12.0.4 Updated Release Notes: Windows Agents (build 4258)

Release Schedule

Verify Privilege Manager Cloud Release: June 28, 2025

Verify Privilege Manager On-Premises Release Date: August 12, 2025

Affected Versions

Affected Versions: Windows Agent Version 12.0.4258 on Windows 11 25H2

This update addresses:

  • UAC intercept enhancement to support UWP applications and accessibility applications. [589051]

  • Ensuring two memory allocations are deallocated from our driver to address a memory utilization issue. [650324]

  • Resolution of a deadlock issue encountered when a policy with the Restrict File Dialogs action was enforced on a workstation with a SentinelOne agent. [670600]

  • Launching white-listed accessibility applications (e.g., magnify.exe, msra.exe) now follows Microsoft's default UAC workflow instead of mistakenly being handled as elevation requests. [553990]

Do not install the agent on a workstation running a Windows 11 build newer than 10.0.26200.x.

Do not install the IBM Security Verify Privilege Manager agents on Windows workstations running OS build versions 26200.7392 or 26100.7392. The IBM Security team is investigating an emergent issue with these Windows versions.

Windows Agent Software

12.0.4258 Bundled Verify Privilege Manager Agent Installer

12.0.4258 IBM Security Agent (x64)

12.0.4258 IBM Security Agent (x86)

12.0.4258 Application Control Agent (x64)

12.0.4258 Application Control Agent (x86)

12.0.4258 Local Security Solution Agent (x64)

12.0.4258 Local Security Solution Agent (x86)

12.0.4258 Bundled Verify Privilege Manager Core and Directory Services Agent

12.0.4035 Directory Services Agent (x64)

macOS Agent

12.0.4.134 Verify Privilege Manager macOS Agent (macOS Big Sur 11 and later)

Installation Notes

  • Starting with builds 11.4.3235 & 12.0.1016, and going forward with all newer builds, there is a dependency on a PowerShell script being executed by the MSI installer package for the application control agent. The script itself is signed with our code signing certificate so it will meet the execution policy requirements for signed scripts, but if all script execution has been disabled, then it will cause the installer to fail.

  • When upgrading Verify Privilege Manager to a newer version, IBM Security recommends upgrading the Directory Services agent such that both are running on the same release version.

  • Verify Privilege Manager exclusively supports operating systems (OS) that have not reached their official End of Support. For optimal performance and compatibility, it is recommended to utilize Verify Privilege Manager on a supported and actively maintained OS.

  • IBM Security recommends as a best practice to create system restore points prior to doing system changes such as patches.

    IBM Security supports the use of software versions up to a year prior to the current version. You can find previous versions of the documentation here.