Relution Server 5.28

Extended CSV import functions

Auto Enrollments

With Relution version 5.28, there are two new options for updating multiple devices at the same time during author enrollment: DEP profiles and the Enroll-to-Organisation UUID. Previously, each device had to be assigned to an organisation individually. To simplify this process, several devices can now be updated at once using a CSV template. The template can be downloaded, the serial numbers of the devices and the desired organisations entered and then uploaded again. A CSV export is also available to easily transfer and edit existing device data.

Extended CSV import function for users

In addition, the CSV import for users has been significantly expanded. In addition to the option of importing users via CSV file as before, they can now be assigned directly to groups, classes or authorisations.

A new feature is the Automatically create groups and classes checkbox. If this is activated, corresponding groups or classes are automatically created in the system for all unknown groups and classes contained in the CSV file. This makes it possible to create and manage users, their group and class memberships and authorisations with a single CSV upload. Previously, groups and classes had to be created separately before users could be assigned. This manual procedure is now no longer necessary. Existing CSV upload options are retained; the new functions specifically extend the User upload.

Note: Uploaded files lead to a direct overwriting of existing content. Please check carefully which data is uploaded to avoid unintentional changes.

New columns and filter functions

In the user list, groups, classes and authorisations can now be filtered and displayed directly. There are new displayable columns under ‘Users’, which are also included in the CSV export. This means that assignments are visible at a glance without having to open the detailed view.

Check certificate validity via OCSP (Online Certificate Status Protocol)

The management of built-in PKI certificates has been significantly enhanced with Relution 5.28. In addition to the previous option of issuing certificates via build-in, these can now also be checked for validity and revoked (revoked) if necessary. When a certificate is revoked, a revoked reason can also be specified. The validity of certificates can be checked both via OCSP (Online Certificate Status Protocol) and CRL (Certificate Revocation List). The certificate validity is checked either via OCSP (Online Certificate Status Protocol) or a CRL (Certificate Revocation List). Both verification methods are integrated directly into the issued certificate, enabling simple and reliable validation.

These enhancements significantly increase security when handling certificates and ensure greater transparency and control in their management.

MacOS

Setting for hard drive management

This new configuration enables hard disk management on macOS and offers Relution administrators extended options for better controlling external storage devices and network storage and implementing security policies. It is now possible to set specific restrictions for hard disks, which increases data security.

Power saving settings

The new macOS configuration ‘Power Saving Settings’ allows administrators to make specific settings for power management on macOS devices. This includes deactivating sleep mode and VileVault as well as setting up schedules for automatically switching devices on and off. It is also possible to specify when hard drives and monitors should be switched on and off - both for laptops (with and without a power supply unit) and for desktop devices.

Removal password for macOS enrolments

Relution now offers the option to use a Removal Password for macOS enrollments. This function can be activated via the new field "Use password for profile removal ’. This generates a password that is stored in the device information. With this password, it is no longer possible for users to independently remove the enrolled MDM profile without entering the password. This provides additional protection, as the devices cannot be unintentionally or deliberately removed from management by Relution.

Safari Extensions for macOS and iOS

Relution now supports the management of Safari Extensions for macOS and iOS. With the new policy, administrators can block or restrict specific extensions - both on desktop and mobile devices. This feature provides even more precise control over the Safari browser and increases security in device management.

iOS 18.1

Locking and hiding apps

With iOS 18.1, Relution supports locking and hiding apps. Users can hide installed apps on their devices themselves. Administrators can use two new filters in the app list to get an overview of which apps are blocked or hidden on which devices. This function is also available on supervised devices.

Windows Companion configuration

The new configuration option for Windows Companion enables administrators to control the processing of actions more flexibly and to adjust the log level manually. This makes it easier to analyse errors more precisely and adapt to individual requirements.

Knox Service Plugin (KSP) configuration

The new Relution version 5.28 significantly simplifies the management of Samsung Knox-based devices thanks to the integration of a new Knox configuration. The Samsung Knox Service Plugin (KSP) can now be configured directly, without the previously necessary intermediate steps. The new function integrates the app in the background and allows all the necessary settings to be defined directly in Relution. Once saved, the plugin is automatically deployed to the relevant Samsung devices.

In addition, newly configured Knox settings are now displayed directly in the policies. Detailed status information can be found there, providing an overview of the actions set and making their execution traceable.

App feedback channel

With the new version, Relution now supports the App Feedback Channel for Android Enterprise. This function can be found under the device settings and enables apps to transmit status and feedback information directly to the Relution MDM system. For example, the Samsung Knox Service Plugin (KSP) uses the app feedback channel to send feedback on installation and configuration.

This makes it easier for administrators to check configurations and quickly identify any problems.

Homescreen layout configuration

The configuration of the homescreen layout for Android Enterprise has been added. Installed apps that are visible to the user can be placed directly on the layout using drag-and-drop. In addition, apps can now be added and placed on the home screen using their package name - regardless of whether they are already installed or available in the App Store.

In order to always be up-to-date and to be able to use continuous enhancements and convenience functions in Relution, from December 2024 all subsequent Relution versions will automatically be converted to the Relution device groups. These groups allow administrators to clearly structure mobile devices in their organisation, which makes it much easier to assign and apply policies. In addition, the previous Relution rule sets will be replaced by the device group actions, which will also contribute to more efficient administration.

The changelog for the release can be found here.