February 6th, 2025
4 min
Admin PanelAdmin Portal:
- Dynamic user mapping
- When the user account on a client device differs from the one being accessed on a terminator device, user mapping is still required. However, a new dynamic user mapping option has been introduced.
- With dynamic user mapping, when a user remotely connects to a terminator device for the first time (e.g., via RDP or SSH), they must enter a 9-character code displayed on the screen. Keystrike then identifies the client initiating the code entry and establishes a mapping between the two accounts.
- The previously available method of manually defining mappings using regular expressions is now called Predefined user mapping and remains available as an advanced option. Any existing predefined configurations will continue to work.
- For new terminator groups, dynamic user mapping is enabled by default, while predefined mapping is disabled.
- A tab on the Terminator details page shows the active user mapping and provides the option to remove dynamic mappings.
- Both the client and the terminator must be running version 3 or newer for dynamic user mapping.
- Delete terminators
- Terminators that are no longer in use can now be removed from the admin panel.
- MFA status in admin details
- The details page for each administrator displays whether MFA is enabled for that specific admin.
- Activity logs
- OS User ID (os_user_id) has been added to relevant activities, representing the user account's ID on the given device.
- Alert details
- It is now visible in the alert details if inputs in the alert session were caused by; dynamic usermapping being cancelled, the recovery code modal being used or by possible attestation reuse.
- Users page
- The Users page now includes the user ID as a searchable column.
- Administrators search
- A search box has been added to the Administrators page.
- Setup & Installers page
- Instructions have been added for the new Windows client and terminator installers.
ClientClient:
- Multiple organizations
- The client now supports configuring multiple organizations, enabling Managed Service Providers and other users to seamlessly switch between multiple Keystrike tenants as needed.
- Windows Installer
- Updates can now be performed without requiring parameters, allowing seamless upgrades while preserving the existing configuration.
- In addition to installation via msiexec, the installer can now be executed directly, prompting for any necessary parameters if required.
- Instead of the full dispatch url, the organization domain is now passed to the installers.
- Proxy configuration
- If the device can only connect to dispatch through an explicit proxy, an optional proxy parameter can be passed to the installer.
TerminatorTerminator:
- Dynamic user mapping
- When dynamic user mapping is enabled, the terminator prompts the user to enter a 9-character code for the initial mapping.
- Windows Installer
- Updates can now be performed without requiring parameters, allowing seamless upgrades while preserving the existing configuration.
- In addition to installation via msiexec, the installer can now be executed directly, prompting for any necessary parameters if required.
- Instead of the full dispatch url, the organization domain is now passed to the installers.
- Proxy configuration
- If the device can only connect to dispatch through an explicit proxy, an optional proxy parameter can be passed to the installer.