ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

GSA macOS client release history

This page's changes and edits · All guidance changes

Microsoft's edit ·

Nov 03 draft complete

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 027c3c6 · +16 −6 lines · also on GitHub

11 ---
22 title: Global Secure Access Client for macOS Release Notes
3 −description: This article tracks the changes in each released version of the Global Secure Access client for macOS.
3 +description: Track the latest updates and bug fixes for the Global Secure Access client for macOS. Stay informed about version changes and download instructions.
44 ms.service: global-secure-access
55 ms.topic: reference
6 −ms.date: 08/19/2025
6 +ms.date: 11/03/2025
77 ms.author: jayrusso
88 author: HULKsmashGithub
99 manager: dougeby
⋯ 5 unchanged lines
1515 This article lists the released versions of the Global Secure Access client for macOS and describes the changes in each version.
1616
1717 ## Download the latest version
18 −The current version of the Global Secure Access client is available to download from the Microsoft Entra admin center.
18 +You can download the current version of the Global Secure Access client from the Microsoft Entra admin center.
1919
2020 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
2121 1. Browse to **Global Secure Access** > **Connect** > **Client download**.
⋯ 1 unchanged line
2323 1. Select **Download Client**.
2424 :::image type="content" source="media/reference-macos-client-release-history/macos-client-download-screen.png" alt-text="Screenshot of the Client download screen with the Download Client button highlighted.":::
2525
26 +## Version 1.1.25090800
27 +Released for download on November 04, 2025.
28 +### Other changes
29 +- Bug fix: Better recovery of the connection to the Global Secure Access cloud service when a device switches between networks.
30 +- Bug fix: Mutual Transport Layer Security (mTLS) connections to the Global Secure Access cloud service use the correct certificate after renewal.
31 +- Bug fix: Web page translation in Microsoft Edge browser is fully functional.
32 +- Bug fix: DNS queries for service (SRV) records in public DNS servers are supported.
33 +- Enhanced telemetry for better supportability and monitoring.
34 +- Miscellaneous bug fixes and improvements.
35 +
2636 ## Version 1.1.25070402
2737 Released for download on August 19, 2025.
2838 ### Other changes
⋯ 10 unchanged lines
3949 - Supports log collection with a script.
4050 - Increases client's log file size to allow for more comprehensive logging.
4151 ### Other changes
42 −- Bug fix: Implements a workaround for Dynamic Host Configuration Protocol (DHCP) failures seen in macOS 15.4 and above because of a change in macOS.
52 +- Bug fix: Implements a workaround for Dynamic Host Configuration Protocol (DHCP) failures seen in macOS 15.4 and later because of a change in macOS.
4353 - Bug fix: Avoids repeated, unnecessary certificate signing requests.
4454 - Enhanced telemetry for better supportability and monitoring.
4555 - Miscellaneous bug fixes and improvements.
⋯ 17 unchanged lines
6373 - Future versions keep the new distribution profile identifiers unless otherwise noted.
6474 - You don't need the special upgrade procedure when upgrading from a version newer than **1.1.584.1** because those versions already use the new identifiers.
6575 ### Functional changes
66 −- Support for mutual Transport Layer Security (mTLS) connections to Global Secure Access.
76 +- Support for mTLS connections to Global Secure Access.
6777 > [!NOTE]
6878 > The mTLS connection rolls out gradually to customers through the cloud service. Customers continue to use the Transport Layer Security (TLS) connection until they get mTLS.
6979 - Telemetry collection is enabled.
⋯ 6 unchanged lines
7686 - Bug fix: Canonical name (CNAME) records now resolve correctly (previously resolved as A records).
7787 - Bug fix: Resolved connectivity issues when resuming from sleep.
7888 ### Other changes
79 −- The client version format is now based on the build date. Older versions might have higher numerical values than newer ones, but future versions increment numerically.
89 +- The client version format now uses the build date. Older versions might have higher numerical values than newer ones, but future versions increment numerically.
8090 - Bug fix: Logging network trace is now disabled by default to optimize performance.
8191 - Improvements and bug fixes for Advanced diagnostics.
8292 - Miscellaneous bug fixes and improvements.
⋯ 9 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 17:01 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.