--- title: "SafeID Desktop changelog" description: "Release history of SafeID Desktop, with the changes and fixes of each version, the latest being 1.4.5 (2026-10-06)." canonical: "https://docs.lacunasoftware.com/en-us/articles/safeid-desktop/changelog" locale: "en" product: "SafeID Desktop" last_updated: "2026-10-14" --- # SafeID Desktop changelog ### 1.4.5 (2026-10-06) - \[RXT-53\] Stop writing authentication tokens and certificate holder data to the log file. - \[RXT-54\] Windows ARM64: ship the KSP and the PKCS#11 module as ARM64X, so x64 applications running under emulation (such as the Java runtime bundled with PJeOffice Pro) can load them. Included in SafeID Desktop Provider build 9. ### 1.4.4 (2026-09-29) - \[RXT-52\] Fix PKCS#11 module failing to load on older macOS versions. The module now targets macOS 10.15, like the rest of the app. ### 1.4.3 (2026-09-17) - \[RXT-51\] Recover from a missing CertTool after an interrupted update, instead of failing repeatedly. - \[RXT-51\] Add a decline option to the update dialog. Closing the dialog no longer installs the update. - \[RXT-51\] Show startup errors in a native dialog. - \[RXT-51\] Fix the app window opening during Windows install and update steps. ### 1.4.2 (2026-08-31) - \[RXT-50\] Check the SafeID Desktop Provider version on Windows startup. Below the minimum required version, the app asks for the provider update before continuing; below the latest version, it shows a dismissible update banner. - \[RXT-50\] Fix version comparison to compare each version part numerically. - Keep the authorization window open, showing the rejection message, when the request is rejected on the SafeID mobile app. ### 1.4.1 (2026-08-28) - \[RXT-47\] Improve certificate listing performance on Windows: filter certificates by the key provider stored with each certificate, instead of opening every private key. Keep partial results when some certificates fail to load. - \[RXT-50\] Normalize hash algorithm names to OIDs on signature requests. - Add support for MD5 and SHA-224 digests on the PKCS#11 module. - Fix raw PKCS#1 signatures (without hash algorithm identifier) on the KSP, used by Firefox on client certificate authentication (mTLS). Included in SafeID Desktop Provider build 8 (2026-08-08). ### 1.4.0 (2026-07-14) - \[RXT-45\] Improve certificate install and uninstall reliability on macOS: each change is verified on the keychain and provider errors are reported instead of ignored. - \[RXT-45\] Fix crash on macOS with certificates whose serial number exceeds 64 bits. - \[RXT-45\] Fix truncated responses on macOS signature requests. - \[RXT-45\] Test and activate the macOS CryptoTokenKit extension on startup. - \[RXT-45\] Ensure the macOS app runs from the Applications folder, falling back to `~/Applications`. - Improve error messages on the authorization window, including a hint to enable notifications on the SafeID mobile app when needed. ### 1.3.1 (2026-07-13) - \[RXT-44\] Add PKCS#11 module, for applications that use PKCS#11 instead of the operating system certificate store. On Windows it is installed by SafeID Desktop Provider; on macOS it ships inside the app. - \[RXT-44\] Rebuild the KSP on the native client core shared with the PKCS#11 module. Included in SafeID Desktop Provider build 7. ### 1.3.0 (2026-07-09) - \[RXT-44\] Add certificate listing to the local signing service, used by the PKCS#11 module. - \[RXT-44\] Fix KSP registration on Windows ARM64. - \[RXT-41\] Improve key identifier handling on certificate install and decoding. ### 1.2.9 (2026-07-02) - Update auto-update server addresses. ### 1.2.8 (2026-06-11) - Enable auto-update on Windows. ### 1.2.7 (2026-06-11) - \[RXT-43\] Show server error messages on the main window error dialog. - Update auto-update server addresses. ### 1.2.6 (2026-03-26) - \[RXT-17\] Fix KSP registration on Windows ARM64. - \[RXT-17\] Improve KSP registry entries creation and removal. - \[RXT-17\] Fix the KSP starting the app when it is not running. Included in SafeID Desktop Provider build 6. - \[RXT-17\] Add Windows ARM64 support. ### 1.2.5 (2026-01-22) - Move the Windows KSP to a separate installer, SafeID Desktop Provider. The app checks whether the provider is installed and, if not, shows an install page that downloads the installer for the system architecture. - Start the app from the user's install location when the KSP needs it. - Move the license agreement to the first launch page. - Improve logging. ### 1.2.4 (2025-11-18) - Move the macOS app to the Applications folder when launched from the DMG, asking to close any running instance first. - Reset the first launch state on a fresh macOS install. - Fix error when the app data file cannot be written. ### 1.2.3 (2025-11-17) - Update auto-update server address. ### 1.2.2 (2025-11-17) - Add auto-update on macOS, with an update information dialog. - Replace the macOS PKG installer with a DMG. - Replace the Windows MSI installer with a Squirrel installer. ### 1.1.1 (2025-10-02) - Improve the available certificates filter: list only issued certificates, hiding revoked, expired and pending ones. ### 1.1.0 (2025-09-11) - Add a search field to the certificate lists. - Hide expired and inactive certificates from the available certificates list. ### 1.0.7 (2025-09-05) - Use a dark tray icon on macOS 11 and later. ### 1.0.6 (2025-08-21) - Improve the error returned to the requesting application when a signature fails. - Fix authorization request completing before its result was polled. ### 1.0.5 (2025-08-20) - Fix duplicated keychain items on macOS. ### 1.0.4 (2025-08-18) - New macOS installer, with license agreement and custom background. - Open external links in the default browser and improve the app store badges. - Disable text and image selection on the app windows. ### 1.0.2 (2025-08-05) - Reinstall certificates already present on the certificate store when adding certificates. - Improve user data removal on uninstall. - Add CertTool logging. Set the default log level to INFO. ### 1.0.1 (2025-08-04) - Add macOS production signing profiles. ### 1.0.0 (2025-08-04) - First production version. - Improve Windows installer, with license agreement. ### 0.2.2 (2025-07-10) - Improve Windows installer icon. ### 0.2.1 (2025-07-10) - New app icons on Windows and macOS. ### 0.2.0 (2025-07-04) - \[RXT-37\] Add support for macOS 10.15. - \[RXT-7\] Improve error codes returned to requesting applications, including when the user cancels a signature. - \[RXT-34\] Stop any running instance and remove previous user data on a fresh macOS install. - \[RXT-28\] Change date and time formatting. - \[RXT-33\] Disable the install button when no certificate is selected, including on the first launch page. ### 0.1.5 (2025-06-17) - \[RXT-29\] Branded Windows installer. - \[RXT-34\] Remove user data on uninstall. - \[RXT-32\] Add a try again button to error dialogs. - \[RXT-33\] Disable the install button when no certificate is selected. Hide the continue button when no certificate is available. - \[RXT-35\] Handle access denied (403) responses while waiting for a new device. - \[RXT-36\] Highlight completed steps on the first launch and new device pages. - \[RXT-30\] Cache decoded certificates to speed up signature requests. Stop logging secure storage values. - \[RXT-30\] Improve KSP logging. ### 0.1.4 (2025-06-13) - \[RXT-15\] Show progress while installing certificates. - \[RXT-11\] Disable navigation while installing certificates. - \[RXT-24\] Detect newly associated devices automatically on the first launch and new device pages. - \[RXT-22\] Hide root and intermediate certificates from the available certificates list. - \[RXT-23\] \[RXT-26\] Fix first launch, new device and new certificate dialogs. - \[RXT-1\] Handle multiple simultaneous signature requests. - \[RXT-12\] Fix certificate uninstall not being awaited.