Release Notes 6.10.0
With acmp 6.10.0, we are taking the next step in the further development of our client management platform. The major release brings far-reaching enhancements in key areas: from secure and compliance-compliant data deletion to significantly expanded Windows Update Management, which incorporates numerous responses from your customer feedback, to an extended Intune import and more comprehensive inventory for Unix systems. In addition, this release contains further improvements that make the day-to-day work of administrators more efficient and clearer.
OS Deployment - Secure data erasure for end devices
Whether device replacement, leasing return or disposal, secure data erasure often used to mean the use of external service providers, manual coordination and incomplete documentation. The wipe boot templates introduced with acmp 6.9.0 have been expanded into a comprehensive solution with acmp 6.10.0: From now on, data carriers can be specifically selected for wipe operations and various wipe methods and standards can be configured. Depending on the storage type, different procedures are available, multiple overwrites for HDDs (Peter Gutmann, NIST, DOD and many more) or specialized procedures such as Sanitize or Secure Erase for SSDs. Wipe processes can be started completely via PXE and controlled centrally. In addition, reports on the erasure process are generated and saved, ensuring audit-proof documentation of the data erasure.
Disk and partition numbers are now also inventoried. This simplifies the configuration of wipe boot templates, as the relevant data carriers can be identified directly using the inventory data.
The OS installer of the boot images has been equipped with a new OpenSSL library. After updating to acmp 6.10.0, a rebuild of the boot images is required, which can be carried out directly from the console thanks to the rebuild function introduced in acmp 6.9.0. This contributes to improved security during data transfer.
WUM
With acmp 6.10.0, Windows Update Management has been expanded in several areas.
The behavior of the Windows Update Collection has been significantly improved. Update Collections can now be provided directly as an independent object in the kiosk without the detour via a Job Collection. After updates with a restart request, you can configure how often the restart dialog should be displayed. If no user is logged on to the client, an automatic restart can be performed without interrupting active sessions. In addition, users can be automatically prompted to close running applications before installing Office updates.
acmp now provides the default sync profile "All Updates", which is available directly after installation and can be assigned to a file repository without additional configuration. Sync profiles can also be set up so that all updates are automatically synchronized without having to manually adjust the profile for new products or classifications. In addition, the same filter control is now available in the test and release rings as in the Windows Update Collections.
During the initial setup, the First Steps Wizard and the settings (under System - Settings - Windows Update Management - Products Products) show recommendations for product and language selection based on the existing inventory data. The prerequisite for product selection is that a metadata download has been carried out beforehand. Troubleshooting on the client has also been enhanced and updates that are installed via WUM will be visible in the client's native Windows update history in future, so that the update status can be tracked consistently regardless of the installation path.
Further improvements have also been made: The Job Monitor has been expanded to include more precise logging for WUM jobs, additional diagnostic information has been added to metadata and setup downloads, and third-party updates will now also be imported without product assignment. The WUM database has been expanded with numerous new display fields, including the total size of updates, installation and uninstallation behavior and the status of the Windows Server Update Service. We also provide new queries for error analysis.
acmp Intune Management
Intune management has been expanded to include selective import. When importing from Intune, you can now selectively control which clients, groups, apps and users are imported into acmp. Especially in large environments or BYOD scenarios, this provides a better overview and ensures that only relevant devices and users are visible in acmp.
acmp Core
The recording of optional Windows features has been outsourced to a separate agent task. As a result, the software scanner runs faster, which speeds up rollouts and OSD processes in particular. The new scanner can be configured flexibly in the agent planner. When updating to acmp 6.10.0, the start condition of the software scanner is transferred once to the new scanner for optional Windows features so that it can be started directly with the existing settings.
Inventory
The software scanner has been extended so that SQL Server 2025 instances are recognized and correctly identified as SQL Server in the license management.
On Windows clients with ARM architecture, operating system information is now read out completely and a BitLocker profile can be assigned.
acmp Windows Agent
The deployment of the agent has been optimized: The size of the client package has been reduced and both deployment and startup behavior have been improved.
UNIX Agent
The expansion of the inventory data increases transparency within the Unix environment. The hardware inventory now includes additional information on the chassis, battery, TPM, GPU and display.
In addition, a login history is now recorded that documents past logins to the client. The optimization of logging for Unix scripts also ensures better traceability and faster problem solving.
Job / Client Monitor
The display of container-based jobs in the Job Monitor has been optimized. After renaming client commands or job collections, the current name is now displayed. This improves traceability, especially for recurring jobs.
Database
With acmp 6.10.0, two optimizations have been made to the database: The defragmentation of the indexes has been improved and the handling of large amounts of data has been optimized. In order to benefit from the optimizations, it is recommended to follow the instructions in the online manual.
acmp Desktop Automation - Client Commands
The "Uninstall Software" module has been added. MSI installations are hidden in order to avoid errors during uninstallation. For MSI packages, the corresponding MSI module is recommended instead.
The execution of the "Execute PowerShell Script" block in the console context is now reliably supported, both as a logged-in user and when impersonating another user.
The new "Show Balloon Tip" module provides a further notification type that can be used to inform users during the execution of a client command.
acmp Managed Software
The execution of agent tasks has been optimized. If several MSW packages are executed simultaneously, the double queuing of scanners is prevented if the previous scan has not yet been completed. This reduces the resource load on both the client and the server.
acmp security
Global accounts can now be provided with access control lists (ACLs), which control which users are allowed to view, edit or use global accounts.
In addition, the OpenSSL version has been updated to 3.5.6 to ensure the security of data transmission in the long term.
The white paper on NTLM has been expanded and now describes in more detail which configurations are required to ensure the highest security level with NTLM, as well as the requirements and limitations of operation without NTLM. As soon as Microsoft provides a fully-fledged successor protocol, this will be tested as a permanent replacement.
Discontinuation
The acmp Command Launcher was removed from the product with acmp 6.10.
The acmp Kiosk was introduced as a successor with acmp 6.0.0 and the Command Launcher was discontinued with acmp 6.9.0.
Before updating to acmp 6.10, make sure that existing configurations have been migrated from the Command Launcher to the acmp Kiosk. Whether the Command Launcher is still in use can be recognized in the acmp Console in the Client Management - acmp Kiosk area by a corresponding message.
No further measures are required if the acmp kiosk is used exclusively. You can find more information here.
Updated components
After the acmp update, the following components must be updated separately: The acmp Gateway, the Network Boot Service, the Unix Agent and the Unix Offline Scanner as well as the acmp Helpdesk web interface
Note: The manual lists any additional components that may need to be updated separately. From there, you can navigate to the relevant components and find instructions on how to update them if you are not familiar with the process.
Changelog
Further details on the corrected and improved points can be found in our changelog.