Secure Password Extension (SPE) and Offline Password Reset (OPR) Frequently Asked Questions (4257095)

Secure Password Extension (SPE) and Offline Password Reset (OPR) Frequently Asked Questions

Secure Password Extension (SPE) and Offline Password Reset (OPR) Frequently Asked Questions

SPE (Secure Password Extension)

1. Password Manager 5.13.1 service is installed and the 5.10 SPE installed on client computers. Will the SPE work?

Answer:       While certain features may work, it is recommended to match client versions with the Password Manager server version to ensure all features function as expected.

2. We're based in the UK and have deployed the SPE to a client computer and can see that it is installed but the link is not visible on the Windows 10 logon screen.

Answer:       By default the SPE requires the language that is set for the logon screen to be en-US

On the Windows desktop change the ‘Welcome’ screen language to “English (United States)”

 

3. I’m working from home and not on a VPN or connected to my work domain. How can I get the SPE to work?

Answer:      https://support.oneidentity.com/password-manager/kb/122194/how-does-the-5-x-secure-password-extension-work-when-a-computer-is-not-connected-to-the-domain-

 

4. How do I manually override the URL used by the SPE

Answer:       https://support.oneidentity.com/password-manager/kb/86632/how-to-manually-override-password-manager-selfservice-url-86632-

 

 

OPR (Offline Password Reset)

1. What is Offline Password Reset and how do I configure it?

Answer:       https://support.oneidentity.com/password-manager/kb/135931/what-is-offline-password-reset-option-used-for-and-how-to-set-it-up-135931-

 

2. I have Password Manager 5.9.3 service installed and the 5.8.2 OPR installed on client computers. Will the OPR work?

Answer:       Yes, the 5.8.2 OPR will work with the 5.9.3 back-end service for password changes, resets, and profile updates.

 

3. When using the OPR the QRCode is incomplete or has text cutting through it.

Answer:      The Windows display scale must be set to 100% in order to see the complete QRCode.

Reference: https://support.oneidentity.com/password-manager/kb/267800/enhancement-request-review-opr-s-qrcode-display-when-clients-scale-is-set-to-over-100-267800-

4. I'm based in Italy and have installed the SPE and the OPR but only the link for the SPE is visible on the login screen.

Answer: Either:

Deploy the group policy setting "Set custom name for the Offline Password Reset button (command link) in Italian" to the client computer

or

Change the ‘Welcome’ screen language to “English (United States)”

See item #2 under the SPE section above.

 

5. Is Internet access required for the client workstation?

Answer: The client workstation running OPR itself doesn't need internet access to function. But the client workstation needs to have already been joined or previously been on the Domain to be able to create a leaf object in AD and get the shared secret required by OPR.

 

 

General

1. Logs

To enable verbose logging on a client running the SPE

https://support.oneidentity.com/password-manager/kb/98432/how-to-turn-on-spe-gina-logging-in-password-manager-5-x-98432-

Obtain logs from the Password Manager server

PMAdmin > General Settings > Logging > Verbose Logs

 

2. Upgrading the SPE

https://support.oneidentity.com/password-manager/kb/187015/how-to-upgrade-the-password-manager-secure-password-extension-spe-187015-