CapaInstaller Release Notes
Changelog
All notable changes to CapaInstaller are documented here. The format is based on Keep a Changelog.
[6.7.108] - 2026
Added
- PowerPacks now run on .NET 10 (embedded in the Execution Engine — no .NET 10 install required on endpoints).
- Software catalog search now matches package descriptions, not just titles.
- New CMS stored procedure
CMS_GetLinkedPackagesto retrieve all packages linked to an entity.
Changed
- A failed package unzip now sets the job status to Cancelled instead of leaving it stuck.
- Active Directory group synchronisation is limited to active organisational units.
- OSDClient removes the temporary repository folder after a completed OS deployment.
Fixed
- BAADS server distributed content even when free disk space was below the configured minimum.
- System Plugin forced CI Console to 100% DPI scaling on high-resolution displays.
- SSI (Software Self-Service Interface) failed to establish a data connection.
- Norwegian locale displayed the wrong thousands separator.
- CiStub was blocked by an unnecessary FIPS requirement in FIPS-enabled environments.
- Unsigned executables in the Util folder.
- Package creation failed in the management console.
- CapaOne Dashboard option missing from the client machine context menu.
- Changeset table filled the SQL Server PRIMARY filegroup.
[6.7.107] - 2026
Added
- Asynchronous PowerPack message boxes can be closed with
$InputObject.CloseMessageBox.
Fixed
- CapaInstaller Agent ran every hour instead of respecting its configured interval (default 4 hours).
[6.7.106] - 2026
Changed
- PowerPack default execution timeout increased from 25 minutes to 12 hours.
Fixed
- PowerPack-related modules are now correctly signed.
[6.7.105] - 2025
Added
- CapaInstaller MDM now supports Apple iPadOS 26.
[6.7.104] - 2025
Fixed
- A unit was not correctly removed from calendar groups.
[6.7.103] - 2025
Added
- CapaInstaller MDM now supports Apple iOS 26.
[6.7.102] - 2025
Changed
- The EFI System partition size during image deployment is now 512 MB (was 100 MB).
[6.7.101] - 2025
Added
- Windows Server 2025 x64 is available as an image type in OSD.
- Keyboard language can be selected in Windows PE to reduce password-entry errors.
Fixed
- CapaInstaller BaseAgent caused high CPU utilization.
- Deletion of the CapaInstaller OSDeploy service.
[6.7.0] - 2025
Added
- PowerPacks now require .NET Desktop Runtime 8.0.0.
- Improved code signing of
.exe,.msi, and.dllfiles.
Changed
- The CapaOne agent no longer installs if
OrgKeyis missing from the configuration.
Removed
- Discontinued support for SQL Server 2014, Windows Server 2012, and Windows Server 2012 R2.
Fixed
- BIOS clock errors affecting HTTPS during OSD (requires rebuilding
boot.wimafter patching). - CapaOne dashboard link.
- Statistics not sent after re-establishing a connection with CapaOne.
- PowerPack message box not shown before restarting the InfoCenter.
- Duplicate Service tree structures appearing after a fresh installation.
- Products not working on a contract’s expiration date.
[6.6] - 2024
Added
- Full HTTPS support across all CapaInstaller communication, including Windows Update Server integration.
- PowerPacks v2.0: a dedicated PowerShell execution engine, user-facing message boxes
(
$InputObject.ShowMessageBox), and access to all CMS functions from PowerPacks. - Copy any value from the endpoint Inventory view to the clipboard.
- Keep load-balanced front-ends in sync automatically when promoting packages.
Changed
- Removed the “Select all” option in the Software Catalog.
- Copy Relations now removes the old package and suggests a better name for the new one.
Fixed
- Numerous fixes: CapaPack download cleanup, agent signing, distribution server, console performance without internet access, OSD chassis-type detection, and more.
[6.5] - 2023
Added
- PowerPacks: run PowerShell scripts directly from CapaInstaller via a new execution engine.
- iOS: auto-create applications from the Apple VPP.
- Uninstall applications directly from the Software Catalog.
- Front-end service performance improvements.
Changed
- All services, including agent services, now require .NET Framework 4.6.2.
Removed
- Discontinued support for SQL Server 2008/2012, Windows Server 2008, and Windows XP.
[6.4.101] - 2022
Security
- Fixed a SQL injection vulnerability.
- Removed the ability to retrieve computer information from the public front-end (weak-password exposure).
[6.4] - 2022
Added
- OS Deployment peering: images and drivers are resolved from the local cache, then local-network peers, then the OS Deployment server — minimizing server load.
- CapaOne Reliability made available free to all CapaInstaller customers.
- Cleanup of custom inventory on reinstall.
Removed
- Discontinued support for Windows Server 2008 and Windows XP.
Fixed
- Numerous fixes across packaging, OS deployment, MDM enrollment, and the console.
[6.3] - 2021
Added
- CapaOne Reliability introduced — free for all CapaInstaller customers on upgrade.
- CapaOne Updater introduced — free for all CapaPacks customers on upgrade.
- CapaOne integration: jump directly from the CapaInstaller Console to a computer in CapaOne.
- Built-in Windows 11 hardware compatibility check during F12 installs.
- Ability to select which partition to capture.
- Management Portal: cancel a reinstall before it starts.
- MDM: unit command to set the time zone on supervised iOS devices (iOS 14 and later).
- Configurator App: company name in settings, shown with profile name and date when generating a QR code.
- Configurator App: Wi-Fi and NFC app permissions for Android 10 and 11.
Changed
- The Promote dialog no longer blocks the console.
- WinPE power policy is set to High Performance during OS deployment.
- Management Portal: removed Viewer features that required Admin or Manager rights.
Removed
- Discontinued support for Windows Server 2008 and Windows XP.
Fixed
- CiBaseAgent could not find the front-end URL.
- CiFrontEnd communication failed in relay setups.
- Deployment Template keys allowed duplicate names.
- Management Portal: crashed when filtering on date, the reporting-service link did not work, and only four installation types were shown when reinstalling.
- MDM: the SSL certificate could not be changed, and Apple VPP accounts could not be added.
- OSD: PXE boot found no hard drive, PROD was missing in Prestage, image deployment failed when
diskpart found no disk,
osinstalltypeswas undefined, and the built-in administrator could not log in. - Replicator service deployment was missing a file.
- VB script errors in
Job_InstallationCompleted.
[6.2.102] - 2021
Added
- Windows 11 and Windows Server 2022 support in OS Deployment (new ADK).
Changed
- The Promote dialog no longer blocks the console while promoting packages, images, and drivers.
Security
- Fixed an OS Deployment service flaw that allowed unauthorized file download from the host server.
[6.2.101] - 2021
Added
- Windows 11 and Windows Server 2022 support in OS Deployment (new ADK).
Security
- Fixed an OS Deployment service flaw that allowed unauthorized file download from the host server.
[6.2] - 2021
Added
- OS Deployment Templates: pre-stage reinstallation configurations (configured in CapaOne).
- Management Portal: reinstall computers, and let end-users initiate their own reinstall via OSD Templates.
- Management Portal: end-user computer information for users and support.
- iOS Update command issued from CapaInstaller.
- Resume partially downloaded files in the BaseAgent.
- Browse client log files through the BaseAgent web interface.
- New SDK package functions: Update Now, Promote, Delete, and Add to Business Unit.
Changed
- Windows agents are now built on .NET Framework 4.6 (and 3.5) — ensure 4.6 is installed before upgrading.
- Numerous BaseAgent improvements: faster first install, HTTP engine concurrency, WinPE TCP support, and file-job resume.
[6.1] - 2021
Changed
- Updated to the HTTP/2-based Apple Push Notification service (APNs) provider API (legacy binary protocol retired).
Removed
- Discontinued support for Windows Server 2008 and Windows XP.
[6.0.101] - 2020
Security
- Fixed a local privilege escalation in the CapaInstaller agent (cistub): a logged-on standard user could escalate their local user rights. Affected versions 5.0.100 through 6.0.100.
[6.0.100] - 2020
Added
- iOS: unit command to install an updated Enterprise Profile after SSL certificate renewal (Send Command → Install Enterprise Profile).
Changed
- OSD: existing group membership is preserved when a client is reinstalled into a different Business Unit or Container (still removed when the unit moves to a different CMP).
- OSD: units are created in the Business Unit’s CMP when CMP Integration is defined on the Business Unit; otherwise under the OS server’s CMP in Units/Computers and Devices.
Fixed
- The agent reported a wrong version number.
- Configurator App: QR codes could not be saved on Android 10 or shared via email.
- OSD: custom fields were not collected in inventory, not applied on reinstall, and failed under UEFI boot; the computer name was not reused after a disk replacement; WinPE inventory was missing network adapters; legacy boot prompted twice for the OSD point.
- OS Deployment console: froze when importing a model and when cancelling a CapaImage download or extraction; files stayed locked after a cancelled download.
- Management Portal: crashed when linking a group to a device; computers were not visible right after clicking Install in WinPE.
- Configuration Management: the CapaPack update indicator was missing, CapaPacks logging wrote to
console5.logevery 30 seconds, and Windows computers could be added to Android Enterprise. - ciBaseAgent: MD5 calculation error when caching files; now reports the current user when the InfoCenter starts.
- ciFrontend: enrollment from the public URL failed, the OS build was reported twice, and inventory was quadrupled.
- ciMDM: replication commands got stuck, and the rename command only changed the alias on the device, not in the console.
[5.8.100] - 2020
Added
- Compatibility with the Apple App Store for Custom Apps.
Fixed
- Android: the backup service was disabled, the operating system value was wrong, the APN setting was disabled, enrollment stopped at authentication, the agent renamed itself incorrectly, a nonstandard port was used, and devices were disconnected from Capa.
- Mac: application installation status was unreliable.
- Management Portal crashed in Lost Mode when the device had no GPS.
- Console: upgrading a CapaPack before entering a token gave an error, CapaPack creation failed, the SIM card in slot 2 was not shown, Apple DEP devices were sorted incorrectly, and the computer buffer was flushed even when configured not to.
- OSD/PXE: DHCP option 128 was empty, NAS on PXE failed, and the agent-configuration username was not retrieved.
- VPP app installation failed on unknown iOS models.
- The PerformanceGuard agent used for the CapaInstaller Utilization Index used too much CPU.
[5.7.101] - 2019
Added
- Vendor field editing in the App Store Profile.
- macOS Kernel Extension Policy support — distribute packages such as BitDefender to newer macOS versions.
- New iOS restriction, and support for updating expired SSL certificates on iOS devices.
Fixed
- Android: KME devices could not enroll as device owner, KME enrollment stopped with a processing error, Knox app blacklisting and kiosk mode misbehaved, enterprise app deployment created duplicate shortcuts, application downloads were slow, auto-configure failed on a non-default MDM port, restrictions were lost when upgrading the agent, and a Huawei tablet was shown as a laptop.
- OSD: the client failed without a DNS reverse lookup, mapping to a PXE boot server by name failed, packages were not set to waiting when reinstalling, and new NAS servers could not be created.
- Console: CapaPacks could be upgraded in a child point, multiple packages could not be set to
waiting, and copy relations failed on catalog-published packages and with a
GETUNITPARENTSerror. - Replicator: logs were looping, and
CapaInstaller Agent.xmlcould not be rebuilt. - Silent server install configured the OS Deployment service with a 10-second refresh interval instead of 60.
[5.7.100] - 2019
Changed
- SCEP now uses a CapaInstaller-hosted SCEP service instead of an on-premises one.
Fixed
- MDM service stability: unexpected stops and restarts, lost front-end communication after downtime, stalled status reporting, enrollment status never set to success, and a missing registry key preventing service start.
- MDM: volume licenses were not assigned to applications, iOS app deployment was unstable,
concurrent app installation defaulted to 1 (causing long install times), special characters
broke Apple app names and custom end-user agreements, and enrollment failed when the password
contained
=. - Android: the agent stopped at enrollment step 2, “no store account” was shown despite a configured store account, the File Transfer Payload placed files in the wrong folder, and the profile editor now states that Webclips require Android 8.0 or earlier.
- OSD/PXE: UEFI boot failed, PXE boot stalled on block retransmission, multiple network adapters were mishandled, the ciOSDeploy service leaked memory, and reinstall from the WebConsole did not work with UEFI.
- Console and portal: units ended up in the wrong business unit, HTTP restart failed for units without a container link, the name field was grayed out in Android Enterprise profiles, Apple DEP profile creation and synchronization failed, management-point deployment failed on Windows Server 2016, and the Management Portal could not select rows on tablets or show the macOS type.
- Scripts:
Prestage_processconfigurationfailed periodically, and run-once packages ran their post job again. - The Setup Wizard’s MD5 trigger locked the database, and macOS failed to deploy OneNote.