The new version of Gemalto Mobile Secure Messenger server brings the following improvements:

-> Seamless integration on Android phones

• Enhanced push notifications that support Firebase, the latest Android push service
• It is now easier to communicate with Android phones, as banks can now configure the proxy for communication with Google servers.

-> Enhanced communication with iPhones

• Upgraded push notifications that support the latest iOS push protocol
• Extra configuration options enabling richer, customized push notifications.

-> Easier to install and operate thanks to enhanced documentation, new monitoring APIs to be better informed of service interruptions, and a new log to track all requests sent to the server.

If you wish to benefit from the enhanced features that comes with this release, feel free to contact your account manager or support team to get an upgrade.

The new version of Gemalto Mobile Protector & Secure Messenger SDK brings the following improvements:

1. Enhanced security on Android
- The SDK now offers even greater protection against reverse engineering, thanks to native code used for its most sensitive parts (e.g. cryptographic operations and OTP generation), and Gemalto’s latest and unique code-obfuscation techniques;
- Security improvements on root / hooking / debugger detection.

2. Apple Face ID support on iPhone X:
To comply with Apple guidelines, Gemalto FaceID is disabled and replaced by Apple Face ID when the latter is available.

3. Improved user experience:
- More attractive user interface on the Security Keypad (with gradient colors and the possibility to choose from a pre-defined color palette);
- App developers can disable the “Delete” button in the Security Keypad, if this is not necessary.

Contact your support team or regular account manager if you have questions.

This release is an upgrade that brings some enhancements in security, compliance, and functionality:

- Enhanced security thanks to User Expiration Monitoring: This new version of CAS will automatically block a user who has not logged in for some time.

- GDPR compliance: CAS v7.6 treats personal data in a secure way that is complaint with GDPR, for example by encrypting personal data and allowing banks to clean up the traces of specific users.

- Easier audits and health checks thanks to a unified log format that can be easily integrated with external systems. Feel free to contact your support team or account manager to find out more!

Banks are offering ever richer services through mobile apps – which increases vulnerability. How can they keep this rich offering, while protecting their customers and themselves from fraud attacks?

The newly launched Gemalto Mobile Security Toolkit protects mobile applications and helps mobile app developers get ready for the threats of the future. It helps app developers:
- Defend their assets and their apps,
- Detect unsafe environments or suspicious contexts, and
- React to them.

Get in touch with your Gemalto salesperson to find out more!

This new release facilitates deployment in a Cloud environment, by adopting the best practices and the most widely used standards for this:
- CAS v7.5 can be deployed in a Docker container, making it compatible with the best practices for easy, industrialized deployment in a Cloud environment;
- It supports AWS CloudHSM of Amazon Web Services (which uses Luna HSM behind the scenes);
- CAS v7.5 can produce logs in JSON format, which is the future-proof industry standard;
- CAS has introduced a new health-checking API to ensure high availability.

Feel free to contact your support team or account manager if you have any questions.

This maintenance release is:
- Easier to install on both Firefox and Safari
- More robust on Safari
- Compatible with Ezio Flex 1.1.

Feel free to contact your support team or account manager if you have questions.

These new versions bring the following improvements:

• Easier to use Secure Messenger: Thanks to the Mobile Signing Protocol, developers working with Mobile Secure Messenger no longer need to worry about how to format their data to authenticate users or sign transactions They just provide their data to the MSP protocol, which then formats them on the server side and decodes them automatically on the client side.
• Enhanced security: With new security features, FaceID authentication now protects its library even better against code-lifting – thereby guaranteeing that users’ biometric templates cannot be copied.

N.B.: Gemalto FaceID SDK 1.5.1 and Mobile Protector SDK 4.5.1 with FaceID must replace all previous versions of FaceID POC/pilots (both standalone and in the Protector SDK), as they will stop working on October 31.

Feel free to contact your support team or regular account manager if you have questions.

Ezio Mobile Protector Enrollment and Provisioning Server (EPS) version 2.8 is now available, for customers wanting to use the SafeNet Payment HSM.

Here’s what’s new in this version:

- Native support of SafeNet Payment HSM instead of the Thales Emulation mode (TEP). EPS 2.8 now supports TLS communications with this HSM. It ensures the confidentiality and integrity of communication between the EPS application and the HSM.

- Updated troubleshooting documentation.

This is a maintenance release with a critical fix for iOS only:
• An issue that used to cause the end user to experience performance degradation or abnormal application termination after a period of use, due to an increase in the time taken for debugger detection, has now been fixed.

If you are using the iOS version of SDK 4.4.0, please upgrade to this version.

If you are using the Android version of SDK 4.4.0, or older versions of the SDK, i.e. SDK 4.3.0 and below, you are not affected and do not need to upgrade.

Contact your support team or regular account manager if you have questions.

This is a maintenance release with some security enhancements and updates in the environments it supports.

• Security enhancements include the following:
o Sensitive information can now be encrypted with the AES algorithm. This enables seed protection when the seed stored in the database, EMV PAN encryption, and PSKC file protection. It works on SafeNet Payment HSM and Network HSM.
o Sensitive admin operations can now be audited in the dedicated log file.
• Environment updates: Ezio CAS now supports MySQL 5.7, MS SQL 2016 and SM Server 2016.

As usual, we recommend that you contact your local salesperson to upgrade to the latest version and benefit from the enhancements.