Release Notes DirX Password Reset Client

General

This Readme file contains important information about changes and enhancements of the DirX Password Reset Client (DPRC; formerly Atos Password Reset Client) for DirX Identity that are not described in the DirX Identity user documentation. Familiarity with the DirX Identity user documentation will make this Readme file easier to understand.

Licenses

The End User License Agreement must be accepted to use the DirX Identity software products. Please refer to the file license.txt.

DirX Password Reset Client Highlights

General Features

The DirX Password Reset Client is a Windows client that must be deployed on a user’s Microsoft Windows system.

DPRC can be accessed and used before logon to Windows (after ctrl-alt-del) via an extra option in the login screen (another logon tile). The advantage of this user interface is that the password reset can be done directly from the workstation of the user.

The DPRC offers three deployment modes for alternative authentication:

  • Smart card authentication

  • Authentication questions

  • Mobile one-time password (OTP)

  • Configurable set of these 3 options.

DPRC provides the following functionality:

  • Validation of new passwords against the password policy of DirX Identity.

  • The dialog language is set according to the Windows system language setting. For languages that are not supported by DPRC, the dialogs show up in English.

  • The password reset uses the combination of account and domain name as user ID, not the user name.

  • Smart card option only: In case a user (real person) has multiple accounts or the same account name in multiple domains, the password reset detects the correct account based on the combination of domain name, account name and a unique ID (UID).

  • Smart card option only: The UID is extracted from the certificate (on client side) and the AD account import (server side). The validation on server-side checks that the AD account UID string contains the client certificate UID. Therefore, functional users with ID string like <prefix>-<UID>-<suffix> can reset their account password as well.

  • Smart card option only: The certificate provided on the smart card must be applicable for digital signatures. The DPRC will display only such certificates.

  • Smart card option only: Only corporate networks are supported. Internet with VPN mode is not supported.

DirX Identity V8.10 SP2 DirX Password Reset Client

This section lists changes compared to DirX Identity V8.10 SP1 DirX Password Reset Client release.

New Features
  • None.

Bug Fixes
  • None.

DirX Identity V8.10 SP1 Atos Password Reset Client

This section lists changes compared to DirX Identity V8.10 Atos Password Reset Client release.

New Features
  • DPRC now supports Microsoft Windows 11.

Bug Fixes
  • None.

DirX Identity V8.10 Atos Password Reset Client

This section lists changes compared to DirX Identity V8.9 Atos Password Reset Client release.

New Features
  • None.

Bug Fixes
  • If the Windows local policy "Interactive Logon: don’t display last signed-in" is active no DPRC tile was presented in "Other options" on the logon screen (Ticket DXI-9622).

  • DPRC was extended so that also monitors with a very high resolution are supported (4K monitors) (Ticket DXI-9717).

DirX Identity V8.9 Atos Password Reset Client

This section lists changes compared to DirX Identity V8.7 Atos Password Reset Client release.

New Features
  • None.

Bug Fixes
  • The DPRC was changed so that also after a reboot the domain\username from the last login is shown in the corresponding input field (Ticket DXI-8123).

DirX Identity V8.7 Atos Password Reset Client

This section lists changes compared to DirX Identity V8.6 Atos Password Reset Client release.

New Features
  • DPRC now supports Microsoft Windows 10.

  • DPRC now supports via registry setting if password policy is requested from service or taken from registry options (UsePoliciesFromService, UsePoliciesFromRegistry – only one must be ‘1’). The list of password policy registry options has been extended in this context to match the options in an Identity password policy (PwdInHistory, PwdWindowsCompatible).

  • New “AutoSelectCertificate” registry option: Defines if in case of smart card option the list of valid and useable certificates on the smart card is shown or not (this step is normally to confirm the selection). Normally the list just contains one certificate that must be confirmed.

  • DPRC now shows in the “enter new password” dialog window the password history value (if greater than 0).

  • The 6.0.3 version does no longer support, like previous versions, to copy an AtosPasswordResetClient.reg file that resides in the same folder as the msi package into the registry.

Bug Fixes
  • In case of enabled smart card option and if the getPasswordPolicy requests does not deliver any policy the policy from registry should be used (Ticket RFXKIY).

Supported Platforms

The DirX Password Reset Client is available on the following platforms:

  • Microsoft Windows 10 and 11.

Delivery Packages

This section provides information about delivery packages on the supported platforms.

For Windows platforms a single installation package is provided that allows to install the DPRC. The installation package is available for current and previous versions or during updates as separate service package.

For a detailed description of the installation prerequisite and procedure see the relevant installation guide.

Restrictions

User Documentation

The DirX Password Reset Client is separately distributed, the following documentation is provided:

  • User Interface Guide - DirXPWResetClientGui.pdf

  • Installation Guide - DirXPWResetClientInstallation.pdf

You need Adobe Acrobat Reader plus Search to view PDF files. For a free copy of Adobe Acrobat Reader please refer to

or to

Installation

The installation procedure for the DPRC is described in the installation guide.

Known Problems

Upgrade Installation

To reinstall the same DPRC version or install this version over a previous version the previous instance must be uninstalled. This is because of an issue in the used Microsoft Studio Installer extension. That means that a higher version of the DPRC cannot be installed without uninstalling the previous version.