Duo Windows Connector Version 4.3.1 Update Loses Offline Access

Software, Tasks & Script Requests
1

We are in the process of updating all devices to Duo Authentication for Windows Logon and RDP connector version 4.3.1.

In testing the update from version 4.3.0 to 4.3.1, we have found that the users’ offline access code has been reset, and they are prompted to set up an offline code again.

In discussions with Duo Support, they advised that, as the update from 4.3 to 4.3.1 is not an in-place update, uninstalling version 4.3 before installing version 4.3.1 may result in losing the offline registration.

They suggested running the attached CMDs to save and then restore the offline registration to prevent this. I have attached the duo KB. Knowledge Base | Duo Security

Is this something that can be incorporated into the Duo Update deployment?

2

Hello, Any update on this Issue is the Windows Logon and RDP connector version 4.3.1. the Default software to Deploy?

3

During the uninstall we will now check to see if there is the offline codes and back them up before moving to running the uninstall.

And then in the install stage, if there is a successful install, typically an exit code of 0 or 3010, it will then restore the backed up keys.