WA 24.3 Release Notes

Date: August 30, 2024

Highlights

When the Windows Authenticator is configured to require FIDO2 for login (e.g. for machines authenticating with Entra directly), in the past we’d guide users through a confusing process of logging in to Microsoft and then enrolling their computer as a Security Key. With this release, we have automated this process. For customers with a Managed Microsoft Domain, the user will still need to authenticate into Microsoft, but otherwise users will not be asked to login to Microsoft. The one exception here is that for customers with federated domains, we still support manual login in the event that the automated login fails. Similarly, users will not need to enroll their device as a security key unless the automation were to fail (in which case, we will fall back to the old method of enrolling the device).

Ability to use TruU Windows Authenticator configured to use FIDO2 authentication, and a physical security key. In the past, when running the Windows Authenticator configured as a security key, you could not also use a physical security key (as the Windows Authenticator was always “inserted” as a security key and would prevent the use of the physical key). With this version, the TruU virtual security key is only inserted when it is needed (e.g. for login), so registering and using a physical security key now works without interference. In addition, the TruU virtual FIDO2 security key can now be used for mandatory authentication with applications that require explicit authentication every time for compliance reasons (e.g. e-Signature apps).

The new agent has been localized for the following languages:
- Chinese (Simplified)
- French
- German
- Italian
- Japanese
- Portuguese
- Russian
- Spanish
- Swedish
- Turkish
- Korean
The Agent will present the language based on the system settings of the computer. If the computer is using a language that is not supported, the Agent will continue to present in English.
- NOTE: the enrollment UI still appears in English currently. Localization support for that will come in the future through a Platform update.

Ticket Number	Component	Summary
WA-19915	Login	Unable to enroll fingerprint when using computers with Windows Enhanced Sign-in Security (ESS) enabled.
WA-20105	Enrollment	After completing a manual upgrade, if the user does not click the “Finish” button the TruU Setup page will appear when the user logs back in to the computer.