Version 5.2.0

Note: WARNING: An issue is present in the Duo Authentication for Windows Logon 5.2.0 installer which may cause removal of Duo registry keys and values created after the initial installation when upgrading from a prior version to 5.2.0 using a silent install method. This affects existing user offline access and paswordless OS logon enrollments. After upgrading, users may need to re-enroll in offline access and passwordless OS logon. This issue preserving offline and passwordless registrations is not seen with interactive GUI installations and is corrected in the 5.2.1 release. Please do not install 5.2.0 via silent install if any user enrollments in offline access or passwordless OS logon, or any Duo registry keys and values created after your initial install exist on your clients. Learn more about the 5.2.0 installer issue in the article Guide to issues with the Duo Authentication for Windows Logon 5.2.0 installer in the Duo Knowledge Base. - General availability of persistent trusted sessions, which improves the remembered devices experience on Windows with support for suppressing repeated MFA requests for devices on specified networks. - General availability of ARM 64 support for Windows 10 version 1709 and later. All Duo for Windows Logon & RDP features available for Intel systems may now be used on ARM systems, including Passwordless OS Logon and Verified Duo Push. - Beta support for Duo Passport sessions for RDP logins. - Corrects an issue with certificate pinning. - The certificate pinning issue exists in versions 4.3.16 to 5.1.1. This issue prevented successful CA verification. This means that prior messaging identifying any versions as affected by 2026 Duo root certificate authority bundle replacement was incorrect. Versions prior to 5.2.0 will not be affected by the Duo CA bundle expiration in 2026. We do still encourage updating older installs to current versions to obtain security fixes and experience new features and enhancements. - Improved error handling for password change scenarios. - Logging improvements for authentication actions and Bluetooth. - Security improvements. - Additional bug fixes.