Release Notes: This release adds completely new OCRA functionality, letting you perform banking transactions and sign other data. New Security Modules enable you to use the encryption keys in different, flexible ways (e.g., you can use external Hardware Security Modules like the SafeNet LunaSA). DB2 is now supported. Rollout of time-based Google Authenticators to Selfservice has been added. LDAPResolver has been improved: User Objects may be identified by entryUUID or ObjectGUID. This release adds policy passthru for authenticating users without tokens, policy to use Client-IP for restricted access to selfservice functionalities, and a TOTP bugfix.