NetIQ SecureLogin 8.0 Readme

October 2013

NetIQ SecureLogin is a single sign-on application. It consists of multiple, integrated security systems that provide authentication and single sign-on to networks and applications. It provides a single entry point to the corporate network and its user resources. It also increases security while enhancing compliance with corporate security policies. SecureLogin eliminates the requirement for users to remember multiple usernames, and passwords. It automatically enters credentials for users when required. For detailed information about NetIQ SecureLogin, visit the NetIQ SecureLogin Documentation Web site.

SecureLogin 8.0 enhances the product capability and resolves several previous issues. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure our products meet all your needs.

1.0 What’s New?

SecureLogin 8.0 release includes the following:

1.1 Bundled Installer for 32-bit and 64-bit Platforms

This release of SecureLogin introduces a bundled installer for both 32-bit and 64-bit platforms.

The installer packages dependent components like NICI, NMAS are detected and installed automatically. The installer also detects the default locale of the system and installs SecureLogin in the corresponding language. For example, if the default locale on your system is Spanish, SecureLogin is installed in Spanish. If you want to install SecureLogin in a different locale, use the command line installation option.

For more information about the command line options, see SecureLogin Installation guide SecureLogin Installation guide

1.2 Novell SecureLogin Rebranded to NetIQ SecureLogin

All the user interface screens including logo, icons, dialog, company name, and product name are rebranded to NetIQ.

NOTE:The rebranding of registry keys is targeted for a future release.

1.3 Enhanced Auditing Capabilities

Auditing now records the following additional events:

  • Passphrase enrollment and updating passphrase

  • Updating (adding, modifying, or deleting) credentials

  • Access to the following tools and snap-ins:

    • Active Directory Users and Computers snap-in

    • Group Policy Object Editor

    • iManager

    • SecureLogin Manager

  • Changes to preferences, password policies, and application definitions

NOTE:This feature replaces the SecureLogin Event Service.

1.4 New Report Templates

You can use the following Sentinel report templates to view details of all recorded events :

  • All Activities

  • Application Start

  • Change Password Activities

  • Preference Change Activities

  • User Activities

1.5 Emergency Access

If a user forgets the login password to the directory, the Emergency Access feature uses the challenge-response information from NetIQ SSPR (Self Service Password Reset) to grant access even if the user is not connected to the network.

If the answers to the challenge-response are correct, the user is allowed access to the workstation.

For more information about SSPR, see Self Service Password Reset 3.0 documentation .

For more information about Emergency Access feature, see SecureLogin Administration guide

1.6 The slMigrationHelper Tool for Datastore Migration

The slMigrationHelper tool helps to migrate data from an existing datastore to a new datastore. This tool is an enhanced version of the existing slAP tool and helps in seamless migration with minimal disruption of service.

For more information about slmigrationhelper tool, see SecureLogin Administration guide

1.7 Support for Newer Versions of Browsers

SecureLogin 8.0 supports the following new versions of the browsers:

Internet Explorer: Version 10

Mozilla Firefox: Version 23 and ESR 17.0.7

For details about other supported versions, see Supported Browsers

1.8 Support for Windows 8 Workstations

SecureLogin 8.0 is supported on Windows 8 except for the following features:

  • Metro style Apps

  • PIN and Gesture-based login

  • Windows 8 RT

1.9 Newer Version of Client Login Extension Integrated with SecureLogin to support the New Emergency Access Feature

SecureLogin 8.0 introduces version 3.7.2 of Client Login Extension which is packaged with the SecureLogin installer.

1.10 NetIQ Advanced Authentication Framework for SecureLogin

SecureLogin 8.0 supports integration with the NetIQ Advanced Authentication Framework (NAAF) and includes an Authasas client that supports authentication for SecureLogin clients on Active Directory using different authentication methods. For more information on NAAF refer NetIQ Documentation

1.11 Bug Fixes and Improvements

The SecureLogin 8.0 release includes a number of bug fixes that improve the functionality of SecureLogin.

2.0 Known Issues and Workarounds

  • If you have configured SecureLogin with SSPR, the self-signed certificates do not work as expected. To workaround this issue, configure a third-party certificate with a trusted Certificate Authority.

  • If you use the Modify option in the installer to include the Smartcard feature, it does not update the SecondaryStore value in the HKLM\Software\Protocom\Security registry key. If the secondary storage needs to be on SmartCard, change this value manually to SmartCard. The default value is FILE

  • Using the slMigrationHelper tool, if you attempt to modify the datastore from an existing one to LDAP, the datastore migration fails. This is because any LDAP or LDAPv3 mode requires NICI component to be installed.

    To resolve this issue, use the -u option to specify the path to SecureLogin installer.

    For example: slmigrationhelper.exe -u C:\NetIQSecureLogin.exe -t LDAP -q

    This switches the datastore to LDAP and installs NICI in the quiet mode.

  • Using the /forceshutdown option to shut down SecureLogin results in a crash. It is therefore recommended to use /shutdown option instead.

  • If you install SecureLogin on a workstation that already has NMAS installed, it leads to uninstallation of NMAS. As a workaround, install NMAS after installing SecureLogin.