Fixed issues
- The following FAS powershell commands now work correctly when FAS is configured to generate user certificates with EC (Elliptic Curve) keys:
Test-FasCrypto
Test-FasUserCertificateCrypto
[AUTH-2177]
-
In previous versions of FAS, a new ISignerCertificate object was created for each certificate signing request. Creation of ISignerCertificate objects was found to be a potential bottleneck in some Active Directory environments. In this release FAS re-uses the same object to avoid the bottleneck. [AUTH-2168]
-
On the VDA, the following event log messages are observed:
- Event 57, CertificateServicesClient-CertEnroll: The CitrixLogonKsp provider was not loaded because initialization failed.
- Event 57, CertificateServicesClient-CertEnroll: The CitrixVirtualSmartcardKsp provider was not loaded because initialization failed.
The providers named in these events support FAS authentication, but the events do not indicate a problem with FAS functionality.
The latest FAS providers bundled with the VDA components won’t cause these events to be generated. [AUTH-2184, XAC-58562]
Fixed issues
Copied!
Failed!