Build date:

© 2025-2026 Tungsten Automation. All rights reserved.
Use is subject to license terms.

Introduction

Install Kofax RPA to resolve the issues and apply the new features listed in this ReadMe.

Issues resolved in this fix pack

ID	Issue	Solution
1048342	After changing the Management Console keystore certificate, existing OAuth service authentication client secrets could no longer be decrypted, resulting in an "Unable to decrypt client secret" error.	OAuth service authentication client secrets are automatically re-encrypted when the keystore is changed.
1048307	Communication problems between Management Console and RoboServer because the RoboServer ID was not unique or not recognized.	Disabled the Tanuki wrapper's ability to process console input in the JVM to prevent the RoboServer ID being corrupted.
1025658	The telemetry metric "Average wait time in queue" reported the queue throughput rate (tasks per second) instead of the actual wait duration.	The metric now correctly reports the average time in seconds a task waited in the queue within the reporting window.
1025663	The telemetry metric "Average CRE use" reported the number of CRE slots assigned to RoboServer clusters instead of the number of CRE slots actively running robots.	The metric now reports the average number of CRE slots actively running robots within the reporting window.
1017828	When the Copilot extension was present in Excel, the Desktop Automation Service UI tree could not be constructed properly, causing "Unknown Desktop Automation Service" disconnects during automation.	Fixed a recursive child-ancestor loop that occurred when Excel had the Copilot extension enabled.
1014424	The Visual C++ redistributable bundled in the MSI installers was out of date and could cause the CEF driver to fail with a STATUS_ACCESS_VIOLATION on Browse steps.	Removed the Visual C++ redistributable from the MSI installers.
1009023	Under specific timing conditions in CEF, a finder could fail to locate an element that was clearly present on the page because guardmanager operated on an outdated browser instance.	The guardmanager now uses the most recent CEF browser instance.
1017233	NPM packages were downloaded from public registries during the build.	NPM packages are now retrieved from the internal Artifactory to improve build reliability and security.
1044896	Requests to apply additional security enhancements.	Enhanced security by upgrading Spring, Spring Security, Spring Data, Spring LDAP, and Tomcat.
1046777, 1036732, 1036811, 1036814	Requests to apply additional security enhancements.	Enhanced security by upgrading Tomcat.
1046760, 1031219, 1025818	Requests to apply additional security enhancements.	Enhanced security by upgrading Jackson.
1046813, 1036848	Requests to apply additional security enhancements.	Enhanced security by upgrading jsoup.
1037128	Requests to apply additional security enhancements.	Enhanced security by upgrading spring-ldap-core.
1036738	Requests to apply additional security enhancements.	Enhanced security by upgrading spring-data-commons.
1036837	Requests to apply additional security enhancements.	Enhanced security by upgrading Bouncy Castle.
1036762	Requests to apply additional security enhancements.	Enhanced security by upgrading commons-configuration2 and commons-lang3.
1036621	Requests to apply additional security enhancements.	Enhanced security by upgrading org.eclipse.jgit.
1036614	Requests to apply additional security enhancements.	Enhanced security by upgrading commons-text.
1031493	Requests to apply additional security enhancements.	Enhanced security by upgrading sshj.
1031491	Requests to apply additional security enhancements.	Enhanced security by upgrading sshd.
1031221	Requests to apply additional security enhancements.	Enhanced security by upgrading log4j-api.
1013736	Requests to apply additional security enhancements.	Enhanced security by upgrading protobuf.

Issues resolved in previous fix packs

Fix Pack 9

ID	Issue	Solution
1003040, 997704	Requests to apply additional security enhancements.	Enhanced security by upgrading log4j-core.
1001717	Requests to apply additional security enhancements.	Enhanced security by upgrading Spring.
1001709	Requests to apply additional security enhancements.	Enhanced security by upgrading akka-actor.
1001708	Requests to apply additional security enhancements.	Enhanced security by upgrading bean-utils.
1001707, 1001698, 1001642	Requests to apply additional security enhancements.	Enhanced security by upgrading Jackson.
1001701	Requests to apply additional security enhancements.	Enhanced security by upgrading logback.
1001685	Requests to apply additional security enhancements.	Enhanced security by upgrading spring-boot.
1001683	Requests to apply additional security enhancements.	Enhanced security by upgrading esapi.
1001682	Requests to apply additional security enhancements.	Enhanced security by upgrading org.json.
1001643	Requests to apply additional security enhancements.	Enhanced security by upgrading commons-fileupload.
1001580	Requests to apply additional security enhancements.	Enhanced security by upgrading zlib.
1001574	Requests to apply additional security enhancements.	Enhanced security by upgrading mchange-commons-java.
1001573	Requests to apply additional security enhancements.	Enhanced security by upgrading node.
1001572	Requests to apply additional security enhancements.	Enhanced security by upgrading openssl.
1001558	Requests to apply additional security enhancements.	Enhanced security by upgrading form-data.
1001533	Requests to apply additional security enhancements.	Enhanced security by upgrading spring-security.
1001550	Requests to apply additional security enhancements.	Enhanced security by upgrading axios.
997732	Requests to apply additional security enhancements.	Enhanced security by upgrading minimatch.
988036	Requests to apply additional security enhancements.	Enhanced security by upgrading cef.

Fix Pack 8

ID	Issue	Solution
996161	Poor performance in retrieving robot runs in log view.	Improved SQL query performance by making the query case insensitive.
995727	CEF could crash on specific pages due to nullpointer exception.	Fixed nullpointer exception in CEF.
995414	If the input was a hidden default value, Kapplets did not store the input data as part of the result.	The Kapplet result now stores the input value for default hidden inputs.
984804	Sorting projects in the Management Console did not work.	Projects can be sorted by clicking column headers.
988042, 983291, 968288, 963358, 957884, 957409, 952126	Requests to apply additional security enhancements.	Enhanced security by upgrading OpenSSL, Tomcat, libtiff, axios, and commons-fileupload.
976695	Entries for Select for Commit Action and Commit Action Robot are not always shown on the Kapplet results table page without a manual refresh.	The table page shows these entries correctly without a refresh.
976690	Kapplets sequential execution did not execute robots in order.	Robots are executed in correct sequential order.
976420	Unable to re-import project after renaming, due to duplicate ID in RobotToken	RobotTokens are regenerated to avoid duplicate IDs.
971925	Log could contain leftover debug log message "ERROR nodebox - global.hub.openResultStream"	The log message was removed.
957916	Could not open large Excel files in Basic Engine Robots.	Now the maximum file count and array size in Excel files are configurable.
960780	CyberArk entries not imported if "Delete project if exists" is unchecked.	CyberArk entries are now correctly restored.
951101	Docker hub repository name was outdated in the documentation.	Changed repository name from kofax to tungstenautomation.
954935	Adding and deleting a loop step while device automation is running caused a crash in Design Studio.	Fixed.
954705	Kapplets pie chart template preview was unreadable	Fixed layout issue.
953551	Request to apply additional security.	Enhanced security by locking npm packages to specific versions.
952986	Automating against Chrome or Edge after Edge build 140 could cause robots to hang.	Prevent recursive application trees.
950310	Race conditions in CEF could cause null-pointer exceptions.	Fixed two race conditions in CEF.
949952	Custom icons in Kapplet gallery did not persist properly in the workspace.	Custom icons properly persist and can be reused.
949904	Kapplet import reassigned Kapplet schedules to Admin.	Importing a schedule preserves the owner.
949902	Kapplets could only show 500 workspaces.	Added pagination to the workspace view.
949901	The UI of the create template page in Kapplets did not use the available area.	Fixed CSS to improve the layout.
949900	Filter was reset when pressing the Reload Data button in Kapplets templates.	Reload no longer resets the filter.
949899	It was not possible to edit Kapplet template icons.	When editing a Kapplet template the icon can be edited.
949898	Username appeared editable when editing a user in Kapplets.	The username is now shown as uneditable.
949897	Column headers not shown correctly in Japanese language for Kapplets.	Fixed layout issue of columns.
949896	Creating a group in Kapplet with an existing group name did not show an error and failed silently.	An error is shown if the group already exists.
949895	Saving a Kapplet schedule with invalid input would fail without error message.	An error is shown if the schedule cannot be saved and the view stays on the Kapplet creation page.
949893	Robots with output would fail to run as a Kapplet if no ouput was returned.	Empty output is now accepted in Kapplets.
949891	Restoring a Kapplet backup from 10.7 incorrectly gave global developer rights to the Kapplet Administrator.	Fixed bug in Kapplet backup restore.
949889	Paused Kapplet schedules were active when restored.	Paused Kapplet schedules are paused after restore.
949887	Kapplet input values were not always restored properly.	Fixed Kapplets backup restore.
949885	Kapplet users with User rights could not see result of robots with commit action.	Kapplet users with User rights can see the results of robots with commit actions and run commit actions.
949883	Could not enter numerical input in Kapplets when using Japanese keyboard.	Implemented proper handling of full- and half-width character conversion.
949880	Pagination did not work in the Kapplet icon gallery.	Fixed pagination issue.
949878	The context menu for deleting a template disappeared when the confirmation prompt was shown.	Modified handling of confirmation dialogs to be the same for all components.
949876	Non-default Kapplet template icons would change to a default icon when editing a template.	Non-default icons are no longer changed automatically.
949874	Sorting Kapplet templates would delete entered input values.	Kapplet input values are not deleted when sorting templates.
949872	Hidden input field with default input values caused the field to be required.	Hiding a field no longer makes it a required field.
949810	It was not possible to resize the Kapplets charts preview.	Kapplets chart preview is resizable.
949807	Kapplet template showed hidden objects on start page.	Hidden objects are no longer shown.
949803	Downloading Kapplet results from History could sometime download a file without extensions in Japanese UI.	Fixed encoding issue.
847437	JAB failed to detect cell content.	Added extended support to retrieve content from data grids in Java applications. The extended support is opt-in because additional data in the device tree could break existing robots. To enable the extension, add the environment setting KOFAX_RPA_JAVABRIDGE_POLICY=table_children on every applicable Desktop Automation Service host. Note that Java does not provide valid coordinate information for this content, therefore, support is limited in the Recorder View in Design Studio.
847328	Robots page could become slow under heavy load.	Optimized SQL queries to improve performance.

Fix Pack 7

ID	Issue	Solution
943045	Client certificates did not contain the full certificate chain in CEF.	The certificates now contain the full certificate chain.
942077, 936856, 933565, 933557, 933553, 933552, 933543, 933542, 933539, 847790	Requests to apply additional security enhancements.	Enhanced security by upgrading node, Tomcat, sshd, protobuf-java, nimbus-jose, coomons-io, bootstrap, spring-webmvc.
936086	A robot might become unresponsive when executing certain steps.	The interrupt flag is now cleared before throwing InterruptedException, which prevents robots from becoming unresponsive.
847407	Using RFS with the Write file step failed on Tomcat 9.0.99 and newer.	RFS is now writable again and no longer fails with the Write file step.
847317	Design Studio could fail if applications were closed during updates.	Updates are now completed before the application closes.
847052	Inserting a remote device step could make Design Studio unresponsive for several minutes.	Design Studio no longer becomes unresponsive; the deadlock with Java Access Bridge has been resolved.

Fix Pack 6

ID	Issue	Solution
2169705	Requests to apply additional security enhancements.	Enhanced security by using a strict deserializer.
2168470	Webkit instance used by JavaScript converter crashed after use on Linux.	WebKit instances for JavaScript conversion are now handled on a separate thread.
2166048	It was not possible to view history for users with the “Kapplet User” role and "User" privilege.	Fixed the permission check for viewing history.
2164579	Microsoft SAML2 login page hung before the password prompt was shown.	Changed the framerate for the SAML2 login page.
2164416, 2163269	CEF DOM tree changes were not always detected when subtrees were deleted.	Improved CEF change detection logic.
2162789	Synchronization of large projects could fail.	Modified files are explicitly marked for stashing instead of searching through all files.
2162019	CORS could not be disabled in the cef.cfg configuration file.	CORS can now be disabled.
2154502	Crash connecting to HTTPS websites that request client certificates.	Client certificates handling now works.
2151019	Duplicate RoboServers could cause split KCU allocation.	Duplicate RoboServers are no longer assigned KCUs.
2166202, 2163354, 2162061, 2159884, 2158320, 2152845, 2144297, 2148081	Requests to apply additional security enhancements.	Enhanced security by upgrading Tomcat, QueryDSL, XStream, Spring-security, Xalan, Postgresql jdbc driver, OpenSSL, Spring
2160628	Requests to apply additional security enhancements.	Enhanced security by upgrading Ubuntu in Docker files.
2159455	Negotiate authentication failed on Linux if there were no pre-existing SPNEGO/Kerberos credentials present.	Added a setting to control the list of supported authentication algorithms.
2151019	Duplicate offline RoboServers could be assigned KCUs	Make sure to remove duplicate RoboServers and prevent assigning KCUs to offline RoboServers.
2142351	CEF crashed on tree retrieval while rendering a PDF file when using chrome PDF extension.	Ignore loading data from EMBED elements when using the PDF extension.
2138965	CEF crashed on rendering due to a mismatch when streaming the tree.	An empty toolbar tree is now included when streaming the tree.
2139011	CEF might crash for pages that create short-lived browser instances for file uploads.	Building a streaming tree no longer fails if the browser instance is destroyed.
2138148	CEF could not load on Windows server 2016 after CEF upgrade.	Removed API call that is no longer available in Windows Server 2016.

Fix Pack 5

ID	Issue	Solution
2135223	Robots queued with the .NET API would sometimes cause an exception and time out.	Updated the .NET API.
2133099	Management Console was unable to connect to Desktop Automation Service due to race condition when disconnecting.	Improved handing of DAS tokens on disconnect.
2130804	Visiting websites with CEF that send a 401 error with a WWW.Authenticate header would fail on Linux.	Fixed negotiate authentication on Linux.
2134451, 2129721, 2129715, 2128404, 2126231, 2115740, 2115710, 2112365, 2112364, 2112361, 2112359, 2112341, 2112283 2110958, 2109818, 2109775, 2103480	Requests to apply additional security enhancements.	Enhanced security by upgrading Spring, Protobuf.js, Node, Follow-redirects, Apache http-client, Aircompressor, CEF, Commons-configuration, Esapi, Spring-security, Tomcat-embed, Xmlsec, Commons-compress, Jackson, Httpclient, Bcprov, Commons-net.
2129426	Password retrieval could fail if there was a long time delay between retrievals.	Improved token re-authentication.
2129418, 2129417	The Japanese localization of the Desktop Automation Service and Kapplets were not accurate.	Improved localization based on customer feedback.
2119350	Removing the last column in an Excel sheet in a Basic Engine Robot did not work.	Fixed bug.
2118606	The user role setting for projects did not work.	Fixed the ProjectsTabPermission.
2118603	The Items per page selector on the Project page in the Management Console did not work.	Fixed pagination logic.
2118600	Kapplet templates were marked as invalid for all robot changes.	Kapplets templates are only marked as invalid for changes to the robots input/output signature.
2112499	Request to apply additional security enhancements.	Removed usage of Commons-beanutils and Commons-digester.
1975763	Running Configurator without options displays unexpected errors.	Configurator.jar is no longer maintained with 11.5 and newer releases.

Fix Pack 4

ID	Issue	Solution
2106732	Open email as HTML did not support Japanese in the email subject.	Japanese is now displayed correctly.
2106731	The Go-to action was not enabled for Basic Engine Robots without execution privilege.	Changed the required parameters.

Fix Pack 3

ID	Issue	Solution
2105058	Desktop Automation Service failed silently if the mapping contained the wrong Management Console.	Design Studio now reports an error if Management Console cannot be contacted.
2104787	JavaScript converter required that the script ends with a semicolon.	JavaScript converter no longer requires a semicolon at the end.
2104782	Input to the JavaScript converter was not automatically escaped.	Input is now escaped.
2104245	JavaScript converter performance issue with concurrent usage.	JavaScript converter no longer uses a single shared resource to convert JavaScript.
2103332	In the Management Console, the default cluster connection type was incorrect.	"RoboServer as client" is now the default connection type.
2102282	The Set Named Tag step with the option "Is Same Table Column" changed behavior in Kofax RPA 11.5 and produced an error.	The step now behaves the same as in older RPA versions.
2099046	In the Management Console, high availability could fail when switching nodes with the error "Non-serializable objects submitted to the Hazelcast scheduler."	Upgraded Hazelcast.
2095982	Could not log in from Design Studio due to exceeded maximum number of unique users.	Design Studio login no longer checks for available Management Console users.
2092285	In Management Console, adding or editing passwords to the password store did not work.	Fixed a mismatch between the internal and hybrid modes of password store.
2090810	Exporting old Desktop Automation steps could create robots with invalid names.	Replaced multiple spaces with a single space and trimmed the name when exporting step.
2090809	In Design Studio, the Export robots option used to convert the old Desktop Automation step did not work correctly if the step name contained a dot (.)	This option now works correctly.
2087937	In Kapplets, restoring backups failed with the following warning: "Some restored schedules have invalid input data."	The schedules are now restored properly.
2086254	In Kapplets, restoring backups before version 11 failed due to missing synchronization between Management Console and Kapplets.	Management Console and Kapplets are automatically synchronized before restoring a backup in Kapplets.
2086171	The Remove columns action in Excel did not work for Basic Engine Robots.	Upgraded POI.
2086138	Transpose Table did not work in Basic Engine Robots.	Added methods to handle the rowspan and colspan attributes.
2083472	In Management Console > Settings > Process Discovery Analyzer, the "Network pattern" field was marked as required.	The field is now optional.
2073875	Specific SSL certificates could not be used with RoboServer.	Upgraded HTTP-client.
2067002	Request to apply additional security enhancements.	Upgraded Tomcat-embed-core.
2066065	Production cluster was re-added on Management Console restart.	Production cluster is no longer re-added automatically.
1997442	The robots list was empty when creating Kapplet template on a fresh install.	Fixed OAuth authentication issues.

Fix Pack 2

ID	Issue	Solution
2086315	In the docker-compose example, the placeholder name for the KAPPLETS_SERVICES_MC_CONNECTION_SERVICE_SHAREDSECRET variable was inconsistent.	The placeholder name was updated to @kappletsSharedSecret@.
2084896	In Docker, when adding the second LDAP directory, the build threw the following error: "FATAL com.kapowtech.scheduler.server.spring.SpringContextListener - LdapDirectories in login.xml have same ldapDirectoryIdentifier."	Added the LOGIN_LDAP_DIRECTORY_IDENTIFIER_<N> property for Docker.
2083019	In Design Studio, when opening 11.0 (or earlier) robots that contain the Excel step with the Open File action, the robots failed.	These robots can be now upgraded successfully.
2073445	Management Console backup restore from version 10.6 did not work correctly because trigger was null.	Added check for null. It is now possible to restore backups from 10.6.
2070198, 2069234, 2013482, 1997559, 1997554, 1997543, 1990002, 1989995, 1975983, 1975951, 1975910	Request to apply additional security enhancements.	Enhanced security by upgrading Logback, CEF, Temurin JDK, Thymeleaf, JGit, SQliteCPP, Ivy, Okio, Cryptography, PDFium and CPython.
2069000	Desktop Automation Service could not authenticate to Management Console when using service authentication.	Service authentication now works properly.
2068081	In Basic Engine Robots, the Normalize Table action step did not work and produced no error messages.	The action step now normalizes tables properly.
2067629	In Management Console, error messages from failing robots were not logged and the "Message" column of the log table appeared empty.	Added error message to the Throw step in Robots.
2064553	JavaScript converter memory leak could cause increase of kapowbrowser memory consumption.	Memory leak fixed.
2064544	In Design Studio set to the Japanese language, the "Test value" field for the input variables was not translated accurately.	Fixed the translation.
2064520	Management Console did not send emails about errors in schedules running CEF robots.	Changed log handling from normal to email logging.
2063011	In Management Console, it was not possible to configure input during schedule creation when input variables were defined in a snippet.	Added proper condition checks to define in which cases input variables should be extracted from entities such as Robots, snippets, and others.
2060441	RoboServer installed from a .deb package prevented robots from starting.	Fixed missing execute permission.
2060367	Kapowlock on Linux failed due to missing dependency.	Added missing dependency.
2059785	In Management Console, the test connection button did not work properly for KTA 7.8 and 7.9.	The Test button now works for all supported KTA versions.
2058850	Design Studio did not accept lowercase HTTP header names.	Design Studio now adheres to standard and ignores the case of HTTP headers.
2057891	In Management Console, a user with the Project Administrator role could see users from all projects.	Removed the "viewUsers" permission from the Project Administrator role.
2057393	HTTP connection leak could prevent robots from starting.	Fixed HTTP connection leak.
2056237	When adding and removing a file in Management Console between synchronizations, Synchronizer created an empty commit with the "deleted files" message during the next sync action.	Management Console no longer notifies Synchronizer about the files that were added and removed between synchronizations.
2056235	Synchronizer commits were not displayed in the correct order.	Commits are now ordered by timestamps.
2054878	It was not possible to install Process Discovery Analyzer on Ubuntu 22.04.	Added missing dependency.
2042498	In Design Studio, image finders could fail if the page contained unrelated off-screen elements.	Unrelated off-screen elements are now disregarded in image finders.
2040783	In the .NET API, a token could be used while reauthentication was in progress.	Fixed race condition in the .NET API.
2040019	A race condition could cause the Document Transformation Service to become unresponsive when running in debug mode.	Fixed race condition.
2038229	In Management Console, a user with the Project Administrator role could see all projects.	The project list retrieved from the database is now filtered by user role.
1981216	In Management Console, cluster name was not shown if the field was too narrow.	Cluster name is now truncated if the field is too narrow.

Fix Pack 1

ID	Issue	Solution
2039620	When shut down, RoboServers still appeared in the cluster list and did not restart.	When shut down, RoboServers are now removed from the cluster.
2038535	In Kapplets, the "Log out" option did not work properly.	When clicking "Log out" in Kapplets, the user is now logged out completely.
2038222	In Management Console, a user that had no admin role could delete trigger mappings from other projects.	Only users that have admin roles can remove trigger mappings from other projects.
2037177	In Management Console, if different users uploaded and removed a file, Synchronizer mixed up the committers.	In Management Console, if different users upload and remove a file, Synchronizer now reports the committers correctly.
2032667	Management Console could stop pinging RoboServers after waking up from sleep mode.	Management Console now pings RoboServers after waking up from sleep mode.
2015516	Quick RPA failed when using the Date field within the data object.	When using the Date field within the data object, Quick RPA now works correctly.
2001550	In Design Studio, when adding a definition in the "Robot definitions" pane, pressing the Tab key could cause an error.	When you add a new definition and press Tab, Design Studio works properly.
2000903, 2000328, 1990000	Request to apply additional security enhancements.	Enhanced security by upgrading WebP in WebKit and Chromium, along with spring-security.
2000529	In Kapplets, validation rules made the input fields required.	In Kapplets, some validation rules were removed, and the respective input fields are no longer required.
1998408	Management Console could become unresponsive due to a deadlock during LDAP authentication.	The following properties were added to the login.xml file: connectTimeout: The timeout in milliseconds for connecting to the LDAP server. readTimeout: The timeout in milliseconds for the LDAP response from the server after the initial connection is established with the server. In Docker, the LOGIN_LDAP_DIRECTORY_CONNECTTIMEOUT_<N> and LOGIN_LDAP_DIRECTORY_READTIMEOUT_<N> environment variables were added. After specifying the timeout values in milliseconds, LDAP authentication works properly.
1997288	Duplicate setting in Management Console docker-compose example with LDAP caused error during startup.	The duplicate setting was removed, and the docker-compose file now starts successfully.
1997109	WebKit ignored the maxLength setting for the text box control on HTML forms.	WebKit no longer ignores the maxLength setting.
1991415	In the Desktop Automation Service, it was impossible to switch to the Single user mode if a Management Console URL was entered first.	In the Desktop Automation Service, it is now possible to switch to the Single user mode if a Management Console URL is entered first.
1991183	In the Desktop Automation Service configuration window, the French check box label was not positioned correctly.	The French check box label is now positioned correctly in the Desktop Automation Service configuration window.
1990981	In the Desktop Automation Service configuration window, the Japanese check box label was not positioned correctly.	The Japanese check box label is now positioned correctly in the Desktop Automation Service configuration window.
1989401	RoboServer on Windows mistakenly tried to start Xvfb.	RoboServer on Windows no longer tries to start Xvfb.
1988224	When restoring a backup in Kapplets, Kapplets with required inputs were not properly restored and caused schedules not to start.	Kapplets with required inputs are now correctly restored.
1985808	If robots included many parallel guards, they became unresponsive.	Having many parallel guards in a robot no longer causes any issues.
1985807	The Document Transformation Service callback did not work.	The Document Transformation Service callback now works properly.
1982766	Opening PDF files via javascript did not trigger a download in CEF.	Fixed handling of PDF documents if they are loaded in the inline frame.
1977488	The node.exe processes could work incorrectly in some error situations.	The node.exe processes now work correctly.

Changes in behavior

This fix pack includes the following cumulative changes in behavior from all fix packs for .

Fix Pack 7

The RPA repository name on Docker Hub has been updated to "tungstenautomation" to reflect the Tungsten Automation brand.

The docker-compose examples delivered with the product installer have been updated to use the new "tungstenautomation" repository name.

Check the available versions for each RPA component on Docker Hub:

• Management Console
• RoboServer
• Kapplets
• Robot File System
• Synchronizer

Fix Pack 5

The configurator.jar is no longer maintained with 11.5 and newer releases.

Fix Pack 2

Due to the JDK upgrade, the white-labeling script has been updated.

Running robots using the Chromium-based browser engine now creates temporary files and folders.

Each instance of CEF now creates and removes a set of temporary files that will be removed when the browser process is done.

• On Windows, the default location is under users\[username]\appdata\local\temp.
• On Linux, the default location is under /tmp.

Fix Pack 1

The KCU cost of Robots was adjusted to align better with Basic Engine Robots.

• Added 10,000 point cost to the following application steps:

  • Browse
  • Windows
  • Excel
  • Terminal
  • Document Transformation
  • PDF
  • Email
  • Open (deprecated)
  • Custom action

• The looping-step cost was reduced from 5,000 to 1 point per iteration.

• If a robot connects to one or more Desktop Automation Services, it costs 10,000 points in the beginning.

• For Basic Engine Robots, the KCU cost of the Call Robot action step was removed.

New and enhanced features

This fix pack includes the following cumulative new and enhanced features from all fix packs for .

This update is cumulative and includes the following new and enhanced features from all updates for .

Fix Pack 8

Support for Postgress 17

Kofax RPA now fully supports postgress 17

Configurable Excel file size limits

We are introducing system properties where user can increase default memory limits when working with excel files in Basic Engine Robots:

To configure the file size limits:

1. com.kapowtech.excel.maxFileCount - Sets the maximum file count that we allow inside zip files that we read. The default is 1000. In case of error: "The file appears to be potentially malicious. This file embeds more internal file entries than expected..." user should set this value to be bigger then 1000, e.g.: 10000.
2. com.kapowtech.byteArrayMaxOverride - Sets how large a single entry in a zip-file can be. Default is 100 000 000 bytes (100 MB). In case of error: "Tried to allocate an array of length ..., but the maximum length for this record type is ..." user should set bigger value then 100 000 000.

Fix Pack 7

Support for MySql 8.4

Kofax RPA now fully supports MySQL 8.4.

View running robots with viewClusters permission

A new permission viewClusters is available for admins to configure manually in the roles.xml file. Use this setting to grant permission to users for viewing robots with status Running on the Management Console > Admin> RoboServers page without granting permission to view database and cluster data.

To configure this permission:

1. In the roles.xml file, add the viewClusters permission under the clustersAndSettingsTabPermissions property.
2. Set the viewClustersAndDBMappings permission to false and the viewClusters permission to true.

Example:

<property name="clustersAndSettingsTabPermissions"> <bean class="com.kapowtech.scheduler.client.auth.ClustersAndSettingsTabPermissions"> <property name="viewClustersAndDBMappings" value="false"/> <property name="viewClusters" value="true"/>

Improved support for retrieving content from data grids in Java applications

Note that Java does not provide valid coordinate information for this content, so support in the Recorder View in Design Studio is limited.

This extended support is opt-in because the additional data in the device tree can break existing robots. To enable it, add the environment setting KOFAX_RPA_JAVABRIDGE_POLICY=table_children on every applicable DAS host.

Fix Pack 6

Added configuration to override default authentication schemes

To make it possible to disable negotiate authentication (See bug 2159455) the list of permitted authentication schemes can be overridden in common.conf

• cef.override.auth.schemes
  • Overrides the set of permitted authentication schemes. Set to a comma-separated subset of basic, digest, ntlm, and negotiate.
• cef.override.gssapi
  • (Linux only) Overrides the default GSSAPI library. Set either to name or full path. If this is set to a non-existing file, it disables GSSAPI support, which disables support for the negotiate authentication.

Optional landing page when SAML is configured

The Management Console can display a pre-login landing page informing the user to login to the SSO provider. The landing page is disabled by default and can be enabled in saml.xml by setting the useSamlLoginLandingPage to true:

        <bean id="useSamlLoginLandingPage" class="java.lang.Boolean">
            <constructor-arg value="true"/>
        </bean>
    

Fix Pack 4

Enhancement request 1821999

New Kapplets show results as they are being returned was implemented (same as earlier Kapplets did), yet not listed in the Release Notes for the 11.5 release.

Levenshtein and Longest Common Subsequence (LCS) converter functions

For Basic Engine Robot expressions, the expression functions, Levenshtein and Longest Common Subsequence (LCS), were added.

• The Levenshtein distance function takes two strings as input and returns the Levenshtein distance between the two strings.

  This function has an optional threshold parameter. If a threshold is used, the calculation stops when the distance reaches the threshold.

  Use this as a performance optimization if only strings of a certain similarity are of interest.

• The Longest Common Subsequence (LCS) function takes two strings as input and returns the longest common subsequence of the two strings.

  This is a one-result version meaning that even when multiple longest common subsequences exist, only one is returned.

Fix Pack 3

Ability to specify proxy settings

It is now possible to configure proxy settings for CEF in Docker.

Example:

• SETTINGS_CLUSTER_COUNT=1
• SETTINGS_CLUSTER_NAME_1=Production
• SETTINGS_CLUSTER_PROXY_COUNT_1=1
• SETTINGS_CLUSTER_PROXY_HOST_1_1=proxy-service.com
• SETTINGS_CLUSTER_PROXY_PORT_1_1=8080
• SETTINGS_CLUSTER_PROXY_USERNAME_1_1=test123
• SETTINGS_CLUSTER_PROXY_PASSWORD_1_1=passwd123

Automatically scale RoboServers using JMX

It is now possible to enable JMX in Docker, which previously was configured either in the RoboServer Settings application or by specifying parameters in the command line.

JMX queries the number of running robots and helps with RoboServer scaling.

Examples:

• WRAPPER_JAVA_ADDITIONAL_1=-Dcom.sun.management.jmxremote.port=50200
• WRAPPER_JAVA_ADDITIONAL_2=-Dcom.sun.management.jmxremote.authenticate=false
• WRAPPER_JAVA_ADDITIONAL_3=-Dcom.sun.management.jmxremote.ssl=false
• WRAPPER_JAVA_ADDITIONAL_4=-Dcom.sun.management.jmxremote.rmi.port=9191
• WRAPPER_JAVA_ADDITIONAL_5=-Dcom.sun.management.jmxremote.local.only=false
• WRAPPER_JAVA_ADDITIONAL_6=-Djava.rmi.server.hostname=0.0.0.0
• ROBOSERVER_JMX_ENABLE=true
• ROBOSERVER_JMX_PORT_NUMBER=50100
• ROBOSERVER_JMX_SHOW_INPUTS=true
• ROBOSERVER_JMX_HEARTBEAT_INTERVAL=0
• ROBOSERVER_JMX_RMI_ENABLE=true
• ROBOSERVER_JMX_RMI_URL=0.0.0.0:51001
• ROBOSERVER_JMX_ENABLE_AUTHENTICATION=true
• ROBOSERVER_JMX_USERNAME=username
• ROBOSERVER_JMX_PASSWORD=securepasswd

For more information, see the README.md file.

Fix Pack 2

• External and internal password store can now be used at the same time. It is now possible to configure and use external and internal password store simultaneously.

• REST endpoints now support API tokens. It is now possible to use an API key as authorization type for REST/RUN calls.

Fix Pack 1

In Management Console, the "RPA" API token is renamed to "Design Studio Execution Token." The name now reflects that the token allows robots executed in Design Studio to access resources such as Password Store and Robot File System.

Known issues

Kofax RPA documentation requires clarification.

Fix Pack 3

The following resolved issues were not mentioned in the Kofax RPA Release Notes.

ID	Title	Description
1956628	Design Studio became unresponsive because of connection issues.	If the connection was unstable or slow during synchronization with Management Console, Design Studio did not respond.
1929082	In Design Studio, some toolbar buttons were disabled in Debug mode.	When running Basic Engine Robots in Debug mode, some buttons were greyed out.

Configurator.jar is no longer maintained and does not work. It will be removed from the product in the next major release.

Fix Pack 2

Thumbnails configured for Robots and Basic Engine Robots in Design Studio are only displayed in Kofax TotalAgility integration with RPA.

The Library protocol is deprecated.

Fix Pack 1

The Telemetry feature applies only to Management Console.

Documentation

This ReadMe includes the following documentation updates.

ID	Issue	Solution
1014424	The Visual C++ redistributable bundled in the MSI installers was out of date.	The Windows system requirements in the Technical Specifications have been updated. Microsoft Visual C++ 2015–2022 Redistributable (x64) version 14.44.35211 and newer is now a requirement for running DAS, RoboServer, and Design Studio on Windows.

Fix Pack 8

ID	Issue	Solution
956269	The description of the project access for Kapplet Administrators in Kofax RPA Help needs clarification.	The description of the Kapplet Administrator role says that "Users with this role gain a read/write access to projects in Management Console from Kapplets." The statement should be: "Users with this role gain read access to projects in Management Console from Kapplets."
954114	The "Tungsten RPA limitations" in Kofax RPA Help has an omission.	The "Execution mode" list of steps that are not available in the Smart Re-execution mode should include Remove Tags.
851809	The procedure for running RoboServer as a service on a Windows server in the Kofax RPA Administrator's Guide needs clarification.	The "Run RoboServer and Management Console as a service" topic should specify that folders in the systemprofile directory need to be created manually when running RoboServer as a service on a Windows server.
847752	Audit log reference in the Kofax RPA Administrator's Guide was not sufficient.	The audit log description should specify that the log captures activities that result in changes to configurations or database content, as well as authentication events.
847336	Security properties of the Load Page action in the Browse step in Kofax RPA Help need clarification.	The description of security properties of the Load Page action should include the following note: "It is not possible to use different client certificates for the same host or domain within the same robot run."
847239	Recommended database configuration in the Kofax RPA Administrator's Guide has changed.	The recommended setting for the testOnBorrow property is now true for all database types decsribed in the "Create a Tomcat Context File" topic.
847073	The Analytics for RPA configuration procedure in the Kofax RPA Help needs clarification.	Step 5 should include the following note: "If you plan to integrate multiple Analytics products, do not use Import from file. Instead, create a blank project and import the <Project>_Admin.xml file first. Refer to the Knowledge Portal articles for more information."

Fix Pack 7

ID	Issue	Solution
949719	The location of the "Open in Design Studio" link for Robot messages in Kofax RPA Help needs clarification.	The "Open in Design Studio" link can be accessed from the Location code column, not from the context menu.
935326	A deprecated SAML Signature Algorithm was mentioned in the Kofax RPA Administrator's Guide.	Instead of SHA-1, the Example OneLogin configuration procedure should specify the following settings: "Set the X.509 certificate to Standard Strength Certificate (2048-bit) and the SAML signature algorithm to SHA-256."
851811	The description of the project access for Kapplet Administrators in Kofax RPA Help needs clarification.	The description of the Kapplet Administrator role says that "Users with this role gain a read/write access to projects in Management Console from Kapplets." The statement should be "Users with this role gain read access to projects in Management Console from Kapplets."
847243	Changes in behavior for the CEF 'Save As' dialog.	Previously, when you saved a file in CEF using the Save As dialog, after selecting Save, the application tab was left open. In Kofax RPA 11.5.0 and newer, the tab closes automatically. This change may affect robots created in older RPA versions that have a step that closes the save dialog application tab.

Fix Pack 3

ID	Issue	Solution
2108955	The instructions on how to connect Desktop Automation Service to Management Console when using Attended Automation require clarification in Kofax RPA Help.	Configure the Desktop Automation Service to use Management Console authentication and not the shared secret. The shared secret authentication is not user specific. Trigger robots must have a user to run.
2108882	The description of the -nd --NoDoc RoboServer parameter requires clarification in the Kofax RPA Administrator's Guide.	This optional parameter disallows robot documentation requests to this RoboServer. For more information, see the Robot Documentation topic in Kofax RPA Help.
2105175	In Management Console, the OAuth configuration procedure requires clarification in the Kofax RPA User's Guide and Help.	Refer to your service provider documentation on how to generate refresh tokens for OAuth 2.x.
2102641	The description of the Email step enhancements requires an update in the Release Notes.	Instead of the Open email folder action description please read the following: Open email as HTML: Opens an email as an HTML web page using the Chromium built-in browser. Only email files (.eml) in MIME format are supported.

Fix Pack 2

ID	Issue	Solution
2036881	The description of the Robot Freeze Tree step requires clarification in the Kofax RPA User's Guide and Help.	The Freeze Tree step is supported by built-in Excel functions. Within a Desktop Automation Service robot workflow, the Freeze Tree step is not supported for use with the following applications: Chromium built-in browser (Browse step) Database (all Database steps) File system (File System Action step) Email (Email step) Terminals (Terminal step)
1996608	In the Custom Action step topic, the Connector timeout option requires an update.	To set the timeout to a higher value, add the following line: wrapper_java_additional.<nr>=-Dhub.action.connector.second=<timeout>
1970441	Information about Kofax RPA naming policy requires an update.	Consider the following guidelines when creating names in Management Console and Design Studio. Names must be unique and cannot be duplicated, even if the case is different but the name is the same. During backup, restore, and import operations, case is not considered, resulting in errors for duplicate names with different case letters such as "a.robot" and "A.robot." Duplicate names are not allowed, including robots, snippets, types, resources, and database mapping names. Duplicate names in parent folders are not allowed, including robots, snippets, types, resources, and database mapping names.

Applies to

This fix pack is a full installation.

You can apply this fix pack to replace any Kofax RPA product version or install it next to the current version without replacing it.

Files included

This fix pack includes the following files.

File name	Version
KofaxAnalyticsforRPA- .zip
KofaxRPADocumentation- _EN.zip
KofaxRPADocumentation- _FR.zip
KofaxRPADocumentation- _JA.zip
KofaxRPAManagementConsoleDocumentation- .zip
KofaxRPAProcessDiscoveryAnalyzer- .zip
KofaxRPA- .tar.gz
KofaxRPA- .msi
KofaxRPADesignStudio- .msi
KofaxRPADesktopAutomationService- .msi
KofaxRPADocumentTransformationService- .msi
KofaxRPAProcessDiscoveryAgent- .msi
KofaxRPARoboServer- .msi
ReadMe-KofaxRPA- .htm	N/A

Install this fix pack

To install this fix pack on top of the existing Kofax RPA Management Console database schema, use the following procedure.

1. Back up your existing installation by creating a Management Console backup.
2. Install the required components. For details, see the Kofax RPA Installation Guide.
3. Use the existing database schema when installing the Management Console in Tomcat.

When upgrading from other versions, use the following procedure to install the fix pack.

1. Back up your existing installation by creating a Management Console backup.
2. Install the required components. For details, see the Kofax RPA Installation Guide.
3. In the new Management Console, restore the backup.

Remove this fix pack

This fix pack is a full installation. Follow the standard uninstallation procedure for Windows or Linux applications.