Nexus' software components have new names:

Nexus PRIME -> Smart ID Identity Manager
Nexus Certificate Manager -> Smart ID Certificate Manager
Nexus Hybrid Access Gateway -> Smart ID Digital Access component
Nexus Personal -> Smart ID clients

Go to Nexus homepage for overviews of Nexus' solutions, customer cases, news and more.


Skip to end of metadata
Go to start of metadata

Version: 3.10.17

Release Date: 2020-08-31

This release notes contains all changes since 3.10.14.

For information on how to upgrade from Smart ID Identity Manager (PRIME) 3.9 to 3.10, read this instruction: Upgrade from PRIME 3.9 to PRIME 3.10.

After the upgrade of PRIME, execute the database update scripts.

Corrected bugs

JIRA ticket noDescription
CRED-9537

Disabled REST APIs were still active while Identity Manager was in maintenance mode.

CRED-9686

When an existing order was opened in Batch Order, it was not possible to remove one item of the objects in the order.

CRED-9724

Made a security fix for JUEL expression language.

CRED-9726

Security updates:

  • Updated some 3rd party libraries (for example, UI Framework, JavaScript) to fix known vulnerabilities.
  • Fixed a vulnerability in the PKI encoder (client-side java), that allowed remote code execution via a certain command in JUEL Expression language.
CRED-9745

Security update: Closes an uprotected file upload mechansim with CaptainCasa.

CRED-9761

Avoids an unwrapping private key error with PKCS#12 files by repackaging.

CRED-9762

Security update for Jetty server: update from 8.x to 9.4.30.

CRED-9792

Fix for ActionExceptions, which showed resource tags instead of translations in the UI.

CRED-9819

Security update for CaptainCasa UI framework: closing an XXE vulnerability in the CC ImageSizeServlet.

CRED-9874

Fixed a displaying issue with text fields in Identity Manager, Admin and Tenant.

CRED-9905

Solved an issue with the DB Updater failing on Oracle DBs with multiple Identity Manager schemes.

CRED-9947

Solved a NullpointerException with BatchSync.

CRED-9961

Extended logging for Certificate REST API (aka Autoenrollment).

CRED-9988

A new "hybrid profile" option was added to the VSC use cases, supporting both TPM (and as fallback) Windows certificate store provisioning.

Limitations

For information on limitations, see Limitations for Identity Manager.

Contact

Contact Information

For information regarding support, training and other services in your area, please visit our website at www.nexusgroup.com/

Support

Nexus offers maintenance and support services for Smart ID Identity Manager (PRIME) to customers and partners. For more information, please refer to the Nexus Technical Support at www.nexusgroup.com/support/, or contact your local sales representative.