Safe Exam Browser 2.4.1

SEB 2.4.1 for Windows is a maintenance release, which can be used if the refactored, more modern version SEB 3.0.1 misses a feature you need. SEB 2.4.1 fixes an issue which was reported to happen when using the SEB-Moodle Deeper Integration (available by default in Moodle 3.9 and as plugin for Moodle 3.7 and 3.8).

Please note our new update policy: We will only support the latest SEB version and will remove all older SEB versions after a grace period. Only with updated SEB versions you can achieve the best possible security and stability of e-assessments.

Before asking any support question or reporting a bug, install the latest SEB version and try to reproduce the issue with the most recent version. We won't answer questions when the SEB version isn't mentioned or when you don't mention if you tried it with the current version.

Please keep your exam environment up to date, there is no alternative to regular updates.

New in SEB 2.4.1:

• Fixed issue when the old browser window stayed open while reconfiguring with seb(s) link, together with the Firefox file open dialog. Should fix issues when using SEB-Moodle Deeper Integration.
• Implemented fix for VMware Windows Registry error issue: The Registry value for "Enable VMware Client Shade" will now only be set if the active configuration explicitly says so (see new setting in SEB Config Tool / Registry / "Set VMware configuration". Don't enable this setting if you are not running SEB in a VMware Horizon View virtual desktop.
• Added Zoom to list of prohibited applications. If you want to use Zoom together with SEB, you have to set its "Active" property to false (Applications / Prohibited Processes).
• Added expansion of environment variables in path of permitted processes. This allows to configure applications to run as permitted process, which need to be installed in subdirectories of the user directory, for example %AppData%.

Safe Exam Browser 2.4

SEB 2.4 for Windows is the last feature update before we switch completely to SEB 3.x. It supports the Config Key and session cookie settings, compatible with the SEB-Moodle Deeper Integration, coming in Moodle 3.9!.

Please note our new update policy: We will only support the latest SEB version and will remove all older SEB versions after a grace period. Only with updated SEB versions you can achieve the best possible security and stability of e-assessments.

Before asking any support question or reporting a bug, install the latest SEB version and try to reproduce the issue with the most recent version. We won't answer questions when the SEB version isn't mentioned or when you don't mention if you tried it with the current version.

Please keep your exam environment up to date, there is no alternative to regular updates.

New in SEB 2.4:

• Config Key feature, hash checksum value to verify settings used by SEB. The Config Key can be generated automatically by a compatible exam system together with the SEB config to be used for an exam. All SEB versions supporting the Config Key generate the same key, as long as the same SEB config file is used.
• Implemented setting keys to control clearing cookies when starting/ending a session (examSessionClearCookiesOnStart / examSessionClearCookiesOnEnd). This can be used to keep users logged in (SEB started with client settings) after an exam session was started.
• Now TLS 1.2 is supported for downloading .seb files using sebs:// links.
• Added more default prohibited processes. As a reminder: You cannot remove these default prohibited processes (SEB Config Tool / Applications / Prohibited Processes), you can just deactivate them by unchecking the "Active" property.
• Private clipboard should now also work correctly with rich-text editors like TinyMCE (fixed double pasting of text).
• Fixed two minor issues regarding port and path filtering in URL filter.
• Fixed: SEB Client crashes when loading client settings which don't contain all key/values.
• Fixed wrong error message in case service fails to set registry values.
• Fixed an index out of range exception when starting additional resource with application.
• Renamed setting Security / "Enable screen capture / PrintScreen" to "Allow screen capture / PrintScreen".

Safe Exam Browser 2.3

SEB 2.3 for Windows offers new features, which increase security and usability significantly.

Please note our new update policy: We will only support the latest SEB version and will remove all older SEB versions after a grace period. Only with updated SEB versions you can achieve the best possible security and stability of e-assessments.

Before asking any support question or reporting a bug, install the latest SEB version and try to reproduce the issue with the most recent version.

Please keep your exam environment up to date, there is no alternative to regular updates.

New in SEB 2.3:

• Implemented private clipboard (optional, see Security tab). When enabled, cut/copy/paste works only with content inside the SEB browser, the private clipboard doesn't accept content from other applications or tools.
• Added zooming of browser windows using the Ctrl +/- shortcuts.
• Now the option "Allow downloading and uploading files" is supported in SEB for Windows, at least downloads can be enabled/disabled with this option (Down-/Uploads tab).
• The dialog "Open File With... Safe Exam Browser" is no longer displayed unless the option "Open files after downloading" is enabled (Down-/Uploads tab).
• Enabled SpeechSynthesis API
• Fixed issue when opening a PDF with a link to be opened in a new browser window (target = _blank or JavaScript open), a second, empty browser window was opened.
• Deactivated printing in the built-in PDF.js viewer, as that opened a security hole.
• Now it's possible to open an embedded PDF file (embedded Additional Resource) when starting a SEB session, instead of a Start URL.
• mailto: links are now being ignored.
• Fixed bug with last allowed application not starting and all started applications not closing when using SEB without browser.
• SEB now can connect to some servers which are using Basic Authentication.
• Fixed issue with quitting SEB when Firefox was running.
• More eligible SSL/TLS certificates are displayed in the list "Choose TLS/SSL certificate to embed into configuration..." and the one for CA certificates in SEB Config Tool / Network / Certificates.

Safe Exam Browser 2.2.3

Safe Exam Browser 2.2.3 for Windows is an important security update for SEB 2.2.x and 2.1.x

PLEASE UPDATE TO THIS VERSION AS SOON AS POSSIBLE!
WE WILL REMOVE ALL OLDER SEB VERSIONS SOON.

Our new policy is: We will only support the latest SEB version and will remove all older SEB versions after a grace period. Please adjust your procedures accordingly. Only with updated SEB versions you can achieve the best possible security and stability of e-assessments. Therefore you have to keep your exam environment up to date, there is no alternative to regular updates.

New in SEB 2.2.3:

• Fixed an issue in calculating the Browser Exam Key (BEK): Now sorting browser files for hashing with culture invariant string comparer to avoid problem with Swedish (order of letters "w" and "v" reversed) and probably Turkish locale settings. Because of the wrong alphabetic sorting, a different BEK was calculated on Windows set to such languages (locales) since SEB 2.2 and the check for detecting additional (irregular) files in SEB's program directory displayed a warning in SEB 2.2.2.
• Added settings option to switch off detector for RDP/remote session (key allowScreenSharing)
• Security improvements important mainly when running SEB on managed computers.
• The dialog "Open File With... Safe Exam Browser" is no longer displayed when downloading and opening .seb files.
• Fixed download dialog so now it is not possible to close it if reconfiguration is in progress (password dialog is shown or reconfiguration error dialog is shown i.e. password was entered incorrectly too many times or decryption failed).
• Added settings key "backgroundOpenSEBConfig" (for server generated settings, no UI available in Config Tool) to disable download dialog for seb(s) links completely. This option allows reconfiguration of Safe Exam Browser without an authentication window if exam setup does not need additional authentication given the download link is accessible anonymously.
• Added settings options for Use private clipboard and all settings from macOS 2.1.3 version to Config Tool / Security pane.

SEB for Windows 2.2.3 App Preview Version

This is a pre-release (alpha) build of an app version of SEB for Windows. It is created using the MSIX Packaging Toolkit: https://www.microsoft.com/en-us/p/msix-packaging-tool/9n5lw3jbcxkf?activetab=pivot:overviewtab.

Apps packaged with this tool work only on Windows 10 version 1809 or later.

You can support us by testing the pre-release version and give feedback in our forum or by creating an issue here on our GitHub page.

Known issues in this version:

• It's possible to use fast user switching in the Ctrl+Alt+Del Windows Security Screen and continue the exam when returning to the user account SEB is running in. The final version should display a lock screen in this case requiring the exam support/invigilators to enter the SEB quit/unlock password to unlock SEB again.
• Currently, you need to make sure in SEB Security settings the kiosk mode is set to the default "Create new desktop" mode and that the SEB Service policy is set to "allow to use SEB without service".
• The "Touch optimized" mode of SEB currently cannot be used in this version of SEB.

Safe Exam Browser 2.2.2

FOR SECURITY REASONS THIS VERSION IS NO LONGER AVAILABLE FOR DOWNLOAD

Safe Exam Browser 2.2.2 for Windows is a maintenance update for SEB 2.2 with two bug fixes for SEB 2.2.1, some new features and many improvements.

• Fixed an issue in calculating the Browser Exam Key (BEK) in the SEB Config Tool, which happens when the config file contains explicit or implicit seb2 filter rules (key whitelistURLFilter and/or urlFilterTrustedContent, not visible in Config Tool). As this filter rules could slightly differ (Windows/macOS escape characters) or the key urlFilterTrustedContent can be undefined (because it doesn't have a function if URL filtering isn't enabled) and they were not updated in any case before calculating the BEK, it could differ in the SEB Config Tool vs. SEB Client.

• Added a check for detecting additional files in SEB's program directory (which might have been left there when updating from an older SEB version) and displaying a warning in that case. Such left over files cause a wrong Browser Exam Key as well.

• Fixed an issue when en-US was always selected as spell checking language, even if not allowed in settings, when starting SEB first time or after the contents of the Firefox Profiles folder were removed.

• Added tool tips to Additional Resources tab in SEB Config Tool.

Safe Exam Browser 2.2.1

FOR SECURITY REASONS THIS VERSION IS NO LONGER AVAILABLE FOR DOWNLOAD

Safe Exam Browser 2.2.1 for Windows is a maintenance update for SEB 2.2 with some new features and many improvements. This version is replacing the SEB 2.1.x branch, with which it is compatible with one important exception: If you defined URL filter rules in SEB 2.1.x for Windows, then you'll have to re-enter those in the 2.2 SEB Config Tool, following the new filter rule scheme. URL filter rules created and saved with SEB for macOS are already compatible with SEB 2.2.1 for Windows.

• Added configurable spell checking, dictionaries can be embedded into SEB config files.

• Added context menu for displaying word suggestions and selecting spell checking dictionary. Note: You might have to enable the right mouse button in your settings ("Hooked Keys" config tool tab).

• Resolved issue with sometimes missing power options after SEB was quit.

• Added options for additional resources: Show button (to display the icon or menu entry for a resource)

• Referrer filter for activation Link URL

• Option "Show confirm box" with custom text which is displayed before loading a resource

• Reset browser session (session cookies are deleted before loading a new resource)

• Fixed that the URL filter didn't treat query strings in URLs consistently in SEB for Windows 2.2/macOS.
  Added option to explicitly forbid any query part in checked URL: Indicate "?." as query in your filter expression.

• Fixed Browser Exam Key (BEK) check wasn't working correctly with some exam systems (because a trailing slash "/" was removed from the URL used to hash the BEK)

• Fixed that SEB couldn't quit Firefox when starting.

• Prevent that SEB browser can be used to finish an exam if SafeExamBrowser.exe is terminated: The browser displays a red lock screen in this case, requiring to enter the quit/unlock password.

• Improved setting and resetting of Registry keys (Ctrl+Alt+Del Security Screen and power options), including when the SEB Windows Service tries to reset Registry settings after rebooting the machine. Added group policy update to registry resetter to reset power options reliably.

• Replaced embedded Firefox with latest version 52.9.0 ESR.

• Changed default setting for all function keys to "enabled".

Safe Exam Browser 2.2

FOR SECURITY REASONS THIS VERSION IS NO LONGER AVAILABLE FOR DOWNLOAD

SEB 2.2 for Windows is a major update with new features and many improvements. This version is replacing the SEB 2.1.x branch, with which it is compatible with one important exception: If you defined URL filter rules in SEB 2.1.x for Windows, then you'll have to re-enter those in the 2.2 SEB Config Tool, following the new filter rule scheme. URL filter rules created and saved with SEB for macOS are already compatible with SEB 2.2 for Windows.

• Using the powerful new feature "Additional Resources", webpages, websites and documents can be accessed securely and easily in exams.
• Additional Resources can be opened using icons in the SEB task bar (similar to permitted applications) or with hierarchical popup menus.
• External Additional Resources use the improved URL filter to only allow displaying specific webpages, documents or sections of websites.
• Additional Resources can be embedded into SEB configuration files. An exam administrator can add documents like PDF files and HTML documents.
• Even full HTML5 web apps can be added as embedded Additional Resources, which allows to use web content in a fully offline exam scenario.
• You could deploy SEB Config Files containing a self-contained HTML5/JavaScript exam player onto mobile devices and then perform an offline e-assessment. The commercial exam solution Inspera Assessment is already supporting this.
• New improved URL filter which allows to use simple filter rules to effectively allow specific web pages/sites/content and block all others.
• Improved, refactored browser engine based on Firefox 52 ESR. This is the last Firefox version compatible with the XUL browser engine application used in SEB. We are already working on the next generation of SEB for Windows, which will be using a Chromium based browser engine (this SEB 3.0 branch won't replace the current Firefox-based SEB before 2019).
• Improved blocking of third party applications and tools for screen sharing and screen recording.
• Now blocking remote desktop connections.
• Improved stability when setting and resetting Windows Registry settings to disable options like Task Manager, Switch User, Sign out and Shut down (reachable with Ctrl+Alt+Del shortcut) during the exam and re-enabling them when quitting SEB.
• Integrated secure viewer for PDF files.
• Added Audio Control Component to SEB task bar, which allows to increase/decrease and mute system audio volume. Audio can be muted or the audio level preset when starting SEB.
• SEB config files can now be loaded from servers using authentication (Basic, OAuth etc.) using seb(s):// links. Even indirect links (not containing the config file name with the .seb extension, like for example sebs://example.com/download.php?id=2352) are possible. Therefore a SEB exam config file can be stored for example into the same Moodle course as the quiz. The login session is remembered, therefore students don't have to login twice in SEB if you start SEB/an exam using a seb(s):// link to a config file on an authenticated server. Note: Starting SEB by opening a seb(s):// linked config file from an authenticated server isn't supported in SEB for Windows 2.2, such indirect seb(s) links can only be opened from inside SEB (for example from an exam portal/landing page).
• Added a page loading (network activity) indicator.
• Added a browser window toolbar, similar to SEB for macOS, with reload and back/forward buttons.
• Navigation in browser history (back/forward) can now be allowed/disabled separately for the exam and additional browser windows.
• The browser User Agent string now reflects the operating system SEB is running on and allows a custom suffix string to be added.
• Added new asymmetric/symmetric encryption for config files using identity certificate for better performance when decrypting certificate encrypted config files.
• Fixed on-screen keyboard wasn't displayed in latest versions of Windows 10. Now "Tablet Mode" needs to be activated in the system when using SEB in its "Touch optimized" mode.

Safe Exam Browser 2.1.8

PLEASE UPDATE TO THE LATEST SEB VERSION AS SOON AS POSSIBLE!
THIS VERSION WILL SOON NO LONGER BE AVAILABLE FOR DOWNLOAD

SEB 2.1.8 for Windows is an important update which increases security and stability. This SEB version re-introduces the "create new desktop" kiosk mode, which reliably blocks notifications from various applications like some web browsers (applications which don't use standard Windows notifications which were always blocked in SEB). This is possible because the mouse pointer offset problem which occurred with SEB 2.1.5, "create new desktop" and a recent Windows Creators Update was successfully solved now.

We recommend an immediate update if you're using SEB 2.1.6/2.1.7. If you manually changed your settings to use the "Disable Explorer Shell" kiosk mode with these two SEB versions, then you can change it back to "Create new Desktop" again. You can also remove the default prohibited browser processes from your settings which were added by SEB 2.1.7. If you open a config file containing such default prohibited processes in SEB Config Tool or switch back to "Create new desktop", a dialog is displayed asking if you want to remove those processes.

In addition, SEB 2.1.8 blocks new default prohibited processes like some screen sharing and communication tools, fixes the severe "Sticky Keys" security issue and a rare bug which made it possible to switch applications using the shortcut Win + Tab on some devices. All changes:

• Re-integrated the "Create New Desktop" kiosk mode and declared dpi-awareness to resolve mouse pointer offset.
• Adding strictly prohibited default processes (screen sharing and communication tools) unconditionally to settings, default prohibited (browser) processes only in Disable Explorer Shell kiosk mode.
• Now removing prohibited default browser processes in SEB Config Tool if user confirms this from settings when loading config file which has Create new desktop kiosk mode set or when switching to Create new desktop (in Security tab).
• Process monitoring is now always active if either of the two kiosk modes is set.
• Fixed a security issue, now checking if SEB windows use original filename as well.
• Fixed dialog for entering settings password (if displayed when starting SEB) had a wrong scale if the system DPI ratio was different than 100%.
• Added monitoring of Windows File Explorer to prevent rare cases when explorer.exe was restarted and the shortcuts Win+Tab and Win+D were working.
• Fixed that the wrong permitted process was automatically started (with autostart property set) when the SEB browser is deactivated.
• Fixed quitting SEB didn't quit some permitted processes like Acrobat Reader.

Safe Exam Browser 2.1.7

FOR SECURITY REASONS THIS VERSION IS NO LONGER AVAILABLE FOR DOWNLOAD

PLEASE NOTE: Initially on this page the testing version of SEB 2.2 was placed for download and not SEB 2.1.7. Please uninstall SEB 2.2 and use the final release SEB 2.1.7 which can be downloaded below now.

SEB 2.1.7 for Windows is an important security update. This SEB version fixes a problem with Chrome and some other web browsers which could display notifications while SEB was running. This security issue was induced by SEB 2.1.6 for many SEB users. We recommend an immediate update if you're using SEB 2.1.6 or you configured SEB to use the "Disable Explorer Shell" kiosk mode. In addition, SEB 2.1.7 improves handling permitted and prohibited processes in general and blocks prohibited processes more securely.

• Now adding list of prohibited (browser) processes automatically to all config files which SEB Client or SEB Config Tool opens, unless a prohibited process with the same name already exists. If you need to allow one of these processes, then just deselect the "Active" flag of that process in the list of prohibited processes.
• Automatically disabling Chrome notifications using a Registry setting.
• Added new settings sub-key originalName to permitted and prohibited processes.
• Improved detecting permitted and prohibited processes, file name extensions are now stripped from executable and original filenames before comparing to running processes.
• Fixed error when displaying which running processes must be terminated before starting exam.
• Added verification of original filename when allowing user to choose path to third-party application.
• Fixed bug caused by case-sensitive string comparison when allowing user to choose path to allowed application.
• Fixed bug for terminating permitted applications when quitting SEB.
• Fixed autostart error when using SEB 2.2 generated settings with SEB 2.1.7. If permitted process firefox.exe for SEB browser was contained in settings (because those were created in SEB 2.2), the permitted process following SEB/firefox.exe in the list of permitted processes was auto-started, even if that flag wasn’t set.