Enterprise Random Password Manager: Revision History

• Added: SAP Netweaver as a management target (Custom account store type library)
• Added: McAfee EPO as a management target (Custom account store type library)
• Added: Oracle WebLogic as a management target (Custom account store type library)
• Added: IBM WebSphere as a management target (Custom account store type library)
• Added: DSRM (Directory Service Restore Mode) password management
• Added: Password Spreadsheet Manager - import and maintain your password spreadsheets
• Added: Password spreadsheet import utility
• Added: Delegation and workflow system for Password Spreadsheet Manager
• Added: Personal password store now supports website links
• Added: Personal password store now supports description fields
• Added: Personal password store disclaimer field
• Added: Configurable themes to the web interface
• Added: System metadata now visible in website
• Added: Links from systems/devices to accounts and account information/metadata
• Added: User account metadata now available in website
• Added: System type categorization menu in website navigation menu - can select all systems/devices by system or device type
• Added: Account type column and filter to the password store page of the web interface
• Added: Web application configuration option to the security tab to prevent a user from granting their own password request
• Added: Website delegation permission to allow users to add/edit/delete stored passwords on account stores that they already have access to
• Added: Import/report to the permissions on accounts delegation dialog
• Added: Import/report to the global delegations dialog
• Added: Import permissions menu to the main dialog and added several global permission import operations
• Added: Import/export feature for permissions on groups
• Added: Auto-population of IPMI account store with IPMI credentials if they were successfully used to connect after a scan
• Added: Select-All button on the IPMI scan dialog
• Added: Automatic population of the password store with credentials after any successful connection
• Added: Password change job can now set comments for managed accounts
• Added: Password change job will now allow selecting to run a job against only selected targets or all systems/devices in the management set
• Added: Menu and option in the orphaned systems dialog to cleanup some account store information in group database references for groups that are deleted
• Added: Progress indicators for jobs while running to the status message in the deferred job display
• Added: Progress indicators for jobs that have failed to the deferred job display
• Added: Context menu on Jobs in the Jobs dialog to open the verbose text log
• Added: Filter for Per Management Set delegations dialog to show only management sets with permissions assigned
• Added: Filter for Per Account delegations dialog to show only Accounts with permissions assigned
• Added: Filter for Per System delegations dialog to show only systems with permissions assigned
• Added: Job affinity to the zone processor config to allow password change, refresh, and group update jobs
• Added: Ability to deploy zone processors that are not group locked
• Added: Password activity report in the web application
• Added: Report generation utility to interactive job completion status dialog
• Added: Report generation utility to job properties dialog
• Added: Job completion statistics to Jobs management console dialog
• Added: Job completion statistics to Jobs web dialog
• Added: IIS6 and IIS7 account usage discovery now includes network path credentials
• Added: IIS6 and IIS7 account usage propagation now includes network path credentials
• Added: IBM WebSphere account usage propagation now supports SSH
• Added: Oracle WebLogic account usage propagation now supports SSH
• Added: Ping utility from context menu of management console
• Added: View system details from context menu of management console
• Added: More default answer files
• Added: SSH and Telnet support for custom types that are telnet and SSH
• Added: Progress dialog popups for long-running database operations and display draw operations
• Added: Multiple [subsystem] logging options to log settings dialog
• Added: Linux system info caching to the job dispatch loop to minimize database deadlock frequency on frequent data lookup for system/stored password info during SSH operations
• Changed: Default behavior to the web application instance dialog editor to edit the configuration of selected instances
• Changed: Website filters now mandate selection of a system type
• Changed: SSH/Telnet Library is now a native code implementation rather than a managed code implementation - resolves memory and handle leaks from previous versions
• Changed: SSH/Telnet Library now supports all five variables for all sections (Login Account, Login Account Password, Change Account, Change Account Password, New Password)
• Changed: SSH/Telnet Library now using a new set of variables that are consistent across all portions of the answer files
• Changed: New installation mini-setup wizard now prompts for encryption settings
• Changed: New installation mini-setup wizard now prompts website installation
• Changed: UPN caching algorithm in management console Accounts Store view that would cause to excessively long load times when hundreds of domain controllers for the same domain were in the same management set
• Changed: web application auto-installation procedure now configures settings for File Vault when file vault is enabled
• Changed: IBM WebSphere web integration no longer requires a static account
• Changed: Oracle WebLogic web integration no longer requires a static account
• Changed: Truncated the web activity log export to top 1000 rows to prevent the render from taking too long and timing out the dialog
• Updated: DB query code for auto-created views
• Updated: Oracle query code for large scale operations
• Fixed: Function Block Error if telnet/ssh was not enabled globally
• Fixed: Required DLLs for SSH/Telnet functionality were not being copied to target ZP systems when doing a zone processor install/remove
• Fixed: Improper logging of the authenticator name in the audit log if OATH token login was being used
• Fixed: Username format would not be persisted in the OATH token config dialog after selecting a domain user from browse
• Fixed: Check to see if RDP access is granted would cause an assert and fail
• Fixed: IPMI systems would show up in the list in the web interface once per group they were in
• Fixed: After removing a custom account store from the list the count would not update until next refresh
• Fixed: Change and remove options would not display when viewing passwords in the web interface for randomized accounts with dynamic website display options enabled
• Fixed: Cropping problem on the systems page for the job wizard
• Fixed: Spelling errors
• Fixed: Resizing issues in the web application on certain context menu options mouse-over events
• Fixed: Permissions on accounts dialog would have an extra column
• Fixed: Assertion errors when expanding a SharePoint node in the Accounts Store view
• Fixed: Error on attempted deletion of a locked job
• Fixed: Jobs could immediately show failed status after stopping a job in progress
• Fixed: Uninitialized variable for the Linux password change page that would sometimes cause the login username and password field to not show up
• Fixed: Dynamic group updates involving large explicit exclusion lists could take an excessive amount of time to update
• Fixed: Authentication failures during IPMI operations to report as successful completions
• Fixed: Editing the schedule of a failed job would not reschedule the job
• Fixed: Blank files could cause errors when checking out the file from the file vault
• Fixed: Stored jobs dialog would provide additional filters that could not be used when filtering for an account name
• Fixed: Email alerts for recovered passwords were not occurring for email addresses configured in the global delegations
• Fixed: File vault would be inaccessible to users if the website security option to only store authentication information in the cookie was enabled
• Fixed: Active Directory account password change would fail when delegated rights were only set for "reset password"

• Added: OATH Token support for console startup - HOTP/TOTP/Yubico via SMS/Email/Device
• Added: OATH Token support for client access to password recovery website - HOTP/TOTP/Yubico via SMS/Email/Device
• Added: OATH Token Auto Enrollment
• Added: Pass-thru SSH session for non-Windows systems
• Added: Pass-thru Telnet session for non-Windows systems
• Added: ViewDS LDAP Directory as a default LDAP directory type
• Added: HP Service Manager direct integration for ticket creation and verification
• Added: Auto-enumeration of MS SQL Database instances
• Added: Support for TN3270 Terminal Types
• Added: Arbitrary account elevation - helpdesk feature
• Added: Customization of email templates for emails sent from website
• Added: IPMI power operations via website
• Added: SDK options - support for IPMI power operations
• Added: RADIUS authentication
• Added: SQL server custom schema support
• Added: Text file mapping import for all management types
• Added: More event sinks
• Added: Filter for Management Set dialog
• Added: Default protocol/answer file configuration for non-Windows systems using answer files: Custom Communication Types
• Added: Standalone installer for integration components to ease remote website and zone processor deployment
• Added: Standalone installer for event server COM wrapper to supplement event sink integration for remote website and zone processor deployment as needed
• Added: Favorites icon to website (URL link)
• Added: More functionality to JAVA SDK operations
• Added: More functionality to Windows only SDK operations
• Added: More functionality to Web Service operations
• Added: New website display mode to reduce number of queries performed to database
• Added: Web site auditing now logs permission changes made from management console
• Changed: Oracle database account enumeration to better work with versions prior to 11g
• Changed: Account bulk import - to support all name spaces
• Changed: Website options - logging password actions to event log with blank field will default to local system’s application log
• Changed: When in the jobs display, pressing F5 no longer initiates whatever job is highlighted
• Changed: Description and comment field now available to private password store
• Changed: Removed SSH/Telnet/RDP icons from web UI for more consistent feel
• Changed: Data format being sent to Remedy/HPSM/SCSM to provide better description
• Changed: Confirmation on password delete from website
• Changed: Account stores (databases, IPMI, LDAP directories) are now counted as systems
• Updated: IPMI devices now supports v1.5 and v2.0
• Updated: LDAP authentication servers can now choose to page for accounts list result – some LDAP systems require and some don’t
• Updated: Password settings dialog for better identification of options being set
• Updated: Event sink data elements sent - more information across all event sinks
• Updated: Java SDK propagation - support for all name space attributes
• Updated: Query code for website user logon
• Updated: Query code for website user permissions verification
• Updated: Query code for next job run
• Updated: Move/Copy system supports databases
• Updated: Syslog now supports alternate port
• Updated: Authentication servers list can now be ordered (affects website logon)
• Updated: Many event sink’s message data to include more useful information
• Updated: Console display options to remove unused display filters
• Updated: Moved "Delegations" to be a top-level menu item
• Updated: Error reporting for some web operations
• Fixed: LDAP users could not properly authenticate to the website resulting in failed logins
• Fixed: Some LDAP directories were not paging query results correctly
• Fixed: Microsoft System Center Service Manager ticket verification did not work
• Fixed: Microsoft System Center Service Manager ticket creation did not work
• Fixed: Testing event sink output for certain output types could cause the management console to crash
• Fixed: All access web account could view all personal passwords
• Fixed: Per account delegations did not work for Databases
• Fixed: Per account delegations did not work for LDAP directories
• Fixed: Delegation changes made in the console get logged with the responsible user account in the website
• Fixed: Zone processors would not retry failed jobs
• Fixed: Workflow icon not showing up for users with outstanding password requests
• Fixed: Many cases that could cause function block errors in the website
• Fixed: Searching for '[' in any table would never return results
• Fixed: Spin jobs creates for various account store types would be generated with incorrect settings
• Fixed: Alternate port support for SSH/Telnet connections not working properly for account discovery
• Fixed: Website COM object could sometimes crash on exit
• Fixed: Deferred processor could sometime crash on exit
• Fixed: Failure to move database account stores
• Fixed: Failure to move LDAP account stored

Click this link for complete revision history.