teleport-12.1.5-1.arm64.rpm

teleport-12.1.5-1.arm.rpm

teleport-12.1.5-1.i386.rpm

teleport-12.1.5-1.x86_64.rpm

teleport_12.1.5_amd64.deb

teleport_12.1.5_arm64.deb

teleport_12.1.5_arm.deb

teleport_12.1.5_i386.deb

teleport-12.1.5.pkg

teleport-connect_12.1.5_amd64.deb

Teleport Connect-12.1.5.dmg

teleport-connect-12.1.5-x64.tar.gz

teleport-connect-12.1.5.x86_64.rpm

Teleport Connect Setup-12.1.5.exe

teleport-v12.1.5-darwin-amd64-bin.tar.gz

teleport-v12.1.5-darwin-amd64-bin-unsigned.tar.gz

teleport-v12.1.5-linux-386-bin.tar.gz

teleport-v12.1.5-linux-amd64-bin.tar.gz

teleport-v12.1.5-linux-amd64-centos7-bin.tar.gz

teleport-v12.1.5-linux-arm64-bin.tar.gz

teleport-v12.1.5-linux-arm-bin.tar.gz

teleport-v12.1.5-windows-amd64-bin.zip

tsh-12.1.5.pkg


This release of Teleport contains multiple improvements and bug fixes.

* Fixed issue with Access Management's connection tester not working with per-session MFA. [#22918](https://github.com/gravitational/teleport/pull/22918), [#22943](https://github.com/gravitational/teleport/pull/22943)
* Fixed Kubernetes access panic when using moderated sessions. [#22930](https://github.com/gravitational/teleport/pull/22930)
* Fixed `tsh db config` reporting incorrect port in TLS routing mode. [#22889](https://github.com/gravitational/teleport/pull/22889)
* Fixed issue with Teleport always performing OS group check even without auto user provisioning enabled. [#22805](https://github.com/gravitational/teleport/pull/22805)
* Fixed issue with desktop access crashing on systems that consume many file descriptors. [#22798](https://github.com/gravitational/teleport/pull/22798)
* Fixed issue with `teleport start --bootstrap` command failing on unexpected resource. [#22721](https://github.com/gravitational/teleport/pull/22721)
* Fixed issue with install script not refreshing repository metadata before installing new version. [#22585](https://github.com/gravitational/teleport/pull/22585)
* Added ability to export database CA in DER format via `tctl auth export`. [#22896](https://github.com/gravitational/teleport/pull/22896)
* Reduced log spam from proxy multiplexer. [#22802](https://github.com/gravitational/teleport/pull/22802)
* Updated EC2 auto-discovery install script to use enterprise binaries for enterprise clusters. [#22769](https://github.com/gravitational/teleport/pull/22769)
* Upgraded Go to `v1.19.7`. [#22725](https://github.com/gravitational/teleport/pull/22725)
* Improved idle connections handling. [#22908](https://github.com/gravitational/teleport/pull/22908), [#22893](https://github.com/gravitational/teleport/pull/22893)
* Improved Kubernetes service labels validation upon startup. [#22777](https://github.com/gravitational/teleport/pull/22777)
* Improved `tsh login` error reporting when proxy is not available. [#22763](https://github.com/gravitational/teleport/pull/22763)



teleport-12.1.1-1.arm64.rpm

teleport-12.1.1-1.arm.rpm

teleport-12.1.1-1.i386.rpm

teleport-12.1.1-1.x86_64.rpm

teleport_12.1.1_amd64.deb

teleport_12.1.1_arm64.deb

teleport_12.1.1_arm.deb

teleport_12.1.1_i386.deb

teleport-12.1.1.pkg

teleport-connect_12.1.1_amd64.deb

Teleport Connect-12.1.1.dmg

teleport-connect-12.1.1-x64.tar.gz

teleport-connect-12.1.1.x86_64.rpm

Teleport Connect Setup-12.1.1.exe

teleport-v12.1.1-darwin-amd64-bin.tar.gz

teleport-v12.1.1-darwin-amd64-bin-unsigned.tar.gz

teleport-v12.1.1-linux-386-bin.tar.gz

teleport-v12.1.1-linux-amd64-bin.tar.gz

teleport-v12.1.1-linux-amd64-centos7-bin.tar.gz

teleport-v12.1.1-linux-arm64-bin.tar.gz

teleport-v12.1.1-linux-arm-bin.tar.gz

teleport-v12.1.1-windows-amd64-bin.zip

tsh-12.1.1.pkg


This release of Teleport contains multiple improvements and bug fixes.

* Added ability for Teleport to function as SAML IdP (Enterprise edition only).
* Downgraded Go to `v1.19.6` to resolve memory leak issues. [#22691](https://github.com/gravitational/teleport/pull/22691)
* Fixed issue with `tsh scp` overriding copied file permissions without `-p` flag. [#22609](https://github.com/gravitational/teleport/pull/22609)
* Improved performance of fetching remote clusters. [#22575](https://github.com/gravitational/teleport/pull/22575)



teleport-12.1.0-1.arm64.rpm

teleport-12.1.0-1.arm.rpm

teleport-12.1.0-1.i386.rpm

teleport-12.1.0-1.x86_64.rpm

teleport_12.1.0_amd64.deb

teleport_12.1.0_arm64.deb

teleport_12.1.0_arm.deb

teleport_12.1.0_i386.deb

teleport-12.1.0.pkg

teleport-connect_12.1.0_amd64.deb

Teleport Connect-12.1.0.dmg

teleport-connect-12.1.0-x64.tar.gz

teleport-connect-12.1.0.x86_64.rpm

Teleport Connect Setup-12.1.0.exe

teleport-v12.1.0-darwin-amd64-bin.tar.gz

teleport-v12.1.0-darwin-amd64-bin-unsigned.tar.gz

teleport-v12.1.0-linux-386-bin.tar.gz

teleport-v12.1.0-linux-amd64-bin.tar.gz

teleport-v12.1.0-linux-amd64-centos7-bin.tar.gz

teleport-v12.1.0-linux-arm64-bin.tar.gz

teleport-v12.1.0-linux-arm-bin.tar.gz

teleport-v12.1.0-windows-amd64-bin.zip

tsh-12.1.0.pkg


This release of Teleport contains multiple improvements and bug fixes.

* Fixed issue with `tsh` not respecting HTTPS_PROXY in some cases. [#22492](https://github.com/gravitational/teleport/pull/22492)
* Fixed issue with config validation in Helm charts scratch mode. [#22423](https://github.com/gravitational/teleport/pull/22423)
* Added IAM joining support for Azure VMs. [#22204](https://github.com/gravitational/teleport/pull/22204)
* Added auto-discovery support for Azure VMs. [#22521](https://github.com/gravitational/teleport/pull/22521)
* Added support for `ap-southeast-4` AWS region for IAM joining. [#22486](https://github.com/gravitational/teleport/pull/22486)
* Added ability to specify web terminal scrollback length in proxy config. [#22422](https://github.com/gravitational/teleport/pull/22422)
* Added support for PuTTY's `winadj` channel requests. [#22420](https://github.com/gravitational/teleport/pull/22420)
* Added `--trace-profile` flag to `tsh` that allows generating runtime trace profiles. [#22406](https://github.com/gravitational/teleport/pull/22406)
* Added enhanced session recording support for arm64 architectures. [#22550](https://github.com/gravitational/teleport/pull/22550)
* Updated `tctl alert ack` to allow acknowledging alerts of any severity. [#22582](https://github.com/gravitational/teleport/pull/22582)
* Updated Windows desktop access to display only applicable logins. [#22333](https://github.com/gravitational/teleport/pull/22333)
* Improved Kubernetes access performance when using `kubectl`. [#22508](https://github.com/gravitational/teleport/pull/22508)
* Improved Teleport Connect performance when connecting to large clusters. [#22316](https://github.com/gravitational/teleport/pull/22316)
* Improved performance and scalability in large clusters. [#21495](https://github.com/gravitational/teleport/pull/21495)



teleport-12.0.5-1.arm64.rpm

teleport-12.0.5-1.arm.rpm

teleport-12.0.5-1.i386.rpm

teleport-12.0.5-1.x86_64.rpm

teleport_12.0.5_amd64.deb

teleport_12.0.5_arm64.deb

teleport_12.0.5_arm.deb

teleport_12.0.5_i386.deb

teleport-12.0.5.pkg

teleport-connect_12.0.5_amd64.deb

Teleport Connect-12.0.5.dmg

teleport-connect-12.0.5-x64.tar.gz

teleport-connect-12.0.5.x86_64.rpm

Teleport Connect Setup-12.0.5.exe

teleport-v12.0.5-darwin-amd64-bin.tar.gz

teleport-v12.0.5-darwin-amd64-bin-unsigned.tar.gz

teleport-v12.0.5-linux-386-bin.tar.gz

teleport-v12.0.5-linux-amd64-bin.tar.gz

teleport-v12.0.5-linux-amd64-centos7-bin.tar.gz

teleport-v12.0.5-linux-arm64-bin.tar.gz

teleport-v12.0.5-linux-arm-bin.tar.gz

teleport-v12.0.5-windows-amd64-bin.zip

tsh-12.0.5.pkg


This release of Teleport contains multiple security fixes, improvements and bug fixes.

### Security fixes

* Fixed issue with malicious SQL Server packet being able to cause proxy crash. [#21638](https://github.com/gravitational/teleport/pull/21638)
* Fixed issue with session terminated after a short delay instead of being immediately paused when moderator leaves. [#21974](https://github.com/gravitational/teleport/pull/21974)

### Other improvements and bug fixes

* Fixed issue with orphaned child processes after session ends. [#22222](https://github.com/gravitational/teleport/pull/22222)
* Fixed issue with not being able to see any pods with an active access request. [#22196](https://github.com/gravitational/teleport/pull/22196)
* Fixed issue with remote cluster state not always being correctly updated. [#22088](https://github.com/gravitational/teleport/pull/22088)
* Fixed heartbeat errors from database service. [#22087](https://github.com/gravitational/teleport/pull/22087)
* Fixed issue with applications temporarily disappearing during app service restart. [#21807](https://github.com/gravitational/teleport/pull/21807)
* Fixed issue with some Helm values being accidentally shared between auth and proxy configs. [#21768](https://github.com/gravitational/teleport/pull/21768)
* Fixed issues with desktop access flow in Access Management interface. [#21756](https://github.com/gravitational/teleport/pull/21756)
* Fixed "access denied" errors in Teleport Connect on Windows. [#21720](https://github.com/gravitational/teleport/pull/21720)
* Fixed issue with database GUI client connections requiring random taps when per-session MFA is enabled. [#21661](https://github.com/gravitational/teleport/pull/21661)
* Fixed issue with moderated sessions not working on leaf clusters. [#21612](https://github.com/gravitational/teleport/pull/21612)
* Fixed issue with missing `--request-id` flag in UI for Kubernetes login instructions. [#21445](https://github.com/gravitational/teleport/pull/21445)
* Fixed issue connecting to AWS resources when using full IAM role ARNs. [#21251](https://github.com/gravitational/teleport/pull/21251)
* Fixed issue with `local_auth: false` setting being ignored without explicitly setting `authentication_type`. [#22215](https://github.com/gravitational/teleport/pull/22215)
* Added `tctl` resource commands for Device Trust. [#22157](https://github.com/gravitational/teleport/pull/22157)
* Added support for assuming roles in `tsh proxy aws`. [#21990](https://github.com/gravitational/teleport/pull/21990)
* Added early feedback for successful security key taps in `tsh`. [#21780](https://github.com/gravitational/teleport/pull/21780)
* Added device lock support. [#21751](https://github.com/gravitational/teleport/pull/21751)
* Added suppport for security contexts in `teleport-kube-agent` Helm chart. [#21535](https://github.com/gravitational/teleport/pull/21535)
* Updated `tsh version` command to display client version only via `--client` flag. [#22167](https://github.com/gravitational/teleport/pull/22167)
* Updated install script to use enterprise packages for enterprise clusters. [#22109](https://github.com/gravitational/teleport/pull/22109)
* Updated install script to use deb/rpm repositories. [#22108](https://github.com/gravitational/teleport/pull/22108)
* Updated proxy init container in Helm charts to use security context. [#22064](https://github.com/gravitational/teleport/pull/22064)
* Updated `tsh` to include timestamps with debug logs. [#21996](https://github.com/gravitational/teleport/pull/21996)
* Updated AWS access to fetch credentials with TTL matching user's certificate TTL. [#21994](https://github.com/gravitational/teleport/pull/21994)
* Updated Go toolchain to `1.20.1`. [#21931](https://github.com/gravitational/teleport/pull/21931)
* Updated `tsh kube login --all` to not require cluster name. [#21765](https://github.com/gravitational/teleport/pull/21765)
* Updated `teleport db configure create` command to support more use-cases. [#21690](https://github.com/gravitational/teleport/pull/21690)
* Improved performance in large clusters with etcd backend. [#21905](https://github.com/gravitational/teleport/pull/21905), [#21496](https://github.com/gravitational/teleport/pull/21496)



teleport-12.0.4-1.arm64.rpm

teleport-12.0.4-1.arm.rpm

teleport-12.0.4-1.i386.rpm

teleport-12.0.4-1.x86_64.rpm

teleport_12.0.4_amd64.deb

teleport_12.0.4_arm64.deb

teleport_12.0.4_arm.deb

teleport_12.0.4_i386.deb

teleport-12.0.4.pkg

teleport-connect_12.0.4_amd64.deb

Teleport Connect-12.0.4.dmg

teleport-connect-12.0.4-x64.tar.gz

teleport-connect-12.0.4.x86_64.rpm

Teleport Connect Setup-12.0.4.exe

teleport-v12.0.4-darwin-amd64-bin.tar.gz

teleport-v12.0.4-darwin-amd64-bin-unsigned.tar.gz

teleport-v12.0.4-linux-386-bin.tar.gz

teleport-v12.0.4-linux-amd64-bin.tar.gz

teleport-v12.0.4-linux-amd64-centos7-bin.tar.gz

teleport-v12.0.4-linux-arm64-bin.tar.gz

teleport-v12.0.4-linux-arm-bin.tar.gz

teleport-v12.0.4-windows-amd64-bin.zip

tsh-12.0.4.pkg


This release of Teleport contains a security fix as well as multiple improvements and bug fixes.

### OpenSSL update

* Updated OpenSSL to `1.1.1t`. [#21425](https://github.com/gravitational/teleport/pull/21425)

### Other fixes and improvements

* Fixed issue with Access Manager interface not accepting valid port numbers. [#21651](https://github.com/gravitational/teleport/pull/21651)
* Fixed issue with some application access requests failing after proxy restart. [#21615](https://github.com/gravitational/teleport/pull/21615)
* Fixed issue with invalid role template namespaces leading to cluster lockouts. [#21573](https://github.com/gravitational/teleport/pull/21573)
* Fixed issue with Teleport Connect failing to recognize logged in user sometimes. [#21467](https://github.com/gravitational/teleport/pull/21467)
* Fixed issue with the back button not working in Web UI navigation. [#21236](https://github.com/gravitational/teleport/pull/21236)
* Fixed issue with Web UI SSH player having scrollbars. [#20868](https://github.com/gravitational/teleport/pull/20868)
* Added support for `tsh request search --kind=pod` command. [#21456](https://github.com/gravitational/teleport/pull/21456)
* Updated `tsh db configure create` to require flag for dynamic resources matching. [#21395](https://github.com/gravitational/teleport/pull/21395)
* Improved reconnect stability after database service restart. [#21635](https://github.com/gravitational/teleport/pull/21635)
* Improved reconnect stability after Kubernetes service restart.[#21617](https://github.com/gravitational/teleport/pull/21617)
* Improved `tsh ls -R` performance. [#21577](https://github.com/gravitational/teleport/pull/21577)
* Improved `tsh scp` error message when no remote path is specified. [#21373](https://github.com/gravitational/teleport/pull/21373)
* Improved error message when trying to rename resource. [#21179](https://github.com/gravitational/teleport/pull/21179)
* Reduced CPU usage when using enhanced session recording. [#21437](https://github.com/gravitational/teleport/pull/21437)



teleport-12.0.2-1.arm64.rpm

teleport-12.0.2-1.arm.rpm

teleport-12.0.2-1.i386.rpm

teleport-12.0.2-1.x86_64.rpm

teleport_12.0.2_amd64.deb

teleport_12.0.2_arm64.deb

teleport_12.0.2_arm.deb

teleport_12.0.2_i386.deb

teleport-12.0.2.pkg

teleport-connect_12.0.2_amd64.deb

Teleport Connect-12.0.2.dmg

teleport-connect-12.0.2-x64.tar.gz

teleport-connect-12.0.2.x86_64.rpm

Teleport Connect Setup-12.0.2.exe

teleport-v12.0.2-darwin-amd64-bin.tar.gz

teleport-v12.0.2-darwin-amd64-bin-unsigned.tar.gz

teleport-v12.0.2-linux-386-bin.tar.gz

teleport-v12.0.2-linux-amd64-bin.tar.gz

teleport-v12.0.2-linux-amd64-centos7-bin.tar.gz

teleport-v12.0.2-linux-arm64-bin.tar.gz

teleport-v12.0.2-linux-arm-bin.tar.gz

teleport-v12.0.2-windows-amd64-bin.zip

tsh-12.0.2.pkg


Teleport 12 brings the following marquee features and improvements:

- Device Trust (Preview, Enterprise only)
- Passwordless Windows access for local users (Preview, Enterprise only)
- Per-pod RBAC for Kubernetes Access (Preview)
- Azure and GCP CLI support for Application Access (Preview)
- Support for more databases in Database Access:
  - AWS DynamoDB
  - AWS Redshift Serverless
  - AWS RDS Proxy for PostgreSQL/MySQL
  - Azure SQLServer Auto Discovery
  - Azure Flexible Servers
- Refactored Helm charts (Preview)
- Dropped support for SHA1 in Server Access
- Signed/notarized macOS binaries

### Device Trust (Preview, Enterprise only)

Teleport 12 includes a preview of our upcoming Device Trust feature, which
allows administrators to require that Teleport access is performed from an
authenticated and trusted device.

This preview release requires macOS and a native client like tsh or Teleport
Connect. These clients leverage the Secure Enclave on macOS to solve device
challenges issued by the Teleport CA, proving their identity as a trusted
device.

Teleport features requiring the web UI (Desktop Access, Application Access) are
not currently supported.

### Passwordless Windows Access for Local Users (Preview, Enterprise only)

Teleport 12 brings passwordless certificate-based authentication to Windows
desktops in environments where Active Directory is not available. This feature
requires the installation of a Teleport package on each Windows desktop.

### Per-pod RBAC for Kubernetes Access (Preview)

Teleport 12 extends RBAC to support controlling access to individual pods in
Kubernetes clusters. Pod RBAC integrates with existing Teleport RBAC features
such as role templating and access requests.

### Azure and GCP CLI support for Application Access (Preview)

In Teleport 12 administrators can interact with Azure and GCP APIs through
Application Access using `tsh az` and `tsh gcloud` CLI commands, or using
standard `az` and `gcloud` tools through the local application proxy.

### Support for more databases in Database Access

Database Access in Teleport 12 brings a number of new integrations to AWS-hosted
databases such as DynamoDB (now with audit log support), Redshift Serverless and
RDS Proxy for PostgreSQL/MySQL.

On Azure, Database Access adds SQLServer auto-discovery and support for Azure
Flexible Server for PostgreSQL/MySQL.

### Refactored Helm charts (Preview)

The “teleport-cluster” Helm chart underwent significant refactoring in Teleport
12 to provide better scalability and UX. Proxy and Auth are now separate
deployments and the new “scratch” chart mode makes it easier to provide a custom
Teleport config.

“Custom” mode users should follow the migration guide:

https://goteleport.com/docs/ver/12.x/deploy-a-cluster/helm-deployments/migration-v12/

### Dropped support for SHA1 in Server Access

Newer OpenSSH clients connecting to Teleport 12 clusters no longer need the
“PubAcceptedKeyTypes” workaround to include the deprecated “sha” algorithm.

### Signed/notarized macOS binaries

Users who download Teleport 12 Darwin binaries would no longer get an untrusted
software warning from macOS.

### tctl edit

tctl now supports an edit subcommand, allowing you to edit resources directly in
your preferred text editor.

### Breaking Changes

Please familiarize yourself with the following potentially disruptive changes in
Teleport 12 before upgrading.

#### Helm charts

The teleport-cluster Helm chart underwent significant changes in Teleport 12. To
upgrade from an older version of the Helm chart deployed in “custom” mode, use
the following migration guide:

https://goteleport.com/docs/ver/12.x/deploy-a-cluster/helm-deployments/migration-v12/

Additionally, PSPs are removed from the chart when installing on Kubernetes 1.23
and higher to account for the deprecation/removal of PSPs by Kubernetes.

#### tctl auth export

The tctl auth export command only exports the private key when passing the
--keys flag. Previously it would output the certificate and private key
together.

#### Desktop Access

Windows Desktop sessions disable the wallpaper by default, improving
performance. To restore the previous behavior, add `show_desktop_wallpaper: true`
to your windows_desktop_service config.



Sign in to Teleport

Community Edition

Download for Linux

Download Teleport