Smart Card Chip Profile Sharing​

MSP's can now share Smart Card chip profile configurations (such as DESFire, MIFARE Classic, and HID) across multiple tenants, streamlining setup and ensuring consistent card configurations across tenants.

Direct Mapping of Database Field Types to IIDaaS Fields​

Enrollment designs using Web Service data sources now support direct mapping of numeric (e.g., INT, SMALLINT) and Boolean (BIT) database field types to IIDaaS Text and List/Select fields. Numeric fields can be connected to Text fields without requiring data type conversion, simplifying Web Service field configuration.

Enhanced Login Experience Customization and Localization​

Organizations can now tailor the end-user authentication experience through expanded branding, layout, messaging, language, and application-specific sign-in controls.

Audit Details Experience Upgrade​

Replaced the previous audit details dialog with a right-side details drawer that provides richer grouped event context, quick field-level filtering actions, and copy-all event details.

Fixed in this release​

1. Fixed an issue where Smart Card data was not read or printed correctly when both a Smart Card and a Web Service were connected to the Enrollment Design.
2. Fixed an issue where the Enrollment Design field validation displayed a raw i18n key ("KEY_NOT_FOUND") instead of a user-friendly error message for duplicate field names.
3. Fixed an issue where saving an enrollment with a checkbox mapped to a Numeric database field type on Oracle returned an "One or more date values are invalid" error.
4. Fixed an issue where a performing status check via API prior to submitting a print job caused printer to go into "Busy" state.
5. Fixed an issue with duplicate key handling in the Mifare Classic and DESFire smart card configuration services.
6. Fixed an issue where print count was not incrementing correctly when multiple print actions were performed.
7. Fixed an issue where some fields were missing from Google Mobile Flash Pass after it was claimed without a Full-Width Image present.
8. Fixed print count incrementing twice instead of once for successful Smart Card operations and PrePrint jobs.
9. Fixed the credential designer allowing a Variable Graphic field to be placed on the background layer, which is not supported.
10. Fixed an issue where a print job stuck in "Processing" status could not be deleted or reprinted from the Print Queue.
11. Fixed an issue where watermark wasn't being displayed on Google Mobile Flash Pass user photos.
12. Fixed an issue where print was failing when connected to a Web Service.

Changes to Instant ID as a Service APIs​

The following API updates have been made in this release.

• None.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.47 and the three previous releases 5.46, 5.45 and 5.44). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Support for Web Services integration in Enrollment Workflows​

Added support for configuring and managing web services within the Enrollment Designer. This enhancement allows interaction with external systems during enrollment workflows, enabling dynamic data handling and improved process automation.

Fixed in this release​

1. Bulk Enrollment Import Issue in Create and Update Method - Fixed an issue where bulk enrollment imports behaved incorrectly. The Create Enrollments method failed with a "More than one records found for given unique identifier" error even for valid data. In the Create or Update Enrollments method, only one record was created, while others were incorrectly marked as updated and not visible. The import process now correctly handles all records.

Known Issues​

• Web Services and Smart Card Integration - This combination is not working at the moment. Smart card data cannot be read to populate the credential enrollment when both Smart Card and Web Service are configured together. This issue will be addressed in a future release.
• Web Services and Webhook Integration - This combination is not working at the moment. When Web Services and Webhooks are configured in the same Enrollment Design, the print operation may fail or webhook notifications may not be triggered. This issue will be addressed in a future release.
• Web Services and Batch Print - This combination may not completely work. Integration with Web Services may not be triggered during bulk prints. This issue will be addressed in a future release.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.46 and the three previous releases 5.45, 5.44 and 5.43). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Support for Images in Google Flash Pass​

Added support for displaying user photos in Google Flash Pass. Google Flash Pass can now show the user's photo along with full width images on the same pass (supported on Android mobile devices only). This enhancement brings Google Flash Pass closer to feature parity with Apple Wallet while following Google's image display rules.

Supported Operating Systems:

• Android 9.0 or higher
• Wear OS 2.18 or higher

Enhanced Search Filtering Options​

Added support for advanced search filters beyond “Equals Today,” including greater than, less than, between, starts with, ends with, and NULL / NOT NULL conditions. These enhancements allow operators to refine searches more efficiently and retrieve more precise results.

Auto Increment Print Count for Credentials​

Added support for a Print Count field that automatically increments each time a credential is printed. This supports replacement card workflows, improves tracking of re issued credentials, and aligns behaviour with Instant ID on prem.

Additional Webhook Event Types Available​

Webhook configuration now includes additional authentication and password related user events. Administrators can enable or disable these events per webhook as needed.

Fixed in this release​

1. SVG Validation Error for Base64 Images - Fixed an issue where some images were incorrectly rejected when attempting to upload them to credential designs.
2. Mobile Flash Pass Field Connections Displayed in Random Order - Fixed an issue where Mobile Flash Pass field connections appeared in a random order instead of keeping a consistent sequence across designs. Field ordering is now preserved correctly.
3. All Buttons Disabled on Edit Enrollment When “Update Enrollment” Is Off - Fixed an issue where opening an existing enrollment with Update Enrollment disabled caused all buttons on the Edit Enrollment page to appear enabled but not function. Buttons now behave correctly.
4. Default Hopper Not Selected in Smartcard Test/Format Card - Fixed an issue where the Hopper field appeared empty when testing or formatting a smartcard. Hopper 1 is now correctly selected by default.
5. MSP Tenant User Update Restrictions – Fixed an issue where trial and production MSP tenants were unable to update user issuance, MFA quantities, and end dates.
6. List Field Text File Import Error – Fixed an issue where importing a .txt file into a List Field fails with encoding format error.

Known Issues​

• If a strip image is configured for the Mobile Flash Pass, the User Photo field will not be displayed on the Apple Wallet pass.
• Large byte indexed greyscale images will not be resized due to color profile issues. This will be addressed in a future release.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.46 and the three previous releases 5.45, 5.44 and 5.43). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Enterprise IIDaaS Ribbon​

Added IIDaaS Ribbon support for Enterprise level tenants.

Improved Image Handling​

Added validation for image dimensions and warnings when uploaded images exceed supported limits. Images are automatically downsized to meet size requirements while maintaining quality.

Printer Access Control by User Groups​

Added support for restricting printer access based on user groups. Users now see and print only to printers assigned to their group. Also, users can now choose a preferred printer for printing and set it as default printer.

Enhanced Print Failure Details in Basic Print API​

Added support for returning more detailed print-failure information through the Basic Print API. This enhancement helps identify the exact reason for a failed print job and take appropriate corrective action without checking the printer dashboard.

Fixed in this release​

1. Fixed an issue where printed text was automatically reduced based on Display Text length. Printing now honours configured field properties.
2. Fixed an issue preventing firmware updates via the cloud Printer Dashboard.
3. Fixed an issue where Preview and Print on iPad/iOS loaded slowly or became unresponsive. Performance is now significantly improved.
4. Fixed an issue where the Credential Search page did not consistently retain the configured column order. The column layout now stays as set by the user.
5. Resolved an issue where the Operator Prompt field showed its internal name instead of the configured display label.
6. Resolved an issue where new or removed External Databases didn't appear right away. The list now updates automatically without needing to cancel or refresh the browser.
7. Fixed an issue where Variable Graphics failed to appear in Preview/Print or on the final card when used with UV layers. They now display and print correctly.
8. Fixed an issue where field mappings were removed after an Access Denied error on the Field Connection page. Mappings now stay intact.
9. Improved the printer management API to correctly process updates to individual printers and clarified required vs optional parameters in related API requests.
10. Fixed an issue where email alerts included printers that didn't meet the alert criteria. Alerts now list only printers that match the configured conditions.

Changes to Instant ID as a Service APIs​

The following API updates have been made in this release.

• getPrintStatus to return detailed print-failure information for better error diagnosis.
• singleEnrollmentPrint is now deprecated, singleEnrollmentPrintV2 has been added to support printing via device ID or printer ID.
• replacePrinter is now deprecated, updatePrinterV2 has been added to support updates to individual printer records with clarified parameter requirements.

Known Issues​

• If a strip image is configured for the Mobile Flash Pass, the User Photo field will not be displayed on the Apple Wallet pass.
• Google wallet does not support user photos; therefore, the photo will not appear on the pass as of today.
• In rare cases photos or images can fail to upload if the image base64 data contains a valid href substring. As a workaround, customers can locally resave the image and then upload the new image.
• Large byte indexed greyscale images will not be resized due to color profile issues. This will be addressed in a future release.

Notices​

• SSO via SAML/OIDC is currently only supported for Enterprise level tenants.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.45 and the three previous releases 5.44, 5.43 and 5.42). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

SAML 2.0 and OIDC-based Single Sign-On (SSO)​

Added support for integrating IdPs such as Microsoft Entra ID and Okta using SAML/OIDC for seamless authentication. Includes IdP configuration, default IdP per tenant, authentication flows, and role based access control (RBAC).

Support for 600 DPI on Sigma Printers​

Added support for Sigma DS3 printers with 600 DPI resolution. Includes STANDARD (600x300) and BEST (600x600) modes, ribbon compatibility, and default BEST resolution.

Fixed in this release​

1. Fixed error messages persisting in Bit and Parity Bit fields when changing Card Format type.
2. Fixed an issue with the inability to update iClass and Prox Card Format in Smart Card Profiles.
3. Fixed an issue where the Terms of Service popup appears for a moment after a login and page refresh for Direct Tenants.
4. Fixed Paginated Print Queue API returning a 500 error when searching by UpdatedOn.
5. Fixed an issue where Trial Direct Tenants created via the Entrust web portal incorrectly had access to SMS OTP authentication.
6. Fixed misleading delivery options (SMS and Voice) from the Optional Attributes section on the User Details page.

Known Issues​

• Single Logout (SLO) and SP-initiated SLO are not supported; full functionality planned for a future release.
• Font style (Bold/Italic) for text fields is not reflected in properties after importing TruCredential designs into Instant ID as a Service, though the text appears correctly formatted.
• When using the PrintAPI for Print Single Enrollment, the API request requires the Device ID, not the Printer ID, contrary to what is stated in the documentation.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.44 and the three previous releases 5.43, 5.42 and 5.41). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

New in this release​

Fleet Management Notifications​

Support has been added for creating and configuring Fleet Management as a Service (FMaaS) notification. These are triggered when selected threshold conditions are met, enabling proactive responses to critical printer issues before they impact operations.

Firmware Update Alerts​

Notifications now display in Instant ID as a Service and Printer Dashboard when firmware is out of date.

Compromised Password Detection​

Support has been added for configuring password policies to check for compromised passwords. This feature prevents users from setting passwords that have been exposed in known data breaches.

Fixed in this release​

1. Fixed ribbon entitlement mismatch error during printer onboarding by improving ribbon detection.
2. Fixed an issue where direct tenants could access restricted credential-related pages via URL instead of being redirected to the My Profile page.

Known Issues​

• Print preview pages can take longer than usual to load on iPads and iPhones when using large graphic files.
• Increased Gateway timeout to mitigate connection failures with large SQL Server and Oracle tables.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.43 and the three previous releases 5.40, 5.41 and 5.42). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Enable Import and Export of Credential Designs​

Support has been added for exporting Credential Designs from Instant ID and importing them to Instant ID as a Service. Designs can also be exported from Instant ID as a Service and imported into the same or a different tenant in IIDaaS. Limitations apply; refer to the “Import or Export a Credential Design” topic in the Instant ID as a Service online help (available via the software) for details.

Fixed in this release​

1. Fixed an issue where edits to credential designs and enrollment designs could not be saved.
2. Fixed an issue where, when batch printing, cards were not always printing in sorted order.
3. Fixed an issue where the release-notes file was not appearing if the file was accessed via a search.
4. Fixed an issue where users with Basic Support access could not access Smart Card profiles.
5. Fixed an issue where users with Basic Support access could not access actions on the Tenants page.
6. Fixed an issue where the Mifare Classic New Key feature was not overriding transport keys.

Changes to Instant ID as a Service APIs​

• A new and improved getPaginatedPrintJobsV2 API for fetching print queue data has been added, replacing the previous paginated version getPaginatedPrintJobs, which is now deprecated.
• The getPrintJobs API has been updated to return all print jobs rather than a subset.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.42 and the three previous releases 5.39, 5.40 and 5.41). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

1. Fixed an issue where unknown user IDs and failed print requests were incorrectly appearing in audit logs for bulk print requests.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.41 and the three previous releases 5.40, 5.39 and 5.38). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Mifare Classic 1k & 4k Support​

Support for Mifare Classic smart cards has been added.

Pre-print Webhook Notifications​

Pre-print webhook notifications have been added, along with error notifications.

Fixed in this release​

1. Fixed an issue where the webhook status was not reverting to unselected after the job was completed.
2. Fixed an issue where, on the Print Queue page, selected jobs were automatically unselected when an API polling refresh occurred.
3. Fixed an issue where exporting enrollment records would fail if the file name contained spaces.
4. Fixed an issue where Enterprise tenants were unable to print smart cards.
5. Fixed an issue where data driven list field, not connected to database, was not working for Read-Only databases.
6. Fixed an issue where user couldn't process the image during photo file capture when saving to external database for Database Entry = 'None'. Field value will be fixed in a later release.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.41 and the three previous releases 5.38, 5.39 and 5.40). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

1. No error message was appearing when a credential configured with Mobile Flash Pass was enrolled without including an email address.
2. An incorrect (generic) error message was being generated when duplicate smart card profile names were created and saved.
3. When a physical printer was added, printer firmware was not being updated and firmware details were not displayed on the Printer Dashboard interface.
4. In some instances, the printer status on the Printers page was not appearing.
5. When a date greater than 12 in the “Date” field of the search filter was selected from the calendar, the date was not selected and the error “Invalid Date Format” was incorrectly displayed.
6. Print jobs with the printer Exception slot selected were resulting in failed jobs and incorrect messages displaying on the printer LCD screen.
7. The “Between” and “Exact” filter options for the date search were resulting in the selected data not being populated and an incorrect “Invalid Format” error being displayed.

Known Issues​

• Deleting one or more webhooks from the table located at Menu > Administration > Resources > Webhooks, under the Tenant account, does not reset the multi-action toolbar header.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.40 and the three previous releases 5.37, 5.38 and 5.39). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Display Messages on Sigma Printer LCD to Load Card Stock via Exception Slot​

Added customizable card stock type compatibility messages to display on the Sigma Printer LCD screen when the Exception Slot hopper is chosen for printing.

Fixed in this release​

1. Relocated Webhook options in IIDaaS to Main Menu > Administration > Resource.
2. Updated webhook functionalities to enable adding an IP address as a webhook.
3. Included additional documentation on how to parse the webhook event body and make an API call to IIDaaS API.
4. Fixed an issue that limited the resource table in the ‘Register a Webhook’ window to only 10 resources.
5. Fixed an issue where clicking ‘Select All’ on the Webhooks list page would select every existing webhook instead of those on the current page.
6. Fixed an issue where enabling multiple webhooks would not refresh the table if one or more webhooks failed to update.
7. Fixed an issue where the Webhook Audit Event was missing details about Webhooks added or enabled/disabled without an expiration date.
8. Fixed an issue where the ‘User Quantity’ field number was not updated in real-time in the Create Tenant window when an Entitlement bundle is modified.
9. Fixed an issue where a generic “The requested operation could not be performed” error displayed after saving a Smart Card profile with a duplicate name.
10. Fixed an issue where root account users using Managed Service Providers (MSPs) were unable to add counter names and upgrade tenants to an Enterprise Adaptive Issuance Cloud Bundle in the UI.

Changes to Instant ID as a Service APIs​

The following API updates have been made in this release.

• Corrected an Issuance API documentation issue where the createTenantAsyncUsingPOST API was missing the required field labels.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.39 and the three previous releases 5.36, 5.37 and 5.38). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Added Webhook Support for Enrollment Events​

Tenants can now use webhooks through the UI or API to subscribe to notifications for enrollments events, including creation, updates, and deletion.

Added Support for Enterprise Entitlement​

The Enterprise entitlement allows tenants to access webhooks and webhook APIs, along with all Professional entitlement bundle functions. The Enterprise bundle default user counts are 50 for Trial and 1000 for Production.

Fixed in this release​

1. Adjusted API documentation for "Download Mobile Flash Pass Logs v2" to include the expected return object, replacing the generic 200 OK response.
2. Fixed an issue where Search Enrollment page fields were unable to sort when using the arrow icon in the UI.
3. Fixed a date parsing issue where date formats in CSV files for bulk import enrollment records, with the "Enforced input mask" setting enabled, were failing on an enrollment update bulk operation.
4. Fixed an issue where "Date should not be after maximal date" appeared in below the End Date field of the Entitlement window when creating a tenant in Trial mode.

Known Issues​

• Only DNS/Hostnames are currently allowed when creating/updating webhooks. IP addresses are not accepted at this point in time.

Search by Date and List Fields in Enrollments​

Users can now search credentials using Date and List fields as filter criteria.

Fixed in this release​

1. Fixed an issue where the CreateEnrollmentV2 API did not validate all mandatory fields.
2. Fixed an issue where the user-selected background color did not appear on credentials.
3. Fixed an issue where the credential card alignment from the credentials page would break for credential names spanning longer than a single line.
4. Fixed an issue where the proper error message was not displayed when the user connected a MySQL 8 external database table with reserved keywords.
5. Fixed an issue where an error page would display when the user clicked on the mobile flash pass bread crumb link.
6. Fixed an issue where the Apple Wallet id could be saved with extra white spaces.
7. Fixed an issue where the mobile flash pass configuration page would not load for Helpdesk Admin role.
8. Fixed an issue where user could save an enrollment design using reserved keywords after the second attempt.
9. Fixed an issue where IIDaaS API Administration guide was displaying a 404 screen.
10. Fixed an issue where IIDaaS Ribbon tenants could onboard a direct tenant ribbon.
11. Photograph, Signature, and Static Graphic field upload sizes are now limited to 3 MB.

Changes to Instant ID as a Service APIs​

The following API updates have been made in this release.

• The API method createEnrollmentV2 now performs mandatory field verification.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.37 and the three previous releases 5.34, 5.35 and 5.36). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Upgrade to MySQL8​

IIDaaS restricts using MySQL 8 reserved words as field names for credentials.

Refer to the list of MySQL 8 keywords and reserved words. https://dev.mysql.com/doc/refman/8.0/en/keywords.html

Manage credential access by user group(s)​

Groups can now be used to restrict, or grant, user access to specific enrollments.

Enhanced Step-Up Authentication Settings and User Portal​

Users can access the User Portal to configure authenticators settings and rules that display for other users.

Fixed in this release​

1. "Storage Option" dropdown behavior on enrollment designs.
2. Fixed user portal stuck in English locale.
3. Fixed duplicate modal message box upon Usage Report Generation.
4. Fixed inability of Auto Sequence field to be Cut and Pasted.
5. Update API not giving the correct error message for an invalid primary key.
6. Value of "% of Ribbon Remaining" missing in the Printer table for printer having percentage as 0.
7. Intermittent saving issues with credential designs after adding a background image.
8. User profiles weren’t working when an assigned custom role was removed.
9. Printer name drop down label was misaligned on test card pop-up HID smartcard profiles.
10. Information about the current printer firmware versions available will now display on the Printer Dashboard page.
11. Credential Designs now appear in the drop down menu in the List Field.
12. Smart Cards can now print with Photo stored on external file system in case of external database.

Known Issues​

• Smart Card print jobs failing via API when clicking the Reprint button.
• Printing failing with unsupported image types. 32-bit CMYK color graphics are not supported. Graphics must be RGB 24-bit or monochrome.
• Bulk delete operations are not working with external databases. UI restrictions were added to prevent bulk delete operations from failing.
• Bulk operations are shared and limited in a region. The responses might not be immediate but they will be processed in time.
• After the restriction of credential access by user group(s) is released, enrollments cannot be deleted when they are linked to one or more group(s). A linked enrollment needs to be unlinked from all groups before deletion.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.36 and the three previous releases 5.33, 5.34 and 5.35). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System. ESG was updated to use a new OS in 5.33. In place upgrade of ESG is only supported for versions 5.33 or later. Versions of ESG older than 5.33 are no longer supported. To upgrade versions ESGs older than 5.33 to the new version use the following procedure:

1. Download the latest Gateway OVA or Hyper-V file from IDaaS and install on a new VM instance.
2. Add a new Gateway instance to the existing Gateway in IDaaS.
3. Register the new Gateway instance with IDaaS.
4. Disable the old Gateway instance.
5. Repeat these steps to replace all the Gateway instances using older versions of the ESG.

Once the upgrade is complete, the Gateway instances corresponding to the old ESGs can be deleted from IDaaS and the VMs for those ESG instances can be deleted.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

Enhanced Sorting and Printing Capabilities for Search Results​

Users can now search enrollments using prefix-based, partial input. Search results can be sorted and printed according to the selected order. Sorting credentials is now enabled for all indexed fields in the internal database and for all text fields in external databases. Refer to the Instant ID as a Service Online Help for further instructions.

Fixed in this release​

1. The "Get Started" panel in the IIDaaS Dashboard has updated verbiage to "Set Up a Printer".
2. User Quantity Displays Incorrect Quantity in the Entitlement Editor.
3. Print Job Success with "Advanced" Bundle on Entrust-Managed IIDaaS Accounts.
4. Extra space Before the "documentation" Hyperlink in the "Set Up a Printer" Window.
5. Non-English Text Overlapping in Add Bulk Operation Window.
6. Enrollment Form Saving with Existing Errors for Date Fields.
7. Increased Frequency of Search Errors Due to External File System Photos (5988068).
8. Enrollment Date Field Mask Not Applied Correctly with External SQL Database (6011382).
9. The "Cards Printed" column on the Printers table is displaying blank values for idle printers.
10. Printer Dashboard is not loading input hopper information for CR805 printers.
11. Case Insensitivity of Photo and Signature File names for BULK import is not working (6034812).
12. Printers with Hyperlinks Enabled in Tenant Dropdown Are Not Marked Idle in "All Tenants" View.
13. Improved Error Handling for Deleted Print Jobs (6052480).
14. Fix for Pie Chart Data Overlap on Printers Page.
15. Updated Read Enrollment V2 API Search Behavior.
16. If a Card is Not Picked from the Hopper, the Print Job Order is Not Maintained.

Changes to Instant ID as a Service APIs​

The following API updates have been made in this release.

• The API method readEnrollmentV2 now returns exact matches only. On the user interface, search results will include partial matches.

Known Issues​

• When sorting, ensure the printer input hopper is not empty to prevent prints from being out of sort order or encountering other printer errors.
• An enrollment search may timeout if the photograph field is included and the total photograph size on the external file system exceeds 85 MB.
• Smart Card print jobs failing via API when clicking the Reprint button.
• Printing failing with unsupported image types. 32-bit CMYK color graphics are not supported. Graphics must be RGB or monochrome.

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.35 and the three previous releases 5.32, 5.33 and 5.34). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11 after May 2023.

New IIDaaS Roles and Permissions​

IIDaaS added new Basic Issuance Support, Enhanced Issuance Support, and Support Account Manager roles. IIDaaS users are now able to opt in/out of Fleet Management as a Service from a three-dot menu on the Printers table.

New Rows Available in Tenant Usage Reports​

A usage report row named "IIDAASENABLEDRIBBON" displays the number of installed IIDaaS Ribbons within the time period of the report. A new row named "ISSUEDFLASHPASS" will also display the number of Mobile Flash Passes a tenant has issued for the time period of the report.

Entrust-Managed IIDaaS Account Onboarding​

Entrust-Managed IIDaaS Accounts can now be created from Entrust.com under Entrust Managed Service Providers.

Direct Customer Service and Support Resource Pages​

All Entrust-Managed IIDaaS Account users now have access to dedicated IIDaaS video tutorials for enhanced learning. Entrust-Managed IIDaaS Account customers can conveniently contact customer support via a dedicated form for streamlined assistance.

CR805 printer support​

Instant ID as Service now supports CR805 printers to be on boarded and printed. Firmware version R4.11.2 and R4.51.2 and above is required to support cloud connection. Printer serial number should be NM16158 and above to support cloud connection.

Fixed in this release​

1. Smart card jobs can now be printed via batch process
2. Fixed save error while updating printer information such as Name or location
3. Fixed issue with usage report where issuance and flash pass count need to be same
4. Fixed the error while saving enrollment, when all fields except image in file system is read only
5. Fixed issue where smart card print job would fail without re-trying when input hopper is empty
6. Fixed issue where "You cannot add new production tenants. There are no MSP entitlements left to add a new production tenant." message would appear on Tenants page after user entitlement limit is exhausted

Changes to Instant ID as a Service APIs​

The following API updates have been made in this release.

• The version of the method createTenantAsyncUsingPOST has been updated from v4 to v5. Updated optional IIDaaS Ribbon parameter from string to boolean.

Issuance Account Hostname Modification​

Managed Service Providers (MSPs) can customize the hostname of tenants.

Print Job Restart Functionality for Printer and Network Error Recovery​

If a printer or network error interrupts a print job, the print job can be easily restarted with the click of a button!

Batch Mobile Issuance​

This feature introduces efficient batch processing for mobile issuance.

Batch mobile flash pass issuance and revoke​

Users can send Mobile Flash Pass emails or revoke existing Mobile Flash Passes for all the enrollments, or for those filtered via search filter from the Search Enrollment page. Batch issuance/revoke doesn't start immediately when you click the button. There might be a wait while the system gets everything ready for the batch job.

Fixed in this release​

1. Resolved "Something Went Wrong" Error Triggered by Backspace in Date Field Input Length
2. Restored Validations for Company Email Address and Website Fields in MSP Creation
3. Restricted Saving Configurations Other Than "X" for Occupied Bits in Field Bit Config
4. Smartcard - Ensured Proper Closure of Add Field Dialog with Skip Tour
5. Corrected Hyperlink for Notification Icon Message in Release Notes
6. Corrected Claim Status Display for Mobile Flash Pass Sent to Invalid Email Address
7. Resolved Timeout Error for Revoking Multiple MFPs with Apple Wallet Settings

Changes to Instant ID as a Service APIs​

The following API updates have been made in this release.

• Implemented verification checks for the Single Print API to validate the correctness of enrollment ID or primary key inputs. This enhancement ensures that only valid and accurate information is processed, improving the reliability and accuracy of the Single Print API functionality.

Known Issues​

• Cancelling a Smart Card Job from the printer's Suspend button and restarting the same job from the UI's Print Jobs page may cause the job to get stuck on the printer.

Full-Width Image for Google Mobile Flash Pass​

Google Mobile Flash Passes are now compatible with printing a full-width static image on the credential.

Batch Printing​

Users can print all credentials or those filtered via search filter from the Search Enrollment page. Batch printing doesn't start immediately when you click the print button. There might be a wait while the system gets everything ready for the batch print job.

Enable IIDaaS Ribbon with a checkbox.​

Managed Service Providers (MSPs) can enable IIDaaS Ribbon by checking a new Enable IIDaaS Ribbon checkbox instead of using a counter name.

Fleet Management Only​

Managed Service Providers (MSPs) and tenants with the "Fleet Management Only" counter enabled can just manage tenant's printers without issuance entitlements (not limited to but includes Open Card and Driver-enabled printers).

Fixed in this release​

1. Users can no longer send a Mobile Flash Pass (MFP) if MFP counters or MFP credits via IIDaaS ribbon entitlement are absent or inactive. This change is aimed at ensuring accurate usage tracking for customers.
2. Fixed field texts that are overlapping on create bulk operations page
3. Barcodes are now validated before sending flash pass
4. Fixed issue where some printers showed undefined data under Device activity
5. Fixed error messages displayed while saving credential design with duplicate name

Changes to Instant ID as a Service APIs​

The following API updates have been made in this release.

• The "Delete printer by ID" API request now responds with a 204 "No Content" status code, rather than the previous 200 "OK" status code.
• The documentation for the "Create bulk print enrollment request" and "Create bulk mobile flash pass request" APIs has been updated to specify that the request payload must not exceed 200 KB.
• New cancelAllActivePrints API added this release. This API is only available for Basic Print API clients. Use this when jobs are stuck in printer for more than 5 minutes and want to cancel all active print jobs

Enterprise Service Gateway Deprecation​

Entrust will only support the last four releases of the Enterprise Service Gateway (the current version 5.32 and the three previous releases 5.29, 5.30 and 5.31). Entrust recommends that customers always upgrade their Enterprise Service Gateway to the latest release because each release contains security updates to the Enterprise Service Gateway Operating System.

Browser Deprecation​

Microsoft no longer supports Internet Explorer 11. Instant ID as a Service ceased support for Internet Explorer 11.

Strip image support for Apple Mobile Flash Pass​

A strip image can now be added on Apple Mobile Flash Passes.

Default expiry date for Mobile Flash Passes​

The default expiry date for Mobile Flash Passes can be configured in the Mobile Flash Pass Design.

Fixed or changed in this release​

1. Fixed an issue where field connections weren’t being created when two fields had the same name but with no spaces between them. (25351)
2. Fixed an issue where registering a printer with a self-signed certificate would create a generic 500 error. (25158)
3. Fixed an issue where you couldn’t print to cards from other hoppers on a multi-hopper printer. (23123)
4. Photo fields configured for file storage with a database entry as 'None' can now be updated for existing credentials in case they are being loaded from a ‘Read Only’ view in the external database. Possible to now update just the photo from file system when connected to a read only view (666)
5. Fixed an issue where fonts were not independently loaded in the Enrollment Designer page. Users would first have to navigate to the Credential Designer page to get the correct fonts. (23166)
6. Recovered missing UI translations for “Printers with Fleet Management”, "Operation Type" under the Bulk Operations page, and "CREATE_ENROLLMENTS/CREATE_UPDATE_ENROLLMENTS”. (25438)