DESlock Limited	
DESlock+

Version 4.7.4 Change History
28th October 2014

This release adds Full Disk Encryption support for Windows 8 & Windows 8.1 systems. This includes Windows 8 certified hardware and systems configured in UEFI mode. Windows 7 x64 systems are also supported in UEFI mode.

4.7.4 Changes
 
 - (Full Disk Encryption) Support for UEFI - UEFI Version 2.1 or later is required. 
 - (Full Disk Encryption) Support for UEFI SecureBoot - UEFI version 2.3.1 Errata C or later is required.
 - (Full Disk Encryption) Support for UEFI boot entries with large index values.
 - (Full Disk Encryption) Pre-boot authentication updated. This may improve compatibility on some systems with RAID controllers, especially those using IRST Technology (Sometimes referred to as RAID-Ready)
 - (Full Disk Encryption) Safe Start - The ability to test the pre-boot authentication phase of DESlock+ has been added for both standalone and managed users. This tests the readiness of the system for DESlock+ Full Disk Encryption.
 - (Full Disk Encryption) The Windows user interface has been updated and improved.
 - Updater bug fix. Previously the updater could have re-prompted a number of times for the user to "Install Now" before actually running the upgrade installation.
- Installation & some components improved to clean up a few stray registry values during uninstallation.
 - Errors reported to users throughout DESlock+ have been improved so that when system errors are formatted and shown they use the language of the current DESlock+ installation, not the users UI language whenever possible.

4.6.4 Changes

 - After upgrading to v4.6.1 Removable Media Encryption on some Full Disk Encrypted external hard disk drives was not being detected properly and could prompt a user to format their drive.
 - Removable Media Encryption updated to immediately show GPT format external hard disk drives as unsupported rather than let the user attempt to start encryption.

4.6.1 Changes

- Refreshed Graphics.
- Separate installations in other languages are now available.

- (Standalone Clients Only) If a user erroneously enters a registration code for an Enterprise Server in the registration wizard an improved error message is now shown.
- The encryption of single files (.dlp) larger than 4GB is now blocked correctly, and will show an error if attempted.
- DESlock+ Go can now be closed by right-clicking on the encrypted volume in Windows Explorer and choosing Disconnect.
- Improved the Encryption Key Chooser dialog. The list of Encryption Keys will now reflect the addition/removal/rename of Encryption Keys in a Key-File immediately. This means the encryption process does not need not be interrupted to add or create new Encryption Keys.
- Right-clicking a file and using Encrypt & Send via an encrypted Archive was not working and has now been fixed.
- On 64bit platforms the list of Encryption Keys used on various dialogs may have caused a crash. Most commonly this was seen when using the 64bit version of Outlook 2013 during the process of encrypting an E-mail.
- Removable Media Encryption now supports SD Card readers connected to an SD Card Bus (File-based encryption only).
- When power is removed from a laptop Full Disk Encryption is paused. The warning message shown could have been displayed multiple times
- About Box & Registration wizard now use a consistent format for reporting the licence end date, this is now shown using the system locale.
- The auto-updater has had several improvements related to multi-language support. Clients will now collect updates in the language of the installed version, and support four digit 'language release' versions.
- Blocked the decryption of messages stored in HTML format when the "Read all standard mail as Plain Text" option is enabled in the Outlook Trust Center as it this could cause a crash. (Outlook 2013, 32bit version only).
- (Enterprise Clients only) Outlook add-in. Removed the “Request Encryption Key” button from the DESlock+ Ribbon on the open/new message window. (Outlook 2007 and up).
- Outlook Add-in. Accessing the options for the DESlock+ Outlook Add-in differs between each version of Outlook. To counter this we have added an Options button to the existing DESlock+ Ribbon on the new/open email message window (Outlook 2007 and up). We have also added a new Ribbon and the same Options button to the to the main application window. (Outlook 2010 and up).
- Outlook Add-in. Fixed issue where details of encryption algorithm displayed in the message information window could be corrupt.
- Outlook Add-in. Improvements to Window handling. Previously it was possible that dialogs shown could pop-behind other windows in some cases.
- Outlook 2003 Add-in. No longer supported on versions earlier than Outlook 2003 (for example, Outlook 2000)
- Attachment bundler (.deslock files). Fixed an issue where the 'save' option would sometimes fail.
- Fixed an issue where the Outlook Add-in would not automatically decrypt messages. (Outlook 2007 and up).
- (Enterprise Clients Only) Support for activation by using attachment from Enterprise Server activation email (Server support for this will be in a future version, of the Enterprise Server v2.5.0).

4.5.7 Changes

- (Enterprise Client Only) Supports clickable links for activation which will be available in DESlock+ Enterprise Server 2.5.
- (Standalone Clients Only) If a registered user applies a different registration code on a workstation the previous Key-File is now backed up.
- Some third-party software can corrupt the system disk drivers "Upperfilters" list leaving it in a corrupted state. The system will continue to work in this state. Prior to this release when DESlock+ added or removed itself from a corrupted list the workstation would bluescreen at startup after the next reboot. DESlock+ now fully rebuilds the list when altering it.
- (Enterprise Client Only) Fixed a problem where the Deployment Client could crash during activation.
- Fixed an issue where Outlook 2003 could crash when automatically decrypting messages.
- Fixed an issue where Outlook 2007/2010/2013 could crash when sending files via right-click in Windows explorer or when using the Share by Email functionality in Microsoft Word.
- Fixed an issue with Virtual Disk Manager on 64-bit Windows.
- Fixed a problem with hiding Encrypted Folders when logged out. Once created the Folder Properties page accessed via Explorer was not changing the state of the option
- (Enterprise Client Only) Fixed an issue where entering a long Managed Uninstall Password or Code could crash.
- (Enterprise Client Only) When the "Keep Settings With Key-File" Workstation Policy is enabled existing DESlock+ settings are now cleared before the import, previously they were merged.
- (Enterprise Client Only) Fixed an issue where updated Workstation Policy may not have been applied correctly. (Escaped characters would be duplicated).

4.5.3 Changes

- (Enterprise Client Only) Fixed a problem with the auto-updater.
- (Enterprise Client Only) Fixed Key-File node locking.

4.5.2 Changes

- (Enterprise Client Only) Fixed a problem with push install where a client would not reboot when the timed reboot option was selected.

4.5.1 Changes

- (Enterprise Client Only) Windows startup time when using Single Sign-On (SSO) improved.

4.5.0 Changes

- (Enterprise Client Only) Single Sign-On (SSO). Full Disk Encryption now includes the ability to link the Pre-Boot Login to the user's Windows Domain Login. This update can be remotely managed from Enterprise Server.
- (Enterprise Client Only) Removable Media Encryption (RME), Group Policy Suspension
The DESlock+ Administrator is now able to allow the user to suspend Removable Media Group Policy for a pre-defined period, after optionally re-entering their password. This update is designed to allow selected users to write plain data to removable media for a limited period of time, with the system reverting to a more Secure Policy automatically.
- (Enterprise Client Only) Support for changing Workstation Policy from an Enterprise Server.

- Outlook add-in,  DESlock+ for iOS compatibility. The DESlock+ Outlook add-in now includes an optional mode of operation which is seamlessly compatible with the upcoming iOS App for Encrypted Email, Files and Attachments.

 - Simplified Licensing for unmanaged users.  The DESlock+ licensing system has been updated to allow Licensing with a pre-generated Product ID & Product Key. This streamlines the licensing and activation experience for Unmanaged Users.

Enterprise Client features require DESlock+ Enterprise Server 2.4.

4.4.173 Changes

- Update to improve behaviour of DESlock+ Encrypted Attachments (.dlp).

When double-clicked from within Microsoft Outlook they will be decrypted and opened in the associated application instead of prompting the user with a 'Save To' folder dialog. 

When detached from an E-Mail and double-clicked attachments will be decrypted to the folder the file is in instead of of prompting the user with a 'Save To' folder dialog. 

- Additional changes to DESlock+ Go WebDAV to fix as crash in Office 2010. This change may also fix a problem seen when transferring large files.

- (Enterprise Client Only) Fix for DESlock+ Virtual Disks on Removable media. Mounting of DESlock+ Virtual Disks would fail when Workstation Policy is set to Blocked even though Group Policy 'Removable Media access mode' is set to Open.

4.4.167 Changes

- The Polish language is now included in DESlock+. By default it is auto-detected, the language can be configured via DESlock+ Settings.
- DESlock+ Go WebDAV maximum file size limit increased from 2GB to 4GB.
- (Full Disk Encryption) Added keyboard map support (currently en-uk & en-us are supported). Use Alt-K to cycle between maps.
- (Enterprise Client Only) Optical Media Encryption now supports RME exclusions.
- (Enterprise Client Only) Added support for a new ES command to shutdown machine.
- Fixed a problem where a users session was not being released when logging out of Windows or when a Remote Desktop Session is closed.
- Fixed problem accessing removable media under Windows 8.
- Fix for a BSOD which could occur in extremely rare cases.
- Fixes to Text & E-Mail Encryption. Could have intermittently caused Outlook to hang or exit when moving between messages.
- Improvements to multi-lingual/translation support.
- Various user interface updates and fixes.
- (Enterprise Client Only) Fixed a problem with Optical Media Encryption blocking when using non-closed, and multi session disks.

4.4.147 Changes

- Rerunning the Front-end from the start menu now shows the DESlock+ menu.
- Worked around some instances where updated icons stored in the Windows shell icon cache weren't refreshed.
- DESlock+ Go updated to improve multi-lingual support, including instances where there were problems handling Unicode file names.
- Licence.rtf and the Help file have been updated.

4.4.146 Changes

- Full Disk Encryption now supports hardware RAID BIOS. (Please see Raid section above)
- DESlock+ Updater added. This will notify you when a new version of DESlock+ is available and will download and install it for you.
- DESlock+ now supports translation into other languages.
- Legacy DESlock+ .keyfiles can now be used.
- (Enterprise Client Only) Updated DESlock+ Burn so that it supports Key Streamlining.
- Updated DESlock+ Go so it now supports saving of Office 2007 documents. *
- Fixed a problem with DESlock+ Go when used in timezones other than GMT where file times would display incorrectly. *
- DESlock+ Go now runs on Windows 8. *
- Fixed a problem where the shredder could crash when trying to shred an encrypted folder.
- Fixed a problem where windows crash dumps would fail to write if set to a different drive than the system drive.
- Updated Virtual Disks so they can be mounted from a CD. (mounted as read only)
- (Enterprise Client Only) Fixed a problem with password recovery. Maximum password length when setting a new password was 31 chars, changed to 32.
- (Enterprise Client Only) Fixed a problem with client activation. If the network connection was interrupted during activation, the client would activate but the Enterprise Server would get an error. This resulted in the server and client getting out of sync.
- (Enterprise Client Only) Fixed a problem with starting full disk encryption. If the network connection was interrupted during the command, the client would start encrypting but the Enterprise Server would get an error. This Resulted in the server and client getting out of sync.
- Various user interface updates and fixes

* Existing DESlock+ Go encrypted drives can be updated by resetting the DESlock+ Go password for the drive.

4.3.123 Changes

- (Enterprise Client Only) Features added to support non-RDS/TS client based roaming of user settings (including Activation and Autologon information) with a Key-File stored on a network path.
- Fixed a case where the Front-end logged in state could get out of sync if a different component performed the login (Virtual Disk Manager or RME).

4.3.114 Changes

- (Enterprise Client Only) Update to Remote Desktop Services (RDS) / Terminal Services (TS) support on Server 2008. A user can now be activated locally on the server when the Remote Desktop Services role is not enabled. This allows Full Disk Encryption to be started on Server 2008.

4.3.112 Changes

- (Enterprise Clients Only) Added the ability to configure the helpdesk string for the full disk encryption pre-boot screen. This is shown when the user performs lost details.
- Updated digital signatures to new DESlock Limited signature.

4.3.110 Changes

- Change made to installation process during an upgrade or a repair so that the correct DESlock+ service (dlpsrv) start type is restored when it has been manually disabled (for example via MSConfig) or altered.

4.3.107 Changes
- Fix for USB drives encrypted with DESlock+ Go when the DESlock+ client is also installed and does not have the Encryption Key. Previously the error ‘DESlock+ Go encryption data is not valid’ was shown and the password couldn't be entered. DESlock+ Go on a PC without DESlock+ is unaffected.
- (Enterprise Clients Only) Customisable Help Desk information support. Requires at minimum Enterprise Server v2.2.0.
- (Standalone Clients Only) Login dialog now provides the ability restore from a backup when no tokenstore is found.

4.3.106 Changes

- (Enterprise Clients Only) Fixed a crash with the uninstall when using managed uninstall mode without an optional password.

4.3.105 Changes

- (Enterprise Clients Only) Added support to force the RDS Mandatory Profile mode via a registry key. This can fix problems seen when using RDS and AppSense.

4.3.104 Changes

- (Enterprise Clients Only) Fixed a crash in the service (dlpsrv) and improved support for Key-Files stored on network drives.
- (Enterprise Clients Only) Fixed a user interface anomaly with auto-login during activation.
- (Enterprise Clients Only) Added support for Mandatory Profiles under Remote Desktop Services.

4.3.97 Changes

- (Enterprise Clients Only) Deployment client now works correctly when used with an internet proxy.
- Installation updated to pause any Full Disk Encryption operation in progress before launching doing a boot loader auto-upgrade.

4.3.95 Changes

- Outlook Email Encryption now handles extended characters properly. This fixes a problem encrypting emails that contain ' or ".

4.3.94 Changes

- Full Disk Encryption performance improved, and the ETA calculation shown in the front-end is now more accurate.

4.3.93 Changes

- Full Disk Encrypted Workstations auto-upgrade boot loader during upgrade installations.

4.3.89 Changes

- (Enterprise Clients Only) Added a new Key-File Policy for maximum password age. Forcing the user to change their password after the set period of days.
- (Enterprise Clients Only) Fixed a problem enforcing policy on removable media that was introduced by 4.3.82 copying an incorrect file.
- (Enterprise Clients Only) Updated policy for Removable Media delete and move when read-only. Now comes from Key-File policy when logged in and Workstation policy when not.
- (Enterprise Clients Only) bug fixes for Workstation Adoption and Password Recovery.
- Fixed a problem where the Removable Media Encryption could not be closed when a new version of DESlock+ is installed.
- If the install is cancelled during an upgrade, DESlock+ is now restarted.
- Fixed a rare case that could cause a blue screen when shredding files on some Removable Media Encrypted drives.
- (Enterprise Clients Only) Fixed a problem that could cause Removable Media Full Disk Encryption to be interrupted if a key-file update was received during encryption.
- (Enterprise Clients Only) Added a new policy for Removable Media, allowing files to be deleted/moved when they are set to read only due to policy.
- (Enterprise Clients Only) The Removable Media exclusions list now works if it contains whitespace.
 - Recovery of user passwords in the bootloader now supported.
 - (Enterprise Clients Only) Unmanaged Workstations that are Full Disk Encrypted can now be adopted by Enterprise Servers that support it.
 - Fixed a problem with File & Folder Encryption Removable Media Encrypted drives (USB or CD). where Windows Explorer would sometimes show the non-decrypted data folder and could also show the files with .dlpext extension.
 - (Enterprise Clients Only) Change to Removable Media Policy enforcement. When Force File, Force FDE or Allow Choice is set and Read All/Write Encrypted mode is set and the drive is not encrypted, the plain files are available read-only instead of being blocked.

4.3.80 Changes

 - FDE now supports more users.
 - FDE now has the option to resume when disk errors are encountered.
 - (Enterprise Clients Only) Client machine information now returned to Enterprise Server.

4.3.71 Changes

 - DESlock+ Optical Media Encryption improvements.
 - Encrypt and Send context menu now works on machines without MS VC9 Runtime.
 - (Enterprise Clients Only) Fixed compatibility problem with Removable Media Encryption and Removable Media Encryption Exclusions with unsupported composite USB drives. (For example those that provide their own hardware encryption)
 - (Enterprise Clients Only) Silent uninstallation now supports the passing of managed uninstall passwords and codes.

4.3.68 Changes

 - Updated creation of virtual disks so they have a correctly formatted volume ID.
 - Updated DESlock+ Go to ensure the tray icon is always removed when the program exits.

4.3.67 Changes

 - Fixed a problem copying large (500gb+) files to a USB drive with DESlock+ Go, where the copy would fail during transfer. The problem could potentially affect smaller files, although in testing it was only large files.
 - Updated DESlock+ Go when trying to run more than once, it displays a message then shows the currently mounted drive.
 - Fixed a problem with DESlock+ Go where the dialogs could sometimes not be moved. 
 - Updated virtual token driver to fix initialisation issues.

4.3.65 Changes

 - Updated DLPGo to fix a problem with change file size dialog

4.3.64 Changes

 - Fixed a problem with DESlock+ go spanning multiple virtual disks (>4GB)

4.3.63 Changes

 - Fixed a problem where removable media drives would not always open if the encrypted disk balloon was clicked.
 - Update to fix further CD problems with Trend-Micro antivirus

4.3.62 Changes

 - Updated so that virtual disk mode removable media drives are correctly unmounted when a drive is removed.
 - Stopped virtual disk mode removable media drives from appearing in virtual disk manager.

4.3.61 Changes

 - Fixed a problem with accessing DESlock+ Go drives in different timezones or after daylight saving changes.

 - Support for new Virtual Disk mode for DESlock+ Go. This is a special mode that requires and additional utility to prepare removable drives before use.

 - Work around for a problem with CD-ROM access caused by Trend-Micro antivirus.

4.3.60 Changes

 - (Enterprise Clients Only) Removable Media Policy improvements. (Affects Optical discs only).

4.3.59 Changes

 - DESlock+ Optical Media Encryption now included. This tool allows you to create encrypted CD /DVD discs. DESlock+ Go is supported on discs created with DESlock+ Optical Media Encryption.
 - (Enterprise Clients Only) Removable Media Policy now also applies to optical discs.
 - (Enterprise Clients Only) Front-end changes to allow administrators to suppress the activation popup at startup on a per workstation basis. When enabled activation can still be reached by double clicking the DESlock+ tray icon or performing an Enterprise Sync.

4.3.52 Changes

 - (Enterprise Clients Only) Removed an unnecessary error about Word being the default editor when the Outlook plugin is disabled via policy.

4.3.51 Changes

 - Fix to allow deletion of sub-folders within Encrypted Folders.

4.3.50 Changes

 - Removable Media Encryption now allows the decryption of partially Full Disk encrypted drives.

4.3.49 Changes

 - Significant performance improvement in DESlock+ Go. Reset the password on protected drives to upgrade them.
 - (Bootloader) Corrected memory allocation for newer machines that have a larger BIOS memory map.
 - Added storing of the "override compatibility checks" bit to the Start FDE for audit purposes.
 - Removable Media Encryption message windows now show in the foreground and in the task bar so they are not hidden from users.
 - Removable Media Encryption in Full Disk mode is improved on drives with non-standard partition tables.
 - Improved error shown when an attempt to upgrade Enterprise Clients running in Managed Uninstall mode with a unmanaged install is made.

4.3.48 Changes

 - Read-only Virtual Disks fixed.
 - Enterprise Client updates.

4.3.47 Changes

 - Fixed so that when users are logged out of DESlock+ they can unmount Virtual Disks.
 - Enterprise Client updates.

4.3.46 Changes

 - Updated user help file.

4.3.45 Changes

 - Improved handling of display of licencing information.

4.3.44 Changes

 - Fixed a problem where unencrypted USB drives could not be shared over the network.
 - Users are now informed if a Virtual Disk is mounted as read-only.

4.3.43 Changes

 - Installation compatibility fixes for Outlook 2007 plugins.
 - Virtual Disks shared over a network mount as read-only for other users.
 - Removable Media now has the option to suppress warnings for unsupported file systems.

4.3.42 Changes

 - Text Encryption and Encrypted E-mail compatibility improvements.
 - Fix to Hot Key registration.
 - Enterprise Client activation fix.

4.3.40 Changes

 - About Box improvements.
 - Virtual Disks now open in Explorer when mounted via the tray menu.

4.3.38 Changes

 - Language fixes.

4.3.37 Changes

 - Fixed unmounting of Virtual Disks when they're no longer available.
 - Blocked the mounting of Virtual Disks on UNC paths.
 - Improved Enterprise Client handling of policies for Outlook, Text & File Encryption.

4.3.36 Changes

 - Fixed a problem with the Outlook not recognising the plugin after upgrading.
 - Fixed a problem where creation of new DESlock+ Archives was erroneously blocked

4.3.35 Changes

 - Enabled auto logon for standalone users (in settings)
 - Fixed force change FDE password command sent from Enterprise Server
 - Updates to install when upgrading from older versions of DESlock+
 - Install preserves Enterprise Server Settings on upgrade
 - Added help file
 - Virtual disk and folder encryption wizards now do key streamlining if enabled in Enterprise Server

4.3.34 Changes

 - Fixed a crash when Decrypting Text with Force Viewer enabled.
 - Fixed a crash when dropping files on Shredder.

4.3.33 Changes

 - Enterprise Client fix for Windows XP.

4.3.32 Changes

 - Settings applet wasn't being run properly in some cases.
 - Virtual Disk Manager would sometimes exit on 32-bit.

4.3.31 Changes

 - Inactivity timeout bug fixes.
 - Virtual Disk backwards compatibility fixes.
 - Improvements when doing bulk operations with attachments (.dlp files).

4.3.30 Beta Changes

 - 32bit version from same new code base as 64 bit now also available.
 - Fixed a crash in Virtual Disk manager when creating a Virtual Disk with the drive letter set 

4.3.29 Beta (64 bit only)  Changes

 - Fixed a crash in Virtual Disk manager when creating a Virtual Disk with the drive letter set to Auto. 

4.3.28 Beta (64 bit only)  Changes

  - Initial 64 Bit Beta Release

4.1.13 Changes

 - DESlock+ Enterprise Server v2.0.0 client support added.

4.1.12 Changes

 - Mount files are now referred to as Virtual Disks
 - Updated the registration wizard (now licence wizard) to use new licence model
 - Updated system components to be aware of new licence model
 - Branding refresh

4.1.10 Changes

 - Corrected problems when windows is installed to an extended partition
 - Changed RME handling to open access to unencrypted files. This mode mounts the dlpenc folder with encrypted files as \Encrypted and not the root. This is now the default for file encrypted drives and the “mount as root” is now handled with a new policy bit. 

4.1.0 Changes

 - Installation now uses Windows Installer (MSI)
 - DESlock+ Go standalone Removable Media added
 - Enhanced password quality enforcement
 - Enterprise client functionality improvements 

4.0.5 Changes

 - Changes made to Removable Media components to provide a better user experience
 - Spelling corrections made in some text
 - Fixed some issues with Key-File auto login
 - Made changes to DESlock+ start up routines

4.0.4 Changes

 - Made critical changes to Full Disk components.
   This requires that you decrypt any fixed harddisks before installing this version.
   The Install will check and block an upgrade if disks are still encrypted.
 - Fixed some Windows 7 related Full Disk issues
 - Added additional support for managed environments.
 - Fixed problem with encrypted folders on removable media.
 - Fixed desktop Shredder icon under Windows 7.
 - Fixed problem in Exchange plug-in relating to text encryption.
 - Fixed problems with removable media and Vista/7.

4.0.3 Changes

 - Additional fixes and tweaks to Full Disk components
 - Additional fixed and tweaks to Removable Media components

4.0.2 Changes

 - Fixed some more issues with Full Disk components
 - Fixed issues with Removable Media encryption

4.0.1 Changes

 - Fixed some issues in the Full Disk components
 - Fixed a critical bug in the DESlock+ Uninstall on Vista and Windows 7
 - Made some minor changes to Full Disk status feedback

4.0.0 Changes

 - Added new components for Full Disk encryption
 - Added new components for Removable Media encryption
 - Added new components for Enterprise Deployment support
 - Changed how policy flags were applied when the user has admin rights