> For the complete documentation index, see [llms.txt](https://newdocs.keeper.io/en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://newdocs.keeper.io/en/release-notes/enterprise/admin-console/admin-console-17.10.4.md). # Admin Console 17.10.4 Released August 26, 2026 ## Overview Admin Console 17.10.4 introduces key updates to Keeper Endpoint Privilege Manager (EPM) workflows, expanded Risk Management reporting for MFA (Multi-Factor Authentication) methods, role filtering in Role Enforcement Policies, and user tag tooltips. This release also resolves critical UI stability issues, and enhances performance for large enterprise accounts. ## Enhancements ### Endpoint Privilege Manager (EPM) * EM-8089: Added the ability to sort agents within EPM deployments for improved management clarity. * EM-8513: Updated EPM policy filtering to allow administrative filtering by user group. * EM-8831: Updated Remote Management and Diagnostics (RMD) tile details and layout. * EM-8887: Refined policy label wording for applying policies directly to collections. ### Role Enforcement Policies * EM-8654: Added role-based filtering within Role Enforcement Policies to streamline policy assignments. ### Admin Console UI & User Management * EM-8340: Added hover tooltips to user tags for instant context on assigned tags. * EM-8396: Introduced tech debt improvements for Enterprise Administrator lockout prevention safeguards. * EM-8869: Added the "Keeper 101" onboarding video link to the Getting Started section for KeeperPAM JIT (Just-in-Time) Workflow. * EM-8964: Updated Risk Management reporting to include detailed MFA methods for users with MFA-protected vaults. * EM-8509: Enhanced Advanced Reporting & Alert Management (ARAM) tracking for KeeperAI logged-out device events. ## Bug Fixes ### Admin Console & Node Management * EM-7962: Fixed an issue where using "Select All" selected all users in the node rather than honoring active tag filters. * EM-8062: Fixed bulk action menus failing to update when the logged-in admin was included in the selected users. * EM-8314: Fixed an issue causing account lockouts after entering specific IP range configurations. * EM-8586: Resolved a memory crash occurring on large accounts when removing multiple users from roles and teams simultaneously. * EM-8607: Fixed a bug where the "Transfer" button remained active when no user was selected. * EM-8667: Fixed an issue preventing administrators from saving a Master Password minimum length of 12 if a higher value was previously set. * EM-8676: Fixed UI timing and reset bugs within the inactivity logout timer logic. * EM-8694: Fixed session state and sync issues occurring when multiple production console tabs were open. * EM-8705: Fixed an issue allowing manual entry of invalid year values in policy date filters. * EM-8731: Fixed layout clipping on the main search bar when viewed on smaller screen widths. * EM-8947: Fixed an incorrect error message displayed when editing email addresses for invited users. * EM-8961: Fixed an issue where incremental security report data re-renders caused the team modal node selector to reset. * EM-9070: Restored missing toast notification popups across the Users tab. ### Keeper EPM & KeeperPAM Adjustments * EM-8154: Fixed a bug causing EPM audit log time range filters to return invalid results. * EM-8522: Resolved evaluation logic errors for enabled vs. disabled collection machines in KEPM. * EM-8551 / EM-8562 / EM-8564 / EM-8568: Fixed issues in request handling where expired requests showed non-functional checkboxes, auto-deleted prematurely, or caused active requests to disappear from main request views. * EM-8601: Fixed a bug allowing duplicate resource creation across different collections when using manual resource definitions. * EM-8636: Corrected naming conventions for EPM deployment packages. * EM-8852: Fixed an issue where EPM event searches using filters failed to trigger fresh data calls. * EM-8872: Removed the redundant "New Deployment Package" button from the EPM Workloads tab. * EM-8899 / EM-8900: Standardized default collection and policy names across EPM OS environments. * EM-9065: Fixed an issue causing duplicate policy applications on existing accounts with EPM policies. * EM-9074: Added missing user tag capabilities for designated EPM policy approvers. * EM-9097: Fixed a delay where adding a team to an approver policy failed to reflect in the UI immediately. ### Reporting & Alerts (ARAM) * EM-8492: Enforced mandatory naming constraints for new alert configurations in ARAM. * EM-8650: Resolved an issue where removing or adding roles to teams rendered the role as a raw UID string in audit logs. * EM-8652: Fixed a discrepancy between the top-left summary event counter on the dashboard and the actual filtered row counts. * EM-8840: Resolved negative values appearing in financial subscription banners after transitioning free trial add-ons to paid plans. * EM-9060: Fixed a blank white screen issue occurring upon navigating to Reporting > Recent Activity. * EM-9061: Fixed an issue where discarding changes on an alert name retained unsaved edits. * EM-9062: Fixed missing "Every # Occurrences" value displays in alerts data tables. * EM-9072: Resolved a blank screen crash in Risk Management when displaying accounts with a high volume of locked users. ### MSP & Multi-Tenant Management * EM-8904: Fixed validation logic to prevent multiple leading zeros in the "Update Maximum Licenses Allowed" input field. * EM-7969: Corrected messaging displays for PAM when enabled or disabled in Managed Companies. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://newdocs.keeper.io/en/release-notes/enterprise/admin-console/admin-console-17.10.4.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.