Azure Information Protection unified labeling client - Release management and supportability

This article describes the functionality added to each recent version of the unified labeling client, as well as servicing information and support timelines for each AIP unified client version.

You can download the Azure Information Protection unified labeling client from the Microsoft Download Center.

If you're looking for updates for the built-in labeling solution for Microsoft Office applications, see:

• Information protection items, such as the "Sensitivity labels" sections in What's new in Microsoft Purview risk and compliance solutions
• Protect your sensitive data with Microsoft Purview
• The Microsoft 365 roadmap, filtered for Microsoft 365 compliance items

Servicing information and timelines

Microsoft Purview Information Protection labeling client

The Microsoft Purview Information Protection labeling client includes the PowerShell, Scanner, File Labeler (previously AIP Classify & Protect) and Viewer. Client versions begin with 3.X and do not include the AIP Add-in for Office.

The Microsoft Purview Information Protection labeling client is available for preview starting April 11, 2024 on the Microsoft Download Center. Upgrades from AIP UL 2.X client versions require manual uninstall before install of the Microsoft Purview Information Protection labeling client. Client upgrades through Windows Update on machines with AIP UL 2.X client versions installed will fail.

The lifecycle of each generally available (GA) version of the Microsoft Purview Information Protection labeling client are 1 year after release.

Client version	Date released	Supported through
3.0.X.X	Public Preview 04/11/2024 General Availability 05/11/2024	05/11/2025

Azure Information Protection unified labeling client

The Azure Information Protection unified labeling client has multiple components bundled up into a single downloadable package. The Azure Information Protection add-in [part of the unified labeling client] is the only component in maintenance mode as of January 1, 2022, driven by the modernization effort to make sensitivity labeling and protection built-in to Office applications. All other components within the unified labeling client aren't in maintenance mode and are fully supported. For more information, see our TechCommunity blog.

The final support date of the AIP Add-in for Office is April 11, 2024 and is disabled in Office clients starting May 11, 2024 unless you have an exception.

The lifecycle of each generally available (GA) version of the Azure Information Protection unified labeling client could vary from build to build, depending on the release date of a subsequent GA version.

Client version	Date released	Supported through
2.18.26.0	03/25/2024	04/11/2024: AIP Add-in for Office 06/30/2024: AIP PowerShell, Scanner, Classify & Protect and Viewer
2.17.67.0	03/11/2024	04/11/2024: AIP Add-in for Office 06/30/2024: AIP PowerShell, Scanner, Classify & Protect and Viewer
2.17.66.0	01/11/2024	04/11/2024: AIP Add-in for Office 06/30/2024: AIP PowerShell, Scanner, Classify & Protect and Viewer
2.16.79.0	10/25/2023	04/11/2024: AIP Add-in for Office 06/30/2024: AIP PowerShell, Scanner, Classify & Protect and Viewer
2.16.73.0	05/23/2023	04/11/2024: AIP Add-in for Office 04/25/2024: AIP PowerShell, Scanner, Classify & Protect and Viewer
2.15.33.0	02/17/2023	Deprecated
2.14.90.0	09/01/2022	Deprecated
2.13.49.0	01/12/2022	Deprecated
2.12.62.0	08/02/2021	Deprecated
2.11.58.0	04/29/2021	Deprecated
2.9.116.0	02/08/2021	Deprecated
2.9.111.0	01/13/2021	Deprecated
2.8.85.0	09/22/2020	Deprecated
2.7.101.0	08/23/2020	Deprecated
2.7.99.0	07/20/2020	Deprecated
2.7.96.0	06/29/2020	Deprecated
2.6.111.0	03/09/2020	Deprecated
2.5.33.0	10/23/2019	Deprecated
2.2.21.0	09/03/2019	Deprecated
2.2.19.0	08/06/2019	Deprecated
2.2.14.0	07/15/2019	Deprecated
2.0.779.0	05/01/2019	Deprecated
2.0.778.0	04/16/2019	Deprecated

The date format used on this page is month/day/year.

The documentation is updated accordingly to a client release cycle and is applicable only to the latest supported GA versions of the client. Fixes and new functionality are always applied to the latest GA version and aren't applied to older GA versions.

Microsoft Update Catalog availability

After a short delay of typically four weeks, the latest general availability version is also included in the Microsoft Update Catalog. Azure Information Protection versions have a product name of Azure Information Protection > Azure Information Protection Unified Labeling Client, and a classification of Updates.

Including Azure Information Protection in the catalog means that you can upgrade the client using WSUS or Configuration Manager, or other software deployment mechanisms that use Microsoft Update.

For more information, see Upgrading and maintaining the Azure Information Protection unified labeling client.

Release information

Use the following information to see the contents of each supported release of the Azure Information Protection unified labeling client for Windows. The most current release is listed first. The date format used on this page is month/day/year.

Noted Azure Information Protection features are currently in PREVIEW. The Azure Preview Supplemental Terms include other legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.

Version 2.18.26.0

Unified labeling scanner and client version 2.18.26.0 is the final version of the AIP unified labeling client before the transition to the Microsoft Purview Information Protection client. Upgrades to this version are optional unless your organization requires the fixes below.

Supported through 04/11/2024 for AIP Add-in for Office
06/30/2024 for AIP PowerShell, Scanner, Classify & Protect and Viewer

Released 03/25/2024

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

• Upgraded Information Protection Scanner to use Microsoft Classification Engine (MCE.dll) library for classification of Sensitive Information Types.

• Fixed a bug in Information Protection Viewer where some wide, landscape-view images might appear to be stretched.

• Updated to MIP SDK 1.14.128 to add support for CBC encryption of Office files by default.

• Fixed a bug in Classify & Protect and AIP viewer where if regional language is other than English, application would open with incorrect scaling.

Version 2.17.67.0

Unified labeling scanner and client version 2.17.67.0

Supported through 04/11/2024 for AIP Add-in for Office
06/30/2024 for AIP PowerShell, Scanner, Classify & Protect and Viewer

Released 03/11/2024

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

• Updated Scanner to generate audit events that were not displaying in the audit log.

Version 2.17.66.0

Unified labeling scanner and client version 2.17.66.0

Supported through 04/11/2024 for AIP Add-in for Office
06/30/2024 for AIP PowerShell, Scanner, Classify & Protect and Viewer

Released 01/11/2024

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

• Fixed accessibility bugs.
• Added support to use the default browser for authentication. To enable the authentication setting, configure this registry key.
• Updated to MIP SDK 1.14.82.

Version 2.16.79.0

Unified labeling scanner and client version 2.16.79.0

Supported through 04/11/2024 for AIP Add-in for Office
06/30/2024 for AIP PowerShell, Scanner, Classify & Protect and Viewer

Released 10/25/2023

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

• Fixed a bug where Set-AIPAuthentication occasionally failed.
• Created feature to match the full untrusted recipient domain for oversharing popups in Outlook. The default behavior matches the trailing recipient domain. Contact support to request this change.
• Changed information protection scanner to not report level event in the summary file when no change occurred.
• Changed information protection scanner to not report protection when a file failure occurred.
• Fixed an issue where information protection scanner went offline due to corruption in MSAL refresh token.
• Updated to MIP SDK 1.13.187.

Version 2.16.73.0

Unified labeling scanner and client version 2.16.73.0

Supported through 04/11/2024

Released 05/23/2023

This version includes the following fixes for the unified labeling scanner and client:

Service block for new deployments of AIP add-in

Organizations who have nonzero usage of AIP in the last 90 days before May 23, 2023 can use 2.16.73.0 with no impact.

Organizations who have zero usage of AIP in the last 90 days before May 23, 2023 will be impacted if you use the AIP add-in. Organizations who start to use the AIP add-in for the first time after 5/30/2023 can't download labels and will find the AIP add-in nonfunctional. The other components in the unified labeling package - the Scanner, the right-click Classify and Protect, PowerShell, and Viewer - continue to work with no impact. Organizations with a legitimate business need to continue using the AIP add-in after 05/30/2024 can apply for an extension through support.

For more information about AIP add-in retirement, see our TechCommunity blog and for detailed migration steps, our migration playbook.

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

• Fixed a bug where change counter was incremented but no audit event was sent. Change counter no longer incremented for those events.
• Fixed a bug where display name wasn't passed MIP after MSAL changes.
• Fixed an issue where EUII appeared in UserKey field of audit record.
• Updated to MIP SDK 1.13.161, adding support for consumption of Office documents and emails protected with AES256-CBC.

Version 2.15.33.0

Unified labeling scanner and client version 2.15.33.0

Supported through 02/17/2024

Released 02/17/2023

This version includes the following fixes for the unified labeling scanner and client:

EU Data Boundary Support

Starting in 2.15.33.0, EU customers can send data from the AIP UL Client to the EU for storage and processing. To enable the EU data boundary setting, configure this registry key.

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

• Outlook supports Double Key Encryption (DKE) templates.
• Updated to MIP SDK 1.12.101 for classification, labeling, and protection services.

Version 2.14.90.0

Unified labeling scanner and client version 2.14.90.0

Supported through 09/01/2023

Released 09/01/2022

This version includes the following fixes for the unified labeling scanner and client:

Updating Authentication Library to MSAL

Starting in 2.14.90.0, MSAL is the default authentication library for AIP UL client and AIP Scanner, replacing ADAL from the previous versions.

For the AIP add-in, users should see no impact as we'll use token cache or the integrated Windows authentication (SSO) before prompting the use to log in again.

For the AIP PowerShell and AIP Scanner, reauthentication is required. To reauthenticate, use the PowerShell cmdlet Set-AIPAuthentication after upgrading to this version.

Fixes

This version of the unified labeling client and scanner provides the following fixes:

• Fixed an issue where msg.pfile wasn't opening in AIP Viewer.
• Fixed an issue with the performance of GetLabel/SetLabel.
• Fixed issues with handling of IQP protected files.
• Fixed an issue with Set-AIPFileLabel crashes.
• Fixed an issue with audit logging in AIP Viewer for protected PDFs.
• Fixed an issue with co-authoring where users couldn't apply labels for certain cultures with special characters (i.e. "tr-TR").
• Fixed an issue with super user protection for Set-AIPFileLabel -RemoveProtection if label wasn't published by super user.

Version 2.13.49.0

Unified labeling scanner and client version 2.13.49.0

Supported through 03/01/2023

Released 01/12/2022

This version includes the following new updates, fixes, and enhancements for the unified labeling scanner and client:

Increased accuracy for sensitive information types

This version of the unified labeling client provides globalization enhancements, including increased accuracy for East Asian languages and support for double-byte characters. These enhancements are provided only for 64-bit processes, and are turned off by default.

For more information, see Turn on classification globalization features and Learn about sensitive information types.

Updated audit logs for the AIP Viewer app

The Azure Information Protection Viewer app now generates Access audit logs each time a labeled or protected file is opened within the organization.

The Viewer app no longer generates Discover audit logs.

For more information, see:

• Azure Information Protection audit log reference (public preview)
• Analytics and central reporting for Azure Information Protection (public preview)

Scanner support for 64-bit versions only

Starting in version 2.13.47.0, the unified labeling scanner is supported only on 64-bit systems.

For more information, see Requirements for installing and deploying the Azure Information Protection unified labeling scanner.

Integrated support for MIP SDK version 1.10

This version of the Azure Information Protection client and scanner fully integrates the Microsoft Purview Information Protection Software Development Kit (SDK) version 1.10.93.

For more information, see the MIP SDK documentation.

Fixes and improvements

This version of the unified labeling client and scanner provides the following fixes and improvements:

• Enhanced support for the PFileSupportedExtensions advanced setting, to add the ability to protect only Office file types and PDF files, without configuring one specific value.
• Fixed an issue where a watermark was reflected correctly when a label is changed.
• Fixed an issue where Office apps behaved unexpectedly if the color value for a label has an invalid value.
• Fixed an issue where selecting permissions via the File Explorer Classify and protect option removes email addresses from the defined permissions if multiple email addresses include an apostrophe (').
• Fixed an issue where the auto-labeling custom text tooltip configured didn't display as expected in case of an AsyncPolicy applied.
• Fixed an issue when pop-ups in Outlook behaved unexpectedly when attaching an email to another, newly encrypted email.
• Fixed an issue where an AIP-related error appeared after a child label is added and scoped to Groups & Sites.
• Fixed an issue where the Delete Label icon didn't appear in the Outlook classification bar when mandatory labeling is enabled across Office, but not in Outlook.
• Fixed an issue where Excel didn't close completely when both the AIP add-in and other add-ins are running.
• Fixed an issue where Outlook failed to send a message with embedded images in rich-text with rules for pop-ups in Outlook configured.
• Fixed an issue where the AIP add-in failed to load in Office apps with language related errors.
• Fixed an issue to prevent errors from occurring when removing protection from a PST file with special characters.
• Fixed an issue where extra draft emails were kept while working with Outlook in Online mode.
• Fixed an issue where popup messages were displayed, prompting users to save changes even when no changes were made, when working with Outlook in Online mode.
• Fixed an issue where emails to external guest users couldn't be sent if collaboration rules for popup messages were configured.

Version 2.12.62.0

Unified labeling scanner and client version 2.12.62.0

Supported through 09/30/2022

Released 08/02/2021

This version includes the following new features, fixes, and enhancements for the unified labeling scanner and client:

Built-in co-authoring support

Microsoft 365's co-authoring features are now supported directly in the main Azure Information Protection unified labeling client installation, for enabled tenants.

Co-authoring for Office apps enables multiple users to edit documents that are labeled and encrypted by sensitivity labels.

Support for DKE labels with user-defined permissions

This version of the unified labeling client and scanner supports DKE labels with user-defined permissions in Word, Excel, and PowerPoint.

For more information, see Azure Information Protection tenant keys and Microsoft Purview Double Key Encryption.

Client usage logging in the Windows event log

The unified labeling client now logs user activity to the local Windows event log.

AIP scanner: General availability support for DLP policies

Microsoft 365 Data Loss Prevention (DLP) policies are now supported with the Azure Information Protection unified labeling scanner directly in the main installation instead of a dedicated version only.

• Using a DLP policy enables the scanner to detect potential data leaks by matching DLP rules to files stored in file shares and SharePoint Server.

• Enable DLP rules in your content scan job to reduce the exposure of any files that match your DLP policies.

  The scanner can reduce file access to data owners only, or reduce exposure to network-wide groups, such as Everyone, Authenticated Users, or Domain Users.

• Scanning your files with DLP rules enabled also creates file permission reports. Query these reports to investigate specific file exposures or explore the exposure of a specific user to scanned files.

Settings for enforcing or testing the DLP policy are configured in the Microsoft Purview compliance portal.

For more information, including licensing requirements, see:

• Configure a DLP policy in the AIP scanner
• Learn about the Microsoft 365 data loss prevention on-premises scanner, in the Microsoft 365 documentation
• Get started with the data loss prevention on-premises scanner
• Use the Microsoft 365 data loss prevention on-premises scanner

Fixes and improvements - version 2.12.62.0

• Fixes for errors where AIP didn't load if a policy fails to parse parsing. Fix provided by updates to the Microsoft Information Protection (MIP) SDK.

• Fixed possibly incorrect method values in New label audit logs for Outlook events.

• Fixes for possibly incorrect label and labelBefore values in Change protection audit logs.

• Fixes for errors where documents were not saved because of edits made in the labeling metadata and lack of permissions.

• Fixes for possible crashes when running PowerShell cmdlets. Fix provided by updates to the Microsoft Information Protection (MIP) SDK.

• Fixed errors where justification popup messages didn't appear in Outlook.

• Fixed errors where the AIP add-in in Outlook caused an error message to appear, if a message file that was saved locally was opened, closed, and then opened again.

• Fixed errors where visual markings were not refreshed as expected after changing a file's label to a label with no content markings.

• Fixed errors where audit logs were not sent when a default label is applied to a document.

• Fixed issues for content markings in Outlook, which can be duplicated.

• Fixed issues where deferred messages wouldn't be sent in Outlook when a deferral rule set is defined and the AIP client is installed.

• Fixed issues where customized Outlook popup messages didn't display correctly when an image is found in the email signature.

• Fixed issues where Change protection audit logs were not sent as expected when a label is removed in Outlook.

Version 2.11.58.0

Unified labeling scanner and client version 2.11.58.0

Supported through 02/08/2022

Released 04/29/2021

This version includes the following new features, fixes, and enhancements for the unified labeling scanner and client:

• Scanner usage logging in the Windows event log
• Scanner diagnostics tool improvements
• Improved scanner details output
• Updates for the scanner's supported information types
• Fixes and improvements

Scanner usage logging in the Windows event log

The unified labeling scanner now logs user activity to the local Windows event log.

For more information, see Usage logging for the Azure Information Protection scanner.

Scanner diagnostics tool improvements

With the upgrade to version 2.11.58.0, running the Start-AIPScannerDiagnostics cmdlet with the Verbose parameter prints the last 10 errors from the scanner log.

To print more or fewer errors, use the new VerboseErrorCount parameter to define the number of errors you want to print.

For more information, see Troubleshooting using the scanner diagnostic tool.

Improved scanner details output

The unified labeling on-premises scanner has improved outputs for the following cmdlets:

Cmdlet	Improvement
Get-AIPScannerStatus	Previously, running the Get-AIPScannerStatus command provided only high-level details of the scanner cluster status, without details per node in your cluster. Now, you can use the NodesInfo variable and the Verbose parameter to drill down into more levels of detail for each node. For more information, see the Verify scanning details per scanner node and repository.
Get-AIPScannerConfiguration	Running the Get-AIPScannerConfiguration now provides details about the current scanner configuration in addition to the online configuration settings.

Updates for the scanner's supported information types

Beginning with version 2.11.58.0, the following sensitive information types aren't scanned by the unified labeling scanner.

If you have sensitivity labels that use these sensitive information types, we recommend that you remove them.

• EU Phone Number
• EU GPS Coordinates

Fixes and improvements (2.11.58.0)

The following fixes were delivered in version 2.11.58.0 of the Azure Information Protection unified labeling client and scanner:

• Improvements in loading time for the AIP add-in in Office apps.

• Fixed issues in Outlook where protection wasn't removed when the label was removed, in some edge cases.

• The PowerPointRemoveAllShapesByShapeName advanced setting no longer requires that you also define the ExternalContentMarkingToRemove setting. Now you can define the PowerPointRemoveAllShapesByShapeName advanced setting on its own.

• Fixed an issue where an empty option would appear on customized Outlook popup messages when only two options for the user to select were configured for the popup message.

• Fixed issues for opening protected .jt files in the AIP Viewer app.

• Size limits for protecting files using the File Explorer and PowerShell are now updated.

• Fixed issues in parsing sensitivity label policies.

Version 2.9.116.0

Unified labeling scanner and client version 2.9.116.0

Released 02/08/2021

Supported through 10/29/2021

Fixed issues

Users are now able to view protected files as expected in the following scenarios:

• When protected files are shared with users who don’t have an AIP policy configured, such as external users. This issue occurred only with the AIP Viewer app.

• When content with a scoped label is shared with users or groups not included in the label's scope. This issue had occurred both with the AIP Viewer app and when viewing or classifying the shared content via the File Explorer.

For more information, see the AIP unified labeling client user guide.

Next steps

For more information, see:

• Compare Azure Information Protection and MIP built-in labeling
• For users: Download and install the client
• For admins: Azure Information Protection unified labeling client administrator guide

For information about new features in the Microsoft Purview compliance portal, see:

• What's new in Microsoft 365 compliance?
• Microsoft 365 roadmap