IBM Tivoli Access Manager for Enterprise Single Sign-On Kiosk Adapter 6.00 Rollup E Fix Pack 4 Release Notes

This document contains information about the fixes addressed by IBM Tivoli Access Manager for Enterprise Single Sign-On Kiosk Adapter (TAM E-SSO: Kiosk Adapter) 6.00 Rollup E Fix Pack 4 as well as a list of known issues, if applicable. It also provides instructions for installing and uninstalling this fix pack.

Contents:

Issues addressed in this fix pack

This section contains the list of issues addressed in this fix pack with the corresponding tracking numbers:

No APARs / Internal Defects:

  • s5429: After completing a password reset, Microsoft Internet Explorer prompts the user to close the window, after which TAM E-SSO: Kiosk Adapter hangs.

Cumulative from Fix Pack 3

No APARs / Internal Defects:

  • s3704: Synchronization fails after password change when using cached credentials. Error message appears stating "The password is incorrect... Make sure [Caps Lock] is not accidentally on".  You will be prompted three times before the authentication dialog is automatically cancelled. Once it is cancelled, the cached credentials are automatically removed for that user and the server can validate the next logon.
     
  • s3705: Synchronization fails when using cached credentials if user's password is set to expire. You will be prompted three times before the authentication dialog is automatically cancelled. Once it is cancelled, the cached credentials are automatically removed for that user and the server can validate the next logon.
     
  • s4244: Installation of TAM E-SSO: Kiosk Adapter causes TAM E-SSO to not respond to applications under a specific circumstance - if an application in a terminate list specifies a window title and the application running that matches the apppath key but does not match the window title. For example, if the application "iexplore.exe" has a window title of "yahoo", and there is another instance of "iexplorer.exe" with the window title "google".

Cumulative from Fix Pack 2

·         s4259: IBM APAR: IZ04585TAM E-SSO: Kiosk Adapter code was modified to read banner.gif and styles.xml within a "Branding" folder. You must create the “Branding” folder in the directory that SMAgent.exe is installed to.  Place a custom styles.xml and/or banner.gif in the branding folder and edit them as necessary.

No APARs / Internal Defects:

  • s4128: If the TAM E-SSO Agent is shut down or terminates unexpectedly while a user's session is open, the last user's credentials are stored with the next user and appear as corrupt credentials.
     
  • s3975: TAM E-SSO: Kiosk Adapter intermittently stopped responding after a long period of use.
     
  • s3914: TAM E-SSO: Kiosk Adapter did not run a pre-populate step if TAM E-SSO: Authentication Adapter was not installed. If an authenticator requires this step and TAM E-SSO: Authentication Adapter is not installed, the pre-populate step does not run which causes the sync manager to re-authenticate. A setting has been added to the TAM E-SSO Administrative Console in TAM E-SSO 6.00 Rollup F, which is not yet released. The registry setting associated with this fix must be manually added to: HKLM\Software\Passlogix\SM\Agent: "Pre-populate". This is a DWORD with a default value of zero. Zero means to run pre-populate when starting a session, a device-in event is received, and TAM E-SSO: Authentication Adapter is installed. One equals always run prepopulate when starting a session. Two equals never run pre-populate.

Cumulative from Fix Pack 1

No APARs / Internal Defects:

  • s3957: TAM E-SSO: Kiosk Adapter intermittently fails after a successful use. The desktop manager no longer displays and leaves the desktop unsecured.
     
  • s3975: TAM E-SSO: Kiosk Adapter intermittently stops responding after a long period of use.

Installation instructions

To help ensure a satisfactory installation of this fix pack:

  1. Ensure that TAM E-SSO: Kiosk Adapter 6.0 Rollup E is installed.
  2. Read these release notes entirely.
  3. Back up all data. IBM strongly recommends that you back up data prior to the installation of any software.
  4. Close all IBM software.

To install this fix pack:

  1. Double-click the IBM_TAM_ESSO_KA_6E_FP04.msp and follow the onscreen instructions.

To install this fix pack manually, copy these files to the TAM E-SSO: Kiosk Adapter installation directory:

  • smagent.exe
  • settingswrapper.dll
  • smbranded.dll
  • smcommon.dll

Known issues or considerations

You cannot uninstall this fix pack. If for any reason you must uninstall the fix pack, you must uninstall the TAM E-SSO: Kiosk Adapter product and reinstall. Please see the TAM E-SSO: Kiosk Adapter Installation and Setup Guide for more information on uninstalling TAM E-SSO: Kiosk Adapter.