Imprivata OneSign Supported Components · Horizon View Version OneSign Version Notes WindowsProveID Embedded ProveID Web Platform Status Retired Date 7.10 OneSign 6.0 (6.0.000.20)

Imprivata OneSign SupportedComponentsLast Updated: October 14, 2020

Product Documentation

©2020 Imprivata, Inc. All Rights Reserved.

TOCIntroduction 5Related Documents 5

Supported Components 6Maintained Versions 6Enterprise Systems 6

Directories 6Provisioning Adapters 6Java Client Runtime Environments 8Software Distribution Technologies 8Disk Encryption 8Thin and Zero Clients 8

Virtual Desktop Infrastructure 9Citrix Virtual Environments 9Citrix Virtual Apps and Desktops 9Citrix Workspace App for Windows 10Citrix Workspace App for Linux 10Citrix Receiver for Windows 10Citrix Receiver for Linux 11Citrix StoreFront Native 11Citrix StoreFront Legacy 12Web Interface 12Imprivata Citrix Plugin for SAML Authentication 12Citrix Federated Authentication Service 12

VMware Virtual Environments 12VMware Horizon Cloud Service 13Horizon View 14Horizon Client for Windows 20Horizon Client for Linux 22Horizon True SSO 22SAML Authentication 22

Microsoft Virtual Environments 23Microsoft Remote Desktop Services 23Microsoft RDS Connection Brokers 23Microsoft Remote Desktop (RD) Session Hosts 23Microsoft Remote Desktop Clients for Windows 23

G3 and G2 Virtual Environments 24Imprivata Agent Requirements 24Imprivata Virtual Appliance 24G3 VMware System Requirements 24G3 Microsoft Hyper–V System Requirements 25G3 Nutanix System Requirements 25G2 System Requirements 26

Endpoint Devices 27Windows Operating Systems 27Browsers 30Imprivata Ready Windows Devices 31Patient Entertainment Endpoints 32

Mobile Device Access 32Devices 32Operating Systems 33Supported Applications 33Mobile Browsers 34

Secure Walk Away 34BLE Devices 34iPhone 35Android 35

©2020 Imprivata, Inc. All Rights Reserved. Imprivata OneSign Supported Components Imprivata OneSign Supported Components | 2

Authentication Methods and Peripherals 35Keyboards 35Smart Cards 37Proximity Cards 37Readers — Proximity Card Readers by Workstation Type 38Readers — USB Fingerprint Readers by Workstation Type 40Readers — Smart Card Readers by Workstation Type 41Readers — Smart Card – Proximity Combination Readers by Workstation Type 42Authentication Methods 43

APIs, SDKs, and Connectors 44Imprivata Connector for Epic Hyperspace 44ProveID Web API 45OneSign Print Connector 45

ProveID Embedded 45HP ThinPro 45IGEL 47Ubuntu Desktop 48

International 48Languages 48International Standards 49

Endpoint Device Matrix 49


Contacting Imprivata10Maguire Road Bldg 1 Suite 125 Lexington, MA 02421-3120, USA

Phone: 781-674-2700

Toll-Free: 1-877-OneSign

Fax: 781-674-2760

Support: 800 935-5958 (North America)

Support: 001 408-987-6072 (Outside North America)

http://www.imprivata.com

[email protected]

Copyright and Legal Information©2020 Imprivata, Inc. All Rights Reserved.

This product is distributed under licenses restricting its use, copying, distribution and decompilation.

Imprivata’s products may be covered in whole or in part by one or more U.S. pending or issued patents listed athttp://www.imprivata.com/patents.

Trademark InformationOneSign, Imprivata, and the Imprivata logo are registered trademarks of Imprivata, Inc. ProveID and ImprivataOneSign APG are trademarks of Imprivata, Inc. in the United States and in other countries.

Legal NoticesUnder international copyright laws, neither the documentation nor softwaremay be copied, photocopied,reproduced, translated, or reduced to any electronic medium or machine-readable form, in whole or in partwithout the prior written consent of Imprivata, Inc., except as described in the license agreement.

The names of companies, products, people, and/or data mentioned herein are fictitious and are in no wayintended to represent any real individual, company, product, or event, unless otherwise noted.

DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS ANDWARRANTIES, INCLUDING ANY IMPLIEDWARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSEOR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BELEGALLY INVALID.

Document revision


http://www.imprivata.com/

mailto:[email protected]

http://www.imprivata.com/patents

IntroductionThis document contains information about components that are currently supported with active versions ofImprivata OneSign.

Related Documentsl Product LifecycleMatrix— contains the lifecycle status of released versions of Imprivata products, including

Imprivata Confirm ID.l Platform Support Policy— outlines Imprivata's categories for vendor and component support, the standards

for qualification, and resultant support implications.l Imprivata Maintenance and Support agreement — Items marked as no longer supported by the vendor have

reached the end of their primary or mainstream support. As highlighted in the Imprivata Maintenance andSupport agreement, you can contact Imprivata customer support for issues related to the use of ImprivataConfirm ID with these components. It is important to note that Imprivata may not provide fixes or productupdates related to these limitations.


https://imprivatadownloads.exavault.com/p/Download/SFAttach/EndofLifeMatrix.pdf

https://support.imprivata.com/CommunitySecureHelpRedirect?helpLink=help.htm&version=01RefArch

https://www.imprivata.com/imprivata-maintenance-and-support

Supported ComponentsMaintained VersionsThe following table includes all currently maintained versions of Imprivata OneSign and Imprivata Confirm ID. Alisted version includes all service packs and hot fixes for each release.

Imprivata OneSign Version Imprivata Confirm ID Version

Imprivata OneSign 7.2 SP1 Imprivata Confirm ID 7.2 SP1

Imprivata OneSign 7.2 Imprivata Confirm ID 7.2



Imprivata OneSign 6.3 SP1 Imprivata Confirm ID 6.3 SP1






For a complete accounting of release versions, see the Product LifecycleMatrix.

Enterprise SystemsDirectoriesItem Support Information

Active Directory 2019 All maintained Imprivata OneSign versions


Active Directory 2012 R2 All maintained Imprivata OneSign versions


Provisioning AdaptersItem Support Information

Courion Courion was acquired by Core Security. See the Core Security web site for more information.


https://imprivatadownloads.exavault.com/p/Download/SFAttach/EndofLifeMatrix.pdf


Java Client Runtime EnvironmentsItem Support Information

Java SEversionsunder OraclePremierSupport

All maintained Imprivata OneSign versions using Java Access Bridge 2.x.

Customer JREprovided withapplications

The JRE is not automatically enabled for Imprivata OneSign during the Imprivata agentinstallation. The ISXJabi utility installed by the agent can be used to enabled custom JREs foruse with Imprivata OneSign. See product documentation or customer support for useISXJabi.

Software Distribution TechnologiesItem Support Information

Active Directory group policy All maintained Imprivata OneSign versions

NetmotionMobility XE VPN 9.22 Server, 9.22 Client All maintained Imprivata OneSign versions

Microsoft SMS All maintained Imprivata OneSign versions

Novell Zenworks All maintained Imprivata OneSign versions

LanDesk All maintained Imprivata OneSign versions

Disk EncryptionItem Support Information

SophosSafeguard 8.0Encryption

Conditional Support for Imprivata OneSign 5.5 SP1 and later on supported Windows 7 andWindows 10 versions on shared and single user Windows workstations.

SophosSafeguard 7.0Encryption

All maintained Imprivata OneSign versions, on supported Windows 7 and Windows 10versions on shared and single user Windows workstations.

Thin and Zero ClientsFor more information on thin and zero client support, see the "Endpoint DeviceMatrix".


Virtual Desktop InfrastructureThe following tables detail the support status for virtual environments. If a component is not listed, then itsofficial status is "Not Supported".

Imprivata is working to expand its platform support policy information. Sections will be updated as additionalinformation becomes available.

Citrix Virtual Environments

Citrix Virtual Apps and DesktopsFormerly known as XenDesktop and XenApp.

Version OneSign Version Windows ProveIDEmbedded

ProveIDWeb

7 1912 LTSR 6.3 SP1 (6.3.100.0) and later. Yes Yes Yes

7 1909 6.3 SP1 (6.3.100.0) and later. Yes Yes Yes

7 1906 6.3 (6.3.000.10) and later Yes Yes Yes

7 1903 6.0 (6.0.000.20) and later

See Note below.

Yes Yes Yes

7 1811 6.0 (6.0.000.20) and later Yes Yes Yes

7 1808 (formerly7.18)

6.0 (6.0.000.20) and later Yes Yes Yes

7.17 5.5 SP1 (5.5.100.26) Yes Yes Yes

7.16 All maintained Imprivata OneSignversions

Yes Yes Yes


Yes Yes Yes


Yes No Yes

7.6 FP3 All maintained Imprivata OneSignversions

Yes No Yes

7.6 FP1 All maintained Imprivata OneSignversions

Yes No Yes


Yes No Yes


https://support.imprivata.com/CommunitySecureHelpRedirect?helpLink=Topics/help.htm&version=01RefArch

Note:

l Known issue with Citrix version 7 1903: With ProveID Embedded, when the last application is closed, thepublished application session is still running.

Citrix Workspace App for WindowsCitrix Workspace App for Windows Version OneSign Version

1912 6.3 SP1 (6.3.100.0) and later.

1907 7.0 (7.0.000.10) and later

1905 6.3 (6.3.000.10) and later

1904.1 6.3 (6.3.000.10) and later

1903 6.0 (6.0.000.20) and later

1812 6.0 (6.0.000.20) and later

1810 6.0 (6.0.000.20) and later

1808 6.0 (6.0.000.20) and later

Citrix Workspace App for LinuxSupported on ProveID Embedded and ProveIDWeb.

Citrix Workspace App for Linux Version OneSign Version

1912 6.3 SP1 (6.3.100.0) and later.

1908 7.0 (7.0.000.10) and later

1906 6.3 (6.3.000.10) and later

1810 6.0 (6.0.000.20) and later

Citrix Receiver for WindowsCitrix Receiver for Windows Version OneSign Version

4.12 6.0 (6.0.000.20) and later

4.11 5.5 SP1 (5.5.100.26) and later

4.10 All maintained Imprivata OneSign versions

4.9.x All maintained Imprivata OneSign versions


Citrix Receiver for LinuxSupported on ProveID Embedded and ProveIDWeb.

Citrix Receiver for Linux Version OneSign Version

13.9.x 5.5 SP1 (5.5.100.26) and later

13.8 6.0 (6.0.000.20) and later

Citrix StoreFront NativeStoreFrontVersion

OneSign Version Windows ProveIDEmbedded

ProveIDWeb

1912 6.3 SP1 (6.3.100.0) and later Yes Yes Yes

1906 6.3 (6.3.000.10) and later Yes Yes Yes



3.16 All maintained Imprivata OneSign versions Yes Yes Yes

3.15 All maintained Imprivata OneSign versions Yes Yes Yes

3.14 5.5 SP1 (5.5.100.26) and later Yes Yes Yes

3.13 Embedded:

All maintained Imprivata OneSign versions

Yes No No

3.12 Embedded: All maintained Imprivata OneSignversions

Windows: All maintained Imprivata OneSignversions

No

Yes

Yes

No

Yes

No

3.11 All maintained Imprivata OneSign versions Yes No Yes



3.7 All maintained Imprivata OneSign versions No No Yes

3.6 5.2 HF5 (5.2.005.30) and later – Native

support requires OneSign 5.3 and later

Yes Yes Yes

3.5 All maintained Imprivata OneSign versions(Native)

Yes Yes Yes


Citrix StoreFront LegacyStoreFrontVersion


ProveIDWeb


Yes No Yes

3.0.x All maintained Imprivata OneSignversions

Yes No Yes


Yes No Yes

2.6.x

2.5.x

All maintained Imprivata OneSignversions

Yes No Yes

Web InterfaceWeb InterfaceVersion


ProveIDWeb


Yes No Yes

Imprivata Citrix Plugin for SAML AuthenticationItem Support Information

Imprivata Authentication plugin for Citrix Requires Citrix StoreFront version of 3.11 and later.

Citrix Federated Authentication ServiceItem OneSign Version

Citrix Federated Authentication Service 6.3 and later.

VMware Virtual EnvironmentsImprivata is working to expand its platform support policy information. Sections will be updated as additionalinformation becomes available.


https://support.imprivata.com/CommunitySecureHelpRedirect?helpLink=Topics/help.htm&version=01RefArch

VMware Horizon Cloud ServiceWorkflows

Single Sign-on E-Prescribing Access to NHS Spine w/Smart card

Imprivata Agent Support

Agent on endpoint Not required Not required for Imprivata ID assecond-factor authentication

Required for fingerprint as second-factor authentication

n/a

Minimum OneSign/ConfirmID version

6.3 SP1 (6.3.100.0) 6.3 SP1 (6.3.100.0) 6.3 SP1 (6.3.100.0)

Endpoints

Windows Yes Yes Yes

HP No No No

IGEL No No No

ChromeOS No No No

Other Mac, tested successfully1 Mac, tested successfully2 Mac, tested successfully3

Authentication

Primary Authentication Username/Password Username/Password Username/Password

Second FactorAuthentication

n/a Fingerprint - requires agent installedon endpoint

Imprivata ID

n/a

Imprivata Virtual Desktop Access Workflows

Manual desktop andapplication launch (virtualchannel)

Yes Yes Yes

Auto-launch virtualdesktop/ Roaming

No No No

Auto-launch virtual app No No No

VDI Configuration

VMwareHorizon Client onendpoint

VMwareHorizon Client 4.9.0 and later VMwareHorizon Client 4.9.0 and later VMwareHorizon Client 4.9.0 and later

VMwareHorizon CloudService

VMwareHorizon®Cloud Service™ onAzure | Version 2.2 and later (available)



Horizon Agent on VirtualDesktop

VMwareHorizon Agent 4.9.0 and later VMwareHorizon Agent 4.9.0 and later VMwareHorizon Agent 4.9.0 and later

1For issues related to Mac, contact VMware.2For issues related to Mac, contact VMware.3For issues related to Mac, contact VMware.


Workflows

Single Sign-on E-Prescribing Access to NHS Spine w/Smart card

Virtual Desktop Single session Windows 10 viaWVD.1

Windows 10desktop in Azure

Single session Windows 10 viaWVD.2


Single session Windows 10 viaWVD.3


Horizon ViewProveID Embedded does not support USB redirection for the RDP protocol (only for PCoIP and Blast).

HorizonViewVersion

OneSignVersion

Notes Windows ProveIDEmbedded

ProveIDWeb

PlatformStatus

RetiredDate

Extended Service Branch (ESB)

7.12 OneSign6.3 SP1(6.3.100.0)and later

l Full Desktops andApplications forWindows (PCoIPand RDPsessions)

l Includes BlastExtreme Protocolfor VirtualChannel

Yes Yes Yes Recommended

7.11 OneSign6.0(6.0.000.20)and later



Yes Yes Yes Recommended

1Multi-session Windows 10 is not supported.2Multi-session Windows 10 is not supported.3Multi-session Windows 10 is not supported.


HorizonViewVersion

OneSignVersion


ProveIDWeb

PlatformStatus

RetiredDate




Yes Yes Yes Recommended 03/22/2021

7.5.x OneSign5.5 SP1(5.5.100.26)and later

l Imprivatarecommendedversion, containsimportantVMwareperformancefixes.




Current Release (CR)






HorizonViewVersion

OneSignVersion


ProveIDWeb

PlatformStatus

RetiredDate









7.6 OneSign(6.0.000.20)and later



Yes Yes Yes Transitional 03/22/2021

7.4 AllmaintainedImprivataOneSignversions



Yes Yes No Transitional 03/22/2021


HorizonViewVersion

OneSignVersion


ProveIDWeb

PlatformStatus

RetiredDate



l Includes BlastExtremeProtocolfor VirtualChannel

Yes No Yes Transitional 03/22/2021




Yes No No Transitional 03/22/2021



l Blast ExtremeProtocol forVirtual Channel



l Full Desktops andApplications withHorizon Client 4.3for Windows(PCoIP and RDPsessions)




HorizonViewVersion

OneSignVersion


ProveIDWeb

PlatformStatus

RetiredDate


l Full Desktops andApplications withHorizon Client 4.2for Windows(PCoIP and RDPsessions)



7.01 Windows:

AllmaintainedImprivataOneSignversions

ProveIDEmbedded:


l Full Desktops andApplications withHorizon Client4.01 and 4.1 forWindows (PCoIPand RDPsessions)

l Blast ExtremeProtocol VirtualChannel NOTsupported

l VMWareTrueSSO NOTsupported


6.2.x AllmaintainedImprivataOneSignversions

l Full Desktops andApplications withHorizon Client 3.5for Windows(PCoIP and RDP)

l Full Desktopsonly on ProveIDEmbedded(PCoIP and RDP)


6.1.1 AllmaintainedImprivataOneSignversions

Full Desktops andApplications withHorizon Clientversion 3.4



HorizonViewVersion

OneSignVersion


ProveIDWeb

PlatformStatus

RetiredDate


Full Desktops andApplications withHorizon Clientversion 3.3



Full Desktops only,with Horizon Clientversions 2.2, 2.3,2.3.0, 3.0









Horizon Client for WindowsHorizon Clientfor WindowsVersion

OneSign Version Notes PlatformStatus

RetiredDate

Current Release (CR)

5.4 OneSign 6.3(6.3.000.10) andlater

Recommended


Recommended


Recommended


Recommended


Recommended


Recommended


Transitional 03/22/2021

4.8 OneSign 5.5 SP1and later


4.7 All maintainedImprivata OneSignversions





Horizon Clientfor WindowsVersion

OneSign Version Notes PlatformStatus

RetiredDate




l Full Desktops and Applications withHorizon View 7.03 for Windows(PCoIP and RDP sessions)

l Blast Extreme Protocol for VirtualChannel











l Full Desktops and Applications withHorizon 7.01 (PCoIP and RDPconnections only)

l BLAST Extreme is NOT supported forVirtual Channel



l Full Desktops and Applications withHorizon 7.01 (PCoIP and RDPconnections only)

l BLAST Extreme is NOT supported forVirtual Channel



Full Desktops and Applications Transitional 03/22/2021


Full Desktops and Applications Transitional 03/22/2021


Horizon Client for LinuxSupported on ProveID Embedded and ProveIDWeb.

Horizon Client for LinuxVersion

OneSign Version Platform Status Retired Date

5.1 OneSign 6.3 (6.3.000.10) and later Early Adoption 03/22/2021

5.0 OneSign 6.2 (6.2.003.16) and later Recommended 03/22/2021

4.10 OneSign 6.0 (6.0.000.20) and later Recommended 03/22/2021

4.8 OneSign 5.5 SP1 (5.5.100.26) and later Recommended 03/22/2021

4.7 OneSign 5.5 SP1 (5.5.100.26) and later Transitional 03/22/2021





4.4.0 All maintained Imprivata OneSignversions


Horizon True SSOHorizon True SSOVersion


ProveIDWeb

7.x All maintained Imprivata OneSignversions

Yes Yes Yes

SAML AuthenticationAuthenticationType

Version OneSign Version Windows ProveIDEmbedded

ProveIDWeb

SAMLAuthentication

N/A All maintained Imprivata OneSignversions

Yes No No


Microsoft Virtual Environments

Microsoft Remote Desktop ServicesMicrosoft RDS Connection Brokers

Connection Broker Version OneSign Version Windows ProveIDEmbedded

ProveIDWeb

Windows Server 2019 ConnectionBroker

Imprivata OneSign 7.0(7.0.000.10) and later

Yes Yes Yes

Windows Server 2016 ConnectionBroker


Yes Yes Yes

Windows Server 2012 R2Connection Broker


Yes Yes Yes

Microsoft Remote Desktop (RD) Session Hosts

Microsoft RD Session HostVersion


ProveIDWeb

2019 Imprivata OneSign 7.0 (7.0.000.10)and later

Yes Yes Yes

2016 All maintained Imprivata OneSignversions

Yes Yes Yes

2012 R2 All maintained Imprivata OneSignversions

Yes Yes Yes

Microsoft Remote Desktop Clients for Windows

RDS Client version OneSign Version Windows ProveIDEmbedded

ProveIDWeb

Windows Server2019

Imprivata OneSign 7.0 (7.0.000.10) andlater

Yes Yes Yes


G3 and G2 Virtual EnvironmentsImprivata Agent RequirementsItem Support Information

VMware virtual machines runningsupported operating systems.

MS Hyper-V

Support for USB authentication devices is limited to the USBsupport within the particular platform.

Imprivata Virtual ApplianceThe following details virtual appliance support and system requirements:

l Imprivata OneSign 6.1 introduced the G3 appliance.

All maintained versions 6.1 and later require a G3 appliance.

l Imprivata OneSign 5.0 introduced the G2 appliance.

All maintained versions 6.0 and earlier require a G2 appliance.

G3 VMware System RequirementsThe following table details theminimum VMware system requirements for a G3 appliance:

Item Support Information

Productionenvironments

l VMware ESXi with vSphere 6.0, 6.51, 6.72, or 7.03

l 2 CPUs allocated

l 258GB of total available disk space is required in the hypervisor to create and power on theappliance.o 250GB of space is required to deploy the virtual disk file (.vmdk) that is used by the

appliance.o 8GB of space is required for the virtual machine swap file (.vswp) created by the

hypervisor when you power on the appliance.

l 8 GB of allocated memory

l Thin provisioning is allowed

1VMware vMotion and VMware Snapshots are not supported.26.7 supported with Imprivata OneSign 6.2 and later.37.0 supported with Imprivata OneSign 7.2 SP1 and later.



Demo and POCenvironments

l 8GB of allocated memory

l 64GB of available disk space

l 2 virtual processors

l Thin provisioning is allowed (approximately 24GB intial disk size).

VMwareConverter

l Test and POC onlyl VMware Converter 4.0.1 and later1

VMware virtualmachinehardwareversion

The VMware virtual machine hardware version has no effect on the operation of theappliance. Customers can update the hardware if they want and requires no change on ourpart. The G3 appliance ships with hardware version 10.1.5.

VMware tools VMware Tools are part of the build of the Imprivata virtual appliance OVF file. They are notupgradable by customers.

G3 Microsoft Hyper–V System RequirementsThe following list details theminimumMicrosoft Hyper–V system requirements for a G3 appliance:

l Microsoft Hyper-V Server 2012 R2, 2016 and 2019with the Hyper-V x64 role installed

l 2 CPUs allocated

l 258GB of total available disk space is required in the hypervisor to create and power on the appliance.o 250GB of space is required to deploy the virtual disk file (.vhd) that is used by the appliance.o 8GB of space is required for the virtual machine swap file (.bin) created by the hypervisor when you power

on the appliance.



G3 Nutanix System RequirementsThe following list details theminimum Nutanix system requirements for a G3 appliance:

l Nutanix AHV 5.10 LTS.

l Nutanix AHV 5.15 LTS is supported with Imprivata OneSign 7.2 SP1 and later.

l 2 CPUs allocated.

l 258GB of total available disk space is required in the hypervisor to create and power on the appliance.o 250GB of space is required to deploy the virtual disk file (.vmdk) that is used by the appliance.o 8GB of space is required for the virtual machine swap file (.vswp) created by the hypervisor when you power

on the appliance.

l 8 GB of allocated memory.

1VMware converter 4.0.0 is not supported.


G2 System RequirementsThe following table details theminimum system requirements for a G2 appliance.


VMware Converter4.0.1 and later1

Test and POC only.

VMwareRequirements forProduction2

System requirements as of OneSign 5.0 (5.0.000.11):

l VMware ESX or ESXi with vSphere 5.x, 6.0 or 6.5 with all supported OneSign versions

l 2 CPUs allocated

l 258GB of total available disk space is required in the hypervisor to create and poweron the virtual applianceo 250GB of space is required to deploy the ‘virtual disk file’ (.vmdk) utilized by the

appliance.o 8GB of space is required for the ‘virtual machine swap file’ (.vswp) file created by

the hypervisor when the virtual appliance is powered on.



VMwareRequirements fordemo and Proof ofConceptenvironments

l 8 GBMemory, 58 GB Disk, 2 virtual processors

l Thin Provisioning is supported (Approx. 20 GB initial disk size).

VMware virtualmachine hardwareversion

The VMware virtual machine hardware version has no effect on the operation of theappliance. This hardware update is something customers can do if they want to andrequires no change on our part. Wewill continue to ship HW version 4 (for S2) and HWversion 7 (for S3).

VMware Tools VMware Tools are part of the build of the Imprivata virtual appliance OVF file. They arenot upgradable by customers.

1VMware converter 4.0.0 is not supported.2VMware vMotion and VMware Snapshots are not supported.



Imprivata VirtualAppliance: Hyper-V

System requirements:

l Microsoft Hyper-V x64 or later

l Microsoft Windows Server 2012 R2 or later

l All supported OneSign versions.

l 2 CPUs allocated

l 258GB of total available disk space is required in the hypervisor to create and poweron the virtual appliance.

l 250GB of space is required to deploy the ‘virtual disk file’ (.vhd) utilized by theappliance. 8GB of space is required for the ‘virtual machine swap file’ (.bin) filecreated by the hypervisor when the virtual appliance is powered on.


l Thin provisioning allowed

Endpoint DevicesWindows Operating SystemsFor more information, see "Lifecycle for Windows 10 Enterprise" in the Imprivata Environment Reference portal.

Version OneSign Version PlatformStatus

Transitional Retired

Windows 10Enterprise, April 2020Update / version 2004

Windows 10 IoTEnterprise version2004

Windows 10 Proversion 2004


Recommended

Windows 10Enterprise, November2019 Update / version1909




Recommended


https://imprivatadownloads.exavault.com/p/Download/SFAttach/ConfirmIDSupportedComponents.pdf



Windows 10Enterprise (x32, x64)version 1903



OneSign 6.0 (6.0.000.20) and later. Recommended Q3 2020 Q4 2020




OneSign 6.0 (6.0.000.20) and later.

You must install Windows patchKB4482887 (or later) to receive supportfrom Imprivata.

Recommended Q1 2021 Q2 2021




OneSign 6.0 (6.0.000.20) and later. Recommended Q3 2020 Q4 2020

1Microsoft has released a statement thatWindows 10 version 1803 may cause a crash, or other issues, with some 32-bitapplications. Imprivata will provide updates as they become available.




Windows 10Enterprise (x32, x64)version 17091,2



OneSign 5.5 SP1 (5.5.100.18) and later. Transitional Q1 2020 Q2 2020





Retired Q3 2019 Q4 2019

Windows 10Enterprise LTSC 2019

Windows 10 IoTEnterprise LTSC 2019

Windows 10 Pro LTSC2019


Recommended TBD

Windows 10Enterprise 2016 LTSB

Windows 10 IoTEnterprise 2016 LTSB

Windows 10 Pro 2016LTSB

All maintained Imprivata OneSignversions, up to the Q4 2019 release.

Transitional TBD

Windows EmbeddedStandard 8


Retired

1Microsoft has released a statement thatWindows 10 version 1709 may cause a crash, or other issues with some 32-bitapplications. Imprivata will provide updates as they become available.2If (1) An Imprivata single user (type 1) agent is installed on aMicrosoft RDS virtual desktop running Microsoft Windows 10version 1709; and (2) the connection to the virtual desktop is disconnected and then reconnected, user credentials are notpassed to the virtual desktop and the Imprivata login screen hangs. Rebooting the endpoint resolves the issue.




Windows EmbeddedStandard 7

All maintained Imprivata OneSignversions, up to 7.0.

For more information, see "Windows 7Support and Maintenance" in theImprivata Environment Referenceportal.


Windows 71 (x32, x64)— including Windows7 SP1

All maintained Imprivata OneSignversions, up to 7.0.

For more information, see "Windows 7Support and Maintenance" in theImprivata Environment Referenceportal.


Windows Server 2019 Imprivata OneSign 7.0 (7.0.000.10) andlater

Windows Server 2016(x32, x64)


Windows Server 2012R2 (x32, x64)


Notes:

l TheMicrosoft statement regarding Windows 10 version 1803 and version 1709 causing issues with 32–bitapplications is available here.

l Conditional Support: Imprivata will attempt to identify root causes of issues, but will not provide hotfixes forany issues found. Hotfixes will only be provided for fully supported components.

BrowsersItem Support Information

Internet Explorer 11.0 All maintained Imprivata OneSign versions

Supports: SSO, admin console, appliance console, Self Service Portal(SSP)

Microsoft Edge Chromium Imprivata OneSign 7.1 and later:

Supports: SSO2, admin console, appliance console

1Novell Gina is not supported on Windows 7.2SSO supported in Imprivata OneSign 7.2 and later.






https://support.microsoft.com/en-ie/help/4054150/issues-when-windows-10-fall-creators-update-calls-createwindowex-for-s


Google Chrome (minimum version:39)

Imprivata OneSign 7.1 and later:

Supports Admin Console

Google Chrome (minimum version:39)


Supports: SSO, appliance console, SSP

Imprivata Ready Windows DevicesWindows devices from partners that have been qualified as Imprivata ready.

Vendor Device Type OneSign Versions Reader Types Includedin Device

Cybernet CyberMed/iOne/iPC NB/S All-in-OneSeries:

NB19, NB20, NB22, NB24, NB24K, S19, S20,S22, S24, S24K with Windows 10

OneSign 7.1(7.1.000.13) and later

Eikon/CrossMatch 710Biometric Reader

HID Omnikey 5127CKMini

Cybernet CyberMed Rx Rugged X10 Tablet withWindows 10


Eikon/CrossMatch 710Biometric Reader

HID Omnikey 5127CKMini

LGElectronics

24CN670 All in OneMonitor OneSign 7.1(7.1.000.13) and later

RFIDEAS 805N23KU(IMP80)

Zebra ET51AE 8.4" Tablet on Windows 10 * OneSign 7.1(7.1.000.13) and later

NFC Only

Zebra ET51AT 10.1" Tablet on Windows 10 * OneSign 7.1(7.1.000.13) and later

NFC Only

Lenovo T490 HE (Healthcare Edition) laptop onWindows 10 Pro and later.


Imprivata IMP-80 RFID +

Imprivata IMP-1CFingerprint

HP EliteOne 800 G4 All-In-One with Windows 10 OneSign 6.3 SP1(6.3.100.0) and later

IMP80/82

HP EliteBook 840 G4/G5 Laptop with Windows 10 OneSign 6.3 SP1(6.3.100.0) and later

IMP80/82, NXP NPC300NFC module

HP HC270cr Monitor OneSign 6.3 SP1(6.3.100.0) and later

IMP80/82


* Due to small touchscreens and lower resolution than desktop users are accustomed to, we suggest customerstest their Imprivata-integrated applications on this device for usability.

Patient Entertainment EndpointsVendor and version Device Type OneSign Versions Authentication

Methods

OneView InPatient 2019.11and later

OneView terminals on Windowsand Android

OneSign 7.0 (7.0.000.10)and later

User ID +Password

Password + PIN

RFIdeas prox card

Mobile Device AccessDevicesItem Support Information

Samsung Galaxy XCover Pro MDA 7.2 and later

Spectralink VC9253 MDA 7.2 and later

Zebra TC210K MDA 7.2 and later

Newland MT90-HC MDA 7.1 and later

Newland CL-M10 MDA 7.1 and later

Datalogic Memor 10 MDA 6.3 and later.

Honeywell CT40 HC MDA 6.3 and later.

Panasonic Toughpad FZ-T1 MDA 6.3 and later.

Zebra ET55 Tablet MDA 6.3 and later.

Zebra TC75 MDA 6.3 and later.

Zebra TC52 HC MDA 6.3 and later.

Ascom Myco 3 MDA 6.1 and later.

Bluebird EF500 MDA 5.5 SP1 and later.

Samsung Active Tab2 MDA 5.5 SP1 and later. Samsung Model SMT395NZKABTU only.

Samsung S8 MDA 5.5 SP1 and later.

Samsung S8+ MDA 5.5 SP1 and later.



Spectralink Versity MDA 5.5 SP1 and later.

Zebra TC56 MDA 5.5 SP1 and later.

Zebra TC51 HC MDA 5.5 SP1 and later.

Operating SystemsOperating System Supported

Android 7.x-10.x

Supported ApplicationsItem Support Information

Mobile Heartbeat MH-CURE 20.4.0 and later MDA 7.2 and later.

Zello 4.95.0 and later MDA 7.2 and later.

Allscripts SunriseMobile 18.4.10400 MDA 7.1 and later.

ASCOM Digistat Mobile MDA 7.0 and later.

IQMessenger 10.0.2 MDA 7.0 and later.

SoftComputer SoftID MDA 7.0 and later.

Zebra Workforce Connect: Voice, PTT Pro, and PFM - PFC version 2.0.20205 and later MDA 6.3 and later.

Halo Communications MDA 6.3 and later.

Dryrain Enterprise Browser for Meditech Expanse MDA 6.3 and later.

Cistec KISIM Mobile 1.21 and later MDA 6.3 and later.

Dr. First Akario Backline MDA 6.3 and later.

Mobitrace LabFlow 4.14.0 and later MDA 6.3 and later.

Mobitrace NurseFlow SCI 4.14.0 and later MDA 6.3 and later.

Mobitrace PharmaFlow 4.14.0 and later MDA 6.3 and later.

BESTmate MDA 6.3 and later.

Radianta Alert Manager MDA 6.2 and later.

Tiger Connect MDA 6.2 and later.



Vocera Collaboration Suite MDA 6.2 and later.

Spectralink Biz Phone MDA 6.2 and later.

Imprivata Cortext1,2 MDA5.5 SP1 and later.

OpenScapeMobile (Atos Unify) MDA 5.5 SP1 and later.

Mobitrace NurseFlow 4.14.0 and later MDA 5.5 SP1 and later.

Patientrack MDA 5.5 SP1 and later

Hospedia Extramed MDA 5.5 SP1 and later

Epic Rover MDA 5.5 SP1 and later

Meditech ExpanseWeb with ADFS 3.0 MDA 5.5 SP1 and later

Meditech Point of Care (POC) with ADFS 3.0 MDA 5.5 SP1 and later

Office 365with ADFS 3.0 MDA 5.5 SP1 and later

Mobile BrowsersItem Support Information

Google Chrome MDA 5.5 SP1 and later.

Zebra Native Browser MDA 5.5 SP1 and later.

Zebra Enterprise Browser MDA 5.5 SP1 and later.

Secure Walk AwayBLE DevicesItem Support Information

BLED112 HDW-IMP-IIUR (BLE dongle)3 6.3 SP1 HF1 (6.3.101.16) andlater

HDW-IMP-80 BLE (proximity card reader + BLE) 6.3 SP1 HF1 (6.3.101.16) andlater

1MDAused concurrently with Cortext PIN is not currently supported.2Cortext user management via Imprivata Directory is not currently supported.3Windows 10 version 1903 or later is required for these devices to function properly.



HDW-IMP-82 BLE (proximity card reader with HID Seos + BLE) 6.3 SP1 HF1 (6.3.101.16) andlater

HDW-KSI-1700 HCFFFB-16 (keyboard + proximity card reader + fingerprint +BLE)1

6.3 SP1 HF1 (6.3.101.16) andlater

HDW-KSI-1900 HCFFFB-16 (Pod + proximity card reader + fingerprint + BLE)2 6.3 SP1 HF1 (6.3.101.16) andlater

iPhoneItem Support Information

iPhone 7, 7 Plus, 8, 8 Plus, X, XR, XS, XS Max, 11, 11 Pro 6.3 SP1 HF1 (6.3.101.16) and later

AndroidItem Support Information

Google Pixel 1 through 4 7.1 and later

OnePlus 6 through 7 7.1 and later

Samsung Galaxy S7 through S10 7.1 and later

Authentication Methods and PeripheralsStandalone USB readers, and laptops and tablets containing the following sensors are compatible with ImprivataOneSign, and support fingerprint enrollments, multi-mode / multi-factor authentication and tracking andreporting on fingerprint authentication events unless noted.

Consult device specifications from themanufacturer to identify your sensor models. Resellers may create customdrivers that may be incompatible with Imprivata OneSign.

KeyboardsItem Supported Information

Keyboards with UPEK TouchChip large area sensor. All maintained ImprivataOneSign versions

1Windows 10 version 1903 or later is required for these devices to function properly.2Windows 10 version 1903 or later is required for these devices to function properly.


Item Supported Information

KSI-1700 family of keyboards with integrated proximity readers andfingerprint biometric readersl SX HB-03l SX HB-07l SX HB-16l SX HFFFBl SX HFFFB-03l SX HFFFB-07l SX HFFFB-16l SX HCFFFBl SX HCFFFB-16l KSI DuoIDPodl KSI-1900 HFFFB-16l KSI-1900 HCFFFB-16

All maintained ImprivataOneSign versions


Smart CardsItem Support Information Smart Card

as ProxWindows ProveID

Embedded

Windows-compatible SmartCards

Yes No

GemPlus GemClub Memo Yes Yes No

UK National Health ServiceSmart Cards

Yes Yes No

Lisit Smart Cards (Lombardia,Italy)

Estonian Government SmartCards

Belgian eID Smart Cards

Netherlands UZI Smart Cards

Swedish Siths Identity Card

French CPS Smart Cards(middleware version 5.0.4.)

There are known issues with FrenchCPS cards version 5.0.8.

Yes Yes No

Proximity CardsItem Support Information Windows ProveID

Embedded

HID SEOS CardsCredentials1

Supported on HID Omnikey 5427 and 5127 readersrunning FW version 04.02.0400 on the following Windowsagent versions:

l 5.1 SP1 HF 17 (5.1.117.77) and later

l 5.2 HF 5 (5.2.005.30) and later

l 5.3 (5.3.000.9) and later

l 5.4 SP1 and later

Requires badge reenrollment when moving to 5.4 SP1

Yes Yes

RF Proximity Cards (HIDMifare, Casi Rusco,Weigand)

Not all cards are supported on all readers. Yes Yes

1SEOS credentials are 13.56MHz credentials and can conflict with other card readers. HID SEOS credentials mayonly be used with HID 5427 and HID 5127 card readers using the OneSign versions and firmware version notedlater.


Readers — Proximity Card Readers by Workstation TypeAll listed Imprivata OneSign versions areminimum supported versions.

Proximity CardReader

Windows ProveIDEmbedded

ProveID Web1

HP/IGEL 10Zig Dell/Wyse Stratodesk Teradici Lenovo PraimLinux

ChromeOS

HID (HDW-IMP-60)

AllOneSignversions

AllOneSignversions

Yes Yes Yes Yes Yes Yes Yes

iClass/Mifare.(HDW-IMP-75)

AllOneSignversions

AllOneSignversions


Plus (HDW-IMP-80)

AllOneSignversions

AllOneSignversions


BLE (HDW-IMP-80-BLE)

5.4 SP1 5.4 SP2

6.02ProxOnly

ProxOnly

Prox Only ProxOnly

ProxOnly

ProxOnly

ProxOnly

PIV (HDW-IMP-80-C)

7.2 7.2 Yes Yes Yes Yes Yes Yes Yes

SEOS/iClass ID(HDW-IMP-82)

AllOneSignversions

5.4 SP2 Yes Yes Yes Yes

SEOS/iClass ID –BLE (HDW-IMP-82-BLE)

5.4 SP1 5.4 SP1 Prox Only ProxOnly

ProxOnly

ProxOnly

PC Prox Nano(HDW-IMP-NV60)

AllOneSignversions

AllOneSignversions


High FrequencyForm Factor ProxCard (HDW-IMP-NV75)

AllOneSignversions

AllOneSignversions


1For supported endpoint devices and firmware versions, see manufacture's website.2Bluetooth support added in this version.




ProveID Web1


ChromeOS

MFR-75 AllOneSignversions

5.4 SP2 Yes Yes2

RDR-7L82AKU(HDW-RFI-7L82AKU)

5.4 SP2 5.4 SP2 Yes

HID Omnikey5022

AllOneSignversions

AllOneSignversions

HID Omnikey5125

HID Omnikey5321

HID Omnikey5021

CL (HID, iClass)

AllOneSignversions

AllOneSignversions

HID Omnikey5127

HID Omnikey5326

HID Omnikey4121

HID Omnikey5025 (HID, iClass)

AllOneSignversions

HID Omnikey5427 CK

AllOneSignversions

AllOneSignversions

Tablet with built-in HID Omnikey5127 proximityreader

AllOneSignversions

N/A N/A N/A N/A N/A N/A N/A

1For supported endpoint devices and firmware versions, see manufacture's website.2Requires NOS firmware version 2.40.3865




ProveID Web1


ChromeOS

BroadcomBCM5880embedded reader

AllOneSignversions

N/A N/A N/A N/A N/A N/A N/A

Readers — USB Fingerprint Readers by Workstation TypeUSBFingerprintReaders


ProveID Web2


ChromeOS

ImprivataIMP-1C

UPEK TCS1C

UPEK ET710

All OneSignversionsFIPS/EPCScompliant3

All OneSignversionsFIPS/EPCScompliant

Yes Yes Yes Yes Yes

UPEK TCS1 All OneSignversionsFIPS/EPCScompliant4,5,6

All OneSignversionsFIPS/EPCScompliant

Yes Yes Yes Yes Yes Yes

The following are not supported:

l UPEK TCS5B sensor

l Small area sensor.

The following are no longer supported by the vendor:

l KSI 1006/1008

l Zventco P5000/6000

l UPEK ET700

1For supported endpoint devices and firmware versions, see manufacture's website.2For supported endpoint devices and firmware versions, see manufacture's website.3Natively supported, including enrollment.4Natively supported, including enrollment.5Some additional readers are supported with the pass-thru GINA.6Readers that support the same chip may be used.


Readers — Smart Card Readers by Workstation TypeSmart CardReader


ProveID Web1


ChromeOS

Windowscompatible SmartCard Readers(Active Directorycertificates)

IfWindowsdriveravailable

Yes Yes

Non-ActiveDirectory-basedSmart CardReaders

Nottested byImprivata

Yes Yes

NXP-based NFCreaders – Tablets

AllOneSignversions2

Yes Yes

Cherry ST 1144SmartCard reader

Cherry TC 1100SmartCardTermina

Cherry TC1300SmartCardcontact reader

AllImprivataOneSignversions

SmartCardasproximitycard only

1For supported endpoint devices and firmware versions, see manufacture's website.2Requires MiFare proximity cards used with tablets running Windows 8.1 and additional driver.


Readers — Smart Card – Proximity Combination Readers byWorkstation TypeSmart Card –ProximityCombinationReader


ProveID Web1

HP/IGEL 10Zig Dell/Wyse

Stratodesk

Teradici

Lenovo

PraimLinux

Chrome OS

CombinationSmart/Proximity Card readers(for example –HID Crescendo)

Smart Card

IfWindowsdriver isavailable

ProximityCardfunctionality

RF IDeasreadersresold byImprivata,including:

l HID

l Indala

l iCLASS

l Mifareand ISO15693

l HIDOmnikey5125,5321,5021CL

Yes Proxcard,

Smartcard asProxcard

1For supported endpoint devices and firmware versions, see manufacture's website.


Smart Card –ProximityCombinationReader


ProveID Web1

HP/IGEL 10Zig Dell/Wyse

Stratodesk

Teradici

Lenovo

PraimLinux

Chrome OS

HID Omnikey5422combinationproximitycard/smartcard reader


Prox only Proxonly

Prox only

Authentication MethodsItem Support Information

Password Offline supported.

Fingerprint Offline supported.

Proximity card(HID-type RF card)

Offline supported.2

Smart Card Offline supported.

Tokens Offline supported:

Nativemanagement of VASCO3 tokens within OneSign and tokens resold by Imprivata4

Offline not supported:

Other tokens managed within their own products.

Emergency Accessvia SecurityQuestions


Radius (IncludingPhoneFactor)

1For supported endpoint devices and firmware versions, see manufacture's website.2Offline mode requires password entry.3VASCO is now known as OneSpan.

4GO7 offline authentication is only supported for Imprivata OneSign 6.2 and later. For OneSign 6.1 and earlier,offline authentication is not supported.



Kerberos(Windows)

Only a single key tab file can be uploaded to the OneSign appliance.

For multiple-domain support, a trust must exist between the domains. The allowance for1 key tab file only becomes an issue if there aremultiple untrusted domains or if it is anexternal trust.

APIs, SDKs, and ConnectorsImprivata Connector for Epic HyperspaceThe Imprivata Connector for Epic Hyperspace follows the samemaintenance schedule as Imprivata OneSign.

For feature specific agent dependencies, see the Imprivata Connector for Epic Hyperspace configuration guide.


Epic August 2019 andlater1

Connector for Epic Hyperspace 6.3 and later.

Epic May 2019

SU# C8802631-Hyperspace or later

Connector for Epic Hyperspace 6.3 and later.

Requires a specific SU# from Epic. For more information, see the ImprivataConnector for Epic Hyperspace release notes.

Epic February 2019

SU# C8707264-Hyperspace or later

All maintained Connector for Epic Hyperspace.

Requires a specific SU# from Epic. For more information, see the ImprivataConnector for Epic Hyperspace release notes.

Epic November 2018 All maintained Connector for Epic Hyperspace versions 6.3 and later.

Epic August 2018 All maintained Connector for Epic Hyperspace versions 6.3 and later.

Epic 2018 All maintained Connector for Epic Hyperspace versions 6.3 and later.

Epic 20172 All maintained Connector for Epic Hyperspace versions up to and including 6.2.



1New versions of Epic no longer require updates to the Connector for Epic Hyperspace2Epic updated the name of its 2016 version to Epic 2017 after the release of the Connector for Epic 5.3. As such, theinstaller for the Connector for Epic 5.3 will reference Epic 2016 and supports Epic 2017.


ProveID Web APIItem Supported Information

ProveIDWeb API 16.0 OneSign 6.0 and later.

ProveIDWeb API 15.0 OneSign 5.5 SP1 and later.

ProveIDWeb API 14.0 OneSign 5.5 and later.

ProveIDWeb API 13.0 All maintained Imprivata OneSign versions








OneSign LicenseManager support.

OneSign Print ConnectorItem Support Information

Plus Technologies OM Plus DM 2.6.4 All maintained Imprivata OneSign versions

ProveID EmbeddedIf a firmware version or client is not listed, then its official status is "Not Supported".

HP ThinProFast User Switching workflows for HP ThinPro 7.x requires Imprivata OneSign 6.3 SP1 or later.

Thin Clients HP ThinPro 7.0 HP ThinPro 7.1 SP1, 7.1 SP2,7.1 SP3

HP ThinPro 7.1SP4

HP ThinPro 7.1SP8

T240 OneSign 6.0 and later OneSign 6.0 andlater

OneSign 7.0 andlater

T420 OneSign 5.5 SP1and later

OneSign 6.0 and later OneSign 6.0 andlater



Thin Clients HP ThinPro 7.0 HP ThinPro 7.1 SP1, 7.1 SP2,7.1 SP3

HP ThinPro 7.1SP4

HP ThinPro 7.1SP8













T628 OneSign 7.0 andlater




T638 OneSign 7.0 andlater








MT20 OneSign 7.0 andlater

MT21 OneSign 5.5 SP1and later



MT22 OneSign 7.0 andlater

MT45 OneSign 6.3 and later1 OneSign 6.3 andlater2


ThinPro PCConverter



1Fast User Switching not supported.2Fast User Switching not supported.


IGELMicrosoftWindows

IGEL 10.03.x IGEL10.04.x

IGEL10.05.x

IGEL10.06.170

IGEL11.01.x

IGEL11.03.110

IGEL11.04.130

Zero Clients

IZ1HDX Allmaintained ImprivataOneSign versions

OneSign 6.0and later


OneSign 6.3SP1 and later











IZ2Horizon Allmaintained ImprivataOneSign versions














IZ3Horizon Allmaintained ImprivataOneSign versions







Thin Clients

UD2 LX Allmaintained ImprivataOneSign versions




























UD3Windows7/8

SeeWindowsSupport

UD5Windows7/8

SeeWindowsSupport

UD5Windows10

SeeWindowsSupport

Integrated Devices








UD9 LX Touch Allmaintained ImprivataOneSign versions







UD9Windows7/8

SeeWindowsSupport

UD9Windows7/8

SeeWindowsSupport

© 2020 Imprivata, Inc. All Rights Reserved. Imprivata OneSign Supported Components Imprivata OneSign Supported Components | 47

MicrosoftWindows

IGEL 10.03.x IGEL10.04.x

IGEL10.05.x

IGEL10.06.170

IGEL11.01.x

IGEL11.03.110

IGEL11.04.130

UD10Windows 7/8

SeeWindowsSupport

UD10Windows 7/8Touch

SeeWindowsSupport

Software Thin Clients

UDC3 Allmaintained ImprivataOneSign versions







UD Pocket Allmaintained ImprivataOneSign versions







Notes:

l Fast User Switching workflows for IGEL 11.x requires Imprivata OneSign 6.3 SP1 or later.

Ubuntu DesktopUbuntu Version Support Information

18.04 OneSign 7.2 (7.2.000.13) and later.

InternationalLanguagesAgent end user interface only. The NewUserWelcome agent download pages are English only.


English All maintained Imprivata OneSign versions

Arabic Imprivata OneSign 6.3 SP1 and later.

Brazilian Portuguese All maintained Imprivata OneSign versions

Danish All maintained Imprivata OneSign versions

Dutch All maintained Imprivata OneSign versions

Finnish All maintained Imprivata OneSign versions

French All maintained Imprivata OneSign versions

German All maintained Imprivata OneSign versions

Italian All maintained Imprivata OneSign versions



Spanish All maintained Imprivata OneSign versions

Swedish All maintained Imprivata OneSign versions

International StandardsItem Support

Information

ISO-8859 and ANSI code pages and their extensions (e.g. Western and Eastern European,Baltic, Cyrillic, Hebrew, Arabic, etc.)

Supported

Non-ANSI code pages (e.g. Far East, Chinese, Korean, Japanese, etc.) Not Supported

Endpoint Device MatrixWindows

Workstations

ProveID Embedded ProveID Web Workstations1

HP IGEL Ubuntu 10Zig DellWyse

Stratodesk Teradici Lenovo PriamLinux

ChromeOS

Operating System ThinPro

IGELOS

Ubuntu NOS

PEAKos

ThinOS/

Xenith

NoTouchDesktop

Tera 2 LeTOS ThinOX8.5

ChromeOS

Minimum firmwareversions2

N/A See ProveIDEmbedded

10.12.156 8.3+/2.3

2.40.1173 5.2.1 2.0.39 3.51 M81

General Features and Workflows

Imprivata Appliancefailover

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Imprivata offlinemode Yes Yes3 Yes4

Imprivata self-servicepassword reset

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Third-party self-servicepassword reset

Yes Yes Yes Yes

Non-OneSign userworkflow

Yes Yes Yes Yes Yes Yes Yes Yes Yes

Spine Combined workflow Yes Yes Yes No

1For supported devices and firmware versions, see manufacturer's website.2For supported devices and firmware versions, see manufacturer's website.3Primary authentication methods are limited to password or proximity card. Multi-factor authentication is limited toproximity card + password.4Primary authentication methods are limited to password or proximity card. Multi-factor authentication is limited toproximity card + password.


Windows

Workstations




ChromeOS

Smartcard as proximitycard workflow

Yes Yes Yes Yes

Imprivata Walk Away Security

Honors lock command Yes Yes Yes Yes Yes Yes Yes Yes

Fade to Lock screensaver Yes Yes Yes Yes Yes

Notification balloon Yes No Yes

SecureWalk Away Yes Yes Yes Yes

Citrix Workflows

Citrix Virtual Desktops Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Citrix Virtual Applications Yes Yes Yes Yes Yes Yes Yes Yes

Virtual Kiosk Citrix forVirtual Desktops

Yes Yes2 Yes3 Yes Yes Yes Yes Yes Yes

Virtual Kiosk for CitrixPublished Applications

Yes Yes4 Yes5 Yes6 Yes Yes Yes

VMware Workflows

VMwareHorizon Desktops Yes Yes Yes No Yes Partial7 Yes Yes Yes Yes

VMware PublishedApplication Support

Yes Yes Yes Yes

Virtual Kiosk for VMwareDesktops

Yes Yes Yes No Yes Partial8 Yes Yes Yes

Virtual Kiosk for VMwarePublished Applications

Yes Yes Yes

Microsoft Workflows

Microsoft RDS/Remote PCDesktops

Yes Yes Yes No Yes Yes Yes

Microsoft RDS Applications Yes Yes Yes

1For supported devices and firmware versions, see manufacturer's website.2The HP and IGEL device OS support connections to a Citrix Virtual Desktop natively. ProveID Embedded is not required onthe endpoint.3The HP and IGEL device OS support connections to a Citrix Virtual Desktop natively. ProveID Embedded is not required onthe endpoint.4Only published desktops are supported. Published applications are not supported.5Only published desktops are supported. Published applications are not supported.6Only published desktops are supported. Published applications are not supported.7Dell Wyse ThinOS Only.8Dell Wyse ThinOS Only.


Windows

Workstations




ChromeOS

Virtual Kiosk forRDS/Remote PC Desktops

Yes

Virtual Kiosk for RDSPublished Applications

Yes

Primary Authentication Methods via Endpoint Operating System

Password Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Proximity card Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Smart card Yes

Fingerprint biometrics Yes Yes Yes No Yes Yes Yes Yes

Question and Answer Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Authentication/ Re-Authentication Methods via Virtual Channel2

Proximity card Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Smart card Yes

Fingerprint biometrics Yes Yes Yes No Yes Yes Yes Yes Yes Yes

Imprivata Hands FreeAuthentication

Yes Yes Yes No Partial3

1For supported devices and firmware versions, see manufacturer's website.2Required for workflows leveraging session-based application and desktop technology (e.g. Citrix Virtual Applications).3Supported via USB redirection only.
