{ "release_id": "4.3-20251126061953", "date": "2025-11-26T06:19:53.943251+00:00", "type": "feature", "major_version": "4.3", "urgency": "medium", "text": { "de": "# Neue shim 16.1\n\nWir freuen uns, mit diesem Release die neue **shim 16.1** ausliefern zu können.\nDiese Version bringt mehrere wichtige Fehlerbehebungen mit sich, vor allem für Dell-Geräte.\nZudem stellen wir erstmals eine **ARM64-Version** der shim bereit.\n\nDie shim 16.1 wird ab sofort zusammen mit dem neuen **opsipxeconfd** ausgeliefert.\n**Wichtig: Es werden zwei Varianten der shim bereitgestellt**, im folgenden Beispiel für `x64`:\n\n* **`grub-shim-2011.x64.efi`** - signiert mit der älteren **Microsoft UEFI CA 2011**, die nur noch bis Juni 2026 gültig ist\n* **`grub-shim-2023.x64.efi`** - signiert mit der **Microsoft UEFI CA 2023**\n\nZum Booten wird die Datei **`grub-shim.x64.efi`** verwendet.\nIm Auslieferungszustand ist dies eine Kopie von `grub-shim-2011.x64.efi`.\n\nIn Umgebungen, in denen bereits die neue CA verwendet wird, kann die Datei wie folgt ersetzt werden:\n```\ncp -a /tftpboot/opsi/loader/grub-shim-2023.x64.efi /tftpboot/opsi/loader/grub-shim.x64.efi\n```\n**Bitte beachten:** Beim Einspielen einer neuen opsipxeconfd-Version wird diese Datei erneut überschrieben.\n\nIm Laufe des nächsten Jahres werden wir den Standard auf die neue Signatur umstellen.\nDen genauen Zeitpunkt dafür machen wir von den Rückmeldungen unserer Kunden abhängig.\n\n**Da die `Microsoft UEFI CA 2011` im Juni 2026 ausläuft, sollten alle Geräte rechtzeitig auf die neue CA aktualisiert werden.**\nWeitere Informationen zum Windows UEFI CA 2023-Zertifikat finden Sie im offiziellen Artikel von Microsoft:\n[https://techcommunity.microsoft.com/blog/windows-itpro-blog/updating-microsoft-secure-boot-keys/4055324](https://techcommunity.microsoft.com/blog/windows-itpro-blog/updating-microsoft-secure-boot-keys/4055324)\n\n# Lokale Accounts im opsi Service\n\nDie neue Version des **opsiconfd** unterstützt neben PAM, LDAP und SAML nun auch eine **Authentifizierung über die OPSI-Datenbank**.\nDabei werden sowohl **Passwort-** als auch **Token-basierte** Logins unterstützt, auf Wunsch auch mit **Zwei-Faktor-Authentifizierung**.\n\nDie neue Authentifizierung ersetzt dabei auch die Datei **/etc/opsi/passwd**, welche beim Upgrade automatisch migriert wird.\nÜber das Admin-Interface des **opsiconfd** können nun bequem neue Benutzer angelegt und verwaltet werden.\n\nDas neue Feature steht ab sofort mit den Versionen **OPSI-Professional** und **OPSI-Enterprise** zur Verfügung.\n\n# Verbesserungen im opsi-configed\n\nDer aktuelle opsi-configed bringt eine Reihe kleiner, aber spürbarer Verbesserungen für den täglichen Einsatz.\nUnter anderem lässt sich nun mit STRG+F5 der komplette Datenbestand neu laden,\nwährend F5 lediglich die jeweils aktive Ansicht aktualisiert, etwa Tabellen, Logdateien oder Konfigurationen.\nBeim erneuten Laden einer Logdatei springt die Ansicht automatisch an die zuvor ausgewählte Zeile,\nund die Darstellung im Logviewer wurde leicht überarbeitet.\n\nDarüber hinaus wurde einige Fehler behoben.\nDer Zertifikatsordner wird bei Verwendung eines spezifischen Ports wieder korrekt benannt.\nDie Product-Properties werden bei der Auswahl mehrerer Clients nun zuverlässig angezeigt, auch wenn unterschiedliche Werte vorliegen.\n\n# Aktualisiertes opsi-linux-bootimage\n\nDas neue opsi-linux-bootimage verwendet den aktuellen Ubuntu-Kernel 6.14.11 sowie GRUB 2.12-66.1.\nDie Unterstützung für e1000e-Netzwerkkarten wurde optimiert, die GRUB-Konfiguration vereinfacht.\nDie bereitgestellten ISOs enthalten die neue shim 16.1 und unterstützen damit Secure-Boot für x64 und arm64.\n\n# Abkündigung des OPSI Nagios Connectors\n\nIm Juni dieses Jahres haben wir die neue **OPSI-Monitoring-Integration** für Nagios, Icinga, Checkmk und Zabbix vorgestellt.\nDer bisherige **OPSI Nagios Connector** wird daher nicht mehr benötigt und in einem der kommenden Releases vollständig entfernt.\n\nFür alle, die den alten Connector noch im Einsatz haben, ist jetzt ein guter Zeitpunkt für den Umstieg auf die neue Integration.\n\nWeitere Informationen finden Sie in unserem **[Blog-Eintrag zum Thema Monitoring & Health-Check](https://opsi.org/de/blog/monitoring-2025/)**.\n", "en": "# New shim 16.1\n\nWe are pleased to deliver the new **shim 16.1** with this release.\nThis version includes several important bug fixes, especially for Dell devices.\nFor the first time, we are also providing an **ARM64 version** of the shim.\n\nThe shim 16.1 is now distributed together with the new **opsipxeconfd**.\n**Important: Two variants of the shim are provided**, as shown here for `x64`:\n\n* **`grub-shim-2011.x64.efi`** – signed with the older **Microsoft UEFI CA 2011**, which is only valid until June 2026\n* **`grub-shim-2023.x64.efi`** – signed with the **Microsoft UEFI CA 2023**\n\nThe file **`grub-shim.x64.efi`** is used for booting.\nBy default, this file is a copy of `grub-shim-2011.x64.efi`.\n\nIn environments that already use the new CA, the file can be replaced as follows:\n\n```\ncp -a /tftpboot/opsi/loader/grub-shim-2023.x64.efi /tftpboot/opsi/loader/grub-shim.x64.efi\n```\n\n**Please note:** When installing a new version of opsipxeconfd, this file will be overwritten again.\n\nOver the course of next year, we will switch the default to the new signature.\nThe exact timing depends on feedback from our customers.\n\n**Since the `Microsoft UEFI CA 2011` expires in June 2026, all devices should be updated to the new CA in good time.**\nFurther information on the Windows UEFI CA 2023 certificate can be found in Microsoft’s official article:\n[https://techcommunity.microsoft.com/blog/windows-itpro-blog/updating-microsoft-secure-boot-keys/4055324](https://techcommunity.microsoft.com/blog/windows-itpro-blog/updating-microsoft-secure-boot-keys/4055324)\n\n\n# Local Accounts in the opsi Service\n\nThe new version of **opsiconfd** now supports **authentication via the OPSI database**, in addition to PAM, LDAP, and SAML.\nBoth **password-based** and **token-based** logins are supported, and **two-factor authentication** can also be enabled.\n\nThis new authentication method replaces the former `/etc/opsi/passwd` file, which is automatically migrated during the upgrade.\nNew users can now be created and managed conveniently through the opsiconfd admin interface.\n\nThis feature is immediately available for all **OPSI Professional** and **OPSI Enterprise** installations.\n\n# Improvements in opsi-configed\n\nThe latest version of opsi-configed introduces a range of small but noticeable improvements for daily work.\nYou can now reload the entire data set using **Ctrl+F5**, while **F5** refreshes only the currently active view, such as tables, log files, or configuration screens. When reloading a log file, the viewer automatically scrolls back to the previously selected line, and the log viewer’s display has been slightly revised.\n\nSeveral bugs have also been fixed.\nThe certificate directory is now named correctly again when a specific port is used.\nProduct properties are now reliably displayed when multiple clients are selected, even if they contain different values.\n\n# Updated opsi-linux-bootimage\n\nThe new opsi-linux-bootimage uses the current Ubuntu kernel 6.14.11 and GRUB 2.12-66.1.\nSupport for e1000e network cards has been improved, and the GRUB configuration has been simplified.\nThe provided ISOs include the new shim 16.1 and therefore support Secure Boot for both x64 and arm64.\n\n# Discontinuation of the OPSI Nagios Connector\n\nIn June of this year, we introduced the new **OPSI Monitoring Integration** for Nagios, Icinga, Checkmk, and Zabbix.\nThe previous **OPSI Nagios Connector** is therefore no longer needed and will be completely removed in one of the upcoming releases.\n\nIf you are still using the old connector, now is a good time to migrate to the new integration.\n\nFurther information can be found in our **[blog post on Monitoring & Health-Check](https://opsi.org/en/blog/monitoring-2025/)**.\n" }, "components": [ { "name": "alma10", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/alma10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "alma8", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/alma8/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "alma9", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/alma9/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/debian/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian11", "type": "OPSI_PACKAGE", "version": "4.3.0.3-6", "removal": false, "changelog_url": "OPSI_PACKAGE/debian11/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian12", "type": "OPSI_PACKAGE", "version": "4.3.0.3-6", "removal": false, "changelog_url": "OPSI_PACKAGE/debian12/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian13", "type": "OPSI_PACKAGE", "version": "4.3.0.3-6", "removal": false, "changelog_url": "OPSI_PACKAGE/debian13/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "l-opsi-server", "type": "OPSI_PACKAGE", "version": "4.3.1.1-2", "removal": false, "changelog_url": "OPSI_PACKAGE/l-opsi-server/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "memtest86", "type": "OPSI_PACKAGE", "version": "7.20-5", "removal": false, "changelog_url": "OPSI_PACKAGE/memtest86/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-1", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-1/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-2", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-2/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-3", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-3/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22-1", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22-1/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22-2", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22-2/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opensusel15-5", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opensusel15-5/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opensusel15-6", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opensusel15-6/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "TOOL", "version": "4.3.30.4", "removal": false, "changelog_url": "TOOL/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "OPSI_PACKAGE", "version": "4.3.30.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-configed", "type": "OPSI_PACKAGE", "version": "4.3.16.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-configed/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-configed-portable", "type": "TOOL", "version": "4.3.16.3", "removal": false, "changelog_url": "TOOL/opsi-configed-portable/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-directory-connector", "type": "SERVER_PACKAGE", "version": "53.0", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-directory-connector/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-bootimage", "type": "SERVER_PACKAGE", "version": "20251125", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-linux-bootimage/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-bootimage.iso", "type": "TOOL", "version": "20251125", "removal": false, "changelog_url": "TOOL/opsi-linux-bootimage.iso/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-logviewer-portable", "type": "TOOL", "version": "4.3.16.3", "removal": false, "changelog_url": "TOOL/opsi-logviewer-portable/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-script", "type": "OPSI_PACKAGE", "version": "4.12.18.8-7", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-script/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-utils", "type": "SERVER_PACKAGE", "version": "4.3.20.3", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-utils/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsiconfd", "type": "SERVER_PACKAGE", "version": "4.3.45.7", "removal": false, "changelog_url": "SERVER_PACKAGE/opsiconfd/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsipxeconfd", "type": "SERVER_PACKAGE", "version": "4.3.14.5", "removal": false, "changelog_url": "SERVER_PACKAGE/opsipxeconfd/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "oraclelinux10", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/oraclelinux10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "oraclelinux8", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/oraclelinux8/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "oraclelinux9", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/oraclelinux9/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "redhat10", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/redhat10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "redhat8", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/redhat8/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "redhat9", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/redhat9/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "rocky10", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/rocky10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "rocky8", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/rocky8/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "rocky9", "type": "OPSI_PACKAGE", "version": "4.3.0.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/rocky9/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-1", "type": "OPSI_PACKAGE", "version": "4.3.0.0-1", "removal": true, "changelog_url": "", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-2", "type": "OPSI_PACKAGE", "version": "4.3.0.0-1", "removal": true, "changelog_url": "", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-3", "type": "OPSI_PACKAGE", "version": "4.3.0.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-3/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-4", "type": "OPSI_PACKAGE", "version": "4.3.0.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-4/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-5", "type": "OPSI_PACKAGE", "version": "4.3.0.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-5/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-6", "type": "OPSI_PACKAGE", "version": "4.3.0.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-6/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-7", "type": "OPSI_PACKAGE", "version": "4.3.0.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-7/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu22-04", "type": "OPSI_PACKAGE", "version": "4.3.0.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu22-04/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu24-04", "type": "OPSI_PACKAGE", "version": "4.3.0.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu24-04/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ucs44", "type": "OPSI_PACKAGE", "version": "4.2.0.1-8", "removal": true, "changelog_url": "", "version_text_de": "", "version_text_en": "" }, { "name": "win11-x64", "type": "OPSI_PACKAGE", "version": "4.3.0.4-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win11-x64/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win11-x64-captured", "type": "OPSI_PACKAGE", "version": "4.3.0.4-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win11-x64-captured/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "windomain", "type": "OPSI_PACKAGE", "version": "2.5-2", "removal": false, "changelog_url": "OPSI_PACKAGE/windomain/changelog.txt", "version_text_de": "", "version_text_en": "" } ] }