Release

21.01.2021

Compatibility

The following client versions are compatible with AdminClient version 8.12:

  • Windows Client Version 8.12.0
  • WebClient version 8.12.0
  • Password Safe Mobile Apps 1.19

New

FullClient

  • When an organisational unit is finally deleted, the view is automatically reloaded.
  • A typing assistance for passwords has been integrated.
  • When configuring the Google Authenticator, the secret is also displayed.
  • User settings have been extended by the options for password-less login.
  • Users can log in using a smartcard.
  • After entering the username, the corresponding profile picture is displayed – if stored.
  • When a new database certificate is created, all login factors encrypted with it are reset.
  • The session list of connected devices shows Android and iOS apps including the respective version.
  • The right “Apend” can be selected only in the rights filter of the “Organisational units” module.
  • Open tabs can be closed using “CTRL + W” or the middle mouse button.
  • Records can also be duplicated without the permission “can create personal records” as long as the target is not the own user.
  • Tooltips for password import have been added.
  • User settings can also be inherited to Active Directory profiles.

WebClient

  • A typing assistance for passwords has been integrated.
  • Users can log in using a FIDO2 token.
  • User settings have been extended by the options for password-less login.
  • After entering the username, the corresponding profile picture is displayed, if stored.
  • The secret shown during the configuration of the Google Authenticator can be copied to the clipboard.
  • When a new database certificate is created, all login factors encrypted with it are reset.
  • Configuration options for password notifications have been adapted.
  • When a SAML application is started, a notification is triggered.
  • The right “Apend” can be selected only in the rights filter of the “Organisational units” module.
  • User settings can also be inherited to Active Directory profiles.

AdminClient

  • If a database certificate no longer exists, a new one can be created.
  • When creating a connection certificate during the basic configuration, several alternative applicants can be entered.
  • The session list of connected devices shows Android and iOS apps including the respective version.
  • Networks can be specified in which a configured second factor is not required for login.
  • An alternative Crypto Service Provider can be specified for logging in using a smartcard.

Add-ons

  • The login process of the add-on has been optimised.
  • The error message for autofill in case of multiple passwords for one website has been adapted.

Android App

  • A typing assistance for passwords has been integrated.
  • A password generator for creating secure passwords has been integrated.
  • Users can create new objects in the tab “All passwords” and assign them to themselves.

iOS App

  • A password generator for creating secure passwords has been integrated.
  • Users can create new objects in the tab “All passwords” and assign them to themselves.

h4 LightClient

  • A typing assistance for passwords has been integrated.

Improvements

FullClient

  • The display of tags in the list view has been optimised.
  • The process for resetting the second factor – if activated – has been optimised.
  • If two AD profiles with the same domain exist and one of them is deleted, the second one will still work.
  • The configuration of the second factor – if required – has been optimised.
  • If a user wants to authenticate, a configured session timeout is ignored.

WebClient

  • The process for resetting the second factor – if activated – has been optimised.
  • Configuration of the second factor – if required – has been optimised

AdminClient

  • The export of database certificates has been optimised.

Add-ons

  • The automatic filling out of login masks has been optimised.

LightClient

  • If a user is searching for an organisational unit that is already open, he switches directly to the corresponding tab.

LightClient in the Web View

  • The view of the LightClient in the web view has been optimised for mobile devices.

Fixed

FullClient

  • The conext menu in the list view has been optimised.
  • The configuration of a one-time password has been optimised.
  • The configuration of a password reset has been optimised.
  • The configuration of the Discovery Service Tak has been optimised.
  • The version from which the option is available is shown in the user rights.
  • The configuration of the filter has been optimised.
  • The colour themes “Office 2019 Black”, “Dark Gray“and “Metropolis Dark” have been adjusted.
  • Notifications for objects of other users can only be enabled with the “Writing” permission.
  • After successful import of passwords, the view is automatically reloaded.
  • The time until automatic logout of the WebViewer has been limited to a maximum of one day.
  • Each member of a role can add other users to the role independet of the permission he has to the user.
  • When switching to another module, any filter settings are no longer applied.
  • The seal overview has been optimised.
  • The clipboard action in the ribbon are only available with a selected password.
  • The configuration of system tasks has been optimised.
  • The buttons for overwriting and inheriting permissions are only displayed if the permissions have been edited.
  • When moving passwords to other organisational units, the respective owner rights are retained.
  • The tag management in rights templates has been optimised.
  • If more than one instance is opened, all further instances remain connected to the application server until logoff.
  • In case of a SSO application with several associated passwords, you can choose between them.
  • The last active second factor can only be deactivated if the option “Second factor is required” is also deactivated for all organisational units.In the “Roles” module, the list view is automatically updated after editing a role.
  • If a document saved in Password Safe is edited and exceeds the maximum permitted file size, a corresponding error message appears when saving.
  • If the “Edit Tab after opening”“ option is disabled, the two options “Remove configuration” and “Enter application” in the ribbon are enabled when “Edit” is clicked in the “Applications” module.
  • If the main window is scaled, the footer area is also scaled accordingly.
  • When trying to print a sealed password despite having print permission, a corresponding error message appears.
  • It is not possible to assign users or organisational units to a single user with drag & drop.
  • When a new document is created, the organisational unit of the creator is prefilled.
  • Password policies cannot be set for multi-line text fields in passwords.
  • The view of the import summary has been optimised.
  • The report view in the FullClient has been optimised
  • The form field for the user password has been adapted.
  • If a user tries to remove another user’s permission key in “Permissions”, an error message is displayed stating that this action is not possible.
  • If no application is selected, the “Connect password” button is disabled.
  • Temporary permissions for ‘Everyone’ are now saved correctly in permission templates.
  • A user can see a sealed password in the quick view when he is not affected by the seal.
  • Names of the filter groups in the “Discovery Service” module have been harmonised.
  • If a selection of forms is to be printed in the list view, the number of printable form fields is displayed in relation to the number of all fields with read access.
  • If the user right “Can carry out batch processing for permissions based on a filter” is activated, the rights of a user are reduced for all filtered passwords.
  • When importing organisational units, they can only be subordinated to other organisational units.
  • Moving an object generates a new logbook entry “Moved”.
  • During Copy & Paste of hostname and servicename in a script for a password reset all spaces are removed.
  • The tab name of a newly created object is retained if “Reload all data” is clicked during the creation.
  • When you create a new report, the tab name is named accordingly.
  • The counting of user licenses when using Active Directory has been adjusted.
  • The process of capturing applications has been adapted.
  • If the seal for a password with protection is broken, a corresponding note on the protection appears.
  • The context menu in the module “Passwords” has been adapted.
  • Users without appropriate rights can’t predefine rights for an organisational unit.
  • New columns have been added to the system task list view.
  • The filter group “Tags” has been adapted.
  • When editing an open seal, you will be prompted to assign a new password.
  • In the module“Notifications”, seal templates can be opened directly using the “seal template” button.
  • The preview of a document can only be opened with the appropriate right.The context menu in the user rights /user settings has been adapted.
  • The configuration of the “on use” notification has been extended.
  • The summary of an Active Directory import shows the correct assignment of users to the corresponding organisational units.
  • An error handling for final deletion of users has been adapted.
  • Documents can also be filtered by file name extension.
  • Changed form field types are recognized during a form change.
  • The filter group “Rights” in the module “Passwords” have been adapted.
  • If users in the Active Directory are moved to another organisational unit, they will also be moved accordingly during the next synchronisation.
  • The behavior of the buttons in the ribbon in all modules has been harmonised.
  • Only users with the permission “Add” can create new organisational units during an Active Directory import.
  • When empty groups are imported from the Active Directory, the corresponding permissions and memberships are set.
  • A user cannot edit the memberships of other users in roles without appropriate rights.
  • The scaling options of window size of RDP applications have been adapted.
  • When downgrading to an edition with lower functionality, modules that are not included in that edition will no longer be displayed.
  • The input mask for new password guidelines has been adapted.
  • If a password is opened whose form has been changed in the meantime, a message appears when closing the form to indicate whether the changes should be discarded.
  • In formulars, new fields can be added with the name of deleted form fields.
  • The objects displayed in a filter group are updated when a saved filter is opened.
  • The local user “.\user” of the target system now also works for RDP connections.
  • Invalid characters in the name of a multi-factor authentication are filtered out.
  • If an Active Directory synchronisation was not successful, a corresponding error message is displayed.
  • The functionality has been optimised when minimising RDP applications in Password Safe.
  • When an Active Directory user is imported, the associated description is also imported.
  • Any number of passwords can be assigned to an application without the client freezing when the passwords are displayed.If the license module is missing, an error message is displayed in the logbook for the corresponding system task.
  • If a user edits the permissions of several roles simultaneously, his membership status remains unchanged until he explicitly edits it.
  • An active filter is reset when creating a new report.
  • Keepass folders can only be imported in organisational units, not in users.
  • For web applications the URL field is a mandatory field.
  • When Windows is shut down, any active SSO Agent or Full Client Sessions is automatically terminated.
  • The filter group “Validity state” has been optimised.
  • No error message appears when viewing the metadata of linked documents.
  • Despite repeated double-clicks on a notification / logbook entry, the object is only opened once.
  • When importing applications, the correct date for “valid until” is imported.
  • A click on the blue arrow opens the context menu for editing the field contents of a password regardless of whether the tab can be edited immediately or only by clicking on “Edit” in the ribbon.
  • Negating an organisational unit filter also displays users outside organisational units.
  • The number of data records has no influence on the login to the WebViewer.
  • Adjusting the window size of an RDP or SSH connection no longer causes logbook entries.
  • Filter adjustments made for a report are retained after the report is saved.
  • Offline synchronisation is performed according to the possible settings.
  • The checkbox “Restricted user” is greyed out if the “Edit” right is missing.
  • Logbook entries can be filtered by “Execution started” or “Execution finished”.
  • When a field type is changed in a form, the corresponding default value changes too.
  • Import of CSV files reworked
  • The preview of the import wizard in all modules has been harmonised.
  • Notification messages in form fields have been adapted.
  • Deactivated users with active MFA can log into Password Safe after activation via synchronisation.
  • Open RDP connections do not disconnect when switching to another module and back.
  • Shortcuts “CTRL+ALT+S” and “CTRL+ALT+V” enter username and password in the corresponding fields.
  • Buttons to change passwords and configure OTPs are grayed out for restrictive users.
  • The context menu has been adjusted systemwide.
  • The sisplay error in read-only mode of a Discovery Service task has been fixed.
  • When entering the secret for a one-time password, the focus is set on the field.
  • With the appropriate permission “Can create new RDP applications”, RDP applications can be duplicated.
  • The column editor now also works with a scaling greater than 100%.
  • The notification of an already broken seal is also displayed when editing an affected password.
  • The seal release process has been optimised when using short validity periods.
  • The cross-client login remains active when opening the OfflineClient.
  • When a user adjusts permissions on passwords using group permissions, an error message appears for the passwords to which the user has no permission.
  • When creating a new role using “CTRL+N”, the focus in the tab is set to the first input field.
  • The calculation of the password quality has been optimised.
  • Passwords can only be duplicated with the appropriate right “can create passwords”.
  • Users can search for tags and assign them to objects even without the right “Can manage tags”.

WebClient

  • The sealing process has been optimised.
  • When moving passwords to other organisational units, the respective owner rights are retained.
  • Notifications are also displayed in the mobile view of the browser.
  • The tag management in rights templates has been optimised.
  • In case of a SSO application with several associated passwords, you can choose between them.
  • Graphical adjustments in the Active Directory profile have been made.
  • The last active second factor can only be deactivated if the option “second factor is required” is also deactivated for all organisational units.
  • The WebClient can be reloaded using “F5”, even if an organisational unit is selected in the “Organisational Structure” module.
  • If there are objects in a list for which the print permission is not available, a corresponding error message appears when you try to print the list.
  • Error messages are only visible if a user is logged in.
  • When a seal is broken, the corresponding password is displayed in the notification module when the “Password” button is clicked and the seal overview is displayed when the “Seal” button is clicked.
  • If a user tries to remove another user’s permission key in “Permissions”, an error message is displayed stating that this action is not possible.
  • Search results in the “organisational structure” module are displayed as soon as you start typing the search term.
  • Multiple tags cannot be edited at the same time.
  • Authorized users can print sealed passwords.
  • If no application is selected, the “Connect password” button is disabled.
  • If the user setting “Mark notifications as read when opening them” is activated, notifications opened in the quick view are marked as read.
  • The description field is displayed in the quick view of all items.
  • The quick view of notifications shows the date and time.
  • Moving an object generates a new logbook entry “Moved”.
  • The context menu in the “Notifications” module has been modified.
  • The quick view in all modules has been harmonised.
  • The button “Delete passwords” in the ribbon in the module “Applications” is only active if there are corresponding linked passwords.
  • In the case of nested organisational units, the topmost one cannot be moved to a lower-level one.
  • Duplicated applications are assigned to the organisational unit or user that duplicates them.
  • Applications can be marked as public or personal.
  • Color differentiation of temporary permissions have been adapted.
  • The sorting of the toolbar groups has been adapted.
  • If users in the Active Directory are moved to another organisational unit, they will also be moved accordingly during the next synchronisation.
  • The grouping of passwords by date has been optimised.
  • When downgrading to an edition with lower functionality, modules that are not included in that edition will no longer be displayed.
  • When creating a new document in an organisational unit, an existing standard rights template should be selected and entered accordingly.
  • The protocol “lns://” is supported.
  • The list view in the modules “Notifications” and “Logbook” has been harmonised.
  • When creating a new organisational unit, it will be displayed in the structural filter when switching to the “Passwords” module.
  • Any number of passwords can be assigned to an application without the client freezing when the passwords are displayed.
  • The behavior when clicking on notification icon in the mobile view has been adjusted.
  • The view in the module “Notifications” has been customized.
  • Users can only see the settings of other users with the right “Authorise”.
  • When saving with “ALT + S”, all form fields are saved.
  • The text about the number of selected objects in the list view has been adjusted.
  • Multi select using “SHIFT” and arrow keys works in all modules.
  • Editing of rights will only take effect after saving.
  • For web applications the URL field is a mandatory field.
  • The filter group “Validity state” has been optimised.
  • Use “ALT + S” to save new objects in the “Organisational Units” module.
  • Newly created users or organisational units are marked in the list view after saving.
  • When a document is created, a log entry “New” is written.
  • Overlong texts are wrapped in delete confirmation.
  • Negating an organisational unit filter also displays users outside organisational units.
  • Tooltips when creating a new document corrected.
  • Buttons to change passwords and configure OTPs are grayed out for restrictive users.
  • Width of the quick search have been adjusted.
  • The calculation of the password quality has been optimised.
  • Users can search for tags and assign them to objects even without the right “can manage tags”.

Server

  • The migration from V7 to V8 has been optimised.
  • LightClient licenses are only counted in the Enterprise Plus Edition.
  • Improved license validation for virtual machines without hardware IDs.
  • When importing passwords that contain inverted commas, they are recognised as such.
  • During the Active Directory import, only users with a stored e-mail can be imported.
  • The “admin role” is translated correctly when creating a database using an English template.
  • When editing the rights of several roles, an error message appears when adding new users if the editor himself is not a member of one or more of these roles.
  • Database profiles can be distributed to users via the registry.
  • Users deactivated in Active Directory are no longer synchronised with Password Safe.
  • Changes to the Emergency WebViewer are active immediately after saving.
  • Discovery Service also scans the services on the server on which it was started.

AdminClient

  • The “admin role” is translated correctly when creating a database using an English template.
  • If the user has no permission, an error message appears when trying to create a backup profile.
  • Invalid characters in the database name are replaced by an underscore when a backup is created.
  • IP blocks can be edited in the Login locks overview.
  • The configuration settings for “nginx” server has been updated.
  • Users are highlighted in the database user view according to their status.
  • When importing a database backup, the entered credentials are used for login.
  • The backup functionality has been optimised.
  • The dialog for the migration from V7 to V8 has been adapted.
  • The context menu has been adjusted systemwide.
  • The error message at expired password of an AdminClient user has been adapted.
  • If the license check for a particular database fails in host mode, the error message displays the database name.
  • The local time is displayed correctly.

Add-ons

  • The safari add-on has been optimised.
  • Only the passwords of the exact domain are suggested. Passwords of domains that are part of them are no longer suggested.
  • The process of creating a new password via add-on has been optimised.

Android App

  • The automatic logout has been optimised.
  • The synchronisation with the Password Server has been optimised.
  • The typing assistance has been optimised.
  • Apps on a self-defined blacklist are excluded from autofill.When creating a password, each input field is validated directly, and any errors are displayed next to the fields or in the fields.
  • The scrolling behavior in the mobile App has been optimised.
  • Changes to the configuration by switches are saved.

iOS App

  • The automatic logout has been optimised.
  • The synchronisation with the Password Server has been optimised.
  • The typing assistance has been optimised.
  • When creating a password, each input field is validated directly and any errors are displayed next to the fields or in the fields.
  • The scrolling behavior in the mobile App has been optimised.
  • The performance of the iOS App has been optimised.

API

  • Error messages when calling functions via the API have been adapted.
  • Changing the user password is only possible by entering the old password first.

SSO Agent

  • When the agent is started minimized, a login window opens when clicking “Login”.
  • Data from the offline database can be filled into the corresponding applications using the SSO agent.
  • When Windows is shut down, any active SSO agent or FullClient sessions are automatically terminated.
  • The login to the SSO agent has been optimised.
  • When restarting an active SSO agent, the login screen is displayed.
  • The context menu has been adjusted systemwide.

OfflineClient

  • The error messages during synchronization has been adapted.
  • Passwords are also checked in the OfflineClient according to configured password policies.
  • The context menu has been adjusted systemwide.

LightClient

  • The ontext menu has been adjusted.
  • Possible error messages when logging off have been adapted.

LightClient in the Web View

  • When searching for SAML applications, the number of found applications is displayed.
  • Shortcut can beused to save a data set.

Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.