---
title: PingFederate 11.0.4 (August 2022)
description: Fixed PF-31795
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1104
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1104.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 1, 2024
section_ids:
  resolved-issues: Resolved issues
  masterkeyencryptor-and-cluster-replication: MasterKeyEncryptor and cluster replication
  rule-matching-for-fragment-nodes-and-nullpointerexception: Rule matching for fragment nodes and NullPointerException
  zero-byte-archives: Zero byte archives
  jwt-access-token-lifetimes: JWT access token lifetimes
---

# PingFederate 11.0.4 (August 2022)

## Resolved issues

### MasterKeyEncryptor and cluster replication

Fixed PF-31795

When PingFederate uses a custom MasterKeyEncryptor that relies on an SSL call to an external service, cluster replication no longer causes cascading failures because PingFederate cannot open Java key store files.

### Rule matching for fragment nodes and NullPointerException

Fixed PF-31929

When using rule matching for fragment nodes, PingFederate no longer raises a NullPointerException (NPE) if a fragment fails.

### Zero byte archives

Fixed PF-31966

Resolved an issue that caused PingFederate to generate a zero byte archive when it couldn't read a file in the `<pf_install>/pingfederate/server/default/data` directory.

### JWT access token lifetimes

Fixed PF-31989

When using centralized and dynamically rotating keys for OAuth and OpenID Connect, PingFederate now prevents you from setting the JWT access token lifetime to be longer than the `dynamic-rotation-period-in-days` specified in `<pf_install>/pingfederate/server/default/data/config-store/jwks-endpoint-configuration.xml`.