AWS workspaces documentation change
Summary
Added client version requirements table for WebAuthn support, introduced Enhanced WebAuthn type with higher version requirements, removed manual browser extension installation steps, and added configuration guide links
Security assessment
The changes document WebAuthn authentication using FIDO2-enabled methods (security keys/biometrics), which is a security feature. However, there is no evidence of addressing a specific vulnerability. The updates focus on clarifying requirements and configuration procedures for existing security functionality.
Diff
diff --git a/workspaces/latest/userguide/webauthn_support.md b/workspaces/latest/userguide/webauthn_support.md index 591dffacc..d5f533145 100644 --- a//workspaces/latest/userguide/webauthn_support.md +++ b//workspaces/latest/userguide/webauthn_support.md @@ -4,0 +5,2 @@ +Client version requirementsGet Started + @@ -7 +9,15 @@ -In-session WebAuthn authentication is supported using the DCV for Windows WorkSpaces, on Windows, Linux and macOS clients. WorkSpaces using the PCoIP protocol doesn't support WebAuthn redirection. +In-session WebAuthn authentication is supported using the DCV for Windows and Linux WorkSpaces, on Windows, Linux and macOS clients. WorkSpaces using the PCoIP protocol doesn't support WebAuthn redirection. + +You can use WebAuthn authentication for in-session authentication using FIDO2-enabled authentication methods like security keys or biometrics. In-session authentication refers to WebAuthn authentication that's performed after logging in and requested by web applications running within the session. For example, you can use Yubikey for in-session authentication while using Google Chrome. + +## Client version requirements + +The following WorkSpaces client versions support WebAuthn: + +WebAuthn Type | Client versions supported +---|--- +Standard WebAuthn | + + * Windows client 5.19.0 or above + * Mac client 5.19.0 or above + * Linux client 2024.0 or above @@ -9 +24,0 @@ In-session WebAuthn authentication is supported using the DCV for Windows WorkSp -You can use WebAuthn authentication for in-session authentication. In-session authentication refers to WebAuthn authentication that's performed after logging in and requested by the web applications running within the session. For example, you can use Yubikey for in-session authentication while using Google Chrome. @@ -11 +26 @@ You can use WebAuthn authentication for in-session authentication. In-session au -Your WorkSpaces administrator can enable and disable WebAuthn. Your browser will notify you that the required browser extension is installed for you when your administrator enables it. +Enhanced WebAuthn | @@ -13 +28,2 @@ Your WorkSpaces administrator can enable and disable WebAuthn. Your browser will -###### To install the browser extension manually (optional) + * Windows client 5.29.0 or above + * Mac client 5.29.0 or above @@ -15 +30,0 @@ Your WorkSpaces administrator can enable and disable WebAuthn. Your browser will - 1. Sign in your WorkSpace. @@ -17 +31,0 @@ Your WorkSpaces administrator can enable and disable WebAuthn. Your browser will - 2. In your browser, open one of the following links, depending on which browser you're using: @@ -19 +33 @@ Your WorkSpaces administrator can enable and disable WebAuthn. Your browser will - * For **Microsoft Edge** : https://microsoftedge.microsoft.com/addons/detail/dcv-webauthn-redirection-/ihejeaahjpbegmaaegiikmlphghlfmeh +## Get Started @@ -21 +35 @@ Your WorkSpaces administrator can enable and disable WebAuthn. Your browser will - * For **Google Chrome** : https://chromewebstore.google.com/detail/dcv-webauthn-redirection/mmiioagbgnbojdbcjoddlefhmcocfpmn?pli=1 + * [Configure WebAuthn on Windows WorkSpaces](./webauthn_windows.html) @@ -23 +37 @@ Your WorkSpaces administrator can enable and disable WebAuthn. Your browser will - 3. Install the extension by choosing **Get** (for Microsoft Edge) or **Add to Chrome** (for Google Chrome), then at the additional prompt, choose **Add extension**. Once the installation is finished, you'll see a confirmation message saying that you've successfully added the extension. + * [Configure WebAuthn on Linux WorkSpaces](./webauthn_linux.html) @@ -36 +50 @@ Smart card authentication -Amazon Connect audio optimization +WebAuthn on Windows