# Edge components release with reliability and CLI enhancements

Aembit has released new versions of the following components and packages:

* Helm Chart
* Terraform ECS module
* VM Agent Proxy package
* VM Agent Controller package
* Agent CLI
* AWS Lambda Extension
* AWS Lambda Layer
* Agent Proxy

For the latest available versions of these components, see the [Edge Components Supported Versions](/reference/edge-components/edge-component-supported-versions) page.

Key Updates:

* **X.509-SVID retrieval through Aembit CLI**: The `aembit credentials get` command now accepts [`--client-tls-private-key`](/dev-guide/cli/reference/credentials-get#--client-tls-private-key) to retrieve a SPIFFE-compliant X.509-SVID certificate from the existing [X.509-SVID Credential Provider](/user-guide/access-policies/credential-providers/about-spiffe-x509-svid). You supply a PEM-encoded private key; Aembit CLI generates the certificate signing request locally and returns the signed chain in `CLIENT_CERT_CHAIN`, and the private key never leaves the local machine.
* **Configurable gRPC keep-alives**: Two optional environment variables, [`AEMBIT_TENANT_GRPC_PING_INTERVAL_SECS` and `AEMBIT_TENANT_GRPC_PING_TIMEOUT_SECS`](/reference/edge-components/edge-component-env-vars#agent-proxy-environment-variables), let Agent Proxy send keep-alives on its connection to your Tenant so it detects a dead connection and reconnects faster. They’re off by default and useful for networks, such as a Secure Web Gateway, that stall idle connections.
* **CA certificate configuration for the Cloud connection**: [`AGENT_TRUST_PATH`](/reference/edge-components/edge-component-env-vars#agent_trust_path) again lets you supply a custom CA certificate for the Agent Proxy’s connection to the Aembit Cloud, which is useful when an inspecting proxy terminates TLS on outbound traffic.
* **Configurable HTTP idle timeout on Windows**: The Windows installer now exposes [`AEMBIT_HTTP_IDLE_TIMEOUT_SECS`](/reference/edge-components/edge-component-env-vars#aembit_http_idle_timeout_secs), letting you tune the idle timeout for HTTP/1.1 connections handled by the Agent Proxy.
* **Caching enhancements**: Improvements to credential caching across the Agent Proxy and Aembit CLI.
* **Improved upstream proxy diagnostics**: When the Agent Proxy can’t reach a configured upstream HTTP proxy, logs now include the full error source chain instead of a generic connection error, making a misconfigured upstream proxy easier to diagnose.
* **General improvements**: Stability, robustness, and dependency updates across edge components, including improved hardware-identification handling during process identification on Linux virtual machines.