Release note Personal Desktop Client 5.2.1

Plugout can use multiple third-party PKCS#11 modules

Plugout can use multiple third-party PKCS#11 modules now, as directed by the P11_Libraries option in the Plugout-section of the configuration file.

macOS smart card app extension and PIN-pad readers

Token driver app extension for smart card integration in macOS now supports PIN-pad readers.

Flag CKA_ALWAYS_AUTHENTICATE has been added

Personal PKCS#11 module now reports CKA_ALWAYS_AUTHENTICATE flag for keys that require authentication for each use of the key.

Flag CKF_TOKEN_INITIALIZED has been added

Personal PKCS#11 module now includes CKF_TOKEN_INITIALIZED flag in TokenInfo.

macOS smart card app extension logging

Token driver app extension for smart card integration in macOS now creates extra log files in the following location:

~/Library/Containers/com.nexusgroup.macid2.MacID2.CryptoToken/Data/Library/Application\ Support/se.nexus.Personal/log

Attach log files when reporting bugs for macOS integration.

Added minidriver PIN cache settings

Per-application PIN caching with minidriver can now be set using the MD_EnableCachePIN option in the minidriver-section of the configuration file. Minidriver also respects existing CSP per-application PIN cache settings, if the minidriver specific option is not present.

There was an issue with Omnikey OK3821 pin-pad reader, that it could not handle PIN/PUK longer than 8 digits. This issue has been fixed.

When used from low-integrity processes, for example, Edge isolated processes, Personal Desktop Client couldn't read from the global config file. This issue has been fixed.

The D-Trust card advertised signature mechanisms that were not supported. This has been corrected.