All release notes
Platform
Cryptographic device enrollment and a new admin role
Three major additions: fully cryptographically secured device enrollment, a new administrator role, and a redesigned settings page with three tabs.
New
- Management interface for devices and enrollment tokens: overview of all enrolled devices with status (active / quarantine / revoked), last activity, and management actions.
- Quarantine function: a device can be quarantined and later released without re-enrolling.
- New ADMIN role: has all rights of a Global Admin but without access to the audit log page; suited for senior administrators who do not require audit visibility.
- Redesigned settings page with three tabs: Ticket settings (service types, categories, target turnaround per priority), Session settings (inactivity timeout, concurrent sessions, password policy, account lockout, and 2FA requirements per role), and Application settings (maintenance mode and registration management).
- Ticket closure supports 11 resolution reasons.
- Auto-scheduling calculates and saves the target date based on ticket priority.
Security
- Cryptographically secured device enrollment via single-use enrollment tokens. After registration, the device signs every API request with an Ed25519 signature; only legitimate enrolled devices can send data.
- Enrollment tokens are shown once and cannot be retrieved afterwards; not even by administrators.
Improved
- Ticket visibility by role: CLIENT_USER sees only their own tickets; CLIENT_SUPER_USER sees all tickets for their organisation.
- Internal notes in tickets are completely invisible to client users.
- Ticket status automatically moves from 'Waiting on client' to 'Assigned' as soon as the client responds.