2026.10.2. Additional recovery improvements
are being validated for an upcoming release. Contact support to confirm whether
your installed version contains them.
What this means
Your sign-in is renewed in the background. A renewal can replace the previous sign-in credential. If its answer is lost, a later renewal may be refused. A sleeping Mac can wake briefly for maintenance. On affected versions, time asleep counted against a renewal’s waiting period. A slow answer could be lost even though the sign-in service had already issued a replacement. Temporary network trouble, unavailable saved sign-in information, or a slow connection to the app can also resemble a sign-out. These conditions do not by themselves mean your account session expired. Support can distinguish them from a confirmed refusal by the sign-in service.What state your Mac is in
Signing out does not remove the Mac’s enrollment or your organization’s policy. While the account connection is unavailable, the Frontegg Portal may show stale information or a device without a signed-in user. Check the app’s protection status separately: a network-inspection problem can affect connections even when your saved sign-in is intact.How to confirm it
Record the exact message, app version, and approximate time. Note whether the Mac had just woken, was locked, or was offline. If you collect diagnostics (Collecting diagnostics) right after it happens, support can check whether your session ended or recovery was delayed.How to recover
If the app says Your session expired, sign in again from AgenShield. If it says it is reconnecting or your saved sign-in is unavailable, unlock the Mac, restore its network connection, and allow recovery to finish. Contact support if the message persists. If your version offers Sign in to repair, that action lets you replace unavailable sign-in information while keeping your saved account until the new sign-in succeeds. A temporary lock does not require this action. Do not remove saved credentials or inspection certificates as a troubleshooting step.Recovery improvements being validated
- Time asleep does not consume a renewal’s response deadline, and renewal happens before account reporting resumes after wake.
- Temporary connection and storage failures preserve your saved user and keep retrying automatically, including after a long outage.
- Delayed answers from an earlier sign-in cannot replace a newer one.
- The app distinguishes unavailable saved sign-in information from a confirmed expired session.