Imprivata fails to logon with special characters in the password

Wed, 14 Mar 2012 15:19:08 +0000

Interesting case today: customer uses Imprivate for two factor logon in combination with Citrix XenApp.

Users reported that logons failed after they had changed their password. After contacting the users we learned that this only happened with special characters in the password like ! and +.

To do the actual logon to Citrix Imprivata uses an executable which is actually an AutoIT script compiled to an executable.

After authentication the executable get's the password from the Imprivata Appliance.

I decompiled the executable to source and read the line that passes the password to XenApp:

Shutdown option on the logonscreen with Imprivata Onesign

Tue, 21 Feb 2012 16:12:12 +0000

I logged remotely to a server with RDP and I noticed that I had options to restart or shutdown that server. This means we can shutdown or restart a server without physical access and without authentication:

Imprivata on Remko's Blog

Imprivata fails to logon with special characters in the password

Shutdown option on the logonscreen with Imprivata Onesign