Signum 4.90.1 Release Notes

OCTOBER 2026

The Signum team is pleased to announce the release of Signum 4.90.1, released to the Keyfactor SaaS Portal, where upgrades can be scheduled when convenient.

Highlights

New Windows Agent

This release brings a new version of the Windows Agent, with extended functionality and streamlined installation capability. The Agent is compatible with x64 and ARM Windows machines. For more information, see Signum Agents.

SSL Validation

In the Agent configuration, you can now opt in to the tlsvalidationmode setting, which determines how the trust anchor (the CA) is established. For more information, see Configure & Authenticate Agent | TLS Validation Modes.

GitHub Actions Integration Guide

This release includes a GitHub Actions Integration guide, with the steps to set up a .NET project on a Windows runner, authenticate the Agent, and sign the resulting binaries with SignTool. See GitHub Actions Integration.

Announcements

Legacy Windows Agent End-of-Life: As of version 4.90.1, the legacy Windows Agent will no longer be updated with new features. Migrating to the new Windows Agent is recommended.

SAML Deprecation Notice: SAML support will be removed in a future release. SAML users are recommended to migrate to OAuth. See Domains.

Upgrade Information

The new Windows Agent requires a brand new installation. For the Linux and macOS Agents, an upgrade is sufficient. However, if there are issues during the update, uninstall and reinstall the Agent. For details, see Upgrade.

Change Log: Resolved Issues

The following lists implemented features and fixed issues in Signum 4.90.1.

New Features

SD-440 ECC Support in KSP

SD-1219 Added options for SSL validation

Improvements

SD-809 Allow to select certificates to add or remove from the keychain

SD-935 Implement Pre-Selection for PKCS#11

SD-1072 Logs for KSP, CSP and PKCS#11

SD-1074 CLI for new Windows Agent

SD-1075 Build new Windows installer

SD-1076 Log in with certificate on Agent

SD-1184 CryptoProviders Create the logs folder if it does not exist

SD-1205 Increase timeout in database update operations and make it configurable

SD-1239 Windows Installer - Start SignumService automatically after installation

SD-1264 Improve Access Denied page messaging

SD-1266 Remove "Configuration is identical to the existing one" feedback on signum-util

SD-1286 Remove Openssl Dependency on pkcs11

Bug Fixes

SD-929 Fix "Don't show again" option in pop-up message

SD-931 Change SAML domain "Surname" to "Lastname" attribute

SD-1036 signum-util reports "New configuration saved successfully" even when it has failed to save configuration to keyring

SD-1109 Dashboard missing for users (without SuperAdministrator permissions)

SD-1119 Domain alias validation message does not mention minimum length requirement

SD-1134 Error when no certificates exists

SD-1263 Access Denied page does not display application version and current server time

SD-1273 Change error message when no permission is selected

SD-1282 Old HA webservices is not loading device properly.

SD-1320 Fix issue when creating CSR with owner and deleting user at the same time

SD-1321 When using Thales in direct mode, concurrent write sessions can throw CKR_MAX_SESSION_COUNT