What's New
ActivID Credential Management System v5.8
ActivID CMS 5.8 for Windows provides the following improvements to the previous version:
-
ActivID ActivClient is no longer required to perform device issuances and device updates when using a Chrome or Edge browser.
-
ActivID CMS 5.8 supports the simplified Crescendo 2300 and Crescendo Key profiles listed below:
-
Enterprise – Crescendo with PKI (4 slots), OATH (TOTP, HOTP, OCRA), SEOS and FIDO
-
Enterprise – Crescendo (No SEOS) with PKI (10 slots), OATH (TOTP, HOTP, OCRA), and FIDO
-
Enterprise – Crescendo (No FIDO) with PKI (10 slots), OATH (TOTP, HOTP, OCRA), and SEOS
Note: Customers can configure an alphanumeric PIN of up to 25 characters with the above profiles. -
PIV/CIV – Crescendo FIPS profile - compatible only with Crescendo 2300 FIPS and Crescendo Key FIPS
Note: Some of the profiles above are a merge of previous profiles. Refer to the HID ActivID Credential Management System Device Profiles and Hardware Devices Technical Note for more details.
-
-
Profiles for EOL devices have been deprecated and removed from the product. Customers can continue to manage devices based on these profiles but will not be able to create new device policies based on these profiles.
Refer to the HID ActivID Credential Management System Device Profiles and Hardware Devices Technical Note for the lists indicating the deprecated profiles.
-
Sample Credential Provider:
ActivID CMS 5.8 now provides a Credential Provider sample.
It may be used as a basis for custom Credential Providers, or simply configured for pocket-sized demos.
See the README file included with the product for the installation procedure, and more details on its features and limitations.
-
OATH support for AAA:
The latest AAA Authentication, Authorization, and Accounting hotfix must be installed for OATH support.
User Attribute to Store Device Serial Number: ActivID CMS must be configured with a multi-valued LDAP attribute (for example, otherTelephone).
The mono-valued facsimileTelephoneNumber will not work with OATH devices. (It will still work for SKI though.) For more information, refer to Setting Parameters for User Attributes.