Advanced Authentication 6.4 Service Pack 1 Patch 1 includes enhancements, and resolves several previous issues.
Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the Advanced Authentication forum on NetIQ Communities, our online community that also includes product information, blogs, and links to helpful resources. You can also post or vote for the ideas of enhancement requests in the Ideas forum.
For more information about this release and the latest release notes, see the NetIQ Advanced Authentication Documentation page.
If you have suggestions for documentation improvements, click comment on this topic at the bottom of the specific page in the HTML version of the documentation posted at the NetIQ Advanced Authentication Documentation page.
Advanced Authentication 6.4 Service Pack 1 Patch 1 provides the following:
Advanced Authentication 6.4 Service Pack 1 Patch 1 includes the following enhancements:
The following enhancements have been added to the FIDO2 method:
Ability to Enroll Resident Credentials
The administrator can allow users to enroll the FIDO2 method and store the Resident Credentials (security key) on the FIDO2-compliant device (YubiKey). With Resident Credentials, users can experience seamless login without specifying their username and password.
Username-less Login Support
Advanced Authentication extends the FIDO2 method to support the username-less authentication to the Web Authentication events. The enrolled FIDO2 card contains the username. When the user taps the card, the username is filled in the respective field automatically. To configure the username-less authentication, three options have been introduced in the FIDO2 method.
Ability to Disable the PIN Prompt
Advanced Authentication facilitates the administrator to mandate or hide the PIN prompt when users enroll, test and authenticate with the FIDO2 method.
For more information, see FIDO2 in the Advanced Authentication - Administration guide.
This release provides ability to add the subaccounts of Twilio Parent account. With subaccounts, you can add Country Codes based on the customer’s (SMS receivers) geographic location. The subaccounts distinguish the usage based on team, customer or product, and provides clear billing data. Also, allows resource (phone number) mapping.
For more information, see SMS Sender in the Advanced Authentication - Administration guide.
This release introduces the Enable client chain selection option in the Web Authentication policy to allow the third-party service providers to select a preferred chain for any client, such as Windows Client, Mac OS X Client, and Linux PAM Client workstation. Then, route users to the selected chain during authentication.
For more information, see Enabling the Client Chain Selection in the Advanced Authentication - Administration guide.
Advanced Authentication 6.4 Service Pack 1 Patch 1 release addresses CVE-2023-24468.
This release includes the following software fixes:
|
Component |
Description |
|---|---|
|
Administration |
When a user sets Enable linked chains to ON in the Linked Chain policy, then the Required Chain list in the New Chain does not display all the available chains. |
|
Administration |
On the New Enrollment Portal, enrollment of the U2F method fails on the following browser:
|
|
Administration |
The Enable event selection option is modified to Enable client event selection in the Web Authentication policy. |
|
Administration |
The Disable Offline Authentication option is modified to Disable Offline OTP Options in the Smartphone method. |
|
Smartphone |
When a user tries to authenticate with the FIDO2 method, a prompt to specify the PIN (User Verification) is not displayed on the Android devices. |
|
Smartphone |
When a user attempts to authenticate with the NetIQ Advanced Authentication iOS smartphone application by using the facial recognition, the application does not identify the face and prompts the user to re-authenticate. Users are experiencing infinite authentication loop. |
|
Smartphone |
When a user sets the Face ID option to ON in the NetIQ Advanced Authentication iOS smartphone application settings for face recognition authentication. Later, the user is unable to set the Face ID option to OFF. |
|
Smartphone |
When a user sets the smartphone language to Arabic, the NetIQ Advanced Authentication iOS smartphone application stops working. |
|
Windows Client |
While connecting to the remote desktop on the Windows Client, the Advanced Authentication Credential Provider does not display the chains that require Device Service for the elevated access. |
You can directly upgrade to Advanced Authentication 6.4 Service Pack 1 Patch 1 from 6.4.1.
NOTE:The following is the recommended upgrade sequence:
Advanced Authentication servers
Plug-ins
Client components
Any change in the upgrade sequence is not supported.
NOTE:The RAM requirements of Advanced Authentication have been changed in 6.4 as follows:
Minimum: 8 GB per server.
Recommended: 12 GB per server
Before upgrading your Advanced Authentication cluster to 6.4, ensure that the environment complies with the new requirements.
For more information, see Advanced Authentication System Requirements.
Advanced Authentication 6.4 Service Pack 1 Patch 1 does not have any known issue.
Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.
For detailed contact information, see the Support Contact Information website.
For general corporate and product information, see the NetIQ Corporate website.
For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.
© Copyright 2023 Micro Focus or one of its affiliates.
The only warranties for products and services of Micro Focus and its affiliates and licensors (“Micro Focus”) are as may be set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Micro Focus shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice.
For additional information, such as certification-related notices and trademarks, see https://www.microfocus.com/en-us/legal.