opsi 4.3 November Release 2025
Verfasst: 26 Nov 2025, 07:28
Dear opsi community,
we are pleased to announce the official release of the latest version of opsi today.
New shim 16.1
We are pleased to deliver the new shim 16.1 with this release.
This version includes several important bug fixes, especially for Dell devices.
For the first time, we are also providing an ARM64 version of the shim.
The shim 16.1 is now distributed together with the new opsipxeconfd.
Important: Two variants of the shim are provided, as shown here for `x64`:
By default, this file is a copy of `grub-shim-2011.x64.efi`.
In environments that already use the new CA, the file can be replaced as follows:
Please note: When installing a new version of opsipxeconfd, this file will be overwritten again.
Over the course of next year, we will switch the default to the new signature.
The exact timing depends on feedback from our customers.
Since the `Microsoft UEFI CA 2011` expires in June 2026, all devices should be updated to the new CA in good time.
Further information on the Windows UEFI CA 2023 certificate can be found in Microsoft’s official article:
https://techcommunity.microsoft.com/blog/windows-itpro-blog/updating-microsoft-secure-boot-keys/4055324
Local Accounts in the opsi Service
The new version of opsiconfd now supports authentication via the OPSI database, in addition to PAM, LDAP, and SAML.
Both password-based and token-based logins are supported, and two-factor authentication can also be enabled.
This new authentication method replaces the former `/etc/opsi/passwd` file, which is automatically migrated during the upgrade.
New users can now be created and managed conveniently through the opsiconfd admin interface.
This feature is immediately available for all OPSI Professional and OPSI Enterprise installations.
Improvements in opsi-configed
The latest version of opsi-configed introduces a range of small but noticeable improvements for daily work.
You can now reload the entire data set using Ctrl+F5, while F5 refreshes only the currently active view, such as tables, log files, or configuration screens. When reloading a log file, the viewer automatically scrolls back to the previously selected line, and the log viewer’s display has been slightly revised.
Several bugs have also been fixed.
The certificate directory is now named correctly again when a specific port is used.
Product properties are now reliably displayed when multiple clients are selected, even if they contain different values.
Updated opsi-linux-bootimage
The new opsi-linux-bootimage uses the current Ubuntu kernel 6.14.11 and GRUB 2.12-66.1.
Support for e1000e network cards has been improved, and the GRUB configuration has been simplified.
The provided ISOs include the new shim 16.1 and therefore support Secure Boot for both x64 and arm64.
Discontinuation of the OPSI Nagios Connector
In June of this year, we introduced the new OPSI Monitoring Integration for Nagios, Icinga, Checkmk, and Zabbix.
The previous OPSI Nagios Connector is therefore no longer needed and will be completely removed in one of the upcoming releases.
If you are still using the old connector, now is a good time to migrate to the new integration.
Further information can be found in our blog post on Monitoring & Health-Check.
Packages for opsi 4.3 stable:
== OPSI_PACKAGE ==
Your team at uib
we are pleased to announce the official release of the latest version of opsi today.
New shim 16.1
We are pleased to deliver the new shim 16.1 with this release.
This version includes several important bug fixes, especially for Dell devices.
For the first time, we are also providing an ARM64 version of the shim.
The shim 16.1 is now distributed together with the new opsipxeconfd.
Important: Two variants of the shim are provided, as shown here for `x64`:
- `grub-shim-2011.x64.efi` – signed with the older Microsoft UEFI CA 2011, which is only valid until June 2026
- `grub-shim-2025.x64.efi` – signed with the Microsoft UEFI CA 2023
By default, this file is a copy of `grub-shim-2011.x64.efi`.
In environments that already use the new CA, the file can be replaced as follows:
Code: Alles auswählen
cp -a /tftpboot/opsi/loader/grub-shim-2025.x64.efi /tftpboot/opsi/loader/grub-shim.x64.efiOver the course of next year, we will switch the default to the new signature.
The exact timing depends on feedback from our customers.
Since the `Microsoft UEFI CA 2011` expires in June 2026, all devices should be updated to the new CA in good time.
Further information on the Windows UEFI CA 2023 certificate can be found in Microsoft’s official article:
https://techcommunity.microsoft.com/blog/windows-itpro-blog/updating-microsoft-secure-boot-keys/4055324
Local Accounts in the opsi Service
The new version of opsiconfd now supports authentication via the OPSI database, in addition to PAM, LDAP, and SAML.
Both password-based and token-based logins are supported, and two-factor authentication can also be enabled.
This new authentication method replaces the former `/etc/opsi/passwd` file, which is automatically migrated during the upgrade.
New users can now be created and managed conveniently through the opsiconfd admin interface.
This feature is immediately available for all OPSI Professional and OPSI Enterprise installations.
Improvements in opsi-configed
The latest version of opsi-configed introduces a range of small but noticeable improvements for daily work.
You can now reload the entire data set using Ctrl+F5, while F5 refreshes only the currently active view, such as tables, log files, or configuration screens. When reloading a log file, the viewer automatically scrolls back to the previously selected line, and the log viewer’s display has been slightly revised.
Several bugs have also been fixed.
The certificate directory is now named correctly again when a specific port is used.
Product properties are now reliably displayed when multiple clients are selected, even if they contain different values.
Updated opsi-linux-bootimage
The new opsi-linux-bootimage uses the current Ubuntu kernel 6.14.11 and GRUB 2.12-66.1.
Support for e1000e network cards has been improved, and the GRUB configuration has been simplified.
The provided ISOs include the new shim 16.1 and therefore support Secure Boot for both x64 and arm64.
Discontinuation of the OPSI Nagios Connector
In June of this year, we introduced the new OPSI Monitoring Integration for Nagios, Icinga, Checkmk, and Zabbix.
The previous OPSI Nagios Connector is therefore no longer needed and will be completely removed in one of the upcoming releases.
If you are still using the old connector, now is a good time to migrate to the new integration.
Further information can be found in our blog post on Monitoring & Health-Check.
Packages for opsi 4.3 stable:
== OPSI_PACKAGE ==
- alma10 4.3.0.2-1 Changelog
- alma8 4.3.0.2-1 Changelog
- alma9 4.3.0.2-1 Changelog
- debian 4.3.0.6-2 Changelog
- debian11 4.3.0.3-6 Changelog
- debian12 4.3.0.3-6 Changelog
- debian13 4.3.0.3-6 Changelog
- l-opsi-server 4.3.1.1-2 Changelog
- memtest86 7.20-5 Changelog
- mint21 4.3.0.5-1 Changelog
- mint21-1 4.3.0.5-1 Changelog
- mint21-2 4.3.0.5-1 Changelog
- mint21-3 4.3.0.5-1 Changelog
- mint22 4.3.0.5-1 Changelog
- mint22-1 4.3.0.5-1 Changelog
- mint22-2 4.3.0.5-1 Changelog
- opensusel15-5 4.3.0.3-1 Changelog
- opensusel15-6 4.3.0.3-1 Changelog
- opsi-cli 4.3.30.4-1 Changelog
- opsi-configed 4.3.16.3-1 Changelog
- opsi-script 4.12.18.8-7 Changelog
- oraclelinux10 4.3.0.2-1 Changelog
- oraclelinux8 4.3.0.2-1 Changelog
- oraclelinux9 4.3.0.2-1 Changelog
- redhat10 4.3.0.2-1 Changelog
- redhat8 4.3.0.2-1 Changelog
- redhat9 4.3.0.2-1 Changelog
- rocky10 4.3.0.2-1 Changelog
- rocky8 4.3.0.2-1 Changelog
- rocky9 4.3.0.2-1 Changelog
- Removed sles15-1 4.3.0.0-1 Changelog
- Removed sles15-2 4.3.0.0-1 Changelog
- sles15-3 4.3.0.1-1 Changelog
- sles15-4 4.3.0.1-1 Changelog
- sles15-5 4.3.0.1-1 Changelog
- sles15-6 4.3.0.1-1 Changelog
- sles15-7 4.3.0.1-1 Changelog
- ubuntu 4.3.0.6-2 Changelog
- ubuntu22-04 4.3.0.4-1 Changelog
- ubuntu24-04 4.3.0.4-1 Changelog
- Removed ucs44 4.2.0.1-8 Changelog
- win11-x64 4.3.0.4-2 Changelog
- win11-x64-captured 4.3.0.4-2 Changelog
- windomain 2.5-2 Changelog
- opsi-cli 4.3.30.4 Changelog
- opsi-configed-portable 4.3.16.3 Changelog
- opsi-linux-bootimage.iso 20251125 Changelog
- opsi-logviewer-portable 4.3.16.3 Changelog
- opsi-directory-connector 53.0 Changelog
- opsi-linux-bootimage 20251125 Changelog
- opsi-utils 4.3.20.3 Changelog
- opsiconfd 4.3.45.7 Changelog
- opsipxeconfd 4.3.14.5 Changelog
Your team at uib