Skip to content
ReleasesGitHub

Agent Controller releases

Download

  1. Choose a release

    Version
    1.32.3502
    Older releaseReleased 2026-06-04

  2. Choose a platform

    PlatformLinuxWindows
    Architectureamd64

  3. Download and verify

    aembit_agent_controller_linux_amd64_1.32.3502.tar.gzLinux · amd64 · 74.5 MB.sha256.sha256.sig
    Download
    Verify this downloadsha256 + gpg

    1. Fetch the artifact and its sidecars

      Every release ships a bare-hash checksum and a detached GPG signature over that checksum.

      curl -O https://releases.aembit.io/agent_controller/1.32.3502/linux/amd64/aembit_agent_controller_linux_amd64_1.32.3502.tar.gz
curl -O https://releases.aembit.io/agent_controller/1.32.3502/linux/amd64/aembit_agent_controller_linux_amd64_1.32.3502.tar.gz.sha256
curl -O https://releases.aembit.io/agent_controller/1.32.3502/linux/amd64/aembit_agent_controller_linux_amd64_1.32.3502.tar.gz.sha256.sig

    2. Import Aembit’s signing key

      One time per machine.

      curl -sS https://keybase.io/aembit/pgp_keys.asc | gpg --import

    3. Check the signature on the checksum

      This proves the checksum came from Aembit and was not altered in transit.

      gpg --verify aembit_agent_controller_linux_amd64_1.32.3502.tar.gz.sha256.sig aembit_agent_controller_linux_amd64_1.32.3502.tar.gz.sha256
gpg: Signature made …
gpg: Good signature from "Aembit, Inc. <keybase@aembit.io>" [unknown]
Primary key fingerprint: EA3D 8D2F DAC6 BD81 3716  3D00 D655 E647 29BC 67D7

    4. Compare the artifact against the checksum

      These files hold a bare hash with no filename, so shasum -c needs the two-column form rebuilt first.

      echo "$(cat aembit_agent_controller_linux_amd64_1.32.3502.tar.gz.sha256)  aembit_agent_controller_linux_amd64_1.32.3502.tar.gz" | shasum -a 256 -c -
aembit_agent_controller_linux_amd64_1.32.3502.tar.gz: OK
    Expected digest
    dcb81e40745b229a10d063a3841d6cc4fd8b48c839725fde603ea4d8c1ce6313

All releases

23 Agent Controller releases in total. Select a version to update the steps above.

VersionReleasedNotesLinux amd64Windows amd64
1.32.3541latest2026-07-08Harden the container image and add an embedded SBOM✓✓
1.32.35022026-06-04Add fallback health reporting when a proxy blocks the command stream; reconnect the gRPC channel automatically after network or proxy drops; fix TLS certificate renewal stalling on Kubernetes after a file-write error; stop retrying dropped command streams with expired tokens✓✓
1.30.33842026-04-15Add support for HTTP proxy environment variables✓✓
1.30.33362026-03-11Improve compatibility across Kubernetes platforms including Red Hat OpenShift (ROSA)✓✓
1.29.32392026-02-26Stay registered when access token renewal with a refresh token fails; default the log level to Info; batch Kubernetes Secret token updates into a single patch; disable the Prometheus TLS endpoint on Kubernetes; upgrade to .NET 10 and sign container images with cosign✓✓
1.27.29062025-11-25Apply bug fixes and logging improvements✓✓
1.25.26222025-09-09Deprecate AEMBIT_HTTP_PORT_DISABLED with a warning log; remove HSTS middleware; speed up startup attestation on EKS Fargate and fix ECS Fargate credential handling✓✓
1.24.24852025-07-29Sign the container image with cosign; bind TLS ports when metrics and HTTP are both disabled; close the Prometheus HTTP port when customer-managed TLS is enabled; log AEMBIT_HTTP_PORT_DISABLED at startup; apply a security hardening fix✓✓
1.23.22632025-06-11Log environment variables at startup; add logging for TLS certificate retrieval from Aembit Cloud; unify reporting of Aembit-managed and customer-managed TLS certificates to Aembit Cloud✓✓
1.23.21602025-06-02Add customer-managed TLS support to the Linux installer; add AEMBIT_HTTP_PORT_DISABLED to the Windows installer and default its log level to warning; fix Windows upgrades that specify a different service user; listen only on the TLS port on VMs when TLS is enabled✓✓
1.21.21012025-04-04Windows only–✓
1.21.19142025-02-27Serve the full CA chain when TLS is enabled; fix unhealthy health status on ECS; fix log file access in HA configurations; upgrade to .NET 9✓–
1.19.17522024-12-26Add SELinux support to the VM installer; report health status to Aembit Cloud on connect and disconnect; add standardized log levels including trace; log lifecycle changes and tasks; quiet exceptions during Trust Provider registration✓–
1.18.16022024-10-23Fix the VM installer creating a service account that could expire; handle an HTTP protocol exception in the cloud connection✓–
1.17.15792024-10-09Make the log level configurable on Kubernetes; remove deprecated environment variables✓–
1.17.15332024-09-30Add Prometheus metrics collection with a setting to enable or disable it✓–
1.17.15182024-09-17Report health to Aembit Cloud and receive commands over a persistent connection; add Aembit-managed TLS certificates for Agent Proxy with automatic reload and renewal; fix Healthy status while the cloud connection is down; fail early when neither device code nor Trust Provider is configured; upgrade to .NET 8✓–
1.14.10742024-05-10Fix an overnight crash loop; fix missing actor and user agent in audit log entries for attestation and registration; support reinstalling without TLS after a TLS install; skip the journald namespace config on systemd older than 245✓–
1.12.9742024-03-20Renew the Kerberos attestation certificate in the background; send TLS certificate metadata to Aembit Cloud; refuse Kerberos attestation documents when the certificate has expired✓–
1.12.9272024-03-12Add configurable AEMBIT_LOG_LEVEL; fix the service showing failed after stop on Red Hat; log when registration token retrieval for Agent Proxy fails; validate the Kerberos attestation installer variable✓–
1.12.8782024-02-29Add an HTTPS endpoint on port 5443 with a VM installer option and Kubernetes TLS Secret support for the certificate; add Kerberos attestation signing for Agent Proxy; return the agent access token in Registered state instead of 503✓–
1.11.7422024-01-23Change status to Unregistered when authentication starts failing; handle switching from device code to Trust Provider authentication; support RHEL 8.6✓–
1.9.6962023-11-13✓–

New to Agent Controller? View the install and deploy guide.

Configuring Agent Controller? View the environment variable reference.

Looking for what changed? View Agent Controller in the changelog.

Copyright © 2026. All rights reserved.Privacy PolicyTerms of ServiceTrust CenterMetadata collectionContact Aembit