Release Notes

Table of contents

What's new

Acronis Cyber Protect Cloud

Advanced Backup

Backup frequency for Microsoft 365 and Google Workspace

This capability enables reduction in RPO (Recovery Point Objective) for Microsoft 365 and Google Workspace backups by increasing the frequency from 24 hours to 4 hours.

As a Partner or Customer administrator, you can configure a backup frequency for supported Microsoft 365 and Google Workspace workloads in the protection plan.

Backup

Support for the latest version of VMware vSphere environments for data protection.

​As a Partner or Customer administrator, you can:

• Perform backup and recovery of virtual machines hosted on VMware ESXi 8.0, including cross-platform recoveries.​
• Perform backup and recovery of virtual machines hosted on VMware vSAN 8, deployment of virtual appliances, VM replication, failover and failback.​
• Make sure that the newest values for VM guest OS and Virtual Hardware properties introduced with vSphere 8 are preserved during VM recovery.

Advanced Management

Show last logged in user

• Visibility & Control: IT administrators gain insights into user access, ensuring proper management of users and workloads for audit, compliance and operational needs.
• Security: A report of users' logged time on a workstation helps accelerate forensic analysis and contain the damage in the event of a cyber attack.

As a Partner or Customer administrator, you can:

• Enable the Show last logged on user option in the remote management plan.
• Review last logged in users and logon times in workload grid.

Platform core

Generic SIEM Connector

The Acronis Generic SIEM Connector enables connection between Acronis Cyber Protect Cloud and any SIEM that supports the CEF event format over SYSLOG.

SIEM support is crucial for enabling the integration of Acronis Advanced Security and EDR with external services.

As a Partner administrator, you can:

• Enable an integration by providing credentials for SIEM.
• Select the tenants that should send data to SIEM.
• Review a list of Acronis alerts and select which alerts should be pushed to SIEM.

Recycle bin for accounts, users, and application data

This capability reduces partner’s exposure to risk - including revenue loss, end-customer and partner churn, damage to brand, legal expenses, and fines - when data is erroneously deleted, whether accidentally, by accidental service de-provisioning, glitches in partner integrations, malicious impact, etc.

As a Partner administrator, you can:

• Recover erroneously deleted partner or end-customer tenants.
• Recover erroneously deleted end-customer users.
• Recover erroneously turned off services that leads to data deletion.
• Perform the recovery within 30 days after deletion through the management portal, without needing to contact Acronis Support.

Remarks:

The File Sync & Share service does not include support for the Recycle bin functionality. In the event of a service recovery, the File Sync & Share service itself will be restored, but the data (files) will have to be manually uploaded by the user once the recovery process is completed.

Integrations

Integration with Microsoft Sentinel

Microsoft Sentinel is one of the leading SIEM platforms that enables the collection of alerts and events from different sources, and perform security investigations, threat hunting and response actions.

The integration enables Acronis to be added to Microsoft Sentinel as a log source.

As a Partner administrator, you can:

• Enable an integration by providing credentials for Microsoft Sentinel.
• Review a list of Acronis alerts and select which alerts should be pushed to SIEM.

ServiceNow 2.0

ServiceNow is used by large MSPs and this integration is crucial for access to the Enterprise market. The 2.0 update expands the functionality of the integration with new features aimed at addressing the needs of large MSPs.

As a Partner administrator, you can:

• Link multiple partner tenants on one or more Acronis DCs to one ServiceNow account.
• Configure provisioning settings per partner tenant.
• Review full Acronis alert details within ServiceNow.
• Create and manage rules for Acronis alerts and how they are converted to incidents in the ServiceNow Service Desk.

Advanced Files Sync & Share

eIDAS certification for signature

eIDAS established the requirements and legal value for advanced electronic signatures (AdES), which are legally valid in all European Member States.

MSPs can sell AdES in over 300 countries around the world, providing the highest level of signer identity verification and anti-fraud sealing.

MSPs can provide AdES services to their clients for high-risk contract signatures, such as financial transactions (consumer credit), legal contracts, HR documents (offer letters, new hire paperwork), and other high-value transactions.

As a User, you can:

• Validate your identity in the Digital Sign TSP application for the first signature.
• Sign documents using a one-time password (OTP) with SMS.

End of support for macOS versions 10.10, 10.11, and 10.12

Starting in July 2023, with the release of Acronis Cyber Protect Cloud 23.07, we will end the support of the following macOS versions:

• OS X 10.10 Yosemite
• OS X 10.11 El Capitan
• macOS 10.12 Sierra

Updated Components

Cyber Protection agent

The Acronis Cyber Protection agent has new versions as follows.

• Acronis Cyber Protection Agent for Windows (v.15.0.35887)
• Acronis Cyber Protection Agent for Mac (v.15.0.35887)
• Acronis Cyber Protection Agent for Linux (v.15.0.35887)

See the release notes for the Acronis Cyber Protection agent here.

Changes in Acronis Cyber Cloud API

You can find the history of changes in Acronis Cyber Cloud API in the dedicated API change log document.

Fixed issues

This section describes issues that have been fixed in this update.

Security

For information about security issues fixed in this release, please refer to https://security-advisory.acronis.com/updates/UPD-2306-5600-4733.

Acronis Cyber Protect Cloud

• Advanced Disaster Recovery

  • [DRAAS-27862] The number of backups displayed on the Backup Storage tab of the Cyber Protection console changes seemingly randomly.
  • [DRAAS-27899] After DR cloud restore, Centos 7 VMs fail to boot with an error containing the message "/dev/mapper/centos-root does not exist."
  • [DRAAS-28430] IPsec tunnel does not start up after DPD action Restart.
  • [DRAAS-28433] The recovery server cannot find a bootable disk.
  • [DRAAS-28518] The Runbooks tab opens very slowly and runbooks do not start.

• Backup and recovery

  • [ABR-358880] The built-in keyboard of Lenovo laptops is not responding during the pre-boot process.
  • [ABR-364629] Backups end with the warning message "Failed to register a backup in backup file '<backup_filename>'. Please refresh the list of recovery points."
  • [ABR-367592] No backup data is displayed when trying to recover files from SharePoint sites.
  • [ABR-367656] Microsoft 365 cloud-to-cloud backups fail with the error message "Failed to update object...."
  • [ABR-367658] Deleting Microsoft 365 backups fails with error "Internal Error."
  • [ABR-368337] In the Cyber Protection Console, section "Management" > "Protection plans" does not display any protection plans, but under "Monitoring" > "Activities" you can see that multiple plans are running.
  • [ARC-552] Backups containing an excessive number of items can cause failures of the protection agent.

• Common

  • [ABR-365565] The login and password for a network folder selected as the backup source, ere requested twice instead of once.
  • [ABR-366993] Partner tenants could experience incorrect navigation between the Cyber Protection console and the Management console.
  • [ABR-367923] You cannot save changes in backup plans from/to network shares if some of the credentials fields is empty.
  • [ABR-369296] The following error appears during the configuration of a recovery task: "Failed to execute the command" with error code"0x01350016+0x01350016+0x015B0038"".
  • [DF-3877] Cloud to Cloud catalog indexing fails with an internal error. The log file indicates an exception error : "elastic: Error 400 (Bad Request): closed [type=index_closed_exception]"

• Cyber Protection Agent

  • [ABR-361306] The installation of agent for Hyper-V fails with the error "Fatal error during installation" in the installer wizard. The MSI log contains the error "CustomAction CAMsiHyperVCheckOS returned actual error code 1603."
  • [ABR-366528] Replications fail with the error "Internal error: An expression test has failed".
  • [ABR-366764] The number of backups displayed on the Backup Storage tab of the Cyber Protection console changes seemingly randomly.
  • [ABR-367389] The Cyber Protection console is showing a VM as offline after it has been removed.
  • [ABR-368022] The Cyber Protect installer shows the warning "Incompatible operating system" when run on macOS 13.4 workloads.
  • [ABR-368315] Backup tasks stop at approximately 7% and fail with the error "The activity has failed due to a crash of Service Process."
  • [ABR-368489] Archives from share are not replicated to a cloud or local folder although the status of the activity is 'Succeeded.'
  • [DEVLOCK-5527] Sensitive messages sent by using the web version of Outlook (outlook.office.com) are not controlled by the default DLP policies.
  • [PLTFRM-51554] The registration of the Protection agent fails with unexpected response 404.
  • [PLTFRM-52494] The cloud console displays numerous alerts for macOS workloads: "Cyber Protect Service is not responding. Please restart the machine or contact your administrator."

• File Sync & Share

  • [ASRV-13974] The storage used by a user is preserved after deleting the user.

• Management Portal and Platform Core

  • [PLTFRM-52305] Retention policy settings are not preserved if the connection to the server drops during their configuration.
  • [PLTFRM-53220] Discrepancy between the cloud storage consumption indicated in the management console and the backup console (which is correct).
  • [PLTFRM-53278] Unable to change the billing mode from per GB to per workload. The error message "504 Gateway Time-out" appears in the log file.
  • [PLTFRM-53570] Users cannot login to the server due to incorrect redirection from *cloud.acronis.com* to their corresponding data center.
  • [PLTFRM-53707] Read-only admin users cannot log in to Cyber Files from the Cloud management portal.
  • [PLTFRM-53881] The update of the registration certificate on a cluster fails with error 500 from the registration server.

• Microsoft 365, Google Workspace, and other applications protection

  • [ABR-354087] The OneDrive service is not visible in the User Details tab.
  • [ABR-358866] Teams: Conversations: the sign "&" in the URL that is in conversation is displayed as "& amp;" when downloading or restoring a conversation.
  • [ABR-360130] Restoring of Exchange mailboxes fails with the error "The object was not found in the session".
  • [ABR-365707] If a backup wasn't performed on the planned day, it continues to show that day as the next backup date.
  • [ABR-366634] Cloud to cloud backups fail with the error "Task timeout expired. The agent that is responsible for processing the task is not accessible."
  • [ABR-367047] Backups of Google workspace users do not include shared folders owned by other users.
  • [ABR-367292] Microsoft 365 backups do not run automatically, or backups are in queue for too long.
  • [ABR-367375] Backups of large instances of OneDrive with high volume of changes might fail with the error "[Archive Server]: archive session not found."
  • [ABR-367429] Backups of Microsoft 365 Groups are failing with the following error message: "failed to post archives: json: cannot unmarshal object into Go struct field ResponseArchivesUpdated.errors of type error."
  • [ABR-367624] All backups within a customer are failing with the error "Unknown license error for protection."
  • [ABR-368181] All cloud-to-cloud backups within a partner tenant are failing with the error "Task timeout expired. The agent that is responsible for processing the task is not accessible."
  • [ABR-368209] The deletion of large backups does not complete successful due to an agent-worker timeout.
  • [ABR-368211] Cloud to Cloud backup plans for Microsoft 365 workloads start on schedule, but fail with an error that the quota limit is reached, though the quota is set to "Unlimited."
  • [ABR-368214] SharePoint backup plans start on schedule, but fail with an error that the quota limit is reached, though the quota is set to "Unlimited."

• Notary

  • [AN-3985] Some signers' annotations and signatures are missing in the final signed PDF after all signers have signed the document, for both normal eSign files and documents created from templates.

• PSA and RMM integrations

  • [CI-18254] If, in N-Central, you delete a customer that has already been mapped to a tenant in Cyber Protect Cloud, you will not be able to map any other customer in the integration.
  • [CI-22852] Enabling backup plans for new devices fails with "502 Bad Gateway."
  • [CI-23245] Excessive amount of activity notifications in email and the Activities tab of the Cyber Protection console.
  • [CI-23665] The quota for the configured services is set to 0 if the contract start date is 1st day of a month.

• Security

  • [AMP-17274] The Cyber Protect Monitor displays the antivirus and antimalware protection scan type as "Custom scan", regardless of the actual setting.
  • [AMP-17156] Performance degradation is observed when both Advanced Antimalware and Real Time Protection are enabled.
  • [AMP-17448] A malicious file was not moved to quarantine during the malware scan.
  • [AMP-9621] Quarantined files cannot be restored and the restore operation fails with "Cannot restore '<filename>'.

Known issues and limitations

This section describes issues that are currently known and provides solutions to avoid the issues where possible.

Acronis Cyber Protect Cloud

• Advanced Data Loss Prevention and Device control

  • [DEVLOCK-1033] Agent for DLP is causing system errors on some workloads after updating the agent for Hyper-V.
    • Solution: Before updating the agent, uninstall the Data Loss Prevention drivers along with the entire 'Agent for DLP' feature either manually using the installer UI or by using the command-line: <installer.exe> --remove-components=agentForDlp --quiet"
  • [DEVLOCK-1558] In rare cases, Acronis Cyber Protect Agent autoupdate setup hangs due deadlock in Agent for DLP.
    • Solution: Start the installation manually and clear the Agent for DLP check box before you run it."

• Advanced Disaster Recovery

  • [DRAAS-22649] Missing Settings section for DR policy in protection plans.
    • Solution: Reapply the protection plan: Navigate to “Plans” > ""Protection"", select the DR plan, click Edit and click Save without changing anything.
  • [DRAAS-25137] VPN Gateway deployment fails due to a duplicate entry in the database.
  • [DRAAS-25352] Runbook activity details show errors even though the activity succeeded.
  • [DRAAS-27233] The data for storage usage by recovery servers is not updated when storage quota is exceeded.
    • Solution: Extend the quota to 0 "unlimited" and wait for the usage values to be updated. Reduce the quota if needed.

• Backup and recovery

  • [ABR-276133] The recovery of Oracle database fails with error "Internal error: required number of indirects decreased during extents fragmentation" during the resize of a partition.
  • [ABR-282894] It is possible to update the Docker-based protection agent, but updates are not supported for this agent which causes protection plans to fail after the update.
  • [ABR-346068] The Plans tab shows incorrect status of protection plans, and contains outdated alerts.

• Common

  • [ABR-142330] Backup plan continues to run on the workload after registering it to a different user and the plan cannot be revoked.
    • Solution: Contact the support team to delete the plan.
  • [ABR-306783] Backup plans are completed with warning message "Windows error: (HEX_ADDRESS) A device attached to the system is not functioning." after updating the protection agent.
  • [ABR-363877] Multiple unnecessary alerts appear in the logs.
  • [ABR-369359] Protected workloads appear to be offline even though all Cyber Protection services are up and running normally.
  • [ADP-9810] Conflicting non-applicable modules are displayed simultaneously in protection plans and can be enabled.
  • [AMP-4580] The Cyber Protection agent is missing after updating Windows 10 workloads to Windows 10 20H2.
  • [ARC-162] Cloud to cloud backups might fail with error "Failed to execute flow: [C2CAgent-SPOReadArchiveError]: [Archive Server]: server instance mismatch".
  • [ARC-355] On some EU and US datacenters, cloud to cloud backups might fail with errors "Archive: Could not create XXX item: [Archive Server]: server instance mismatch."
  • [ARC-454] Backup tasks do not fail immediately if the storage certificate is expired which results in slowing down all other backups to cloud.
  • [DF-2687] The following unclear error message appears in the log of activities if throttling is enabled and throttling limits are exceeded: "An internal error. Please contact the support team. code: Failed indexing operation: Indexing operation failed: Failed to complete indexing transaction..."

• Cyber Protection Agent

  • [ABR-212696] Encrypted backup plan fails and the service_process crashes if the Workstation service is stopped.
  • [ABR-217108] If the system disk runs out of space while a backup operation is running, the status of that backup stays “In progress” permanently.
  • [ABR-306459] If Advanced DLP or Device Control is enabled, backups might finish with warning ""A device attached to the system is not functioning"" on specified machine.
    • Solution: See https://kb.acronis.com/content/72072.
  • [ABR-321212] Backups of entire machine fail with error “ASYNC: Full barrier action job.” if some of the protected disks always returns zero NTSignature.
  • [ABR-321592] The agent performs a full backup instead of an incremental one.
  • [ABR-351540] If a protected Linux workload is restarted through hard reboot during a backup operation, the backup status remains "In progress" 99% forever, even though the backup operation has failed.
  • [ABR-358987] The Activities tab does not indicate that a network-isolation-unit is offline.
  • [ABR-364447] Agent installation or uninstallation fails with an error related to driver packages: "UninstallDriverPackages failed with error 0x2" or "InstallDriverPackages failed with error 0x2.”
  • [ABR-367712] ABR-issue that is included in the release notes.
  • [ABR-368330] The update of Cyber Protection agent fails with the error "Folder C:\ProgramData\Acronis\ is created by non-administrator"
  • [ADP-10416] In environments with multiple agents, the updates of Cyber Protect Definitions fail after the agent that is used for data distribution has been re-registered.
    • Solution: Enable the data distribution option on all agents that are failing and after the successful updates, disable the option.

• Dashboards and reports

  • [ADP-11580] Monitoring: Scheduled reports are not being generated and sent as configured.
  • [ADP-13842] Monitoring: No data for Microsoft 365 backups in the Activities widget of the Operations tab.
  • [ADP-16475] Activities widgets and reports for a specific time range (daily, weekly, and so on) could contain information about events that occurred before the reported period.

• File Sync & Share

  • [AFDC-1909] Local changes are not synchronized in the cloud when an AD user is used and the AD user does not have access to the domain controller or didn't have such access during system startup.

• Linux protection

  • [ABR-364886] The recovery of files or folders from an XFS image fails with error "The file is corrupted."
    • Solution: Use the trueimagemnt utility to mount the backup archive and recover your files and folders from there.
  • [ABR-51351] The recovery of Oracle database fails with error "Internal error: required number of indirects decreased during extents fragmentation" during the resize of a partition.

• Microsoft 365, Google Workspace, and other applications protection

  • [ABR-349849] Partner Administrator users see the message "Expired link" when they click the link to download PST.
  • [ABR-365395] Some folders might not be visible when browsing a SharePoint backup archive to recover.

• Physical Data Shipping

  • [PDS-192] Company Administrator users cannot create PDS orders. The following error occurs: "The service is not available. Please close the tool and try again later."

• Virtualization protection

  • [ABR-320237] Debian 10 EFI VM with enabled Secure Boot is not bootable after recovery of backup captured from VMware ESXi to VM on Scale Computing HC3

    • Solution: disable Secure Boot in EFI boot manager configuration after recovery

  • [ABR-320149] Recovery of backup for machine which contains a mix of IDE and SCSI drives, to Scale Computing VM, produces a VM which misses 1 disk (non-system SCSI disk is not restored)

  • [ABR-242166] An application-aware backup of a Hyper-V virtual machine may fail when executing the WMI query, with the "WMI 'ExecQuery' failed executing query." or "Failed to create a new process via WMI" errors, when the backup is performed on a host under a high load, due to no response from WMI.

  • [ABR-235983] A protection plan using policy rules such as "/dev/sdaX" or "/sdaX" applied to a VMware or Hyper-V virtual machine fails with the "Nothing to back up. The operation has been terminated." error, when performed by Agent for VMware/Hyper-V.

  • [ABR-234935] There are duplicated activities in the Activities summary, after the backup of a virtual machine running on a Hyper-V cluster.

  • [ABR-234935] An incorrect number of Total runs/Number of successful runs for a Hyper-V cluster is shown on the Operations tab.

  • [ABR-234935] The number of email notifications is equal to the number of Hyper-V cluster nodes for one VM backup activity.

  • [ABR-192213] VMware virtual machines with an empty "vc.uuid" (InstanceUUID) vSphere property are not listed in the service console.

  • [ABR-189882] Backup of a Hyper-V virtual machine fails if it contains an ampersand symbol in the names of its virtual disks.

  • [ABR-173002] Run VM from a backup on a Hyper-V host fails, if the backup is located on the same volume as the path selected for the mounted VM disks.

    • Solution: Select a different volume for the mounted VM disk path. The space will be consumed only for changes generated inside the mounted VM and it will not occupy the entire size of the virtual disk.

  • [ABR-137564] Cross-platform recoveries (when the backup was created not by Agent for Hyper-V) into a new Hyper-V virtual machine by Agent for Hyper-V always produces the Gen 1 version of virtual machine.

  • [ABR-115430] A "backup is missing for X days" alert is activated even if the backup plan is not scheduled, but has this alert option enabled in its settings.

  • [ABR-104081] A VM replication plan may fail due to network disconnects between source and target ESXi hosts even if the "Error handling" option is enabled.

  • [ABR-85645] Backup of a virtual machine with Active Directory may complete with warning "MFT bitmap is corrupted."

  • [ABR-183082] Recovery of a Linux machine having some volumes with the XFS file system completes with the "Failed to process the boot loader configuration." warning. The machine is bootable despite the warning.

Management Portal and Platform Core

• [ABR-203243] Logout is done correctly while a user is logged in via a branded URL; however, logout is not done for a non-branded URL.
• [ABR-173628] Active Directory Connector - mapping is not saved when one or more Distinguished Names (DNs) are invalid.
• [ABR-131711] Lack of salutation text in the "Quota exceeded" email notification.
• [PLTFRM-2340] The "Tenant was moved" audit event description shows tenant IDs instead of names.
• [PLTFRM-18229] Improve the error message for the RPC GetRedirect method, in case a customer has no storage.