Skip to main content

10.0.0 Release Notes

HYPR 10.0.0 is an Internal Release.

The Enterprise Release Channel caters to customers requiring a less frequent cadence of upgrades, specifically on a quarterly basis, thereby allowing them more time to adapt and implement changes without disrupting their business operations.

The Standard Release Channel is designed for customers who are equipped to accommodate monthly updates, providing regular and more frequent access to new features and improvements. All Standard Release features are available in the next scheduled Enterprise Release.

New Section

To enable our customers to be more proactive in anticipating industry changes that affect HYPR architecture and topology needs, we have created the Breaking Changes section of the Release Notes. This section may be updated after the GA Release as information becomes available to HYPR.

Minimum Supported Versions​

Release DateHYPR ProductMinimum RequirementNotes
February 12, 2025HYPR Passwordless for Windows 10.0.0Windows (10, 11)Reboot required if upgrading from 7.6 or below; Security Key Support for Yubikey 5 Plus and Feitian ePass K9 Plus, K40 Plus and their offshoots
February 12, 2025HYPR Passwordless for Mac 10.0.0macOS (High Sierra, Mojave, Catalina, Big Sur, Monterey, Ventura, Sonoma 14.1 [not 14.0])Security Key Support for Yubikey 5 Plus and Feitian ePass K9 Plus, K40 Plus and their respective offshoots
February 12, 2025HYPR Mobile App for Android 10.0.0Android 8.0+
February 12, 2025HYPR Mobile App for iOS 10.0.0iOS 12.4+
February 12, 2025HYPR Server 10.0.0Java Development Kit (JDK) 17+Upgrade to 7.10 required before upgrading to 8.0.0 or higher
February 12, 2025HYPR SDK for Android 10.0.0Android 8.0+
February 12, 2025HYPR SDK for iOS 10.0.0iOS 12.4+
February 12, 2025HYPR SDK for Java 10.0.0Java Development Kit (JDK) 17+
Backward Compatibility

All HYPR components are fully compatible across the three previous/subsequent minor (X.X) HYPR releases.

Enhancements​

  • [Adapt] Add tests for the Login Limits template

  • [Adapt] Show the Logging Only flag value in the Policy Details drawer

  • [Adapt] Store the OAuth2 CrowdStrike API key in Adapt for calls

  • [Affirm] Create the new Friction enum and add it to the UI

  • [Mobile App for iOS] Update EULA text for iOS

  • [Passwordless for macOS] Passwordless doesn't enforce PIN Complexity

  • [Passwordless for Windows] Change default so HyprKsp does NOT do CRL and user account checks

  • [Passwordless for Windows] Update EULA text on the workstation client

  • [Platform - Keycloak] Consolidate policy evaluation calls in the Keycloak Select Login Method module

  • [Platform - Keycloak] Keycloak to send authenticated Events

  • [HYPR Documentation] Organizational Changes

    • The Documentation portal Integrations section, previously under Control Center, is now a standalone section

    • HYPR Passwordless configuration in Control Center is now moved under HYPR Passwordless

  • [SDK for Android] The Android reference app has been updated to accommodate the upcoming HYPRlink feature, which will displace Firebase for Push Notification purposes

Events​

The following Events have been added:

The following Events are now deprecated:

  • ADAPT_CREATE_EVENT_HANDLER

  • MACHINE_SIGNAL_RECEIVED

See Event Descriptions for a list of all HYPR Events and parameters.

Error Messages​

The following error codes have been added:

  • 1207019: THIRD_PARTY_THROTTLE

  • 1522054: FailedToSetPinPukRetries

  • Background Machine Status

    • 114404: HYPR_DISPLAY_CODE_OP_WS_STATUS_APP_PROFILE_EXCEPTION

    • 114405: HYPR_DISPLAY_CODE_OP_WS_STATUS_NO_CONTEXT A

    • 114406: HYPR_DISPLAY_CODE_OP_WS_STATUS_REMOVE_MACHINE_EXCEPTION

APIs​

The following API call(s) have been added to HYPR:

  • Get the results of a workflow attempt: GET cc/api/idv/workflow/workflowid/results

You can find detailed descriptors of these and other API calls in HYPR's full Postman API set here.

Upcoming Changes​

  • HYPRlink will displace Firebase as HYPR's solution to generate OOB push notifications

Bug Fixes​

  • [Adapt] Fixed: CrowdStrike IdP policy evaluation IdP score check is not working as expected

  • [Adapt] Fixed: CrowdStrike policies: allowed=true when unable to obtain a score

  • [Adapt] Fixed: CrowdStrike Signal Handlers: Add a Bulk API call to cover ZTA machine statuses for user web calls

  • [Adapt] Fixed: CrowdStrike ZTA policy enhancement fires STORED_API_ZERO_TRUST_ASSESSMENT event whenever the ZTA score is manually retrieved

  • [Adapt] Fixed: Logging Only Enabled/Disabled status is not tracked in the Audit Trail

  • [Adapt] Fixed: Login Limits Policy: The user remains blocked even after the User Blocked Duration configured.

  • [Adapt] Fixed: Manual evaluation input gets overridden on evaluation request

  • [Adapt] Fixed: Policy / Handler search doesn't work with ID; it works only with name

  • [Adapt] Fixed: The risk policy name is displayed as 'NA' in the Integrations page when the policy is deleted

  • [Affirm] Fixed: After consent screen, instead of redirecting to chat it redirects to Control Center login page

  • [Affirm] Fixed: Control Center UI Verification Flows table Description sort leads to a white screen

  • [Affirm] Fixed: Generic error when updating a Verification Flow that isn't assigned an rpAppId

  • [Control Center - Integrations] Fixed: Azure: All three transport types may be successfully disabled

  • [Passwordless for macOS] Fixed: Cannot set securityKeyPinComplexity in hypr.json

  • [Passwordless for Windows] Fixed: Checking wrong error code after DiInstallDriver

  • [Passwordless for Windows] Fixed: HyprServiceInstallError system environment variable may be set following the Passwordless client installation

  • [Passwordless for Windows] Fixed: Not getting firmware version from Feitian keys

  • [Passwordless for Windows] Fixed: When Smart Card Pairing Enabled is disabled, we cannot pair an IDEMIA card

Known Issues​

  • [Adapt] The Monitor Authentication policy toggle for Block User On Failed Authentication Attempt doesn't disable user authentication

  • [Adapt] The policy ID Copy button closes the drawer

  • [Adapt] The user is not being blocked after an unsuccessful Login Limits policy attempt

  • [Mobile App for iOS] The text below the logo on the home screen still says "True Passwordless Security" and has not been updated to "Identity Assurance"

  • [Passwordless for Windows] If YubiKey minidriver is updated by the Passwordless client installer, a reboot is required

  • [Passwordless for Windows] HYPR displays an error when a paired Yubikey Bio MPE has the maximum number of fingerprints stored already

  • [Control Center] Server still sends push notifications with incorrect proxy credentials

Breaking Changes​

Android Configuration (Migration from 8.7.X to 9.1.X)​

  • Project-wide:

    targetSdk 33 -> 34
    minSdkVersion 23 -> 26
    kotlin version  1.7.22-> 1.9.20

  • gradle-wrapper.properties:

    https\://services.gradle.org/distributions/gradle-7.6-bin.zip -> https\://services.gradle.org/distributions/gradle-8.4-bin.zip

  • project:build.gradle:

    kotlin version  1.7.22-> 1.9.20
    com.android.tools.build:gradle:7.2.2 -> com.android.tools.build:gradle:8.1.4
    com.google.gms:google-services:4.3.14 -> com.google.gms:google-services:4.4.0
    com.guardsquare:dexguard-gradle-plugin:1.3.24 -> com.guardsquare:dexguard-gradle-plugin:9.4.21

  • app:build.gradle:

    • Implementation:

        androidx.appcompat:appcompat:1.5.1 -> androidx.appcompat:appcompat:1.6.1
        com.google.android.material:material:1.7.0 -> com.google.android.material:material:1.10.0
        androidx.lifecycle:lifecycle-process:2.5.1 -> androidx.lifecycle:lifecycle-process:2.6.2
        com.google.code.gson:gson:2.10 -> com.google.code.gson:gson:2.10.1
        org.apache.commons:commons-lang3:3.12.0 -> org.apache.commons:commons-lang3:3.13.0
        com.google.mlkit:barcode-scanning:17.0.0 -> com.google.mlkit:barcode-scanning:17.2.0
        androidx.core:core-ktx:1.9.0 -> androidx.core:core-ktx:1.12.0
        androidx.lifecycle:lifecycle-viewmodel-ktx:2.5.1 -> androidx.lifecycle:lifecycle-viewmodel-ktx:2.6.2
        org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.7.22 -> org.jetbrains.kotlin:kotlin-stdlib:1.9.20
        com.google.firebase:firebase-messaging:23.1.0-> com.google.firebase:firebase-messaging:23.3.1

    • annotationProcessor:

      androidx.lifecycle:lifecycle-common-java8:2.5.1 -> androidx.lifecycle:lifecycle-common:2.6.2

  • You might need to add this (depending on your setup) in app:build.gradle:

    android {
      ...
          compileOptions {
              sourceCompatibility = JavaVersion.VERSION_1_8
              targetCompatibility = JavaVersion.VERSION_1_8
          }
          kotlinOptions {
              jvmTarget = "1.8"
          }
      ...
    }