Cloud Extender 3.001.300 Release Notes

List of features and fixes that are released as a part of Cloud Extender® 3.001.300.

Support for Microsoft’s strong certificate-mapping enforcement

Microsoft now requires that all certificates that are used for authentication must be linked to a specific user or computer object in Microsoft Active Directory. To meet this requirement, you must redeploy identity certificates with the user's objectSid in the URI field under Subject Alternative Name (SAN).

IBM® MaaS360® supports Microsoft’s enforcement of strong certificate mapping on Windows domain controllers, effective September 2025. This enforcement strengthens authentication security and ensures that certificate infrastructure aligns with Microsoft’s updated requirements to avoid potential disruptions.

For more information, see Configuring Cloud Extender for Microsoft’s strong certificate-mapping enforcement

Upgrading the Cloud Extender MaaS360 VPN Server

In this release, the Cloud Extender MaaS360 VPN module version is upgraded to 3.001.300. The newer VPN server upgrade includes security enhancements, performance improvements, and support for the TLS 1.3 standard. These updates follow modern practices to help ensure secure, reliable, and efficient communication. For more information, see Upgrading the Cloud Extender MaaS360 VPN Server.

Improved reliability for RealtimeActionService after network drops

Resolved a reliability issue where the Cloud Extender RealtimeActionService failed to reestablish a connection with the portal after a network disruption. This prevented the service from receiving and processing real-time actions, potentially impacting policy enforcement, and device compliance.

Minor updates

Following are the enhancements and fixes as a part of the Cloud Extender 3.001.300 release.
  • Expanded Date Formats Support in User Visibility Module

    The User Visibility module previously supported only the MM/DD/YYYY format for date-type custom attributes by using LDAP. This release introduces support for other formats:

    • Filetime
    • Generalized Time
    • Coordinated Universal Time (UTC)
  • Supported Certificate Operations through WinHTTP

    Cloud Extender now consistently uses WinHTTP for handling certificates when the related setting is enabled.

  • Improved MQTT connectivity check

    MQTT connectivity check has been made more robust to better handle intermittent network conditions.

Defect fixes

Defect Summary

47586

 The IBM Traveler module in Cloud Extender is now called HCL Traveler.