container
- Fixed camera URL not being escaped correctly - ThinServer [Release: 13052]- Updated to legacy boot loader 2.6, fixes IP address display of the current ThinManager server
- Fixed several log entries
- Fixed reading of the AD sync time when changed in the UI
- Fixed error in firmware synchronization
- Fixed permission check for some event tables
- Fixed terminal configuration being unintentionally flagged as changed for certain video mode changes
- Fixed display client override credentials not being saved correctly when set via API
- Fixed API documentation for /system/licensing/tma/license POST endpoint
- Fixed API documentation for /system/licensing/fta/licenses POST endpoint
- Fixed system/licensing/mode endpoints not functioning as expected for some configurations
- Fixed crash when requesting system config endpoint for configurations with non-system events defined
- Fixed potential crash during HTTP server restart - TermCap2 [Release: 13.2.100]
- 13.1 SP1
- ThinManager [Release: 13051]- Added login requirements and login methods to the terminal configuration tab
- Fixed potential crash during item deletion
- Fixed terminal summary tab not refreshing automatically - ThinServer [Release: 13051]- Fixed CVE-2023-2913 API path traversal
- Fixed CVE-2023-2914 buffer overflow
- Fixed CVE-2023-2915 file deletion
- Fixed CVE-2023-2917 file upload
- Fixed potential crash during synchronization
- Fixed resource leak in terminal monitor connection
- Fixed copying a Display Client to be in the same group as the original
- Fixed resource leak in TFTP error handling
- Fixed deletion of ThinManager Events not removing all relevant data
- Fixed database password handling for certain workflows - TermCap2 [Release: 13.1.91]
- 13.1
- ThinManager [Release: 13050]- Added e-signature process
- Added indication of signed container images
- Added event sub-type to support Logix PinPoint events - ThinServer [Release: 13050]- Added support for HTTPS boot
- Added API properties for package bootloader, disabling TFTP, and event sub-type
- Updated database restore to include DHCP leases
- Updated HTTPS server supported cipher list
- Updated FTA client version to 7.11
- Updated Docker manager to ignore non-ThinManager container images
- Improved logging for biometric database
- Fixed high memory utilization when transferring container images
- Fixed HTTPS server allowing TLS negotiation below 1.2
- Fixed crash when HTTPS server is unable to bind to port at startup
- Fixed terminal status API endpoint always returning down
- Fixed memory leak related to caching of bootloader
- Fixed restoring biometric database backup with blank password
- Fixed issue with display names that prevented legacy firmware from getting a configuration
- Fixed crash when loading an unknown non-ThinManager container image
- Fixed boot loop for certain client configurations using package 9.2 or 9.3
- Fixed video module download error for legacy thin clients - TermCap2 [Release: 13.1.89]
- Package 9.3 [Release: 13.1.0-9.3]
- Package 9.2 [Release: 13.1.0-9.2]
- Package 8.2 [Release: 13.1.0-8.2]
- Package 5 [Release: 5.0.5]
- 13.0 SP8
- ThinManager [Release: 69]
- ThinServer [Release: 69]- Fixed VNC and container host POST endpoint not saving correctly
- Updated backup database API endpoints to prevent saving outside of the ThinManager ProgramData directory, only consumes filename instead of file path.
- Updated file deletion to check if file is owned by the ThinServer service account or administrators group before deleting - 13.0 SP7
- ThinManager [Release: 13007]
- ThinServer [Release: 13007]- CVE-2025-3618 ThinServer crash
- TermCap2 [Release: 14.1.134]
- 13.0 SP6
- ThinManager [Release: 13006]
- ThinServer [Release: 13006]- Fixed CVE-2024-10386 unauthenticated SQL
- Fixed CVE-2024-10387 ThinServer crash - TermCap2 [Release: 14.0.118]
- 13.0 SP5
- ThinManager [Release: 13005]
- ThinServer [Release: 13005]- Fixed CVE-2024-7986 path traversal read
- Fixed CVE 2024-7987 path traversal write
- Fixed CVE 2024-7988 remote code execution
- Fixed multiple Organizational Unit AD synchronization
- Fixed container files not being cleaned up if installation fails
- Fixed licensing permissions for FTA licensing mode
- Fixed API not responding when requesting an endpoint returning system schedule data for certain configurations
- Fixed potential crash when starting/stopping HTTPS server multiple times in quick succession - TermCap2 [Release: 14.0.116]
- 13.0 SP4
- ThinManager [Release: 13004]
- ThinServer [Release: 13004]- Updated to legacy boot loader 2.6, fixes IP address display of the current ThinManager server
- Fixed several log entries
- Fixed error in firmware synchronization
- Fixed permission check for some event tables
- Fixed display client override credentials not being saved correctly when set via API
- Fixed API documentation for /system/licensing/tma/license POST endpoint
- Fixed API documentation for /system/licensing/fta/licenses POST endpoint
- Fixed system/licensing/mode endpoints not functioning as expected for some configurations
- Fixed crash when requesting system config endpoint for configurations with non-system events defined
- Fixed potential crash during HTTP server restart - TermCap2 [Release: 13.2.100]
- 13.0 SP3
- ThinManager [Release: 13003]- Fixed potential crash during item deletion
- ThinServer [Release: 13003]- Fixed CVE-2023-2913 API path traversal
- Fixed CVE-2023-2914 buffer overflow
- Fixed CVE-2023-2915 file deletion
- Fixed CVE-2023-2917 file upload
- Fixed potential crash during synchronization
- Fixed resource leak in terminal monitor connection
- Fixed copying a Display Client to be in the same group as the original - TermCap2 [Release: 13.1.91]
- 13.0 SP2
- ThinManager [Release: 13002]- Fixed system config schedule not displaying filename field
- Fixed login methods and login requirements inheritance
- Fixed login methods storage during terminal creation
- Fixed terminal summary tab not always auto-refreshing
- Fixed hotkey inheritance - ThinServer [Release: 13002]- Fixed CVE 2023-27855 ThinServer Path Traversal Upload
- Fixed CVE 2023-27856 ThinServer Path Traversal Download
- Fixed CVE 2023-27857 ThinServer Heap-Based Buffer Overflow
- Fixed DHCP Leases not being included in database restores
- Fixed MultiMonitor integrity check
- Fixed memory leak during file replacement in file cache
- Fixed manual database password change always failing
- Fixed HTTPS server allowing negotiation below TLS1.2
- Fixed terminal config that caused legacy firmware packages to request a video module that does not exist
- Fixed Display Client configuration for legacy firmware packages
- Fixed handling usernames with apostrophes
- Re-write synchronization check algorithm - TermCap2 [Release: 13.0.89]
- 13.0 SP1
- ThinManager [Release: 13001]- Updated Display Client config tab to include delayed start until user present property
- ThinServer [Release: 13001]- Added log message when DCOMAuthLevel registry value is set too low
- Added IgnoreDCOMAuthLevel registry value
- Improved startup process when current database password is unknown
- Updated max database cache size to improve performance for very large configurations
- Updated event permissions to be part of the Administrators group
- Updated HTTPS server response time limit to better support larger file transfers
- Updated HTTPS server to save self-signed certificate to reuse when user supplied certificate is present
- Updated HTTPS server self-signed certificate to include subject alternative names for localhost
- Updated containers to use the client hostname
- Fixed CVE-2022-38742 ThinServer Heap-Based Overflow
- Fixed command line options not being sent for user and location Display Clients
- Fixed terminal commands issued through the API being case-sensitive
- Fixed change to Display Client event when the Display Client has a display name
- Fixed potential deadlock in container startup
- Fixed firmware package backup process
- Fixed crash related to HTTPS server startup during synchronization - TermCap2 [Release: 13.0.74]
- 13.0
- ThinManager [Release: 13000]- Added event-based content system
- Added REST API
- Added option to specify RDP port range for container hosts
- Added predefined layouts for virtual screen display clients
- Added method to save cookies from Chrome containers
- Updated help format to HTML-based context sensitive - ThinServer [Release: 13000]- Added support for specifying multi-monitor setup at group
- Improved licensing error messages sent to ThinManager
- Updated creating custom variable from ActiveX as hidden unless specified
- Fixed calculation of virtual screen resolution
- Fixed "set keyboard focus to a screen" hotkey
- Fixed DHCP Leases not being included in database restores. - TermCap2 [Release: 13.0.63]
- Package 9.3 [Release: 13.0.0-9.3]
- Package 9.2 [Release: 13.0.0-9.2]
- Package 8.2 [Release: 13.0.0-8.2]
- Package 5 [Release: 5.0.5]

