Release Notes¶

Note From the Team

This release includes several enhancements across Console, RPS, RPC-Go, and supporting libraries, including the official release of end-to-end TLS support between Intel AMT and RPS, MongoDB support for Console, wireless state APIs, container health checks, provisioning certificate validation improvements, and continued investments in the rpc-go v3 experience.

End-to-end TLS communication between Intel AMT and RPS is now considered production-ready and officially supported. Over the last several releases, we have continued to improve certificate validation, TLS tunnel reliability, TLS rollover behavior, and compatibility across different Intel AMT versions to support this milestone.

We also made significant progress on rpc-go v3 with improvements to the CLI experience, richer device information, expanded certificate visibility, HTTP proxy configuration support, improved activation workflows, and better supportability features. Additional enhancements are already in development and will continue rolling out over the next few releases.

In upcoming releases, you should start seeing support for Intel AMT 22 platforms, additional wireless management capabilities in Console, continued rpc-go v3 improvements, installer enhancements, discovery improvements, and further investments in certificate and provisioning workflows.

Follow our Sprint Board to learn more and track upcoming features.

As always, thanks to everyone providing feedback, testing new functionality, and contributing to the toolkit.

Cheers,
The Device Management Toolkit Team

🚀 What's New?¶

RPS & RPC-Go: End-to-End TLS Support for Intel AMT¶

This release officially supports end-to-end TLS communication between Intel AMT and RPS using the -tls-tunnel flag in rpc-go.

As part of this flow, RPS creates a new Intel AMT TLS leaf certificate signed by the existing MPS Root Certificate. Intel AMT then uses that certificate for the TLS session with RPS.

The AMT private key always remains within Intel AMT and is never exposed to rpc-go or the host OS. rpc-go only proxies the encrypted TLS traffic between Intel AMT and RPS, so the TLS session is not decrypted on the device.

This capability is now considered production-ready and officially supported.

RPC-Go v3: Improved CLI Experience and Device Information¶

This release includes several improvements to the rpc-go v3 user experience, including a redesigned amtinfo command with improved formatting, richer device information, expanded certificate visibility, and support for viewing Intel AMT HTTP proxy configuration.

The updated output provides a more structured view of device configuration, network adapters, remote access settings, certificates, and other platform information, making troubleshooting and device validation easier for administrators.

Additional improvements include a more detailed version command for troubleshooting and supportability, the ability to launch from a non-administrator terminal and elevate only when required, and enhancements to activation workflows for local profile-based deployments.

Console: MongoDB Database Support¶

Console now supports MongoDB as an alternative database backend. This provides organizations with additional deployment flexibility and enables environments that prefer document-based storage to run Console without requiring PostgreSQL.

Console: Health Checks for Containerized Deployments¶

Console now includes a CLI health check command designed for containerized deployments. This simplifies readiness and health monitoring when running Console in Docker, Kubernetes, and other orchestration environments.

RPS: Provisioning Certificate Validation¶

RPS now validates provisioning certificates before activation begins, helping identify invalid or unsupported certificates earlier in the provisioning workflow and reducing activation failures.

Console: Wireless API¶

Console now includes APIs to query and manage wireless state information, providing a foundation for upcoming wireless management capabilities in Console.

🧩 Enhancements & Improvements¶

Console: Improved Request Handling¶

Console now supports cancellation of in-flight requests, helping prevent stale operations from continuing in the background and improving responsiveness during long-running device operations.

Go WSMAN Messages: Expanded CIM, AMT, and IPS Coverage¶

The Go WSMAN Messages library continues to expand its coverage of Intel AMT, CIM, and IPS resources, adding support for CIM_Battery, CIM_Fan, and CIM_Sensor classes based on customer feedback.

In addition to the new CIM, AMT, and IPS service wrappers, significant internal improvements were made to reduce code duplication, improve maintainability, and simplify the process of extending WSMAN service support in future releases.

Sample Web UI: Faster KVM Session Connection¶

The KVM connection initialization sequence has been optimized, reducing the time from clicking "Connect KVM" to seeing the remote desktop.

🔧 Fixes & Maintenance¶

RPS fixes for legacy TLS compatibility, TLS rollover reliability, post-TLS validation behavior, and certificate serial number generation
RPC-Go fix to correctly handle TLS 1.3 data received from Intel AMT
MPS validation improvements for DNS suffix configuration
Console fixes for request cancellation handling, profile updates, OpenAPI specification updates, PostgreSQL compatibility, CIRA configuration handling, redirection token expiration, certificate generation, configuration path resolution, and general API stability
Console fixes to improve profile validation and allow profile updates without re-entering passwords
Sample Web UI fixes for profile editing, certificate list refresh behavior, WSMAN Explorer UI behavior, and password handling improvements
Go WSMAN Messages fixes for APF channel cleanup, channel lifecycle management, and event-driven response handling
UI Toolkit fix to release held keyboard keys when KVM sessions lose focus
Minor dependency updates and general maintenance across toolkit components

Changelog¶

RPS¶

2.36.4 (2026-05-26)¶

Bug Fixes

api: allow profile PATCH without passwords (#2715) (7d77f64)

2.36.3 (2026-05-11)¶

Bug Fixes

harden post CCM TLS rollover and retry behavior (#2691) (0576cca)

2.36.2 (2026-04-30)¶

Bug Fixes

address negative serial numbers generated ~20% of the time (#2690) (aa30c80)

2.36.1 (2026-04-29)¶

Bug Fixes

enable AMT legacy TLS compatibility and post-TLS reject by default (#2689) (b9d4397)

2.36.0 (2026-04-28)¶

Features

improves tls tunnel flow (#2683) (652d2bf)

2.35.0 (2026-04-24)¶

Features

add provisioning certificate validation checks (#2686) (e473dda)

2.34.3 (2026-04-22)¶

Performance Improvements

improves rpc to rps performance (#2681) (79f9a53)

MPS¶

2.26.6 (2026-05-20)¶

2.26.5 (2026-04-21)¶

Bug Fixes

added input validator for dnsSuffix (#2393) (355bb85)

RPC Go¶

2.50.6 (2026-05-21)¶

2.50.5 (2026-05-14)¶

2.50.4 (2026-04-29)¶

Bug Fixes

ensure latest go version is used (#1298) (494cd77)

2.50.3 (2026-04-29)¶

Bug Fixes

ensure semantic release uses latest version of go (2251071)

2.50.2 (2026-04-28)¶

Bug Fixes

handle tls v1.3 data from AMT (56bc354)

Sample Web UI¶

3.57.7 (2026-05-26)¶

Bug Fixes

require password when switching random to static on edit (#3334) (f262b20)

3.57.6 (2026-05-22)¶

Bug Fixes

correct malformed translate interpolation on proxy label (#3331) (82431b2)

3.57.5 (2026-05-20)¶

3.57.4 (2026-05-20)¶

Bug Fixes

devices: bind WSMAN Explorer placeholder via property syntax (#3320) (2473592), closes #3319
devices: refresh certificate list immediately on add and delete (#3318) (5874a05), closes #3317

3.57.3 (2026-05-15)¶

Bug Fixes

allow editing profile without re-entering passwords (#3307) (4df57b2)

3.57.2 (2026-04-22)¶

Performance Improvements

improve KVM connection time (f97baa2)

UI Toolkit¶

3.3.15 (2026-05-20)¶

3.3.14 (2026-05-19)¶

Bug Fixes

build: restore dist/core/package.json subpath shim (218930f)

3.3.13 (2026-05-19)¶

Bug Fixes

kvm: release held keys on blur (#1696) (5629ca1)

UI Toolkit Angular¶

11.1.4 (2026-05-20)¶

UI Toolkit React¶

5.0.4 (2026-05-20)¶

Console¶

1.27.2 (2026-05-20)¶

1.27.1 (2026-05-19)¶

Reverts

Revert "fix: correct inverted GIN_MODE condition in handleDebugMode (#979)" (d8d9ef0), closes #979

1.27.0 (2026-05-18)¶

Features

tray: enforce single instance and expose reachable URLs (676bd75), closes #870

1.26.6 (2026-05-18)¶

Bug Fixes

config: resolve symlinks when locating config dir (#985) (3c696e6)

1.26.5 (2026-05-18)¶

Bug Fixes

cert generation returns parsed cert with valid Raw field (#970) (9d06967), closes device-management-toolkit/deployment#573

1.26.4 (2026-05-18)¶

Bug Fixes

correct inverted GIN_MODE condition in handleDebugMode (#979) (8bb7d69), closes device-management-toolkit/deployment#573

1.26.3 (2026-05-15)¶

Bug Fixes

api: allow profile PATCH without passwords (#973) (18ba76d)

1.26.2 (2026-05-12)¶

Bug Fixes

enforce RPS profile name and password rules on /profiles (#963) (b484704)

1.26.1 (2026-05-12)¶

Bug Fixes

fix redirection token expiration (#958) (2985470)

1.26.0 (2026-05-06)¶

Features

add MongoDB NoSQL database backend (#904) (e4e33d2)

1.25.2 (2026-05-06)¶

Bug Fixes

remove postgres-only IF NOT EXISTS from ALTER TABLE (#953) (45c1686)

1.25.1 (2026-05-05)¶

Bug Fixes

ensure postgres works with ciraconfigs (#950) (f3690c5)

1.25.0 (2026-05-05)¶

Features

enables healthcheck via cli for containerized deployments (#949) (f5975ba)

1.24.4 (2026-05-05)¶

Bug Fixes

address small issues (#948) (10877dd)

1.24.3 (2026-04-30)¶

Bug Fixes

preserve omitted fields on PATCH (#917) (e86bdd8)

1.24.2 (2026-04-29)¶

Bug Fixes

update openapi spec (#915) (1d2f1ce)

1.24.1 (2026-04-28)¶

Bug Fixes

serve full monaco asset subtree for Explorer (#911) (abbc036)

1.24.0 (2026-04-28)¶

Features

add wireless state get and request API (#885) (ccd254c)

1.23.2 (2026-04-23)¶

1.23.1 (2026-04-22)¶

Bug Fixes

address issue with calls failing after being cancelled (3067bb8)

1.23.0 (2026-04-16)¶

Features

enable cancelling of requests (92f6575)

Go WSMAN Messages¶

2.46.1 (2026-05-20)¶

2.46.0 (2026-05-12)¶

Features

cim: add CIM_Battery service (#692) (469d11d)

2.45.0 (2026-05-12)¶

Features

cim: add fan sensor (#693) (c59d02d)

2.44.0 (2026-05-12)¶

Features

cim: add CIM_Sensor service (#691) (9477280)

2.43.0 (2026-04-29)¶

Features

add CIM_AssociatedPowerManagementService wrapper (#679) (2fc831a)

2.42.0 (2026-04-29)¶

Features

add missing wsman fetcher class function (#664) (8dd142f)

2.41.0 (2026-04-29)¶

Features

add missing wsman fetcher class function for CIM classes (#681) (75f8a82)

2.40.0 (2026-04-29)¶

Features

add missing wsman fetcher class function for IPS Classes (#671) (61db8da)

2.39.0 (2026-04-17)¶

Features

amt/boot: add RPE parameter types, sizes, validation maps, and tests (#665) (05e5dd4)

2.38.4 (2026-04-17)¶

Bug Fixes

ack APF_CHANNEL_CLOSE so AMT can reclaim the channel slot (#675) (f4435ef)

2.38.3 (2026-04-17)¶

Bug Fixes

ensure proper channel is being closed and adjusted (bc8cfbf)
ensure proper channel is being closed and adjusted (#674) (18b1a72)

2.38.2 (2026-04-16)¶

Bug Fixes

apf: event-driven response completion and window adjust replies (#673) (6ce79a9)