DaUM changelog

This topic lists changes made to the Device and Update Management in updates, beginning with release 2023.9 (reverse order - most recent changes at the top).

Release Windows® service 2025.6, PLCnext Technology App 25.6.0.295, Docker® 25.6

  • Configurable system use notification
    The system use notification displayed below the login is configurable, as it may not be suitable for all customers and areas of use.
  • Dependencies between update plans
    The user can define when a second update plan should start depending of the outcome of a first update plan.
  • File transfer with direct loading
    Support for direct loading of OPC UA when transferring updates to the controller.
  • Limitation of the country code for the OPC UA® certificate to 2 characters
    The country code used when creating new OPC UA® certificates is limited to 2 characters.
  • Editable asset WBM URL
    The Open WBM link on the asset detail page uses a fixed URL scheme to construct the link. For customer configurations with an intermediate reverse proxy, these URLs may not work. The URLs are editable for each asset.
  • Backup and restore for firmware from version 2025.0
    The DaUM offers a backup and restore functionality for PLCnext Technology devices with firmware  version 2024.0 LTS and 2024.6 by using the DaUM Backup and Restore app. 
    Due to system changes since firmware version 2025.0, the DaUM Backup and Restore app no longer works. Instead, the DaUM requires a new interface to enable backup and restore for firmware from version 2025.0.
    The path /opt/plcnext/data/Services/BackupAndRestore/ must be shared via PLCnext Engineer as the BackupAndRestore folder.
  • DaUM as a repository server
    The option of using the CURe server is very interesting, but not suitable for installations in critical infrastructures where no connection to the Internet is permitted. The DaUM therefore offers the option of adding your own repository as a source for update packages. This repository must be set up by the user.
  • EST status 202
    Query the status in accordance with RFC 7030 when requesting certificates from an EST server.
  • Force GDS certificate renewal
    If the certificate of the internal DaUM GDS server has expired, the DaUM client can no longer communicate with the internal DaUM GDS (like any other external client). The user cannot renew the certificate because the internal trust is broken. The user must repair the trust manually.
    To avoid a manual action, the user can force a certificate renewal when the GDS certificate has expired.
  • WBM via HTTPS by default
    Access to the WBM of the DaUM is via a secure connection by default. The DaUM generates a self-signed WBM server certificate the first time it is started and uses this certificate to secure the connection. The admin can change the initial self-signed certificate at a later time.
    For containerized implementations, the admin can set up an additional reverse proxy setup to secure the connection. In such a scenario, the admin should still be able to configure a (non-encrypted) HTTP port for the WBM via the administration settings.
  • Defect solved: Filter function no longer causes DaUM to crash.

Release Windows® service 2025.3.1

  • Correction of the configuration of the nssm service

Release Windows® service 2025.3, PLCnext Technology App 25.3.0.2282, Docker® 25.3.0

  • Enforce change of default password
    When the DaUM is running in a non PLCnext Technology environment, the DaUM should enforce that the user has to change the default password of the admin user upon the first login.              
  • Notification about expiring DaUM OPC UA® client certificate
    The DaUM checks the lifetime of the OPC UA® client certificate and shows a warning notification once the lifetime drops below the configured threshold for lifetime days of certificates.
    The overview page also lists the DaUM OPC UA® client certificate if it will expire soon. Use the same table as the existing table for expiring connection certificates.
  • Resume subset of pending updates in an update plan
    The user is able to resume only a subset of assets in an update plan which was executed with "transfer only".            
  • Allow update/overwrite of PLCnext Engineer project regardless of existing project
    The user is able to select multiple assets which may have different PLCnext Engineer projects runnning, and select a another PLCnext Engineer project which should be installed on all of the assets. The fact that the assets were running some other (different) PLCnext Engineer project does not matter. The existing project is going to be replaced.
  • Application always added to GDS when GDS is active
    When a GDS is configured, any added application (connection) should automatically be added to the GDS.
    The button to add a connection without a GDS entry should be removed.
    If no GDS is configured, then only a connection is created (as before).                
  • Insecure connections
    Allow connections to ignore the validity of a presented certificate. The certificate is trusted but its validity should be ignored. The validity should only be ignored for one certificate for a connection. If the certificate changes, the validity is checked again and it has to be ignored again manually.
    Connection which have a disabled validation check for the certificate are considered as insecure.          
  • Export asset list as CSV
    It is possible to export the list of assets stored in DaUM in CSV format suitable for Microsoft® Excel.
    The user is able to provide a list of fields and their ordering which should be included in the export.
    The user is not able to export sensitive data such as passwords or private keys with this export.
  • OPC UA® data explorer for DaUM
    The DaUM has an OPC UA® data explorer that is able to read and write OPC UA® variables of an asset. The explorer presents a tree view for the OPC UA® hierarchy with a detail view when selecting a node in the tree. In the detail view, the variable should be editable if not read-only.  
  • Configurable EST request timeout
    The EST request timeout is configurable. The default timeout is 30 seconds.         
  • Provide initial admin password as start parameter (only for Docker®)
    It is possible to set the initial admin password via a start parameter when launching DaUM. This is especially useful in Docker® setups where the password may be managed via environment variables.

Release Windows® service 2024.9, PLCnext Technology App 24.9.0.16780

  • You can now perform an automatic certificate push.
  • Improvements to the user interface.

Release Windows® service 2024.6, PLCnext Technology App 24.6.0.15914

  • It is now possible to restore a backup on another device of the same type. 

Release Windows® service 2024.3, PLCnext Technology App 24.3.0.15373

  • You can perform a backup and restore via the DaUM.

Release Windows® service 2024.0, PLCnext Technology App 24.0.0.14038

  • You can switch the DaUM language to German. No restart is required.
  • You can select events to be displayed as notifications (see NOTIFICATIONS tab on the Administration page).
  • The OPC-UA applications page has been renamed OPC-UA servers & clients.
  • On the CERTIFICATES tab on the Administration page you will now find information on certificates that were previously on the GDS tab.
  • You can now execute several update plans at the same time (parallel execution, see Update plans page).

Release Windows® service 2023.9, PLCnext Technology App 23.9.0.13067

  • The DaUM can be restarted via the UI.
  • The DaUM OPC UA® client is able to connect via "Reverse Connect" to OPC UA® servers. 
  • The UX of the application edit page is improved to make it more intuitive to understand how to use and navigate. 
  • It is possible to delete software packages.
  • A single update file may be associated with different kinds of software/hardware combinations. The UI shows only one download link and indicates that this update file belongs to a set of combinations.
  • Changes on how to configure the internal GDS.
  • The DaUM offers the possibility to change values in signing requests for devices. The DaUM as the certificate manager in the middle offers dialogs to change attributes before the signing request is forwarded to the internal CA or an external PKI.
  • The certificate management of the DaUM is improved to work correctly in different scenarios. The distribution of a Certificate Revocation List (CRL) is a central part of this.
  • All functions of the DaUM are accessible via the REST API.
     

 

• Published/reviewed: 2025-10-15  ☂  Revision 085 •