Added clarification about using the Allow requests without user data approved configuration option.

See the Allowing device requests before the user's data is approved and Issuance Settings sections.

Added information about viewing server-generated initial PINs on the View Device screen in the MyID Operator Client.

See the PIN generation section.

For clarity, the information about using authentication codes for logging on to MyID using the MyID authentication server (for example, the MyID Operator Client, or the MyID Core API) has been split into its own section.

See the Logon using authentication codes section.

Updated the description for the blue audit icon.

See the Running the audit report section.

Added new REST notifications for people and requests in addition to devices.

See the Introduction section.

Updated information about license limits; which now use the Warn When Available Licenses Reaches value to trigger email license warnings when the number of remaining available user or credential licenses drops to this value.

See the License management section.

Added information on working with device categories.

See the Card Encoding section.

Added information about the Rotate Text button in the Card Layout Editor.

See the Formatting text section.

Added information about the new Restrict Self Activation configuration option.

See the Configuring a credential profile for activation and Self-Service page (Security Settings) sections.

Corrected the logic for available roles when there is an existing user.

See the Credential profile restrictions section.

Added details of support for critical section protection.

See the Configuring critical section protection section.

Added details of support for the deactivation of card authentication users.

See the Deactivation of card authentication users section.

Added the following errors:

• OC10033 – Error notifying the server of sign out. Your client has still been signed out.

• WS30025 – must be a date in the past within correct range.

• WS30026 – must be a date in the future within correct range.

• WS40062 – The device is currently assigned and cannot be reinstated.

• WS40063 – The device has not previously been assigned and cannot be reinstated.

• WS40064 – The device is in an invalid state and cannot be reinstated.

• WS40065 – Device cannot be reinstated because it is not a card.

• WS40066 – The certificate cannot have its renewal status changed as it is not currently issued.

• WS50068 – Replacement card has gone too far through issuance to reinstate previous device.

• WS50069 – The operator does not have sufficient scope to view the requests of this account.

• WS50070 – The provided certificate cannot be suspended or revoked as it is not currently issued.

• WS50071 – The provided certificate cannot be suspended or revoked as it has been issued by the 'Unmanaged' certificate authority.

• WS50072 – You do not have permission to suspend or revoke this certificate.

• WS50073 – The provided certificate cannot be unsuspended as it is not suspended.

• WS50074 – You do not have permission to unsuspend this certificate.

• WS50075 – The provided revocation reason cannot be used for this certificate.

• WS50076 – The provided certificate cannot be paused as it is not pending issuance or revocation.

• WS50077 – You do not have permission to pause this certificate.

• WS50078 – The provided certificate cannot be paused as no retries will be attempted.

• WS50079 – The provided certificate cannot be resumed as it is not pending issuance or revocation.

• WS50080 – You do not have permission to resume this certificate.

• WS50081 – The provided certificate cannot be unsuspended as it has been issued by the 'Unmanaged' certificate authority.

• WS50082 – The certificate cannot have its renewal status changed as it has been issued by the 'Unmanaged' certificate authority.

• WS50083 – You do not have permission to change the renewal status of this certificate.

• WS50084 – The maximum number of devices for a given licence has been exceeded.

See the MyID Operator Client error codes section.

Updated the text for the following error:

• OC10011 – The item is not available. This may be due to the item changing status, the link no longer being valid or you do not have permission to access this information.

See the MyID Operator Client error codes section.

Added instructions for ensuring hotfix and configuration package scripts are trusted.

See the Installing a server configuration package and Applying a hotfix sections.

Added a cross-reference to the client software prerequisites for the MyID Client WebSocket Service.

See the Installing the MyID Client WebSocket Service section.

Updated information about upgrading systems with customized configuration files

See the Upgrading systems with customized configuration files section.

Updated information on setting the card encoding options in the credential profile for VSCs.

See the Setting up a credential profile for VSCs section.

Information about the revocation endpoint that allows you to revoke access tokens.

See the Revoking access tokens section.

Added information about working with certificates in the MyID Operator Client.

See the Working with certificates and Certificates report sections.

Removed information about launching MyID Desktop certificate workflows that have now been superseded by MyID Operator Client certificate management features.

See the Using Certificate Administration workflows section.

Updated the details of the automatic file name generation for soft certificates, which now prevent invalid file names from being generated.

See the Customizing certificate file names section.

Added information about viewing initial server-generated PINs on the View Device screen.

See the Viewing the initial PIN for a device section.

The Reinstate Card workflow in MyID Desktop has now been replaced by the Reinstate option on the View Device screen.

See the Reinstating a device section.

Updated the list of available fields in the Unassigned Devices report.

See the Unassigned Devices report section.

Updated the list of available fields in the Requests report.

See the Requests report section.

Updated the list of available fields in the Devices report.

See the Devices report section.

Updated the list of available fields in the Stock Transfers report.

See the Stock Transfers report section.

Updated the list of available fields in the Additional Identities (AID) report.

See the Additional Identities (AID) report section.

Added information about using the Device History tab to view the audit trail for a device.

See the Viewing a device's history, Working with the audit trail, and Viewing audit details sections.

Updated the information on using the View Full Audit role permission.

See the Viewing a person's history and Unrestricted Audit Report sections.

Added information on working with device categories.

See the Working with device categories and Issued devices by category report sections.

Added the Device Category field to the list of additional search criteria in several reports relating to devices.

See the Assign Device Search report, Assigned Devices report, Awaiting Delivery report, Devices report, Mobile Devices report, Requests report, and Unassigned Devices report sections.

Added information about a warning dialog if the selected folder already contains soft certificate files that may be overwritten.

See the Collecting a soft certificate section.

Removed a restriction on historic certificates that was due to a limitation of 50 characters on certificate names on Samsung Android devices.

See the Setting up support for historic certificates section.

Updated the list of iOS versions supported.

See the Supported devices section.

Added information about Giesecke+Devrient SCE v7.0 smart cards with the CoolKey applet.

See the Giesecke+Devrient smart cards section.

Added information about nine new Thales devices.

See the Thales authentication devices section.

Deprecated five old Thales devices.

See the Thales authentication devices section.

Updated the driver version for several existing Thales devices to SafeNet Minidriver 10.8 R9.

Updated information about upgrading systems with customized configuration files

See the Reverse proxies and load balancing section.