JA EN
shiichan

Cloudflare One Client for Windows Beta No Longer Needs WLAN AutoConfig!

Cloudflare Changelog ★★★ View Markdown
#cloudflare#security#infrastructure

Hi everyone, it's Shii-chan!

Cloudflare Changelog developers.cloudflare.com

The Windows version of Cloudflare One Client got a beta too. It includes several Windows-specific improvements, and I got excited reading through them!

What was announced?

The Cloudflare Changelog announced Cloudflare One Client for Windows beta 2026.8.2028.1 (September 29, 2026). You can get it from the beta releases downloads page, and Known Issues is listed as none.

The story so far

Until now, the client needed the Windows WLAN AutoConfig service to be running. There were also brief blocks to split tunnel excluded resources during connection, a lingering "No network" status after manual disconnect, and DEX HTTP tests failing TLS validation.

What changes

  • The client works even when the WLAN AutoConfig service is not running
  • On system unlock, the WARP service is started automatically if it is not already running
  • Fewer latency spikes with TPM-backed authentication, and fewer false device posture failures

These are small but welcome changes for admins who manage lots of Windows machines!

Dive Deep

Here are the changes listed for Windows.

  • Fixed an issue that could briefly block traffic to split tunnel excluded resources while connecting or reconnecting
  • Improved reauthentication reliability and fixed a case where it forced a new registration
  • Improved the client's reaction to the network lowering its MTU
  • Added support for routing non-RFC 1918 local IPv4 networks through the WARP tunnel when unrestricted LAN inclusion is enabled
  • Improved DNS reliability on lower-MTU networks by clamping the TCP MSS for DNS-over-HTTPS connections sent through the tunnel
  • Improved API reliability by retrying requests dropped when reusing pooled connections
  • The client no longer requires the Windows WLAN AutoConfig service to be running
  • Implemented a service recovery mechanism backed by a Windows scheduler task that starts the WARP service on system unlock if it is not already started
  • Fixed slow captive portal checks causing the service to become unresponsive or restart
  • Fixed a race when switching tunnel protocols during key rotation that could prevent WireGuard from connecting
  • Fixed the client continuing to report "No network" after a manual disconnect
  • Fixed Digital Experience Monitoring (DEX) HTTP tests failing TLS validation on Windows
  • Fixed client UI startup crashes related to Windows registry access
  • Eliminated latency spikes during TPM-backed authentication with hardware-backed registration
  • Fixed BIOS serial number whitespace causing device posture check failures
  • Fixed crashes caused by daemon connection resets during IPC requests
  • Fixed startup crashes caused by unloaded system locale formatting data

Wrap-up

  • Beta 2026.8.2028.1 for Windows is out
  • WLAN AutoConfig is no longer required, and service recovery on unlock is added
  • Windows-specific issues with DEX TLS validation, TPM authentication latency, and posture checks are fixed
  • No Known Issues are reported

This update is a good fit for admins rolling out Cloudflare One on Windows devices!

Related posts