---
title: "Rest PKI Core changelog"
description: "Release history of Rest PKI Core: versions with their improvements and bug fixes, and whether each one updates the database model."
canonical: "https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/changelog"
locale: "en"
product: "Rest PKI Core"
last_updated: "2026-10-23"
---

# Rest PKI Core changelog

### 5.1.4 (2026-10-23)

Updates database model: no

* Improvements

  * [RPNG-993] Optional FortFace setting `PublicIdHeader`: when filled, every request to FortFace carries the `x-public-id` header

### 5.1.3 (2026-10-23)

Updates database model: no

* Improvements

  * [RPNG-992] Document face matching accepts an optional minimum match level per request, overriding the subscription setting for that session

### 5.1.2 (2026-10-22)

> **Warning**
>
> - Every recording step of the video identification settings must now have a `MaxTime`; settings with a recording step without it are rejected.

Updates database model: no

* Improvements

  * [RPNG-976] Update FaceTec Browser SDK to v10.1.22

* Bug fixes

  * [RPNG-912] Video identification recordings could fail on slow devices because the recording timeout also counted the capture time

  * [RPNG-913] Archival signature extension returned HTTP 500 when the timestamp issued for the extension failed validation

  * [RPNG-952] Document-to-face matching through FortFace returned HTTP 500 when the document or the face could not be compared

  * [RPNG-981] Signature session page did not reject files above the maximum file size

  * [RPNG-982] Biometric settings did not show the system default of the allowed subject identifier formats in view mode

  * [RPNG-983] Enrollment batch upload hint did not say that a ZIP file is expected

### 5.1.0 (2026-10-20)

> **Warning**
>
> - External identity verification is now disabled by default: set `Bio__EnableExternalIdentityVerifications=true` on the instance and grant the sysadmin general permission "Can perform external identity verifications" per subscription, or set `Bio__DefaultCanPerformExternalIdentityVerifications=true` to grant it to every subscription.
> - Enrollment batch files are bounded by `General:MaxFileSize` (default 100 MiB), now enforced on the server: raise it to import larger batches.
> - In the biometric settings, an empty `allowedBioSubjectIdentifierFormats` array now means that any identifier is accepted; `null` means the system default.

Updates database model: yes

* New features

  * [RPNG-846] Add support for FortFace as identification document capture provider

  * [RPNG-851] [RPNG-965] Add manual biometric analysis

  * [RPNG-922] Normalized document type in the identification document fields

  * [RPNG-928] Add result reports for enrollment, facial authentication and document capture sessions

  * [RPNG-939] Select the XML element to sign by XPath

  * [RPNG-943] Add the external identity verification result to the enrollment and facial authentication PDF reports

  * [RPNG-951] Add result report for document-to-face matching sessions

* Improvements

  * [RPNG-614] Enrollment batch files are now encrypted during upload

  * [RPNG-727] Hide the face identification permission in the sysadmin when identifications are disabled on the instance

  * [RPNG-781] Improve the enrollment batches screen when "All subscriptions" is selected

  * [RPNG-949] Standardize the FullName of the identification document fields

  * [RPNG-958] Explain the allowed subject identifier formats in the biometric settings editor and in the API error

  * [RPNG-970] Enrollment batch import optimizations

  * [RPNG-973] Add instance setting and per-subscription permission to perform external identity verifications

* Bug fixes

  * [RPNG-850] Enrollment batch processing could keep a lock on background jobs

  * [RPNG-942] Starting a legacy XML signature with a missing or invalid XML returned HTTP 500

  * [RPNG-944] Bio subject lookups by Id now validate the subscription on authentication session start and subject session listings

  * [RPNG-969] Enrollment batch "no identifier pattern" warning ignored the instance pattern

  * [RPNG-974] API keys with a past expiration date were accepted

  * [RPNG-977] Signing date and time missing from signers on the signature validation page

### 5.0.4 (2026-09-28)

Updates database model: no

* Bug fixes

  * [RPNG-930] The CAdES AD-RT without CRLs policy was not registered (`SignaturePolicyNotFound`)

  * [RPNG-933] XML renotarization and inspection returned HTTP 500 instead of `InvalidXml` for documents inconsistent with their own signature

### 5.0.3 (2026-09-25)

Updates database model: no

* Improvements

  * [RPNG-935] New `archiveTimestamps` field on the signature open and inspection responses

* Bug fixes

  * [RPNG-935] XML signatures reported `timestamps` as null on open and inspection

### 5.0.2 (2026-09-21)

Updates database model: no

* Improvements

  * [RPNG-910] Biometric sessions dashboard: hide the 2D liveness fields when the check is off and show the last front and back document captures

* Bug fixes

  * [RPNG-911] Segmented (multipart) uploads failed with HTTP 500 on Azure Blob Storage since 5.0.0

### 5.0.1 (2026-09-21)

Updates database model: no

* New features

  * [RPNG-908] Add the video-identification session parameters and results to the biometric sessions dashboard

* Improvements

  * [RPNG-894] Update the wording of the document validation screen ("Certidão" replaced by "documento")

* Bug fixes

  * [RPNG-807] PDF/A conversion and validation transactions performed during signature preparation were not recorded

### 5.0.0 (2026-09-14)

> **Warning**
>
> See [Update Rest PKI Core from 4.x to 5.0](https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/update-50)

Updates database model: yes

* New features

  * [RPNG-868] Add option to create signature sessions that accept cloud certificates only, skipping the Web PKI screens

* Improvements

  * [RPNG-639] Client libraries now report their version, which is recorded on transactions and sessions

  * [RPNG-648] Improve consistency of the subscription settings screens

  * [RPNG-650] Update ASP.NET Core to version 10.0

  * [RPNG-686] Redesigned demonstrations screen, with a parameters dialog for the biometric demos

  * [RPNG-730] Record the system version on biometric and signature sessions

  * [RPNG-886] Update FaceTec Browser SDK

  * [RPNG-888] Update FortFace SDK to v2.6.0

* Bug fixes

  * [RPNG-651] Error logs of biometric sessions sent by the browser were recorded as empty objects

  * [RPNG-793] Untranslated event type on the dashboard's event list

  * [RPNG-874] PDF mark colors with out-of-range values caused error 500 instead of 400

### 4.5.9 (2026-09-11)

Updates database model: no

* Improvements

  * [RPNG-886] Update FaceTec Browser SDK

### 4.5.8 (2026-09-10)

Updates database model: no

* Improvements

  * [RPNG-836] Update FaceTec Browser SDK

  * [RPNG-878] Video Identification: improved handling of the document back on the last capture attempt

* Bug fixes

  * [RPNG-879] MRZ name check rejected documents with abbreviated given names

### 4.5.6 (2026-09-01)

Updates database model: no

* Improvements

  * [RPNG-870] Video Identification improvements

### 4.5.5 (2026-08-31)

Updates database model: no

* Improvements

  * [RPNG-843] Add subscription filter to the paginated listing of biometric subjects (client libraries)

### 4.5.4 (2026-08-27)

Updates database model: no

* Bug fixes

  * [RPNG-866] Video Identification rejecting valid ID cards whose expected document number is in the MRZ optional data

### 4.5.3 (2026-08-26)

Updates database model: no

* New features

  * [RPNG-827] Add the "PKI Brazil with e-Notariado" and "PKI Brazil with Gov.BR and e-Notariado" standard security contexts

  * [RPNG-828] Add the option to see the standard trusted root used by the signature on the signature validation response (enabled per installation)

* Bug fixes

  * [RPNG-784] [RPNG-864] Issue on passport capture in Video Identification

### 4.4.4 (2026-08-18) [patch]

Updates database model: no

* Bug fixes

  * [RPNG-831] Trusted-root certificate view failing in System Admin security contexts

### 4.5.2 (2026-08-17)

Updates database model: no

* Bug fixes

  * [RPNG-837] Biometric subjects paginated listing failed when called with query string parameters

### 4.5.1 (2026-08-17)

Updates database model: no

* New features

  * [RPNG-827] E-Notariado standard security context (activation-gated)

* Bug fixes

  * [RPNG-830] Serilog logging did not work on the OpenTelemetry-enabled image

  * [RPNG-831] Trusted-root certificate view failing in System Admin security contexts

  * [RPNG-832] Spurious error logged at boot when FaceTec is not in use

### 4.5.0 (2026-08-06)

Updates database model: yes

* New features

  * [RPNG-369] Major update to the FaceTec capture SDK (v10)

  * [RPNG-688] Rework id-scan document validation into a configurable, per-step pipeline with contextual retry guidance

  * [RPNG-780] Add contextual detail (document number, accepted countries, expected document type) to id-scan failure screens; fix Spanish FaceTec SDK wording

  * [RPNG-786] Add FaceTec attempt debug panels (id-scan data and decision) to the biometrics dashboard

  * [RPNG-803] Add download and on-demand regeneration of the Video Identification result report in the dashboard

* Improvements

  * [RPNG-656] Add an "unlimited" option to subscription and plan transaction-type limits

  * [RPNG-738] Improve accuracy of persisted id-scan document fields by sourcing them from the attempt actually used for acceptance

  * [RPNG-797] Video Identification result report now shows validation results per captured document side

  * [RPNG-798] Add an indicator on the session status API for when a captured document was accepted with a relaxed validation criterion

  * [RPNG-801] Add a per-session option to allow relaxing an id-scan capture check

* Bug fixes

  * [RPNG-776] Fixed some API errors being returned as a generic 500 instead of the proper error model

  * [RPNG-789] Fixed biometric sessions failing to start when a plan-level transaction limit was set to unlimited

  * [RPNG-809] Transaction-limiting cache duration setting was not applied, always falling back to the default duration

  * [RPNG-823] Document face match now reported from the actual match result instead of the configuration

### 4.4.3 (2026-08-05)

Updates database model: no

* New features

  * [RPNG-820] Google Cloud Platform (GCP) blob storage support

* Improvements

  * [RPNG-822] Record exception details (message and stack trace) on OpenTelemetry error spans

### 4.3.4 (2026-08-05) [patch]

Updates database model: no

* Improvements

  * [RPNG-822] Record exception details (message and stack trace) on OpenTelemetry error spans

### 4.3.3 (2026-08-05) [patch]

Updates database model: no

* New features

  * [RPNG-820] Google Cloud Platform (GCP) blob storage support

### 4.4.2 (2026-07-28)

Updates database model: no

* Bug fixes

  * [RPNG-776] Fixed some API errors being returned as a generic 500 instead of the proper error model

### 4.4.1 (2026-07-20)

Updates database model: no

* Bug fixes

  * [RPNG-785] Video identification recording produced an empty file on Safari/iOS

### 4.4.0 (2026-07-20)

Updates database model: **yes**

* New features

  * [RPNG-771] Best-effort geolocation capture for biometric sessions

* Improvements

  * [RPNG-695] Add translated failure reasons to session details

* Bug fixes

  * [RPNG-701] Document data shown for sessions without ID Scan

### 4.3.2 (2026-07-13)

Updates database model: no

* Bug fixes

  * [RPNG-770] Replayed certificate-authentication requests were not reported with a distinct nonce-reuse error

### 4.3.1 (2026-07-08)

Updates database model: no

* New features

  * [RPNG-762] Add app setting to disable the minimum request body data rate

* Improvements

  * [RPNG-765] Update to SPA 7.3, adding runtime performance telemetry to Microsoft Application Insights

* Bug fixes

  * [RPNG-766] Fix a rare error that could occur when using the legacy authentication APIs

### 4.2.6 (2026-07-07) [patch]

Updates database model: no

* New features

  * [RPNG-762] Add app setting to disable the minimum request body data rate

### 4.1.7 (2026-07-07) [patch]

Updates database model: no

* New features

  * [RPNG-762] Add app setting to disable the minimum request body data rate

### 4.0.6 (2026-07-07) [patch]

Updates database model: no

* New features

  * [RPNG-762] Add app setting to disable the minimum request body data rate

### 3.4.4 (2026-07-07) [patch]

Updates database model: no

* New features

  * [RPNG-762] Add app setting to disable the minimum request body data rate

### 4.3.0 (2026-06-25)

Updates database model: **yes**

* New features

  * [RPNG-323] [RPNG-681] [RPNG-682] [RPNG-683] Add geolocation capture to biometric sessions

  * [RPNG-419] Add support to Lacuna FaceTecServer 3.0+

  * [RPNG-503] Biometric session page settings

  * [RPNG-574] Per-subscription transaction limits (SysAdmin)

  * [RPNG-594] Biometric identification configuration pages

  * [RPNG-610] Add "Remove logo" button

  * [RPNG-623] [RPNG-711] Add "Reset to system defaults" to each settings section

* Improvements

  * [RPNG-389] [RPNG-722] Improve data-table performance with cursor pagination

  * [RPNG-501] Show FaceTec ID scan OCR data in the dashboard

  * [RPNG-535] Apply transaction limits to all transaction types

  * [RPNG-605] [RPNG-679] Improve dashboard APIs

  * [RPNG-613] Translate biometric enrollment failure messages

  * [RPNG-620] Show PDF/A information on public document validation

  * [RPNG-625] Add display names for new themes

  * [RPNG-641] Update FaceTec browser SDK to v9.7.115

  * [RPNG-649] Show the current subscription name in the toolbar

  * [RPNG-689] Translate the "All organizations" label

* Bug fixes

  * [RPNG-538] "User not found" error when opening User Details

  * [RPNG-644] Application filter on the transactions table had no effect

  * [RPNG-655] Duplicate transaction registered on legacy certificate authentication

  * [RPNG-702] Old face maps were not deleted after continuous-learning authentication

### 4.2.5 (2026-06-24)

Updates database model: no

* Improvements

  * [RPNG-716] Update FaceTec SDKs

### 4.2.4 (2026-04-28)

Updates database model: no

* New features

  * [RPNG-636] Add configuration to disable upload on public document validation page

### 4.2.3 (2026-04-21)

Updates database model: no

* Bug fixes

  * [RPNG-624] Error on liveness processing when previous capture had low quality

### 4.2.2 (2026-04-18)

Updates database model: no

* Bug fixes

  * [RPNG-622] Compatibility issues on upload size limit API

### 4.2.1 (2026-04-18)

Updates database model: no

* Improvements

  * [RPNG-621] Add missing subject identifier on identification document capture sessions

### 4.2.0 (2026-04-16)

Updates database model: no

* New features

  * [RPNG-438] [RPNG-611] Add PDF/A conversion and validation support

### 4.1.6 (2026-04-16)

Updates database model: no

* Bug fixes

  * [RPNG-616] Subscription settings page throwing errors after being closed

### 4.1.5 (2026-04-16)

Updates database model: no

* Improvements

  * [RPNG-617] Improve IdNumber matcher for Video Identifications

### 4.1.4 (2026-04-16)

Updates database model: no

* Improvements

  * [RPNG-615] Add route to get details about FortFace sessions

### 4.1.3 (2026-04-15)

Updates database model: no

* Improvements

  * [RPNG-612] Increase maximum configurable upload size limit

### 4.1.2 (2026-04-09)

Updates database model: no

* New features

  * [RPNG-607] Adobe Reader policy for signature generation

* Improvements

  * [RPNG-608] Update PKI SDK to [2.22.3](https://docs.lacunasoftware.com/en-us/articles/pki-sdk/changelog#v2-22-3) with TSL validation loop fix

### 3.7.2 (2026-04-09) [patch]

Updates database model: no

* Improvements

  * [RPNG-608] Update PKI SDK to [2.22.3](https://docs.lacunasoftware.com/en-us/articles/pki-sdk/changelog#v2-22-3) with TSL validation loop fix

### 3.4.3 (2026-04-07) [patch]

Updates database model: no

* Improvements

  * [RPNG-608] Update PKI SDK to [2.22.3](https://docs.lacunasoftware.com/en-us/articles/pki-sdk/changelog#v2-22-3) with TSL validation loop fix

### 4.1.1 (2026-04-06)

Updates database model: no

* Improvements

  * [RPNG-606] Update FortFace SDK to v2.4.3

### 4.1.0 (2026-04-01)

Updates database model: **yes**

* New features

  * [RPNG-302] [RPNG-599] [RPNG-602] Biometric identification session (ABIS)

  * [RPNG-440] [RPNG-569] [RPNG-580] [RPNG-585] [RPNG-588] PNG-589 RPNG-595 Biometric batch enrollments

  * [RPNG-579] [RPNG-584] [RPNG-604] Face authentication with external identity provider fallback

  * [RPNG-568] [RPNG-575] Add subject identifier formats for Subscriptions

* Improvements

  * [RPNG-544] Transaction limits mapping for timestamps

  * [RPNG-555] SysAdmin - Subscription permissions page

  * [RPNG-558] Show restricted info on timestamp tiers page

  * [RPNG-559] Dashboard - FaceTec IdScan details improvements

  * [RPNG-587] Add date deleted on bio subject details page

  * [RPNG-591] Add "null expected" on get subject by identifier route

  * [RPNG-592] Improve FortFace session details page translations

  * [RPNG-603] Update FaceTec SDKs

  * [RPNG-567] Paginated listing of bio subjects via ClientLib

### 4.0.5 (2026-03-20)

Updates database model: no

* Improvements

  * [RPNG-547] [RPNG-582] Add support to new brazilian CNPJ format

### 3.7.1 (2026-03-20) [patch]

Updates database model: no

* Improvements

  * [RPNG-547] [RPNG-582] Add support to new brazilian CNPJ format

  * [RPNG-540] Add app setting to force one specific system language

* Bug fixes

  * [RPNG-533] TypeError on Web PKI certificate listing

### 4.0.4 (2026-03-18)

Updates database model: no

* Improvements

  * [RPNG-576] Update FortFace SDK to v2.4.2

### 4.0.3 (2026-03-16)

Updates database model: no

* Bug fixes

  * [RPNG-566] Problemas with FortFace SDK v2.4.1 update

### 4.0.2 (2026-03-12)

Updates database model: no

* Improvements

  * [RPNG-546] Dashboard - improved transaction details display for TypeDiscriminator

  * [RPNG-570] Update FortFace SDK to v2.4.1

* Bug fixes

  * [RPNG-566] Bio session completion routes required subscription specifier

### 4.0.1 (2026-03-10)

Updates database model: no

* Bug fixes

  * [RPNG-563] Dependency injection issue on BusinessService

### 4.0.0 (2026-03-09)

> **Warning**
>
> See [Update Rest PKI Core from 3.x to 4.0](https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/update-40)

Updates database model: **yes**

* New features

  * [RPNG-273] [RPNG-519] Create a billing flow for a subscription

  * [RPNG-347] [RPNG-497] Improvements to FaceTec transactions

  * [RPNG-458] Dashboard - list biometric sessions of bio subject

  * [RPNG-461] Transaction limiting service

  * [RPNG-478] Add transactions for FortFace operations

  * [RPNG-484] Option to use biometric sessions with URL return, similar to signature sessions

  * [RPNG-488] Add timeout configuration for biometric sessions

  * [RPNG-505] List of accepted ReturnUrls for BioSession

  * [RPNG-511] Video Identification – Receive expected document values (type/number)

  * [RPNG-517] Subscription based permissioning for TimestampTiers

* Improvements

  * [RPNG-270] Added signature session list page

  * [RPNG-405] Improvements to the biometric sessions home screen and customizations

  * [RPNG-430] Add timestamp marks in Spanish

  * [RPNG-435] Biometrics Dashboard – Add visualization of biometric session images

  * [RPNG-443] [RPNG-447] [RPNG-448] [RPNG-450] Updated Angular to version 19

  * [RPNG-471] Dashboard - Add button to load all images of the bio session

  * [RPNG-472] Add AgentId that created the BioSession

  * [RPNG-474] Add Swagger fields for biometric sessions

  * [RPNG-477] Add link to FaceTec sessions on transaction details

  * [RPNG-481] Add button to copy generated API key

  * [RPNG-486] Display user-friendly error messages in biometric sessions

  * [RPNG-490] Customization of colors and logo of biometric sessions per subscription

  * [RPNG-507] Video identification information via API

  * [RPNG-508] [RPNG-521] [RPNG-531] [RPNG-541] [RPNG-548] Layout improvements on admin pages

  * [RPNG-509] Improvements to OCR templates for passports

  * [RPNG-513] Dashboard - Add video identification recording playback

  * [RPNG-468] [RPNG-515] [RPNG-560] FaceTec SDK updates

  * [RPNG-536] Translation improvements on signature sessions page

  * [RPNG-537] Improve error logging for FortFace SDK actions

  * [RPNG-540] Add app setting to force one specific system language

* Bug fixes

  * [RPNG-258] Fields from PadesSignaturePostRequestBase being ignored

  * [RPNG-487] Biometric session starts as "Failed" on the dashboard

  * [RPNG-512] Video Identification – Fix success condition in video identification

  * [RPNG-518] Fix problems on Agent relationship with bio session transactions

  * [RPNG-523] Video Identification – Issues on FaceTec IdScan processing

  * [RPNG-525] Video Identification – Issue when recording/sending video

  * [RPNG-527] Sessions stuck in "loading" on iOS 26.2 devices

  * [RPNG-533] TypeError on Web PKI certificate listing

  * [RPNG-534] HTTP error 500 when receiving invalid requests methods (POST) on ClientApp routes

  * [RPNG-539] General subscription settings form invalid alerts

  * [RPNG-542] Some pages doesn't update when changing Subscription

### 3.7.0 (2025-11-26)

Updates database model: **yes**

* Improvements

  * [RPNG-453] Improved FortFace liveness enrollment images

### 3.6.2 (2025-11-24)

Updates database model: no

* New features

  * [RPNG-394] Biometrics dashboard - Bio subject details page

* Improvements

  * [RPNG-428] Updated FortFace SDKs

  * [RPNG-454] Add InteractionMethod to BioSessionModel on BioDashBoard

### 3.6.1 (2025-11-20)

Updates database model: no

* Improvements

  * [RPNG-320] Load data from legacy FaceTec sessions

### 3.6.0 (2025-11-20)

Updates database model: **yes**

* New features

  * [RPNG-387] Add tags to transactions

  * [RPNG-445] Dashboard – Add datavalid sessions to the biometrics session details

  * [RPNG-460] Add tools for extracting photos from FaceTec liveness sessions

* Improvements

  * [RPNG-446] Dashboard – Add missing fields from FaceTecSession

### 3.5.2 (2025-11-18)

Updates database model: no

* Bug fixes

  * [RPNG-457] Problems with external identity provider setting on Subscription

### 3.5.0 (2025-11-17)

Updates database model: **yes**

* New features

  * [RPNG-336] [RPNG-397] Tools for importing FaceTec data

  * [RPNG-392] Biometrics Dashboard – Biometric session details page

  * [RPNG-395] Biometrics Dashboard – Session listing filters

  * [RPNG-427] Timestamp for video identification

  * 

* Improvements

  * [RPNG-157] Add Swagger API-Key field

  * [RPNG-274] Improve handling of password-protected PDFs

  * [RPNG-390] Log frontend events from the FortFace and FaceTec SDKs

  * [RPNG-406] Refactor PolicyWrappers based on PKI Express

  * [RPNG-423] Enable field descriptions in Swagger

  * [RPNG-429] Persistence of additional FaceTec session information in the database

  * [RPNG-431] [RPNG-436] Video Identification – Improvements to result report PDF

  * [RPNG-444] Option to generate result-data for biometric enrollment and authentication sessions

* Bug fixes

  * [RPNG-357] No friendly error message when another app is using the camera (FortFace)

  * [RPNG-409] Issues with FaceTec IdScan color customization

### 3.4.0 (2025-10-28)

Updates database model: **yes**

* New features

  * [RPNG-351] [RPNG-352] [RPNG-359] [RPNG-353] [RPNG-364] [RPNG-391] [RPNG-407] [RPNG-422] [RPNG-426] Add video identification session

  * [RPNG-360] Allow static customization of the Home Page (per instance)

  * [RPNG-379] Implement management of PDF settings and Security Context per Subscription

  * [RPNG-381] Add API for diploma renotarization

  * [RPNG-393] Biometrics Dashboard – Add subjects listing screen

* Improvements

  * [RPNG-151] Add spanish language

  * [RPNG-414] Update PKI SDK to [2.21.0](https://docs.lacunasoftware.com/en-us/articles/pki-sdk/changelog#v2-21-0)

* Bug fixes

  * [RPNG-285] Permission fixes

  * [RPNG-388] Duplicate constraint error when saving certificates

### 3.3.0 (2025-10-16)

Updates database model: **yes**

* New features

  * [RPNG-184] Support for custom Intermediate CAs (Certificate Authorities).

  * [RPNG-324] Store public key thumbprint for FaceTec sessions

  * [RPNG-346] Enrollment and authentication sessions using face pictures

  * [RPNG-358] Identification document face matching session

  * [RPNG-374] Face identity verification with external providers (FortFace/Datavalid)

  * [RPNG-377] Enrollment and authentication sessions using FortFace Liveness face capture

  * [RPNG-383] [RPNG-382] Add subscription biometric settings page

  * [RPNG-385] Biometric sessions summary list page with images preview

  * [RPNG-404] Add config to enable support for low quality images on face authentication API

* Improvements

  * [RPNG-312] [RPNG-314] [RPNG-372] [RPNG-375] ,RPNG-384, RPNG-343 Improvements on database modeling for biometric related entities

  * [RPNG-371] Improve biometric sessions demo layout

  * [RPNG-373] Improve biometric sessions layout on mobile devices

  * [RPNG-399] Add FaceTec browser SDK v9.7.83 resources

* Bug fixes

  * [RPNG-376] Inconsistencies on attempt limit configuration for biometric sessions using FaceTec liveness

  * 

### 3.2.1 (2025-08-27)

Updates database model: no

* Improvements

  * [RPNG-367] Update test certificates root v3

* Bug fixes

  * [RPNG-365] Docker build using latest AspNet image

### 3.2.0 (2025-08-22)

Updates database model: **yes**

* New features

  * [RPNG-319] QR Code for biometric sessions

  * [RPNG-329] Face occlusion detection on FortFace liveness sessions

* Improvements

  * [RPNG-325] Apply theming to biometric sessions

  * [RPNG-331] Create implicit biometric session for FaceTec API calls

  * [RPNG-332] Crop FortFace liveness result image

  * [RPNG-354] Add FaceTec browser SDK v9.7.75 resources

* Bug fixes

  * [RPNG-355] `BadRequest` error when using AWS S3 in some scenarios

### 3.1.1 (2025-07-24)

Updates database model: no

* Improvements

  * [RPNG-340] Add FaceTec browser SDK v9.7.72 resources

* Bug fixes

  * [RPNG-341] ARM64 image is not listening on port 80 after updating to .NET 8

### 3.1.0 (2025-07-24)

Updates database model: **yes**

* New features

  * [RPNG-297] Biometric sessions

### 3.0.1 (2025-06-25)

Updates database model: no

* New features

  * [RPNG-316] Command/Job to check integrity of documents

* Improvements

  * [RPNG-284] Add FaceTec browser SDK v9.7.63 e v9.7.66 resources

* Bug fixes

  * [RPNG-315] `BlobNotFoundException` error on certain blobs on `signedfiles` folder

### 3.0.0 (2025-06-16)

> **Warning**
>
> See [Update Rest PKI Core from 2.x to 3.0](https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/update-30)

Updates database model: **yes**

* Improvements

  * [RPNG-275] Update ASP.NET Core to version 8.0

  * [RPNG-292] Fix known vulnerabilities (for more information see [Vulnerability check 25.04](https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/vulnerabilities#c2504))

  * [RPNG-295] Signal search engines that document validation pages should not be indexed

  * [RPNG-299] Improve timestamp display on validation page

  * [RPNG-301] Create "distroless" image with reduced attack surface

* Bug fixes

  * [RPNG-293] Marks of type `QRCode` cause error 500 on PDF marking API when running on Linux/Docker

  * [RPNG-296] Certificate validation details on document validation page appear in English with Portuguese selected

### 2.5.0 (2025-04-11)

Identical to: 2.5.0 RC 7 (2025-04-11)

Updates database model: **yes**

* New features

  * [RPNG-276] FaceTec liveness APIs

  * [RPNG-279] FaceTec IdScan APIs

  * [RPNG-280] FaceTec liveness demo

* Improvements

  * [RPNG-287] Support for using custom database schemes

  * [RPNG-289] Support for ARM64 platform on Docker

* Bug fixes

  * [RPNG-288] Error *An error has occurred while processing your authentication \(blank email address\). Please try again.*

* Flavour-specific changes

  * [RPNG-286] Landscape-specific validation marks (flavour *onr*)

### 2.4.5 (2025-04-04)

Updates database model: no

* Bug fixes

  * [RPNG-277] Column `DateCompleted` is not filled when a signature session is completed

### 2.4.4 (2024-10-02)

Updates database model: no

* Improvements

  * [RPNG-271] Improve performance on simple requests repeated several times by clients

### 2.4.3 (2024-09-25)

Updates database model: no

* Bug fixes

  * [RPNG-291] Backward-compatibility issues on PDF marking API

### 2.4.2 (2024-07-26)

Updates database model: no

* Bug fixes

  * [RPNG-269] Error 500 when signing PDFs with policy `PkiBrazil.AdrTempo`

### 2.4.1 (2024-07-25)

Updates database model: no

* Bug fixes

  * [RPNG-290] Compatibility issue with SQL Server 2012 \(usage of `TRIM()` function\)

### 2.4.0 (2024-07-25)

Identical to: 2.4.0 RC 1 (2024-06-15)

Updates database model: no

* New features

  * [RPNG-262] Setting `Oidc:AuthorityBackchannelUrl` for scenarios on which GrantID has a URL specific for backend-to-backend communication

* Improvements

  * [RPNG-265] Improve specification of client-side signature algorithm parameters on APIs

  * [RPNG-266] Policies for accepting signatures performed on Gov.BR platform

* Flavour-specific changes

  * [RPNG-264] Document metadata are not shown on validation page \(flavour *onr*\)

### 2.3.0 (2024-06-06)

Identical to: 2.3.0 RC 1 (2024-05-17)

Updates database model: **yes**

* Flavour-specific changes

  * [RPNG-259] Metadata `CNS` and `Cartório` on a per-subscription basis \(flavour `Onr`\)

### 2.2.2 (2024-05-04)

Updates database model: no

* Bug fixes

  * [RPNG-261] NullReferenceException error when requesting timestamps through TSP (introduced on 2.2.0)

### 2.2.1 (2024-05-01)

Updates database model: no

* Bug fixes

  * [RPNG-260] Relative URLs returned by the upload API on `FileModel.Location` passed on `FileReferenceModel.Url` are still not accepted on Linux/Docker

### 2.2.0 (2024-04-30)

Updates database model: **yes**

* New features

  * [RPNG-241] API transaction registering

  * [RPNG-225] PDF stamping API

  * [RPNG-214] Per-subscription settings for culture, time zone and date/hour format (used on PDF signature visual representation)

* Improvements

  * [RPNG-236] Round-robin strategy among timestamp providers with optional priority setting

  * 

  * [RPNG-239] Update Angular to version 17

  * [RPNG-248] Accept relative URLs returned by the upload API on `FileModel.Location` passed on `FileReferenceModel.Url`

  * [RPNG-255] Show latest events, timestamp requests and API transactions on signed-in home page

  * [RPNG-256] Improve demonstrations and move to a separate menu item

  * [RPNG-257] Delete old TSP messages only if explicitly configured

* Bug fixes

  * [RPNG-235] Application does not try again to fetch a timestamp in case of error on initial try

  * [RPNG-237] Error on complete signature job for CMS signatures

  * [RPNG-245] Bad visual representation parameters cause return code 500 instead of 422

  * [RPNG-247] Invalid URLs on `ResourceContentOrReference.Url` cause 500 error

  * [RPNG-250] Exceptions transformed into ApiException are not logged properly

  * [RPNG-252] Date filter is not working on "Timestamp provider details" page

  * [RPNG-253] Duration of fimestamp request is not registered in case of error

  * [RPNG-254] Query on timestamp provider calls is not using the appropriate database index

### 2.1.3 (2024-04-10)

Updates database model: no

* Improvements

  * [RPNG-240] Use default timestamp tier when a policy requiring timestamp is used combined with a custom security context without a timestamp tier

### 2.1.2 (2024-03-14)

Updates database model: no

* Bug fixes

  * [RPNG-231] API return codes documented on Swagger do not match actual return codes returned by app

### 2.1.1 (2024-01-24)

Updates database model: no

* New features

  * [RPNG-234] Add route `/api/system/manifest`

* Improvements

  * [RPNG-228] Add settings to log HTTP messages

* Bug fixes

  * [RPNG-208] Property `signatureResult.getFile().url` returns an absolute URL (was relative on legacy Rest PKI)

### 2.1.0 (2024-01-15)

Updates database model: no

* New features

  * [RPNG-215] Proxy configuration

* Improvements

  * [RPNG-216] Add support for Standby mode to simplify setup on Azure App Service

  * [RPNG-219] Show attribute certificate information on signature information page

  * [RPNG-224] Review swagger

* Bug fixes

  * [RPNG-222] Error when saving security context referencing timestamp tier

  * [RPNG-226] Necessary data for completing signatures is lost if an error occurs during completion in background

  * [RPNG-227] "NotSupportedException" error on Cades start APIs versions 1 and 2

  * [RPNG-232] CPF claim is unnecessarily required

### 2.0.2 (2023-11-09)

Updates database model: no

* Improvements

  * [RPNG-220] Ignore communication errors with Amplia when `AttributeCertificateInclusion` is set to `Recommended`

### 2.0.1 (2023-11-08)

Updates database model: no

* Bug fixes

  * [RPNG-217] Error "CryptographicException: The payload was invalid" when fetching old signature sessions

### 2.0.0 (2023-10-30)

Updates database model: **yes**

* Improvements

  * [RPNG-178] Allow optional definition of timestamp tier on security context

  * [RPNG-204] Anonymization of signers' personal data on validation page

  * [RPNG-207] Improvements to timestamping management

  * [RPNG-246] Date filters on timestamp provider call history

* Bug fixes

  * [RPNG-198] Signature validaiton API does not honor setting `General:DefaultTimeZone`

### 1.13.1 (2023-10-17)

Updates database model: no

* Flavour-specific changes

  * [RPNG-212] Change validation marks text \(flavour *onr*\)

### 2.0.0 RC 16 (2023-09-12)

Updates database model: **yes**

* New features

  * [RPNG-160] Add support for legacy CAdES signature APIs

  * [RPNG-182] Timestamp tier and provider history

  * [RPNG-206] Enable SSH access on Docker image

* Bug fixes

  * [RPNG-185] Certificate files are not accepted on security context management's root CA upload

  * [RPNG-200] `MessageDigest` property of PDF/CMS signers is not filled when only the algorithm is known

  * [RPNG-201] Signature exploring APIs are ignoring parameter `SignaturePolicyId`

  * [RPNG-209] Multipart upload not working

### 2.0.0 RC 8 (2023-06-30)

> **Warning**
>
> Before updating to this version make sure your PKI SDK license supports versions released up to 2023-06-27.

Updates database model: no

* Improvements

  * [RPNG-192] Add setting `General:ReturnExceptionsToApplications` to return exceptions on error responses when the API is being called by an application

* Bug fixes

  * [RPNG-191] Property `Detail` is not filled on 422 responses

  * [RPNG-193] PDFs signed with legacy signature standard \(non-PAdES\) cause error on signature exploration API

  * [RPNG-194] Password-protected PDFs cause error 500 \(should cause 422 with code `ProtectedPdfError`\)

  * [RPNG-195] Corrupt PDFs cause error 500 \(should cause 422 with code `InvalidPdf`\)

  * [RPNG-196] Error *Wrong last certificate on Pades signature*

### 2.0.0 RC 7 (2023-05-30)

> **Warning**
>
> Before updating to this version make sure your PKI SDK license supports versions released up to 2022-10-19.

Updates database model: **yes**

* New features

  * [RPNG-155] Add support for legacy certificate authentication APIs

  * [RPNG-159] Add support for legacy PDF signature APIs

  * [RPNG-161] Add support for legacy XML signature APIs

  * [RPNG-162] Add support for legacy PDF marking APIs

  * [RPNG-177] Add support for signature policies

  * [RPNG-179] Automatically add attribute certificates to signatures

  * [RPNG-183] Add suport for legacy certificate validation API

* Bug fixes

  * [RPNG-180] Cloud certificate integration was broken after updating to SPA 2.6 (v1.13.0)

  * [RPNG-190] Error "cannot access a closed file" when using AwsS3 blob storage

### 1.13.0 (2023-03-14)

Updates database model: **yes**

* Improvements

  * [RPNG-153] Add PDF visual representation to signature API

  * [RPNG-172] Allow using "S3 clones" as blob storage

  * [RPNG-169] Complete update to SPA 2.6

### 1.12.2 (2023-02-28)

Updates database model: no

* Bug fixes

  * [RPNG-173] Document details API does not allow inter-subscription access when instance is configured as on-premises

### 1.12.1 (2023-01-05)

Updates database model: no

* Improvements

  * [RPNG-164] Improve configuration on Linux

### 1.12.0 (2022-12-13)

Updates database model: **yes**

* New features

  * [RPNG-158] Add support for PostgreSQL

* Improvements

  * [RPNG-156] Updated ASP.NET Core to version 6.0

* Bug fixes

  * [RPNG-152] Cannot add trusted roots on security context creation page

### 1.11.0 (2022-11-14)

Updates database model: **yes**

* Improvements

  * [RPNG-154] Add setting to control PDF marks left and top margins

### 1.10.2 (2022-05-03)

Updates database model: no

* Improvements

  * [RPNG-149] Add setting to force brazilian pdf signing policies

### 1.10.1 (2022-04-23)

Updates database model: no

* Bug fixes

  * [RPNG-148] Error when using custom security contexts

### 1.10.0 (2022-04-23)

Updates database model: **yes**

* New features

  * [RPNG-2] Add certificate authentication API

* Improvements

  * [RPNG-146] Allow configuration of PDF marks

  * [RPNG-147] Allow configuration of PDF marking policy

### 1.9.0 (2022-03-29)

Updates database model: no

* New features

  * [RPNG-41] Signature validation API

  * [RPNG-141] Security context management on the web interface

### 1.8.0 (2022-02-25)

Updates database model: **yes**

* Improvements

  * [RPNG-10] Signature session [certificate requirements](https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/integration/signature-sessions/certificate-requirements)

### 1.7.0 (2022-01-25)

Updates database model: **yes**

* New features

  * [RPNG-135] Detached CAdES signatures

  * [RPNG-44] UI to monitor calls \(especially errors\) to webhooks and file validation API

* Improvements

  * [RPNG-51] UI to configure the subscription theme and customizable assets

* Bug fixes

  * [RPNG-144] Session signature images are broken after authentication flow with cloud certificate provider

### 1.6.0 (2021-12-08)

Updates database model: no

* New features

  * [RPNG-129] Add support for using cloud certificates on signature sessions

* Improvements

  * [RPNG-139] Return more information about the signer's certificate on `SignatureSessionModel`

### 1.5.1 (2021-11-23)

Updates database model: no

* Bug fixes

  * [RPNG-140] Root password authentication error

### 1.5.0 (2021-09-30)

Updates database model: **yes**

* New features

  * [RPNG-132] Add support for CAdES/CMS signatures

  * [RPNG-93] Signature sessions with predefined documents

* Improvements

  * [RPNG-138] Remove validation marks from document previews

  * [RPNG-136] Add valiation marks to PDFs even if using CAdES/CMS signature

  * [RPNG-128] Improve usage of theme assets to allow logos with varying aspect ratios

  * [RPNG-120] Handle invalid/corrupt PDF exception properly

* Bug fixes

  * [RPNG-119] Cached versions of acceptable filename patterns are shown on the management UI

* Client-specific changes

  * [RPNG-130] Flavour ONR

### 1.4.2 (2021-08-24)

Updates database model: no

* Improvements

  * [RPNG-126] Add background worker count configuration

* Bug fixes

  * [RPNG-125] Segmented upload error

### 1.4.1 (2021-08-24)

Updates database model: no

* Improvements

  * [RPNG-122] Improve validation notice on documents

  * [RPNG-85] Adjustments to document key input

* Bug fixes

  * [RPNG-124] Errors under high demand

  * [RPNG-123] Retries of signature background processing always fail if a certain amont of time has elapsed

### 1.4.0 (2021-08-11)

* First publicly available version