Edit

Azure Information Protection unified labeling client - Release management and supportability

  • Article

Note

Are you looking for Microsoft Purview Information Protection, formerly Microsoft Information Protection (MIP)?

The Azure Information Protection add-in for Office is now in maintenance mode and will be retired April 2024. Instead, we recommend you use labels that are built in to your Office 365 apps and services. Learn more about the support status of other Azure Information Protection components.

This article describes the functionality added to each recent version of the unified labeling client, as well as servicing information and support timelines for each AIP unified client version.

You can download the Azure Information Protection unified labeling client from the Microsoft Download Center.

If you're looking for updates for the built-in labeling solution for Microsoft Office applications, see:

Servicing information and timelines

The Azure Information Protection unified labeling client has multiple components bundled up into a single downloadable package. The Azure Information Protection add-in [part of the unified labeling client] is the only component in maintenance mode as of Jan 1, 2022, driven by the modernization effort to make sensitivity labeling and protection built-in to Office applications. All other components within the unified labeling client aren't in maintenance mode and are fully supported. For more information, see our TechCommunity blog.

The lifecycle of each generally available (GA) version of the Azure Information Protection unified labeling client could vary from build to build, depending on the release date of a subsequent GA version.

Client version Date released Supported through
2.16.73.0 05/23/2023 04/11/2024
2.15.33.0 02/17/2023 02/17/2024
2.14.90.0 09/01/2022 09/01/2023
2.13.49.0 01/12/2022 Deprecated
2.12.62.0 08/02/2021 Deprecated
2.11.58.0 04/29/2021 Deprecated
2.9.116.0 02/08/2021 Deprecated
2.9.111.0 01/13/2021 Deprecated
2.8.85.0 09/22/2020 Deprecated
2.7.101.0 08/23/2020 Deprecated
2.7.99.0 07/20/2020 Deprecated
2.7.96.0 06/29/2020 Deprecated
2.6.111.0 03/09/2020 Deprecated
2.5.33.0 10/23/2019 Deprecated
2.2.21.0 09/03/2019 Deprecated
2.2.19.0 08/06/2019 Deprecated
2.2.14.0 07/15/2019 Deprecated
2.0.779.0 05/01/2019 Deprecated
2.0.778.0 04/16/2019 Deprecated

The date format used on this page is month/day/year.

The documentation is updated accordingly to a client release cycle and is applicable only to the latest supported GA versions of the client. Fixes and new functionality are always applied to the latest GA version and won't be applied to older GA versions.

Microsoft Update Catalog availability

After a short delay of typically four weeks, the latest general availability version is also included in the Microsoft Update Catalog. Azure Information Protection versions have a product name of Microsoft Azure Information Protection > Microsoft Azure Information Protection Unified Labeling Client, and a classification of Updates.

Including Azure Information Protection in the catalog means that you can upgrade the client using WSUS or Configuration Manager, or other software deployment mechanisms that use Microsoft Update.

For more information, see Upgrading and maintaining the Azure Information Protection unified labeling client.

Release information

Use the following information to see the contents of each supported release of the Azure Information Protection unified labeling client for Windows. The most current release is listed first. The date format used on this page is month/day/year.

Noted Azure Information Protection features are currently in PREVIEW. The Azure Preview Supplemental Terms include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.

Tip

Minor fixes aren't always listed so if you experience a problem with the unified labeling client, we recommend that you check whether it is fixed with the latest GA release. If the problem remains, check the current preview version (if available).

For technical support, see the Support options and community resources information. We also invite you to engage with the Azure Information Protection team, on their Yammer site.

Version 2.16.73.0

Unified labeling scanner and client version 2.16.73.0

Supported through 04/11/2024

Released 05/23/2023

This version includes the following fixes for the unified labeling scanner and client:

Service block for new deployments of AIP add-in

Organizations who have non-zero usage of AIP in the last 90 days before 05/23/2023 can use 2.16.73.0 with no impact.

Organizations who have zero usage of AIP in the last 90 days before 05/23/2023 will be impacted if you use the AIP add-in. Organizations who start to use the AIP add-in for the first time after 5/30/2023 can not download labels and will find the AIP add-in non-functional. The other components in the unified labeling package - the Scanner, the right-click Classify and Protect, PowerShell, and Viewer - will continue to work with no impact. Organizations with a legitimate business need to continue using the AIP add-in after 05/30/2024 can apply for an extension through support.

For more information about AIP add-in retirement, see our TechCommunity blog and for detailed migration steps, our migration playbook.

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

  • Fixed a bug where change counter was incremented but no audit event was sent. Change counter no longer incremented for those events.
  • Fixed a bug where display name was not passed MIP after MSAL changes.
  • Fixed an issue where EUII appeared in UserKey field of audit record.
  • Updated to MIP SDK 1.13.161, adding support for consumption of Office documents and emails protected with AES256-CBC.

Version 2.15.33.0

Unified labeling scanner and client version 2.15.33.0

Supported through 02/17/2024

Released 02/17/2023

This version includes the following fixes for the unified labeling scanner and client:

EU Data Boundary Support

Starting in 2.15.33.0, EU customers can send data from the AIP UL Client to the EU for storage and processing. To enable the EU data boundary setting, configure this registry key.

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

Version 2.14.90.0

Unified labeling scanner and client version 2.14.90.0

Supported through 09/01/2023

Released 09/01/2022

This version includes the following fixes for the unified labeling scanner and client:

Updating Authentication Library to MSAL

Starting in 2.14.90.0, MSAL is the default authentication library for AIP UL client and AIP Scanner, replacing ADAL from the previous versions.

For the AIP add-in, users should see no impact as we'll use token cache or the integrated Windows authentication (SSO) before prompting the use to log in again.

For the AIP PowerShell and AIP Scanner, reauthentication is required. To reauthenticate, use the PowerShell cmdlet Set-AIPAuthentication after upgrading to this version.

Fixes

This version of the unified labeling client and scanner provides the following fixes:

  • Fixed an issue where msg.pfile wasn't opening in AIP Viewer.
  • Fixed an issue with the performance of GetLabel/SetLabel.
  • Fixed issues with handling of IQP protected files.
  • Fixed an issue with Set-AIPFileLabel crashes.
  • Fixed an issue with audit logging in AIP Viewer for protected PDFs.
  • Fixed an issue with co-authoring where users couldn't apply labels for certain cultures with special characters (i.e. "tr-TR").
  • Fixed an issue with super user protection for Set-AIPFileLabel -RemoveProtection if label wasn't published by super user.

Version 2.13.49.0

Unified labeling scanner and client version 2.13.49.0

Supported through 03/01/2023

Released 01/12/2022

This version includes the following new updates, fixes, and enhancements for the unified labeling scanner and client:

Increased accuracy for sensitive information types

This version of the unified labeling client provides globalization enhancements, including increased accuracy for East Asian languages and support for double-byte characters. These enhancements are provided only for 64-bit processes, and are turned off by default.

For more information, see Turn on classification globalization features and Learn about sensitive information types.

Updated audit logs for the AIP Viewer app

The Azure Information Protection Viewer app now generates Access audit logs each time a labeled or protected file is opened within the organization.

The Viewer app no longer generates Discover audit logs.

For more information, see:

Scanner support for 64-bit versions only

Starting in version 2.13.47.0, the unified labeling scanner is supported only on 64-bit systems.

For more information, see Requirements for installing and deploying the Azure Information Protection unified labeling scanner.

Integrated support for MIP SDK version 1.10

This version of the Azure Information Protection client and scanner fully integrates the Microsoft Purview Information Protection Software Development Kit (SDK) version 1.10.93.

For more information, see the MIP SDK documentation.

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

  • Enhanced support for the PFileSupportedExtensions advanced setting, to add the ability to protect only Office file types and PDF files, without configuring one specific value.
  • Fixed an issue where a watermark may not be reflected correctly when a label is changed.
  • Fixed an issue where Office apps may behave unexpectedly if the color value for a label has an invalid value.
  • Fixed an issue where selecting permissions via the File Explorer Classify and protect option may remove email addresses from the defined permissions if multiple email addresses include an apostrophe (').
  • Fixed an issue where the auto-labeling custom text tooltip configured may not display as expected in case of an AsyncPolicy applied.
  • Fixed an issue when pop-ups in Outlook may behave unexpectedly when attaching an email to another, newly encrypted email.
  • Fixed an issue where an AIP-related error appeared after a child label is added and scoped to Groups & Sites.
  • Fixed an issue where the Delete Label icon may not appear in the Outlook classification bar when mandatory labeling is enabled across Office, but not in Outlook.
  • Fixed an issue where Excel may not close completely when both the AIP add-in and other add-ins are running.
  • Fixed an issue where Outlook may fail to send a message with embedded images in rich-text with rules for pop-ups in Outlook configured.
  • Fixed an issue where the AIP add-in may fail to load in Office apps with language related errors.
  • Fixed an issue to prevent errors from occurring when removing protection from a PST file with special characters.
  • Fixed an issue where extra draft emails were kept while working with Outlook in Online mode.
  • Fixed an issue where popup messages were displayed, prompting users to save changes even when no changes were made, when working with Outlook in Online mode.
  • Fixed an issue where emails to external guest users couldn't be sent if collaboration rules for popup messages were configured.

Version 2.12.62.0

Unified labeling scanner and client version 2.12.62.0

Supported through 09/30/2022

Released 08/02/2021

This version includes the following new features, fixes, and enhancements for the unified labeling scanner and client:

Built-in co-authoring support

Microsoft 365's co-authoring features are now supported directly in the main Azure Information Protection unified labeling client installation, for enabled tenants.

Co-authoring for Office apps enables multiple users to edit documents that are labeled and encrypted by sensitivity labels.

Note

Before you start, we recommend that you review all related prerequisites and limitations. For more information, see:

Support for DKE labels with user-defined permissions

This version of the unified labeling client and scanner supports DKE labels with user-defined permissions in Word, Excel, and PowerPoint.

For more information, see Azure Information Protection tenant keys and Microsoft Purview Double Key Encryption.

Client usage logging in the Windows event log

The unified labeling client now logs user activity to the local Windows event log.

AIP scanner: General availability support for DLP policies

Microsoft 365 Data Loss Prevention (DLP) policies are now supported with the Azure Information Protection unified labeling scanner directly in the main installation instead of a dedicated version only.

  • Using a DLP policy enables the scanner to detect potential data leaks by matching DLP rules to files stored in file shares and SharePoint Server.

  • Enable DLP rules in your content scan job to reduce the exposure of any files that match your DLP policies.

    The scanner may reduce file access to data owners only, or reduce exposure to network-wide groups, such as Everyone, Authenticated Users, or Domain Users.

  • Scanning your files with DLP rules enabled also creates file permission reports. Query these reports to investigate specific file exposures or explore the exposure of a specific user to scanned files.

Settings for enforcing or testing the DLP policy are configured in the Microsoft Purview compliance portal.

For more information, including licensing requirements, see:

Fixes and improvements - version 2.12.62.0

Version 2.11.58.0

Unified labeling scanner and client version 2.11.58.0

Supported through 02/08/2022

Released 04/29/2021

Note

Version 2.11.58.0 is identical to version 2.11.57.0. Due to an issue in our software packaging system, we needed to repackage this version and provide an updated version number. Users who've installed version 2.11.57.0 can be assured that have a fully supported and functional version.

This version includes the following new features, fixes, and enhancements for the unified labeling scanner and client:

Scanner usage logging in the Windows event log

The unified labeling scanner now logs user activity to the local Windows event log.

For more information, see Usage logging for the Azure Information Protection scanner.

Scanner diagnostics tool improvements

With the upgrade to version 2.11.58.0, running the Start-AIPScannerDiagnostics cmdlet with the Verbose parameter prints the last 10 errors from the scanner log.

To print more or fewer errors, use the new VerboseErrorCount parameter to define the number of errors you want to print.

For more information, see Troubleshooting using the scanner diagnostic tool.

Improved scanner details output

The unified labeling on-premises scanner has improved outputs for the following cmdlets:

Cmdlet Improvement
Get-AIPScannerStatus Previously, running the Get-AIPScannerStatus command provided only high-level details of the scanner cluster status, without details per node in your cluster.

Now, you can use the NodesInfo variable and the Verbose parameter to drill down into additional levels of detail for each node.

For more information, see the Verify scanning details per scanner node and repository.
Get-AIPScannerConfiguration Running the Get-AIPScannerConfiguration now provides details about the current scanner configuration in addition to the online configuration settings.

Updates for the scanner's supported information types

Beginning with version 2.11.58.0, the following sensitive information types aren't scanned by the unified labeling scanner.

If you have sensitivity labels that use these sensitive information types, we recommend that you remove them.

  • EU Phone Number
  • EU GPS Coordinates

Fixes and improvements (2.11.58.0)

The following fixes were delivered in version 2.11.58.0 of the Azure Information Protection unified labeling client and scanner:

Version 2.9.116.0

Unified labeling scanner and client version 2.9.116.0

Released 02/08/2021

Supported through 10/29/2021

Fixed issues

Users are now able to view protected files as expected in the following scenarios:

  • When protected files are shared with users who don’t have an AIP policy configured, such as external users. This issue had occurred only with the AIP Viewer app.

  • When content with a scoped label is shared with users or groups not included in the label's scope. This issue had occurred both with the AIP Viewer app and when viewing or classifying the shared content via the File Explorer.

For more information, see the AIP unified labeling client user guide.

Next steps

For more information, see:

For information about new features in the Microsoft Purview compliance portal, see: