KOBIL mIDentity
Contents
1. ASCII character sets This new feature required fundamental changes to most software components therefore a special update procedure must be followed when a version older than ver 1 5 1 Beta is installed The previous version will be uninstalled and after a new start the current version will be installed 3 mlDentity known issues and problems The following problems still exist in the current KOBIL mlDentity version 1 5 1 Build 20060823 A Mobile Identity Dynamic logon dialog detection newly created learned account of a web application will not be detected until you re load refresh the web application come across an application which is not supported by the Single Sign function and you believe it should be please contact your KOBIL partner Manual password transfer is not supported for many Java applications we do support dynamic password detection in JAVA applications Web sites with dynamic title bars e g current time have been supported since version 1 4 0 All such accounts created with version older than 1 4 0 have to be created again B Other If you wanted to use smart card logon with the local or domain security policy Smart card removal behavior Lock Workstation you have to set a registry key to 1 You will find this key under HKEY_LOCAL_MACHINE SOFTWARE Kobil Systems KOBIL mlIDentity DoNotEjectDevice Hibernation mode on Windows 2000 when a PC is waking up from hiber2. Layout improvements 1 8 Changes to KOBIL mlDentity 0 9X KOBIL mlIDentity 1 00 Build 20040331 has the following improvements against the former version KOBIL mlDentity 0 9x Beta Versions 1 8 1 Bug Fixes Mobile Identity Mouse clicks are captured during password learning phase therefore the context menus do not appear anymore Automatic logon tries without user interaction do not lead to an endless loop anymore in case of a wrong password Mobile Data Safe Minor bugs fixed when creating and deleting Secure Data Storages repeatedly Default names and icons help to distinguish better between Secure Data Storages on mlDentity device and on the local computer s hard disk Mobile Office 10 Better comparison text for user input dialog boxes Other improvements Setup is now enabled for updates The setup can directly be applied to computers where a mlDentity software version is already installed There is no need for a manual deinstallation anymore If sub dialoges are open the tray bar menu is blocked to avoid malfunctions In all dialog boxes the cursor focus is on the first entry field and the tabulator key helps to navigate 1 8 2 New Functions Mobile Datasafe Datasafe creation on mlDentity device massively speeds up Grouping actions for datasafe functions in pull down menus Better distinguish between Secure Data Storages on hard disk mlDentity in menus Secure Data Storage deletion now asks for co
3. 0 Build 20040709 KOBIL mlIDentity 1 3 1 Build 20041104 has the following improvements compared with the former version KOBIL mlDentity 1 3 0 Build 20040709 1 5 1 Bug Fixes Setup After a language update two links to the manual exists under START PROGRAMMS KOBIL Systems KOBIL mIDentity Both links startet the same version This problem is solved now My Identity For Web based applications if the title bar changes it will be recognized now and the automatically logon will attempt following It could happen that an already learned site will be learned again after updating the software Example gmx de web de hotmail de In some cases mlDentity tried to learn its own password dialogs Now they would not be learned My Data Safe If a Secure Data Storage was mounted and opened by the explorer and you tried to close the mlDentity Control Center Software an error occurred The same happens when removing the mlDentity device securly These problems are solved now The older version allowed to use special letters in the Secure Data Storage name If so the desktop link was not created This problem is solved by rejecting such special letters Removing the mlDentity device while a Secure Data Storage opened by the explorer or while another application accesses a file in this Secure Data Storage causes an error This problem is slved now Other improvements The mlDentity Control Center Software crashed when trying to import an certific
4. Dentity 1 5 1 Build 20060823 has the following improvements compared with the former version KOBIL mlDentity 1 5 Build 20051108 1 1 1 Bug Fixes My Identity mlDentity software detects locked card PIN as soon as you insert mlDentity into a USB port and automatically invokes the Unlock PIN function e The SSO Rescue Assistant can be now accessed not only with KOBIL mlDentity Classic but also with mlDentity Basic and a valid licence key This functionality can be only invoked when there is no mlDentity device plugged in e manual SSO account with OTP was previously displayed incorrectly as an account with a static password In this version the display is correct My Secure Data Storage e In the past it wasn t possible to access secure data storages when the certificate used for encryption was no longer valid This issue has been resolved e The container create dialog has been improved Other improvements e Some remaining German words in the English version have been replaced with English version 1 1 2 New Functions My Identity e f you are using KOBIL SecOVID together with mlDentity software you can activate a function to generate and display SecOVID OTP in plain text For more information please refer to the KOBIL mIDentity SDK documentation which be provided by KOBIL partners e The Simple Sign On functionality can be completely deactivated My Secure Data Storage e Random numbers for encrypting
5. KoBIL secure your KOBIL mliDentity Service Release Notes KOBIL mlDentity 1 5 1 Build 20060823 Table of Contents 1 CHANGES SINCE PREVIOUS 2 1 1 CHANGES SINCE KOBIL MIDENTITY 1 5 BUILD 20051108 2 1 2 CHANGES SINCE KOBIL MIDENTITY 1 4 1 BUILD 20050517 RELEASE 3 NEXT GENERATION 22 atia 3 ee eee er eee ere eer er ee ere 3 1 3 CHANGES SINCE KOBIL MIDENTITY 1 4 0 BUILD 20050219 RELEASE 4 1 4 CHANGES SINCE KOBIL MIDENTITY 1 3 1 BUILD 20041104 RELEASE 5 1 5 CHANGES MIDENTITY 1 3 0 BUILD 20040709 6 1 6 CHANGES MIDENTITY 1 1 4 BUILD 20040510 7 1 7 CHANGES TO MIDENTITY 1 00 BUILD 20040331 9 1 7 CHANGES MIDENTITY 0 9 10 2 KOBIL MIDENTITY NEW INSTALLATION AND SOFTWARE UPDATE 11 3 MIDENTITY KNOWN ISSUES AND 5 12 4 MIDENTITY FURTHER HINTS 13 identity 1 Changes since previous releases 1 1 Changes since KOBIL mIDentity v 1 5 Build 20051108 KOBIL ml
6. PC systems did not boot anymore when the mlDentity device was inserted at the same time Reason 1 Some BIOS manufacturers do not meet the SCSI 2 standard On Windows 2000 PCs the device must however be re plugged to the Solution Update the mlDentity system software firmware to the current version will be done by installaing the current mlDentity PC software version and plugging the mlDentity device afterwards Reason 2 The BIOS setting USB Legacy Support is activated Solution Deactivate this setting Please see also the FAQ list under www kobil com m Dentity on this issue 1 7 2 New Functions My Identity The automatic logon is now also possible for web applications with frames The automatic logon is now also possible for command line based applications like the DOS box or PuTTY The manual password transfer now also supported for web applications The account data passwords are now stored highly secure 8DES 168 bit encryption and decryption on the smart card My Datasafe New icons and further layout improvements Shortcuts to the Secure Data Storages are configurable now Other improvements Windows 2000 with SP3 is now also supported When plugging a mlDentity device the mlDentity Control Center software checks now whether the system software of the device firmware is up to date If not the firmware will be automatically updated if the user accepts a corresponding proposal
7. a secure data storage are now generated with the help of your smart card Other improvements e UNICODE support starting from this version we support also non ASCII character sets The Japanese version is now available and can be delivered on request e Global PIN caching was previously closely tied with the application which used it Starting from this version PIN caching applies to user session as long as you use the CSP from KOBIL This feature is activated by default e Additional smart cards support CardOS 4 01 M4 3b JCOP 3 0 GemExpresso e KOBIL PC SC reader can be used in parallel to mlDentity when the KOBIL mlDentity setup is executed from a command line with option midlight This will install a container driver which 2 opens the mobile secure storage For more information please refer to the KOBIL mlDentity SDK documentation which can be provided by KOBIL partners The interaction between KOBIL mlDentity und KOBIL mlDentity Gina Logon has been improved Setting a specific registry key prevents mlDentity from being removed when put hibernation mode This allows KOBIL mlDentity Gina Logon access the smart card on mlDentity when computer is waking up without a need to re insert mlDentity For more information regarding registry setting refer to the KOBIL mlDentity SDK documentation which can be provided by KOBIL partners e The user manual have been updated 1 2 Changes since mlDentity 1 4 1 Buil
8. ate with a key length of 2048 bit Now a message tells what key length is allowed The mlDentity Control Center Software icon in the traybar disappears when the explorer crashes but the software is still active This problem is solved was entered wrong threetimes a message suggest that the card is locked but there are three new trials Now the message will displayed in the right form After some special actions the mlDentity Control Center Software was displayed maximized even though it was minimized before This problem is solved 1 5 2 New Functions My Identity SSO support for Checkpoint VPN Clients SSO support for Citrix VPN Clients vers 8 My Data Safe fast user switch under Windows XP is supportet Mounted Secure Data Storages would be unmounted after a user switch Now it is also possible to create Secure Data Storages on network devices Secure Data Storages on NTFS partitions now could be greater then 4GB Other improvements Service Pack 2 for the operating system Windows XP is supportet A PKCS 11 module for Lotus Notes and Netscape support is integrated Inthe settings you can choose if the mlDentity device should be switched while inserting or if it register direct as a composite device The advantage of this setting is that systems on which the mlDentity Control Center Software is installed are able to detect the mlDentity device faster A disadvantage is that on systems on which the mlDe
9. d 20050517 release KOBIL mlDentity 1 5 Build 20051108 has the following improvements compared with the former version KOBIL mlDentity 1 4 1 Build 20050517 Next generation With KOBIL mlDentity 1 5 a new device type is introduced Now it is possible to use a mobile Secure Data Storage on computers where no mlDentity specific software is installed All your data will be stored highly secure on the device Nobody can access the data without the knowledge of the KOBIL mlDentity SmartCard PIN To agree to your individual needs you can purchase following packages mlDentity Light low cost and extensibility no memory mlDentity Light Strong authentification and local encryption no memory mlDentity Basic The mobile secure data storage secure and independend mlDentity Classic The All In One version KOBIL mlDentity Basic Classic are available with different memory sizes S 64 MB M 128 MB L 256 MB XL 512 MB XXL 1 GB The function Outlook Synchronisation and the Profile Tool have been removed If you are interested in those features please contact your KOBIL partner Licence Key Depending on the KOBIL mlDentity package you have purchased not all functions of the software are enabled You can enable the full functionality by entering a licence key which is either shipped together with your KOBIL mlDentity package if you have purchased the full software features or you can purchase i
10. he smart card is invalid on another computer This problem can be solved by subsequent installation of the required root certificate on the computer with mIDentity application 12 4 KOBIL mlDentity usage hints Using Simple Sign On The following short cuts help you use mlDentity for secure logon to your applications ALT F11 If you want mlDentity device to learn a logon dialog initiate the learning procedure after the logon window is activated by a mouse click by pressing ALT F11 For details please refer to the manual ALT F10 Usually mlDentity recognizes learned logon dialogs and you only have to confirm that you want to be logged on by clicking the Logon button In some cases e g when working with terminal consoles mlDentity does not know which of the learned logon dialogs to use By pressing ALT F10 after the logon window is activated by a mouse click you will get the list of the learned logon dialogs and you can select the desired entry ALT F12 In some cases mlDentity can t recognize learned logon dialogs Beside the possibility to press ALT F10 see above you can press ALT F12 to see a list of all open windows whether they contain a password dialog mlDentity had already learned 13
11. is configured for data encryption Shortcuts to the Secure Data Storages are configurable now Other improvements current version now also supports the suspend mode former versions the mlDentity device was not recognized after waking up the PC from the suspend mode and the user had to reboot the PC or to restart the Microsoft smart card service This problem is solved now Layout improvements Standardization of the dialogs regarding the layout 1 7 Changes to KOBIL mlDentity 1 00 Build 20040331 KOBIL mlDentity 1 1 4 Build 20040510 has the following improvements compared with the former version KOBIL mlDentity 1 00 Build 20040331 1 7 1 Bug Fixes Setup After deinstallation of the former version mentioned above the Microsoft smart card service was not available anymore such that smart card terminals could not be used anymore Updating to the current version will fix this problem When installing Windows 2000 or deinstalling Windows XP the former version an user account mlDentity was created for technical reasons This is no longer necessary and the current setup automatically deletes the mlDentity user account if it exists on the PC My Identity Password dialogs learned under Windows 2000 can now also be used for the automatic logon on Windows XP systems and in reverse order After the automatic logon to some websites the proposal was wrongly made to log on the user again automatically This
12. ithout a smart an error message occurs 1 3 2 New Functions My Identity If certificates within a chain are used the entire chain would be taken over to other systems So the certificates are valid on all systems My Data Safe Now it is possible to search and import automaticly all data safes from which a valid certificate is existing on mlDentity ADK handling was optimized 1 4 Changes since KOBIL mlDentity 1 3 1 Build 20041104 release KOBIL mIDentity 1 4 0 Build 20050219 has the following improvements compared with the former version KOBIL mlDentity 1 3 1 Build 20041104 1 4 1 Bug Fixes The following software bugs have been resolved in this release My Identity Access to logon accounts without the need to enter a PIN Lack of free storage on mlDentity impacting the logon accounts Application freeze while using SecOVID One Time Password My Data Safe Repeatedly assigning the same drive letter while working with network drives which are not always mounted My Office Duplicates in synchronizing MS Outlook The problem has been solved for contacts notes and tasks see section 3 The time range in which the appointments should be synchronized not as indicated in the settings Other improvements The English version of KOBIL mlDentity was revised Wrong PIN s longer stored in the cache Modified settings are applied immediately and without the need to reinsert mlDentity 1 4 2 Ne
13. nation mode the mlDentity device must replugged to the PC to be recognized by the system On Windows XP this is not necessary Some mlDentity devices from a pilot series have a problem with firmware update Using the tool CorrectSN exe which can be found in your installation directory solves the problem Please make sure that your mlDentity device is inserted while you invoke the tool Sometimes a user may not be aware of the fact that the smart card is locked after three wrong PIN entries If you are using smart cards type CardOS you will not be correctly informed how many times you have entered a wrong PIN If you are using KOBIL mlDentity Light formerly SIM and you cancel Init Wizard while initializing the smart card the software changes the status to ready yellow traybar icon but you can t continue working The smart card must be properly initialized C Dependencies between the installed software mode and the non install mode Java cards must be completely empty i e no applet no partial personalization before the first use in non install mode otherwise the card can be unusable If a mobile container is created a non install mode and a regular certificate not self signed certificate is used for encryption the mobile container may not be accessible on a computer where mlDentity application is installed The certificate chain is not stored on mlDentity and therefore the certificate from t
14. nfirmation and warns about data loss Secure Data Storages can also be managed using tray bar menu Secure Data Storage icons change depending on state logged not logged in menues Mobile Office If Outlook Sync data is stored in Secure Data Storage default mlDentity Secure Data Storage is logged on automatically if needed Other improvements English and German language in all dialogues Manual also in English available Card Reader malfunction is displayed as a special icon in the main GUI window 2 KOBIL mlDentity new installation and software update Following are some installation hints for the current KOBIL mlDentity version 1 5 1 Build 20060823 A System Requirements Windows 2000 SP3 or SP4 Windows XP SP1 or SP2 Windows 2003 Server USB 2 0 or USB1 1 Port For Simple Sign On with web applications Internet Explorer version 5 5 or higher B Software Installation Run the most recent Setup After the Setup is complete the KOBIL mlDentity Control Center software can be started from a desktop icon When you update a KOBIL mlDentity Setup with the new version a computer restart will be required You have to logon one more time with administrator rights in order to complete the installation properly 11 KOBIL mlDentity Control Center application starts automatically after a new start C Update specifics From now ver 1 5 1 Beta Build 20060629 KOBIL mlDentity supports also non
15. ntity Control Center Software is not installed a message occurs which ask you to install a driver You have to abort this message 1 6 Changes to KOBIL miDentity 1 1 4 Build 20040510 KOBIL mlIDentity 1 3 0 Build 20040709 has the following improvements compared with the former version KOBIL mlDentity 1 1 4 Build 20040510 1 6 1 Bug Fixes My Identity When learning password dialogs for console applications there was check so far whether the user entered two times the same password So typing errors of the user resulted in confusion This problem is solved now When the mlDentity software had learned two times the password dialog of a web application with different content username or password the logon data of the second learning procedure could not correctly be used in former mlDentity versions This problem is fixed now By pressing ALT F10 the user can select the logon data to be used My Data Safe stability of the Secure Data Storage was optimized For example the current version eliminates the stability problems which could occur when copying bigger files gt 5 MB from one Secure Data Storage to another one on Windows XP SP1 systems Other improvements If the mlDentity device was firstly plugged onto the PC without inserted smart card after the device was unplugged and finally plugged onto the PC with inserted smart card the mlDentity device was not recognized by the system in former versions In former
16. ponding SmartCard e The PKCS11 Module now supports additional browser and mail clients like Netscape Lotus Notes Thunderbird Mozilla and Firefox 1 3 Changes since KOBIL mlDentity 1 4 0 Build 20050219 release KOBIL mlDentity 1 4 1 Build 20050517 has the following improvements compared with the former version KOBIL mlDentity 1 4 0 Build 20050219 1 3 1 Bug Fixes My Identity After certificate damage it was not possible to restore a backup which was created before This problem is solved While generating a new backup the software could crash through the manualy renaming of the backup file This problem is solved If a wrong password generator was defined the software generates invalid OTP s instead of an errror message Now the sotware shows a detailed message My Data Safe handling with temporary not available network data safes on Windows 2000 was difficult Now it is much easier lt was possible to import data safe without having the right certificate This is no longer possible While disconnecting an external USB hard disk with a mounted data safe the icons was leaving on the desktop Now the icons are deleted after disconnecting the hard disk Initializing Assistant Wizard While creating PIN and PUK for the first time the software could crash This problem is solved Other improvements More stability while removing mlDentity unsecure Generally text revisions If a mlDentity is pluged in w
17. problem is solved now automatic recognition of password dialogs not learned so far was modified according to the requirements of the user For new password dialogs the mlDentity software proposes automatically to learn the new dialog if it is not about a web application Whereas no such proposal is automatically made for new web applications because in this case mlDentity users want to start the learning procedure themselves as otherwise they would have to refuse all the time the proposal to start the learning procedure It is possible to start the learning procedure of password dialogs for web applications by activating the logon window mouse click and pressing ALT F11 My Data Safe Mounted Secure Data Storages will be automatically unmounted when switching to another account The invitation to move the mouse symbol to generate a random triple DES key will occur whenever you create a new Secure Data Storage stability of the Secure Data Storage was optimized File security encrypting and signing individual files or directories by a right click to the file or directory In the former version of mlDentity the software crashed on some PC systems if no default encryption certificate was chosen file security feature is more stable now Other improvements mlDentity now also supports the platform Windows 2003 Server security settings will be saved after program exit Some
18. t later as an upgrade at your certified KOBIL partner To enter your licence key please select Settings Other Info and enter the licence key into the appropriate text fields NOTE For customer which have already purchased an earlier version KOBIL mlDentity the full functionality is available 1 2 1 Bug Fixes My Identity e While using SecOVID OTP s there was no correct user feedback in case of a wrong entered PIN This problem has been solved Other improvements e English text revision 1 2 2 New Functions Initialization Assistant For initializing the smart cards now you can also use a WEB based certification authority e g Windows KOBIL mIDentity Manager which be entered the registry This CA will be called automaticly while initializing the card For detailed information see the KOBIL mlDentity whitepaper which can be ordered from your KOBIL partner e While generating the PUK automaticly the associated card number and device serial number will be shown My Identity e The advanced SSO configuration now is configurable by a normal user e Support of additional SAP GUI s Tool for SAP log on Other improvements e Many parts of the software now are configurable For detailed information see the KOBIL mlDentity whitepaper which can be ordered from your KOBIL partner e With the current version KOBIL mlDentity it is possible to use different CSPs in conjunction with a corres
19. versions it was necessary to reboot the PC or to restart the Microsoft smart card service This problem is fixed now mlDentity device was plugged to a Windows 2000 PC while the mIDentity Control Center software was running and this mlDentity device was never plugged to this PC before the former version showed by mistake the message Please check whether the smart card is inserted after clicking the OK button the user could continue working without any restriction This minor problem is solved now In the former version users without administrator rights could not use all features of the mlDentity Control Center on Windows 2000 systems In some cases the PC operating system Windows SP1 could not recognize the mlDentity device This problem is solved now 1 6 2 New Functions My Identity automatic logon is now also possible for the following applications applications Outlook 2003 Windows dial in client Automatically learned password dialogs can now be modified manually afterwards The following items can be modified Title name of the entry Description of the entry comment o Username o Password resp number of the one time password generator My Datasafe Data recovery feature Data which is encrypted in the Secure Data Storage can now be recovered in emergency cases mlDentity smart card damaged or lost if initially a further certificate additional decryption key ADK
20. w Functions My Identity In most cases KOBIL mlDentity is being delivered with an empty Smart The Smart Card has to be initialized with PIN PUK and a certificate To simplify this procedure Initialization Wizard will guide you through the initialization steps From now on your logon accounts will be encrypted with a certificate and not with a 3DES key After updating the mlDentity software your secret data will be migrated automatically to the new format With this version you can replace your current encryption certificate with a new one Logon dialogs in java based applications can be detected and learned Many further websites can be learned Logon accounts can be backed up In case of a damaged or lost mlDentity device user will be able to restore logon profiles from the backup Advanced parameters for Single Sign On are configurable The SSO maintenance application is accessible from the tray bar icon The SSO dialog box logon which pops up when new account is being learned is non modal so you don t need to act immediately when the window appears The new SSO Emergency Assistant allows user to view logon accounts in the backup file without the mlDentity device My Data Safe The secure storage created a NTFS formatted disk will be filled with random data to ensure that the free disk storage is shown correctly Secure data storages on external USB hard disks are supported 1 5 Changes to KOBIL mliDentity 1 3
Download Pdf Manuals
Related Search