-
Title
One Identity Defender Hotfix for KB 328355 - Defender algorithm used for generating software tokens generated encryption keys with low entropy -
Description
This hotfix addresses a functionality issue. The minimum version required for installing this hotfix is 5.9.5.
This Hotfix will need to be installed anywhere tokens are generated (such as Administration Console / Management Portal / Management Shell).
With this hotfix, Defender will now use cryptographically secure pseudorandom number generator to generate encryption keys for Defender software tokens, making the generated tokens more secure.
Remediation steps after applying the HotfixPerform the remediation steps after applying the hotfix as mentioned in the following link: -
Cause
This hotfix addresses a functionality issue. The minimum version required for installing this hotfix is 5.9.5.
This Hotfix will need to be installed anywhere tokens are generated (such as Administration Console / Management Portal / Management Shell).
With this hotfix, Defender will now use cryptographically secure pseudorandom number generator to generate encryption keys for Defender software tokens, making the generated tokens more secure.
Remediation steps after applying the HotfixPerform the remediation steps after applying the hotfix as mentioned in the following link: -
Resolution
Please download the hotfix, Defender Hotfix for 5.11 for KB 328355 here.
Please download the hotfix, Defender Hotfix for 5.10 for KB 328355 here.
Please download the hotfix, Defender Hotfix for 5.9.6 for KB 328355 here.
Please download the hotfix, Defender Hotfix for 5.9.5 for KB 328355 here.
Resolved Issues
The following is a list of issues resolved in this hotfix.
Resolved Issue Issue ID Defender algorithm used for generating software tokens generated encryption keys with low entropy 255241 Applicability of this hotfix
Products affected by this hotfix
Product Name Version Platform One Identity Defender 5.11, 5.10, 5.9.6, 5.9.5 All supported To install the hotfix
1. Copy the supplied file Defender--SOL328355.exe.rename to the computer running Defender.2. Remove the .rename file name extension.3. Run the file Defender--SOL328355.exe and follow the on-screen instructions to complete the hotfix installation.
Verifying successful completion
To determine if this hotfix is installed1. Open the list of installed programs and updates (appwiz.cpl).2. Under Tasks, click View installed updates.3. Check the list of installed programs and updates:- Defender Hotfix: SOL312727 under Defender 5.11, 5.10, 5.9.6, 5.9.5
To remove this hotfix
- On the computer running Defender, open the list of installed programs and updates (appwiz.cpl).
- Under Tasks, click View installed updates, select Defender Hotfix: SOL328355-# in the list, and then click Uninstall.
-
Attachments