XPressEntry Desktop

Release Notes

3.7.7851

October 23, 2026 3.7.7851

XPressEntry 3.7.7851

This release adds an audit log, visitor check-in on handhelds and side-by-side server instances,

and brings a large round of reliability fixes to the OnGuard integration.

Highlights

Audit log

XPressEntry records who changed what, and operator actions such as finishing a muster, exporting a

report or running a sync, from the server, its API and handhelds. Administrators can view the log;

records are kept for 30 days by default.

Visitor check-in and check-out on handhelds

Handhelds can check visitors in and out against visits created in the web console, including

walk-ins, using the visitor settings configured there.

More than one XPressEntry instance on a server

A test instance can run alongside production, each with its own service, ports, logs and database.

Instances are added and managed from the Config Tool.

New integration: Honeywell EBI

Cardholders, badges, access levels, doors, activities and occupancy sync from Honeywell EBI, and

handheld scans can be sent back to it.

OnGuard sign-ins can no longer lock the OnGuard account

XPressEntry follows OnGuard's lockout policy, never retries a rejected password, and waits out an

OpenAccess outage instead of discarding events.

Security

Live web console updates default to a secure connection, with certificate checking off because

on-site web servers usually use a self-signed certificate. Existing settings are kept.

A failed scheduled import no longer writes the database password to the log.

Server

Upgrade the service before the server applications and Clients that connect to it. They now ask

the service for its connection port, which can be changed from the Config Tool.

The server application and Client keep working when the service is down or a request fails, and

show the error in place instead of in a popup.

Zone, door, user and photo changes appear in every open server and Client window without a

refresh.

Switching zones or views quickly no longer shows results from the earlier selection.
A failure partway through enrolling a user no longer leaves a half-saved or duplicate user, and

duplicate badge checks block the save when they cannot be completed.

A failed photo no longer stops a user saving, and a failed badge edit is retried on the next save.
User, badge, group and picture changes made in XPressEntry are sent only to data managers with

record updates turned on.

Badge activity pairing now works on SQL Server.
A reader's inactivity is based on its last sync, so a handheld that stops syncing shows as

inactive.

Send All Outside also moves people in child zones, and zones inside an outside zone no longer

disappear from the zone trees.

A scan shows a person in occupancy again after a visitor checkout or user delete.
Occupancy counts leave out deleted users.
Context search in the server log shows the actual neighbouring lines.
Picture thumbnails are built by the service in the background, so the server application starts

faster.

Cancelling a running sync no longer stops that sync's schedule.
Scheduled custom syncs no longer lose their table list when the service reloads its settings.
Data manager syncs can remove users and badges on SQL Servers whose default collation differs

from the XPressEntry database's.

Occupancy from a data manager with an ID prefix is now applied, and its full occupancy syncs no

longer move everyone outside.

Saving a data manager's settings no longer lowers how many integration events it processes at a

time, and an invalid stored value falls back to the default.

The web console's own reader no longer uses up a handheld license. It is listed under Readers

instead of Handhelds, and left out of managed devices.

Managed device pages update live, Command History no longer freezes on refresh, and failure

details can be viewed and copied.

Devices that do not use live streaming now report their installed apps.
Reader profiles gain an Enable Incident Reporting option and a Report Incident hardware button.
Reader profile settings made in the web console are kept when the profile is saved in the server

application.

Reader profile sound selections no longer flicker on save, and an invalid sound no longer raises

an error.

The handheld setup wizard lists the configured server hostname first, so the QR code matches the

server's certificate.

Web console attendee reports update live for handheld event scans.
Map Views flags zones and readers that have been deleted, and deleting a zone or reader that is

placed on a map view asks first.

Map view summary import and export include the web console's queries.
On the Muster tab, people added to Missing as it happens show their zone and zone time, and

Scanned rows show their area, without a refresh.

Closing the server application closes every open login window.

Config Tool / Database

The Config Tool opens in about two seconds instead of 15 to 25.
Start and Stop no longer report a failure for a service that stopped or started normally.
The Web tab no longer reports a current web console as out of date.
The Config Tool creates the live-update configuration when the web console install does not

provide one. On a new install, set the web server certificate before saving the Web tab.

Web console features that failed on SQL Server installs now work: file imports, time cards,

vacation requests, inventory items and checkpoint ordering.

Backup Database runs through the service and lets you choose the backup file. It does not

interfere with scheduled backups. Unused Database menu items have been removed.

The database setup page allows at least 15 seconds to connect, so Load Database List no longer

times out on slower servers.

Database names starting with TEL are accepted.
Server log retention and integration event cleanup keep the right amount of history on servers

outside UTC.

Each instance can optionally write its server log to a file.
The diagnostic report lists every instance with its database and ports, flags conflicts between

them, and includes the temporary database's collation.

A failed scheduled import logs the full reason.

Reporting

Web console report filters are created on new installs.

Other Fixes

The installer's "must select a Data Manager" warning no longer covers the checkboxes.

Integrations

OnGuard

XPressEntry can no longer lock the OnGuard account: it follows OnGuard's lockout policy and never

retries a rejected password.

While OpenAccess is unreachable, XPressEntry pauses and holds OnGuard events until it returns,

instead of using up their retries.

Sessions are kept alive according to OnGuard's inactivity timeout.
On OnGuard 8.4, syncs request larger pages. The setup form shows the OnGuard version and the

limits in use, which can also be set by hand.

The Web Event Bridge connection recovers after the bridge restarts.
A failed access level write is reported as a failure, and several OnGuard errors are recognised

correctly.

Badges sync again when OnGuard holds a badge with missing details, such as no cardholder.
Live badge changes sync again on installs not using OpenAccess.
Badge events for excluded badge types no longer log errors, and new badges are no longer dropped

when custom access levels are on.

A swipe on a deleted badge no longer moves that person, and a deleted duplicate no longer hides

the live badge.

Occupancy and activities update zones when the data manager has an ID prefix.
With many occupancy segments selected, the occupancy pull no longer fails.
A new access level that arrives with a cardholder change gets its readers straight away.
After downtime, the activity pull goes back only as far as configured, and sites east of UTC no

longer re-download hours of events on every pull.

The visitor sync no longer downloads every visitor's badges, photos and access levels, which

overloaded OpenAccess on large sites.

Each PC gets its own event subscription by default, and Delete Current Subscription accepts *

to clear many at once. Saved subscription names are kept.

Check Subscriptions no longer fails on subscriptions made by other applications, and a partial

delete is reported.

The log names each activity and badge a sync drops, and why, and cardholder progress shows

downloaded and mapped counts.

Trace Software Events now logs each event's contents, so it is off unless turned on.
The OnGuard application ID is no longer written to the log.

AEOS

Door and muster swipes from AEOS events are saved again. They had been dropped since 3.7.7240.

AMAG

Group memberships now link to the right users and groups.

Amadeus

Readers can be synced as doors with the new Create Doors From Readers setting.
Companies populate, and cardholders are linked to their company.
Cardholder and badge changes keep arriving after the login expires, with a periodic catch-up pull.
A failed download no longer deletes records.
Activities and occupancy work with an ID prefix, and badges with leading zeros match their

activities.

Activities are no longer dropped when more than one door uses a reader.

Autec

One unreachable CMM panel no longer stops users, badges and pictures from syncing. The sync is

reported as failed, naming the panel.

A failed panel's records are kept when the data manager has an ID prefix.
CMM badge pulls need a fifth as many requests.

Avigilon Unity (ACM)

Badge statuses sync on firmware 7.20 and later.
A poll with no new activity is no longer reported as a failure.
Occupancy ignores scans at readers not mapped to a zone, so people no longer stay in a stale zone.

dormakaba exos

The exos Exit date of Access Control syncs to the user's end date, and blocked people's badges

are denied. Both need the new Get Person Access Data setting.

exos visitors are marked as visitors in XPressEntry.
Syncs no longer fail by logging in repeatedly until exos refuses new sessions.
A page or person that fails to load no longer causes records to be deleted.

Elements

Handheld entry, exit and muster scans can be sent to Elements. This uses Elements' Generic Device

feature.

User sync no longer fails on tenants that return a person's spaces in a different format.

Frontier

Activities point at the correct door.
A service restart no longer re-downloads the last day of activities.
A failed download no longer counts as a success or crashes the sync, either of which could delete

records.

Galaxy

Intermittent "Unauthorized" errors that needed a service restart are fixed.
Change polling recovers from a sign-in failure and can no longer stop the service.
A full sync no longer fails at Groups when one cluster cannot be read, and that cluster's records

are kept.

A failed cluster list no longer deletes every group, zone, schedule and holiday.

Gallagher

The integration connects again. Every request had failed since 3.7.7748.

Honeywell EBI

New integration. See Highlights.

Kantech

Encrypted login works for usernames with capital letters.

S2 NetBox

Hand-mapped door zones are kept across syncs, so occupancy no longer drops to zero.
One oversized photo, or a valid large one, no longer fails the full sync.
A failed partition switch no longer deletes that partition's records or skips its changes.

Downloads

3.7.7748

September 4, 2026 3.7.7748

XPressEntry 3.7.7748

This release modernizes how XPressEntry connects to SQL Server, brings live updates to the web

console, and hardens the server against SQL injection.

Highlights

Support for SQL Server 2025 and stricter encryption

XPressEntry can now connect to SQL Servers that require strict encryption, with the matching

options in the database setup screen. Existing connections keep working as before.

The web console updates without a refresh

Badge scans, occupancy and zone changes, muster activity and guard tour progress appear in the web

console as they happen.

System-use notification at login

A configurable acceptable-use notice can be shown after login, on both the server and handhelds.

Blank by default, which keeps it off.

Integrations no longer slow the database over time

Pending integration events were never fully cleaned up, so on a busy site they could build up until

the database slowed down. They are now purged automatically.

Security

SQL injection hardening across the server and the OnGuard, CCURE 9000, Bosch, Galaxy and

Avigilon Unity integrations.

Zone occupant and activity history searches treat wildcard characters as literal text.

Server

A stray line break in a user's name no longer stops handhelds downloading their user list.
The handheld setup wizard no longer creates a duplicate door on every run when auto-create doors

is enabled.

Reader profiles gain a Guard Tour tab: tappable map coordinates, verification that a user is

permitted in a checkpoint's area, and routes assigned per profile.

Guard tour routes gain a scan mode — automatic within range, manual within range, or no location

check — with a validation radius on each checkpoint.

Data managers are listed in a grid with their status, and a new button checks every enabled one's

connection at once.

A manually requested sync always writes a sync summary, even when nothing changed.
Data manager custom field mapping no longer offers destination fields that the sync silently

discards.

The muster settings report name is chosen from a list of existing reports instead of typed by

hand.

Clicking a User Defined Fields column header no longer raises an application error.
Dead REST API and Web Occupancy settings have been removed from the Server General tab.
The data manager full-test suite and its button have been removed.

Config Tool / Database

The database connection string can be edited directly, for setups the standard fields cannot

express.

Config Tool failures appear in the inline message banner with the full reason, instead of being

cut short.

Saving no longer damages the web console's configuration file, and more of its settings can be

set from the Web tab.

The partition list loads when the Config Tool is run on its own.
Server logging no longer stops permanently on long-lived installations.
The diagnostic report includes considerably more detail about the database.
A failed database migration now records why it failed.

Integrations

OnGuard

A large sync no longer gives up partway through when the OnGuard server becomes busy. XPressEntry

now slows down and keeps going.

An incomplete sync can no longer be mistaken for a finished one and remove live cardholders and

badges.

Honeywell Pro-Watch

Pro-Watch handles an overloaded server the same way OnGuard now does. No change in behavior.

Genetec

Cardholder, credential and access rule changes now apply when MSMQ is disabled. They were

previously discarded.

The Genetec data manager can now be configured from the Config Tool.

CCURE 9000

Disabling one user no longer marks every valid badge in the system as User Disabled.
Bulk pulls can be narrowed to mapped columns only, with optional filters on the personnel, badge

and group pulls. A filter does not suppress deletion.

Velocity

Badge templates sync as badge types, and each badge takes its type from its credential.
Access granted through a function group is now honored. It was previously read and dropped.
Badge activation and expiration dates sync, with expiration taken only when Velocity is

enforcing it.

A door zone set by hand is no longer overwritten when Velocity has no zone to supply.
Software events arrive regardless of the occupancy and activity sync settings, and partial syncs

run far fewer queries.

Galaxy

A broken query has been removed from the occupancy sync.

Downloads

3.7.7699

August 14, 2026 3.7.7699

XPressEntry 3.7.7699

This release focuses on muster and occupancy accuracy, single sign-on, and keeping every open

client in step with the server. It also adds two new access control integrations and replaces the

facial recognition engine.

Highlights

Muster and occupancy counts are accurate again

Several separate causes were making headcounts wrong. Re-badged users were dropped from occupancy by

a lookup filter, soft-deleted rows were still being counted, OnGuard occupancy was compared against

the wrong timestamp, and deleting a user through a data manager left their occupancy row behind.

Live muster and occupancy updates now also carry the badge number and reader name.

OAuth and OIDC authentication

XPressEntry can authenticate against an OAuth or OIDC provider, with scope, audience, issuer and

refresh token settings. LDAP and OAuth secrets are encrypted at rest, and provider changes take

effect without a restart.

Push-to-Talk

Readers can join named audio channels and talk to one another, with one speaker at a time per

channel. Channels and their reader assignments are managed from a new setup screen that shows which

readers are online and who is currently speaking.

A new facial recognition engine

Facial recognition now runs on telaeris_vision with a lighter, more accurate model and aligned

embeddings, and ships in the installer. The separate FaceRecognition application has been removed.

Two new integrations

Avigilon Alta and DOORS.NET.

Security

Fixed a SQL injection vulnerability in handheld badge enrollment.
Fixed a SQL injection vulnerability in the equipment occupants endpoint.
Credential hash comparison is constant-time.
Fixed a path traversal vulnerability in upload handling.
Reader credentials are generated with a cryptographically secure random number generator.
LDAP and OAuth secrets are encrypted at rest.

Server

Re-badged users are no longer dropped from occupancy, so muster counts include them.
Soft-deleted occupancy rows are excluded from muster counts.
Deleting a user through a data manager now clears their occupancy record.
Live muster and occupancy updates include the badge number and reader name.
Scans denied at a muster reader are flagged, so a user who was refused entry is not silently

counted.

A new Past Muster form lets you review previous muster events.
Muster and occupancy changes now push to open clients as they happen.
The External Muster Activity Sync setting has been renamed and now defaults to Always.
Reader profile data loads at startup, so the Muster node appears without opening settings first.
Muster map default queries have been updated.
Badges can no longer be saved with an expiration date before their activation date.
Adding a new user no longer deletes the previous user's custom field values.
Badge printing gained a print preview, and the badge printer list is populated correctly.
Enrollment forms use the configured thumbnail size and quality.
Visitor and host checkboxes now behave as mutually exclusive toggles.
Clicking Add New clears the selection in the left-hand list.
Reader profiles gained an unauthorized user mode.
The default Wiegand format is chosen from a list instead of typed free-hand.
Reader names that collide are numbered from the name you provided.
Reader validation and the occupancy Edit User screen were corrected, and the Random Badge

Challenge percentage is now described accurately.

Deleting a timezone cascades to the records it owns instead of leaving orphans behind.
Deleting and restoring records with dependents works correctly.
Fixed errors on the Events page attendee list, including a crash when filtering.
Map view summaries support a separate background colour, which is included when the map syncs.
Map view objects can be excluded from the map, and the editor preview honours that setting.
Zooming a map view no longer shows a stale image.
Map views load correctly against older database schemas rather than failing outright.
User and badge changes refresh in open clients immediately, including in a record that is already

open for editing.

Settings and authentication provider changes apply in memory without a restart.
Deleting a picture now propagates to handhelds.
The "Settings Changed Externally" prompt no longer appears twice.
Sync summaries can be purged automatically, keeping the table from growing without bound.
Exporting sync summaries is paged, so large exports no longer time out at 30 seconds.
A finished sync appears at the top of the grid as it completes, without losing your selection.
Login errors are shown on the login screen instead of being discarded.
Fixed an intermittent login failure at startup when the service port was not yet listening.
Fixed login for non-joined domains.
Legacy HTTP authentication settings are supported for existing deployments.
Settings import and export now cover custom fields, OAuth and LDAP configuration.
All settings are editable from the Config Tool.
Sync buttons are disabled when their corresponding sync option is unchecked.
The Data Manager node reappears after clearing a settings filter.
The custom display logo picker accepts PNG files and rejects oversized images.
Custom field values populate correctly after a data manager sync writes new records.
Fixed three faults in the reader connection pipeline: the listener could stop accepting new

reader connections, reader status updates could be dropped without warning, and the reader status

screen could freeze.

The server no longer halts on debug break statements left in production code paths.
Data manager log output no longer degrades the interface during heavy sync activity.
Large database imports no longer time out.
Disconnected clients are evicted correctly instead of blocking notifications to everyone else.
Errors now raise general alarms.
Updated XPressReports to resolve an authentication incompatibility that prevented reports from

Config Tool / Database

The Config Tool is now authoritative over the web console's environment file, rather than

depending on the installer to write it.

More web console settings are editable, including mail settings, TLS options, public scheme and

port.

Email settings configured in XPressEntry are synced to the web console.
Status messages appear in an inline banner instead of interrupting with pop-up dialogs.
The collation check no longer blocks on a minor collation difference, warning instead.
Fixed web console configuration generation when the install path contains spaces.
Fixed schema mismatches on SQL Server installations using a non-default schema.
SQL Server connections can require encryption, with a Trust Server Certificate option.
Added a unique index on time card activities.
Database schema kept in step with the web console for employee type, default work codes and time

card notes.

Fixed a database migration that could fail when run twice.

Reporting

Added a Logins pivot table.
Fixed percentage calculations, timezone handling and password masking in the diagnostic report.

Other Fixes

The Messages feature has been removed.
Manual Enter/Exit Users menu items and forms have been removed.
The deprecated legacy HTTP server has been removed. Deployments using it should move to the

current API.

The standalone FaceRecognition application has been removed, replaced by the telaeris_vision

engine described above.

Integrations

OnGuard

Fixed a timeout that went unhandled during session token checks.
Occupancy sync is limited to the activity look-back window.
Occupancy timestamp handling corrected, fixing headcount discrepancies.
Software events no longer write badge activities when activity sync is turned off.
Access levels can be filtered by panel selection, and the panel filter can be searched by name.
Durable OpenAccess subscriptions are removed on permanent teardown.
Activity and occupancy options were consolidated in the setup screen, removing duplicate

checkboxes.

Fixed subscription filtering and casing errors in hot-event recovery.
A full sync no longer aborts when a badge download returns partial results.

Brivo

Cardholders can be filtered by site access, and unknown users can be pulled on scan.
Added site partitioning and user custom field mapping.
Activity and occupancy timestamps display in local time rather than UTC.
Fixed a crash during activity sync when mapping activity data.
Token refresh recovers on its own after an invalid grant.

CCURE 9000

Clearance doors load correctly.
Fixed a crash during setup when a custom field had an empty external ID.
The embedded CCURE Connector Service has been removed; the REST connection now defaults to port

9501.

Installer fixes for shipped components.

Avigilon Unity (ACM)

Optionally pulse the door relay on a handheld scan, with a muster pulse toggle and per-door relay

filter.

Fixed activity polling missing scans that occurred on the watermark second.

Avigilon Alta

New data manager, with MQTT support and activity sync.

Galaxy

Fixed expiration dates not being sent.
Fixed activity sync never completing.
Fixed crashes caused by activity timestamps and empty muster reader IDs.

Honeywell Pro-Watch

Support for Pro-Watch API 7.0, including live events and data change notifications.
Improved reliability under load and safer handling of sync data.
Added credential protection on login for both DTU and REST.
Handheld button behaviour is configurable from the reader profile.
With No Groups Data enabled, full and partial syncs no longer create group memberships.

Autec

Fixed a sync delay and an authentication retry failure.
Profiles sync from all CMM panels rather than masters only.
Improved error reporting and login refresh.

AEOS

Fixed user and badge event parsing.
Fixed settings being corrupted during migration.

BioStar

User start and end dates and badge expiry dates map correctly.
Fixed date parsing on systems with a non-English regional format.

Genetec

Fixed a failure on systems with a conflicting Newtonsoft.Json version installed.
Fixed RIO login sending credentials with the wrong content type.

Amadeus

Card codes are assigned to the badge number exactly as provided.
Fixed event payload handling and cardholder card retrieval.

Frontier

Muster scans are sent as egress on single-sided doors.

RS2

Auto-exit hours are checked before occupancy is updated.

Spica

Fixed access denials being recorded as granted.
Fixed crashes during activity mapping and occupancy updates.
Removed a SQL injection risk in event processing and duplicate-activity checks.
A failed sync now reports failure instead of always reporting success.
Fixed a potential deadlock during status checks and a database connection leak while retrieving

activities.

Verkada

Optional verbose API request and response logging for troubleshooting.

ZKTeco

Kiosk settings for door unlock and Wiegand output.

DOORS.NET

New integration.

Downloads

3.7.7454

May 7, 2026 3.7.7454

What's Changed

New Features

Add common biometric timeout
Add constant-scanning option to biometric settings
IDScan iOS License
Rename MDM/Managed labels to SDM/Secure
Facial Recognition Unknown User Message/Activity
Add auto select mode for entry/exit and door font configuration
Add deferred entry/exit setting
Optimize agent markdowns
OnGuard Device Translator REST API with Panic Alarms and Muster Activities
Add name-based lookup option to reader profiles
Sign deployed PS1 scripts and add SIGN_DLLS flag for conditional DLL signing
Add ComboBox search/filter popup to CRUD forms (#2837)
Add iOS-specific IDScan MRZ license support
Add Gallagher Competency check
Reader profile settings for handheld error logging

Server/Client Updates

Stop double-escaping search filter ΓÇö breaks names with apostrophes

Onguard Integration Updates

Data Manager Settings Normalization and All Settings Import/Export via JSON
Fix for Indonesia date formatting and number formatting
Add diagnostic report generation to Config Tool and Server
Hotfix onguard process updated user images
Fixes re-mapping issues for PicturesUpdatedHandler
Panic Alarms and Muster Activities via Device Translator Pipeline
OAuth and JWT Authentication
Short Circuit Logic Checks of OrElse / AndAlso / Null Checks
Fix NuGet package version mismatches across 20 projects
Fix DM disable step escaping and target database
Fix infinite activity loop possibility when OnGuard Device Translator is enabled
Filter pending activities by panel ID for OnGuard translator
OnGuard: Add panel filter for reader sync + bulk insert temp tables
Support Generic OAuth Providers
Update all Telaeris NuGet packages to signed versions
Add DataManager settings to XPressEntryConfigTool
OnGuard Deleted Records Fixes

CCURE 9000 Integration Updates

CCURERest Group Readers mapping throwing exception fix
Fixed IIF Short Circuit Logic throughout code and Stop on unexpected conditions in CCURE9000 and PacomGMS and cExternalDataManager
HOTFIX: Fix Decimal/Double culture-sensitive save and NumericUpDown bounds

AMAG Integration Updates

Use NullToInteger for comparison in GetTimeCodes

Amadeus Integration Updates

Amadeus integration

AEOS Integration Updates

Fix incorrect null checks on reference types causing false matches

Apollo Integration Updates

Prowatch badge data parsing fix and Updates in apollo event base 64 data processing
Apollo Cardholder Badge and Access Level Live Event Update Fix

Brivo Integration Updates

Fix Binding Redirects and DLL references

DSX Integration Updates

DSX Integration Fix ΓÇô Door/Reader Mapping and Muster Push Error

Frontier Integration Updates

Frontier Data Manager: Setup guide, bug fixes, and SSL checkbox
HOTFIX: Fix Frontier DM timestamp parsing issue

Gallahger Integration Updates

Fix for ever growing dmsyncsserver_logs table

Prowatch Integration Updates

Prowatch api response parsing updates for version 6.5
Prowatch update post event date format
Update Prowatch reader event payload & logging
Fix Prowatch POST activity datetime error and card disabled status is not updated
Prowatch 6.5.2 Fixes
Pro-Watch REST API - Treat 405 MethodNotAllowed as connection error
ProWatch Occupancy map and SingalR updates
Prowatch user last zone mapping fix
Fix badge type parsing error in ProWatch mapping
Prowatch SignalR closing and UDF fix
Prowatch Rest Code Improvements and UDF Mapping Bug Fix
Prowatch Rest Custom Badge Fields Data Mapping Fix
Option to ignore Prowatch Badge api Filter

Kantech Integration Updates

Kantech support multi-digit card info fields fix
Add Support for all Kantech field types as custom field mappings
Kantech Add omitted sender to get sites

Maxxess Integration Updates

Fixed sender parameter bug in maxxess
Added maxxess groups users sync to bPartial using reports
allow partial to update groups users maxxess

S2 Integration Updates

Optimize S2 large picture URL handling by extracting string operation outside retry loop
S2 Large picture pull URL fix

Sipass Integration Updates

SiPass DM HR API Multiple Login Fix

Velocity Integration Updates

Velocity DM: custom ICredential -> BadgeData field mappings

RS2 Integration Updates

RS2 REST - Added groups readers timezones to partial sync

Other Changes

Spica Activity Sync DateTime Conversion Fix
Fix for Negative Devices Count on Handheld Setup Wizard
AEOS - Pagination in readers update and Custom sync support
Rename XPressEntryDatabaseTool to XPressEntryConfigTool
Fixed raised call for zones delete records in Saba
Hotfix Spica DM Activity Sync
Feature DM IDCube
Genetec Installer Fix
Use UTF-8 Base64 for reader profile JSON
Skip null data manager settings on migration of data manager settings
Update GitHub Actions workflow for PR notifications
Add permissions for pull requests in workflow
Genetec Installer properly copies SDK install files
Refine unsupported SDM device handling
Update all Telaeris.* NuGet packages to latest versions
Web Console Roadrunner support
Sync summaries filtering improvements
Quick Fix for REST api table
Fixes in Config Tool for RoadRunner
Fix User Cache Issue with Handheld Sync
Support manual credentials for LDAP connection
Fix for validation color not saving
Genetec Custom Fields to User standard field mapping fix
Quote username and password
Digitronica sync and software event fixes and re-sending activities
Location Update Settings
Guard Tour V2
SCSMA Integration - Remove unnecessary error log on groups user mapping
Elements integration
Multiple Documentation Updates
Fix SQL injection vulnerability in record cleanup and user import
Fix SQL connection and reader leaks in PremiSys plugin
Fix Google.Protobuf version mismatch in FaceRecognitionWorker
Guard Tour Mode Enable in profile
Fix crash in activity parser on malformed form fields
Harden auto-exit processing: reentrancy, transaction safety, error handling, and related settings fixes
Harden Jenkins pipeline: distinguish infra failures from test failures
Fix WebSocket listener port leak and activity queue test failures
Remove dead ADD_CREDENTIALS activity handler
Add repo name to Teams notification
Protect against disposed and duplicate QR form
Fix frmMain refresh and top icon visibility after General Settings chΓÇª
Avigilon Alta Data Manager
Fix wrong sender parameter and missing sync cancellation in base data manager
Fix user search returning no results with 20K+ users
Update AI agent instructions and add line-ending normalization proposal
Add OAuth Models
Remove Telaeris.Authentication from Telaeris.Models packages
Fix Jenkinsfile for multi-server builds
Jenkinsfile updates for multi-server builds
Diagnostic Zip UseZip64WhenSaving fix
Update Telaeris.Controls and XPressReports packages
Fix MSMQ processing stall when downstream callback throws
Fix null reference when deleted timezone displayed in Groups form
Fix XPE Client and Auth issues
Sign WiX custom action DLLs to fix Defender ASR install blocks
Add GlobalAssemblyInfo.cs to CustomActionStopXPE
Made DM Sync Text box read only
Sign tests/scripts/*.ps1 + per-build LocalDB share name (test-pipeline infra)
Fix Sync summaries log growth
Fix: Reader last-synced time displaying UTC instead of local time
SCSMA - Add handheld name and GUID to activity send
Add hidden CheckCertificateRevocation knob (fixes #2902)
MorphoManager Integration
Auto Exit: Include Badge ID and Badge No in Activity Record
Refactoring for frmMain
fix: DRY up ParseDigits ΓÇö consolidate duplicate declarations
Jenkinsfile: workspace cleanup + reference-repo hang fix
Refine .claude/ ignore so team-shared settings can be committed
Fix user search timeout in frmAddEditInfo at 30K+ users
fix: preserve Legacy reader created_at on update
CI: dedicated XPETEST SQL Server test pipeline (split from PR-2739)
Break apart HandleHandheldActivityRecord into focused sub-functions
ci: collapse Require Checklist re-runs on PR body edits
MFlex test data manager + Extract ExternalDataManager DLL
fix: resolve WCF cert identity mismatch in Config Tool DM sync

Full Changelog: https://github.com/Telaeris/XPressEntry-Desktop/compare/3.7.7240...3.7.7454

Downloads

3.7.7240

January 26, 2026 3.7.7240

What's Changed

New Features

Added Sync Summaries for all Data Managers
Improved Sync Processing Time for all Data Managers
Added SDM Profiles
Added max occupancy support to zones
Migration Number is at 376

Onguard Integration Updates

Fix for Software Events Processing out of Order

Genetec Integration Updates

Prefix fixes for Supporting Multiple Data Managers

Kaba Exos Integration Updates

Prefix fixes for Supporting Multiple Data Managers

OnGuard Integration Updates

Fix for User UDFs not Mapping Properly

RS2 Integration Updates

RS2 fix for badge activities with facility code -1

Spica Integration Updates

Push Activities to Time API and Activity Sync Refactoring

Suprema Biostar Integration Updates

Added user group name to external data for mapping groups to users better

Verkada Integration Updates

Added user group name to external data

Other Changes

Fix to avoid starting any Data Manager twice upon initial setup
Added Multibranch Test Coverage

Downloads

3.6.7191

December 23, 2025 3.6.7191

What's Changed

Final 3.6 Release

New Features

Hindi and Polish Language Handheld Support
Offline Handheld Alarms and Notifications
Added DB Migration Logging
Added muster site Client Setting
Send Partition Data to Handhelds
Facial Recognition
Updated permissions for Data Editing based on Login
MSMQ Processing Support for loop limit
Activity History and Logs filtering fixes and max record limit
Updated Max Min of Wipe Handheld Activities Older than X Minutes
Remove user Occupancy update for invalid badge scan out of zone
Credential Fix for Backwards Compatibility with old handhelds
Fixed the missing logging for ReaderStream Connected/Disconnected
Updates for Logins/Client Settings for Muster Dashboard
Expiration Date Issues addressed in enrollment mode
XPressEntry Installer stops programs automatically
Badge Type form fixes for load and save records
Fix for XPressEntryService not Stopping
Expand Web Console certificate setup to work with any certificate
Web Console support for LDAP and Maps
Monitor Handheld Device Battery Level + Alarms
LDAP/Active Directory Integration for User Logins
MDM Mode

Onguard Integration Updates

Onguard SRS Updated requirements for checking unfit status (?)
Allow OnGuard Access Denied Events
OnGuard Fingerprint and Badge Overrides
Updated OnGuard badge override logic to always override
Added filter for OnGuard Fingerprints and querying the BiometricBodyPart field from MMOBJS
Truncating onguard invalid status override
Updated Device Translator downloads available downloads.telaeris.com

Onguard Custom Features

Onguard custom access levels assignments
Onguard Hotfix vehicle and driver ids parsing
Added Software Event Processing for Groups Vehicles Mapping

Genetec Integration Updates

Genetec support multiple Cloudlink devices
Added Genetec Custom Credential Field Mappings
Genetec add visitors back to cardholder query
Genetec multiple Cloudlink UI fixes and send muster scans
Genetec send raw badge in place of non wiegand badge from search
Genetec Remove expiration date from active badge
Genetec Fix Setup RIO password overwrite bug
Genetec Fix UDF load on setup form

CCURE 9000 Integration Updates

CCUREREST single event processing and badge restoration bug fix
CCUREREST Allow HTTPS for SignalR
CCUREREST Software Event Reconnection Improvements
CCUREREST Add Support for HTTPS
Add full picture support for CCUREREST
CCUREConnectorService Now using Signed Executable
CCUREREST Fix image pull when missing full pictures setting

Prowatch Integration Updates

ProwatchREST Add Custom Sync and Fix Pictures Sync

AEOS Integration Updates

Fixed DateTime UTC conversation for group users
Group User Mapping And Deletion
Added Option to Only Single Process MSMQ Events
Fix for Groups Users not being removed in a software event
Fix for Muster Activity Push

Apollo Integration Updates

events parsing fix with MSMQ and Activity Pull Updates
Added Live data updates
Fix for Apollo Post Activity Marked as Processed when APACS service is Off

Avigilon Integration Updates

Fixed activity sync with loggeddateutc
Avigilon time formatting fixed to use UTC

Galaxy Integration Updates

Galaxy REST Data Manager Data Change Polling
Changed local time conversion to use server timezone specified from DM Settings
Prevent User Deletion on Users Pull API Error
Galaxy - Support activity datetime conversion using reader timezone

Gallahger Integration Updates

Gallagher Partner Token Implementation
Added legacy gallagher license option

Kantech Integration Updates

Kantech Global Support for reader mappings
Kantech updates for Global Edition and door / zones synchronization
Kantech activity sync and door sync updates

Velocity Integration Updates

Added Occupancy override to enable checkbox
Added Support for Software Events and Occupancy Push

RS2 Integration Updates

RS2Rest Partial Sync Filter Fix
Optimize RS2Rest Transaction Synchronization
Fix for RS2 REST activity mapping
Updated RS2 REST post to use Long instead of Integer to support PIV card

Feenics Integration Updates

Feenics Integration Refresh

XMP Babylon/Siport Integration Updates

AUTEC setup form missing credentials fix
AUTEC Correct datetime format for picture sync
Reader Profile Settings updates for Live validation mode
AUTEC Server updates for CMM sync

ZKTeco Integration Updates

Added optional Get Photos to the ZKTeco API List call. Defaults to True
Filter ZKTeco Person List by authAreaId
ZKTeco Processing Pictures outside of the main loop

Spica Integration Updates

Changed parameter for activity push to Spica DM
Fix for Activity Sync
Added Employee ID Mapping
implement udf mapping
Spica Occupancy Update Fixes

Verkada Integration Updates

Added "Add Activity" Code

DSX Integration Updates

DSX Post Data and Door Mapping Fixes

Maxxess Integration Updates

Maxxess Data Sync optimization

Sipass Integration Updates

Sipass Add Activity To Audit log

Suprema Biostar Integration Updates

Biostar User Group and Activity Mappin fixes

Other Changes

Fix issues in user picture template generation - Thumbnail generation 10x faster
Fixes issue where you can delete the last admin/login
Added Token Refresh for TimeAPI
Add Export SQL Script and Cleanup old Web Occupancy
Bumped XPressReports for bugfix
Activity History DateTime Filter Fix
Migrations for Web Release 1.3.4

Downloads

Available Builds

Build Number	Name	Description	Date	Downloads
#7891	3.7.7891	XPressEntry Web DM: sync a missing visit reason as NULL, not 0	November 3, 2026	XPressEntrySetup.3.7.7891.msi 212.49 MB XPressEntrySetup.3.7.7891.x86.msi 221.48 MB
#7890	3.7.7890	XPressEntry Web DM: sync a missing visit reason as NULL, not 0	November 3, 2026	XPressEntrySetup.3.7.7890.msi 212.50 MB XPressEntrySetup.3.7.7890.x86.msi 221.47 MB
#7889	3.7.7889	Show face embedding status on the user's picture	November 2, 2026	XPressEntrySetup.3.7.7889.msi 212.49 MB XPressEntrySetup.3.7.7889.x86.msi 221.47 MB
#7888	3.7.7888	Show face embedding status on the user's picture	November 2, 2026	XPressEntrySetup.3.7.7888.msi 212.50 MB XPressEntrySetup.3.7.7888.x86.msi 221.45 MB
#7887	3.7.7887	Add XPressEntry Web data manager	November 2, 2026	XPressEntrySetup.3.7.7887.msi 212.50 MB XPressEntrySetup.3.7.7887.x86.msi 221.47 MB
#7851	3.7.7851	No description	October 22, 2026	XPressEntrySetup.3.7.7851.msi 208.70 MB XPressEntrySetup.3.7.7851.x86.msi 217.42 MB
#7748	3.7.7748	No description	September 1, 2026	XPressEntrySetup.3.7.7748.msi 220.43 MB XPressEntrySetup.3.7.7748.x86.msi 231.14 MB
#7699	3.7.7699	No description	August 14, 2026	XPressEntrySetup.3.7.7699.msi 191.53 MB XPressEntrySetup.3.7.7699.x86.msi 202.23 MB
#7454	3.7.7454	No description	May 7, 2026	XPressEntrySetup.3.7.7454.msi 179.35 MB XPressEntrySetup.3.7.7454.x86.msi 189.97 MB
#7240	3.7.7240	No description	January 26, 2026	XPressEntrySetup.3.7.7240.msi 173.27 MB XPressEntrySetup.3.7.7240.x86.msi 172.71 MB
#7191	XPressEntry Desktop: 7191	No description	January 5, 2026	XPressEntrySetup.3.6.7191.msi 173.98 MB XPressEntrySetup.3.6.7191.x86.msi 173.46 MB
#7187	XPressEntry Desktop: 7187	No description	January 5, 2026	XPressEntrySetup.3.6.7187.x86.msi 172.27 MB XPressEntrySetup.3.6.7187.msi 172.79 MB
#7000	XPressEntry Desktop: 7000	No description	January 5, 2026	XPressEntrySetup.3.6.7000.x86.msi 164.39 MB XPressEntrySetup.3.6.7000.msi 164.39 MB
#6952	XPressEntry Desktop: 6952	No description	January 5, 2026	XPressEntrySetup.3.6.6952.x86.msi 128.55 MB XPressEntrySetup.3.6.6952.msi 128.54 MB
#6896	XPressEntry Desktop: 6896	No description	January 5, 2026	XPressEntrySetup.3.6.6896.msi 127.79 MB XPressEntrySetup.3.6.6896.x86.msi 127.79 MB
#6870	XPressEntry Desktop: 6870	No description	January 5, 2026	XPressEntrySetup.3.6.6870.x86.msi 70.47 MB XPressEntrySetup.3.6.6870.msi 70.36 MB
#6801	XPressEntry Desktop: 6801	No description	January 5, 2026	XPressEntrySetup.3.6.6801.msi 175.32 MB XPressEntrySetup.3.6.6801.x86.msi 175.46 MB
#6786	XPressEntry Desktop: 6786	No description	January 5, 2026	XPressEntrySetup.3.6.6786.msi 174.83 MB XPressEntryClientSetup.3.6.6786.x86.msi 7.46 MB XPressEntrySetup.3.6.6786.x86.msi 174.98 MB XPressEntryClientSetup.3.6.6786.msi 7.46 MB
#6647	XPressEntry Desktop: 6647	No description	January 5, 2026	XPressEntrySetup.3.6.6647.msi 51.92 MB XPressEntryClientSetup.3.6.6647.x86.msi 6.12 MB XPressEntryClientSetup.3.6.6647.msi 6.12 MB XPressEntrySetup.3.6.6647.x86.msi 51.92 MB
#6645	XPressEntry Desktop: 6645	No description	January 5, 2026	XPressEntrySetup.3.5.6645.msi 51.92 MB XPressEntryClientSetup.3.5.6645.x86.msi 6.12 MB XPressEntryClientSetup.3.5.6645.msi 6.12 MB XPressEntrySetup.3.5.6645.x86.msi 51.92 MB