A note on the Compatibility charts:  There are several states of compatibility for FileWave clients:  

• "Compatible" (the first table) indicates that we have run QA regression tests against these operating system versions, and they are fully supported
• Not being on the Compatibility chart (such as macOS 12) does not mean that platform is not supported...it just means we did not actively test against it, but we do expect it to function
  • Support of any issues experienced specifically on these platforms would be considered on a case-by-case basis (but these cases are exceedingly rare)
• "Legacy" versions mean that we don't test, but we do provide a retro-version of a client so that the device can still report in  
  • There is NO support for these platforms beyond the availability of the older client, and in almost all cases these are for OSes that are no longer supported by the developer in question
• Lastly, items do fall out of support, such as Windows XP and probably soon the older Android APK client as examples, but we always include these items in our release notes

An additional note on third-party software inclusion, such as TeamViewer:

• Partnerships we have with third party providers have their own set of system requirements for those released applications.  We test against their most recent versions, and support of those applications is limited to third-party vendor specifications. 

Fully Tested by QA

• macOS 13, 14 (Intel and Apple Silicon)
• Debian 12.2 x86_64 (Note that any Debian 12.x is expected to work, and applying security updates may move you to a higher version.)
  

Expected to work

• macOS 11, 12 (Intel and Apple Silicon)

Virtual Appliances

• HyperV - The images are of Generation 1 type currently
• VMWare ESX - The images require vmx-19 support which means VMWare vCenter 7.0 Update 2 is the minimum version. ( https://knowledge.broadcom.com/external/article?legacyId=2007240 )
• VMWare Fusion
• VMWare Player and Workstation
• VirtualBox

Fully Tested by QA

• macOS 13, 14 (Intel and Apple Silicon)
• Windows 10 (Ent/Pro 21H1 and above), 11 (Ent/Pro 21H2 and above)

Expected to work

• macOS 11, 12 (Intel and Apple Silicon)

Legacy

• macOS 10.11 → Legacy Version 13.1.5
• macOS 10.12 → Legacy Version 14.0.2
• macOS 10.13 → Legacy Version 14.5.4
• macOS 10.14 → Legacy Version 14.8.0
  
• macOS 10.15 → Legacy Version 15.0.1

Fully Tested by QA

• iOS 16.1, 17
• iPadOS 16, 17
• tvOS 16, 17
• Android 13, 14 (EMM Client)
• Chromebook
  

Expected to work

• iOS 14, 15
• iPadOS 14, 15
• tvOS 14, 15
• Android 8 to 12 (EMM)
  

Legacy

• iOS 13 → Legacy Version 15.0.1
• iOS 10, 11, 12 → Legacy Version 13.1.5

Fully Tested by QA

• macOS 13, 14 (Intel and Apple Silicon)
• Windows 10 (Ent/Pro 21H1 and above), 11 (Ent/Pro 21H2 and above)

Expected to work

• macOS 11, 12 (Intel and Apple Silicon)

Fully Tested by QA

• macOS 13, 14 (Intel and Apple Silicon)
• Windows 10 (Ent/Pro 21H1 and above), 11 (Ent/Pro 21H2 and above)
  
• Debian 12.2 x86_64 (Note that any Debian 12.x is expected to work, and applying security updates may move you to a higher version.)
  

Virtual Appliances

• HyperV - The images are of Generation 1 type currently
• VMWare ESX - The images require vmx-19 support which means VMWare vCenter 7.0 Update 2 is the minimum version. ( https://knowledge.broadcom.com/external/article?legacyId=2007240 )
• VMWare Fusion
• VMWare Player and Workstation
• VirtualBox

The FileWave Imaging Virtual Server (IVS) is a special appliance that provides imaging support for Windows 10 and 11 UEFI and non-UEFI devices.

Virtual Appliances

• HyperV - The images are of Generation 1 type currently
• VMWare ESX - The images require vmx-19 support which means VMWare vCenter 7.0 Update 2 is the minimum version. ( https://knowledge.broadcom.com/external/article?legacyId=2007240 )
• VMWare Fusion
• VMWare Player and Workstation
• VirtualBox

Bug fixes and security update

FileWave 15.4.1 brings bug fixes and 3rd party open source component updates.

Unified backend for Model Update (Technical Preview)

Model Update is one of the key features of FileWave; Model Update allows you to apply complex changes to your organization only when you’re ready to deploy them and to revert unwanted changes. FileWave 15.3.0 brings a new Model Update mechanism, now running in a single component. This is the first step before new features and improvements can be added to Model Update. In this version, we focused on consistency with existing Model Update (to make sure nothing changes in your deployments) and on shortening update times. Model Update “v2” is a Technical Preview in 15.4.0, so it is not enabled by default.

Minor improvements (Central) 

• It is now possible to filter any table of Client Info dialog.
• Inventory Queries can now be imported and exported.
• Inventory Queries can easily be exposed to Grafana Dashboard
• json file format is now part of default editable file format list

More Dark Mode (Central)

Stand-alone assistants (Client Assistant, Booster Monitor...) now support dark mode

Software Update revisited

With the introduction of Declarative Device Management, Apple announced having fixed several issues related to OS update management, mainly on macOS. This is the opportunity for FileWave to revisit how Apple updates are handled, to remove old mechanisms which are either decommissioned by Apple or known to be not reliable, in order to simplify the user experience.

GDMF (Global Device Management Framework) as unique source of truth

One major issue with Software Update Apple side is the multiplicity of sources:

• Legacy systems (older macOS version) rely on an online sucatalog file containing metadata about updates, and used by softwareupdate command line system.
• MDM capable devices can report Available OS Updates at the time they are requesting it.
• GDMF is the new, simplified online catalog, about OS updates for Apple devices.

To ease the support of a broader set of devices, FileWave would combine all sources into one, which could lead to confusions for updates available in multiple sources, as they would show multiple times due to different identifiers.
Starting with FileWave 15.4, the only source of truth will be GDMF.

Which means:

• no more duplicated entries as long GDMF has unique entries per update
• only OS updates will be displayed - while old legacy catalog could contain system apps or system items like XProtect.

On macOS DDM replaces MDM
Legacy macOS versions allowed fine control on how to install updates using softwareupdate command line tool ; using this tool has been made deprecated by Apple several years ago and using MDM protocol was the recommended approach. Unfortunately, this mechanism was not only giving very limited control (MDM can kindly ask device to install the update, that’s it), but was not as reliable as it should. Unfortunately (again), Apple has not been able to fix reported issued with the MDM protocol, preferring a complete rewrite using the new DDM system.

Therefore, starting with FileWave 15.4, macOS OS updates will be managed only using DDM - older not supported or not working mechanisms are decommissioned. Which means:

• macOS OS updates can now be triggered and managed
• only OS-Update DDM capable devices can be managed, so macOS 14 (Sonoma) is the minimum version

Apple Spring Release 2024 support

New restrictions : 

• Allow Live Voicemail (iOS 17.2)
• force preserve ESIM on erase (iOS 17.2)
• allow market place installation (iOS 17.4, EU iPhones)
• allow web installation of apps (iOS 17.5, EU iPhones)

DEP new skip item (and corresponding Setup Assistant): Wallpaper

Installed Application List now reports Distributor Identifier to identify MarketPlace (EU iPhones)

Declarative Device Management (DDM)

FileWave 15.3 introduced the first support of Apple new DDM protocol. With 15.4, this support is expanded to:

• OS update (see above)
  
• Application Management (Technical preview as the functionality is still in developer preview Apple side and not complete)
  
• Status report expanded:
  
  • FileVault status
  • Battery Health report

Minor improvements

FileWave Central will now check, when renewing APN certificate, if the Common Name of the new certificate matches the one from the existing one, to avoid communication break.

API Changes

The most important thing to talk about is the change to the Chrombook APIs. When going to 15.4 you will need to make sure 2 APIs are enabled.  Firebase Cloud Messaging API and  Firebase Management API are required. In fact if you do not upgrade to 15.4 the old APIs will be disabled by Google on June 20, 2024 so you should be sure to upgrade. If you miss upgrading in time, it's ok. Just upgrade and then enable the APIs. Confirming Firebase APIs are enabled for Chromebooks (15.4+) has a script that on-premise customers can run but the easiest thing is just to click https://console.developers.google.com/flows/enableapi?apiid=firebase.googleapis.com,fcm.googleapis.com and make sure your Firebase project is picked and it'll enable the 2 APIs. You can do this before or after you update to 15.4. 

Chromebook commands in FileWave Anywhere

1. REMOTE_POWERWASH Command

• Description: System administrators can remotely powerwash ChromeOS devices, resetting them to factory settings for efficient troubleshooting and maintaining device security.
• Execution: Initiates the powerwash process, erasing all user data and configurations.

2. WIPE_USERS Command

• Description: System administrators can remotely and securely wipe user data from devices, ensuring compliance with data protection regulations and maintaining organizational security.
• Execution: Initiates the data-wiping process on all user accounts.

3. REBOOT Command

• Description: Introducing the REBOOT command, enabling system administrators to reboot devices for troubleshooting remotely and applying system updates.
• Execution: Initiates the remote reboot process on the selected devices.

4. Command History tab

• Description: Users can now view all information related to sending REMOTE_POWERWASH, WIPE_USERS, and REBOOT Commands in the Command History tab for Chromebook devices.

More details available → Powerwash / Wipe Users on ChromeOS (15.3+) & Reboot for ChromeOS (15.3+)

Error handling in case of missing permissions

If the user doesn’t have right permissions or looses permissions in the middle of executing an action, the appropriate error message will be shown in both FileWave Anywhere and Central:

Annotated fields in FileWave Anywhere

Admins using FileWave Anywhere now have the possibility of editing and bulk editing annotated fields in FileWave Anywhere.

Select device(s) → Actions → Edit Fields

Network Policy

It is now possible to set DomainSuffixMatch and UseSystemCA settings for EAP configure networks.

USB data transfer restriction

USB File transfer option has been added to both Default Policy and to Restriction Policy to allow USB data transfer on managed Android devices.

Winget integration - third-party patching made easy

Deploying applications available via Microsoft Winget was already possible using FileWave, but it required script manipulation and some steps to set up properly. FileWave 15.4 introduces a much simpler way to deploy applications to Windows devices.

Welcome new Winget Fileset

A new search assistant allows creating a Winget Fileset just by searching the name of the application to deploy.

• Winget will be automatically installed or updated if required
• With FileWave 15.4.0, the most recent package will always be installed at initial deployment
• You can define if the package will be upgraded at verify if a new version is available
• You can define if the package will be uninstalled if the association is removed - in case the package allows silent uninstallation

More...

FileWave Networking Imaging 15.4.x brings compatibility with FileWave 15.4.x.

• PXE Kernel: 6.7.9
• Buildroot: 2024.02
  

Company Information

With 15.4.0 - Company information are now available in Desktop versions of the Kiosk (macOS, Windows):

Reinstall and Go To App Store actions

Reinstall and Go To App Store actions have been added in Fileset Details and Browse Filesets views:

• Go To App Store button is visible for all VPP filesets.

• Reinstall button is visible for non-VPP filesets in the following scenarios:

  • If the fileset is already installed.

  • If the installation of the fileset failed.

New design for Join Organization modal

New organization modal is showing both active and retired VPP invites. Red indicator is shown only if the action is required (pending organization(s) to join).

The following features have been deprecated from FileWave 15.4.0. They are present but will be removed in a future release:

• CentOS - As CentOS 7 being End-Of-Life on June 30, 2024, FileWave is available and supported on Debian. New versions of FileWave won't be released on CentOS after CentOS is EOL. 
• Windows 32-bit - With FileWave 15.3, the new Kiosk was already running only on 64-bit Windows. FileWave 15.4 can theoretically run on Windows 32-bit without Kiosk (but is not tested by our QA), but 32-bit support will be completely removed in FileWave 15.5.
• Kiosk 1.0 for macOS/Windows - The original Kiosk is still bundled with macOS/Windows clients, but in a future version, this will be removed because Kiosk 2.0, introduced in FileWave 15.3.0, will be the only Kiosk. 

We encourage you to provide product feedback if you have any concerns: FileWave Product Management

The following features have been removed from FileWave 15.4.1:

• CentOS - As CentOS 7 being End-Of-Life on June 30, 2024, FileWave is available and supported on Debian. New versions of FileWave won't be released on CentOS after CentOS is EOL.

The following features have been removed from FileWave 15.4.0:

• Compatibility Mode: Communication between FileWave components is encrypted and has relied on TLS certificates for several years now. Back in the day, to facilitate the transition, a Compatibility Mode was introduced, allowing clients running versions older than 13.1 to still be managed by a more recent server despite not supporting proper encryption. It is now time to drop compatibility mode to enforce secured communications. This means the minimum OS versions that can be enrolled are macOS 10.11 and Windows 7 SP1 - but it is obviously not recommended to run outdated, unsecured end-of-life Operating Systems.
• Legacy macOS Imaging: Changes made by Apple with APFS, T2 chips, and Apple Silicon have long been part of macOS device imaging history. With the deprecation of Compatibility mode, the last reason for keeping macOS imaging options in FileWave is gone.
  

• Google FCM Deprecation Support:

  • • Legacy Firebase Cloud Messaging (FCM) APIs are deprecated by Google.

    • Enable (if are not already enabled) the following API to manage ChromeOS on FileWave:

      • Firebase Cloud Messaging API

      • Firebase Management API

      • More...
• White Labeling of Chrome Extension: This is removed as a process. More...
  

Several 3rd party have been updated, for bug or security issue fixes or new features. Mainly:

• OpenSSL 3.2.2

• Apache 2.4.61

Bug fixes:

• FWRD-1530 Fixed an issue where fwxserver (admin) process could crash under DOS attempt
• FWRD-13304 Fixed an issue in hosted (cloud) environment where default log file level would be debug
• FWRD-13414 Fixed an issue where internal notification system could be blocked causing various issues like blocking model update
• FWRD-13422 Fixed an issue where upgrade to 15.4 could fail due to remaining macOS Imaging associations
• FWRD-13451 Fixed an issue where restarting server during Model Update would not be properly handled
• FWRD-13484 Fixed incorrect macOS version numbers in German Central admin
• FWRD-13516 Fixed an issue where shared iPad users could not be deleted from Client Info
• FWRD-13519 Fixed incorrect macOS version numbers in Chinese, Japanese and Korean Central admin
• FWRD-13525 Fixed an issue where tvOS updates would be visible in iOS list
  

Bug fixes:

• FWRD-990 Fixed issue with expanding groups and clones on Devices View in FileWave Anywhere.
• FWRD-2307 Fixed issue with IP addresses (100.115.92.129 and 100.115.92.133) not being ignored/filtered on ChromeOS client 
• FWRD-2318 Ensure Booster Monitor uses TSL encrypted connection
• FWRD-2706 Fixed an issue where Windows Upgrade Fileset requirements would not exclude unsupported Windows versions
• FWRD-2877 Fixed an issue where Up and Down buttons would not be properly updated after changing selection in Inventory Query Builder Criteria
• FWRD-3532 Fixed an issue where searching in FileWave Central Profile Editor would not keep text case in highlighted text
• FWRD-3537 Fixed an issue where File Browser assistant window title would show incorrect search type
• FWRD-3649 Fixed cosmetic issue related to tooltip on New Document fileset dialog
• FWRD-3661 Fixed incorrect context menu on Cart items
• FWRD-3671 Fixed an issue where Scripts section would not be properly saved in Login Window profile
• FWRD-3676 Fixed an issue where Export Current Tab would export twice iOS Client info tables
• FWRD-3732 Fixed a performance issue when changing a group permission with "Propagate to children" enabled
• FWRD-3837 Fixed an issue where Single App Mode Profile for iOS could not be edited
• FWRD-4228 Fixed an issue where Central Admin translations could not be loaded properly
• FWRD-4366 Fixed an issue where LDAP extraction would not work properly on macOS server
• FWRD-11553 Fixed issue with visibility of Minimize, Maximize and Close buttons in Windows Kiosk.
• FWRD-12131 Fixed an issue where Return To Service options would be available for tvOS devices
• FWRD-12213 Fixed inconsistent wording for fileset status between Fileset Report and Client Info
• FWRD-12449 Fixed an issue where Policy editor would present misleading Close button instead of Save
• FWRD-12457 Fixed an issue where ActivationLock could not be removed if the device has been removed from the model
• FWRD-12474 Fixed UI issue - Search icon when no items found is now centered in Kiosk.
• FWRD-12536 Fixed an issue where a client in conflict could never be presented in the Conflict Solver Dialog
• FWRD-12626 Fixed issue where emptying Asset ID field in Google Admin showed non empty Annotated Assed ID field in Central Admin.
• FWRD-12638 Fixed a cosmetic issue where errors in Inventory Query Builder would not be marked as red
• FWRD-12646 Fixed issue with favicons in Grafana when opening Grafana from FileWave Anywhere.
• FWRD-12690 Fixed a backend issue where removing IDP setup could lead to recurring errors in server logs
• FWRD-12693 Fixed an issue where Search Client in FileWave Anywhere could fail
• FWRD-12721 Fixed an issue where Google Playstore Managed Properties would not be displayed correctly
• FWRD-12780 Fixed issue with showing fileset with different revisions in Kiosk.
• FWRD-12805 Fixed incorrect selection background color in Software Update Dialog
• FWRD-13014 Fixed an issue where Reinstall fileset would not work for desktop devices if fileset ID is higher than 2147483647
• FWRD-13020 Fixed behavior of Requires Reboot indicator in Kiosk.
• FWRD-13026 Fixed an issue where importing profiles like MDM-type profile could prevent creating DEP Profile
• FWRD-13030 Fixed an issue where "Renew client token" would not work for EMM enrolled Android devices (Central)
• FWRD-13055 Fixed an issue where Model Update could fail at EMM Manifest build step (Model Update v2 tech preview)
• FWRD-13064 Fixed an issue where fileset status for excluded from deployment devices could be incorrect (Model Update v2 Technical Preview)
• FWRD-13069 Fixed incorrect font color in new license from Fileset dialog (Dark Mode)
• FWRD-13070 Fixed issue for setting Custom Fields values after Client Enrollment in FileWave Anywhere.
• FWRD-13074 Fixed an issue where server logs would contain long exception when trying to send APN for non properly enrolled Apple device
• FWRD-13089 Fixed issue with VC Redist 64 not being properly installed during upgrade on Windows.
• FWRD-13091 filewave_web_model_update_total expression is missing from prometheus
• FWRD-13099 Fixed an issue where Software Update list would only contain 100 entries in Client Info (Central)
• FWRD-13108 Fixed an issue where enrolling a booster would not work if FileWave client would be installed on the same device
• FWRD-13110 Chromebook Commands added to Audit Log.
• FWRD-13115 Fixed an issue where specific serial numbers on Windows would prevent enrolling boosters due to conflict detection
• FWRD-13121 Fixed an issue where cell text font size could briefly change when expanding treeview (Central)
  

macOS Installers DMG (md5: c17dfcaca37616a8d52886bcaa2f8c5f)
macOS Upgrade Fileset (md5: 22d8fc75877615edb9b1d006d7218f50)
macOS Admin (md5: 158b6f17e4af2dac34bfece5afac2650)
macOS Booster (md5: 411b3ad5642796834552790dc3bdea87)
macOS Server (md5: ac88a1928ce8f776184ff2d772fae1fd)
macOS Client (md5: 0dcfc145b1a349ad3ef2099d5ef03cb1)

Remember that to upgrade macOS FileWave clients you should use the Upgrade Fileset. Never deploy the macOS Client listed above to an existing device. It is intended only for manual initial installs, and even for those you are better off creating an installer at https://custom.filewave.com 

Windows Upgrade Fileset (md5: 48535fe84f23b864f47f4511c301613a)
Windows Admin (md5: c1fa0c30e3b746e0d6910d4136b74d4f)
Windows Booster (md5: 4087563bf334f7483deeafdd33a735bf)
Windows Client (md5: 392bfdebb3fd79252831a7cd23940b32)

Remember that to upgrade Windows FileWave clients you should use the Upgrade Fileset. Never deploy the Windows Client listed above to an existing device. It is intended only for manual initial installs, and even for those you are better off creating an installer at https://custom.filewave.com 

Debian Linux Installers (md5: 125001faf4b9c37ff93ac33e85d8bcda)
Debian Linux Server (md5: d53ef141ae4d489b03f347970391bb03)
Debian Linux Booster (md5: 927d4ec39b2aa7f909976558876eb907)

Upgrading the FileWave Server

Remember, if you are using a FileWave appliance that before 15.4.0 the SSH access was with the user "root" and for any appliance setup from 15.4.0 or later the user is "filewave" and you would have been forced to set the password on first login.

To install or upgrade the FileWave Server, use the following :

# Ensure you're using sudo for the commands. 
# 1. OS Upgrades:
sudo apt update -y
sudo DEBIAN_FRONTEND=noninteractive apt-get upgrade -y -o Dpkg::Options::="--force-confold"
# 2. Install Essential Tools:
sudo apt install -y zip net-tools gdebi-core
# 3. Download the FileWave Server package:
wget "https://fwdl.filewave.com/15.4.1/fwxserver_15.4.1_amd64.deb" -P /tmp
# 4. Install the FileWave Server using gdebi:
sudo gdebi -n /tmp/fwxserver_15.4.1_amd64.deb
# 5. Reboot the system to complete the installation:
sudo reboot

Upgrading a Booster
To install or upgrade the FileWave Booster, use the following or Booster Auto-Upgrade :

# Ensure you're using sudo for the commands. 
# 1. OS Upgrades:
sudo apt update -y
sudo DEBIAN_FRONTEND=noninteractive apt-get upgrade -y -o Dpkg::Options::="--force-confold"
# 2. Install Essential Tools:
sudo apt install -y zip net-tools gdebi-core
# 3. Download the FileWave Booster package:
wget "https://fwdl.filewave.com/15.4.1/fwbooster_15.4.1_amd64.deb" -P /tmp
# 4. Install the FileWave Booster using gdebi:
sudo gdebi -n /tmp/fwbooster_15.4.1_amd64.deb
# 5. Reboot the system to complete the installation:
sudo reboot

Upgrading a IVS
To upgrade the FileWave IVS, use the following :

# Ensure you're using sudo for the commands. 
# 1. OS+IVS Upgrades:
sudo apt update -y
sudo DEBIAN_FRONTEND=noninteractive apt-get upgrade -y -o Dpkg::Options::="--force-confold"
# 2. Make sure the IVS package was installed (Note this may not show anything is needed if you did this in a past update)
sudo apt install filewave-ivs
# 3. Reboot the system to complete the installation:
sudo reboot

Debian Linux: It is preferred that you use this for a new server, booster or IVS.
VMware and VirtualBox (OVA) Server Appliance (md5: a8f39b3e0cdc449ee801a1636b1e1751 )
VMware and VirtualBox (OVA) Booster Appliance (md5: d784682c63e9360f160381c9994f7bb3)
VMware and VirtualBox (OVA) Imaging Appliance (md5: d877dc4fe91d51c1ef86400a427412fb)

To get started with the FileWave Server appliance please see: 1. Installation and Setup | FileWave KB
For a Booster you would setup networking just like you do with Server and then: Booster Installation | FileWave KB
For more information about importing the IVS appliance please see: Importing FileWave Appliances

Debian Linux: It is preferred that you use this for a new server, booster or IVS.
Hyper-V (VHD) Server Appliance (md5: 3ee1f54176721ebc7a161e30964fb957)
Hyper-V (VHD) Booster Appliance (md5: 3d4df08ea89176579e5e950af7c51ad9)
Hyper-V (VHD) Imaging Appliance (md5: dc67041f5103ac109b5b7228257cfe96)

To get started with the FileWave Server appliance please see: 1. Installation and Setup | FileWave KB
For a Booster you would setup networking just like you do with Server and then: Booster Installation | FileWave KB
For more information about importing the IVS appliance please see: Importing FileWave Appliances

A note on the Compatibility charts:  There are several states of compatibility for FileWave clients:  

• "Compatible" (the first table) indicates that we have run QA regression tests against these operating system versions, and they are fully supported
• Not being on the Compatibility chart (such as macOS 12) does not mean that platform is not supported...it just means we did not actively test against it, but we do expect it to function
  • Support of any issues experienced specifically on these platforms would be considered on a case-by-case basis (but these cases are exceedingly rare)
• "Legacy" versions mean that we don't test, but we do provide a retro-version of a client so that the device can still report in  
  • There is NO support for these platforms beyond the availability of the older client, and in almost all cases these are for OSes that are no longer supported by the developer in question
• Lastly, items do fall out of support, such as Windows XP and probably soon the older Android APK client as examples, but we always include these items in our release notes

An additional note on third-party software inclusion, such as TeamViewer:

• Partnerships we have with third party providers have their own set of system requirements for those released applications.  We test against their most recent versions, and support of those applications is limited to third-party vendor specifications. 

Fully Tested by QA

• macOS 13, 14 (Intel and Apple Silicon)
• Linux CentOS 7.9 x86_64
• Debian 12.2 x86_64 (Note that any Debian 12.x is expected to work, and applying security updates may move you to a higher version.)
  

Expected to work

• macOS 11, 12 (Intel and Apple Silicon)

Fully Tested by QA

• macOS 13, 14 (Intel and Apple Silicon)
• Windows 10 (Ent/Pro 21H1 and above), 11 (Ent/Pro 21H2 and above)

Expected to work

• macOS 11, 12 (Intel and Apple Silicon)

Legacy

• macOS 10.11 → Legacy Version 13.1.5
• macOS 10.12 → Legacy Version 14.0.2
• macOS 10.13 → Legacy Version 14.5.4
• macOS 10.14 → Legacy Version 14.8.0
  
• macOS 10.15 → Legacy Version 15.0.1

Fully Tested by QA

• iOS 16.1, 17
• iPadOS 16, 17
• tvOS 16, 17
• Android 13, 14 (EMM Client)
• Chromebook
  

Expected to work

• iOS 14, 15
• iPadOS 14, 15
• tvOS 14, 15
• Android 8 to 12 (EMM)
  

Legacy

• iOS 13 → Legacy Version 15.0.1
• iOS 10, 11, 12 → Legacy Version 13.1.5

Fully Tested by QA

• macOS 13, 14 (Intel and Apple Silicon)
• Windows 10 (Ent/Pro 21H1 and above), 11 (Ent/Pro 21H2 and above)

Expected to work

• macOS 11, 12 (Intel and Apple Silicon)

Fully Tested by QA

• macOS 13, 14 (Intel and Apple Silicon)
• Windows 10 (Ent/Pro 21H1 and above), 11 (Ent/Pro 21H2 and above)
• Linux CentOS 7.9 x86_64
• Debian 12.2 x86_64 (Note that any Debian 12.x is expected to work, and applying security updates may move you to a higher version.)
  

The FileWave Imaging Virtual Server (IVS) is a special appliance that provides imaging support for Windows 10 and 11 UEFI and non-UEFI devices.

The IVS appliance is Debian 12 and CentOS 7.9 based and can be run on:

• VMWare VSphere ESX installations
• VMWare Fusion
• VMWare Player and Workstation
• Virtual Box

Historically the imaging appliance also supported macOS imaging, but the process for imaging Macs has changed from macOS 10.13.

Central goes Dark

FileWave Central introduces a new Dark Mode UI - for FileWave admins working at night ! More...

Unified backend for Model Update (Technical Preview)

Model Update is one of the key features of FileWave; Model Update allows you to apply complex changes to your organization only when you’re ready to deploy them and to revert unwanted changes. FileWave 15.3.0 brings a new Model Update mechanism, now running in a single component. This is the first step before new features and improvements can be added to Model Update. In this version, we focused on consistency with existing Model Update (to make sure nothing changes in your deployments) and on shortening update times. Model Update “v2” is a Technical Preview in 15.3.0, so it is not enabled by default.

Improved Client / Booster / Server communication

FileWave 11 introduced Booster Routing, a feature that allows off-loading direct traffic to the server by routing messages via Booster. This feature provides additional security if you only allow boosters to connect to your server and have all your devices only reach boosters. With FileWave 15.0, the internal notification system has switched entirely to NATS, replacing ZMQ; NATS, in addition to built-in security features and improved performances, brings much more flexibility and can then be used in more areas. FileWave 15.3 can now use NATS as the communication protocol for all maintenance messages between client and server. Fileset delivery still uses the classic protocol, but messages like Fileset status or check-in now use the lightweight and fast delivery mechanism offered by NATS. 

Declarative Device Management

FileWave 15.3.0 is the first implementation of Apple’s new device management mechanism, Declarative Device Management (DDM). It will use the new Status Report for applications, providing quick and accurate Fileset Status updates for apps installed via MDM (App Store apps) on compatible iOS, iPadOS, and tvOS devices.

Therefore, FileWave 15.3.0 contains the foundations for support for more DDM features, such as software update management or application installation via DDM, which are being built and will be provided in coming releases.

More...

We are excited to announce the expansion of Chromebook Management, addressing significant performance improvements and introducing new features to enhance user experience.

Commands

1. REMOTE_POWERWASH Command

• Description: System administrators can remotely powerwash ChromeOS devices, resetting them to factory settings for efficient troubleshooting and maintaining device security.

• Execution: Initiates the powerwash process, erasing all user data and configurations.

2. WIPE_USERS Command

• Description: System administrators can remotely and securely wipe user data from devices, ensuring compliance with data protection regulations and maintaining organizational security.

• Execution: Initiates the data-wiping process on all user accounts.

3. REBOOT Command

• Description: Introducing the REBOOT command, enabling system administrators to reboot devices for troubleshooting remotely and applying system updates.

• Execution: Initiates the remote reboot process on the selected devices.

4. Command History tab

• Description: Users can now view all information related to sending REMOTE_POWERWASH, WIPE_USERS, and REBOOT Commands in the Command History tab for Chromebook devices.

More details available → Powerwash / Wipe Users on ChromeOS (15.3+) and Reboot for ChromeOS (15.3+)

Bug Fixes and Improvements

1. Reduced Chromebook Sync Time

Issue: Some users reported extended sync times, with an average duration of around 15 minutes for certain customers. Sync was only performed once per day.

Resolution: We have addressed this concern by implementing optimizations that result in a 30% reduction in sync time. Chromebook syncing is now more efficient and streamlined, ensuring a faster and smoother experience.

2. Manual Sync Time Configuration

Issue: Users had limited control over the timing of Chromebook sync, with synchronization occurring only once daily.

Resolution: In response to user feedback, we have introduced a new feature that allows users to set up manual sync times. Sync intervals can be configured between 1 and 24 hours. If no specific time is set, the default sync interval remains at 24 hours. This enhancement provides greater flexibility in managing Chromebook updates according to your organization's needs.

3. Custom Field(s) Annotation Sync

Issue: Changes to annotated fields were causing discrepancies when updating the model.

Resolution:

• Annotated fields in Edit Custom Fields now update immediately upon clicking Save, independently of the Model Update, ensuring swift and accurate changes.

• The Chromebook Data tab in Device Details is removed. Users can access Chromebook-related info by double-clicking on the device, eliminating the need for an additional tab.

• The Device Details View now offers a more informative and user-friendly experience for Annotated fields.

• Annotated fields are seamlessly displayed and editable in the Edit Custom Fields dialog, like any other custom fields.

• A convenient button in the Client Info dialog allows users to sync annotated fields (one way: Google to FileWave) individually for specific devices, offering granular control over data synchronization.

These comprehensive resolutions address the reported issues, providing a seamless and efficient experience in managing Chromebooks, with real-time syncing of annotated fields and enhanced control over synchronization intervals.

FileWave IVS Appliance is now based on Debian!

FileWave Networking Imaging 15.3.x brings compatibility with FileWave 15.3.x.

• PXE Kernel: 6.6.7
• Buildroot: 2023.11
  

App portal for iOS/iPadOS

Evolution of App Portal for iOS/iPadOS: Transition from Technical Preview to Official Release

In our commitment to continuous improvement and user-centric development, we are excited to announce a significant milestone in the journey of App Portal for iOS/iPadOS. Starting from version 15.3.0, App Portal has officially graduated from its technical preview phase, now standing as a fully realized and polished application.

Key Points:

1. From Technical Preview to Real App:
   In previous releases, App Portal for iOS/iPadOS was introduced as a technical preview, allowing users to explore its functionalities and provide valuable feedback. With version 15.3.0, we are thrilled to elevate App Portal to the status of a fully-fledged, official application.

2. Enhancements and Stability:
   The transition signifies not only the culmination of user feedback but also substantial enhancements and optimizations to ensure the stability, reliability, and performance of the App Portal for iOS/iPadOS.

3. A Seamless User Experience:
   Users can now enjoy a seamless and refined experience with App Portal, harnessing its full potential for efficient and intuitive mobile application management.5.3.0 and beyond.

More details here → Automatic updating of iOS Kiosk (15.3+)

Desktop Kiosk for macOS and Windows

The transition from App Portal version 15.0.0 to version 15.3.0 represents a significant evolution, akin to the transformative experience observed when comparing the Android Play Store and the App Store. This upgrade places a primary emphasis on completely overhauling the user interface (UI) to provide a sleek, contemporary, and exceptionally intuitive platform, aligns with our users' evolving expectations.

While version 15.0.0 laid the groundwork for functionality, version 15.3.0 responds to user feedback and industry trends, recognizing the demand for a more sophisticated and streamlined UI. Here's how the new version draws inspiration from the design excellence of both the Android Play Store and the App Store:

1. Unified Design Paradigm:
   The UI design seamlessly unifies elements from both the Android Play Store and the App Store, creating a harmonious blend of familiarity and innovation.

2. Intuitive Navigation:
   Building on the success of version 15.0.0, version 15.3.0 introduces a reimagined navigation system with intuitive menus, recognizable icons, and seamless flows, akin to the ease of navigation in both app marketplaces.

3. Visual Delight:
   The new UI isn't just functional; it's a visual delight with engaging animations, subtle transitions, and tastefully curated visuals, providing an immersive experience similar to the Android Play Store and the App Store.

4. Enhanced Customization:
   Version 15.3.0 brings enhanced customization options, allowing users to personalize their interface similar to the Android Play Store and the App Store, fostering a sense of ownership over their app experience.

5. Responsive Design:
   Like the responsiveness of the Android Play Store and the App Store across devices, our app now adapts seamlessly to various screen sizes, ensuring a consistent and optimized experience.

Additionally, with version 15.3.0, we've introduced some enhancements. Users will now receive clear indications when installing certain filesets that a reboot is required for optimal performance. This improvement ensures transparency and empowers users with the necessary information for a seamless experience. By incorporating these enhancements, App Portal solidifies its commitment to delivering a cutting-edge, user-friendly experience that aligns with evolving user expectations and industry trends. Version 15.3.0 sets the stage for a future where App Portal evolves dynamically, staying at the forefront of user-centric innovation.

More details here → Setting the Primary Color, Name and Logo in App Portal (15.3+)

The following features have been deprecated from FileWave 15.3.0. They are present but will be removed in a future release:

• CentOS: As CentOS 7 being End-Of-Life on June 30, 2024, FileWave is available and supported on Debian. FileWave won't be released on CentOS after CentOS is EOL.

• Compatibility Mode: Communication between FileWave components is encrypted and relies on TLS certificates for several years now. Back in the day, to facilitate the transition, a Compatibility Mode was introduced, allowing clients running versions older than 13.1 to still be managed by a more recent server despite not supporting proper encryption. It is now time to drop compatibility mode to enforce secured communications. This means the minimum OS versions that can be enrolled are macOS 10.11 and Windows 7 SP1 - but it is obviously not recommended to run outdated, unsecured end-of-life Operating Systems.

• OS Updates on Apple Devices: Managing OS updates on Apple devices has evolved significantly. Initially relying on manual commands and customizable catalogs, the process transitioned to MDM protocols, introducing challenges in reliability and control. Apple's introduction of GDMF and the more recent DDM protocol aims to simplify and enhance the reliability of OS update management. FileWave 15.4.0 will adopt GDMF for update reporting and switch to DDM for macOS updates (Sonoma and later), while continuing to use MDM for older iOS/iPadOS versions. This update signifies FileWave's commitment to improving the management of OS updates, addressing past issues and leveraging Apple's latest technologies for a streamlined process. More...
  
• Legacy macOS Imaging: Changes made by Apple with APFS, T2 chips and Apple Silicon, Imaging macOS devices has been part of history for a long time. With the deprecation of Compatibility mode, the last reason for keeping macOS imaging options in FileWave are gone.
  

• FCM Deprecation Support:

  • Legacy Firebase Cloud Messaging (FCM) APIs are being deprecated by Google.
  • FileWave will support this deprecation in the official release of 15.4.
  • More...

The following features have been removed from FileWave 15.3.0:

• As the new desktop kiosk is based on 64-bit libraries, FileWave 15.3.0 will not be supported on Windows 32-bit platforms. FileWave Agent (fwcld) is still a 32-bit executable, meaning there is no change in how Filesets are deployed, and scripts are executed. Moving to a 64-bit application is expected to happen later this year.

Bug fixes:

• FWRD-12751 Tray icon for Kiosk v1 is visible if settings.ini file exists without hide_system_tray setting

• FWRD-12764 Fixed an issue where database constraints could be reported as missing after 15.3.0 upgrade

• FWRD-12782 Fixed an issue where FileWave Central could crash when connection to server is lost

• FWRD-12792 Made sure scheduler locks are cleared when server restarts to avoid locking issues

• FWRD-12794 Fixed an issue where Model Update would be blocked by partial filesets

• FWRD-12831 Fixed authentication issue with API call to update model

• FWRD-12834 Fixed an issue where Updating Model would not be logged in Audit Log
  

Apache 2.4.59

Several 3rd party have been updated, for bug or security issue fixes or new features. Mainly:

• OpenSSL 3.2.1

• Python 3.11.7

• Django 5.0.1

• Postgresql 12.18

Bug fixes:

• FWRD-1439 Fixed an issue where Custom Field Dialog could incorrectly detect changes
  
• FWRD-1440 Fixed an issue where automatically created LDAP based smart groups could be modified
  
• FWRD-2118 Fixed an issue where changing the revision of a fileset dependency would remove and reinstall the dependency instead of only updating differences between revisions
  
• FWRD-2445 Fixed an issue where it would be possible to change permission of a fileset group for which current admin does not have write permission
  
• FWRD-3173 Improved logs when using unsupported image type for iOS WallPaper
  
• FWRD-3365 Fixed an issue where Preferences would show incorrect description for preferred licensing option
  
• FWRD-3458 Made German translations regarding dependencies clearer
  
• FWRD-3800 Fixed an issue where enrolling two IVS would fail due to duplicated fingerprint
  
• FWRD-4232 Fixed UI issue in Device Info view in FileWave Anywhere.
  
• FWRD-4339 Fixed a potential issue where Windows Upgrade Fileset would fail to update Windows client
  
• FWRD-4715 Fixed handling multiple Organization Invite in Registration modal in Kiosk for iOS/iPadOS.
  
• FWRD-11165 Fixed issue with logo qualities in Kiosk for iOS/iPadOS.
  
• FWRD-11403 Fixed font in Kiosk UI.
  
• FWRD-11414 Fixed bug regarding error message related to Faild to fetch data in iOS/iPadOS App Portal.
  
• FWRD-11489 Fixed bug by Chromebooks sync time - it is now reduced by 30%. Also there is new field in FileWave Central Preferences where setup shorter sync interval (in hours) is possible.
  
• FWRD-11581 Fixed an issue where legacy dashboard would report incorrect disk space if server data folder is not on the same volume as root
  
• FWRD-11594 Fixed a cosmetic issue related to Country names displayed by App Store dialogs
  
• FWRD-11750 Fixed an issue where logs could be incorrectly be filled by entries related to errors when synchronizing VPP apps metadata after 9646 error
  
• FWRD-11776 Improved internal scheduler startup phase
  
• FWRD-11810 Fixed issues/added functionalities with managing LDAP Smart Groups in FileWave Anywhere.
  
• FWRD-11830 Fixed an issue on macOS Sonoma where client assistant and client monitor would not use the same device name
  
• FWRD-11867 Fixed a potential issue where invalid request could be made to VPP service, leading to error 9602
  
• FWRD-11879 Improved how VPP errors 9646 are handled
  
• FWRD-11973 Fixed minor UI issues in Filtering section of Kiosk for iOS/iPadOS.
  
• FWRD-12001 Fixed an issue where query builder would not allow using numbers larger than 2147483647
  
• FWRD-12007 Fixed a cosmetic issue where Association option fields would have inconsistent width
  
• FWRD-12104 Fixed an issue related to Dock profile where Merge with User's dock option would not be applied properly
  
• FWRD-12169 Fixed an issue where inventory reports would return incorrect data due to the way client id is retrieved
  
• FWRD-12171 Fixed issue regarding Devices view load being slow in FileWave Anywhere.
  
• FWRD-12214 Debian appliances have now also 500 GB of free space
  
• FWRD-12336 Fixed an issue where Webmin would not be properly configured on Debian appliances
  
• FWRD-12338 Fixed an issue where rpm installer would not properly stop upgrade in preflight step if a Database error is detected
  
• FWRD-12415 Fixed an issue where Associated Domains options would not be properly applied to Enterprise Applications (IPA)

macOS Installers DMG (md5: dc72710e565f127fc608bfb8aa3f5f14)
macOS Upgrade Fileset (md5: 0e7cf29cb759e8a3105f86e3604c48d1)
macOS Admin (md5: 180ed957391f297760832496b7a03a95)
macOS Booster (md5: dc50b5d514f718cc1741e0f08f6a0239)
macOS Server (md5: 1df7ceed1a5deda8d484724ad0dc5789)
macOS Client (md5: e147133402afb9339d0e343912f591f5)

Remember that to upgrade macOS FileWave clients you should use the Upgrade Fileset. Never deploy the macOS Client listed above to an existing device. It is intended only for manual initial installs, and even for those you are better off creating an installer at https://custom.filewave.com 

Windows Upgrade Fileset (md5: 61924c93173e63a30aa3357a03bcd752)
Windows Admin (md5: 4e00be9d1fc57f066a7affd2c37df5dd)
Windows Booster (md5: 6770f46614774262a77ad5cd2d5127fb)
Windows Client (md5: 323d2b13e4af04357e3c35ebea914213)

Remember that to upgrade Windows FileWave clients you should use the Upgrade Fileset. Never deploy the Windows Client listed above to an existing device. It is intended only for manual initial installs, and even for those you are better off creating an installer at https://custom.filewave.com 

Kiosk on iOS / iPadOS is now automatically installed from a CDN. (Read More)

The FileWave Inventory extension for Chromebook has to be installed via the Google Admin Console for your domain. Please see Quickstart Guide for Chromebooks for detailed instructions

White Labeling the Chromebook Extension (md5: 740f1a780bed1d1a25d01a08ae2e53c9)

Debian Linux Installers (md5: d87606803638c028beac5f8afc3bbb64)
Debian Linux Server (md5: c35f56e1c81c577e68a6edcc533d5fc9)
Debian Linux Booster (md5: 1b0cfeff43386dd5a36f62398016ffd2)

Upgrading the FileWave Server

To install or upgrade the FileWave Server, use the following :

# Login via SSH as root or ensure you're using sudo for the commands

# 1. OS Upgrades:
sudo apt update -y
sudo DEBIAN_FRONTEND=noninteractive apt-get upgrade -y -o Dpkg::Options::="--force-confold"

# 2. Install Essential Tools:
sudo apt install -y zip net-tools gdebi-core

# 3. Download the FileWave Server package:
wget https://fwdl.filewave.com/15.3.1/fwxserver_15.3.1_amd64.deb -P /tmp

# 4. Install the FileWave Server using gdebi:
sudo gdebi -n /tmp/fwxserver_15.3.1_amd64.deb

# 5. Reboot the system to complete the installation:
sudo reboot

Upgrading a Booster
To install or upgrade the FileWave Booster, use the following :

# Login via SSH as root or ensure you're using sudo for the commands

# 1. OS Upgrades:
sudo apt update -y
sudo DEBIAN_FRONTEND=noninteractive apt-get upgrade -y -o Dpkg::Options::="--force-confold"

# 2. Install Essential Tools:
sudo apt install -y zip net-tools gdebi-core

# 3. Download the FileWave Booster package:
wget https://fwdl.filewave.com/15.3.1/fwbooster_15.3.1_amd64.deb -P /tmp

# 4. Install the FileWave Booster using gdebi:
sudo gdebi -n /tmp/fwbooster_15.3.1_amd64.deb

# 5. Reboot the system to complete the installation:
sudo reboot

Debian Linux: It is preferred that you use this for a new server, booster or IVS.
VMware and VirtualBox (OVA) Server Appliance (md5: 5404fe6160437b332da674ba6bf69ba7 )
VMware and VirtualBox (OVA) Booster Appliance (md5: 6ba9ce6b69712afc069fc40fef615c12)
VMware and VirtualBox (OVA) Imaging Appliance (md5: 2795e0258c24f19b1780b867dfa04cd2)

CentOS Linux:
VMware and VirtualBox (OVA) Server Appliance (md5: c8f1cc7cc2d581cd1dda8e229dab437f)
VMware and VirtualBox (OVA) Booster Appliance (md5: 814be015055f1e77418f2f34e8702ed0)
VMware and VirtualBox (OVA) Imaging Appliance (md5: 2b1776bb9a6bcacaf51b27c096f78d4f)

To get started with the FileWave Server appliance please see: 1. Installation and Setup | FileWave KB
For a Booster you would setup networking just like you do with Server and then: Booster Installation | FileWave KB
For more information about importing the IVS appliance please see: Importing FileWave Appliances

Debian Linux: It is preferred that you use this for a new server, booster or IVS.
Hyper-V (VHD) Server Appliance (md5: e48e649a4b09849d1c0a30d6f25d8575)
Hyper-V (VHD) Booster Appliance (md5: ca31a5c0930defdf70eba8465eb85416)
Hyper-V (VHD) Imaging Appliance (md5: 809d88619ab359a641a4cc570a40c77f)

CentOS Linux:
Hyper-V (VHD) Server Appliance (md5: 005d5cc74a68428547c7cc8d7f797482)
Hyper-V (VHD) Booster Appliance (md5: dee0d85e7bc9398c2d41a950a1e39fea)
Hyper-V (VHD) Imaging Appliance (md5: 0b71704316983552b242765ef1e7add0)

To get started with the FileWave Server appliance please see: 1. Installation and Setup | FileWave KB
For a Booster you would setup networking just like you do with Server and then: Booster Installation | FileWave KB
For more information about importing the IVS appliance please see: Importing FileWave Appliances

CentOS is EOL in 2024. Migrating to Debian is highly recommended.

CentOS Linux Installers (md5: b7beaf517f3bccad73b3358962df9ff4)
CentOS Linux Server (md5: fa30b9e3aa2a6514e13e94b1e12009b5)
CentOS Linux Booster (md5: dd7d2bf1abbf4399cda50b809cef1190)

If when doing yum update or upgrade you get a note that no updates are available it may be that you block access to some countries. yum clean all can clear the cache so that the upgrades can happen.

Upgrading the FileWave Server
To install or upgrade the FileWave Server, use the following :

# login via ssh / root or put sudo at the start of each line
sudo yum update -y
sudo yum upgrade -y
sudo yum install -y --nogpgcheck https://fwdl.filewave.com/15.3.1/fwxserver-15.3.1-1.0.x86_64.rpm
sudo reboot

Upgrading a Booster
To install or upgrade the FileWave Booster, use the following:

# login via ssh / root
sudo yum update -y
sudo yum upgrade -y
sudo yum install -y --nogpgcheck https://fwdl.filewave.com/15.3.1/fwbooster-15.3.1-1.0.x86_64.rpm
sudo reboot

Note that you can upgrade boosters centrally using the Auto-Upgrade feature within the admin console. You can find out how to do that at this KB article.

Most likely, your IVS is already at CentOS 7, and you can run the following to easily upgrade your existing IVS appliance:

# login via ssh / root
sudo yum update -y
sudo yum update -y filewave-IVS
sudo yum upgrade -y
sudo reboot

If you get a response to the above command that "no packages are marked for update", then you'll need to run the below just one time on this IVS:

# login via ssh / root
sudo yum install -y filewave-IVS
sudo yum upgrade -y
sudo reboot

If the version of your IVS is still running on CentOS 6, the upgrade path requires replacing your current appliance as CentOS 6 is End of Life. Upgrade instructions are detailed here for this scenario : IVS Upgrade/Migration Options.

FileWave 15.4.1 was released to address the Android EMM and OpenSSL issues below on July 12th, 2024. The DDM work continues and is dependent on Apple. 

Issues with FileWave 15.4.0 and higher until, but not including 15.5.0;

• There is a known issue with Android EMM and large numbers of enrolled devices that may cause Model Update to stall. We have a patch for this, so contact support if you need it. We will release 15.4.1 with a direct fix for this.
• We are aware that OpenSSL released an update immediately after we QA'd this release. As a follow-up release, we will release 15.4.1, which includes this.
• We are investigating an issue with DDM Software Update on macOS which does not start installing an update that has a 1-hour delay despite macOS showing that the 1-hour delay is over. Depending on the outcome this may be addresses in either FileWave 15.4.1 or an OS update from Apple. - Apple Feedback Ticket: FB13821976

Issues with FileWave 15.2.0 and higher until, but not including 15.3.0.

There was a VPP sync issue that appeared to begin around October 16, 2023 and we have created a patch. Download v15.2.1 to install the update.

Issues with FileWave 15.1.0 and higher until, but not including 15.2.0;

There was a VPP sync issue that appeared to begin around October 16, 2023 and we have created a patch. Download v15.1.1 to install the update.

After release of FileWave 15.1.0, there have been some reports that Dashboard (Grafana) gives an error when trying to go to it. There will be an error briefly that "User already exists." and this will happen for the fwadmin user in particular. As a workaround you should be able to login as a different user and get to the Dashboard. We have also found that logging in to Dashboard and then going to Settings and deleting fwadmin did result in regaining access again as fwadmin, but we are checking to see if this is the best option because you may have set preferences within that user and may not want to have to set them again. Please reach out to Customer Technical Support if you are impacted. 

Issues with FileWave 15.0.0 and higher until, but not including 15.1.0;

Universal VPP Apps - In FileWave 15.0.1 or lower if you have attempted to use Universal Apps through FileWave and have identified any Apps that came in as iOS instead, then please contact FileWave Support if you need this resolved sooner rather than later.  This issue should be resolved in the next release (15.1), but there is a patch that can be applied for the interim. You can contact Customer Technical Support for the patch.

Web Content Filter - In creating a Web Content Filter within FileWave Central it changes the UDID and is unsuccessful in deployment. The issue can be resolved by re-creating the Web Content Filter in FileWave Anywhere as a workaround. The issue should be resolved in the next release (AP-494).

14.10.0 to 14.10.1 Server upgrade - If you are running 14.10.0 and try to upgrade the server to 14.10.1, you will encounter an error. To avoid this error, use the below command in Terminal and then run the upgrade. This version was only released to Early Adopters but we wanted to list this here in case the email that was sent out was missed.

• As a workaround do this command and then run the upgrade again:

touch /tmp/FILEWAVE_DISABLE_PRE_UPGRADE_BACKUP

14.9.1 to 14.9.2 Server upgrade on macOS - If you are running 14.9.1 and try to upgrade the server to 14.9.2, you will encounter an error. To avoid this error, use the below command in Terminal and then run the upgrade. When we release 14.9.3 / 14.10.0, this will be accounted for, and you should only create this file for this one upgrade. If upgrading from 14.8.0 or less to 14.9.2, you will not need to do this.

• As a workaround do this command and then run the upgrade again:
  

touch /tmp/FILEWAVE_DISABLE_PRE_UPGRADE_BACKUP

14.9.1 and lower may stop syncing with Apple VPP - You may notice that Apple VPP stopped syncing in November/December 2022 or later. If you are using any version of FileWave below 14.9.2 it is because Apple is now using very large numbers for the application identifiers. 14.9.2 was released to handle these larger numbers. 

• Discussion: https://alliance.filewave.com/topic/69-apple-using-some-apps-may-break-app-store-related-features/

14.9.x YML Files not processed - You may notice that your Grafana dashboard won’t process data from YML files. This can happen if the API key is regenerated for FileWave, but the file that Grafana uses is not updated. As recently as FileWave 14.9.2, this can be an issue with an easy solution outlined below. Development is looking at possibly always overwriting this file at server startup which would eliminate this problem from appearing, and it should only appear as an issue if the API key for the server is regenerated, causing it to not match. For most customers, this is not likely to be an issue.

• The solution is in the KB: Custom Grafana Dashboard - YML Files not being processed

Possible Update Model failure after upgrade - After the upgrade, it is possible for Update Model to fail if auto enroll is set for iOS devices to go into the root directory. 

• Workaround: Go to the Clients view in FileWave Admin (native), click New Client, Enrolled Mobile Devices, and uncheck the box for "Automatically add all new clients to the selected group". You should now be able to complete an Update Model successfully. After this, you can recheck the box to auto enroll iOS devices and Update Model should continue to function properly. Please reach out to Support for any questions or issues.

14.8.0 Multiple boosters - We have identified an issue happening for setups with multiple boosters ; this issue is linked to NATs, the internal notification system, and how it is configured on boosters. Boosters are currently incorrectly configured to have the same server_name while NATs expects each booster to have a unique server_name.

• Workaround: There is a discussion about this here: https://alliance.filewave.com/topic/36-1480-multiple-boosters/#comment-105

PowerShell Issue Windows 11 (fixed in 14.8.0) - In 14.7.0 and lower PowerShell scripts in either custom fields or filesets/payloads will not execute correctly on Windows 11 (WIN-1085).  This issue is resolved in 14.8.0.

14.10.2 is a security and bug fix release:

• Apache upgraded to 2.4.56
• Fixed Issues related to Model Update
• Fixed issues related to Wallpaper Overlay

FileWave Suite

• Deployments in FileWave Central: 

  • Deployments are now visible in Native Admin Console. Deployments are mostly read-only in this release: it is possible to delete deployments, but not to edit existing ones or create new deployments.

• Force reboot:
  • There is a new option for reboot for a Fileset to forcibly restart the client 2 minutes after the Fileset has been installed. This should be used only when required because open documents may not be saved.
    
    

    

    
    
• Help Menus:
  • In Anywhere and Central, the Help menus now include links to the KB, Foundry, Discord, and Alliance Forums.
• Quality/Stability:
  • A great deal of extra effort was placed this go-round on correcting some long standing bugs and defects that we hadn't been able to get to prior. 

Apple

• Customized Wallpaper:
  • It is now possible to add a text overlay on top of iOS / iPadOS wallpaper; the text can be parameterized with any inventory variable. ( Customizing iOS Device Wallpaper with Dynamic Text )

• Force reboot as mentioned in the FileWave Management Suite section.
• Login and Background Items settings has been added to Login Items Profile.
  
  

  

Windows

• Force reboot as mentioned in the FileWave Management Suite section.

Network Imaging / IVS

• FileWave Networking Imaging 14.10.x brings compatibility with FileWave 14.10.x.
• PXE Kernel: 5.19.9
• Grub: 2.06

Deprecated Features

The following features are deprecated in FileWave 14.10.2 and will be removed in a future version:

• Device Discovery (Network Scanning) function of FileWave Boosters
  • Reason: This tool was never effective in production environments, has hardly ever been used, and is easily replaced by any off-the-shelf network scanning tool
• ZMQ based features for clients running 14.7 or older
  • Reason: ZMQ has been replaced by NATS, so older client devices must be updated to use the new notification framework 
• Android device management prior to Android EMM (using APKs, etc)
  • Reason: Android EMM is the replacement for the much older method of managing Android devices

New Features

14.9.3 is a security and bug fix release:

• OpenSSL upgraded to 3.0.8
• Apache upgraded to 2.4.56
• NATS Server upgraded to 2.9.14
• Fixed memory leaks impacting Windows Client

FileWave Management Suite

• IDP Group Name/Display improvements in Native and Webadmin consoles
  • This may seem a rather small change, but if you were the one building reports or smart groups before using IDP groups, you'll be very happy to no longer see group IDs:

• Associations → Deployments Conversion Tool (Webadmin)
  • Most likely, you'll want to wait to actually convert Associations until after we have included deployments in the native admin tool, but this tool is so well done, we wanted you to be able to take a test run now:  Read more

• Upgrade of Grafana and Prometheus (which supports Grafana) to the most recent versions
  • This change provides both security and behavioral/UI changes for the web dashboard (which is a great tool if you haven't tried it):

• German has now been added to our product translations
• Quality/Stability:
  • A great deal of extra effort was placed this go-round on correcting some long standing bugs and defects that we hadn't been able to get to prior.  More then 150 issues were corrected in version 14.9!

Apple

macOS 13 Ventura / iOS 16.1

• Added support for macOS 13 Ventura
  • Now identified in Inventory reports/groups
  • And identified in Fileset requirements
  • Added to "Incompatible with SIP" fileset lookup
• Also, of course, added support for iOS/iPadOS 16.1

Profile Changes

Cellular Profile

• There is a new option to configure IPv4/IPv6 translation (464XLAT):

Restriction Profile

• New option to disable Universal Control (macOS 13)
• New option to prohibit the user from installing configuration profiles and certificates interactively (Now on macOS 13+)
• New options to prohibit the user from installing or removing Rapid Security Response (iOS 16, iPadOS 16 and macOS 13+)

Setup Assistant

• New option to hide Terms Of Address (French, Italian, Portuguese)

Finder

New options:

• Disables the Power Off menu item when the user is logged in
• Disables the Log Out menu item when the user is logged in
• Disables the Automatic Login option when using FileVault

Security and Privacy

• New option to allow FireWall settings change

Single Sign-On Extensions

• Platform SSO Authentication method can be configured if the extension supports it (Password or Secure Enclave)
• Registration Token for Platform SSO registration
• List of applications which can't use the extension for SSO
• Screen Lock behavior

Transparency, Consent and Control

• New service to grant an application permission to update or delete another application

DEP Profile Changes

• New option to skip Terms Of Address (French, Italian, Portuguese) during setup

Shared iPad Settings

• New Setting to define a list of (up to ) 3 domains which will be proposed to the end user to simplify Shared iPad login.
• New Setting to define a grace period, in days, for Shared iPad online authentication. The Shared iPad only verifies the user’s passcode locally during login for users that already exist on the device. However, the system requires an online authentication (against Apple’s identity server) after the number of days specified by this setting.

Both settings are made available via Command Policy Profile and current settings are reported in Inventory.

Accessibility Settings

It is now possible to configure various accessibility settings, making it easier for IT department to prepare devices for users requiring some accessibility configurations like increased text size or increased contrast:

Inventory Changes

The following data is now reported and stored in inventory:

• Accessibility Settings (iOS)
• Managed Apple ID default domains (Shared iPads)
• Online Authentication grace period (Shared iPads)
• Installed Applications report if the application is an AppClip, if the application is being installed (iOS)
• Service subscription now replaces Carrier information and can report multiple subscriptions (iOS)

Per App Web Content Filter and DNS Proxy

Apple lets IT configure global Web Content Filter and DNS proxy via profiles ; starting with iOS 16, it is now possible, likewise with VPN, to configure those settings for a specific application, giving IT more granular control.

If you create a Web Content Filter or a DNS Proxy profile, you can now configure iOS applications to use them in Properties:

Microsoft

• Completion of Windows MDM Device Wipe Command
• MDM Sync is now forced after delivery of MDM based commands (like wipe above)
• Windows Defender CSP Added (Policy)
  • The Windows Defender Policy allows you to define alternate sources and their priorities for Windows Defender signature downloads:

• User-Based CSPs are now applied to all AzureAD users, not simply the current user

Google

• Implementation of Global Proxy Policy for Android devices
  • This addition allows devices in the environment to have a global proxy defined:

• Migrated Chromebook Inventory Extension to manifest v3 (a maintenance update only...the plug-in will be updated through the Play Store automatically once approved/posted)

Imaging (IVS)

• FileWave Networking Imaging 14.9.x brings compatibility with FileWave 14.9.x.
• PXE Kernel: 5.19.9
• Grub: 2.06

Deprecated Features

The following features are deprecated in FileWave 14.9.3 and will be removed in a future version:

• Device Discovery (Network Scanning) function of FileWave Boosters
  • Reason: This tool was never effective in production environments, has hardly ever been used, and is easily replaced by any off-the-shelf network scanning tool
• ZMQ based features for clients running 14.7 or older
  • Reason: ZMQ has been replaced by NATS, so older client devices must be updated to use the new notification framework 
• Android device management prior to Android EMM (using APKs, etc)
  • Reason: Android EMM is the replacement for the much older method of managing Android devices

Deprecated features are still functional in a current release, but will no longer be updated and in future will be removed.

FileWave Management Suite

User preferences in main views will be stored on the user account (Web Console):

• Pinned columns
• Width of the columns
• Visibility of the columns
• Order of the columns

User preferences in main views will be stored in the active session (Web Console):

• Filters
• Quick filters
• Search
• Applied sorting on a column

Profiles section error handling improvements (Web Console):

• Error handling in the profiles is more user friendly and the mandatory fields are better highlighted

Apple

Apple Silicon Support

Client and Booster components are now fully Universal - run natively on mac with Intel or Apple Silicon chips.

The server component is mostly Universal (Dashboard using Grafana still requires Rosetta)

Apple Spring 2022 Release support

• Profile changes:
  • New macOS restriction to disable AirPlay Receiver
  • New macOS firewall options (finer settings to allow application connectivity and logging options)
  • New tvOS restriction to disable automatic screen saver

VPP changes

• When adding a VPP token, FileWave will now check if already imported tokens are not from the same location to prevent adding the same location twice.
• When renewing a VPP token, FileWave will now check that the new token has been generated from the same location as the one it replaces.

Windows

Wipe

• Windows devices can be wiped from the Web Console

Software update view improvements

• Apple and Microsoft patches have separate sections now
• The list can be sorted by the assigned subtype (e.g. successful, remaining, warning, error)
• Visual improvements in the software update section

Software updates MDM profile

• Different software updates settings can be applied to the Windows devices via MDM
  • Deadlines, grace period, automatic update behavior, restart check, option to pause updates, option to check for updates

Automatic MDM certificate renewal

• Windows devices will get the MDM certificate automatically renewed before they expire

Imaging (IVS)

• FileWave Networking Imaging 14.8.x brings compatibility with FileWave 14.8.x.
• PXE Kernel: 5.17.1
• Grub: 2.06

Deprecated Features

The following features are deprecated in FileWave 14.8.0 and will be removed in a future version:

• Apple profile management is deprecated in the Native Admin Console.
• DEP profile addition and creation are deprecated in the Native Admin Console.

Decommissioned Features

The following features have been removed from FileWave 14.8.0:

• Clever is not available as an SIS source anymore.
• Engage is not supported anymore.
• Observe Client functionality has been replaced by the TeamViewer integration

Software Update improvements

• Client Info reports (extended) Software Update information in a new tab (native admin)
• Windows Software update improvements:
  • Devices now report "online" updates
  • More information (category, support URL, KB article number...) is reported
  • Devices now report on already installed updates, even if they haven't been installed via FileWave
    • Provides independent confirmation outside of the fileset/payload mechanism
  • Read more about Windows Software Update improvements here
• FileWave is now reading information from Apple Software Lookup Service (GDMF).
  • Read more here

Web Console

• Improvements for Deployments: added the possibility to "add to deployment" from the device/device details views
  • Allows for adding a group to an already existing deployment for instance
• FileWave policies can now be managed in the Web Console
• Packages (MSI, PKG) files can be dragged from explorer/finder and dropped onto the Payload list

Internals

• Improved internal code related to object identifiers to avoid possible identifiers exhaustion for large installations

Remote Control

• Unattended access is now possible for macOS and Windows devices with the use of the TeamViewer integration
  • You can read more about your TeamViewer options here

Apple Fall Release

Support for macOS 12 Monterey, iOS, iPadOS and tvOS 15:

• Support for macOS 12
• Additional Inventory data reported by MDM DeviceInformation Command (IsAppleSilicon, DeviceId for Software Update)

• App portal (for Kiosk) native application has been updated for iOS 15:

  • Minimum iOS supported version is now iOS 12.5
  • Retrieving geo-location is now processed in the background. On iOS 13 and later, the native portal uses the native background task to retrieve more frequently the position even if the application is not in foreground.
  • Preparation for Remote Session using Team Viewer.

DEP changes:

• new Skip Key "Unlock your Mac with Apple Watch"

Profile changes:

• Skip Unlock with Apple Watch and Skip Accessibility in macOS Login Window profile (Setup Assistant)
• System Extensions have additional "Removable" option
• New Restrictions:
  
  • On device only translation
  • Requires Managed Pasteboard
  • Allow iCloud Private Relay
  • Touch ID timeout before asking password
• DNS Proxy profile is available on macOS 10.15+
• TVRemote profile has new "Device Name" Field
• A new command policy option has been added to configure Software Update Policy (Update for current Major version, previous Major version, both)

VPP new API support (Technical preview)

Apple introduced a new version of the VPP API ; FileWave 14.6.1 allows to use the new API as a technical preview (read more):

• In 14.6.1, this will be an in-place replacement, no feature change
• Future versions will benefit from the new API's additional features (better bulk license management, notifications based communication with Apple service)

MDM Software Update Improvements (read more):

• MDM Command OSUpdateStatus is now used to report download progress
• Both macOS and iOS updates are now deployed in two steps (one command to have the device downloading the update, one command to have the device installing the update) as this process is more reliable than requesting the device to handle the whole process automatically

Web Admin Updates

There are three main changes to the Web Admin Console in this release:

• The web admin now has a great looking script editor
• And in-progress deployment definitions are now saved when you navigate away from them
• Lastly, VPP application updates can now be controlled much more easily

Native FileWave Admin Changes

Verify for Desktop devices can now be triggered from the native admin without direct network connection (within the Client Info window).

TeamViewer Integration (Technical Preview)

Version 14.6 introduces TeamViewer as the eventual replacement for Observe Client.  You can read much more about that integration here.

Imaging Mac Address

A new inventory field has been added to assist with Windows Imaging for devices with pass-through MAC addresses.  You can read about this change further here.

IDP Changes

Version 14.6 introduces the much-demanded Google as an IDP source.  Specific instructions for setting up that integration can be found here.  Additionally, you can now also setup easy smart groups using IDP group membership.  That topic is covered in this kb article.

New Features

FileWave 14.5.4 primarily updates Apache to Version 2.4.51 to fix a critical CVE and addresses several small FileWave-related bugs.

See below for new features introduced with FileWave 14.5:

FileWave Management Suite:

• Device enrollment conflict improvements (read more):
  • It is now possible to solve multiple conflicts at once
  • There is a new setting to automatically solve conflicts with a predefined option (ignore new device, remove previous client before enrolling new, replace old client with new client).
  • Placeholder replacement is more robust
• Windows client fingerprint is persistent during imaging process ; this avoids conflict in case the hardware setup (on which fingerprint is based) has changed.
• Fileset (Payload) Status in Inventory (read more)

Apple:

• Profile changes:
  • New restrictions:
    • macOS now allows you to define different DeferUpdate delays for major, minor and non-OS software updates
• Device Information reports additional information:
  • LocalHostName, Hostname (macOS)
• New options for share iPads:

  • Shared iPads can now be configured as "Guest mode" only

  • It is possible to define logout timeouts for normal or guest mode users

Web Admin:

• Software Update enhancements (read more):
  • Deploy to groups
  • Install in specific time windows
• NAT Support for Client Monitor & Verify (read more)
• Perform Actions on Multiple Devices (read more)
• MSI & PKG Payload Creation (read more)

Windows MDM (read more):

• Support for manual and AutoPilot MDM enrollment
• Guidance on importing devices into AutoPilot
• Creation/deployment of Windows MDM Policies (Profiles)

New Features

FileWave Management Suite:

• Booster upgrade mechanism (see related KB Articles: Booster Auto-Upgrade):
  
  • Starting from FileWave 14.4.0, it will be possible to upgrade boosters directly from admin console. Boosters will report if an update is available and upgrading it will be a one-click action. 
  • When several boosters are defined to be upgraded, they will be upgraded one after the other to avoid situation where all boosters are down at the same time.
• As Windows device names have limitations, a device used in imaging can't be renamed if the new name does not respect those limitations, and devices not respecting those limitations need to be renamed before being used in imaging

Apple:

• Per-Account-VPN support: it is now possible to associate a Per-App-VPN payload (from same or different fileset) to an "account" payload (Mail, Exchange, CalDav....), which enables corresponding VPN when device contacts corresponding account.
• Profile changes:
  • New "Certificate Revocation" Profile
  • New restrictions:
    • AllowNFC (iOS)
    • AllowAutoUnlock (iOS)
    • allowGameCenterFriendsSharingModification (iOS, macOS)
    • allowUnpairedExternalBootToRecovery (iOS)
    • allowWallpaperModification (macOS)
    • forceOnDeviceOnlyDictation (iOS)
  • New setting "EnforceRoutes" and "ApplicationExceptions" for VPN (and Per-App-VPN) profile
  • Web Content Filter is now available on macOS
  • Single App Mode payload is not restricted to tvOS system applications anymore
• Device Information reports additional information:
  • SupportsiOSAppInstalls (macOS)
  • Security Info fields (macOS)
• Restart MDM macOS has a new setting to notify user instead of rebooting immediately
• DEP: " Auto Advance", and regional options are now available for macOS
• macOS MDM state is now reported into inventory, allowing to detect properly MDM enrollment issues
• Associated domain management:
  • Associated Domain profile has new "Enable Direct Downloads" option
  • App Store and Enterprise applications have new options for Associated Domains

New Features

Apple:

• App store applications can now by managed by MDM enrolled mac running Big Sur:
  • VPP Applications are really managed and not simply installed
  • VPP Applications can be removed from managed device when fileset is not associated anymore
  • VPP Applications can be automatically removed by macOS 11 when  MDM enrollment is removed
  • Client info reports Managed Application List and MDM installed application list for MDM enrolled macOS 11
• FileWave server and booster can be installed on Apple Silicon mac devices
• New OS numbering for macOS (Big Sur is macOS 11.x)

macOS 11 "Big Sur" changes:

One of the changes announced by Apple during WWDC 2020 is that macOS 11 will drop support for command line installation of profiles and Software Update.

FileWave 14.0.2 contains important change to profile installation for non-MDM enrolled macOS (or profiles installed before MDM enrollment).

Software Update Management

Command line management of software update is deprecated and limited on macOS Big Sur ; therefore, Software Update on macOS Big Sur is now managed via MDM. Unfortunately, the MDM protocol is more restrictive than what could be doable with the command line ; macOS 11 SoftwareUpdate management will behave roughly the same as what is available on iOS/tvOS/iPadOS:

• Updates are displayed in Software Update assistant when devices report it is available

• Software Update filesets are simple placeholders containing metadata about the update ; updates are not downloaded and prepared server side anymore and will be downloaded by each device from Apple CDNs. Using a Caching Server is highly recommended.

• MDM protocol currently provides less control over Update installation. FileWave will be able to trigger a Download and Install request on the device, but these actions will be entirely processed by macOS, which can decide to postpone the installation without more information. System logs (install.log mainly) can give more details.

Apple Silicon Support

• FileWave components are supported as x86 application and run through Rosetta2 translator.

• Device running on Apple Silicon reports properly the platform, filesets can have Intel or Apple Silicon only requirements

• PowerPC and mac OS X 10.7 and below support has been removed from FileWave admin. Legacy clients running older versions of FileWave should still work properly, but editing or creating PowerPC filesets is not working anymore.

Windows:

• Windows devices are now excluded from "Device with same serial number" conflict detection

Google:

• New admin permissions for:
  • Chromebook de-provisioning
  • EMM configuration access in preferences

Identity Provider Integration: (Read related KB Articles here: FileWave IDP Integration

• New support for IDP providers (AzureAD/Okta) for:
  • Apple Device Enrollment
  • FileWave Admin Authentication (which in turn can then support multi-factor authentication)

Important third party upgrade:

• Qt 5.15.2
• Various Python libraries
• OpenSSL 1.1.1k

New Features

Support following iOS 14, iPadOS 14, tvOS 14 and macOS 11 features:

• Support for iOS 14, iPadOS 14 and macOS 11 "Big Sur"
• Support for Apple Silicon mac:
• New fileset requirements
• Architecture is reported in inventory
• Restart Device option has new options related to Kernel Extension management
• New / modified profiles:
  • New payload to configure DNS
  • Override Previous Password option
  • macOS restriction, allows apps to get File provider Info
  • Disable Association MAC randomization (added in 14.0.2)
  • Define preview type
  • Media Rating settings have been updated by Apple (Warning, some settings have been modified by Apple like UK "Cautious")
  • Allow App Clips
  • Force Delayed App Software Update
  • Allow Apple Personalized Advertizing
  • Added options to allow non-admin user to allow screen recording
  • Now supports 4096 key size
  • IKEv2 : MTU can be defined
  • Setting to disable On Demand Override option for end user
  • Certificate type can now be Ed25519
  • Enable Fallback option
  • Defines if a full screen web clip can navigate to an external web site without showing Safari UI
  • Application bundle identifier opening the URL
• DNS Settings:
• Exchange:
• File Provider:
• Network
• Notifications
• Restrictions
• Setup Assistant (which allows skipping panes like DEP, but post enrollment, for upgrades)
• Security and Privacy
• System Extensions
• SCEP:
• VPN:
• Webclip:
• TimeZone can be defined via Command Policy Profile (reference Setting Timezones on Devices)
• on iOS and iPadOS 14, Managed VPP Applications can now be marked as unremovable (reference Unremovable VPP Applications (FileWave 14.1+))
• New DEP skip setup panes:
• Accessibility (macOS) ;
• Update and restore completed (iOS) 
• Software Update are now managed using Apple MDM on macOS Big Sur
• New Device information report:
• EstimatedResidentUser (Shared iPad)
• TimeZone
• EID

Support for Geo-Fencing:

• Geo-Fencing has been added for Android Devices (reference Geofencing)

macOS 11 "Big Sur" changes:

One of the changes announced by Apple during WWDC 2020 is that macOS 11 will drop support for command line installation of profiles and Software Update.

FileWave 14.0.2 contains important change to profile installation for non-MDM enrolled macOS (or profiles installed before MDM enrollment).

Software Update Management (reference Software Updates in the age of macOS MDM (Big Sur +))

Command line management of software update is deprecated and limited on macOS Big Sur ; therefore, Software Update on macOS Big Sur is now managed via MDM. Unfortunately, the MDM protocol is more restrictive than what could be doable with the command line ; macOS 11 SoftwareUpdate management will behave roughly the same as what is available on iOS/tvOS/iPadOS:

• Updates are displayed in Software Update assistant when devices report it is available

• Software Update filesets are simple placeholders containing metadata about the update ; updates are not downloaded and prepared server side anymore and will be downloaded by each device from Apple CDNs. Using a Caching Server is highly recommended.

• MDM protocol currently provides less control over Update installation. FileWave will be able to trigger a Download and Install request on the device, but these actions will be entirely processed by macOS, which can decide to postpone the installation without more information. System logs (install.log mainly) can give more details.

Apple Silicon Support

• FileWave client is supported as x86 application and runs through Rosetta2 translator.
  Rosetta2 is required and is currently not pre-installed on macOS. We recommend you to use our Custom Package service to deploy FileWave client ; the custom package will ensure Rosetta2 is properly installed.

• Device running on Apple Silicon reports properly the platform, filesets can have Intel or Apple Silicon only requirements

• PowerPC and mac OS X 10.7 and below support has been removed from FileWave admin. Legacy clients running older versions of FileWave should still work properly, but editing or creating PowerPC filesets is not working anymore.

Internals:

Important third party upgrade:

• Apache 2.4.46
• OpenSSL 1.1.1h
• Qt 5.15.1 

New Features

New Web admin (Beta !)

Apple devices management:

• Enhanced support for Shared iPads (iPadOS 13.4)
• User Enrollment support for iOS / iPadOS devices:
  • New enrollment url to "User enroll" devices in a Bring Your Own Device scenario - see https://www.apple.com/business/it/ 
  • Automatically create and associate VPP users to User Enrolled devices to ease VPP apps and books deployment
  • Enrollment type is now shown in Client info
• 32b only applications are reported and not installed on incompatible iOS / iPadOS devices
• macOS: use of InstallEnterpriseApplication command to install FileWave agent on compatible devices
• Simplify VPP license management:
  • New Licensing option "Device when possible, user if not"
  • License reservation is not mandatory anymore - fileset can consume license from VPP token without reservation
• Support for universal apps
• Basic support for macOS "Big Sur"
  • Devices running macOS 11 properly report macOS version
  • Fixed an issue where updating profiles on non-MDM macOS 11 devices would remove the profile (see below)
• iOS 14 / macOS 11: "Disable MAC address randomization" option in Network profile

macOS 11 "Big Sur" changes:

One of the changes announced by Apple during WWDC 2020 is that macOS 11 will drop support for command line installation of profiles and Software Update.

FileWave 14.0.2 contains important change to profile installation for non-MDM enrolled macOS (or profiles installed before MDM enrollment).

Desktop devices management:

• New Fileset revision system:
  • Allows regrouping different versions of the same application inside the same fileset
  • More control over staging and application upgrade
• Association conflict resolution is now more consistent:
  • The "Winning" association now follows clear and consistent rules for the distance (no difference between normal clones and smart group clones for instance)
  • All association attributes (kiosk, licensing, schedule) are now from the winning association
• Smart groups can be used in Imaging Views to create Imaging Associations
• Verify can now be triggered via command line on device

Native console:

• Enhanced booster monitor to only accept valid settings
• "Move to..." option for fileset
• It is now possible to filter inventory query results
• It is now possible to create a smart group from an inventory query
• it is now possible to duplicate a smart group
• Added more information to Inventory-based Smart Groups to clarify membership

Installers:

• A backup of FileWave database and important settings will be taken before upgrade

Internals:

• Important third party upgrade:
  • OpenSSL 1.1.1g
  • Apache 2.4.43
• Postgres Log rotation now uses integrated postgres log rotation mechanism

New Features

Apple 2020 Spring Release Support:

Changes in Restriction Profile

• • Allow accessing web sites using TLS 1.0 and 1.1 (iOS, macOS)
  • Allow Guest Mode for shared iPad
  • Allow access to Apple ID and Family Sharing Preference Pane (macOS)

Changes in Login Window Profile

• • Screen Time option is available in Setup Assistant

Changes in Notification Profile

• • Notification settings are now available for macOS

Changes in VPN Profile

• • UI clarification
  • New Provider Bundle Identifier and Provider type setting

macOS Content Caching changes

• • Additional Content Caching setting in profile
  • Content Caching information is reported in inventory and in client info

Miscellaneous

• Support for shared iPad guest mode and shared iPad in Apple Business Manager
• Generated Self-signed certificates (MDM, Classroom) are not valid more than 398 days (see https://support.apple.com/en-gb/HT211025)

Google Related Updates:

EMM

• • Embed Wifi added to EMM Enrollment QR Code
  • BYOD for EMM
  • Location Tracking

Chromebooks

• • Added ability to edit Chromebook Data

  • Moving devices in Admin now moves the devices in G Suite Domain structure

  • Delete/Create OU in G Suite Domain structure through FileWave Admin

  • The FileWave extension now gathers these fields in a more reliable way

    • Local Device Name
    • Device Serial Number
    • Current Logged in user
    • Current IP
    • Current Asset ID
    • Certificates

Device Management:

Inventory Fields in Clients View (Native Admin)

• • Customize your Admin clients view with inventory fields - including custom fields

Dedicated Booster Communication

• • Boosters can now use a dedicated communication channel for Booster-Booster or Booster-Server communication to avoid congestion. To enable this feature, you may have to open additional TCP port on your server and your boosters. See TCP Port KB.

Device Identification

• • Algorithm used to identify device re-enrollment has been improved to detect different re-enrollment scenarios to prevent duplicated clients.
  • Windows agent fingerprint is now stored on disk to avoid permission issue accessing registry, which could lead to unstable fingerprint, making client identification unreliable.

New Features (13.2.0, 13.2.1, 13.2.2)

Apple 2019 Fall Release Support:

Apple New OS Support

Profile Changes

DEP Changes

Bootstrap Token Management

Google Related Updates:

Android EMM and ChromeBook Feature Improvements

Device Management

Client Renaming Changes

Uninstall Script Change

Inventory

Inventory Field Changes/Additions

New Features (13.1.5)

• Compatibility support for macOS Catalina

macOS Catalina brings new restrictions and security changes; one of these changes is the new Read-Only System Volume, introduced to protect the system from un-wanted changes. As your FileWave server stores files in /fwxserver, it is impacted by this change.
FileWave 13.1.5 is now locating files in /usr/local/filewave/fwxserver; if you are upgrading from a previous version, files will be moved during upgrade.

If you upgrade from a previous version of FileWave, /fwxserver will be moved to its new location. In case moving is not possible (specific mount point for instance), upgrade will stop and will require manual data folder move.

For Details please refer to fwxserver folder relocation in FileWave Server 13.1.5+ on macOS and Linux Platforms

Backup Script Update:

With the relocation of /fwxserver, the backup script must be updated on your server to ensure a proper backup is being captured.

Please reference the following for more information; https://kb.filewave.com/display/KB/Automated+Backup

• TLS self-signed certificate for MDM

Generated self-signed cert is compliant with iOS 13, tvOS 13 and macOS 15 new security requirements.

fwcontrol generateSelfSignedCert command uses previous private key, allowing to unblock already upgraded devices

• Duplicated devices detection

FileWave clients are identified by a user-friendly identifier (client name) and a machine-fingerprint identifier (device id). Re-enrolling devices with a different name or enrolling a new device with the same name as an existing client creates duplicated entries in the system, which can lead to various problems. FileWave 13.1.5 integrates duplicated detection:

• At enrollment time; enrolling a device matching either the client name or the fingerprint, but not both (so not a in place re-enrollment) will not be possible without solving the conflict (removing the old entry or ignoring the new enrollment).
• tools are provided to detect and resolve existing duplicated entries

• OpenSSL updated to 1.0.2t

New Features (13.1)

Security Enforcement

Device Management

Analytics

UCS Improvements

Apple "Spring 2019" release support

Android (EMM) support

New Features (13.0.3)

MDM Profile removal

By default, FileWave is no longer answering with HTTP 401 when an unknown MDM Apple device checks in. This allows FileWave to recover data from a previous backup without un-enrolling devices, which could lead to data loss if applications were removed. For 13.0.3, a new option was added in "FileWave Admin / Preferences / Mobile / Apple" that reverts to previous behavior.

Desktop Client and Booster Affinity

FileWave 13.0.0 introduced a behavioral change related to how desktop clients are communicating with boosters. Before 13.0.0, clients would always contact the first booster, unless the booster is not reachable (off network or offline). This could lead to very long delay for fileset deployment if first configured booster would be overloaded. Starting with 13.0.0, clients will try to stay on a given upstream booster instead of changing frequently. This provides better load balancing as the connections are more stable. Clients will also fallback to the server if none of the boosters are reachable.

13.0.3 ensures that a client will retry boosters regularly if it fell back to the server.

Memory Footprint

During model update, a large amount of data is processed to determine which fileset will be deployed to which device. Fileset statuses are also processed and updated, so deleted filesets are removed, newly-associated filesets are marked as "Associated" and so on. Starting with FileWave 13.0.0, iOS fileset statuses are now properly reported, which can create a large number of entries in the database, increasing the memory consumption during model update.

The Linux operating system is more sensitive to memory fragmentation (very summarized: it is not able to to recover memory with a frequent and high number of allocations, even if the process is not using this memory anymore), and the additional features brought to FileWave in the previous versions made the Linux version consume more memory over time, which could lead to Out-Of-Memory management. 

FileWave 13.0.3 is now using a more efficient memory allocation system, more efficient, and a special attention has been paid to reducing memory usage during model update to avoid memory fragmentation as much as possible.

VPN on Demand Option

IKEv2 VPN allows very granular configuration, based on VPN provider rules. For 13.0.3, VPN profile allows entering raw XML provided by VPN vendors.

New Features (13.0.2)

New Features (13.0.1)

New Features (13.0.0)

Device Enrollment Program:

MDM Commands:

Profile changes:

Push Notification changes:

New Features (12.9.0)

New Features (12.9.1)

New Features

This version adds support for iOS 11.3, tvOS 11.3, and macOS 10.13.4.

New Features