Version: 22.10

Release date: 2022-10-27

The Smart ID 22.10 release provides updates, improvements, and bug fixes for the components included to ensure high quality and security.

Upgrade Smart ID

See Upgrade Smart ID with general information regarding upgrading Smart ID. See also specific information regarding upgrade from 22.04 to 22.10: Upgrade Smart ID Identity Manager from 22.04 to 22.10.

Smart ID compatibility

Smart ID 22.10 is compatible with the following component versions:

Components	Version
Smart ID Identity Manager Smart ID Self-Service Smart ID Digital Access Smart ID Messaging Smart ID Physical Access	22.10
Smart ID Digital Access	6.2.4 (included in Smart ID 22.10)
Smart ID Messaging	3.5.0 (included in Smart ID 22.10)
Nexus Card SDK	6.0
Smart ID Certificate Manager	8.5.0 and later
Smart ID Desktop App	1.8.8
Smart ID Mobile App	5.7.1 iOS and 5.7.9 Android
Smart ID Mobile SDK	3.5.0 iOS and 3.1.1 Android
Nexus Personal Desktop Client	5.8.6

Main new features

Usability improvements in Smart ID Self-Service and Identity Manager Operator

The Smart ID 22.10 release provides several improvements in Smart ID Self-Service and in Identity Manager Operator. Smart ID Self-Service contains an easy-to-use quick search for the object lists and allows individual sorting of the processes on the dashboard. Furthermore, in order to improve accessibility compliance, a fully functional keyboard navigation has been introduced to Smart ID Self-Service.

In Identity Manager Operator, the available processes on the start page are now easier to access via a list.

Mobile Visual ID enrollment in Identity Manager

With this release of Smart ID, Identity Manager introduces support for visual IDs in the Smart ID Mobile App. In addition to provisioning of digital IDs (X.509 certificates), a visual ID similar to a physical employee card can be provisioned. The visual card on the mobile can contain front-side and backside layouts, including individual texts (name, card number etc.), as well as individual photos and logos.

Detailed feature list

Features

Jira ticket no	Description	Identity Manager & Self-Service	Physical Access
CRED-10136	CRL synchronization between Certificate Manager and Identity Manager Certificate Revocation Lists (CRLs) from Nexus Certificate Manager can be pushed into Identity Manager via distribution rules in Certificate Manager. This helps to keep the certificate status in Identity Manager up-to-date, even if revocation is done in a third party system, or directly in Certificate Manager. See Push CRL from Certificate Manager to Identity Manager for more information.	X
CRED-11623	Running "Scheduled Jobs" (BatchSync) without search configuration The batch synchronization functionality in Identity Manager has been extended. It is now possible to run jobs without any search configuration as input source. The functionality can now also be used in general schedule processes for background execution. This is called "Timed process". To reflect this change, "Batch Sync" is renamed to "Scheduled Jobs". Read more in Set up scheduled jobs in Identity Manager.	X
CRED-11829	New library version for liquibase New library version for liquibase.	X
CRED-11831	New library version for spring/spring security New library version for spring/spring security.	X
CRED-11833	New library version for xmlsec New library version for xmlsec (via Opensaml).	X
CRED-12231	Mobile Visual ID provisioning in Identity Manager With this release of Smart ID, Identity Manager introduces support for visual IDs in the Smart ID Mobile App. In addition to provisioning of digital IDs (X.509 certificates), a visual ID similar to a physical employee card can be provisioned. The visual card on the mobile can contain frontside and backside layouts, including individual texts (name, card number etc.), as well as individual photos and logos. See Smart ID Messaging - Standard service tasks in Identity Manager for more information.	X
CRED-12304	New library version for Velocity New library version for Velocity.	X
CRED-12709	New library version for Esapi New library version for Esapi.	X
CRED-12985	Quick search in Smart ID Self-Service This release provides a new, and very easy-to-use search functionality in Smart ID Self-Service. In the listings of available cards, requests, certificates on the main page of Self-Service, a quick search has been introduced that helps to navigate through the lists, especially when managing large object lists (for example, managing cards for contractors). See Set properties for Smart ID Self-Service for more information.	X
CRED-13131	List all processes on the start page of Identity Manager Operator In previous versions of Identity Manager and PRIME, only the "new process" per selected category (create new employees, new cards etc.) was shown. In order to improve the usability, all available processes to create new objects are now listed on the start page, irrespective of the selected category, so that any of these processes can be started with just one click. See Configure tasks (processes) in Identity Manager Operator for more information.	X
CRED-13218	New library version for CaptainCasa New library version for CaptainCasa.	X
CRED-13277	Keep or delete history entries in Identity Manager Until now, ObjectHistory data was kept for a certain, configurable time-frame in the database, even if the corresponding core object was deleted. The reason for this is the chained signature of the history which guarantees an audit-proof history. With this release, you can decide if you want to keep the history data, with an audit-proof signature, or if you want to deactivate the chained signature and delete object history due to GDPR reasons. See section "Delete old history entries" in Chained signature for object history in Identity Manager for more information.	X
CRED-13297	Process sorting in Smart ID Self-Service and Identity Manager Operator The order in which the processes on the Self-Service Dashboard are shown can now be defined in Identity Manager Admin via the "Process sorting" item in the menu tree. Also the processes, listed on the Identity Manager Operator start page (see new feature CRED-13131) can be sorted in the same way. See Configure tasks (processes) in Smart ID Self-Service and Configure tasks (processes) in Identity Manager Operator for more information.	X
CRED-13503	Extract SERIALNUMBER attribute from X.509 certificate The standard service task "Cert: Extract Certificate Attributes" is extended and can now also extract the SERIALNUMBER value from the Subject DN attribute. See "Cert: Extract Certificate Attribute" in Certificates - Standard service tasks in Identity Manager.	X
CRED-13513	Supporting new Microsoft OID in certificate requests Microsoft recently introduced a new attribute (OID 1.3.6.1.4.1.311.25.2) in certificates that are used for Windows smart card authentication. The attribute will be activated by default in May 2023 as mandatory via a Windows update. Identity Manager now supports this attribute in certificate requests via Nexus Certificate Manager and Microsoft ADCS.	X
CRED-13705	Keyboard navigation in Smart ID Self-Service Keyboard navigation is introduced in Smart ID Self-Service to improve accessibility. See Smart ID Self-Service for more information.	X
CRED-13832	Improved logging for BPMN-history cleaner Improved logging on debug level for the BPMN-history cleaner background job.	X
CRED-13836	New library version for slf4j New library version for slf4j.	X
CRED-13906	New library version for Jetty http2-server New library version for Jetty http2-server to mitigate a high severity CVE (CVE-2022-2048).	X
CRED-13964	Footer with static links in Smart ID Self-Service Static tests and links can now be customized in the footer for Self-Service login screen and the other pages in Self-Service. See Configure footer text in Smart ID Self-Service for more information.	X
CRED-14063	New library version for moment.js New library version for moment.js in CaptainCasa to mitigate two high severity CVEs. (CVE-2022-24785 and CVE-2022-31129)	X
CRED-14188	Updated version for Apache Commons Text Updated version for Apache Commons Text to mitigate CVE-2022-42889. See Apache Commons Text Vulnerability for more information.	X
IDC-917	Oracle DB support for Physical Access Added Oracle DB support for Physical Access. See Smart ID deployment recommendations.		X
IDC-2116	Support for Doors and Zones in Salto Added support in Salto for Doors and Zones for SALTO ProAccess SPACE based on configuration settings (UseUpgradedVersion). See Set up integration with Salto for more information.		X

Corrected bugs

Jira ticket no	Description	Identity Manager & Self-Service
CRED-8554	There was an issue with the scrollbar on a form not resetting when going from one form to the next. This has been fixed.	X
CRED-9811	There was an issue when uploading the configuration in Identity Manager Operator where the name of the configuration was not fully displayed. This has been fixed.	X
CRED-9879	There was an issue in Identity Manager Operator where symbolic names sometimes were displayed instead of translations, even if translations were available. This has been fixed.	X
CRED-9906	There was an issue in Identity Manager Admin when using the character "-" in CSV export paths. This has been fixed so that all valid Windows and Unix paths are supported.	X
CRED-10620	When using ${...} statements in groovy scripts, they where unintentionally interpreted as JUEL expressions. This has been fixed.	X
CRED-11413	There was an issue when running a search in the "Batch orders" page in Identity Manager Operator where photos were not displayed. This has been fixed.	X
CRED-11728	In certain scenarios it could happen, after starting a Batch Sync Job manually via the "Start once" button in Identity Manager Operator, that the respective job did no longer work. This has been fixed now.	X
CRED-12965	There was an issue where the description of a batch order template was not visible in Identity Manager Operator, only the symbolic name. This has been fixed.	X
CRED-13242	There was an issue when clicking on the expanded view for objects where all objects were not shown in the list. This has been fixed.	X
CRED-13299	When editing system properties in the "Admin" page in Identity Manager Operator, the labels were not completely displayed in some cases. This has been fixed.	X
CRED-13815	Removed Null Pointer Exceptions and improved error handling of invalid filters in search, and specifically in LoadEntityParameterizedAction. See "Process: Load Entity" in Process - Standard service tasks in Identity Manager.	X
CRED-13885	There was an issue where the order of the search configurations in the search drop-down menus in Identity Manager Operator were not sorted as defined. This has been fixed.	X
CRED-13900	There was an issue where you could not deselect a value in a drop-down field even when the field was not mandatory. This has been fixed by adding a blank line in the drop-down.	X

Release announcement

For details on the updated Smart ID configurations and deployment configurations, see here:

Smart ID configuration release note

-

Smart ID deployment configuration release note

# RELEASE NOTES FOR SMARTID DEPLOYMENT CONFIG

All notable changes to this project will be documented in this file. Be aware that the [Unreleased] features are not yet available in the official tagged builds.

## [Release 23.10.7-24-10-10]

### Changed
- upgrade to Postgres 16 [CRED-17704]
- restart-all.sh detects whether sudo is needed for docker commands [CRED-18249]
- Updated prime-connectors to 2305.1.0 (based on Ubuntu 22.04) [CRED-13886]
- Corrected Hermod and Selfservice setup in WSL dev readme and the configuration. [CRED-17952]
- Changed Postgresql version to 14.12. [CRED-17538]
- Changed traefik version to 3.0.2. [CRED-17538]

## [Release 23.04.22-24-10-02]

### Changed
- upgrade to Postgres 16 [CRED-17704]
- restart-all.sh detects whether sudo is needed for docker commands [CRED-18249]
- Updated prime-connectors to 2305.1.0 (based on Ubuntu 22.04) [CRED-13886]

## [Release 23.10.6-2024-07-15]

### Added

### Changed
- upgrade to Postgres 16 [CRED-17704]
- restart-all.sh detects whether sudo is needed for docker commands [CRED-18249]
- Updated prime-connectors to 2311.1.0 (based on Ubuntu 22.04) [CRED-13886]
- Corrected Hermod and Selfservice setup in WSL dev readme and the configuration. [CRED-17952]
- Changed Postgresql version to 14.12. [CRED-17538]
- Changed traefik version to 3.0.2. [CRED-17538]

## [Release 23.04.19-2024-07-2]

### Added

### Changed

- Changed Postgresql version to 14.12. [CRED-17538]
- Changed traefik version to 3.0.2. [CRED-17538]


## [Release 23.10.2-2023-10-30]

### Added

### Changed
- Modified permissions of the 'certs' directory in init-smartid.sh to 755 (to allow Hermod to read the directory). [CRED-16526]
- Updated Prime Connectors version. [CRED-16153]


## [Release 23.04.7-2023-08-28]

### Added
- Added missing attestation key config to signencrypt.xml (fixes VSC). [CRED-16128]

### Changed

## [Release 23.04.5-2023-07-17]

### Added
- Added a readme-wsl-dev.txt how to setup SmartID Docker containers in a WSL environment. [CRED-15948]
- Added environment variable to docker-compose.yml of authentication service.

### Changed
- Restored environment references for Digital Access and Physical Access containers [CRED-15915]

## [Release 23.04.4-2023-06-30]

### Added
- Added restart-all.sh for easy stopping and starting of all containers or a subset of them. [CRED-15854]

### Changed
- The variable DOCKER_NETWORK_MTU has the default value 1500 now. You are not forced to choose between several options. [CRED-15854]
- When executing init-smartid.sh a message informs you about the current MTU value and when it is recommended to reduce it. [CRED-15854]
- The names of most of the docker containers start with "smartid-" by default. This prefix can be changed now via variable DOCKER_CONTAINER_BASE_NAME in file smartid.env. [CRED-15854]
- The hostname of the postgresql container now has the DOCKER_CONTAINER_BASE_NAME prefix as well.

## [Release 23.04.3-2023-06-23]

### Added

- Added AriadNext Connector Docker image. [CRED-14963] 
- Added file .gitattributes to make \*.sh and \*.env files always containing only LF instead of any CRLF. Fixed file datadog.env accordingly. [CRED-15795]

### Changed

- Escaped the ESC character (0x1B) in echo statements of shell scripts to avoid problems with Azure file preview and git diff output. [CRED-15795]


## [Release 23.04.2-2023-06-02]

### Added

### Changed

## [Release 23.04.1-2023-05-11]

### Added

- Added init-smartid.env to configure the docker network MTU. [CRED-14088 via CRED-15316]
- Added helperFunctions.sh and helperCreateLink.sh to be used by init-smartid.sh. [CRED-14088 via CRED-15316]

### Changed

- Replace deprecated docker network syntax in docker-compose.yml files. [CRED-14088 via CRED-15316]
- init-smartid.sh / stop-smartid.sh detect if docker needs sudo. [CRED-14088 via CRED-15316]
- init-smartid.sh now optionally removes files created by previous runs (postgres db, bootstrapped certs, etc). [CRED-14088 via CRED-15316]
- No explicit setting of env_file in docker-compose.yml files. [CRED-14088 via CRED-15316]
- Messaging database is now configured via MESSAGING_DB_URL var. [CRED-14088 via CRED-15316]
- stop-smartid.sh now uses the compose command "down" instead of "stop", which also removes the containers after shutting them down. [CRED-14088 via CRED-15316]

## [Release 23.04.0-2023-04-28]

### Added

- Added Workspace One Connector Docker image. [CRED-14215] 

### Changed

## [Release 22.10.0-2022-09-20]

### Added

- Added ContentProviderJWSSigner descriptor in signencrypt.xml. [CRED-12232]
- Added renewFromKeypairs.sh to renew end-entity certs.

  WARNING:

  - This only works if you (re-)bootstrap with the updated createca.sh, as the old version discarded data required for renewal.
  - Re-bootstrapping will invalidate any encrypted secrets and history signatures in IDM due to chaning the keys.
  - Re-bootstrapping will also overwrite the certificates and keys in the docker deployment folder, so make a backup first,
    so you can use the respective tools for re-signing and re-encrypting existing history/secrets.

### Changed

- automatically (re-)start mailhog
- fixed naming of traefik rules for mobile-iron
- Changed createca.sh to retain keypairs and CA metadata, so we can enable renewal (see above).
- Removed cRLSign attribute from ca.conf to avoid issues with failing CRL checks.
  NOTE: This only has an effect on newly bootstrapped CAs.

## [Release 22.04.0-2022-05-05]

### Added

- Added Mobile Iron Docker image. [CRED-11817]
- Added new properties for MI image in smartid.env. [CRED-11817]

### Changed

- Changed properties for Nexus GO Cards API V2. [CRED-12951]

## [Release 21.10.0-2021-11-09]

### Added

- Added Digicert Global Root CA certificate. [CRED-11688]
- Added some Let's Encrypt root certificates. [DEVOPS-971]
- Added documentation for maxProfiles option to hermod-conf.yml
- Added `.yamllint` file to set default YAML linting config. [DEVOPS-1085]
- Added volume mapping for logs folder in IDM and Self Service. [DEVOPS-403]
- Fixed cacerts folder permissions in init-smartid.sh script.
- Added support for docker compose v2 command in init-smartid.sh script.

### Changed

- New properties for CAAS credentials in smartid.env (placeholders must be replaced before using Nexus GO Cards). [CRED-11688]
- Fixed some copy issues in the init-smartid.sh script.
- Changed the default selfservice config to include auth methods params example.
- It is now possible to change IDM language settings via system properties. [DEVOPS-860]
- It is now possible to change Self-Service configuration via `CONFIG_JSON` environment variable. [DEVOPS-945]
- Fixed typo. [DEVOPS-1090]
- Replaced Self-Service `IDM_URL`, `INSTANCE_ID`, `IDM_TENANT` by `APPLICATION_YAML` json. [DEVOPS-1127]
- Set logging driver to json-file (the default one) for all containers explicitly [DEVOPS-1136]
- Fixed YAML format. [DEVOPS-1085]
- IDM and SelfService now support custom translations and do not require mapping the whole translation files again. See doc for more info. [DEVOPS-1118]
- Change Import Logger to correct class [DEVOPS-1143]
- Switched to new image naming for IDM
  - `nexus-prime/explorer` changed to `smartid/identitymanager/operator`
  - `nexus-prime/designer` changed to `smartid/identitymanager/admin`
  - `nexus-prime/tenant` changed to `smartid/identitymanager/tenant`
  - `nexus-prime/updatedb` changed to `smartid/identitymanager/updatedb`
  - `nexus-prime/ussp2` changed to `smartid/selfservice`
- Changed Smart ID version to 21.10.0

### Removed

- Removed Self-Service config.json file. [DEVOPS-945]
- Removed expired Let's Encrypt certificates. [DEVOPS-971]
- Removed translation files for IDM and SelfService. [DEVOPS-1118]

## [Release 21.04.0-2021-05-20]

### Added

- Default values for Selfservice tenant id and instance id. [DEVOPS-738]
- Added example format for MSSQL everywhere we build the DB URL (`${DBHOST}/${XX_DB_NAME}`) because MSSQL requires a different URL format. [DEVOPS-737]
- Include SANs from CSR in bootstrap TLS cert in `bootstrap/conf/ca.conf`.
- Generate tls certificate for non-treafik setup in `bootstrap/createca.sh`.
- Log4j2 config and template for json layout [DEVOPS-758]
- Datadog agent compose file, with some examples, see nexus and datadog documentation if you want to use it [DEVOPS-759]
- Added a check in `init-smartid.sh` that exits the script if user didn't fill the mandatory properties in `smartid.env` (thoose with <XX> value pattern). [DEVOPS-759]
- Added Physical Access Interflex PACS. [DEVOPS-752]

### Changed

- IDM DB will no longer be initialized through init-smartid.sh script. Initialisation has to be done manually by starting container in identitymanager/updatedb. [DEVOPS-739]
- Rename containers to use dash instead of underscore, so containerName can work for DNS lookup (underscore is not allowed in DNS names).
  WARNING! This can cause issues if you use the new config with existing containers using the old names!
- Align idm update db naming to use the name "updatedb" everywhere
  WARNING! This can cause issues if you use the new config with existing containers using the old names!
- Align digital access directory names with service names
- fix bootstrap cert folder permissions in init script
- Changed all HERMOD*\* properties to MESSAGING*\*. [DEVOPS-751]
- Moved each component's respective config into their own config folder. [DEVOPS-751]
- Made all volume mappings static in compose file, no more properties. [DEVOPS-751]
- Reorganized smartid.env to be split by component, making it easier to find component related properties. [DEVOPS-751]
- Internal ports (inside docker) are now static in the compose file. [DEVOPS-751]
- Moved postgres related properties outside smartid.env, because it is a separate tool not meant for production. [DEVOPS-751]
- Renamed service names in compose files to match their container name. [DEVOPS-751]
- Changed traefik version to 2.4.8. [DEVOPS-638]
- Changed file extension of generated certificates from `.base64` to `.cer`.
- Updated translation files for IDM. [DEVOPS-761]
- Updated Messaging config for 21.04 (Hermod version 3.1.1). [DEVOPS-802]
- Changed chmod command to give permission 700 instead of 600, because hermod needs execute permission.
- Updated SmartID version to 21.04

### Fixed

- Fixed typos in the strings that are echoed to the user during the initialisation. [DEVOPS-646]

### Removed

- Removed unused properties in smartid.env. [DEVOPS-751]
- Removed unused ports for Physical Access. [DEVOPS-752]
- Removed Physical Access config files. Configuration is now handled using environment variables. [DEVOPS-752]
- Removed TZ from all docker-compose files. Since it is set in `smartid.env` which is mapped using `env_file`, declaring the variable a second time in `env` was not necessary.

## [Release 20.11.2-2021-03-23]

### Added

- If you say Yes to the question if Digital Access shall be deployed in the host, it will make it possible for the containers to listen on 80 and 443. [DEVOPS-540]

### Changed

- Bump SmartID version to 20.11.2
- Updated IDM translation files with newer ones. [DEVOPS-561]
- Adjust volumes for hermod certificates. [DEVOPS-651]
- Removed Selfservice hotfixes introduced in previous release. [DEVOPS-626]

### Fixed

- Fixed tenant startup by removing mapped sign encrypt configuration, so it uses the default one from inside the container. Since IDM Tenant uses less certificates, the same config as IDM operator or admin cannot be used.[DEVOPS-640]
- Fixed the copy_files.sh script used in IDM operator, admin and tenant [DEVOPS-692] + [DEVOPS-656]

## [Release 20.11.1-2021-02-18]

### Added

- Added issuing and root CA certificates to IDM containers for config signing (These certs should NEVER be used for production). [DEVOPS-549]
- Added hotfix for SelfService -> IDM connection [DEVOPS-626] Has to be removed with 20.11.2+

### Changed

- Update sign-encrypt engine to the newest state. [DEVOPS-549]
- Update version number to 20.11.1

## [Release 20.11.0-2021-02-01]

### Added

- Added mailhog as tool in /tools/mailhog. The tool can be used to test to send emails in Digital Access and Identity Manager. [DEVOPS-482]

### Changed

- Set false on traefik network in the traefik, adminer and mailhog to be enabled in traefik by default. [DEVOPS-486]
- Changed file extension of generated certificates from `.crt` to `.base64`
- Changed so that identity manager Admin and Operator do not require signed configurations/modules for uploading and downloading them by default. [DEVOPS-515]

### Fixed

- Fix environment variable usage inside traefik config file. [DEVOPS-514]

## [Release 20.11.0-2020-12-22]

### Added

- Added support for selfservice branding. [DEVOPS-471]
- Added log4j volume mapping for idm containers. [DEVOPS-470]

### Changed

- Updated traefik version to 2.3.4 [DEVOPS-464]
- Renamed selfservice container from "idm_selfservice" to "selfservice".
- Renamed all environment variables starting with "IDM_SELFSERVICE_x" to "SELFSERVICE_x".
- Changed Hermod config to disable by default some end-points and to hide sensitive data in logs. [DEVOPS-484]
- Improved the `stop-smartid.sh` script to handle dynamically all docker-compose stop commands and to work regardless of where the script is called from.
- Improved the `init-smartid.sh` script to work regardless of where the script is called from.
- Improved the `createca.sh` script to work regardless of where the script is called from.
- Renamed `idm-selfservice-language.json` to `idm-selfservice-config.json`.

### Fixed

- Fixed volume mapping for selfservice tomcat server.xml by using a separate variable than identitymanager.
- Fixed French translations for IDM and Selfservice.

## [Release 20.11.0-2020-12-07]

### Added

- Added `postgres/init/init-smartid-databases.sql` so that Physical Access database is created when starting up postgres. The "pauser" is created, and a default password is set.
- Added LE CA Certificate to cacerts. [DEVOPS-455]
- Added AJP port variables in smartid.env and use them in identitymanager docker-compose files. Also added AJP Connector in `config/idm-tomcat-server.xml`, which has to be enabled manually (and port set accordingly). [DEVOPS-348]
- Add following new features to the identitymanager docker-compose files: [DEVOPS-406]
  - Support for new CA store volume mapping
  - Support for new system properties environment variable
  - Support for new DB properties environment variables
  - Support for new spring bean volume mapping. See `IDM_VOLUME_PATH_SPRING` in `smartid.env`.
  - Support for new jars volume mapping. See `IDM_VOLUME_PATH_LIBS` in `smartid.env`.
  - Support for new class files volume mapping. See `IDM_VOLUME_PATH_CLASSES` in `smartid.env`.
- Add following new features to the selfservice docker-compose file: [DEVOPS-406]
  - Support for new CA store volume mapping
  - Support for new IDM url environment variable
- Added adminer as tool [DEVOPS-407]
- Added maxVersion for TLS to be 1.2 due to compatibility issues with some mobile devices. [DEVOPS-413]

### Changed

- Changed smartid version to 20.11.0.
- Moved "/certs/boostrap" to "/boostrap".
- Changed postgres version in smartid.env from 9.6.18 to 12.5. [DEVOPS-431]
- Split identity manager containers into their own docker-compose files: [DEVOPS-382]
  - Added `identitymanager/admin/docker-compose.yml`
  - Added `identitymanager/tenant/docker-compose.yml`
  - Added `identitymanager/init-db/docker-compose.yml`
  - Added `identitymanager/operator/docker-compose.yml`
- Adapted `init-/stop-smartid.sh`, and paths inside `smartid.env` and some docker-compose files to fit new docker-compose yaml files. [DEVOPS-382]
- Change the ini-smartid.sh script to ask if traefik is going to be used as Ingress/proxy. [DEVOPS-408]
- Changed in `config/hermod-conf.yml` some values to <IDM-HOST-HERE> and <DA-HOST-HERE> on client samples.

### Removed

- Removed MSSQL from deployment package, since Physical Access now support postgres. [DEVOPS-448]
- Removed unnecessary variables in `smartid.env`.
- Removed identitymanager compose docker-compose file. [DEVOPS-382]
- Removed entrypoint definition from identitymanager docker-compose files. [DEVOPS-406]
- Removed pgAdmin and portainer and its variables from smartid.env. [DEVOPS-407]
- Removed modern and old options for tls in `config/traefik/traefik-tls.yml`. [DEVOPS-413]
- Removed TRAEFIK_TLS_OPTION from smartid.env. [DEVOPS-413]
- Removed identitymanager spring beans because we changed how handle them.
- Removed samples.

## [Release 20.06.1-2020-10-27]

### Added

- Added port forwarding to hermod container in the messaging docker-compose file.
- Added spring bean files for identitymanager in `config/idm/spring_operation` and spring_admin.
- Added translation files for identitymanager in `config/idm/translation_id`m and for selfservice in `config/idm/translation_selfservice`.
- It is now possible to enable Strict SNI using TRAEFIK_TLS_STRICTSNI=true

### Changed

- changed smartid version to 20.06.1.
- Changed HERMOD_DOMAIN_PREFIX from "mb" to "messaging".
- Changed the DB init/update script behavior, can be controlled with `IDM_DBUPDATE_SCRIPT` in smartid.env.
- Changed `traefik-tls.toml` file to YAML and used variables from .env file. Possibility to change TLS certificate file names TRAEFIK_TLS_DEFAULT_CERTIFICATE and TRAEFIK_TLS_DEFAULT_CERTIFICATEKEY.
- Improved the `init-smartid.sh` script.
- Moved seflservice to a separate docker-compose file.

### Fixed

- Fixed the jdbc url for `config/da-admin-customize.conf`.

### Removed

- Dropped `restart: always` for identittymanager init-db.
- Removed explicit DBHOST naming in `smartid.env` to force user to set its own value.

## [Release 20.06.0-2020-09-28]

### Added

- Added possibility to add custom-beans for IDM Operator and Admin, in `config/idm`.
- Added possibility to change translation for IDM Operator, Admin, Selfservice and Tenant.
- Added IDM_DB_QUARTZ example for MSSQL, Oracle and DB2.
- Added `container_name` for all containers in:
  - identitymanager/docker-compose.yml
  - traefik/docker-compose.yml
- Added docker hostname for postgresdb DB_HOST in `postgres/docker-compose.yml`, this will make test deployment work from start.
- Added docker hostname for mssqldb PA_DB_HOST in `mssql/docker-compose.yml`.
- Added `restart: always` to all containers. All containers will the start up after re-boot, if they have been started once before.
- Included SAML example files for IDM in `/samples/idm_saml`.

### Changed

- Changed smartid version to 20.06.0.
- Changed explorer/operator url in `idm-selfservice-application.yml`.
- Changed location of Identity Manager SAML samples files from `/docker/compose/examples` to `/samples/idm_saml`.
- Updated `init-smartid.sh`:
  - Now check if docker and docker-compose are installed, if not the script will exit.
  - Now asks if the deployment is a production deployment, if "Yes", the script will complete and deployment configuration can be done. If "No":
    - Ask if postgres and/or mssql shall be deployed and started.

### Fixed

- Moved comments in `smartid.env` file to be on a separate line instead of behind the value. This was breaking the applications since comments would be evaluated as part of the value.
- Fixed `init-smartid.sh` so that it works properly on CentOS.
- Fixed a typo for variable `IDM_DB_QUARTZ`.
- Fixed typo in idm-operator container in `identitymanager/docker-compose.yml`, in the path to the castore.jks.

## Removed

- Removed `init-smartid-test.sh`, it is included in init-smartid.sh.

Contact

Contact Information

For information regarding support, training and other services in your area, please visit our website at www.nexusgroup.com/.

Support

Nexus offers maintenance and support services for Smart ID components to customers and partners. For more information, please refer to the Nexus Technical Support at www.nexusgroup.com/support/, or contact your local sales representative.

Release note Smart ID 22.10