New Features

• Two-Factor Authentication Support
  Key Manager Plus now allows you to integrate with the following services to provide Two-Factor Authentication support for application login.
  1. Google Authenticator
  2. Microsoft Authenticator
  3. One-time password
• AWS Certificate Manager Integration
  Key Manager Plus now supports integration with AWS Certificate Manager (ACM)—a trusted certificate authority and certificate manager. This integration enables users to request, acquire, deploy certificates from Key Manager Plus to AWS ACM , renew and automate the end-to-end lifecycle management of SSL/TLS certificates issued and managed by ACM, directly from the Key Manager Plus web interface.

Enhancements

• Key Manager Plus now allows operators to select administrators directly to send an email while adding a request for a certificate on the certificate request page.
• In addition to server certificates, Key Manager Plus now allows users to import client certificates from DigiCert and manage them in the Key Manager Plus repository.
• Users can now create a scheduled task for AWS certificate discovery.

Bug Fix

• Assigning the certificate group created using any criteria other than common name failed to load operator user's SSL repository page.

Security Fixes

The following security issues have been resolved in this release:

• Path Traversal Vulnerability, Remote Code Execution (RCE) and SSL validation vulnerabilities.
• Privilege escalation vulnerabilities (ZVE-2022-0093 and ZVE-2022-0094 ) in the SSH Users view and while exporting SSL certificates, reported by CERTXLM, have been fixed.