MagicEndpoint Support
WinMagic strongly recommends that you install the most recent software release to stay up-to-date with the latest functional improvements, stability fixes, security enhancements and new features.
About This Release
This document contains important information about the current release. We strongly recommend that you read the entire document.
Recommended – WinMagic recommends this service release for all environments. Apply this update at your earliest convenience.
Documentation
MagicEndpoint Client and IdP Documentation can be accessed at:
https://magicendpoint10-en.knowledgebase.winmagic.com/index.html
Previous Versions
|
ME 1.4.1 (Current) |
November 11, 2023 |
Updates, improvements, new features |
ME 1.4 |
November 11, 2023 |
Updates, improvements, new features |
ME 1.3.1 |
March 2, 2023 |
Updates, improvements, new features |
ME 1.3 |
December 9, 2022 |
Updates, improvements, new features |
| ME 1.2 | July 20, 2022 |
Updates, improvements, new features |
ME 1.0 |
March 31, 2022 |
Initial Release of MagicEndpoint and |
System Requirements
- MagicEndpoint requires that the SecureDoc client agent software be installed and registered with a SecureDoc Enterprise Server before installing MagicEndpoint. NOTE: While it offers optimum security to permit SecureDoc to encrypt the disk drive, it is not a necessity; The SES Client can be installed with a Profile/Installation Package that specifies Removable Media Only (RMO) protection.
- If using MagicEndpoint Identity Provider (IdP) service as the delegated IdP to an Azure AD (AAD) domain (for instance, to use MagicEndpoint IdP for Microsoft 365/Office 365), it is important to note that new devices cannot be joined to that AAD domain.
a. In such a case, the environment needs to be a hybrid one, meaning devices need to be joined to the local domain, which is then synchronized to the Azure AD domain for O365.
- For TPM-based authentication (preferred), devices must have TPM 2.0.. For devices having TPM 1.2 or earlier, or which lack a TPM completely, those devices will not be able to generate or use TPM-based Keys, but can still utilize Software Tokens for authentication. Software tokens still constitute strong security, but do not reach the level of strength that TPM-based tokens can provide.
Client OS Support
In this initial version, only Windows devices are supported.
Devices utilizing MagicEndpoint authentication must have Windows 10 or Windows 11 – Windows 7 is not supported.
Version 1.4.1 of MagicEndpoint
NOTE: This version does not support direct upgrade on top of a previous version. Existing customers having previous versions of MagicEndpoint installed should a) Uninstall the MagicEndpoint client, then b) Install this version, then c) Clear their Internet Browser’s cache before attempting to use MagicEndpoint for authentication.
Which customers should upgrade to ME version 1.4.1?
New customers should deploy this version. Existing customers who had been testing MagicEndpoint 1.0, 1.1, 1.2, or 1.3, 1.4, or the same product under pre-release/Beta names like FIDO Eazy Diamond/3.0/Enterprise or SecureDoc Passwordless Authentication and who wish to explore new and updated functionality in this version should install this service release per the recommendation above.
Improvements
Improvement: [IdP] "Use Trust Server Certificate" Option Now Available in IdP 9.1 SR1.
Description: In IdP 9.1, the "Use Trust Server Certificate" option was missing. After upgrading to IdP 9.1 SR1, this option is now included but not enabled by default. It helps to make your connection more secure.
Solution: To use this option, go to the IDP installation page and check the "Trust Server Certificate" box. This update makes it easy to boost your security settings after upgrading.
Affected tickets: SD-48589
Improvement: MagicEndpoint/SecureDoc Identity Provider now permits the Administrator to define user confirmation action per Application.
Description: MagicEndpoint/SecureDoc Identity Provider has been improved to permit the Administrator to define user confirmation action on a per-Application basis, defining either a) no action required, b) User must click a confirmation button to prove presence, or c) user must authenticate.
Solution: Administrators can now customize user confirmation actions for each application by choosing the desired action from the provided options. This feature allows for greater flexibility and enhanced security tailored to the needs of each application.
This update provides Administrators with more control over user interactions, improving the overall security and usability of the system.
Affected tickets: SD-41562MagicEndpoint/SecureDoc IdP Configuration Enhanced with GUI.
Description: The initial version of SecureDoc IdP required manual text-file configuration for database and other settings.
Improvement: The latest version introduces a user-friendly Graphical User Interface (GUI) for configuration, this GUI guides users through the process of defining settings needed to configure SecureDoc IdP.
This enhancement simplifies the configuration process, making it more intuitive and efficient for users.
IdP Out-of-Band Option Added to the IdP Server Login Page.
Description: Configuring out-of-band functionality using the WMAuth Authenticator app was previously complex and prone to errors.
Improvement: The new version simplifies this process significantly. Users can now go to the IDP Server panel and click on the "Mobile" option. A QR Code will be displayed, which can be scanned using the WMAuth Authenticator app. This will automatically provide the necessary settings, making the configuration process easier and more reliable. Once set up, authentication becomes more streamlined and automated.
This enhancement greatly simplifies the setup process, improving user experience and security.
Affected tickets: SD-41397
Improvement: Easier Logins with Session Cookies.
Description: We're making logins easier by adding session cookies. After logging into SP1, your session will stay active for 10 minutes. If you log into SP2 within this time, you won't need to verify again.
Solution: IDP now allows for smooth and automatic logins. If you have access to SP2, you'll log in seamlessly. If SP2 needs extra verification, IDP will ask for it. Otherwise, you'll log in without any extra steps.
Action Mode Priority: No user action required << Simple gesture/click << Must authenticate.
If the IDP portal is open, it will keep renewing cookies, so they won't expire after 10 minutes.
This update makes logging in more convenient, allowing you to move between services without repeated verifications.
Affected tickets: SD-47783
Limitations
SecureDoc IdP Phone-Based Authentication Enhanced for Latest Registered Phone.
Description: SecureDoc IdP currently communicates with only the most-recently-registered phone for authentication. This ensures a streamlined and secure process by focusing on the latest registered device.
Work-Around: To make the most of this feature, it is recommended to use a single phone for authentication. Users should ensure they have their most recently registered phone available during authentication for a smooth experience.
Note: WinMagic MagicEndpoint supports one registered phone at a time for authentication. Registering a new phone will replace the previous one, ensuring the latest device is always in use. WinMagic is actively working on expanding this feature, with potential improvements in future releases.
Affected tickets: SD-41247
How to Install/Upgrade
Customers with an active support plan should contact support@winmagic.com to receive the latest download link for their MagicEndpoint / MagicEndpoint IdP upgrade.
Contacting WinMagic
| WinMagic 5770 Hurontario Street, Suite 501 Mississauga, Ontario, L5R 3G5 Toll free: 1-888-879-5879 Phone: (905) 502-7000 Fax: (905) 502-7001 |
Sales: sales@winmagic.com Marketing: marketing@winmagic.com Human Resources: hr@winmagic.com Technical Support: support@winmagic.com For information: info@winmagic.com For billing inquiries: finance@winmagic.com |
This product includes cryptographic software written by Antoon Bosselaers, Hans Dobbertin, Bart Preneel, Eric Young (eay@mincom.oz.au) and Joan Daemen and Vincent Rijmen, creators of the Rijndael AES algorithm.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (https://www.OpenSSL.org/).
WinMagic would like to thank these developers for their software contributions.
©Copyright 1997 – 2023 by WinMagic Corp. All rights reserved.
Printed in Canada Many products, software and technologies are subject to export control for both Canada and the United States of America. WinMagic advises all customers that they are responsible for familiarizing themselves with these regulations. Exports and re-exports of WinMagic Inc. products are subject to Canadian and US export controls administered by the Canadian Border Services Agency (CBSA) and the Commerce Department’s Bureau of Industry and Security (BIS). For more information, visit WinMagic’s web site or the web site of the appropriate agency.
WinMagic, SecureDoc, SecureDoc Enterprise Server, MagicEndpoint, MagicEndpoint IDP, Compartmental SecureDoc, SecureDoc PDA, SecureDoc Personal Edition, SecureDoc RME, SecureDoc Removable Media Encryption, SecureDoc Media Viewer, SecureDoc Express, SecureDoc for Mac, MySecureDoc, MySecureDoc Personal Edition Plus, MySecureDoc Media, PBConnex, SecureDoc Central Database, and SecureDoc Cloud Lite are trademarks and registered trademarks of WinMagic Inc., registered in the US and other countries. All other registered and unregistered trademarks herein are the sole property of their respective owners. © 2023 WinMagic Corp. All rights reserved.
© Copyright 2023 WinMagic Corp. All rights reserved. This document is for informational purpose only. WinMagic Corp. makes NO WARRANTIES, expressed or implied, in this document. All specification stated herein are subject to change without notice.