Windows Components 3.7

New Veridium Windows components implement client support for new functionalities and fixes for known issues:

Credential Provider:

New features:

• Added support for certificate authentication

• Allow users to authenticate using a password when user is not yet onboarded to Veridium. To Enable this feature, we need to set registry key: AllowPasswordAuthForNonOnboardedUsers:DWORD=1

• Added support for the new PIN length change campaign functionality.

• Improved protection of SSO Tokens (SAML or OIDC) in correlation with Windows login and browser user session.

• QR code can be automatically renewed when AutoRefreshQR:DWORD=1

• There is a option on RDP to enforce to use Veridium CP for incoming authentication calls.

• There is a new option for retry mechanism for communication between CP and Bops Logon service. New registry keys are introduced to control number of retries and delay between them (in ms):

  • BopsLogonServiceDelay:DWORD=400

  • BopsLogonServiceRetryCount:DWORD=5

Bug fixing:

• fixed an issue in Credential Provider where users could log in using Yubico OTP authentication method even if the User Pin provided was incorrect (user auth, policy, security)

• Fixed a bug in Credential Provider that caused a QR freeze of the QR Offline authentication method was user in Shell Extension (user auth)

• Fixed the bug - user can not mix offline authentication types - between QR Offline and FIDO Offline

• Fixed a bug that caused Offline QR authentications to not be counted against the maximum retry parameter value.

• QR Offline sessions are correctly shown on Veridium Server once user gets online again.

• “See Text” button is now available also in Password change form

• Session expired feature is now available also for External token authentication

• The box for the lost code input is now cleared after a failed authentication

• “Skip” button in PIN change campaign did not allow user to authenticate afterwards.

• Fixed a bug when BOPS_URL is reachable but not correct), CP switched to QR offline instead of using BOPS_EXTERNAL link

RAEP:

• RA supports 4k keys on EJBCA

• Support of Build attributes from AD (not accepting attributes from certificate request) on Microsoft CA

Packages

Windows Credential Provider v.3.7 build 283: