Sentinel LDK 8.

2 Patch 7/2021: EMS and Vendor Suite

(KB0024494)
RELEASE NOTES
Issue Date: 08 July 2021

Contents

Release Overview 2
Installing the Patch 2
For Windows 2
For Mac 2
New Features and Enhancements 3
Detaching Seats With Concurrency 3
Simplified SL Key Creation and Updates in Sentinel EMS for Vendor-Hosted Cloud Licenses Now
Available Using Web Services 3
Support for Cloud Licensing in Admin API Has Been Enhanced 4
Support for Rosetta 2 Emulation in Envelope for Mac 4
Relative Paths Are Now Supported in the Envelope Project File 5
Envelope Can Now Protect a Launcher App for Android 5
Changes in This Patch 5
Automatic Firmware Upgrade for Sentinel HL Keys 5
Sentinel EMS UI Branding Changes 6
V2CP Format Is Now Available for Sentinel SL Product Keys and Protection Key Updates 6
Issues Resolved 6

Sentinel LDK 8.2 Patch 7/2021: EMS and Vendor Suite (KB0024494) Release Notes
Revision 2107-2 08 July 2021 Copyright 2021 Thales Group. All rights reserved. 1
 Release Overview

Release Overview

This documents describes the release of Sentinel LDK 8.2 Patch 7/2021: EMS and Vendor Suite (KB0024494).

NOTE In parallel with this patch, Sentinel LDK Run-time Environment 8.23 is being released.
You must install this version of the Run-time Environment on all vendor and customer machines
in order to support all new functionality provided by this patch.

Installing the Patch

For Windows
To install the patch on a Windows machine

The Software Manager for Sentinel LDK will deliver this patch to vendors who are currently using Sentinel
LDK 8.2. The patch is delivered to each Windows machine which is online and on which Sentinel Vendor Suite or
Sentinel EMS is installed.

To install the patch:

1. Click the Install button in the notification screen that is automatically displayed on the Windows machine
where Sentinel LDK is installed. The updated product components and documentation are automatically
installed.

2. In the Sentinel EMS Vendor portal, click Administration > Administration Console. In the Administration
Console, click Generate/Update Lucene Search Index at the bottom of the page.

For Mac
To implement the enhancements and corrections in this patch , download and install the Mac package from the
Thales website:

https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_
id=fc624f891b05d050f12064606e4bcb4e&sysparm_article=KB0021881

Sentinel LDK 8.2 Patch 7/2021: EMS and Vendor Suite (KB0024494)Release Notes
Revision 2107-2 08 July 2021 Copyright 2021 Thales Group. All rights reserved. 2
 Release Overview

New Features and Enhancements

The enhancements described below are included in this release.

Detaching Seats With Concurrency

When detaching a license from a cloud license server machine, you have the option of specifying that the
detached license should contain one or more network seats. These seats can be accessed concurrently on the
machine that receives the detached license.

A detached license with concurrency can be used to:

> Set up second-level license servers. These can be used to provide greater control over the distribution of
network seats within an organization and to minimize the overhead of license administration. For more
information, see the Sentinel LDK Software Protection and Licensing Guide.

> Control the number of local hardware resources used by an application. For example, a customer can limit a
protected application to use 4 out 8 CPUs. This requires a detached license with 4 seats, where access to
each CPU is granted after the application logs in to the license. In this example, the fifth login will be denied,
ensuring that only 4 CPUs are in use.

Sentinel LDK Run-time Environment 8.23 must be installed both on the license server machine and the machine
to which seats are detached.

Simplified SL Key Creation and Updates in Sentinel EMS for Vendor-Hosted Cloud
Licenses Now Available Using Web Services
You can now use Sentinel EMS Web Services to produce an entitlement and push an SL key or license update to
your cloud license server in a single operation.

This simplifies the process and removes several steps that otherwise need to be performed manually. For a
Product Key, this results in a new SL key on the license server. For a Protection Key update for a single key, this
updates the selected key on the license server.

When you create an entitlement, you define the XML to include specific definitions. Then you insert the entID in
the new pushActivation web service call.

For configuration details, see the cloud licensing options in the Administration Console and other locations, as
described in the Sentinel LDK–EMS Configuration Guide.

For usage details, see the sections on producing and pushing a license for a Sentinel SL key in the Sentinel
LDK–EMS Web Services Guide.

Sentinel LDK 8.2 Patch 7/2021: EMS and Vendor Suite (KB0024494)Release Notes
Revision 2107-2 08 July 2021 Copyright 2021 Thales Group. All rights reserved. 3
 Release Overview

Support for Cloud Licensing in Admin API Has Been Enhanced

Sentinel Admin API has been enhanced to support cloud licensing as described in this section.

Retrieving Identity Status

When using Admin API to retrieve an individual client identity, the retrieved information now includes the identity
status and the identity creation date. For example:

<identity>
<identity_code>V3FODP3</identity_code>
<identity_secret>oBWAAQCBEFDgoU5T2jAw3uo0ExljSZQ</identity_secret>
<issued_to>123</issued_to>
<allow_remote_login_access>1</allow_remote_login_access>
<allow_remote_detach_access>0</allow_remote_detach_access>
<allow_network_detach_access>0</allow_network_detach_access>
<limit_to_key_id></limit_to_key_id>
<creation_date>1621497648</creation_date>
<disabled>0</disabled>
<maximum_number_of_auto_registered_machines>1</maximum_number_of_auto_registered_machines>
<registered_machines></registered_machines>
</identity>

Creating a Client Identity That Supports Detaching Seats With Concurrency

When using Admin API to create a client identity, you can include the following tag to allow the user to detach
seats with concurrency from a cloud license server:

<element allow_network_detach_access="1"/>

Identifying Cloud Information When Retrieving SL Key Data

When using Admin API to retrieve all data regarding an SL key, the tag <cloud-based> indicates whether the
SL key is not identity-based, local and identity-based, or remote and obtained using an identity.

Support for Rosetta 2 Emulation in Envelope for Mac

The following enhancements have been implemented for Sentinel LDK Envelope running with the Rosetta 2
emulator:

> Envelope can be used on an Apple-Silicon Mac machine.

> Envelope no longer supports 32-bit Intel binaries.

If a binary contains 32-bit Intel code (for example, as part of a universal binary), Envelope strips the 32-bit
code from the resulting binary.

> 64-bit Intel binaries protected by Envelope can be executed on an Apple-Silicon Mac machine using the
Rosetta 2 emulation.

Code written for native Apple-Silicon cannot be protected. If the binary contains native code for Apple-Silicon
(for example, as part of a universal binary), Envelope strips the native Apple-Silicon code from the resulting
binary.

Sentinel LDK 8.2 Patch 7/2021: EMS and Vendor Suite (KB0024494)Release Notes
Revision 2107-2 08 July 2021 Copyright 2021 Thales Group. All rights reserved. 4
 Release Overview

> If a binary does not contain code for the 64-bit Intel architecture, Envelope reports an error.

This can occur when the binary contains only 32-bit Intel code or only Apple-Silicon code.

In these situations, earlier versions of Envelope would create a binary with no code.

> Newer versions of Xcode/Clang may generate code with embedded data. At runtime, the contents of the
code section are both executed and read from. When dump protection is enabled in Envelope, this situation
could cause "bad access" exceptions (EXC_BAD_ACCESS). These exceptions would either:

• cause the process to fail, OR

• cause the exception alert to be displayed, and the user would have to abort the process.

Envelope now detects access to the code section from the code section itself and handles these cases
gracefully.

For more information, see the description of Rosetta support in the help system for Sentinel LDK Envelope for
Mac.

Relative Paths Are Now Supported in the Envelope Project File

(For Windows and Mac projects) When protecting an application using Sentinel LDK Envelope, you can now use
relative paths in the project file in the INPUT_FILE, OUTPUT_FILE, and the BUNDLE fields.

For example:

<INPUT_FILE>../Deploy/Thales/Sample Desktop-devel.exe</INPUT_FILE>

Envelope Can Now Protect a Launcher App for Android

Sentinel LDK Envelope can now be used to protect a launcher app for Android. The protected APK can run
whether it is started it from the launcher or from the system (by pressing on the home button).

Changes in This Patch

The changes described below are included in this release.

Automatic Firmware Upgrade for Sentinel HL Keys

When you upgrade a Sentinel HL key to the Driverless configuration, the Firmware on the key may be
automatically upgraded. Until now, the automatic upgrade would occur only if the Firmware on the key version
was version 4.23.

After installing this patch, when you upgrade a Sentinel HL key to the Driverless configuration, the Firmware is
upgrade to version 4.60 if the current version is earlier than 4.60.

Automatic Firmware upgrade is not relevant for Sentinel HL Drive microSD keys.

Sentinel LDK 8.2 Patch 7/2021: EMS and Vendor Suite (KB0024494)Release Notes
Revision 2107-2 08 July 2021 Copyright 2021 Thales Group. All rights reserved. 5
 Release Overview

Sentinel EMS UI Branding Changes

Footer logo customization was removed from the UI Branding section in the Administration Console.

V2CP Format Is Now Available for Sentinel SL Product Keys and Protection Key
Updates
In Sentinel EMS, you can now set the default file format for licenses to V2CP (Vendor-to-Customer Package)
instead of V2C (Vendor-to-Customer). This enables Sentinel EMS to deliver multiple updates to end customers
in a single package. The License Manager subdivides V2CP files into their component V2C files and then applies
each update in sequence.

End users can continue to activate licenses seamlessly, regardless of the file format type.

For details on managing the default file format setting, see the section on using the V2CP file format in Sentinel
LDK–EMS Configuration Guide.

Issues Resolved
The following issues have been resolved in this patch.

Issue Description Component

SM-101263 Documentation for Java exception handling and class-level protection Documentation
has been improved.

SM-102724 The description of "Specifying an HTTPS Certificate – XML Scope" in Documentation

Admin API documentation now indicates that the certificate referred to
is a public certificate.

SM-99967 In Sentinel EMS 8.2, copying an existing entitlement of type "Protection Sentinel EMS
Key Updates" would generate the error: "An internal error occurred.
Contact the system administrator for assistance."

SM-101036 Fixed an issue that prevented the smooth upgrade of HL keys from Sentinel EMS
HASP configuration to Driverless configuration.

SM-101439 After upgrading Sentinel EMS from 8.0 to 8.2, it was not possible to use Sentinel EMS
the EMS Web Services PUT request to create new entitlements.

SM-99684 In a virtual machine, certain protected applications would repeatedly Envelope

start child processes at startup until the CPU was 100% occupied. The
application would fail with: "Internal error 0x7103 occurred!"

Sentinel LDK 8.2 Patch 7/2021: EMS and Vendor Suite (KB0024494)Release Notes
Revision 2107-2 08 July 2021 Copyright 2021 Thales Group. All rights reserved. 6
 Release Overview

Issue Description Component

SM-100285 An application that was protected with a patched version of Envelope Envelope
for Mac would fail at seemingly random intervals due to an EXC_BAD_
ACCESS exception.

SM-101818 Envelope would fail when a .NET DLL file was added to the project. Envelope

SM-103047 A protected Unity 3D application would fail when loading the Envelope
RenderDoc pluglin.

Sentinel LDK 8.2 Patch 7/2021: EMS and Vendor Suite (KB0024494)Release Notes
Revision 2107-2 08 July 2021 Copyright 2021 Thales Group. All rights reserved. 7