Security

• Cryptographic validation of AK-SM800A package
• Hardened UPK update against file injection
• Permanent disabling of SSH connection
• Post-authenticated external control of system web interface configuration settings
• Sanitization of input fields - protect from code injection
• System now requires user to change password immediately after first login
• Update (block) access to serial console for the root user
• Prevent user corruption of webserver-configuration
• Update nginx and mail to support TLS version 1.2
• Block sweet32 cipher suite (Nginx)
• Add user message under all HTTP/S configuration areas
• New user accounts require strong passwords

New features

• Add new A2L Refrigerants for 800A Rack Control
• Add 90-day password/account expiry
• MCX Lighting control - Customer request import Analog Input

Bug fixes

• Resetting Issue found when a 800A converted database from 800 that had Alarm Logger
• Session manager does not allow to create a new password when the old expires
• NTP timing issue