InTrust 11.6 - What's New

Whats new in InTrust 11.6.0

OpenSSL 3.1.2 support

InTrust 11.6 now supports OpenSSL 3.1.2 and FIPS modules using OpenSSL 3.0.8.

SQL Server 2022 support

InTrust 11.6 now supports SQL Server 2022.

Windows Server 2022 support

InTrust 11.6 now supports Windows Server 2022.

Other updates

• InTrust will not have autorun functionality from 11.6.0 onwards and currently works with AeCDSuiteLauncher.
• Removal of support for Windows Server 2012 and 2012 R2 from Intrust 11.6.0 onwards.

What's new in InTrust 11.5.1

Oracle 18c, 19c and 21c support

Intrust 11.5 now supports InTrust 11.5 now supports Oracle 18c, 19c and 21c.

SQL Server 2019 support

InTrust 11.5 now supports SQL Server 2019.

Openssl 3.0.7 support

InTrust 11.5 now supports Openssl 3.0.7.

Other updates

• InTrust now uses AES Encryption in place 3DES Encryption.
• In-Place upgrade option in Installer is disabled.

What's New in 11.5

FIPS hashing and encryption algorithms

Intrust 11.5 now supports FIPS approved hashing and encryption algorithms. It can be enabled using the tool adcorgpwd.exe available in the SupportTools folder of installation folder.

For fresh installation, FIPS compliant algorithms are enabled automatically. For upgrade from older versions (11.4.2 or older), you need to enable it manually using the tool adcorgpwd.exe available in the SupportTools folder of installation folder. Once FIPS compliant algorithms are enable, they will remain enabled and cannot be changed back to Non-FIPS algorithms. Please refer Upgrade Document for further details.

Support for Sun/Oracle Solaris is Discontinued

This InTrust release does not include Solaris related components or configuration items. It is not expected that future versions will provide them.

What's New in InTrust 11.4.2

Alerts on More Suspicious Logons

The new "Multiple logons by the same user from different workstations" rule helps you capture situations where a set of credentials is shared by a group of people or has been stolen by an attacker and is being tried on multiple computers at once. These incidents are tricky because they slip through the cracks if you are only focusing on individual workstations. The rule is based on making the InTrust server analyze incoming audit data from multiple monitored computers.

To minimize false positives, the rule comes with a flexible set of parameters that let you fine-tune the analysis, including the logon types you want to watch for.

The rule is located in the Advanced Threat Protection | Windows/AD Suspicious Activity | Gaining User Access | Suspicious logons rule folder.

Support for Exchange Server 2019 Auditing

The Exchange auditing capabilities of InTrust have been extended to Exchange Server 2019.

Solaris Knowledge Pack Distribution Resumes

The Knowledge Pack for Solaris has been rebuilt for this version of InTrust, and you don't need to get it from a previous version anymore.

HP-UX Auditing and Real-Time Monitoring Support is Discontinued

This InTrust release does not include HP-UX related components or configuration items. It is not expected that future versions will provide them.