---
myst:
  html_meta:
    "description lang=en": "Kasm Workspaces version 1.17.0 release notes. New features, usability enhancements, new Docker containers, and bugfixes."
    "keywords": "Release, 1.17.0"
    "property=og:locale": "en_US"
---
```{title} What's new in Kasm 1.17.0
```

# What's new in Kasm 1.17.0

```{warning}
Due to the removal of nginx configuration from the AutoScale API, existing startup scripts need to be updated to remove any references to the nginx_cert_in and nginx_key_in variables. See [Startup Scripts](../guide/compute/pools.md#startup-scripts)
```

## Highlights

- [Autoscaling](autoscale_configuration) is now available in Kasm Workspaces: Community Edition.
- Dynamic AutoScaling of Kasm agents and server VMs on [Proxmox VE](/how_to/infrastructure_components/autoscale_providers/proxmox.md).
- Added the ability for administrators to add overt {doc}`Banners <../guide/banners>` to sessions.
- Added support for web native {doc}`Smart Card Pass-through <../guide/smartcard_passthrough>` in RDP sessions on ChromeOS devices

## Features

- **Usability Enhancements**
  - Updated Autoscale form to standardise the units used for memory to GiB.
  - Removed unused Nginx configuration from Autoscale form.
  - Added spotlight entry for the Kasm AI registry.
  - Added global settings to control {ref}`url-categorization-caching`.
  - In a multizone environment a test is performed to find the zone with the lowest latency relative to the client connecting and used where the selected zone is "Auto". 
  - Renamed `--offline-plugin` to `--offline-network-plugin` in install script arguments.
  
- **Infrastructure Support Enhancements**
  - Added a flag to exclude log data when using the `pg_backup` script
  - Added support for OIDC single logout
  - Updated the Kasm Agent to detect GPUs running on NVIDIA Jetson devices.
  - Downscale backoff autoscaling configuration added for `Server`-type pools
  - Switched from official Postgres container to a Kasm maintained [Postgres image](https://github.com/kasmtech/kasm-db) that is better hardened and contains fewer vulnerabilities.

- **Kasm Image Enhancements**
  - Migrated our single app Workspace Images from Ubuntu Focal to Ubuntu Jammy in preparation for Focal's end-of-life.
  - Added [Alpine 3.21 Desktop](https://hub.docker.com/r/kasmweb/alpine-321-desktop) images for x86_64/aarch64
  - Added [Alpine 3.21 Core](https://hub.docker.com/r/kasmweb/core-alpine-321) images for x86_64/aarch64
  - Added [Ubuntu Jammy VPN](https://hub.docker.com/repository/docker/kasmweb/ubuntu-jammy-desktop-vpn) image for x86_64/aarch64
  - Added [CUDA Development Kit (Jammy)](https://hub.docker.com/repository/docker/kasmweb/core-cuda-jammy) image for x86_64
  - Updated VirtualGl to 3.1.2
  - Removed `NVIDIA_DRIVER_CAPABILITIES` environment variables from core workspace image dockerfiles to reduce confusion.
    When sessions are launched with nvidia GPUs, the variable is automatically assiged to `NVIDIA_DRIVER_CAPABILITIES=all`.
    Administrators can override this by setting the environment variable in the Docker Run Config Override.
  - Deprecated CUDA Development Kit (Focal), SuperTuxKart and REMnux Workspace Images.
  - Added aarch64 variant of [KasmOS Desktop](https://hub.docker.com/r/kasmweb/kasmos-desktop) along with minor theme improvements.

- **Licensing Enhancements**
  - Added support for Licenses that only grant connections to [Managed Egress Providers](../guide/egress.md#managed-egress-providers).

## Bugfixes

- Fixed bug resulting in unhealthy auto-scaled servers from not getting deleted after the host dead expiration.
- Fixed Kasm Windows Service failing to update the JWT token after a successful healthcheck, resulting in JWT tokens eventually becoming expired.
- Fixed bug to correctly set initial timezone in Debian-family workspace core images
- Fixed Workspace form issue blocking workspace image edits when the image is restricted to a zone.
- Fixed errors that could occur when [Managed Egress Accounts](../guide/egress.md#managed-egress-providers) are updated.
- Fixed bug that caused downloads from the session control panel with certain special characters to fail.
- Fixed issue that caused some autoscaled agents to immediately be terminated when sessions if s3 persistent profiles or session recording were used. This may have caused other sessions on these agents to be prematurely deleted for other users.
- Group names and priority numbers are enforced to be unique per deployment. Administrators will be required to update groups that violate these constraints when they attempt to edit the properties of those groups.
- Updated Autoscale Orphan cleanup check to better identify VMs that have missing Autoscale config associations.
- Fixed an issue that might leave orphaned sessions when an Autoscale event failed.
- Fixed an issue that prevented OpenVPN from working when using {doc}`Egress <../guide/egress>` on systems with `runc` versions `1.2.0` or later.
- Fixed bugs causing some configuration files to be truncated when disk is full. {doc}`NB: Some app configuration files have moved into new subdirectories. <../upgrade/config_locations_warning>`
- Fixed bug preventing workspace launch after removing zone restriction. To fix a workspace that was experiencing the issue prior to upgrade, open the workspace for editing and click "Save" without making any changes.
- Fixed bug that caused SAML / OIDC login to fail when the Kasm webapp was hosted on a custom port. Review {doc}`latest required headers <../how_to/reverse_proxy>` for using a reverse proxy, if applicable.
- Fixed a bug that allowed the autoscale system to potentially add more servers than the max instances value configured in the VM Provider.
- Increased the allowable length of the JWT token used for RDP local client authentication.
- Fixed issue during create workspace from session if the docker image contained a registry portion that included a port number.
- Removed "Add Zone" button
- Fixed bug where load balancing was not applied to server pools of type `Server`. See note in {doc}`the zone configuration table <../guide/zones/deployment_zones>` about load calculation for these pools.
- Added measures to prevent a race condition between creating a workspace session and the autoscale manager destroying the session's server due to the latter not being used
- Fixed casting and go launch modals to use the same style as the main workspace launcher, previous help text on launch configs was unreadable.
- Fixed an issue that prevented {doc}`Egress <../guide/egress>` from connecting on systems with Docker Engine 28.0 and later.
- Added an option to the server config **Connection Credential Type** of "Prompt User" to allow multiple users to login to windows, from 1.16.0 on the only way to prompt users was to select "Static Credentials" and leave the username and password empty, but that locked the **Max Simultaneous Users Per Server** to 1.
- Removed build tools from kasm_guac container, reducing vulnerabilities.
- Fixed a bug where the autoscale schedules tab wasn't always visible when it should have been when editing autoscale configs.
- Fixed bugs preventing cascading deletes from executing correctly
- Fixed issue preventing some services from automatically restarting when healthcheck failed
- Fixed an issue where LDAP user password resets appeared successful even when failing Active Directory complexity requirements. Users now receive an error message if the new password doesn't meet complexity rules.
- Fixed issue that caused connection failures to Windows sessions using the Web Native Client when the user's browser connects with HTTP/2.
- Fixed bug that caused logging exception upon autoscaled server creation.