Release notes are also available for Password Self Help for Insite.
- Password Self Help is now delivered with new deployment functionality, including the ability to stage the product installation.
- Password Self Help administrators can now be warned that the number of remaining licenses is approaching its limit. The percentage of licenses remaining at which the warning appears can be set by the administrator.
- There is now a separate JOBD for profile SELFHELP (instead of QGPL/QDFTJOBD).
- Password Self Help can now be configured to restrict the same answer for multiple security questions.
- Password Self Help users can now select from a list of predefined security questions.
- A Question ID can now be automatically generated when adding a question to a Language.
- Improvements have been made to DSPPSHPRF (Display Registered Self Help Profiles).
- The performance of DSPPSHPRF has been improved.
- An information processing message is now shown, allowing "User" /*ALL /generic* as a parameter.
- The Password Self Help registration status is now included in the display and OUTFILE.
- Refresh now functions properly.
- General performance improvements.
- A new message is now included in Message Monitor (SHW0103): "Profile [profile] has been disabled within PSH via SelfHelp reset".
Commands ENBPSHPRF and DSBPSHPRF now include the *ALLUSR option, which allows all profiles to be enabled or disabled.
- User profiles are now set to Disabled in Password Self Help (and require action by a Password Self Help administrator to be enabled) when a user registers during a password reset session. Registration during password reset is possible if 'Display to Unregistered Users' is set to 'Y' in the Configuration settings.
- An audit record is now written once for each reset attempt.
- The web reset process no longer triggers message ID's.
- An issue causing the possibility for missing logs in the Insite Dashboard when the time zone differs between the IBM i system and the Insite server has been resolved.
- Case sensitivity while setting the Preferred Password is now consistent.
- Insite errors caused by entering a # character in the Question ID field have been resolved.
- Javacript Console errors during user setup or password reset with Insite have been resolved.
- Backing out of the registration process without answering questions can no longer result in disabling the profile.
- The Password Self Help Message Monitor can now push SHW0101 and SHW0103 notifications to external devices (e.g. SYSLOG).
Insite Dashboard Widgets
The Dashboard on the HelpSystems Insite Web Browser Interface can now be configured to display important information about the general status of Password Self Help. It can also help you keep an eye on registered users, login attempts, and other Password Self Help data. The following Insite Dashboard Widgets have been added:
- Operation Status: Indicates important information about system profiles and Password Self Help users.
- Registered Users: Indicates the number of users who are fully registered, partially registered, and not registered.
- Users with Unanswered Questions: Indicates the number of registered users who have not answered the required number of security questions.
- Reset Attempts: Indicates the number of successful and failed password reset attempts.
- Users Disabled by Failed Resets: Indicates the number of users that have been disabled due to failed reset attempts.
- Reset Attempts by User: Lists users with failed password reset attempts, along with the number of each user's failed and successful reset attempts.
- The command DSBPSHPRF has been added, which sets the profile to DISABLED within Password Self Help.
- The command ENBPSHPRF has been added, which sets the profile in ENABLED within Password Self Help.
- The command CLNUPPSHPR has been added, which removes unwanted profiles (those not physically existing on the system) from Password Self Help.
- The command DSPPSHPRF has been added, which returns information about users. It lists the users that are registered in Password Self Help, what language they are registered to, how many questions are required, and how many they have answered. It also lists each profile's status and the number of questions assigned to each profile. It can be used to show which users have not completed registration. The command can create an outfile or display to the screen.
- The command CPYPSHCNFG has been added, which allows you to copy the Password Self Help configuration, including questions if desired.
Bug Fixes and Usability/Security Improvements
Password Self Help 3.002 includes many fixes and small improvements to general usability and security.
- During password reset, if the password entered is not compatible with your IBM i system's password requirements, help text is available that lists definitions of the error codes.
- Security of self-enrollment has been enhanced.
- A repeating character issue has been resolved for right-to-left languages like Hebrew and Arabic.
- If the number of enabled Password Self Help users exceeds the number of licenses, a message is sent upon the following:
- When ALERTSH signs on.
- On reset attempt via Insite web UI.
- When running the RTVPRFSH command.
- A warning of an expired license is now listed on the report when running RTVPSFSH.
- A message now appears during password reset when the number of enabled users exceeds the number of licensed users.
- Answers can now be configured from right to left during registration for Hebrew, Arabic, and other right-to-left languages.
- On the green screen, if Help and Bulletin text both exist, both Help and Bulletin text are displayed during registration. If no text has been entered, an extra screen no longer appears.
- Insite Web UI Integration. Password Self Help now allows your network users to configure questions and reset passwords from their web browser. See also HelpSystems Insite and Password Self Help for Insite.