# Releasenotes 8.23.00 (04.11.2024)

> Previouse Release: V8.19.00_1  XX.XX.202X

# Notice 
- Due to changes in our WebUI you should reload the browsers chache (STRG + F5)

- All Modbus addresses must be checked because the Modbus table was changed fron 8.19.xx to 8.23.xx.

- Brute force protection for the login is activated by default after the update. If it was deactivated before the update, it must be deactivated again.

- This CIOC version is not compatible with RiZone 3.11.25.0 or older.

- Old service patches have to be updated to be applicable again on versions after 8.19.00_1

# Releasenotes
Open Bugs
  * `CIOC` Radius: Login through SFTP not possible #97652
  * `CIOC` Tree variable view always shows the status "n.a." for every display variant, nfc and SMS-Unit under the system node, that are supported by the operating System. The SMS-Unit is not supported by the CIOC. The Status will remein "n.a." despite what a connected device is reporting. #110917
  * `CIOC` The system wont log sucessfull logins for SFTP and FTP. Failed logins are only logged for SFTP #107548
  * `CIOC` Rights for higher-level tree elements in the Access administration are not automatically transferred to subordinate elements. However, these can be set manually #105077
 
Bugfix
  * `CIOC` Modbus: Allowed-Host list now allows hostnames besides IP-addresses #93169
  * `CIOC` Invalid HTTP security header when WebCam is not configured #103154
  * `CIOC` OPC port 65535 is now allowed #106116
  * `CIOC` RiZone: Emergency- and one time code now have a higher hirachy than 4-eye and 2-factor authentication #105498
  * `CIOC` Error correction in reos-patch script #104808
  * `CIOC` Modification of the Modbus variable tree so that all registers can be read
  * `CIOC` Update to various system libraries. // one example is the can open stack #103787
  * `CIOC` Security updates in the communication between device and web browser
  * `CIOC` Deactivation of insecure encryption methods for SSH (Console)
  * `CIOC` SNMP: Reboot counter was fixed to increment again

Security
  * `CIOC` Installation of a firewall for network communication
  * `CIOC` Tightening of password guidelines for users
  * `CIOC` Admin password must be changed by the user before the first login. The same applies to new users
  * `CIOC` OPCUA now comes with user authentication
  * `CIOC` SNMP: Support for SHA1 and AES was added
  * `CIOC` Bruteforce login protection was improved
  * `CIOC` Improved signing of service patches #107484
 
User Functions
  * `CIOC` LDAP settings dialog has been improved
  * `CIOC` LDAP login in FTP, SFTP and console is now possible
  * `CIOC` Radius login in FTP and console is now possible
  * `CIOC` USB/SD interface can be deactivated on WebUI
  * `CIOC` Revision of TCP/IP settings dialog (Ipv4, IPv6, DNSv4, DNSv6)
  * `CIOC` Multiple logins on the WebUI with the same user
  * `CIOC` Support of a second RADIUS server
  * `CIOC` Revision of log messages for user logins
  * `CIOC` Two digital inputs on X10 can now be configured on WebUI for newly produces CIOC devices with V8.23.00 and the new wiring harness (part number 357507). Devices produced after 24. April 2024 already have compatible hardware, but it is not possible yet to upgrade the software functionality, without changing the CIOC board. #98115

System Functions
  * `CIOC` Use of capabilities for access to system resources
  * `CIOC` Use of OverlayFS
  * `CIOC` Use of PAM for user administration
  * `CIOC` Once in a month Intervall trigger for LCP condensate pumps as anti-seize measure #89102
  * `CIOC` In favor of a better fail-save mechanism for an LCP, hyrachy for fans and valve regulation has been modified #98457

Device Options
  * `CIOC` Preparation for a new device types "CIOC-RDC-NG" #87895
  * `CIOC` Support for LCP Carel Display for newly produces LCP devices with V8.23.00. Partnumber change for production is still pending #84597
  * `CIOC` Condensate control will only be active on LCPs if a demister was configured and placed during manufacturing #87953
