[RXT-53] Stop writing authentication tokens and certificate holder data to the log file.
[RXT-54] Windows ARM64: ship the KSP and the PKCS#11 module as ARM64X, so x64 applications running under emulation (such as the Java runtime bundled with PJeOffice Pro) can load them. Included in SafeID Desktop Provider build 9.
[RXT-50] Check the SafeID Desktop Provider version on Windows startup. Below the minimum required version, the app asks for the provider update before continuing; below the latest version, it shows a dismissible update banner.
[RXT-50] Fix version comparison to compare each version part numerically.
Keep the authorization window open, showing the rejection message, when the request is rejected on the SafeID mobile app.
[RXT-47] Improve certificate listing performance on Windows: filter certificates by the key provider stored with each certificate, instead of opening every private key. Keep partial results when some certificates fail to load.
[RXT-50] Normalize hash algorithm names to OIDs on signature requests.
Add support for MD5 and SHA-224 digests on the PKCS#11 module.
Fix raw PKCS#1 signatures (without hash algorithm identifier) on the KSP, used by Firefox on client certificate authentication (mTLS). Included in SafeID Desktop Provider build 8 (2026-08-08).
[RXT-45] Improve certificate install and uninstall reliability on macOS: each change is verified on the keychain and provider errors are reported instead of ignored.
[RXT-45] Fix crash on macOS with certificates whose serial number exceeds 64 bits.
[RXT-45] Fix truncated responses on macOS signature requests.
[RXT-45] Test and activate the macOS CryptoTokenKit extension on startup.
[RXT-45] Ensure the macOS app runs from the Applications folder, falling back to ~/Applications.
Improve error messages on the authorization window, including a hint to enable notifications on the SafeID mobile app when needed.
[RXT-44] Add PKCS#11 module, for applications that use PKCS#11 instead of the operating system certificate store. On Windows it is installed by SafeID Desktop Provider; on macOS it ships inside the app.
[RXT-44] Rebuild the KSP on the native client core shared with the PKCS#11 module. Included in SafeID Desktop Provider build 7.
Move the Windows KSP to a separate installer, SafeID Desktop Provider. The app checks whether the provider is installed and, if not, shows an install page that downloads the installer for the system architecture.
Start the app from the user's install location when the KSP needs it.
Move the license agreement to the first launch page.