SecureDoc v6.3 Release Notes

Reference

PBConnex works with <option> key when more than one network adapter.

Can change the password using challenge response on DATEV Smart cards.

An error use to occur when using challenge response to do a recovery on token.

SD-1825

The permanent autoboot feature has been fixed when the device is using a SED.

Challenge Response has been added to RMCE Viewer.

With administrator assistance users can recover access to an encrypted container or a removable media device through a challenge response recovery process.

Boot Configuration settings will not auto-reset to default upon restarting the device.

The HP Officejet 100 Movile L411 contains a memory area which caused conflicts with machines running SecureDoc when trying to print.

The following information has been added:

Date & Time of File Transfer, Username, Serial # of PC, USB Device Name, When USB Device was connected, File Name and Destination, IP Address of Device/

The logs or accessible centrally from the SES Console.

Support has been added for the Dell 6430U smart card reader.

SD-5857

SD-5858

SD-5859

Several Wireless options have been added.

• Wireless Config Settings can now be hidden. It has now been added to the F3 Keyboard options.
• Show Password on the config screen has been removed.
• Additional Wifi drivers have been added
• HP Elitebook 860
• Intel WLAN Radio Model 633ANHMW

SD-6110

SD-6248

SD-6307

When a shared folder is used for communication the SDI file will be sent to the destination folder in Windows 8/8.1.

When creating a container on removable media the correct % will be used from the free space.

There are limitations to the FAT and FAT 32 file systems as they do not support more than 4 GB files. The container itself is a form of a file.

Challenge Response length coincides with what was set.

It is now possible to update SD without having user and computer information completely filled out.

An error is caused when some pieces of information retrieved from SES is returned as Null.

• Ability to disable UDP client wakeup packet
• Improved througput of SDConnex Server

SD-6497

SD-6649

Blue screen no longer occurs when copying a file to the container.

Growth of database logs on Samsung version no longer occurs.

The issue on the custom Samsung build with the DB logs growing to over 200Gb has been fixed.

Added support for in Windows and at pre-boot for v4 and v5 for several smart cards.

"SG 330-xx Oberthur xx" and "SG 330-xx Datakey 330-GS"

This will allow for any configurations made to be seen in SES.

SSO fails after Recovery in PBConnex AutoBoot and ENC is not updated after the user logs in.

The ENC file is properly updated and saved after performing recovery on their device (when Silent deployment is enabled). Also fixed for when the user password expires and recovery is performed while offline.

The error causing OPAL activation to error out whenever the Key ID is 64 characters has been resolved.

After restarting a key chain password validation prompt is displayed on FileVault 2 for Mac OS 10.9 and 10.9.1.

The key chain password validation prompt no longer appears without having to change the password.

Reference

UserData cannot be retrieved because Windows cannot be launched.

In Disk Access Control (DAC) the expiration timer does not work properly.

When a timer is set up with the "Enable temporary profile setting" it should return the default profile after the time limit has run out.

When upgrading from HPPT, only use of password is supported for authentication. Other modes of authentication: Self-help/Sparekey, fingerprint and smartcard are not supported.

SD-5622

SD7544

An error occurs on the PBU screen when "Communication" is set.

When setting up a SecureDoc package on SES, when setting the “Communication” by the Server Network Name, an error will occur on the PBU screen. This does not happen when setting up by the Server IP Address.

Workaround:

The Server Network Name cannot be used. As a temporary measure, when creating the SecureDoc package the Server IP Address should be used.

On Windows 8, the touchscreen works but not the pen (due to hardware limitations.

Note: On PBU, only the finger touch is supported.

On Windows 7, the touchscreen works but the pen has to be calibrated in order to work.

1. Turn on device
2. When Preboot loads tap screen and allow timer to count down (5 sec.).
3. A black screen will appear for calibration
4. Tap on the four corners of the screen (starting from the top left)
5. If done incorrectly just power off and retry

After calibrating your finger, the Stylist can be calibrated.

1. Press F3 on theon-screen keyboard.
2. A menu will appear on the bottom right corner.
3. Click the "i option".
4. An info page will appear
5. Click the drop down menu
6. Select (dev/input/tablet/WmPen4)
7. Click Calibrate
8. A calibrate stylist screen will appear (start at the top left)

Submitting SDForm will fail with "Error 08995"

Submit SDFrom will fail and show "Passwords may not be empty" dialogue when the AD User can not get a generic password if it is assigned to a folder.

The encryption status is shown in plaintext.

The IP address cannot be obtained on boot with machines running Windows Server 2012.

Currently only affects the following configuration:

Virtual Machine: Windows 2012 Server/Windows 2012 R2 Server with BIOS and Pre-Boot Linux.

During a file encryption when using a VM Client, if the process is interrupted the file may become corrupted.

When using the Power Off button to turn off the virtual machine it will work like a power switch (like a power supply). The virtual machine is abruptly powered off with no consideration for work in progress.

Note: If a virtual machine is writing to disk when it receives a Power Off command, data corruption may occur. It is recommended to perform a graceful shutdown on the virtual machine.

When creating a removable media container on Windows 7, it will be formatted as an ExFat file. This file format is not compatible with Windows XP and will cause an error.

There still needs to be support for PBL and Windows.

The "Alt Gr key" for the German keyboard does not work at PBU when using a hardware keyboard.

The virtual keyboard supports using the "Alt Gr key".

Static IP addressing does not work for wired PBConnex based authentication.

When trying to login with the correct password, an error ("0xa0") is incorrectly shown.

English Keyboard is still used in UEFI even when the German keyboard is selected.

In UEFI there is also no standard way to get the status of special keyboard keys (Ctrl, Alt, Shift, Caps, Scroll Lock, ...) There is no support for these keys.

Confirmation message is displayed even when a USB is added into the Trust Control.

When a USB device is added into the Trust Control and "Automatically encrypt removable media", and "Encrypt Immediately" is selected, a prompt is still displayed asking the user if they he/she wants to encrypt the device.

The SecureDoc Wipe Folder does not work with the following types of drives:

• Container Mounted Drive
• Dynamic Drives
• USB containing RMCE

After changing the header in the SDCC under in "Boot Text and color" it does not display properly.

The message for the Challenge Response prompt is truncated.

A message with multiple lines will only show a maximum of 6 lines.

On Windows 8, personal key files cannot be created for Windows users with Case Switch Users.

This occurs when there are two Windows Accounts. The users must also have logged onto Windows before the installation of SecureDoc.

System Slot does not recognize other Windows Accounts after shutdown when Fast Startup is enabled.

A device with multiple SecureDoc users assigned to it will cause issues as Windows 8 treats "shutdowns" as "hibernate"

Workaround:
Fast Startup needs to be disabled.

RSA SecureID 800 tokens are not supported with the v4 Boot Code.

RSA SecureID 800 tokens are only supported in PBL and PBU mode.

SD-7377

SD-7398

Workaround:

Log on to the SecureDoc Control Center and navigate to:

Boot Control -> Install/Uninstall Boot Logon -> Update

A recovery drive cannot be created on Windows 8 when a USB drive is inserted.

Workaround:

• Go to registry editor:
• [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\partmgr\Parameters]
• Add "RMMode" [REG_DWORD], set value = 1
• Reboot the machine, select the recovery drive, following which the media creation can proceed further.
• Delete the previous registry value, otherwise, SD cannot encrypt removable media.

No support for the latest version of Internet Explorer 11. This is causing the select/check feature on some pages to not display properly.

Workaround:

It is advised to use Chrome and Firefox until a fix is made.

SD-7576

SD-7589