NetIQ Self Service Password Reset 4.5 Patch Update 6 Release Notes

May 2022

NetIQ Self Service Password Reset 4.5 Patch Update 6 includes one enhancement.

The enhancement is made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure our products meet all your needs. You can post feedback in the NetIQ Self Service Password Reset forum on Micro Focus Forums, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available on the NetIQ website in HTML and PDF formats. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted on the NetIQ Self Service Password Reset Documentation page. To download this product, see the NetIQ Downloads website.

1.0 What is New

This release includes the following enhancements:

Component

Description

Updated Apache Tomcat (Security Improvement)

With this release, the Apache Tomcat has been updated to version 9.0.62 for the appliance and the Windows MSI file.

Adds Provision to Resend Token

The Allow Token Resend setting enables users to resend a token if they do not receive it on the first attempt. This setting is now available for the following modules:

  • Helpdesk

  • Update Profile

  • New User Registration

  • User Activation

Adds Support for CDATA

From this release, the Self Service Password Rest setup UI supports CDATA as a data type. Similarly, it enables administrators to save data in the CDATA format via the ssprconfiguration.xml configuration file.

A New Attribute to Add a Recipient Address in the Forgotten Password Verification Email

This release introduces a new LDAP attribute, Derived User Email Attribute. This attribute can be configured with Macros to add a new recipient email address in the Forgotten Password Verification Email template.

Adds a Setting to Configure LDAP Search Timeout

This release introduces a new setting, LDAP Search Timeout to the Application. This setting allows you to specify the maximum amount of time before the search is timed out.

Improved REST API

In this release, the OAuth Login URL has been updated with the following REST API URL:

https://dns-name-advanced-authentication/osp/a/TOP/auth/oauth2/auth.

OAuth connection must be modified manually in the configuration file, or it will not work.

2.0 Resolved Issues

This release includes the following software fixes:

Component

Description

Administration Page

When an administrator enables or disables Enable Word List in the Password Policies, the word list is implemented if the Password Policy Source is set to Merge local and LDAP.

Administration Page

When a user tries to add localized shortcuts, the locale selection widow appears after selecting Add Locale in Shortcut Items. When the administrator clicks on the flag of the preferred language, the locale selection widow instantly closes.

Administration Page

When users perform User Activation, Self Service Password Reset redirects them to the login page instead of allowing them to set up a new password.

Administration Page

After upgrading to Self Service Password Reset 4.5 Patch Update 5, the Console (StdOut) Log Level in Logging is at Trace level irrespective of the previous setting.

Forgotten Username and New User Registration

In the Forgotten Username and New User Registration modules, there is no space between the Email Address and Confirm Email Address fields.

Forgotten Password

Pre-condition: Configure an OAuth2 service and set OAuth to Required in Verification Methods in the Forgotten Password module

When a user uses the Forgotten Password module to recover a forgotten password, the OAuth2 service prompts for the username and password again instead of redirecting the user to the verification page.

Now the application can be configured to pass the login_hint parameter and value when initiating an authorization request with OAuth2 service providers.

Helpdesk Page

When a Helpdesk Administrator performs an Advance Search for active users after creating a filter in the Help Desk Search Filter, the following error message is displayed:

Service is not enabled.

Helpdesk Page

When a user attempts to open the Helpdesk page for the first time, the page does not load until the user refreshes the page.

This issue occurs when the Self Service Password Reset is integrated with NetIQ Identity Manager.

3.0 System Requirements

This release includes support for the following operating systems:

  • Appliance: You can deploy the Self Service Password Reset appliance in the following virtual systems:

    • Hyper-V version 4.0

    • VMware ESX 6.5 or later

  • Windows .msi File: You can deploy the Self Service Password Reset .msi file on the following platforms:

    • Windows Server 2012

    • Windows Server 2016

    • Windows Server 2019

    • Amazon Web Services EC2 Windows 2016

    • Microsoft Azure Marketplace Windows 2016

  • WAR File: You can deploy the Self Service Password Reset WAR file on the following platforms:

    • Red Hat Enterprise Linux Server 7.4 or later (64-bit)

    • Red Hat Enterprise Linux Server 8.1

    • SUSE Linux Enterprise Server

      • 12 SP3, 12 SP4, and 12 SP5 (64-bit)

      • 11 SP4 or later (64-bit)

    • Amazon Web Services EC2 SUSE Linux Enterprise Server 12 SP3

      • Red Hat Enterprise Linux 7.4

      • SUSE Linux Enterprise Server 12 SP3

    • Microsoft Azure Marketplace

      • Red Hat Enterprise Linux 7.4

      • SUSE Enterprise Server 12 SP3

For more information about system requirements, supported operating systems, and browsers, see Deployment Requirements of Self Service Password Reset in the Self Service Password Reset 4.5 Installation Guide.

4.0 Installing or Upgrading Self Service Password Reset

To install Self Service Password Reset, see Installing Self Service Password Reset in the Self Service Password Reset 4.5 Installation Guide.

To Upgrade Self Service Password Reset, see Upgrading or Migrating Self Service Password Reset in the Self Service Password Reset 4.5 Installation Guide.

To upgrade to Self Service Password Reset 4.5 Patch Update 5, you need to be on one of the following versions:

  • Self Service Password Reset 4.5 Patch Update 4

  • Self Service Password Reset 4.5 Patch Update 3

  • Self Service Password Reset 4.5 Patch Update 2

  • Self Service Password Reset 4.5 Patch Update 1

  • Self Service Password Reset 4.5

For more information to upgrade to Self Service Password Reset 4.5 Patch Update 5 from Self Service Password Reset 4.4.x or before, see Automatically Upgrading Self Service Password Reset.

5.0 Verifying the Installation

  1. Log in to the Self Service Password Reset administration console as an administrator.

  2. In the toolbar, click your name, and then click Administration.

  3. Click the About tab and then verify that SSPR Version is the latest one.

6.0 Contact Information

For specific product issues, contact Micro Focus Support at https://www.microfocus.com/support-and-services/.

Additional technical information or advice is available from several sources:

7.0 Legal Notice

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.microfocus.com/about/legal/.

© Copyright 2022 Micro Focus or one of its affiliates.