4.1.6 18.08.2026
- Added support for the devices iR2224,iR2725,iR2730,iR2745,iR2925,iR2930,
  iR2945 and iR C3326.
- Added function for temporary changes in platform detection in WS2.
- Updated documentation.

4.1.5 31.07.2026
- Removed ":443" from the initial page call when using https on port 443.
- Fixed device login with LRS Login application installed.
- Added "LastRunTime" in the answer from the EMC-API.
- Added the option "GenerateCSRWithSingleKeys" for generating device individual
  private keys when generationg a CSR in OpenSSL instead of in the device.
- Fixed Generate CSR in OpenSSL with 4096 bit KeyAlg due to a timeout.
- Updated Documentation.

4.1.4 19.05.2026
- Fixed timeut error after login on slow devices.
- Fixed log entry when externaly signing via API.
- Optimized waiting for 1 step signing certificates via API.
- Fixed GenerateCSR when using sha256 and sha384.
- Removed ":80" from the initial page call when using http on port 80.

4.1.3 05.06.2026
- Fixed login to older GeniusBytes login applications < 2.24.x since v4.0.0.

4.1.2 03.06.2026
- Using API argument 'WaitAfter' on direct API certificate releases now.
- Added database selection option when using MOSCA with CLM plugin.
- Added second API password in credentials section.

4.1.1 28.05.2026
- Fixed reading the certificate date from XPT models with US date format.
- Fixed uFO Login since the last changes on the Microsoft login page.
- Updated documentation.

4.1.0 19.05.2026
- Added support for OAuth, token and reauthentication when signing certificates
  with external API's like the one from Venafi.
- Improved logging on API calls to get less "Got no answer from Webrequest."
  messages.
- Changed display name to "MOSCA Certificate Lifecycle Management".
- Fixed InstallCertificateFromCSR on NCA3.3 devices since v4.0.0.
- Added display of number of devices in web interface.
- Updated documentation.

4.0.6 04.05.2026
- Fixed scrumbled credentials when updating from version 3.x.x to v4.x.x.
- Fixed scroll down problems in LiveLog2.
- Made import function case insensitive to prevent double entries.
- Catched file not found errors in external signing.
- Implemented deletion of multiple device CSR's on iR-ADV/iF devices.
- Fixed CIV error on SQLODBC driver on new install since version 4.0.0.
- Fixed installing CA certificates on fast answering iR-ADV/iF devices.

4.0.5 29.04.2026
- Fixed installing CA certificates with case sensitivity since v4.0.0.
- Fixed WS2 crash when running out of memory.
- Fixed WS2 crash when log file is locked.
- Updated documentation (requirements).

4.0.4 24.04.2026
- Fixed offline detection if all ports are unreachable since v4.0.0.
- Fixed timeout issues if SSL handling is slow.
- Added parameter FirstPageTimeout (default 15s) in WS2.ini
- Added command "Open Log Folder" to debug menu.

4.0.3 22.04.2026
- Fixed a timeout error on slow devices since v4.0.2.

4.0.2 22.04.2026
- Fixed UseOnlyCanonPorts for XPT1 models.
- Changed detection of landing page after login for more stability.
- Removed WriteSettings.exe from build.
- Updated documentation.

4.0.1 20.04.2026
- Changed Playwright use from Chrome to MS Edge.
- Fixed function UseOnlyCanonPorts since v4.0.0.
- Fixed CIV error on OpenSSL since v4.0.0.

4.0.0 15.04.2026
- Redeveloped WriteSettings to WS2 using Mircosoft Playwright for the
  automation of the device web pages, bringing several fixes, higher speed and
  independency of the IE-object and IE settings.
- Updated OpenSSL libraries to 3.0.19 due to previous vulnerabilites.
- Added support for a different sender address in MailClient.
- Implemented automatic readout of the device serial number for all devices
  showing the serial number on the landing page.
- Redeveloped LiveLog to be more performant and stable. Added option buttons
  to show all 10 WS2 logs.
- Set all Daylog weekday names independent to the system settings to english.
- Added device support for LBP 647C.
- Added support for ECDSA algorithm in RequestCSR for supporting devices.

3.6.1 27.01.2026
- Fixed an authentication bug in internal EMC-API.

3.6.0 06.01.2026
- Implemented workflow command ConvertCSRToDER to convert the PEM device CSR to
  DER format for some API's for signing.
- Implemented {STRIP(CSR)} as option for API calls to remove the BEGIN and END 
  tags from the CSR.
- Added detection and logging of wrong command names in the command file.
- Updated documentation.

3.5.0 03.12.2025
- Added status 8 (orange), to give faulty enrollemnt processes retries for
  the next days. The devices will only turn red, if the configured number
  of retry days are exceeded (RetryDaysBeforeFinalError).
  Orange devices will not be processes again on the same day.
- Added new column "FinalErrorCounter" to the database.
- Implemented fuction to activate certificates installed on the last 2 days.
- Added error process result to the log.
- Added LoginMananger pin to be used as second try password.
- Updated documentation.

3.4.5 16.11.2025
- Fixed a bug in the approval workflow where the Request ID was not read
  on a German server. 

3.4.4 25.11.2025
- Added {IP} tag for API signing.
- Fixed a bug where the approval workflow was not detected from a German server.
- Increased timeout for CodeIntegrityVerification and added configuration parameter.
- Updated documentation.

3.4.3 17.11.2025
- Fixed a bug since 3.4.1 when logging on via uniFLOW Online.

3.4.2 12.11.2025
- Fixed a bug in approval workflow where devices did not get the correct state
  after the signing process.

3.4.1 29.10.2025
- Added the DeviceType column to the export of the device list.
- Added support for imageForge 1440 and imageFORCE C1333.

3.4.0 02.10.2025
- Added support for InstallCACertificate to Lexmark devices.
- Added support for MF742C, MF440, MF510, MF5900 and MF6100 devices.
- Implemented new debugging sub menu.
- Added support for single use certificates to functions InstallPKCS12Certificate
  and GenerateCSR.
- Implemented creation of an FQDN SAN entry build from the CN and a fixed
  domain part.
- Updated documentation.

3.3.2 05.09.2025
- Fixed creation and import of devices with duplicate CommonNames.
- Added database check and fix at service start.
- Redesigned creation and download of CSRs on Lexmark devices.

3.3.1 26.08.2025
- CodeIntegrityVerification working with file hashes now.
- Fixed use of SigAlg from CommandFile for GenerateCertificate.
- Fixed use of SigAlg from CommandFile for RequestCSR on Lexmark devices.
- Improved LiveLog. Only the last 500 lines of a log will be shown now.
- Fixed login after redirect when IE ESC is on.

3.3.0 24.08.2025
- Added support for LRS Login Manager.
- Added support for PaperCut Login Manager.
- Implemented new column "Device Type" in the device list. The Device Type is
  read during certificate check and will be filled automatically.
- Added new filters for the function WellFormat in API-Signing.
- Changed CodeIntegrityVerification. The service user should not need to be local
  admin anymore.
- Improved offline error detection (port checks).
- Improved Login on GB Login-Manager.
- Updated Documentation.

3.2.2 10.07.2025
- Fixed login against uniFLOW Online since last uFO changes on the website.
- Fixed an error since version 3.2.1 where some dates where not read properly from
  the database on english systems. This resulted in endless log entries for positive
  certifcate check answers.
- Updated documentation.

3.2.1 19.06.2025
- Fixed occasionally wrong domain names in onboarding process when snmpv3 read 
  errors of device details occured.
- Increased Code Integrity Verification timeout if anti virus software delays the
  start of subtasks.
- Fixed an error where the status sometimes showed yellow-green instead of green.
- Fixed an error in the delivery date function where devices were not correctly checked
  before processing.
- Fixed an error in the Last Contact / Delivery date display.
- Added deletion of CA-Respond files (*.rsp) after certificate enrollment. 
- Added RUI reboot for Lexmark devices.

3.2.0 05.06.2025
- Implemented SNMPv1 fallback option in Onboarding Service.
- Implemented Code Integrity Verification for all exe files and DLL's of the
  MOSCA-LCM package during runtime.
- Fixed an error since version 3.0.0 where the Scheduled Task for the MOSCA-Service
  was created with the option "run once" instead of "daily".
- Added links for the documentation and the release notes in the help menu.
- Updated documentation.

3.1.1 26.05.2025
- Fixed error in editing devices in webservice since v3.0.0.

3.1.0 19.05.2025
- Added delivery date function. Devices will only processed from that date on.
- Logs of WriteSettings will now only hold data of the last run per process.
- Added Auto-Onboarding option "UseIPForHostname".
- CodeSigning of all apps by Canon Deutschland GmbH.
- Updated documentation.

3.0.0 01.04.2025
- Updated Webservice to .Net 8.
- Updated MailClient and OnboardingService to .Net Framework 4.8.
- Fixed stability issue in OnboardingService.
- Implemented higher password encyption.
- Implemented User/Password Authentication with JWT for 2 Users in Webservice.
- Protected API against unauthorized access and several attack methods.
- Changed Scheduled Task creation and control for more security and performance.
- Implemented API for EMC.
- Enhanced Inplace-Update.
- Updated documentation.

2.31.0 28.01.2025
- Implemented Live-Onboarding with direkt database access from the Onboarding
  Service.
- Implemented optional auto deletion after a given period of time.
- Implemented optional deletion of devices after onboarding a device with the
  same serial number and a new hostname (internal move).
- Implemented DayLogging in Onboarding Service.
- Added display of Onboarding and WriteSettings01 log files in LiveLog.
- Changed database query in MOSCA_LCM_Service to order by staus to prioritize
  the processing of new devices.
- Fixed Inplace-Update adding LiveLog.
- Updated documentation.

2.30.1 20.01.2025
- Added suffix to ConvertToPKCS12- and ConvertToPKCS12MI-Commands for
  single use certificates.
- Implemented command ConvertToDER to increase compatibility to smaller
  Canon devices if certificates from external CA APIs can only be delivered
  in Base64 (pem) format.
- Updated Documentation.

2.30.0 17.01.2025
- Added option to suppress device SAN entry in device certificate requests.
- Added parameter {CN} and {FQDN} to be replaced with the device CN or FQDN
  during external API signing. 
- Implemented well formatting of the extracted certificates from an external
  CA API signing call.
- Impelemented auto escaping double quotes in PowerShell commands for external
  CA API signing.
- Added tooltip text on webservice webpage for the service icon and fixed some
  writings.
- Updated documentation.

2.29.0 10.01.2025
- Added support for Canon imageForce devices.
- Updated to OpenSSL library 3.0.15.
- Implemented LiveLog feature.
- Fixed URL encoding for CSR's on Lexmark devices.
- Updated documentation.

2.28.2 13.12.2024
- Added SAN field in device CSR for Lexmark devices.

2.28.1 13.12.2024
- Added SAN processing for MOSCA (Open SSL) generated CSR's.
- Added new option for appending SAN's in MOSCA_LCM_Service.ini.
- Optimized Logon function for slow device answers on RUI.
- Updated documentation.

2.28.0 05.12.2024
- Added support for SHA256 and SHA512 authentication algorithm for SNMP3 in
  the auto onboarding process.

2.27.4 29.11.2024
- Added parameter to configure which line feed characters to use for the CSR
  in an API signing call.
- Updated documentation.

2.27.3 28.11.2024
- Added password replacement in CEP/CES commands for certifcate signing.
- Implemented base 64 decoding of the extracted certificates from a CA API
  signing call. 

2.27.2 27.11.2024
- Implemented base 64 enconding of the device CSR before sending the request
  to the external CA API.

2.27.1 21.11.2024
- Additionally implemented certificate signing against external CA APIs by
  calling Windows PowerShell commands.

2.27.0 13.11.2024
- Implemented multi step certificate signing against external CA APIs.
- Added support for MF59xx devices.
- Added multiple tries for external certificate signing with the parameter
  'MaxSigningErrors' set to a value larger than 1.

2.26.0 22.10.2024
- Added support for MF1440 devices.
- Added special error handling for Login Manager errors to prevent devices
  getting  'red' when the Login Manager has no uniFLOW connection.
- Fixed setting the correct status when resetting a device status with the
  webservice.
- Updated documentation.

2.25.1 05.09.2024
- Fixed fallback from https to http when using the option UseOnlyCanonPorts.
- Fixed option UseOnlyCanonPorts on devices other than iR-ADV.

2.25.0 08.08.2024
- Added support for iR-ADV devices runnning platform 3.18.
- Implemented adding the Subject Alternative Name in the certificate
  request on the devices if the device is running platform 3.18 or higher.

2.24.0 05.08.2024
- Fixed uniFLOW Online login after latest changes to uFO websites.
- Implemented clearing temporary certificate store before for installing
  new root certificates on the devices.

2.23.0 06.05.2024
- Implemented monitoring manually installed certificates.
- Updated documentation.

2.22.1 25.04.2024
- Fixed clearing single device service start from version 2.22.0.

2.22.0 22.04.2024
- Implemented single device service start for scheduled task service.
- Implemented iWEMC device import.
- Implemented single device service start from the MOSCA-LCM webservice.
- Implemented service state display in MOSCA-LCM webservice.

2.21.0 27.03.2024
- Implemented "In place Update".
- Added support for LBP1440 devices.
- Fixed deletion of PFX certificates after install.
- Prevented double start of MOSCA_LCM_Service.exe.
- Updated documentation.

2.20.2 27.02.2024
- Fixed login to uFO devices when a device redirects the browser to the IP address.

2.20.1 21.02.2024
- Added possibility to append IP address from hostname field to SAN's.

2.20.0 12.01.2024
- Added user login with read only access for the web service.
- Changed some labels in the GUI.
- Updated documentation.

2.19.1 04.01.2024
- Fixed an error when logging in to uniFLOW Online accounts.

2.19.0 12.12.2023
- Implemented device login against uniFLOW Online tenants with and without multi-
  factor-authentication (MFA).
- Implemented Export device list via shell call as the fourth monitoring method.
- Updated documentation.

2.18.2 06.11.2023
- Fixed function InstallPKCS12Certificate for iR-ADV devices running
  platform 3.15 or higher.

2.18.1 20.10.2023
- Implemented "UseOnlyCanonPorts" in WriteSettings.ini to configure MOSCA to use
  only port 8000 and 8443 when connecting the devices.

2.18.0 18.10.2023
- Added support for new platform 3.15 on iR-ADV (DX) devices.

2.17.2 18.09.2023
- Fixed an issue with the database correction from 2.17.1
- Fixed an issue in MailClient with a test reciepient.

2.17.1 16.08.2023
- Fixed an issue in the approval workflow when approval takes until next day.
- Implemented database correction if ActualCommand entry gets lost.
- Updated Documentation.

2.17.0 28.07.2023
- Added new status 7 for tasks, that were ended by workflow command "end" or
  "ManualInstall" and needs manual activity, like a manual install of a certificate. 
  The representing color of status 7 is purple.
- Implemented new workflow elements "ConvertToPKCS12MI" and "ManualInstall" to let
  MOSCA-LCM generate certificates for manual install (e.g. on none Canon devices).
- Added new Password section "Other passwords" in credentials section with a password
  field "Password for PKCS#12 files for manual install".
- Implemented a new function "Start workflow for all selected devices" in menu
  "Tools/Edit Database" to directly invoke a workflow start.
- Updated documentation.

2.16.1 19.06.2023
- Added password encryption to SNMPv3 Passwords in the CanonOnboardingService.
- Filtered non Canon devices in CanonOnboardingService.
- Changed logging in CanonOnboardingService.
- Added setting SNMPRetrySeconds in CanonOnboardingService.ini to retry the SNMP
  query and let the SNMP interface come up after a device reboot.
- Updated documentation.

2.16.0 16.06.2023
- Improved Online Checks.
- Added Online Check for single or all selected devices in context menu.
- Added support for SAN's when signing with MOSCA-CA (Open-SSL).
- Moved services to a "Services" menu.
- Added function "Edit Database" to the Tools menu.
- Implemented Import result display.
- Implemented MailClient for warnings and error messages via mail.
- Updated documentation.

2.15.0 05.05.2023
- Implemented a tool for quick online checks of all devices.
- Fixed several errors in certificate approval workflows.
- Fixed switching between SSL and 802.1X workflows of a device when process
  was in waiting state.
- Added new database column for the active workflow (SSL or 802.1X).
- Fixed an error in SingleUse (two seperate certificates for SSL and 802.1X)
  since v2.6.0.
- Fixed some service errors accessing the database.
- Implemted several improvements for stability in large environments.
- Updated documentation.
- Added support for iSENSYS X C 1538P.

2.14.2 02.05.2023
- Added filter for LastContact and auto in GUI.
- Added new setting MaxOffineErrors in service ini file.

2.14.1 28.04.2023
- Blocked looping certificate workflows.
- Fixed an error with GetActiveCertificates at the end of an certificate
  workflow when many devives are in wait state.

2.14.0 13.04.2023
- Implemeted use of Certifificate Approval Workflows.

2.13.0 15.03.2023
- Added SysLog support.
- Implemented certificate cleanup before requesting or generating new CSR's.

2.12.0 15.02.2023
- Added use of encrypted passwords for the Webservice.
- Fixed a bug creating a scheduled task when the path to the MOSCA-LCM-Service
  contained spaces.
- Fixed an error with daylogging on new installations.

2.11.0 06.02.2023
- Enabled Canon Onboarding Service to set local time from a given time server.
- Implemented the possibility to run the MOSCA-LCM-Service for a single device.
- Implemented the check of the certifiacte name against the common name in the
  device certificate.
- Fixed detection of GB Login Manager on GB versions > 2.24
- Fixed "Reset Command", "Set Previous Command" and "Set Next Command" buttons.
  The buttons did not clear a final error state (red).
- Enhanced logging for certificate out of date information.
- Implemented function to stop a running scheduled task from MOSCA-LCM.

2.10.1 06.01.2023
- Added function to run external commands in certificate workflow.

2.10.0 12.12.2022
- Added support for  LBP1861/1871 devices.
- Added warnings for long field entries in CSR's and 802.1X login names.
- Added version display on the webservice webpage.
- Added support for User Proncipal Name in Subject Alternative Name entries
  (MS KB KB5014754).
- Fixed a name error in daylogging.
- Updated documentation.

2.9.2 22.09.2022
- Fixed a bug with FQDN as CN when converting to PKCS12 format.

2.9.1 22.09.2022
- Fixed a bug creating a CSR with MOSCA.

2.9.0 20.09.2022
- Added workflow elements "GenerateCSR", "ConvertToPKCS12" and 
  "InstallPKCS12Certificate" to enable MOSCA to create own certificate requests
  and create and install PLCS#12 certificates after signing.

2.8.3 16.08.2022
- Fixed an error with the wait status queing when 10 processes were runing
  and no free process was available.
- Added support for MF1333C devices.

2.8.2 08.08.2022
- Fixed an error with NCA3.0 devices with GetActiveCertificates.
- Fixed an error when NCA3.0 devices with InstallCertificateFromCSR.
- Added support for MF41x, MF74x and MF72xC devices.
- Updated list of supported devices.

2.8.1 15.07.2022
- Fixed an error when refreshing an empty device list.

2.8.0 13.07.2022
- Fixed a bug with alternating device states in the GUI.
- Added workflow function "ActivateExisting8021XCertificate".
- Added new device states to the UI and web UI.
- Added import and export functions in the file menu.
- Updated documentation.

2.7.0 08.06.2022
- Added new command "ActivateSSLAnd8021XCertificate" for more reliable and faster
  installation of dual use (SSL and 802.1X) certificates on all devices.
- Updated documentation for installing dual use certificates.
- Fixed a bug removing unused certificates on XPT1 platform devices.

2.6.0 04.05.2022
- Added function to deploy CA certificates.
- Fixed wrong device clarification on an NCA devices with login manager.
- Fixed a bug with the device list filtered.

2.5.0 21.04.2022
- Fixed issues with the device list population with large amount of devices.
- Added sorting and filter function in the device list.
- Added support for bulk changes in the device list.
- Added support for LBP664C devices.
- Fixed an error reading certificate dates from LBP devices with international
  date settings.
- Code signed the apps.

2.4.1 13.04.2022
- Fixed Onbording with equal CommonNames except upper and lower cases.

2.4.0 13.04.2022
- Added support for SSL certificate deployment for Lexmark devices.
- Extented RemoveUnusedCertificates for Lexmark devices.
- WriteSettings window is now resizeable for better debugging.
- Added feature to keep last selection in device list when changing settings.
- Added option to choose wether to invoke the MOSCA-LCM-Service scheduled task or
  to run it in the current user context with debugging capabilities.

2.3.0 15.03.2022
- Added password security for MOSCA-LCM webservice.

2.2.2 25.02.2022
- Fixed reading the IssuedBy information during GetActiveCertificates on all
  NCA platform devices (see list of supported devices with platform information).

2.2.1 21.02.2022
- Fixed restarting LBP1238 and 1127C models.

2.2.0 16.02.2022
- Moved list of supported devices into documentation.
- Added support for new devices (please refer to the documentation).
- Enhanced function for removing unused certificates.
- Added support for GeniusBytes Login Manager >= 2.24
- Fixed restarting devices on device platform NCA3.3.

- Fixed an error in GetActiveCertificates with "Singe Use" certificates for SSL
  and 802.1X.

2.1.0 25.01.2022
- Added option for resigning CSR's to add SAN's with an enrollment agent certificate.
- Improved logging for external signing.

2.0.0 08.12.2021
- Switched database from MS Access to SQLite3. An SQLite ODBC driver will be installed
  at runtime if not available.
- Implemented a OnePageApplication based on ASP.net Core 3.1 and Vue.js with Bootstrap
  as frontend. In addition MOSCA-LCM now has an implemented Webservice (Kestrel).

1.5.0 15.11.2021
- Implemented RemoveUnusedCertificates as optional process step during certificate
  deployment.
- Added functions to reset a single command and to set the previous and next command
  for a device line in the device list.
- Implemented retries in external signing process.

1.4.3 08.11.2021
- Extended logging in signing and deployment of certificates.
- Fixed timeout errors during external signing.
- Fixed a bug when deploying certifactes from CSR on some iR-ADV devices.

1.4.2 28.10.2021
- Limited certificate filenames to 20 character + suffix to be compatible to older
  Canon devices.
- Fixed support for older iR-ADV firmware versions when running GetActiveCertificates.

1.4.1 08.09.2021
- Added support for older iR-ADV firmware versions when running GetActiveCertificates.

1.4.0 03.09.2021
- Added support for ECDSA Key Algorithm during certificate requests for iR-ADV devices.

1.3.1 03.09.2021
- Fixed variable login names for 802.1X when not using full qualified domain names.

1.3.0 02.09.2021
- Added the option for variable login names during 802.1X certificate activation.

1.2.1 12.ß8.2ß21
- Fixed an error when reading certificate dates from non iR-ADV devices.

1.2.0 14.07.2021
- Added function to append Subject Alternative Names (SANs) during external signing process.
- Implemented check of "certreq" command answers in external signing process.
- Updated documentation.
- Added use of "Temp" directory for temporary files.
- Added use of "Logs" directory for log files.


1.1.0 06.07.2021
- Added Canon Onboarding Service
- Added service and scheduled task control
- Several bug fixes and improvements
- Added documentation

1.0.0
- First official release.