NetIQ Client Login Extension 3.7 SP3 Release Notes

June 2014

NetIQ Client Login Extension 3.7 SP3 includes new features, improves usability, and resolves several previous issues. This document outlines why you should install this service pack.

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the NetIQ Client Login Extension forum on NetIQ Communities, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available on the NetIQ website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the NetIQ Client Login Extension Documentation page. To download this product, see the NetIQ Client Login Extension Product website.

1.0 What’s New?

The following outline the key features provided by this version, as well as issues resolved in this release:

1.1 NetIQ Self Service Password Reset 3.1 Integration

Client Login Extension 3.7 SP3 provides the following features that are supported only with NetIQ Self Service Password Reset (SSPR) 3.1.

Challenge Response Force Enrollment

Client Login Extension now supports force enrollment. While logging in, users are prompted to set their challenge responses, failing which they cannot proceed.

Password Expiration Notification

Client Login Extension now displays the number of days before which the password will expire, every time you log in. And if the password has already expired, it displays a warning message. This feature allows you to change the password before it expires or after it has expired. You can choose to change the password using SSPR through the CLE restricted browser.

1.2 Software Fixes

NetIQ Client Login Extension 3.7 SP3 provides software fixes for the following issues:

Client Login Extension Does Not Connect to Password Provider on French Windows 7 Computer

Issue: When you access the Forgotten Password link, it does not connect to the password provider, even though the Forgotten Password dialog is displayed.

Fix: This release fixes this issue.

The Option to Reset the Password is Displayed Even if Logged in as a Domain User After Installing Client Login Extension

Issue: If you have installed Client Login Extension on a Windows 7 computer and have logged into a domain, the Create a Password reset disk option is displayed when you select the Change a password option.

Fix: The Create a Password reset disk option is no longer displayed for a domain user.

Error Message is Not Clear When Network is Unavailable

Issue: On a wireless network, the URL to the SSPR server is not available (for about 20 seconds or so) until the wireless network is available. If you wait for 30 seconds or so, and then click the link, it works as expected. However, if you click the Forgotten Password link quickly, the following message is displayed: Navigation to page was canceled. What to try: Refresh the page..

This message does not clearly convey that the network is currently unavailable and that you must try to connect again

Fix: When network is not available, Client Login Extension now displays meaningful messages to indicate the correct status of the network connection.

Restricted Browser Allows Link Access in Client Login Extension 3.7.2.1 and Later Versions on Windows 7 Computer

Issue: When the restricted browser is launched, it includes external links almost always on your customers Forgotten Password Web page. When you click on one of them, in a working Client Login Extension, the external links work and you can browse to other links in the restricted browser.

Fix: Now you cannot access external links from a restricted browser. If you attempt to do so, it displays the following message:

Access is restricted to your target server. You may not follow links to other servers.

On Italian Windows 7 Computer, Client Login Extension Does Not Work When Accessed from Internet Explorer 9

Issue: Client Login Extension does not work as expected and displays a blank page.

Fix: Client Login Extension now successfully works on Italian Windows 7 computers.

Unable to Launch the Restricted Browser on Japanese Windows 7 Computer

Issue: After installing Client Login Extension, the restricted browser fails to launch.

Fix: Client Login Extension now successfully launches the restricted browser on Japanese Windows 7 computers.

Security Vulnerability Found When CA signed Certificate has Expired

Issue: When you host SSPR, PWM, or any other password management solution with a a certificate signed by the Certificate Authority (CA) that has expired, when the Client Login Extension performs the certificate check, Internet users can navigate through the Certificate screen and access the computer illegally.

Fix: This release of Client Login Extension displays a warning message that the certificate has expired and blocks the users from accessing the computer illegally.

2.0 System Requirements

For information about the system requirements, refer to System Requirements in the Client Login Extension 3.7 SP3 Administration Guide.

3.0 Installing NetIQ Client Login Extension 3.7 SP3

For information about how to install Client Login Extension, refer to Installing the Client Login Extension in the Client Login Extension 3.7 SP3 Administration Guide.

4.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

4.1 The Stack Overflow Message is Displayed when Restricted Browser is Launched on Internet Explorer 8 on Windows 7 Computer

Issue: When the Restricted browser is launched by using Internet Explorer 8 on a Windows 7 computer, it displays the Password Manager - Stack Overflow at line:15 message.

Workaround: NetIQ recommends that you upgrade to Internet Explorer 9 or higher versions.

4.2 The SSPR Web Page is Static When the Restricted Browser Opens After Opting for Challenge Response Enrollment

Issue: On a Windows 7 computer with Internet Explorer 8, if you opt for Challenge Response Enrollment, it displays a static SSPR Web page. When the restricted browser opens, it displays the Undefined String message.

Workaround: NetIQ recommends that you upgrade to Internet Explorer 9 or higher versions.

4.3 Using Self Sign Certificates Poses Security Threat

If you host SSPR, PWM, or any other password management solution with self-signed certificates, when the Client Login Extension performs the certificate check, Internet users can navigate through the Certificate screen and access the computer illegally.

Client Login Extension does not support Self Sign Certificates and therefore, NetIQ recommends that you must not use them.

4.4 Repair Option in Client Login Extension MSI Fails to Update the Registry Editor

Issue: The Repair option in Client Login Extension does not update the entries (LinkText, LinkURL, and so on) in the Registry Editor, as expected.

Workaround: Uninstall and reinstall Client Login Extension.

4.5 Emergency Access Does Not Work After Upgrading from Client Login Extension 3.7.2 Patch 3 to 3.7 SP3

Issue: The Emergency Access feature of NetIQ SecureLogin does not work after upgrading from Client Login Extension 3.7.2 Patch 3 to 3.7 SP3. The computer does not switch to the Emergency mode even if the network connection is lost.

Workaround: In the HKLM-SOFTWARE-Novell-MsPssGina folder that is located in the Registry Editor, add a string key CustomPlugin with the following value:

C:\Program Files\NetIQ\SecureLogin\slEmergencyAccess.dll

5.0 Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information website.

For general corporate and product information, see the NetIQ Corporate website.

For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.

[Return to Top]