10.4.2 Credential Web Service

The Credential Web Serviceguide has been updated with the following:

• New methods have been added.

  See the RequestCertificate, GetCertificate, RequestCertificatePfx, GetCertificatePfx, IsAlive, Error messages, and Default settings sections.

10.4.3 Derived Credentials Self-Service Request Portal

The Derived Credentials Self-Service Request Portal guide has been updated with the following:

• Added the Derived Credential Revocation Check Interval option and revised the list of available derived credential options for MyID Enterprise.

  See the MyID configuration options section.

10.4.4 Entrust CA Gateway

The Entrust CA Gateway Integration Guide has been updated with the following:

• Added a note about consulting the Entrust documentation for additional requirements to ensure that you have an operational Entrust system available through the Gateway.

  See the Supported Entrust CA Gateway versions section.

• Updated the API and Application versions that have been tested with MyID.

  See the Supported Entrust CA Gateway versions section.

10.4.5 Entrust CA Integration Guide

The Entrust CA Integration Guide has been updated with the following:

• Added details of support for mandatory NACI attributes.

  See the Certificates with mandatory NACI values section.

10.4.6 Error Code Reference

The Error Code Reference has been updated with the following:

• Updated the details of the following error:

  • WS50016 – The person selected does not have all required information for this credential profile. Check the Person History audit details to identify the missing requisite user data.

  See the MyID Operator Client error codes section.

• Updated the details of the following error:

  • 85188 – Unable to connect to the authentication server.

  • 881044 – now general failure to carry out Integrated Windows Logon as a possible cause of the error.

  See the Web Service error codes section.

• Added the following errors:

  • 890800 – Token validation failed.

  • 890801 – Issuer validation failed.

  • 9007152 – The card suitability check has failed.

  See the Web Service error codes section.

• Added the following errors:

  • -99900033 – An unknown error has occurred, contact customer support.

  • 890606 – Microsoft WebView2 Runtime <VERSION> or higher is not installed. Please contact your administrator.

  See the MyID Windows client error codes section.

• Added the following error:

  • IA12002 – Decryption failure.

  See the MyID Identity Agent error codes section.

10.4.7 Installation and Configuration Guide

The Installation and Configuration Guide has been updated with the following:

• Updated the required version of the OLE DB Driver from 18 to 19.

  See the Installing the database software and Upgrading MyID sections.

• Added requirement for the SqlServer PowerShell module to run SIU tests against the database.

  See the Running SIU tests against the database and Upgrading MyID sections.

• Added requirement for the installation user to have either the sysadmin role or the securityadmin role to run the test SIU-097.

  See the Database configuration considerations section.

• Added a clarification that the MyID installation program is designed to be run from within the MyID Installation Assistant.

  See the Running the installation program section.

• Added requirements for the Microsoft WebView2 Runtime on client workstations.

  See the Microsoft WebView2 Runtime section.

• Added requirements for the .NET Core Desktop Runtime to be installed on the application server if you want to use the MyID Document Uploader utility.

  See the Installing .NET Framework and .NET Core section.

• Updated the versions of Windows 10 and Windows 11 supported for client workstations.

  See the Operating systems section.

• Updated the supported server operating systems to include Windows Server 2022.

  See the Operating systems and Server roles for Windows Server 2022 sections.

• Updated the versions of SQL Server supported.

  See the Database versions section.

10.4.8 Lifecycle API

The Lifecycle API guide has been converted to HTML, in line with the rest of the MyID documentation set, and also contains the following:

• The Afficiate value in the EmployeeAssociation node in the PIVSchemaTypes schema has been corrected to be Affiliate.

  See the PivCardRequest/Agency/Applicant/Position/EmployeeAssociation and PIVSchemaTypes schema sections.

• Added nodes for importing the user security identifier (user SID) for PIV and Enterprise.

  For PIV, see the PivCardRequest/Agency/Applicant/Account/UserSID and PIVSchemaTypes schema sections.

  For Enterprise, see the CMSCardRequest/Group/User/Account/UserSID and CMSSchemaTypes schema sections.

10.4.9 Microsoft Windows CA Integration Guide

The Microsoft Windows CA Integration Guide has been updated with the following:

• Added information about user security identifiers (user SIDs).

  See the Enable certificate templates for issuance within MyID and Adding extensions to certificate templates sections.

• Updated the supported operating systems to include Windows Server 2022.

  See the Hardware and software requirements section.

10.4.10 Mobile Identity Management

The Mobile Identity Management guide has been updated with the following:

• Updated the section on using derived credentials with an MDM.

  See the MDMs and derived credentials section.

• Added information about 3DES and AES encryption.

  See the Configuring MyID for 3DES encryption section

  Added information about installing the rest.provision service.

  See the REST API for provisioning mobile credentials section

10.4.11 MyID Authentication Guide

The MyID Authentication Guide has been updated with the following:

• Updated the required version of the OLE DB Driver from 18 to 19.

  See the Installing the standalone authentication service section.

10.4.12 MyID Client MSIX Installation Guide

The MyID Client MSIX Installation Guide has been incorporated into the main documentation set. Previously, this was available only as a PDF in the folder containing the MSIX installation programs.

10.4.13 MyID Core API

The MyID Core API document has been updated with the following:

• Added information on obtaining an extension grant to launch the Select Security Device dialog using the MyID Client Service API.

  See the Obtaining an extension token for Select Security Device section.

• Added a note about avoiding requesting access tokens unnecessarily.

  See the Calling the API from an external system section.

10.4.14 MyID Document Uploader

The MyID Document Uploader guide is new for this release.

10.4.15 MyID Operator Client

The MyID Operator Client guide has been updated with the following:

• Added information about the display of user images and full names on the Select Security Device dialog.

  See the Reading a device section.

• Added further configuration for load balanced systems.

  See the Load balancing, Setting the issuer for load-balanced systems, and MyID Operator Client pass-through authentication with a load balancer sections.

• Added a note on the credential profile permissions needed when requesting an update for a device.

  See the Requesting an update for a device section.

• Added information about user security identifiers (user SIDs).

  See the Editing a person, Searching for a person, and Additional Identities (AID) report section.

• Added a new section on using the Group dialog, including information on selecting the list view and viewing descriptions.

  See the Selecting a group section; also added links from the Adding a person, Searching for a person, Searching for a device, and Searching for a request sections.

• Updated the People report to include the User SID Present and Enabled additional criteria, and the Enabled field in the report.

  See the People report section.

10.4.16 PrimeKey EJBCA Integration Guide

The PrimeKey EJBCA Integration Guide has been updated with the following:

• Added information about user security identifiers (user SIDs).

  See the Prerequisites, Configuring custom certificate extensions, and Configuring the CA within MyID sections.

10.4.17 Self-Service App

The Self-Service App guide has been updated with the following:

• Added requirements for the Microsoft WebView2 Runtime to display HTML-based terms and conditions templates.

  See the Prerequisites section.

10.4.18 Self-Service Kiosk

The Self-Service Kiosk guide has been updated with the following:

• Added requirements for the Microsoft WebView2 Runtime to display HTML-based terms and conditions templates.

  See the Prerequisites section.

• Added information on enabling the printing of terms and conditions in the Self-Service Kiosk.

  See the Enabling printing of terms and conditions section.

10.4.19 Smart Card Integration Guide

The Smart Card Integration Guide has been updated with the following:

• Updated information about SafeNet SC650 V4.1 smart cards.

  See the Thales Trusted Cyber Technologies smart cards section.

• An additional specification – BAP#087487 – has been added for IDEMIA ID-One PIV 2.4.1 on Cosmo V8.1 smart cards.

  See the IDEMIA smart cards section.

• Information about SafeNet eToken 5110+ FIPS Level 3 tokens has been added.

  See the Thales authentication devices section.

• The list of devices on which Global PIN is supported has been extended.

  See the Global PIN support section.

10.4.20 Symantec (DigiCert) Managed PKI Integration Guide

The Symantec (DigiCert) Managed PKI Integration Guide has been updated with the following:

• Updated Symantec MPKI version that has been tested with MyID.

  See the Hardware and software requirements section.

10.4.21 System Interrogation Utility

The System Interrogation Utility guide has been updated with the following:

• Added test SIU-022 to cover checking that the required PowerShell module for running database tests is installed.

  See the Description of derived tests section.

• Updated test SIU-097 with the requirement for the installation user to have either the sysadmin role or the securityadmin role.

  See the Description of derived tests section.

• Updated the list of tests to specify Windows Server 2022 as a supported operating system.

  See the Description of derived tests section.

10.4.22 System Security Checklist

The System Security Checklist has been updated with the following:

• Updated the instructions for setting up TLS 1.2 to remove the requirement to update the UDL files, as this is carried out by the MyID installation program.

  See the Securing MyID with TLS 1.2 and TLS 1.3 section.

• Updated the procedure for removing details of the IIS server to remove the configuration required for older, unsupported operating systems.

  See the Remove details of the IIS server section.

10.4.23 Thales Luna HSM Integration Guide

The Thales Luna HSM Integration Guide has been updated with the following:

• Updated the location of instructions in the Thales documentation for configuring a connection.

  See the Configuring the connection for DPoD section.