With this major release of acmp, our solution is equipped for the future and offers many optimizations for more efficient and secure working.

acmp license types - Subscription
In order to meet current market requirements, we support a new way of licensing acmp. From now on, all acmp modules are also available as subscriptions on request.

Improved update mechanism
The update mechanism has been fundamentally revised. Among other things, a more stable agent update with less network load is included.
In this context, the client inventory has also been extended to include the information "parked acmp version".
The update dialog itself now contains further supporting information (e.g. which components also need to be updated) and checklists for a fast and successful acmp update. The mechanism will work properly for the first time with acmp 6.6.1.
Please note that at least one acmp Console requires access to the following domain: acmpupdate.aagon.com Port 443

acmp Console
With this update, the acmp Console is available as an MSI and can also be installed "silently" via client command and parameters. The ribbon menu "System=>Help" now also provides direct access to the aagon Community, the successor to the aagon Forum.

acmp CAWUM
It is now possible to use an additional local WSUS for the acmp CAWUM updates or to operate cascading download systems. This means that Windows updates can be checked for integrity and security before distribution and acmp CAWUM does not have to communicate directly with the Internet.
acmp CAWUM has also been expanded to include an additional information field. This records the date of a failed update when an error occurs for the first time.

acmp OS Deployment

Thanks to the direct integration of LAPS into the current Microsoft operating systems, it is now possible to use automatically generated and rotating passwords for local administrator accounts. This offers a significantly higher level of security. We have adapted the acmp OSD rollout process so that you can now also finalize the rollout with a corresponding domain user and thus the local administrator is no longer required on the system to be rolled out.

acmp Desktop Automation
It is now possible to search for a specific client command in all jobs and containers and automatically replace it with a new one. This is very helpful if, for example, a client command for software distribution is to be replaced by a different version.
As of this version, the Package Wizard no longer contains the option to add a job delay. This option is now natively included in the job control and therefore centrally located for a more consistent operation of acmp.

acmp Kiosk
The filter options in the acmp Kiosk now display Windows 11 23H2 correctly.

acmp Gateway
It is now possible to pass the client certificate as a parameter via the command line when installing the agent. This means that it is no longer necessary to distribute the certificates separately.

acmp License Management
In addition to the DNA catalog, the central data from the inventory of acmp Core is also very important for the creation of license packages in license management. We have therefore improved the interoperability between the modules so that data such as manufacturer name etc. can now also be transferred directly for manual recognition patterns.

acmp BitLocker Management
Previously, the minimum system requirements in our solution were defined higher than they were actually necessary for BitLocker. These requirements have been adjusted accordingly so that configuration with a TPM module 1.2 is now also possible.

acmp Vulnerability Management
When a container is created from a vulnerability, if you are logged in as a client administrator, you are first asked for which client the container should be created.

acmp Defender Management
The acmp Defender Management has been completed with additional event IDs and now also displays the limit overrun of memory consumption and CPU utilization. This corresponds specifically to the Microsoft Defender event IDs 5014 & 5015.

acmp Asset Management
A problem with the number profiles has been fixed in acmp Asset Management. These could not be adjusted in the meantime or changes were not saved.

acmp Jobs
The behavior and control of jobs have undergone some changes in this version. For example, it is now possible to make a client accessible again by restarting the agent if a system job from a client command or MSW package hangs. Due to the batch processing of system jobs, parallel execution was previously not possible. Parallel execution is only available for agent restarts.
Another adjustment in job control is the alignment of manual and container jobs. The behavior of manual jobs now corresponds to that of container jobs. As a result, manual jobs are no longer incorrectly displayed as executed if the client is restarted before execution and has therefore actually discarded the job.
Furthermore, the calculation of the profile assignment has been significantly optimized in Job Management. This enables a noticeable improvement in performance in large client landscapes.
The start conditions for push jobs have been extended with this update and further aligned with the generally available start conditions.

acmp Container
An adjustment in the calculation of the client-container relationship has resulted in a significant improvement in performance, particularly in large environments.
Furthermore, a display error has been fixed that was still taking into account deactivated clients in the client count of containers.

acmp parameter control
Adjustments to parameters in client commands and MSW packages were previously not transferred to the acmp kiosk or jobs in a standardized way or at all. In some cases, elements had to be linked to the acmp kiosk or jobs again. This has now been adjusted in a user-friendly way and changes to parameters are transferred or removed completely for all types, and new default values are adopted if required.

acmp Compatibility & Security
With acmp 6.6.0, the OpenSSL version used is updated to 3.1.5.
The acmp hardware scanner has been updated to support and recognize the latest hardware.
The functionality of acmp Console & acmp Agent can be considered compatible with "Windows on ARM" after initial tests. However, there may still be some limitations in the inventory data. We therefore recommend a test in your environment before using the acmp Agent completely productively.
The acmp Agent is now also compatible with Windows Core systems.
Internally, acmp has been communicating with TLS 1.2 or higher for some time. As of this version, our external interfaces (e-mail service, file repos, acmp document API, acmp web interface) will no longer accept requests from participants using TLS 1.2. Please check the settings in your environment before updating. Further information on this topic can be found in our Community.

Components to be updated
If you are using the following components, please update them following the acmp 6.6.0 update: acmp Gateway, acmp Webinterface, acmp Network Boot Service.

Changelog:

As always, you can find out what has been corrected and improved in detailat in our changelog.