Rebex Buru SFTP Server 2.11.1: Support for Virtual Accounts, Managed Service Accounts and more improvements.

November 24, 2023 | Lukas Paluzga

We have released Rebex Buru SFTP Server v2.11.1. Here is an overview of changes, fixes and improvements.

Support for Virtual Accounts and Managed Service Accounts

Buru SFTP Server installer now supports Virtual accounts and Managed Service Accounts (MSAs) for service users.

Virtual accounts are designed to provide applications or services with a unique identity without the need to manage passwords or create a traditional account. These accounts are local to the machine or application.

Managed Service Accounts (MSAs) are created to managing services in a domain environment. Similar to virtual accounts, no local password management is required.

For more information, see Service accounts overview on microsoft.com.

Support for X.509 server key certificates, encrypted private keys and other host key algorithms

In addition to plain SSH private keys, the server now supports X.509 server key certificates and encrypted private keys.

The following certificate-based host key algorithms were added:

x509v3-ecdsa-sha2-nistp521 - X.509 certificate with ECDSA on NIST P-521 curve and SHA-2 hash
x509v3-ecdsa-sha2-nistp384 - X.509 certificate with ECDSA on NIST P-384 curve and SHA-2 hash
x509v3-ecdsa-sha2-nistp256 - X.509 certificate with ECDSA on NIST P-256 curve and SHA-2 hash
x509v3-rsa2048-sha256 - X.509 certificate with 2048+ bit RSA and SHA-256 hash
x509v3-sign-rsa-sha256@ssh.com - X.509 certificate with RSA and SHA-256 hash
x509v3-sign-rsa - X.509 certificate with RSA and SHA-1 hash
x509v3-sign-dss - X.509 certificate with DSA and SHA-1 hash

In addition, the following algorithms were added:

ecdh-sha2-1.3.132.0.10 - Elliptic Curve Diffie Hellman key exchange with secp256k1 curve and SHA-256 hash. Supported on Windows 10+ and Windows Server 2016+.
ecdsa-sha2-1.3.132.0.10 - Elliptic Curve Digital Signature Algorithm (ECDSA) on secp256k1 curve with SHA-256 hash. Supported on Windows 10+ and Windows Server 2016+.

Minor fixes and improvements

2.11.1

Web Admin - fixed error when saving SSH algorithms on Windows 7/8.

2.11.0

Support for ecdh-sha2-1.3.132.0.10 and ecdsa-sha2-1.3.132.0.10 algorithms on Windows 10+ and Windows Server 2016+ (enabled by default) - see configuration.

2.10.2

Web Admin - added config.yaml text editor.
Web Admin - configuration split to separate pages.

2.10.1

Fixed file access issue that prevented users from accessing files being currently written to (for example, log files).

2.10.0

Support for X.509 server key certificates.
Support for encrypted private keys.

2.9.6

Installer now supports Virtual accounts and Managed Service Accounts (MSAs). See Service accounts overview on microsoft.com.
Command-line tools now respect NO_COLOR environment variable.
Fixed svc uninstall not stopping service before uninstalling.
Startup logs now close after service is started.
Startup logs can now be disabled using --no-startup-log command-line switch.

For complete list of fixes and improvements see Release notes

Issues and feature requests on Github

You can report issues and submit feature requests on our Github issue tracker. For discussions and specific problems please keep using our support forum.