Fixes and improvements from a full QA pass of 0.33.3 (fresh appliance from the release, real agents on Windows 11, Windows Server 2022, Debian, Proxmox VE, Hyper-V and ESXi).
New
- Two machines using one agent — when a copy of an enrolled machine runs (a VM restored as a new VM, instant recovery, a started replica, a clone), the console now notices that two machines connect as the same agent, holds that agent's backups and restores so nothing runs on the wrong machine, shows it on the Agents page and the dashboard, and emails the administrators. Stop the copy or enroll it as a new machine.
- Time zone — the appliance starts in UTC; set your zone under Settings → Network or in the setup menu (item 9). The zone is shown in the sidebar and next to the point-in-time field of database restores.
- SSO with your own CA — OpenID Connect and SAML identity providers with a certificate from an internal CA or a self-signed one (on-premises Keycloak, AD FS): paste the CA certificate in the single sign-on settings.
- Recovery ISOs — the Recovery media page links the Linux recovery ISO published with the release;
build-winpe.ps1for the Windows recovery ISO is attached to the release, and the guide explains building it. - Getting started steps on the dashboard of a new console, and a reminder while admin still has the generated initial password.
Fixes
- Appliance: an enlarged VM disk is now taken into use at the next start (the root file system grows while running).
- Appliance: the screen no longer shows the initial admin password after it was changed.
- Job exclusions now also accept full paths (
C:\Data\Temp,/srv/cache, also with wildcards); before, only names worked and a full path was silently ignored. - Windows agent installer: a silent install with
ENROLLCODEfor another console now moves the machine to it (the same console's code still keeps the enrollment). - Agent installation from the console over SSH: the ed25519 host key fingerprint the guide asks for is accepted.
- Agent enrollment is recorded in the audit log.
- The recovery sheet lists the exact variables for the storage type, including the SFTP host key, so its restore commands work as printed.
- NAS jobs explain mount failures (share missing, access denied, NFS export, server not answering, tools missing); changing the share on the same server keeps the stored password.
- Hyper-V: a VM restored as a new VM gets automatic checkpoints turned off.
- Messages: "1 database", "1 old backup" and the like.
Releases are signed with the BackupZit release key; consoles verify them before installing.
