0.62.0 -- 2026-05-15

Breaking Changes

• RestSharp upgraded from 110.2.0 to 112.0.0. One confirmed breaking change plus one behaviour difference that may affect some environments:

  1. MaxTimeout = 0 now means zero timeout, not "no timeout" — affects all users. In RestSharp 110, setting MaxTimeout = 0 on RestClientOptions was treated as "wait indefinitely". In RestSharp 112, MaxTimeout is deprecated and writing it maps to the new Timeout property as TimeSpan.FromMilliseconds(0) — TimeSpan.Zero — which HttpClient interprets as an immediate cancellation. Every request threw TaskCanceledException with no useful diagnostic. The library now defaults to TimeSpan.FromSeconds(100) (matching HttpClient's own default) when no explicit timeout is provided.

  2. TLS certificate validation behaviour may differ — affects environments with self-signed certs. If your Secret Server endpoint uses a certificate not trusted by the OS certificate store, requests may fail with an empty error response. A new -SkipCertificateCheck switch has been added to New-TssSession to handle this (see New Stuff below). Environments whose certificates are trusted by the OS do not need to change anything.

  Action required if you see empty or TaskCanceledException authentication errors: add -SkipCertificateCheck to your New-TssSession call if using a self-signed certificate, or check that your server URL is reachable:

  $session = New-TssSession -SecretServer https://vault.example.com -Credential $cred -SkipCertificateCheck

  The flag is stored on the session object and applied automatically to all subsequent API calls — no other changes are needed. Fixes #442.

Bug Fixes

• REST response handling: all functions now strip unknown properties from API responses before casting to typed objects, preventing Cannot convert value errors when Secret Server Cloud adds new response fields not yet reflected in module class definitions. Unknown properties are reported via Write-Verbose. Fixes #392, #398, #400, #406, #407, #408, #409, #410, #419.
• Get-TssSecretHeartbeatStatus - fix enum cast failure where the API returns a string status like "Pending"; Thycotic.PowerShell.Secrets.HeartbeatStatus.Status was self-typed instead of the SecretHeartbeatStatus enum. Fixes #433.
• Search-TssConfigurationBackupLog - fix Unable to find type [Thycotic.PowerShell.Configuration.DbBackupLog] error. The C# class file was named BackupLog while the cmdlet's OutputType and cast referenced DbBackupLog. Renamed the class (and its file) to match the cmdlet's contract. Fixes #431.
• New-TssSession - OtpCode parameter is now [string] instead of [int]. OTP codes with leading zeros (e.g. 012345) were being truncated by the integer coercion before reaching the API. Existing scripts that pass a numeric literal continue to work via PowerShell's implicit conversion. Fixes #316.
• Get-TssConfiguration - fix Cannot convert value ... to type Thycotic.PowerShell.Configuration.General cast failure on SS 12.0. The outer [General] cast was applied to a response whose nested sub-objects (e.g. email, applicationSettings) still contained SS 12.0 fields not modeled by the C# classes. The cmdlet now constructs the General result by drilling into each known sub-object and running FilterTssResponse against it before assignment, so unknown nested fields are stripped instead of breaking the cast. Also handles the SS 12.0 rename of the emailSettings response property to email. Fixes #432.
• New-TssSession - authentication failures that return no error detail (e.g. TLS certificate rejection) now surface a descriptive message. When the certificate is likely the cause, the error text explicitly suggests adding -SkipCertificateCheck. Fixes #442.
• Get-TssRpcPasswordType - fix Cannot convert value ... to type Thycotic.PowerShell.Rpc.PasswordTypeField cast failure on SS 12.0. The outer [PasswordType] cast left the nested fields array as untyped PSCustomObject elements, which PowerShell could not coerce. The cmdlet now pre-coerces each fields element through FilterTssResponse before the outer cast. Fixes #440.
• Get-TssDirectoryServiceSyncStatus - fix Cannot convert value ... to type Thycotic.PowerShell.DirectoryServices.DomainSyncStatus cast failure on SS 12.0. The outer [SyncStatus] cast left the nested domainStatus array as untyped PSCustomObject elements that PowerShell could not coerce. The cmdlet now pre-coerces each domainStatus element through FilterTssResponse before the outer cast. Same pattern as #440. Fixes #441.

New Stuff

• New-TssSession - new -SkipCertificateCheck switch parameter. When specified, the TLS certificate of the Secret Server endpoint is not validated. Equivalent to Invoke-RestMethod -SkipCertificateCheck. The setting is persisted on the TssSession object and automatically applied to all API calls made with that session — callers do not need to pass the flag individually to each cmdlet. Intended for on-premises environments using self-signed certificates. Fixes #442.
• FilterTssResponse parts utility — centralised helper called by all functions to filter and verbose-log unknown response properties before type cast.
• Bundled Secret Server SDK CLI (src/bin/ClientSdk/tss.exe) updated from 1.0.0.0 to 1.6.1. Fixes #382.

General Updates

• 33c1e41c docs - correct links in command help
• 24654579 New-TssSession - Rework and add examples

Tests

• None

What's Changed

• Update Secret.cs for updated property by @jagger in #389
• 0.61.8 Rev by @tylerezimmerman in #390
• Revving Version by @tylerezimmerman in #388
• Update Search-TssSecretAccessRequest.md by @docunid in #381
• Update Summary.cs by @jagger in #386
• Reving Version by @tylerezimmerman in #387

New Contributors

• @docunid made their first contribution in #381

Full Changelog: v0.61.7...v0.61.8

What's Changed

• Update Permission.cs by @jagger in #377
• Reving to 0.61.5 by @tylerezimmerman in #379
• Addressing missing files in PowerShell Gallery module

Full Changelog: v0.61.4...v0.61.5

What's Changed

• Fix the New-TssSecretDependency command by @gaurava-delinea in #364
• Update Permission.cs by @skywayskase in #366
• Update the SDK to latest version. by @gaurava-delinea in #372
• Reving Version to 0.61.4 by @tylerezimmerman in #373
• DocUpdates by @tylerezimmerman in #374

New Contributors

• @skywayskase made their first contribution in #366

Full Changelog: v0.61.3...v0.61.4

What's Changed

• Update Thycotic.SecretServer.psd1 by @tylerezimmerman in #355
• 0.61.2doc update by @tylerezimmerman in #356
• Updating Docs for Powershell 7 Requirement by @tylerezimmerman in #358
• Update the package to resolve the Cryptography vulnerability by @gaurava-delinea in #359
• Update Secret Server SDK to version 1.5.3 by @gaurava-delinea in #361
• 0.61.3version rev by @tylerezimmerman in #362

Full Changelog: v0.61.2...v0.61.3

What's Changed

• 0.61.1doc updates by @tylerezimmerman in #349
• Adding in "checkOutUserId" & "checkOutUserName" for secret summary class by @jagger in #351
• Fix the code to pass the Body param in proper way after migration to .net 6 by @gaurava-delinea in #354

Full Changelog: v0.61.1...v0.61.2

What's Changed

• Update README.md by @tylerezimmerman in #338
• Updating Secret templates items. by @jagger in #335
• Class fixes by @jagger in #339
• Configuration subitem class updates by @jagger in #342
• doc updates by @tylerezimmerman in #344
• Update LICENSE by @tylerezimmerman in #345
• Upgrade to .Net 6 Core to resolve the vulnerability. by @gaurava-delinea in #347
• Update Thycotic.SecretServer.psd1 by @tylerezimmerman in #348

Full Changelog: v0.61.0...v0.61.1

What's Changed

• Doc updates by @tylerezimmerman in #324
• Dev.gaurav by @gaurava-delinea in #327
• Fix the New-TssDistributedEngineSite command by @gaurava-delinea in #328
• Remove the vulnerable package RestSharp.Newtonsoft.Json by @gaurava-delinea in #331
• Update Thycotic.SecretServer.psd1 by @tylerezimmerman in #332

Full Changelog: v0.60.9...v0.61.0

What's Changed

• Update README.md by @tylerezimmerman in #291
• Use the searchText and searchFields in the Rest call insted of FindTe… by @gaurava-delinea in #292
• Dev.gaurava by @gaurava-delinea in #293
• Fixed issue #277 Get-TssSecretSetting unable to Convert by @gaurava-delinea in #295
• Dev.gaurav2 by @gaurava-delinea in #296
• Update authentication.md by @tylerezimmerman in #297
• Doc update by @tylerezimmerman in #298
• Update Get-TssSecret.ps1 by @jagger in #308
• Jagger patch 1 by @jagger in #310
• Fixed Null value issue by @gaurava-delinea in #320
• Update Update-TssSecret.md by @jagger in #315
• Missing path ParameterSetName on Id by @MrM1y4g1 in #305
• Update Thycotic.SecretServer.psd1 by @tylerezimmerman in #323

New Contributors

• @gaurava-delinea made their first contribution in #292
• @MrM1y4g1 made their first contribution in #305

Full Changelog: v0.60.8...v0.60.9

What's Changed

• Updates to Readme by @EndlessTrax in #281
• Added missing class properties. Fixes #288 by @EndlessTrax in #289

Full Changelog: v0.60.7...v0.60.8