NetIQ Client Login Extension 3.9 Service Pack 1 Release Notes

January 2016

NetIQ Client Login Extension 3.9 Service Pack 1(3.9.1) resolves some of the previous issues. This document outlines why you should install this version.

These improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the NetIQ Identity Manager forums, our community Web site that also includes product notifications, blogs, and product user groups.

The documentation for this product is available on the NetIQ website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Client Login Extension Documentation page.

1.0 What’s New?

The following outline the key features and functions provided by this version, as well as issues resolved in this release:

1.1 Password Policy Link Text

Client Login Extension now facilitates the users to view the password policy before changing their domain passwords through SSPR. The user can click the Password Policy Link on the CTRL ALT DEL Change Password screen to view the password policy configured in SSPR. The default text is “Password Policy” and can be customized in the Client Login Extension Configuration utility. Enabling the Change Password through SSPR option, enables the Password Policy Link Text field.

1.2 Support for IME in the Emergency Access dialog

The IME option is now supported in the Emergency Access dialog to handle the input method of challenge responses in Non-English Characters.CLE now supports storing of Challenge Responses in both English & Non-English characters and Users are able to input the Non-English Characters in the Emergency Access Dialog.

1.3 Support for the Windows 10 Platform

In addition to Windows 7, Windows 8 and Windows 8.1, Client Login Extension now supports both 32-bit and 64-bit versions of Windows 10. Also, emergency access toast notifications have been implemented for Windows 10.

1.4 ZCM and CLE Integration

ZCM and CLE are now integrated to work in congruence. CLE Credential Provider now takes precedence over ZCM CP and notifies ZCM. Now, all SSPR Integration features work with ZCM and CLE integration.

1.5 Enhancements and Software Fixes

NetIQ Client Login Extension includes software fixes that resolve several previous issues.

For the list of software fixes and enhancements in previous releases, see the Release Notes section in the Client Login Extension Documentation page.

ZEN and CLE Integration through CLE CP Notification Framework

Issue: ZEN and CLE were not integrated. ZEN and CLE were not integrated to handle the SSPR integration features. Also, notifications from CLE to ZCM failed for pre-login and post-login events. (Bug 949643)

Fix: The issue is fixed. ZEN and CLE are integrated, and now CLE CP will take precedence over ZCM CP and notify ZCM CP regarding pre and post login events.

The following features are now available to the user without having any impact on the ZCM functionality:1. Force C/R enrollment2. Change Password3. Emergency Access

IME Option is Unavailable in Emergency Access

Issue: The user could not input non-English characters in the Emergency Access dialog as the IME option was not implemented. (Bug 908953)

Fix: The issue is fixed. You can now input non-English characters in the Emergency Access dialog. The IME option supports all languages supported by SSPR.

ActiveX Error Message with New Google reCAPTCHA

Issue: The new reCAPTCHA window was displayed to the user with an “I am not a robot” image. When the user selected this checkbox, a JAVA script was executed that displayed selection boxes of different pictures. The user had to click on the matching pictures. But from the restricted browser, the user would get an error message that ActiveX control could not be displayed. (Bug 941343)

Fix: The issue is fixed. The restricted browser now does not display the error message that ActiveX control could not be displayed.

Change Password Flow

Issue: After enabling the Change Password through SSPR option, the user could not change the password using the Windows password change mechanism before logging into the computer. (Bug 925796)

Fix: The user can now enable the Change Password through SSPR option to switch between SSPR password change mechanism and Windows password change mechanism, before logging and after logging into the computer.

2.0 System Requirements

For information about the system requirements, refer to System Requirements in the Client Login Extension 3.9.1 Administration Guide.

3.0 Installing Client Login Extension 3.9 Service Pack 1

For information about how to install Client Login Extension, refer to Installing the Client Login Extension in the Client Login Extension 3.9.1 Administration Guide.

4.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

4.1 Other user tiles are not available when CLE tile is enabled with ZCP

Issue: When you install and enable the CLE tile along with ZCM:

  1. ZCP takes the priority and all SSPR integration features works only on the CLE tile.

  2. Other users tile was available and was used to login to the respective user account without CLE and SSPR Features. (Bug 959981)

Workaround: There is no workaround this time. The following is the current behavior:

  • Other user tile is not available.

  • All SSPR integrations continue to work on the CLE tile.

  • CLE CP continues to be the Primary Credential Provider.

4.2 Captcha Support with CLE requires an appropriate URL redirection link

Issue: When SSPR is configured for captcha (Google) for CLE, the support for captcha requires the appropriate URL Redirection list to be updated with the URL https://www.google.com, without which the navigation to the external website is blocked. (Bug 959982)

Workaround: There is no workaround at this time.

4.3 IME for Emergency Access

Issue: IME is not implemented for the Emergency Access dialog. The IME option for Emergency Access uses SHA-1 with Salt response storage hashing method. (Bug 962961)

Workaround: It is recommended for the user to change the storage hashing method to PBKDF2WithHmacSHA1.

5.0 Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information website.

For general corporate and product information, see the NetIQ Corporate website.

For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.