Release Notes - Certify Management Hub

7.1.0 : 2026/07/01

General Release for 7.x

• Minor updates from previous release candidates.

7.0.22 : 2026-06-24

• Fix OIDC auth controller logging error

7.0.21 : 2026-06-24

• Enhancements:
  • Managed Instances: Added support for rejoin actions from both desktop and hub manager UI, including batch rejoin options.
  • Managed Instances: Added batch actions in manager for Dashboard assignment, Tags, and Remove from Hub.
  • Notifications: Added per-instance notification email preference support, used instead of ACME account email where configured.
  • Subscriptions: Advanced certificate options are now available for subscription-managed certificates in manager UI.
  • DNS: Added HostUp DNS provider support via Posh-ACME.
  • DNS: GoDaddy DNS now uses the Posh-ACME provider path, deprecating our legacy provider.
  • Scripts: Improved script execution providers, including updated Linux local script support and improved PowerShell result parameter handling.
  • UI: Various manager and desktop usability refinements (recent items formatting, cert details layout, and managed instance navigation improvements).
• Fixes:
  • Licensing/Activation: Activation and licensing checks now use stable ID rather than machine name to avoid issues after hostname changes.
  • Hub Connectivity: Improved error reporting when hub licensing checks cannot communicate with the API.
  • Subscriptions: Hub-sourced certificate subscriptions no longer poll unless renewal is due.
  • Managed Instances: Instances are now marked pending until initial connection is completed.
  • Validation: Internal hostname pre-validation has been removed so CA-side validation determines acceptance.
  • Deployment/Tasks: PowerShell in-process task execution now consistently supports optional result input parameter behavior.
  • UI/Status: "View Log" option is always available in certificate status, and binding update messages are no longer shown when no binding update occurred.
  • Updater: Fixed AutoUpdate script compatibility for 7.x.

7.0.20 : 2026-05-29

• Enhancements:
  • Core & UI: Updated our draft dns-persists-01 suppport
  • UI: Various minor layout and UI updates.
• Fixes:
  • Tasks: Manually resolving a failed task now updates the overall status and reports to dashboard etc.
  • Tasks: Tasks should not execute if the previous request was a success, only the current primary request should be considered unless running tasks manually.
  • Core: Update ARI replace skip logic
  • Managed Challenges: prefer hub joined instance authentication before any other provided credentials
  • Hub Service: Perform custom reload of hub service certificate config. Automatic reload provided by .NET was not reliable.

7.0.19 : 2026-05-22

• Enhancements:

  • PowerShell BREAKING CHANGE: PowerShell support has been significantly revised and compatibility may be affected. You are encouraged to test your workloads before deploying.

    • Previously 7.x versions used in-process PowerShell 7.x, which is not compatible with some existing PowerShell scripts/add-ins including our built-in example Exchange/RDP tasks. Versions before 7.x used an older version of .NET and In-Process PowerShell 5.1.
    • PowerShell scripts will now run in the default Automatic execution mode:
      • Windows: launches as a new process using the system PowerShell (5.1 by default where available).
      • Linux: runs PowerShell 7.x in-process
      • The Launch New Process option is retired in favour of the execution mode options.
      • Added experimental new Full Impersonation mode (Windows)
      • More information at https://docs.certifytheweb.com/docs/script-hooks

  • UI & Core:

    • Common Name is now re-enabled by default in generated CSRs despite being deprecated, so there is now a global setting for this behaviour.
    • There is a new option to ensure CA intermediates are added to the machine intermediates store (Windows). Most machines do this automatically except where outgoing http is blocked.
    • General settings have now been split into renewal-related settings and advanced settings.
    • Primary request status is now tracked independently of Task status for fine-grained error status tracking.
    • New option to duplicate an existing managed certificate for easier copying of complex items
    • Settings: Added new per-instance system log viewer
    • Fixed issue with target instance IDs appearing as GUIDs instead of the resolved target instance name.
    • Various UI refinements including Certificate Subcriptions, Managed Challenges etc.

  • Hub API: new public endpoints for listing managed instances and adding new managed certificates (using managed challenges by default).

• Fixes:

  • UI: Review of date/time format consistency in the UI.
  • Tasks:
    • Fix to allow a task to be manually run when the main request has failed, and also ensure tasks still run if they are set to run on primary request failure.
    • Fixed UI for the list of services in the service restart task (Windows).
  • Various dependency updates, minor fixes and refinements

7.0.18 : 2026-04-10

• Enhancements:
  • Core & UI: Implement support for Hub managed Certificate Subscriptions. This allows an authorized instance to subscribe to a hub managed certificate so that the hub can look after renewal and the managed instance just performs deployment.
  • Core: Draft support for the upcoming dns-persist-01 ACME Challenge type, which enabled persisent DNS validation with a single record per domain/subdomain.
  • Core: New support for filtered access determined by assiging Managed Instances tag scoped roles under Security. Support updated for tagged Managed Challenges to simplify access.
  • Core & UI: Dashboard reporting can now be administered via the hub for each managed instance.
  • Managed Challenges: Tag scoped access. New managed challenge polling mechanism also allows for long running managed challenge tasks.
  • UI: Custom CAs now allow overlapping DNS labels previously prevented by validation.
  • UI: Admin - review subscribable/accessible items each instance is allowed to see based on their assigned roles (optionally tag scoped).
  • UI: Managed instances can now be assigned custom titles
  • UI: Recently Viewed items in nav
  • UI: Various layout and content updates
  • DNS: Add Technitium provider via Posh-ACME
  • Hub API: Reorganize public and internal endpoints and split docs (Settings > Security > API Access) for easier reference.

7.0.17 : 2026-02-12

• Enhancements:
  • Initial 7.x Production Release
  • Tagging: Major new tagging feature to help organize, filter and manage resources. Includes new experimental tag scoping for service principal roles (context dependant).
  • Misc:
    • CA editor now allows you to flag CAs which require CN in the generated CSR.

7.0.16 : 2026-01-12

• Enhancements:
  • Core & UI: Deprecate support for Days After/Days Before renewal internal modes. Shorter certificate lifetimes now require percentage lifetime elapsed based renewal.
• Fixes:
  • UI: Maintenance window settings would previously error due to missing model properties if preferences had not been previously updated.

7.0.15 : 2026-01-09

• Enhancements:

  • Core: New Maintenance Window feature allows you to optionally set a named day/time window in the week for renewals to be attempted, this can be applied globally per instance or per managed certificate.
  • Core & Export: New optional strict export chain building options and best-efforts chain building.
  • UI: New Certificate Details view under Certificate > Advanced > Details, show the decoded certificate and export chain (strict chain or derived from machine trust store).
  • UI: Basic sorting of managed cert attributes in list view

• Fixes:

  • Hub: Periodic refresh of managed items per instance
  • Core: log when preferred chain not matched
  • CA: Some CAs require CN in the generated CSR

7.0.14 : 2025-11-21

• Fixes:
  • Core: IMPORTANT Fix issue with SQLite database filtering for auto renewed items. All 7.0.13 users must upgrade or renewals will not occur.
  • Hub: Fix issue with instance reconnection after hub restarts/updates failing due to expired authentication. This requires updating both the hub and any associated instances.

7.0.13 : 2025-11-17

• Enhancements:

  • Core: initial support for proxies via HTTPS_PROXY/HTTP_PROXY/CERTIFY_PROXY environment variables
  • UI:
    • Managed Instances view now shows connected/not connected instances and has extensive filtering UI
    • Managed certificates browse view has new instance browser for easier filtering
    • Managed certificate now open in a dialog to avoid navigation away from list view
    • Import/Export: comprehensive updates to UI and functionality.
    • General UI updates
  • DNS: New Hetzner Cloud provider via Posh-ACME
  • Installer: new option to skip service startup on first use, this allows the user to customize the service account before encrypting any credentials etc. Service is no longer recreated, so service account choice remains in place.

• Fixes:

  • Tasks: Apache/nginx files copy tasks updated for linux
  • Http Challenge: Allow serviceconfig to point back to API when using https, so that challenge responses can be retrieved.
  • Instances: improved sync of changed managed item info

7.0.12 : 2025-10-28

• Enhancements:
  • UI: Minor layout updates
• Fixes:
  • DNS: Fix AWS Route 53 provider error due to SDK changes.
  • Hub: Fix incorrect summary totals caused by duplicate cached instance info

7.0.11 : 2025-10-24

• Enhancements:
  • General: Move from beta to release candidate status for production use.
  • Managed Challenges: Add new (Use Managed Challenge) DNS authorization option for certificates managed directly on the hub, which require no additional config.
  • UI: disable add/edit options for users when in read only modes
  • Access: Add new managed challenge admin role
  • Minor dependency updates
• Fixes:
  • OIDC: fix authentication routing
  • CA: Google Trust Services currently require CN in the generated CSR
  • Core: Clean-up X509Certificate2 after use to avoid temp RSA keys remaining on disk.

7.0.10 : 2025-10-06

• Enhancements:
  • UI: Improve login form key events handling, remove reload on login
  • UI: Use .Net 10 for frontend
• Fixes:
  • OIDC: Fix editing OIDC provider config
  • UI: Fix date formatting in download log

7.0.9 : 2025-10-03

• Enhancements:
  • Auth: New OpenID Connect (OIDC) provider support, allowing users to sign in using common Single Sign On providers such as Azure Entra.
  • Tasks: Change task execution order
  • UI: Login submit on enter, darker Dark Mode theme for better contrast, nav menu is responsive based on screen size.
• Fixes:
  • Managed ACME Server: certificates are no longer created as Staging only.
  • DNS: Fix incorrect parameter for NameSilo provider
  • Access: Refresh system auth roles config regardless of version changes etc
  • UI: Managed certificate order should not change on refreshing cached details, Task edits should result in Save option enabling.
  • UI: Dates should be displayed in consistent format
  • UI: Fix UI path routing on refresh,

7.0.8 : 2025-09-18

• Enhancements:
  • Tasks: (Windows) Start/Stop/Restart A Service task renamed to just Restart a Service. Minimized service dropdown layout changes by limiting display name length.
  • Minor dependency updates

7.0.7 : 2025-09-15

• Fixes:
  • Managed ACME: Improve compatibility with ACME clients
  • Managed ACME & Managed Challenges: Auto clean-up of managed DNS challenges

7.0.6 : 2025-09-05

• Enhancements:
  • Managed Licenses: Managed multiple licenses within the hub and apply/remove them in batches to managed instances.
  • Core: Add PKIaaS.io as built-in CA option, deprecate BuyPass as a supported CA as they have discontinued their ACME service.
  • CLI: add version command and fixes for json output, add license check output
  • Auto Update: fix app name in auto update PowerShell script
• Fixes:
  • Data Stores: Arm64 SQLite database fixes
  • Improve compatibility of Managed ACME service for clients including acme.sh

7.0.5 : 2025-07-29

• Enhancements:
  • Hub UI and API:
    • Managed ACME: Experimental ACME proxy service, allowing any EAB enabled ACME client to use the hub ACME API and have DNS challenges be completed automatically by the hub using Managed Challenges (even if the original ACME client does not support DNS challenges).
    • UI: Improved handling of auth expiry in the UI, general UI updates (CA list and editor), additional validation UI for challenge configurations, Reset Status option
    • Stored Credentials: Implement optional unlockable stored credentials (allowing specific secrets to be read via API for custom scripts etc), add optional expiry date not so that expiring credentials are more visible.
    • Core: Add Actalis as a built-in CA configuration
    • Core: Cert CN (deprecated by CAs) is no longer set in CSR unless the configuration specifically requires it.

7.0.4 : 2025-07-03

• Enhancements:
  • API & UI: Additional updates for restricting actions based on roles
  • UI: assorted updates and improvements
  • Security: Add hub viewer role for real only hub access (dashboard readers etc)
  • Updated support for monitoring certs managed by external cert managers on same instance or on ccm/agent instances (including new config options under Settings):
    • Certbot
    • acme.sh
    • win-acme & simple-acme
    • Posh-ACME

7.0.3 : 2025-06-12

• Enhancements:
  • Core:
    • DNS: Add NameSilo DNS provider
    • Dashboard: Remove status reports if item deleted
    • Updated dependencies

7.0.2 : 2025-05-21

• Fixes:
  • UI: periodic cleanup of progress and test results
  • UI: auto sign out when API auth expires
  • UI: fix domain list entry for cert identifiers
  • Minor updates and fixes
• Enhancements:
  • UI updates including CA account EAB settings and custom key options

7.0.1 : 2025-05-05

• Enhancements:
  • Hub service now includes default hubservice.json config for configuration of https and preferred host:port
• Fixes:
  • /docs/api shows available API
  • Log plugin errors on service load
  • Implement Certificate > Security options (Custom CSR, Custom Key, PFX password etc)

7.0.0 : 2025-04-29

• Introducing Certify Management Hub (alpha)

6.1.11 : 2025/10/21

6.1.10 : 2025/10/17

6.1.9 : 2025/08/06

6.1.8 : 2025/07/28

6.1.7 : 2025/06/25

6.1.5 : 2025/04/02

6.1.4 : 2025/03/18

6.1.3 : 2025/03/04

6.1.2 : 2024/10/31

6.1.1 : 2024/10/16

6.1.0 : 2024/08/09

6.0.18 : 2024/05/10

6.0.17 : 2024/05/01

6.0.16 : 2024/04/25

6.0.15 : 2024/02/22

6.0.14 : 2024/02/12

6.0.13 : 2023/12/12

6.0.12 : 2023/10/25

6.0.11 : 2023/08/21

6.0.10 : 2023/08/01

6.0.9 : 2023/06/26

6.0.8 : 2023/06/22

6.0.7 : 2023/06/21

6.0.6 : 2023/06/20

6.0.5 : 2023/06/15

6.0.4 : 2023/05/24

6.0.3 : 2023/05/23

6.0.2 : 2023/05/22

6.0.1 : 2023/05/19

6.0.0 : 2023/05/12

5.9.6 : 2023/04/28

5.9.5 : 2023/04/17

5.9.4 : 2023/02/24

5.9.3 : 2022/12/22

5.9.2 : 2022/12/15

5.9.1 : 2022/12/01

5.9.0 : 2022/11/29

5.6.8 : 2022/04/04

5.6.7 : 2022/03/28

5.6.6 : 2022/03/17

5.6.5 : 2022/02/02

5.6.4 : 2022/01/11

5.6.3 : 2022/01/07

5.6.2 : 2021/12/20

5.6.1 : 2021/12/17

5.6.0 : 2021/12/15

5.5.7 : 2021/10/27

5.5.6 : 2021/10/20

5.5.5 : 2021/09/24

5.5.4 : 2021/09/09

5.5.3 : 2021/09/09

5.5.2 : 2021/07/23

5.5.1 : 2021/07/22

5.5.0 : 2021/07/19

5.4.3 : 2021/05/22

5.4.2 : 2021/05/21

5.4.1 : 2021/05/20

5.4.0 : 2021/05/18

5.3.5 : 2021/03/17

5.3.4 : 2021/03/04

5.3.3 : 2021/03/02

5.3.2 : 2021/02/26

5.3.1 : 2021/02/23

5.3.0 : 2021/02/19

5.2.1 : 2020/12/03

5.2.0 : 2020/11/26

5.1.12 : 2020/10/29

5.1.11 : 2020/10/21

5.1.10 : 2020/10/13

5.1.9 : 2020/10/08

5.1.8 : 2020/09/18

5.1.7 : 2020/09/14

5.1.6 : 2020/09/10

5.1.5 : 2020/09/07

5.1.4 : 2020/09/03

5.1.3 : 2020/08/28

5.1.2 : 2020/08/21

5.1.1 : 2020/08/20

5.1.0 : 2020/08/19

5.0.12 : 2020/06/16

5.0.11 : 2020/06/11

5.0.10 : 2020/06/03

5.0.9 : 2020/06/02

5.0.8 : 2020/05/21

5.0.7 : 2020/05/15

5.0.6 : 2020/05/12

5.0.5 : 2020/05/09

5.0.4 : 2020/05/04

5.0.3 : 2020/04/29

5.0.2 : 2020/04/26

5.0.1 : 2020/04/26

5.0.0 : 2020/04/25

---