Release
13.09.2021
Compatibility
The following client versions are compatible with AdminClient version 8.13.5.25731
- Windows Client Version 8.13.5.25731
- WebClient Version 8.13.5.25731
New
FullClient
- It is possible to have reports generated on the changes made by Active Directory imports.
- The function “Exclude last X passwords” has been removed from the password policies.
- The login process has been adapted to make it more difficult for possible attackers to guess valid usernames.
- Users can duplicate passwords only if they are also authorized to the corresponding form.
- When creating a new AD profile, the two flags “Secure” and SecureSocketsLayer” are activated by default.
- Active Directory objects can now be created or deleted in Password Safe simply by belonging to an Active Directory group.
- The email notifications include the organisational unit where the Secret is located.
- The tab with the list view in each module can’t be closed.
WebClient
- The login process has been adapted to make it more difficult for possible attackers to guess valid usernames.
- The opening and closing of the filter have been optimised and the mobile view adapted.
- Users can duplicate passwords only if they are also authorized to the corresponding form.
- A direct search for Active Directory objects has been integrated.
- Active Directory objects can now be created or deleted in Password Safe simply by belonging to an Active Directory group.
- The email notifications include the organisational unit where the Secret is located.
- The tab with the list view in each module can’t be closed.
Server
- TLS 1.2 and 1.3 are the two standard versions for encrypted communication.
- If a user changes his password, all sessions that are still open are terminated.
- The Discovery Service Scan has been optimised.
- Password Safe is now DualStack capable.
AdminClient
- The timeout of an active session can now be set individually for each client.
LightClient
- The login process has been adapted to make it more difficult for possible attackers to guess valid usernames.
LightClient in the Web View
- The login process has been adapted to make it more difficult for possible attackers to guess valid usernames.
Improvements
FullClient
- SSH connections using a key file are easier to configure.
Browser Extensions
- If the IP filter is activated, a possible second factor is no longer queried.
Fixed
FullClient
- The default form can be reset in the global user settings.
- The DesktopClient only prevents Windows from shutting down if changes are not saved.
- The widget “My Team” in the dashboard shows all members of the selected organisational unit.
- A translation error in the report “Logbook entries” has been corrected
- RDP sessions in the external window can also be displayed in full screen.
- When importing passwords, only the user himself has permission for the passwords.
- The keyboard shortcuts work again in RDP sessions.
- The cross-client login works again.
- Authentication using Kerberos is possible again.
- Notifications can only be seen by the user who configured them.
WebClient
- The default form can be reset in the global user settings.
- The form of an existing password can only be changed with the right “Authorise” or “Delete”.
- The quality of a password is checked again when the form is changed.
- The export of passwords or organisational units has been optimised.
- When selecting possible forms for creating a password, you can navigate through the forms using the scrollbar.
- During the AD import, all sub-objects are also selected when an object is selected and then synchronised.
- Authentication using Kerberos is possible again.
- The link to the Firefox Add-on Store now uses the https:// protocol
- Notifications can only be seen by the user who configured them.
AdminClient
- Databases deleted in the MSSQL Server Management Studio are deactivated in the AdminClient.
Browser-extensions
- Logging in via the SSO agent works if the browser extension is configured accordingly.
- The auto-fill via the SSO Agent has been accelerated.
SSO Client
- The cross-client login works again.
- The auto-fill has been accelerated.
LightClient
- Authentication using Kerberos is possible again.
LightClient in the Web View
- In the password generator – if any have been configured – the corresponding password policies are available for selection.
- Users with an exclusive LightClient license can move passwords to other organisational units.
- Authentication using Kerberos is possible again.
- Users with LightClient-only licenses can tag passwords.
Setup Check hashes (SHA-512 Hash)
German Server Setup (pss8.13.5.25731-de.msi)56cb7260d587d50afceca87ef53772c3106ec192de88695b247495022c768e03ac9a6a4e5e273f74c98d492e00ebb6f7134ff457cc80cd548e0aa90060b708b1
English Server Setup (pss8.13.5.25731-en.msi)05fb18e29549b94f8b238cbe1904d44240af7bcd48a802d64ea9bb50d6e9149daffc46ceae942771de772496d7cd1d140bc55805606c5227cd68b755fc0c98d4
German Client Setup (psc8.13.5.25731.msi)cd4a82995f45d19d1d4aa306025e296b1142fbd74c0da1ffbd2b8a3078ffeb9a58bbcb86f732d9f411c5fa0becb29ede937b56ecb20a40d81b16a2e4519b39de
English Client Setup (psc8.13.5.25731-en.msi)473ef56a4d9f1cf12800437bdf869cbf7a5b4993079f9cd401206344c07285838c02e75d108f68fa62de126f935809556c2ae556bc1d49bbec2c0abb1beb1198