CSP^id Support

Enhancements:

• #4489: Added password timeout option to require password reentry after a period of inactivity
• #4490: Protects sensitive key and other material kept in memory. See CSPid User's Guide for details
• #4511: Added the GUI command line option '--start-hidden' for use on operating systems that do not have a system tray

Corrected Defects:

• #4443: The '--export-all-keys' option now properly errors when unable save a file
• #4467: The password prompt for PKCS#12 import now includes the name of the file the user is trying to import
• #4476: The '--showsuccess' message no longer appears after each succesful PKCS#12 file is imported when using the '--import' GUI command line option
• #4481: The password creation dialog now informs the user when the new and confirmation passwords do not agree

Check that the Windows Certificate Propagation Service has not been disabled by the user or a group policy setting.

If you are using RDP to connect to a remote desktop on which CSPid is installed, RDP may redirect attempts to use CSPid to your local machine. In this situation you may see error messages like the following when attempting to sign a document opened in an Office application on the remote host:

"Your signature could not be added to the document. If your signature requires a smart card, ensure that your card reader is installed correctly."

This problem can be resolved by installing a special 'driver-only' version of CSPid on the local system.

There appears to be compatibility issues between CSPid and SA5CLI versions 5.9.4 and 5.9.1 that we believe are due to bugs in those SecretAgent builds. If you encounter this problem, please request a SA5CLI update.

This issue only applies when roaming profiles are used by both Windows accounts.

If an existing CAPI key pair in one Windows account is loaded into CSPid in another account, CAPI will incorrectly mark the private key as being in CSPid for both accounts. This effectively makes the private key inaccessible from the first (CAPI-only) account.

If the key pair must be shared, CSPid should be installed on both accounts and the key pair either placed in a shared P15 file or duplicated in each user's individual P15 file.

Clicking on "ISC CSPid" in the Firefox 2/Linux Security Devices dialog causes Firefox to crash with the error:

*** glibc detected *** free(): invalid pointer: 0x0a346c30 ***

This didn't happen with Firefox 1.5 and hasn't been noted on other platforms, so it is most likely a Firefox bug.