Duo Authentication for Windows Logon: baixar versions anteriors

- Encrypts the Duo secret key (SKey) in HKLM\Software\Duo Security\DuoCredProv at the next Duo login or unlock after installation.
- The encrypted secret key is machine-specific and doesn't work on a different system. If Duo can't decrypt the SKey value, it blocks all Windows logins regardless of the fail mode setting.
- Improves installation reliability by verifying that core components installed successfully.
- Improves login performance on shared or multi-user systems with a large number of stored user profiles. Previously, Duo checked the trusted session status of every stored profile, which could delay login.
- Ends "Remember me" trusted sessions when a user changes their password at the Windows login screen, when an administrator renames a user's account, or when an administrator configures the system to use a different Duo application. Existing trusted sessions require one new two-factor authentication after you upgrade to 6.0.1.
- Removes a legacy, unsupported configuration path that could cause Duo to unexpectedly skip interactive authentication in certain conditions.
- Improves handling of offline access authentication factor updates so that administrator changes apply more consistently.
- Applies offline access attempt and lockout limits consistently across all offline login paths.
- Writes diagnostic logs collected during product upgrades to a protected location and automatically deletes them after the upgrade completes.
- Corrects an issue that could allow offline access enrollment to complete without the user first completing two-factor authentication.

- General Availability of Offline Access for Passwordless OS Logon.
- Adds the Duo WinLogon Support Tool, a graphical diagnostic application for collecting logs, viewing log files, checking Duo connectivity, and validating time synchronization.
- Updates the PowerShell support script (Winlogon-Diag.ps1) to remove the dependency on Internet Explorer, update the connectivity check to use Invoke-RestMethod, add GPO registry key collection, RDP and NLA status reporting, UAC and policy analysis output, and remove legacy Windows 7/Vista code paths.
- Adds support for GoTrustID security keys for offline authentication.
- Adds the EnableSSPRFix registry value to permit Microsoft Entra ID Self-Service Password Reset (SSPR).
- Removes support for TLS 1.1 and earlier. Connections to Duo's cloud service now require TLS 1.2 or later.
- Migrates cryptographic operations from legacy CAPI to CNG and from DPAPI to DPAPI NG to support FIPS compliance requirements.
- "Remember Me" is now disabled during cross-session UAC elevation and password reset flows.
- Fixes and enhancements for password reset during Windows logon.
- The executable installer now displays the VC++ Redistributable installer if not already present, allowing the user to control any required reboot before Duo setup continues.
- The installer now enforces OS version compliance, permitting installation only on Windows 10 and later or Windows Server 2016 and later. This matches the stated supported operating systems.
- Corrects an issue where trusted sessions did not work correctly when multiple users had active sessions on the same machine.
- Improvements to Bluetooth adapter detection and BLE connection stability.
- Additional security improvements and bug fixes.

- Beta of Offline Access for Passwordless OS Logon. Users log in securely via Bluetooth connection to a mobile device with Duo Mobile and platform biometric or PIN verification when the Windows system cannot contact Duo's service.
- Adds the registry value PwlOfflineAvailable which overrides the Admin Panel setting to disable offline access for passwordless OS logon at the local endpoint.
- Duo Mobile push requests now show the RDP application name specified in the Admin Panel.
- Minor UI fixes for passwordless OS logon.
- Corrects an issue where the ProvidersWhitelist registry value may not have persisted on upgrade via silent install.
- Adds additional debug logging.

This release corrects the silent install issue present in 5.2.0.
- Corrects an issue where enrollments for offline access and passwordless OS logon were not persisted on upgrade via silent install.
- Corrects an issue where custom registry keys (such as ProvidersWhitelist) may not have persisted on upgrade via silent install.
- Corrects an issue where the GUI installer may not have deleted registry export files after completing installation.
- The ARM64 installer now supports a specified value for EnableCertPinning during silent install.