**Release notes Safe Exam Browser for Windows version 2.

2:**

SEB 2.2 for Windows is a major update with new features and many improvements. This
version is replacing the SEB 2.1.x branch, with which it is compatible with one
important exception: If you defined URL filter rules in SEB 2.1.x for Windows, then
you'll have to re-enter those in the 2.2 SEB Config Tool, following the new filter
rule scheme. URL filter rules created and saved with SEB for macOS are already
compatible with SEB 2.2 for Windows.

- With the powerful new feature "Additional Resources", you can configure SEB to
use specific webpages, full or partial websites and documents securely and easily
in exams.

- Additional Resources can be opened using icons in the SEB task bar (similar to
permitted applications) or with hierarchical popup menus.

- External Additional Resources use the improved URL filter to only allow
displaying specific webpages, documents or sections of websites.

- Additional Resources can be embedded into SEB configuration files. An exam

administrator can add documents like PDF files and HTML documents.

- Even full HTML5 web apps can be added as embedded Additional Resources, so they
can be used in a fully offline exam scenario.

- You could deploy SEB Config Files containing an HTML5/JavaScript exam player onto
mobile devices and then perform an offline e-assessment. The commercial exam
solution Inspera Assessment is already supporting this.

- Improved URL filter which allows to use simple filter rules to effectively allow
specific web pages/sites/content and block all others.

- Improved, refactored browser engine based on Firefox 52 ESR. This is the last
Firefox version compatible with the XUL browser engine application used in SEB. We
are already working on the next generation of SEB for Windows, which will be using
a Chromium based browser engine (but this SEB 3.x branch won't replace the current
Firefox-based SEB before 2019).

- Improved blocking of third party applications and tools for screen sharing and
screen recording.

- Now preventing SEB being run in a remote session (using Remote Desktop Connection
or similar on an exam client).

- Improved stability when setting and resetting Windows Registry settings to

disable options like Task Manager, Switch User, Sign out and Shut down (reachable
with Ctrl+Alt+Del shortcut) during the exam and re-enabling them when quitting SEB.

- Integrated secure viewer for PDF files.

- Added Audio Control Component to SEB task bar, which allows to increase/decrease
and mute system audio volume. Audio can be muted or the audio level preset when
starting SEB.

- SEB config files can now be loaded from servers using authentication (Basic,
OAuth etc.) using seb(s):// links. Even indirect links (not containing the config
file name with the .seb extension, like for example
sebs://example.com/download.php?id=2352) are possible. This allows to store a SEB
exam settings file for example into the same Moodle course as the quiz. The login
session is remembered, therefore students don't have to login twice in SEB if you
start SEB/an exam using a seb(s):// link to a config file on an authenticated
server. Note: Starting SEB by opening a seb(s):// linked config file from an
authenticated server isn't supported in SEB for Windows 2.2, such indirect seb(s)
links can only be opened from inside SEB (for example from an exam portal/landing
page).
Note: Starting SEB by opening a seb(s):// linked config file from an authenticated
server doesn't work yet in this version, only opening such indirect seb(s) links
from inside SEB.

- Added a page loading (network activity) indicator.

- Added a browser window toolbar, similar to SEB for macOS, with reload and
back/forward buttons.

- Navigation in browser history (back/forward) can now be allowed/disabled

separately for the exam and additional browser windows.

- The browser user agent string now reflects the operating system SEB is running on
and allows a custom suffix string to be added.

- Added new asymmetric/symmetric encryption for config files using identity

certificate for better performance when decrypting certificate encrypted config
files.

- Fixed on-screen keyboard wasn't displayed in latest versions of Windows 10. Now
"Tablet Mode" needs to be activated in the system when using SEB in its "Touch
optimized" mode.

- Added spell checking dictionaries in addition to US English for Danish, English

UK/Canada/Australia, Spanish, French, Portuguese, Swedish, Swedish (Finnland) (da,
en-AU, en-GB, en-US, es-ES, fr-classic, pt-PT, sv, sv_FI). Some dictionaries for
other languages cannot be distributed together with SEB, because they are only
available under a GPL license which isn't compatible with SEB's MPL license.
Currently only incorrectly written words get underlined with the usual red dotted
line. The spell checking language cannot be selected manually yet, the default
language indicated by the web site (for example <html lang="en-UK">) is used for
spell checking.

- Fixed performance issue with application switching mechanism (ALT+TAB) causing

Windows to overlay its task switcher over the SEB one.

- Fixed and slightly changed functionality of setting “Download and open SEB Config
Files”, which now also controls if SEB can be started with opening seb(s):// config
links and .seb config files. The setting is now also respected when a .seb file is
downloaded and opened inside of the running SEB.

- Now logging all SEB files which are used for generating the Browser Exam Key.

- Fixed that some dialogs (reconfiguring not allowed etc.) were not displayed in
the foreground, but hidden behind the browser window and were only accessible using
Alt+Tab.

- Changed Base16 encoding of SEB passwords to use lower case letters a-f (following
web standards and macOS/iOS) instead of Microsofts non-standard upper case letters.

- Added "Allow reload in exam“, "Allow reload in additional window“, “Show reload
warning in exam” and “Show reload warning in additional window” options to Config
Tool / Browser.

- Localized also all UI strings in Win Forms in SEB Client to German.

- Now maximizing browser windows if their size is configured to be 100% width and
height.

- Quit Link sometimes not exiting SEB: Also removing trailing slashes before
comparing request URLs to the quit URL.

- Now trimming trailing slashes “/“ from URL before applying URL filter (this
wasn't the case in SEB 2.1.x and could lead to incompatibilities to URL filter
rules generated in SEB for macOS).

- Changed default settings for hooked keys ESC and right mouse key to enabled
(true).

- Now passing system language locale correctly to web pages in browser.

- Added some Firefox settings to improve Service Worker support.

- Changed reload in seb2 from hard reload to soft reload (to not break Service
Worker when offline).

- Removed SEB for macOS settings in Config Tool / Browser for new browser windows
opened by JavaScript/Plugins.

- Added improved logging for the embedded browser. Note: The log path cannot be
changed in exam settings, SEB now uses always the path (and log enable option)
which is configured in client config.

- In the native HTML full screen mode, the SEB task bar is also hidden now. Please
note: You have to enable the "Esc" key in SEB settings if full screen mode on your
website can only be exit using the key (otherwise provide a button on the
webpage!).

- Added "Firefox/xx" to the default browser user agent strings for better
compatibility.

- In the "iPad" setting option for the user agent for touch/tablet mode, the
default iPad user agent string can be edited in the Config Tool / Browser pane.

- Added new option to Config Tool / Config File pane to use old asymmetric-only
encryption (for compatibility with SEB < 2.2).

- SEB now deletes the browser profile folder when updating SEB, to prevent problems
with not updated, cached browser modules.

- SEB Registry Resetter now exits when a non-existing/wrong user name is entered.

- Added another method to find out the SID of the current user and send it to the
SEBWindowsService. This is an addition to the username, because the translation
from username to SID inside the Service sometimes fails.

- The desktop background picture is now also removed on PCs running Windows 7.

- If SEB cannot terminate or force quit prohibited applications (Config Tool /

Applications / Prohibited Processes) because they are running with other user
permissions, then the exam is blocked and SEB asks to enter the quit/restart
password (which exam supervisors/supporters should know) to continue.

**Release notes Safe Exam Browser for Windows version 2.1.8:**

SEB 2.1.8 for Windows is an important update which increases security and
stability. This SEB version re-introduces the "Create new desktop" kiosk mode,
which reliably blocks notifications from various applications like some web
browsers (applications which don't use standard Windows notifications, those were
always blocked in SEB). This is possible because the mouse pointer offset problem
which occurred with SEB 2.1.5, "Create new desktop" and a recent Windows Creators
Update could be solved now.

We recommend an immediate update if you're using SEB 2.1.6/2.1.7. If you manually

changed your settings to use the "Disable Explorer Shell" kiosk mode with these two
SEB versions, then you can change it back to "Create new Desktop" again. You can
also remove the default prohibited browser processes from your settings which were
added by SEB 2.1.7. If you open a config file containing such default prohibited
processes in SEB Config Tool or switch back to "Create new desktop", a dialog is
displayed asking if you want to remove those processes.

In addition, SEB 2.1.8 blocks new default prohibited processes like some screen
sharing and communication tools, fixes the severe "Sticky Keys" security issue and
a rare bug which made it possible to switch applications using the shortcut Win +
Tab on some devices. All changes:

- Re-integrated the "Create New Desktop" kiosk mode and declared dpi-awareness to
resolve mouse pointer offset.

- Adding strictly prohibited default processes (screen sharing and communication

tools) unconditionally to settings, default prohibited browser processes only in
Disable Explorer Shell kiosk mode. If you need to allow one of these processes,
then just deselect the "Active" flag of that process in Applications/Prohibited
Processes.

- Now removing prohibited default browser processes in SEB Config Tool

conditionally (if admin user confirms) from settings when loading config file which
has Create new desktop kiosk mode set or when switching to Create new desktop (in
Security tab).

- Process monitoring is now always active if either of the two kiosk modes is set.

- Fixed a security issue, now checking if SEB windows use original filename as
well.

- Fixed dialog for entering settings password (if displayed when starting SEB) had
a wrong scale if the system DPI ratio was different than 100%.

- Added monitoring of Windows File Explorer to prevent rare cases when explorer.exe
was restarted, the shortcuts Win+Tab and Win+D and "Sticky Keys" were working.

- Fixed that the wrong permitted process was automatically started (with autostart
property set) when the SEB browser is deactivated.

- Fixed quitting SEB didn't quit some permitted processes like Acrobat Reader.
**Release notes Safe Exam Browser for Windows version 2.1.7:**

SEB 2.1.7 for Windows is an important security update. This SEB version fixes a
problem with Chrome and some other web browsers which could display notifications
while SEB was running. This security issue was induced by SEB 2.1.6 for many SEB
users. We recommend an immediate update if you're using SEB 2.1.6 or you configured
SEB to use the "Disable Explorer Shell" kiosk mode. In addition, SEB 2.1.7 improves
handling permitted and prohibited processes in general and blocks prohibited
processes more securely.

- Now adding list of prohibited (browser) processes automatically to all config

files which SEB Client or SEB Config Tool opens, unless a prohibited process with
the same name already exists. If you need to allow one of these processes, then
just deselect the "Active" flag of that process in the list of prohibited
processes.

- Automatically disabling Chrome notifications using a Registry setting.

- Added new settings sub-key originalName to permitted and prohibited processes.

- Improved detecting permitted and prohibited processes, file name extensions are
now stripped from executable and original filenames before comparing to running
processes.

- Fixed error when displaying which running processes must be terminated before
starting exam.

- Added verification of original filename when allowing user to choose path to

third-party application.

- Fixed bug caused by case-sensitive string comparison when allowing user to choose
path to allowed application.

- Fixed bug for terminating permitted applications when quitting SEB.

- Fixed autostart error when using SEB 2.2 generated settings with SEB 2.1.7. If
permitted process firefox.exe for SEB browser was contained in settings (because
those were created in SEB 2.2), the permitted process following SEB/firefox.exe in
the list of permitted processes was auto-started, even if that flag wasn’t set.

**Release notes Safe Exam Browser for Windows version 2.1.6:**

Safe Exam Browser 2.1.6 for Windows fixes a problem with the mouse cursor
introduced by the recent Windows 10 Creators Update, adds support for webcam and
microphone access with new settings and improves compatibility to config files
generated with the upcoming major release SEB 2.2.

- Removed "Create new desktop" kiosk mode which fixes the mouse offset problem
introduced by the recent Windows Creators Update. The mouse cursor had an offset if
the display scale factor was set to a different value than 100% and SEB was using
the default "Create new desktop" kiosk mode. For compatibility with older SEB
versions, you can still select this kiosk mode in the SEB Config Tool, but SEB
2.1.6 ignores this setting.

- Added support for HTML 5 webcam and microphone access with new SEB settings in
SEB Config Tool / Browser / Browser security / Allow video capture (webcam) & Allow
audio capture (microphone). New setting keys allowVideoCapture (in seb browser
mapped to media.navigator.video.enabled) and allowAudioCapture (mapped to
media.getusermedia.audiocapture.enabled), and set
media.navigator.permission.disabled to true (prerequisite for video and audio
capture to work in SEB, as the Firefox “allow” alert is not being displayed in
SEB).

- Now ignoring SEB/firefox.exe entry from permittedProcesses, which fixes error

message when using SEB 2.2 generated settings with SEB 2.1.6.

- Improved compatibility with SEB 2.2 generated settings: Removing

additionalResources from settings sent to browser.

- The SEB icon in the SEB task bar is now always leftmost, even if it isn't the
first entry in the permittedProcesses setting.

- Fixed SEB doesn't doesn't finish starting up properly when it can't add some
permitted applications (which have been removed but not properly uninstalled).

- Fixed again wrong Browser Exam Key calculation after update by really performing
a major update (completely removing old version's files).

- Updated seb XUL browser application to current status.

- Set Gecko/Firefox setting "dom.serviceWorkers.enabled" to true.

**Release notes Safe Exam Browser for Windows version 2.1.5:**

Safe Exam Browser 2.1.5 for Windows contains bug fixes for using specific permitted
third party applications and fixes minor bugs and usability issues in the SEB
Config Tool:

- Fixed that for some third party applications new instances were started when
clicking the icon in the task bar (instead switching to the window of the already
running instance).

- Fixed: Already running instances of permitted applications were not quit when SEB
starts and were accessible inside SEB. Also fixed this for prohibited applications.

- Fixed some config tool UI issues: Radio buttons for Zoom Page/Text and User Agent
were sometimes not set properly after loading a new config file, main browser
window size wasn't disabled when using full screen mode.

- Added Gecko setting for HTTP2 (network.http.spdy.enabled.http2) to XUL seb config

file prefs.js. Currently not changing default true to false, despite some
unconfirmed information that HTTP2 doesn’t work in Gecko <= 48. Please let us know
if you have a reproducible case where HTTP2 doesn't work with SEB 2.1.5.

- Added MIME type application/seb to the .seb file type which the installer
registers.

- Fixed in Network/Filter: If editing a filter rule (block/allow), the Config Tool

didn't save this edited rule when using commands Save, Save As, closing the Config
Tool, Open Settings (with button, menu and drag-and-drop), Revert Settings to
Default/Local Client/Last Opened, Use Current Settings to Edit Duplicate/Configure
Client/Apply and Start SEB.

- In the following cases also added checking for unconfirmed passwords: Open
Settings (with button, menu and drag-and-drop), Revert Settings to Default/Local
Client/Last Opened, Use Current Settings to Edit Duplicate/Configure Client/Apply
and Start SEB.

**Release notes Safe Exam Browser for Windows version 2.1.4:**

Safe Exam Browser 2.1.4 for Windows contains usability and stability improvements.
Mass deployment on managed computers is significantly facilitated, with changes in
the SEB installer and improvements in the management of config file encryption
using X.509 certificates. New in SEB 2.1.4:

- Added all new setting options of SEB 2.1.2 for macOS to SEB Config Tool.

- Changed „Restart Exam Button“ title and icon to „Back to Start Button“, added
disclaimer about this function not logging out a previously logged in user.

- Added Gecko/Firefox setting "browser.display.use_document_fonts = 1", to allow

pages to choose their own fonts.

- SEB now looks for X.509 identity certificates for decrypting an identity-
encrypted config file also in the "Trusted People" store in the Windows Certificate
Store (in addition to the default "Personal" store). On managed computers this
allows to deploy the identity certificate to the "Local Machine/Trusted People"
store when installing SEB in an administrator account. The certificate will then
also be available in the "Current User/Trusted People" stores of all currently
existing user accounts on that machine.

- The SEB installer doesn't create the %APPDATA%\SafeExamBrowser\ directory anymore

(when it wasn't existing). This was the reason that Windows Installer shortly
started and "updated" the SEB installation when starting SEB the first time in
another user account than the one where SEB was installed. Please note that if
deploying SEB on managed computers, Windows Installer will start and install .NET
4.5 on a Windows 7 system which didn't had this .NET version installed yet and will
require a restart. So make sure that when deploying SEB on Windows 7 computers,
.NET 4.5 is also deployed.

- The SEB installer doesn't create a SEB shortcut on the desktop anymore. Users can
start SEB directly from the Windows Start Menu / Windows Start Screen (a menu
entry/tile for SEB is still created). As before, it can make sense to start SEB by
opening a SEB config file or by opening a seb(s):// link from another web browser
or mail application.

- Fixed that some permitted applications could not be immediately restarted after
being quit.

- Fixed a problem which caused the Browser Exam Key to be different when SEB was
updated from an older version than when it was installed freshly. SEB 2.1.4 can be
updated from 2.1.1, 2.1.2 or 2.1.3. A direct update from SEB 2.1 might fail, so
uninstall SEB 2.1 first using the Windows control panel before installing SEB
2.1.4.

- Fixed a problem when switching keyboards didn't work properly when using specific
keyboard layouts (at least when running on Windows 10).
- Fixed: Registry Resetter didn't complain and just did nothing when an inexistent
username has been typed in. Added additional output for debugging.

- Fixed a problem which caused SEB Windows Service to crash rarely.

- Fixed starting the socket server after closing already running processes. This
way if an instance of the browser is already running, it gets closed before
starting the socket server and an error about a blocked port does not appear.

- The installer now always performs a "major update", which guarantees all older
files are replaced with the new ones.

- "Monitor Processes" is now always active when "Disable Explorer Shell" is

selected as kiosk mode.

- Changed title of setting in Config Tool / Exams to "Use Browser Exam Key (send in
HTTP header)" according to Mac version and moved checkbox up, to be the first
setting in the Browser Exam Key group box. Disabling this setting also disables the
Browser Exam Key text field now.

- Log SEB version in log file.

- Write log file directly after starting SEB. Logging initially starts in the
standard log directory, even if settings define another log file path.

**Release notes Safe Exam Browser for Windows version 2.1.3:**

Safe Exam Browser 2.1.3 for Windows adds support for using Windows system proxy
settings and fixes some important issues (therefore it is highly recommended to
update as soon as possible!):

- Current versions of Internet Explorer, Edge and Windows 10 complained about an

invalid signature of the SEB installer when downloading or starting it. Reason:
Windows doesn't accept executables signed with code signing certificates using an
insecure SHA-1 signature since a security update from January 12, 2016 (if the
executable was signed using SHA-1 after this date). SEB is now signed with a new
code signing certificate with a SHA-256 signature.

- Added support for system proxy settings (the existing option in SEB Config Tool
/ Network / Proxies is functional now).

- SEB Windows service didn't start properly on some machines (SID could not be
determined using the user name), this should be fixed now. Please report if single
users are still having problems with the SEB Windows Service (warning or error
message when starting SEB): http://safeexambrowser.org/support

- Fixed URL of SEBWindowsServiceWCF to avoid collisions with other WCF services.

This might have caused SEB influencing some other installed applications.

- Improved stability of resetting registry settings when SEB quits or is

started/quit again after not being exited properly.

- Fixed wrong version number in SEB installer.

**Release notes Safe Exam Browser for Windows version 2.1.2:**

Safe Exam Browser 2.1.2 for Windows supports the native HTML5 full screen mode,
hardware acceleration in the browser and fixes some minor problems:

- Native HTML5 full screen mode is now supported. Please note: The SEB task bar
(if enabled) is not hidden by this full screen mode. To be able to exit the full
screen mode, the Esc key needs to be enabled in SEB settings. Alternatively the
full screen view should contain a button to close it.

- Hardware acceleration is now activated in the SEB browser.

- Fixed problem not recognizing a quit URL if the quit link was not clicked by
the user but the quit URL directly loaded on the website.

- Fixed problem (displaying an exception message) when selecting a network in the

SEB Wi-Fi task bar control.

- Fixed cancel button in the dialog window for the restart exam button.

- The option "Monitor processes while SEB is running" in the Applications config
tool tab cannot be altered when the kiosk mode "Disable Explorer Shell" is active,
as process monitoring is always active in this kiosk mode.

**Release notes Safe Exam Browser for Windows version 2.1.1:**

SEB 2.1.1 is compatible with Windows 10, contains improvements when running on
Windows 8.1/10 tablets and increases general stability:

- Safe Exam Browser 2.1.1 is fully compatible with Windows 10, there is no delay
when starting up on Windows 10 anymore and Windows updates are paused correctly
while SEB is running.

- Improvements in the touch optimized mode for Windows tablet computers, as

better behavior when the on-screen keyboard is displayed and the web page scrolls a
text field into the visible area or when moving the cursor in and between text
fields.
- Not hiding and showing onscreen keyboard again when clicking into text field
(to move the text cursor to another position in the text).
- Not hiding and showing onscreen keyboard again when clicking from one text
field to another.
- Fixed a bug which stopped the keyboard from being displayed.

- A new setting allows to switch off the on-screen keyboard manually or

automatically when a hardware keyboard is connected.

- Added a sebs:// protocol (in addition to seb://), which forces the use of https
for loading a .seb configuration file.

- Updated browser engine to XULRunner/Gecko (Firefox) 41.0.2.

- Improved logging feature, the log is now better readable.

- Added confirm restart exam dialog when quit/restart password is not set.
 - Add alert if entering wrong quit/restart password for restart exam.

- Config Tool: Changed default setting for "Use SEB settings for..." as local
client settings usually should be saved "for configuring client" (like that they
are encrypted without having to enter a password).

- Changed default value for setting option "Use Start URL" for restart exam
button to disabled (Exam tab): In default settings now the restart exam button
isn't displayed.

- Fixed bug which caused options in the Windows Security Screen (Ctrl-Alt-Delete)
not being restored after a reset/reboot.

- Fixed bug which caused SEB being opened multiple times by quickly double
clicking more than once.

- Fixed bug in the show keyboard layout SEB task bar widget which couldn't switch
to other keyboard layouts in Windows 7.

- Fixed bug in creating Browser Exam Key.

- Fixed touch exit didn't work properly when screen was rotated.

- Fixed message boxes were not displayed properly after rotating the screen.

**Release notes Safe Exam Browser for Windows version 2.1:**

SEB 2.1 includes new features, usability, stability and security improvements:

*New touch optimized mode for Windows tablet computers:*

- Larger buttons in the SEB task bar and in dialogs.

- On-screen keyboard is displayed when the user touches a text field on a browser
page or when SEB requires to enter a password.
- New web pages open in full screen 'windows', switch between open pages with the
open windows chooser popup menu invoked by touching the SEB icon in the SEB task
bar.
- Touch exit feature in case no SEB task bar is used: Swipe down from the upper
screen edge.

- Added button in SEB task bar for reloading current web page and optional warning
message for reloading web pages.

- Added button in SEB task bar for restarting the exam, which can be password
protected. Exam supporters can use this button when problems with the exam occur,
instead of having to quit and restart SEB.

- Added control in SEB task bar for switching installed keyboard layouts.

- Added display of current time in SEB task bar: This is for example helpful if you
decide to ban personal watches in exams (because of smart watches).

- The former app chooser (Alt-Tab) now shows all open windows (from SEB browser and
permitted third party applications) rather than all running permitted applications.
Fixed visual issues (scrollbars are no longer displayed, scaling properly
considering display DPI etc.).

- Updated SEB browser engine XULRunner to version 38.0.6.

*SEB Config Tool has been re-engineered and now allows comfortable editing and
testing of SEB configuration files:*

- When you start SEBConfigTool.exe, it loads the local client settings, which are
saved at the path
C:\Users\<username>\AppData\Roaming\SafeExamBrowser\SebClientSettings.seb.

- There are new functions for working with configuration files (Open, Save, Save
As, Revert Settings to... Default Settings; Local Client Settings; Last Opened, Use
Current Settings to... Edit Duplicate, Configure Client, Apply and Start SEB).
These functions are accessible at any point when working in the SEB Config Tool
with a new menu bar, with shortcuts or as buttons in the Config File tab.

- If you changed settings, the Config Tool will ask you to save unsaved changes
before quitting or reverting to other settings.

- SEB Config Tool now supports opening .seb config files with drag-and-drop (into
the window or onto the application's icon).

*Renamed Appearance tab to User Interface:*

- Added option "Touch optimized" to Browser view modes to switch on the tablet mode
of SEB.

- Added option "Enable touch exit", when enabled SEB can be quit in touch optimized
mode with a swipe down from the upper display edge (helpful, when the SEB task bar
with the quit button is not used).

- Added settings group for SEB task bar for all new controls (see above).

- Task bar height in pixels can now be changed for high resolution displays
(display DPI settings are now also taken in account, in touch optimized mode task
bar is scaled up in addition).

- Added settings options for switching between zooming the full web page or just
changing text sizes.

- Zooming can also be disabled optionally (not recommended in most exam scenarios
because of accessibility).

- Added option to disable the browser spell check.

- Added setting option for new Mac-only feature "Allow dictionary lookup".

*Browser tab in SEB Config Tool:*

- Added settings options to switch between default and custom browser user agent
strings, separately for desktop and touch modes (and for SEB on Macs).

- In touch mode, there is also an option for an iPad user agent string, as many
mobile optimized websites recognize this user agent, but not the Windows touch user
agent.
- SEB now also adds its version number to the user agent string.

- Removed option "block when directing to a different server" for the option "Links
in JavaScript/plug-ins" (Mac only feature).

*Exam tab in SEB Config Tool:*

- Restart exam button: Either check the "Use Start URL" option or enter a link to
which the exam is redirected when the restart exam button is pressed. The restart
exam button is displayed in the SEB task bar when either the "Use Start URL" option
is selected or a link is entered.

- You can add a custom title and tool tip text, for example if the button/link
doesn't restart the exam but redirects to some other specific page, submits the
exam etc.

- You can select the option to protect the restart exam button with the
quit/restart password. Exam support/invigilators should be told this password to be
able to restart the exam if there is a problem.

*Applications/Permitted Processes tab in SEB Config Tool:*

- Added option "Monitor processes while SEB is running". If enabled, SEB prevents
non-permitted processes to display any windows (including alerts, message boxes
etc.) by hiding them immediately. If SEB cannot hide such a process (because it is
running with the rights of another user, for example SYSTEM) SEB terminates it. For
the "Disable Explorer Shell" kiosk mode (see Security tab), "Monitor processes..."
should always be activated (which was implicitly the case in former SEB versions),
but in SEB 2.1 you can (and should in most cases) use this feature also with the
"Create new desktop" kiosk mode.

- Added button "Choose Application...". When you select a third party application
which is permitted to run during the exam using this button, the parameters for
executable and path are automatically set according to the selected executable
(.exe) file, considering if and which path of that application is registered in
Windows (usually no path or only a relative path to the Windows registered path of
that application needs to be entered in the field for "Path").

- Added option "Icon in task bar" for permitted processes. Mainly useful for
background processes (not requiring user interaction) which you want to autostart
when SEB is run.

- Added option "Allow running in background". Permitted processes with this option
set are allowed to already be running when starting SEB. In this case SEB doesn't
ask the user if the process can be terminated before continuing to start SEB.
Processes with the option "Allow running in background" don't have an icon in the
SEB task bar. They can nevertheless have the option "Autostart" set, in this case
SEB attempts to start the permitted process regardless if it was already running or
not (and the option "Icon in task bar" is considered in this case). If you need
some background process running together with SEB and this process might display
some window or alert/message box, you have to add this process's executable to
permitted processes with the option "Allow running in background" set, otherwise
SEB will hide the window of the background process when "Monitor processes" is
selected (or even terminate that process, in case it cannot be hidden).

- Improved handling of permitted processes and their open windows, when switching
between them using the app/window chooser (Alt-Tab) or the icons of these permitted
applications in the SEB task bar. Some applications (for example Adobe Acrobat or
applications based on Java like Open Office or Eclipse) still need special settings
in the Applications/Permitted Processes tab in SEB Config Tool in the fields
"Window handling process" (the executable of the main process of that application)
and "Identifier" (substring which is displayed in every window the application
opens).

*Network/Filter tab in SEB Config Tool:*

- Added tables for Allow and Block URL filter rules.

- Added new option "Rules are regular expressions": If not enabled, then the rules
can be formatted using the wildcard '*', which stands for an arbitrary string of
any length.

*Network/Certificate tab in SEB Config Tool:*

SEB 2.1 supports embedding TLS/SSL and encrypting identity certificates into .seb
files.

- Choose TLS/SSL certificate to embed into configuration... Here you can choose SSL
server certificates which are stored in the Windows Certificate Store (if you have
a certificate file, you first need to import it to the Windows Certificate Store,
depending on the format you can just double click such a certificate file to invoke
the Windows certificate import assistant). The certificates added to this table
will be included into a .seb settings file when it is saved and used on the SEB
clients which are started up with that .seb exam configuration. Users won't be
presented a warning then when connecting to https servers with self-signed
certificates and you don't need to distribute SSL certificates manually to the exam
client computers.

- Choose identity to embed into configuration... You can also choose cryptographic
identities stored in the Windows Certificate Store which are suitable for
decrypting .seb files on SEB exam clients (X.509 certificates with RSA public key
and associated private key). If you have a .p12 or .pfx certificate archive file,
you first need to import it into the Windows Certificate Store (usually you can
just double click such a certificate file to invoke the Windows certificate import
assistant). When importing the .p12/.pfx identity file, the included private key
must be marked as "exportable". The identities added to this table will be embedded
into the .seb settings file. Use this feature for creating a .seb file for
configuring a client and add the identity or identities you like to use for
encrypting/decrypting .seb files for starting exams later. When opening this .seb
file on your exam clients, the embedded identities will be imported into the
Windows Certificate Store (or Keychain on Macs), so that they can be used for
decrypting exam settings later. Please note that during this process the private
keys imported into the Windows Certificate Store of the exam clients will be
flagged as non-exportable for increased security.

- SEB now finds identities (and certificates) stored in the current user's and
local machine Certificate Store.

*Network/Proxies tab in SEB Config Tool:*

- Now HTTP, HTTPS, FTP and SOCKS proxies (without authentication) are supported
when using the option "Use SEB proxy settings".
- The proxy host/domain bypass list is supported now.

*Installer:*

- The SEB installer now updates an existing SEB installation automatically, so an

older SEB version doesn't need to be uninstalled first.

- Fixed installing SEB in an administrator (or other) account didn't set filetype
for .seb config files correctly in another user account (double clicking a .seb
file displayed a dialog to locate a SEB .msi installer file and only after that
fixed the filetype binding for that account).

- Changed properties for SEBRegistryResetter shortcut to prevent it showing up in

recently opened programs in the Windows 7 start menu.

*Further bugfixes:*

- Quit and settings password dialogs now have keyboard focus when they appear, so
it's usually not necessary to click them first before starting to type.

- Fixed SEB browser sometimes wasn't closed quickly enough and then displayed an
unnecessary "do you really want to quit" or quit password dialog.

- Fixed when opening a .seb file is canceled (Cancel button in password entry
dialog), then SEB starts with only partially visible task bar stub on the upper
left screen corner and freezes (cannot be quit).

- Fixed SEB was quit when loading a .seb file (by seb:// link) and user canceled
entering settings password

- Fixed a security issue with the settings key browserURLSalt.

- Fixed asking for current or admin password in settings even though that is an
empty string.

- Fixed a security issue where a .seb file for configuring client encrypted with an
arbitrary password could reconfigure a client without having to enter the admin pw
saved currently in SEB on that client. Now this is only possible after entering the
current admin pw or by encrypting the new settings for configuring the client with
that current admin pw.

- Fixed bugs when reconfiguring client settings, when admin pw differs in new and
current settings and user is asked to enter the current admin pw.

- Fixed process name was not listed in dialog "Permitted Processes Are Already
Running" and in the dialog when permitted process couldn't be found if it didn't
had a title property: Now using executable in the case there's no title.

- Fixed SEB sometimes didn't exit completely when quitting.

- Fixed when loading a .seb file with entering settings password, selecting cancel
results in SEB being quit.

- Fixed generating XULRunner seb URL filter whitelist string when the Start URL is
not contained in a filter rule and fixed connection with web socket server is not
possible when the content filter is active.
*Known issues in SEB 2.1 for Windows:*

- On-screen keyboard does not appear automatically when clicking into some text
input fields, for example some web rich text editors as used in Moodle for the free
text question. Use the keyboard button in the SEB task bar in these cases to
trigger the on-screen keyboard manually.

- In touch optimized mode, sometimes the on-screen keyboard stops being displayed.
When this happens, SEB must be quit and the keyboard button in the Windows Explorer
task bar needs to be clicked (then the keyboard appears). When closing the keyboard
and restarting SEB, it is again being displayed inside SEB.

- Starting and reconfiguring SEB on Windows 10 takes much longer than usual.

- Disabling Windows Update while SEB is running does not work on Windows 10, it
leads to a timeout (this is the reason for the delay when starting and
reconfiguring SEB).

- When SEB is started twice (by quickly double clicking twice), Registry settings
are messed up afterwards (options like Task Manager in the Windows Security Screen
invoked with Ctrl-Alt-Del are no longer available). Use SEB Registry Resetter to
fix this problem.

- Buttons for shutdown and restart are not hidden in the Windows 10 Security Screen
(invoked with Ctrl-Alt-Del).

**Release notes Safe Exam Browser for Windows version 2.0.3:**

Improves general stability and compatibility with some exam systems.

Allows current versions of Flash to run with SEB in both kiosk modes correctly.

Updated browser engine to XULRunner/Gecko (Firefox) 36.

Now Flash, Java and JavaScript can be enabled/disabled.

Bug fixes include a rare keyboard bug, another bug which sometimes caused options
in the Windows Security Screen (Ctrl-Alt-Delete) missing after quitting SEB and an
exception error message when using the WiFi control in the task bar and the WiFi
connection drops.

**Release notes Safe Exam Browser for Windows version 2.0.2**

Fixed keyboard freezes (no text entering possible after pressing Alt-Ctrl twice).

Fixed bug when in some cases restoring Windows Registry settings for options in the
Windows Security Screen (invoked by Ctrl-Alt-Delete) failed, for example when SEB
crashed or the PC was hard-reset while SEB was running.

Added shortcuts to SEB Config Tool and SEB Registry Resetter to Windows 7 Start
Menu programs folder.
Added option "Enable Alt-Mousewheel" in SEB Config Tool -> Hooked keys, removed
"Enable Alt-Ctrl".

The built-in seb XULRunner browser now writes a browser log file (when "Enable
logging" in Config Tool -> Security is selected), the path of this seb.log file can
also be chosen there.

Added check box "Use standard directory" for the log file Win path (Config Tool ->
Security), this sets the AppData directory as location for the seb XULRunner
browser seb.log log file.

Added various setting options to match with final version of SEB 2.0 for Mac OS X.

New option "Download and open .seb config files" in Config Tool -> Down/Uploads.

Added default .seb config file filename "SebClientSettings.seb" when opening and
saving config files in Config File pane.

Updated XULRunner version to 33.

Added "Firefox/33.0 SEB" to the browser agent string because some web applications
like for example "VMware Horizon View Web Access" didn't identify the SEB browser
correctly.

Known issues in SEB 2.0.2 for Windows:

The network filter feature has been reworked and will be fully available as by SEB
2.1.

SEB 2.0.1 doesn't support embedding SSL and encrypting identity certificates
into .seb files yet.

In SEB 2.0.1, only HTTP and HTTPS proxies without authentication are supported when
using the option "Use SEB proxy settings". The proxy host/domain bypass list isn't
utilized yet.

**Release notes Safe Exam Browser for Windows version 2.0.1**

Added "Please Wait" loading screen when SEB is reconfigured or quit. This prevents
Windows from telling that the application is not responding and asking users if
they want to quit it.

Fixes in certificate management in SEB Config Tool: Display SerialNumber if no

FriendlyName is available in a certificate, fix in selecting the correct
certificate when loading the .seb file.

Added basic support for individual SEB proxy settings in .seb config files. In SEB
Config Tool -> Network -> Proxies you can currently specify a proxy server address
and port for HTTP and HTTPS, auto proxy discovery and automatic proxy
configuration. Currently only HTTP and HTTPS proxies without proxy authentication
are supported and the proxy host/domain bypass list isn't utilized yet.

Added new option in SEB Config Tool -> Browser -> "Remove profile" which deletes
contents of the seb XULRunner embedded browser profile directory (cache, cookies,
local browser storage etc.) when exiting SEB.
In SEB installer removed second SEB shortcut from Windows Start Menu (left the one
in Start Menu -> Programs Menu).

Updated XULRunner version to 31.

Fixed bug in SEB Config Tool which caused a crash if loading settings was aborted
and then user started to entering settings manually.

Now arguments for XULRunner can be specified containing Windows environment

variables for paths (for example in Config Tool Applications -> Permitted Processes
-> xulrunner.exe, new argument: -profile "%LOCALAPPDATA
%\SafeExamBrowser\Profiles").

Improved compatibility of .seb config file format with the upcoming SEB 2.0
RC/final release version for Mac OS X.

PLEASE NOTE: Every new SEB version generates a different Browser Exam Key (as code
and configuration option changes are reflected in the key, this is the idea of the
request header check using this key together with compatible exam systems). If you
want to use an existing exam configuration with SEB 2.0.1, you have to re-calculate
the Browser Exam Key with SEB 2.0.1 and copy the new key to the quiz settings in
your SEB compatible examination system (Moodle and ILIAS allow you to specify
several keys in case you want to allow your examinees to use either SEB 2.0 or
2.0.1).

Known issues in SEB for Windows 2.0.1:

In some cases, usually after pressing Alt-Ctrl twice, the keyboard seems to freeze
(no text entering possible) in the SEB browser. Pressing Ctrl once more (or Alt-Tab
or Windows-Tab) unfreezes it again. The new option to disable Ctrl-Alt doesn't
solve the issue, it might even block unfreezing the keyboard.

The network filter feature isn't implemented yet in SEB 2.0.1, you cannot activate
URL filtering. The functionality has been reworked and will be available as by SEB
2.1.

SEB 2.0.1 doesn't support embedding SSL and encrypting identity certificates
into .seb files yet.

In SEB 2.0.1, only HTTP and HTTPS proxies without authentication are supported when
using the option "Use SEB proxy settings". The proxy host/domain bypass list isn't
utilized yet.

**Release notes Safe Exam Browser for Windows version 2.0 (final release)**

Added tool tips to the SEB Config Tool.

Added about SEB splash screen.

Fixed option to disable the shade (menubar) for the new Horizon VMware Client.

Minor bugfixes.

**Release notes Safe Exam Browser for Windows version 2.0RC6**

Added optional WLAN control to the SEB task bar which allows to reconnect to WiFi
networks which have previously been connected to (before using SEB), see settings
pane Security -> Allow WLAN Control.

SEB now pauses Windows Update and therefore prevents slowing down and sudden
restarting of a machine during an exam.

SEB now disables screen saver and idle sleep while SEB is running and hides the
desktop wallpaper (in Windows 8).

Java applications (like OpenOffice) can now be used as permitted processes, but
require specific settings: The title of their main window must be defined in
settings Applications pane in the field Permitted Processes -> Identifier (for
example „OpenOffice Calc“), the required main executable in Permitted Processes ->
Executable („scalc.exe“) and the process which is actually handling the main window
in Permitted Processes -> Window Handling Process(es) („soffice.bin“). For this
example the executable path should be entered as „program“ in Permitted Processes
-> Path, as that is the relative path to the main executable from the OpenOffice
main directory, which is registered in Windows App Paths.

Added new kiosk mode „Disable Explorer Shell“ (Security settings pane -> Kiosk
Mode: Disable Explorer Shell) which doesn’t rely on the „Create new Desktop“ method
and increases compatibility with screen recording proctoring software like
ObserveIT.

Added process monitoring for prohibited processes: Those will be closed when SEB is
started up or when they start up while SEB is running.

Improved stability and performance when starting, reconfiguring and quitting SEB
and the build-in XULRunner seb browser component, which should reduce problems with
the XULRunner seb profile folder being locked and producing error message that „seb
is already running“.

The Quit button in SEB task bar is now hidden when "Allow user to quit SEB" is
disabled.

Changed default setting for Permitted Processes -> „Allow user to select location
of application“ to false.

Tooltips in SEB task bar on the application icons are now always visible.

Added Support for the new Horizon VMware Client to disable its shade (menubar).

Removed SebWindowsToolkit with outdated Registry resetting batch files. Use

SebRegistryResetter.exe in the SafeExamBrowser\SebWindowsServiceWCF directory
instead („Run as administrator“ with right mouse button context menu, see RC5).

Fixed bug when using browser in full screen mode, without SEB task bar and
application chooser (Alt-Tab) which previously minimized the browser window.

Various additional bug fixes.

**Release notes Safe Exam Browser for Windows version 2.0RC5**

Completely re-engineered SEB Windows Service with improved stability for setting
and resetting options in the Windows Security Screen (invoked by Ctrl-Alt-Del),
like Task Manager. In case of a SEB crash or enforced reset of the machine, those
options are reset to the values which were active before SEB was used. This happens
when SEB is started again and quit properly, after a reboot, or when uninstalling
SEB.

Removed section „Outside SEB“ in the Registry tab in SEB Config Tool, as SEB now
remembers the settings which were active on the exam client computer before running
SEB and resets them to the original values when exiting regularly. In case SEB
would crash or the user would enforce a reset of the machine while SEB was running,
these remembered values are used to restore the original Registry settings.

Added a new command line tool SebRegistryResetter.exe which can be used to reset
Registry values for the Windows Security Screen options in case the SEB Windows
Service was damaged and can't be run anymore.
This tool can be found at the following directory path in your Program Files
directory:
SafeExamBrowser\SebWindowsServiceWCF\SebRegistryResetter.exe
You need to execute this tool as administrator (right mouse button context menu
option "Run as administrator"). In case the original values for the Registry
Settings aren't found anymore, they will be reset to the Windows default values
(all enabled). In this unlikely case you would also need to enter the user name of
the user who was running SEB when resetting Registry values failed.

SEB 2.0 RC5 now only needs the current .NET 4.5 framework (.NET 3.5 and 4.0 Full
Profile don't need to be installed/activated anymore).

Updated browser engine to XULRunner 28 (equivalent to Firefox 28).

Changed the SEB profile directory to

\Users\<username>\AppData\Roaming\SafeExamBrowser\
Settings saved in the old profile directory in AppData\Local\ need to be moved
manually or SEB reconfigured with a .seb settings file for configuring the client.

Fixed bugs when dealing with permitted processes/third party applications and their
paths.

When „allow user to select location of application“ is enabled for a permitted

process, now only an executable with the same name as the one defined in settings
is accepted. Empty executable names in settings are also ignored now.

Improved closing of permitted processes: Now SEB first tries to close processes
gracefully. This should solve the problem XULRunner wasn't closed properly
especially on Windows 8.1 and failed to restart (profile in use).

Fixed a bug when loading a .seb file „for configuring a client“ and the SEB admin
password has been set to empty before.

Fixed a bug when XULRunner didn’t accept a quit password which was defined in the
SEB Windows Config Tool.

Fixed bugs in the SEB Config Tool, especially in the Permitted Processes tab.
Deactivated some options which are not having any function in the current SEB
version.

SEB Config Tool now opens \Users\<username>\AppData\Roaming\SafeExamBrowser\ as the

default directory when opening or saving settings in the Config File pane.

In the Appearance tab the main browser window size and position fields are
deactivated when „Use full screen mode“ is selected.
Fixed bug in the SEB Config Tool Registry tab where the enable/disable check
buttons didn’t had any function.

Fixed bug when switching between allowed applications in the SEB application
chooser (Alt-Tab).

Fixed bug when loading .seb file for configuring client and admin password was
empty.

Fixed bug which caused SEB Config Tool to crash because it tried to calculate a
Browser Exam Key even though opening settings was canceled or loading the file
failed.

Browser Exam Key is now also calculated when reverting to default settings.

All running applications are now minimized when SEB is started. This is useful when
not using „Create new desktop“ but „Kill explorer shell“ (which is only recommended
in managed environments and as a workaround when using third party software which
isn’t compatible with the „create new desktop“ mode.

**Release notes Safe Exam Browser for Windows version 2.0RC4**

Added an install condition which displays a dialog with instructions how to

enable .NET 3.5 manually on systems where it is disabled. See
https://sourceforge.net/p/seb/discussion/3704033/thread/d68de28a/?limit=25#37e8

**Release notes Safe Exam Browser for Windows version 2.0RC3**

Fixed problem when opening .seb files with spaces in the path/file name by double
clicking didn’t work.

**Release notes Safe Exam Browser for Windows version 2.0RC2**

Added dealing with a possible race condition when opening .seb files by double
clicking.

**Release notes Safe Exam Browser for Windows version 2.0RC build 2.0.5162.18136**

SEB Config Tool is now contained in the SEB installer and is installed in the same
directory like SafeExamBrowser.exe application (Program
Files\SafeExamBrowser\SebWindowsConfig.exe).

SEB Windows Client is now localized to German.

Improved arrangement (layout) of widgets in General pane

Fixed bug in Browser Exam Key generation in SEBProtection controller.

Added .NET 4 (full profile) prerequisite to installer.

**Release notes Safe Exam Browser for Windows version 2.0RC:**

Safe Exam Browser 2.0 is a completely re-engineered, modern .NET application,

including new features, superior usability and improved stability.

Main features:

Adds support for encrypted .seb setting files which allow to individually configure
SEB per exam. The configuration is compatible with both the Windows and Mac version
of SEB. Use the separate SEB Windows configuration tool to create .seb settings.

Easier installation and initial configuration of a SEB client, which facilitates to

use SEB for secure exams especially on unmanaged computers like students' own
laptops, in BYOD scenarios.

New feature to quit SEB after the exam is submitted by specifying a quit link and
placing this on the summary page displayed by your LMS after submitting the exam.

The Browser Exam Key allows an exam module to authenticate the connecting SEB
version and its settings. For the learning management system Moodle a plug-in
offering this functionality has been released, a plugin ILIAS will follow shortly
(beta version available).

New options in the user interface: Size and positioning of browser windows (main
window with the quiz and additional browser windows) can be preset. The SEB main
browser window can be displayed full screen or as a sizable and movable window.

Permitted third party applications are easier to start up (autostart together with
SEB and by clicking on its icon in the new SEB task bar).

Prohibited processes and applications can be preset which are stopped when SEB
starts up.

PrintScreen can be blocked, the clipboard is cleaned when SEB is started and
stopped. The Flash plugin is working again without workarounds.

SebWindowsConfig.exe - SEB configuration editor for creating and modifying .seb

settings files for Safe Exam Browser 2.0:

Allows to define all options for the Windows and Mac versions of SEB 2.0.

Can save .seb files for individual configuration per exam and per exam client,
which are protected by strong encryption against manipulation.

Configuration files can configure a SEB exam client to show for example a portal
page with the current exams.

Configuration files can be used to start an exam with individual configuration

(like specific security and user interface options, permitted third party
applications, Browser Exam Key for authenticating these settings and the SEB
application to an exam server, Quit Link to close SEB automatically when an exam is
submitted etc.).

Supports .seb files encrypted with password or X.509 (public/private key

cryptography) certificates. For debugging purposes .seb configuration files can be
saved unencrypted in an human readable XML format.