PER-4078

Minidriver PIN caching by certificate key usage

PIN caching can be disabled for specific applications, such as where a PIN protects keys with certificates that have selected key usage with the configuration option ForceLoginBeforeSignKeyUsage. Any existing CSP_PKCS11.ForceLoginBeforeSignKeyUsage settings are kept. Read more here: PIN caching in Personal Desktop Client.

PER-4123

Allow variables in P12 mount point path

It is now possible to use environment variables (including "~" for Linux) in P12 mount point path configuration entries.

PER-4136

TLS 1.3 client authentication support added

TLS 1.3 client authentication is now supported in Chrome, Chrome-based Edge and Mozilla Firefox with compatible cards supporting PSS (currently CardOS 5.*).

PER-4137

Support for PSS in PKCS#11 module

PSS mechanisms - both CKM_RSA_PKCS_PSS with parameters and CKM_SHA*_RSA_PKCS_PSS hash variants - are now supported by PKCS#11 module with compatible cards  (currently CardOS 5.*).

PER-4158

Delete certificates for unplugged cards

Personal Desktop Client can, when running, erase certificates tied to an unplugged card from the Windows certificate store. Also certificates for cards that are handled by minidriver can be erased. This is similar to how the CertMover feature worked. For more information, see the CertRemover option in the configuration file. This option is disabled by default.

PER-4084

Error logging in switched user

Detection of card change in the Personal minidriver component has improved, so that user switch with card logon is possible.

PER-4142

Secondary PINs with minidriver

To use cards with multiple PINs when using minidriver has improved.