AWS verified-access documentation change
Summary
Added TPM requirement, updated client versions to 1.0.2, added firewall troubleshooting, and changed download domains
Security assessment
The TPM requirement addition documents a security-related hardware dependency for Windows clients. While TPM is a security feature, there's no evidence this change addresses a specific vulnerability. The firewall troubleshooting guidance improves security awareness but doesn't indicate a resolved vulnerability. Version updates suggest general improvements without explicit security fixes.
Diff
diff --git a/verified-access/latest/ug/connectivity-client.md b/verified-access/latest/ug/connectivity-client.md index d60ef810f..aed5865ec 100644 --- a//verified-access/latest/ug/connectivity-client.md +++ b//verified-access/latest/ug/connectivity-client.md @@ -50 +50 @@ Before you begin, complete the following prerequisites: - * On a Windows computer, install the [WebView2](https://developer.microsoft.com/en-us/microsoft-edge/webview2) runtime. + * On a Windows computer, verify that [Trusted Platform Module (TPM)](https://support.microsoft.com/en-us/topic/what-s-a-trusted-platform-module-tpm-705f241d-025d-4470-80c5-4feeb24fa1ee) is supported and install the [WebView2](https://developer.microsoft.com/en-us/microsoft-edge/webview2) runtime. @@ -59 +59 @@ Uninstall any previous version of the client. Download the client, verify that t - * [Connectivity Client for Windows version 1.0.1](https://d2nnw2r6uahigk.cloudfront.net/windows-x86_64/1.0.1/ConnectivityClientInstaller.msi) + * [Connectivity Client for Mac with Apple Silicon version 1.0.2](https://d1wo6wuaox5vq3.cloudfront.net/mac-arm64/1.0.2/ConnectivityClientInstaller.pkg) @@ -61 +61 @@ Uninstall any previous version of the client. Download the client, verify that t - * [Connectivity Client for Mac with Apple Silicon version 1.0.1](https://d2nnw2r6uahigk.cloudfront.net/mac-arm64/1.0.1/ConnectivityClientInstaller.pkg) + * [Connectivity Client for Mac with Intel version 1.0.2](https://d1wo6wuaox5vq3.cloudfront.net/mac-x86_64/1.0.2/ConnectivityClientInstaller.pkg) @@ -63 +63 @@ Uninstall any previous version of the client. Download the client, verify that t - * [Connectivity Client for Mac with Intel version 1.0.1](https://d2nnw2r6uahigk.cloudfront.net/mac-x86_64/1.0.1/ConnectivityClientInstaller.pkg) + * [Connectivity Client for Windows with Intel version 1.0.2](https://d1wo6wuaox5vq3.cloudfront.net/windows-x86_64/1.0.2/ConnectivityClientInstaller.msi) @@ -119 +119 @@ macOS -###### Version 1.0.1 +###### Version 1.0.1 and later @@ -125 +125 @@ Navigate to `/Applications/Connectivity Client` and run `Connectivity Client Uni -Download the `connectivity_client_cleanup.sh` script for [Mac with Apple Silicon](https://d2nnw2r6uahigk.cloudfront.net/mac-arm64/1.0.0/connectivity_client_cleanup.sh) or [Mac with Intel](https://d2nnw2r6uahigk.cloudfront.net/mac-x86_64/1.0.0/connectivity_client_cleanup.sh), set execution permissions on the script, and run the script as follows. +Download the `connectivity_client_cleanup.sh` script for [Mac with Apple Silicon](https://d1wo6wuaox5vq3.cloudfront.net/mac-arm64/1.0.0/connectivity_client_cleanup.sh) or [Mac with Intel](https://d1wo6wuaox5vq3.cloudfront.net/mac-x86_64/1.0.0/connectivity_client_cleanup.sh), set execution permissions on the script, and run the script as follows. @@ -178,0 +179,4 @@ Solution: Disconnect from any other VPN software. If you're still unable to conn +Possible cause: On Windows platforms, the client uses HTTP on port 80 for control plane communication. A firewall rule that blocks TCP port 80 prevents control plane communication. + +Solution: Check Windows Firewall rules for an explicit outbound rule blocking TCP on port 80 and disable it. + @@ -190,0 +195,21 @@ Version | Changes | Download | Date +1.0.2 | + +###### macOS + + * Bug fixes and stability improvements + * UI enhancements + + + +###### Windows + + * Bug fixes and stability improvements + * UI enhancements + +| + + * [Mac with Apple Silicon](https://d1wo6wuaox5vq3.cloudfront.net/mac-arm64/1.0.2/ConnectivityClientInstaller.pkg) + * [Mac with Intel](https://d1wo6wuaox5vq3.cloudfront.net/mac-x86_64/1.0.2/ConnectivityClientInstaller.pkg) + * [Windows with Intel](https://d1wo6wuaox5vq3.cloudfront.net/windows-x86_64/1.0.2/ConnectivityClientInstaller.msi) + +| June 9, 2025 @@ -206,3 +231,3 @@ Version | Changes | Download | Date - * [Mac with Apple Silicon](https://d2nnw2r6uahigk.cloudfront.net/mac-arm64/1.0.1/ConnectivityClientInstaller.pkg) - * [Mac with Intel](https://d2nnw2r6uahigk.cloudfront.net/mac-x86_64/1.0.1/ConnectivityClientInstaller.pkg) - * [Windows](https://d2nnw2r6uahigk.cloudfront.net/windows-x86_64/1.0.1/ConnectivityClientInstaller.msi) + * [Mac with Apple Silicon](https://d1wo6wuaox5vq3.cloudfront.net/mac-arm64/1.0.1/ConnectivityClientInstaller.pkg) + * [Mac with Intel](https://d1wo6wuaox5vq3.cloudfront.net/mac-x86_64/1.0.1/ConnectivityClientInstaller.pkg) + * [Windows with Intel](https://d1wo6wuaox5vq3.cloudfront.net/windows-x86_64/1.0.1/ConnectivityClientInstaller.msi) @@ -213,3 +238,3 @@ Version | Changes | Download | Date - * [Mac with Apple Silicon](https://d2nnw2r6uahigk.cloudfront.net/mac-arm64/1.0.0/ConnectivityClientInstaller.pkg) - * [Mac with Intel](https://d2nnw2r6uahigk.cloudfront.net/mac-x86_64/1.0.0/ConnectivityClientInstaller.pkg) - * [Windows](https://d2nnw2r6uahigk.cloudfront.net/windows-x86_64/1.0.0/ConnectivityClientInstaller.msi) + * [Mac with Apple Silicon](https://d1wo6wuaox5vq3.cloudfront.net/mac-arm64/1.0.0/ConnectivityClientInstaller.pkg) + * [Mac with Intel](https://d1wo6wuaox5vq3.cloudfront.net/mac-x86_64/1.0.0/ConnectivityClientInstaller.pkg) + * [Windows with Intel](https://d1wo6wuaox5vq3.cloudfront.net/windows-x86_64/1.0.0/ConnectivityClientInstaller.msi)