Skip to main content

SSH Login for Linux Release Notes

1.10.00​

July 31, 2025​

New Features​

Added QR login support for Linux PAM, allowing users to authenticate by scanning a QR code with the mobile app and approving the request. This new method complements existing authentication flows (Push, BlockID Password), providing a more intuitive and secure login experience. For more information, see Login with QR.

1.09.11​

May 31, 2025​

New Features​

  • Implemented security enforcements to prevent replay attacks, strengthening authentication integrity.

1.09.10​

March 25, 2025​

Bug Fixes​

  • Minor bug fixes.

1.09.09​

February 2, 2025​

New Features​

  • Added device information logging to login events to enhance auditing and user activity tracking.

Enhancements​

  • Improved compile-time and runtime security measures to strengthen overall platform resilience.
  • Updated session response handling to treat non-mandatory fields as optional, ensuring better compatibility and flexibility.

1.09.08​

November 29, 2024​

New Features​

  • Added Number Challenge as an additional security layer for PUSH login.
  • Introduced Events Emitter to capture SUCCESS and FAILED login events.
  • Implemented log rotation to support more effective and manageable logging.

Enhancements​

  • Enhanced the PUSH consent screen on mobile to display additional information about the login request.
  • Enforced a limit of 3 reattempts for incorrect user inputs to improve security.

1.09.06​

September 30, 2024​

New Features​

  • Added compatibility with Ubuntu Workstation and Server.
  • Introduced a customizable API request timeout to give administrators more control over connection behavior.

Enhancements​

  • Updated default authentication for PUSH to Fingerprint OR PIN.

Bug Fixes​

Resolved an issue with PAM to ensure correct usage of CaaS configurations.

1.09.05​

September 4, 2024​

New Features​

  • Introduced SSH login support using Adaptive Authentication Journey v2 for enhanced security and flexibility.

Enhancements​

  • Each BlockID PAM installation now includes a unique Application Instance ID for improved tracking and integration.
  • Username case-insensitivity is now supported, allowing users to log in regardless of letter casing.

1.09.04​

July 5, 2024​

Enhancements​

  • Login is now supported for user aliases.

1.09.03​

June 17, 2024​

New Features​

  • Introduced Adaptive Authentication Journey for Linux SSH.

Enhancements​

  • Updated the appId to be compatible with Linux cp.
  • Removed deprecated configurations associated with CaaS.
  • Enhanced the logger by adding a "WARN" logging level.

1.09.02​

April 5, 2024​

New Features​

  • Added OTP delivery via voice call.

Enhancements​

  • Updated messaging and 2FA menu on the terminal.
  • Linux SSH now supports authentication through Workstation OTP from the BlockID App.
  • Enhanced the SSH BlockID login interface/menu.

1.09.01​

February 9, 2024​

New Features​

  1. OTP Delivery via SMS and Email
    • Users can now receive One-Time Passwords (OTPs) through SMS and Email, providing additional options for secure authentication.
    • This feature necessitates addition of two new configurations to the Caas (Configuration-as-a-Service)

Enhancements​

  1. Removed automatic modifications performed by the installer
    • The installer will no longer make generic changes to the system config files. The server administrator is required to make changes to the config files highlighted in the installation and configuration section.

1.08.02​

November 2, 2023​

New Features​

  1. Configuration Option for Local User 2FA Bypass
    • We have introduced a new configuration option that allows local users to bypass Multi-Factor Authentication (MFA).
    • This feature is essential for local accounts on the Linux server. For such accounts, 2FA/MFA will not work as they are not part of any central directory linked to the 1Kosmos tenant.
  2. Menu-Driven UX for 2FA Mechanism Selection
    • BlockID Linux PAM now offers configuration settings to enable/disable a menu-driven User Experience (UX) for selecting 2FA mechanisms.

Enhancements​

  • BlockID Linux PAM can now be configured to handle only the 2FA/MFA while the primary factor is handled natively by the Linux server.

1.08.01​

September 21, 2023​

Enhancements​

  • Added support for RHEL 6 and RHEL 7.

1.08.00​

August 30, 2023​

New Features​

BlockID PAM for Linux​

Created BlockID PAM for Linux.

  • Users can now use BlockID passwordless authentication and MFA to connect to their Linux host via SSH.
  • Supports several multi-factor authentication login options: password, OTP, and push notification.
  • Supoorts RHEL 8. Additional versions will be supported in an upcoming release.
  • Administrators have the flexibility to customize which authentication options to enable, allowing for various combinations such as password, OTP, and push notification.