AppGate SDP requires a license to run Device Claim Scripts as of the v6.7 Client. Customers using Device Claim Scripts in their SDP Collective will need to request and deploy this license on a version of SDP that supports it before upgrading their SDP Clients. If this license is not deployed properly, the v6.7 SDP Client will not run a Device Claim Script potentially impacting their end users from connecting to resources as defined in assignment criteria in Policies and Criteria Scripts, and access criteria in Conditions.
The AppGate SDP Client Downloads can be found at the end of this article. Before updating any clients to v6.7, customers running Device Claim Scripts will need to take the following steps:
Open a case with AppGate Support to request an updated license. This license is for security improvements only and there are no additional costs.
Apply the license to your AppGate SDP Collective. You can apply the license to any version, but the license won't be effective until you upgrade to a version that supports it.
Upgrade the AppGate SDP Controllers to 6.5.4 or later. Only these versions support the v6.7. Clients running Device Claim Scripts.
Once the license is applied and the SDP Collective is updated, customers can upgrade their AppGate SDP Clients to v6.7.
Here are some additional notes about the transition to this new license requirement:
Clients running v6.5 and earlier do not need this license to run a Device Claim Script.
Customers will not be able to upgrade your Collective to v6.7 without this license. If a Collective is upgraded to v6.5.4 and later, or v6.4.13 and later without deploying the new license, they will see the following warning in your Admin UI:
cz-controllerd: license-verified-dns-names-profiles: Your license does not include Verified DNS Names. Device Claim Scripts will stop functioning after upgrading to 6.6. Please contact support.
AppGate will only provide this license to a validated Account Administrator for your Company. If you are receiving this email, then AppGate has identified you as an Account Administrator.
Customers can see how they are using a Device Claim Script, by going to Identity >> Identity Provider and scroll to the bottom to see if any "Commands Mapped to On-Demand Device Claims" have been added.
Appgate SDP Client Downloads
Clients are available for all the main operating systems.
The user guide is available on-line.
To check any requirements and the compatibility of the latest Client versions shown below, please refer to the most recent version linked from the supported software versions table.
FOR WINDOWS:
The Windows Client is available as Full, Headless, Always-on, Multi-user and SSO/PLAP types. All these use the same Client installer with install-type options. The installers require PowerShell. NOTE: Servers require the use of Headless or Multi-user Clients.
There is also a Windows Lite Client with its own installer. This installer does not require admin privileges.
Full Support is provided for the following Associated Systems versions on 64 bit Intel hardware:
Windows 11
Server 2022 or newer (require the use of Headless or Multi-user Clients)
Qualified Support is provided for the following Associated Systems version on ARM hardware:
Windows 11 (The Client has been tested and appears to work satisfactorily under Arm64EC. Native ARM support will follow later when all the required 3rd party libraries used in the Client become available).
Client requires: 400MB disk, 256MB ram, AES-NI enabled CPU.
FOR MAC OS:
The macOS Client is available as Full, Headless and Always-on types all of which use the same installer. The installer will install an installer for the Headless and Always-on types.
Full Support is provided for the following Associated Systems versions on Intel or Apple hardware:
macOS from 15.7.5
Client requires: 600MB disk, 256MB ram.
FOR LINUX:
The Linux Client is available as Full and Headless types. There are separate installers for these two options. See the admin guide for details.
Ubuntu
Full Support is provided for the following Associated Systems versions:
Ubuntu 22.04 -24.04
Client requires: 400MB disk, 256MB ram, AES-NI enabled cpu, Gnome-keyring or kwallet recommended (Full Client).
Fedora
Full Support is provided for the following Associated Systems versions:
Fedora 42 or later
Client requires: 400MB disk, 256MB ram, AES-NI enabled cpu, Gnome-keyring or kwallet recommended (Full Client).
RedHat
Full Support is provided for the following Associated Systems versions:
RHEL 9 (including Almalinux and Rocky Linux)
Client requires: 400MB disk, 256MB ram, AES-NI enabled cpu, Gnome-keyring or kwallet recommended (Full Client).
FOR MOBILE APPS:
Mobile apps for the Client can be found in the respective app stores. These may differ from the Desktop version numbers.
Please refer to the manual for specific details of how to configure the system for these Clients.
iOS
The iOS client is available from the Apple App Store.
Android
The Android client is available from Google Play.