Relution Server 26.3

Important note regarding the update: If you are currently using an older version, we recommend that you first update to version 26.0.3 and then to version 26.3.

Relution Decon for Android Enterprise

With the further development of Relution Decon, the content filter is being extended to Android Enterprise, providing a consistent, platform-specific, secure filtering solution. The goal is to ensure reliable protection for devices and networks while maintaining centralized control.

For Android Enterprise, Decon relies on an enhanced security architecture featuring Always-on VPN, which remains permanently active and cannot be disconnected unintentionally. Additional restrictive configurations also prevent manipulation, deactivation, or circumvention of the VPN connection, ensuring a stable and secure setup.

Device Enrollment with User Authentication (Google Managed Accounts)

Relution is expanding Android Enterprise Enrollment to include a new authentication option using Google Managed Work Accounts, enabling a modern, Google-based sign-in process.

Two authentication methods are now available:

• Via the Relution Companion (one-time use, incl. expiration date)
• New Google User Authentication (Work Account)

The classic enrollment method remains available. The new method uses Google Managed Work Accounts as the identity provider.

Authentication can be flexibly enforced via Android (DPC) or the existing Companion approach. All options can be configured and combined independently.

IT administrators can centrally control whether Google-based authentication is enabled. This requires an existing Managed Google Account and the activation of sign-in for this enterprise.

Additionally, the “Work Account Setup” policy is available to enforce sign-in even after enrollment—including placeholders.

Advanced Installation Requirements for Apps

With version 26.3, Relution is expanding app compliance for Android Enterprise with new InstallConstraints and additional control options for app deployment.

This allows installation behavior to be controlled on a per-app basis beyond just priority and order. Installations are subject to conditions such as network type (e.g., Wi-Fi only), power supply, or device state (e.g., idle).
In the network settings, via the device connectivity configuration, you can now specify a DNS server for the device.

InstallConstraints apply specifically to FORCE_INSTALLED and require that all conditions be met.

eSIM Support

Relution has expanded Android Enterprise to include eSIM profile management. eSIMs can be centrally assigned, installed, and removed. Their status can be viewed at any time, including activation and removal by the user. The device details have been updated accordingly.

APNS: Custom Push Certificate for New Relution Instances

Effective immediately, every new server instance set up with Relution Server 26.3 requires a self-generated APNS (Apple Push Notification Service) push certificate for managing Apple devices. If you upload a certificate with a different push topic, all registered Apple devices must be re-registered before they can communicate with Relution again. A built-in wizard guides administrators step-by-step through the setup and explains the entire process clearly.

With this change, the previously shared Relution APNS certificate will be phased out.

**Please note: ** Changing an APNS certificate is a very time-consuming, highly sensitive process that requires careful planning. Depending on the device environment, the transition can be complex and may affect already-registered Apple devices. We therefore recommend planning the migration carefully and allowing sufficient time.

Apple Certificate Configuration: User Certificates & Channel Selection

Relution supports the direct use of user certificates as well as the selection of the installation channel.

Certificates can be installed via the user or device channel without additional configuration. Specifically for macOS, certificates can be deployed in the user context and used without admin privileges for scenarios such as Wi-Fi or VPN.

macOS: Migration Assistant

Relution now supports remote configuration of the macOS Migration Assistant (DDM-based) to facilitate migrations to new Macs. This allows you to centrally preconfigure transfer options (e.g., from Time Machine or old devices) remotely.

Wi-Fi: WPA3 Support

Relution now supports WPA3 (Wi-Fi Protected Access 3) in its Wi-Fi settings, enabling the use of modern security and encryption standards.

You can find the release changelog here.

For the sake of readability, the masculine form is used on this page for personal pronouns and personal nouns. In the spirit of equal treatment, these terms apply to all genders. The use of the masculine form is for editorial purposes only and does not imply any judgment.