Great opsi 4.3 Feature Release

[j.schneider]

Dear opsi users,

today we are pleased to announce a great feature release for opsi 4.3.

Due to the continuing high cyber threat situation and the increasing deployment of opsi instances in public networks, we have already been working intensively on the security of opsi components in recent months.
This release also contains numerous improvements in terms of security, as well as performance improvements and bug fixes.
It additionally includes three new enhancements that further strengthen the security of your opsi environment and increase convenience.

Single Sign On
The new opsi extension Single Sign On (SSO) enables the authentication of users via a central identity provider and SAML 2.0.
Currently Microsoft Entra ID and Keycloak are officially supported.

Custom Certificate Authority
With the new opsi extension Custom Certificate Authority, further certification authorities (CAs) can be used in the opsi environment in addition to the opsi CA.
This can be, for example, an organization-internally managed certificate authority or a public trusted certification authority.
The server certificates can then also be issued by these CAs.

Let's Encrypt
The new opsi extension Let's Encrypt enables a fully automated use of Let's Encrypt certificates for the opsi server.
All certificates and certificate chains are automatically generated, stored, verified and renewed if necessary.


Further information on the new extensions can be found in our blog entry and in the opsi documentation.

All new features are now available as extensions in the opsi Enterprise package.
As an opsi Enterprise customer, you will receive the new functions together with this release.

Not yet an opsi Enterprise customer? Now is the perfect time to get started:
Until December 20, we are offering you 20% discount on the first year of opsi Enterprise - a unique opportunity that you should not miss!


=============================
Packages for opsi 4.3 stable:
=============================

== OPSI_PACKAGE ==
* opsi-cli 4.3.12.2-1 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* opsi-configed 4.3.4.1-1 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* windomain 2.2-7 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* windows10-upgrade 22h2-4 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* windows11-upgrade 24h2-1 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt

== TOOL ==
* opsi-cli 4.3.12.2 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* opsi-configed-portable 4.3.4.1 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* opsi-logviewer-portable 4.3.4.1 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* opsi-webgui.zip 4.3.43 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt

== SERVER_PACKAGE ==
* opsi-utils 4.3.11.0 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* opsi-webgui 4.3.43 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt
* opsiconfd 4.3.25.11 https://changelog.opsi.org/Releases/4.3 ... ngelog.txt


Best regards,
Jan Schneider