Cenovel release notes

Cenovel Opal 2.0.2

2026-10-14T00:00:00Z

A calmer Home, and Opal 2.0 made quicker to read and to act on: outages say what they affect, one Replace flow from an outage or a switch, risks kept apart from outages, endpoint answers that end at the jack and room, tighter register pages and a faster switch page.

Improved

Home greets you by name and opens on Your week: a strip of the last seven days and the next two weeks, with what got better behind today and what is dated ahead, followed by six figures on how the district is doing, from devices answering Cenovel to warranty dates. Outages are no longer listed on Home; the header signals them.
An outage's drawer and its incident page say what it affects: the closets, switches, access points, endpoints and rooms that depend on it. Anything Cenovel can't trace says so plainly.
Replace… opens one flow from an outage or from a switch's More menu. On a stack it first asks which unit goes out; sending the old unit to the vendor links the open case or starts one, and the case number is asked once.
Risks are no longer counted as outages. A risk, such as PoE that would not survive a supply failure, is listed on Health risks, and a restart appears under "In the last day" on Home. Neither counts toward open outages, downtime, Explore or the morning report, and both stay in history.
Finding an endpoint ends at its wall jack and room when they are recorded, in search and in Endpoint finder.
A switch's page reads Edit record, Configure switch and More, with a line under the title saying whether it meets the district standard. Picking ports keeps the side panel closed; Port details opens it when you want it.
Register pages show their first rows sooner: the view switch, search and filters sit in the table's card, a list's second row of tabs became a switch in that card, and card titles no longer repeat the page name. This covers Inventory, Storerooms, Lifecycle, Cases, IP addresses and Settings lists.
A switch's page opens faster and picking ports no longer stalls the page.
Buttons and pickers no longer look like dark holes in the dark theme, cards are a step dimmer, and a table's column headers sit a step under the card's title band so the two read apart.
The console's blue glow is back, larger and softer, and drawn so that it no longer shows bands; drawers, dialogs, menus and popovers share the page's blue titanium.
Replace keeps its Cancel and Replace buttons in view and holds still as the form grows; on a stack you can change the unit you picked.
Search offers a switch first and opens its page, and a partly typed address finds devices.
The Help menu's release notes open the public notes on cenovel.com.

Fixed

One answer per fact: Standards, Lifecycle, the outage popover, drawer and incident page, the Sites list and site pages now agree.
A rack row shows its worst open fault beside the device instead of a green tick during an outage.
A failed action never shows a raw error message, and a closet is never offered as a repair.
A fault has one name everywhere, and a place's site is said once.
E-Rate rows hold to one or two lines.
A battery backup schedule no longer says no units are on record when there are.
Escape clears a picked port when the side panel is closed.
A register's summary strip no longer grows after it loads and pushes the page down.
The Operations timeline counts open outages the same way as Outages, and names a fault as the outage title does.
A cleared PoE risk no longer shows a green tick.
When traffic is on a backup link, an outage no longer lists what depends on it as if it were down.
An incident page states the start time and length once.
Health risks has its title back, and column headers read apart from the rows in both themes.
Backup cards in Settings are spaced apart, and Asset census no longer cuts off its detail line.
With Port details open, the port is named and cleared in one place.

Upgrade notes

One database change: Explore's daily outage history is rebuilt in the background so past days count outages only. Install it as you installed 2.0.1.

Cenovel Opal 2.0.1

2026-10-13T00:00:00Z

A calmer, easier-to-read look for Opal 2.0: cards, their titles and table headers stand apart in both themes, picking ports opens their settings straight away, and a switch's configuration can be expanded and searched. No database changes.

Improved

Cards stand off the page in both themes, and a card's title row and a table's column headers have their own quiet band, so it is easier to find your place. Cards inside drawers lift off the drawer.
Picking one or more ports on a switch opens their settings under the faceplate straight away, with no Configure step. The side panel still shows the port's details.
A switch's page says at the top whether it is answering Cenovel and when it was last polled. Ask now sits beside Locate, and the Ports controls fit on one row.
A switch's configuration can be expanded to the full window and searched, with the changes still marked.
A closet's Overview leads with what is open there, and the room and photo sit beside it.
Cases › Repairs shows each stage once, as one card: choose a stage to see only its cases.
Drawers and dialogs open solid and faster, with nothing showing through while they slide in.
Tables no longer repeat a value that every row shares; it is said once instead.
The console's background is plain titanium in the dark theme and platinum in the light one. A chosen option, record or card is shaded quietly instead of outlined in blue.

Fixed

On a closet's Devices page, the operational timeline no longer touches the card above it, and card gaps are even across Reports, switch pages, Projects and Locations.
"Not recorded", "Unknown" and "None" look different from each other.
The browser tab's title follows the page you are on and no longer repeats itself.
In the IP addresses drawer, a row's actions are no longer cut off.
Months are always capitalized, and an E-Rate due date no longer ends mid-sentence.
On Settings › Access, your own tier is marked again in the frosted look.

Upgrade notes

No database changes. Install it as you installed 2.0.

Cenovel Opal 2.0.0

2026-10-12T00:00:00Z

Opal is the first major release after Agate: a console regrouped around the network engineer’s day, outages known within about two minutes at thousands of devices, new Network pages that answer everyday questions, the first changes Cenovel can make to a switch under strict safeguards, and an Enterprise edition beside the K-12 one.

New

A two-tier sidebar: Home, then Network, Equipment, Work, Knowledge and Insight, each opening its pages, with Settings at the foot. Pages are named as plain nouns, and the old names still find them. Find your way around
Outages are signaled in the header without a count, and Home stays calm: one line about the network, what is coming and what changed since your last visit. Start your day from Home
One-minute availability checks open a not-answering outage within about two minutes, apart from full reads, and the switches behind a silent switch are listed under its outage. Each is a switch in Settings › System › Features, off until you turn it on. Availability checks and polling
An incident page for each outage: what happened in one paragraph, its timeline, related outages, guides, the hardware and environment when it opened and cleared, and device logs, downloadable as one page. Work an outage
Locate blinks a switch’s or access point’s locator light for five minutes, for Operators and up. Locate a switch or access point
Change switch ports from the port view, with a dry run, a reachability verdict, a maintenance window, checks before and after, and an automatic undo. Off until a district turns it on. Change a switch port
Device logs: collect a device’s logs with read-only commands, read them in a terminal view, attach them to a vendor case, and collect them automatically after an outage. Collect device logs
New Network pages: Endpoint finder, Room diagnostics, Health risks, Access point policies with a page for each access point, IP addresses, Circuits and Configuration changes from nightly configuration backups. Find an endpoint
Each switch page shows how Cenovel reaches the switch, from facts it read: the management interface, gateway, uplink and whether the access lists let Cenovel in. How Cenovel reaches a device
Alerts by email and Microsoft Teams, with rules by event, site and severity, quiet hours and a delivery log. Set up alerts
Automations that capture logs, run read-only scripts and tests, note outages, tell people and propose fixes for a person to apply, and read-only scripts run against up to 10 switches. Both are off until a district turns them on. Set up automations
Knowledge › Guides: field guides as shared pages with fields filled in for each device, shown beside a model’s outages; and Resources for downloads, specification sheets and test equipment. Write and share field guides
An Enterprise edition, set by the signed license, with neutral words and without the K-12 features; the public demo has a fictional company too. K-12 and Enterprise editions
Testing readiness and the district standard: whether each school is ready for testing and whether it meets the standard, with every reason dated.
Server and battery backup pages like the switch page, with clickable parts, and power supplies, drives, transceivers and UPS batteries tracked as assets.
Security › What Cenovel talks to and Malware scanning: every connector beyond your network is a switch, off until you turn it on, and every upload is scanned.

Improved

The side panel is optional and closed by default; every page is complete without it, and a row opens its record in one click.
The switch page opens on its ports, with Now and Changes at its foot.
Reports holds Reliability, Asset census, Replacement plan and Work trends; Explore reads a typed question without guessing; Saved shares and schedules views. Reports, Explore and Saved
Settings that govern one page now live on it: the morning report’s schedule on the report, automatic log collection on Device logs, the nightly find on a site’s Devices, stale links on Blueprint, and pickups, kiosk and doorway readers on Storerooms.
Polling is split by kind of work: SNMP full reads at once, SSH sessions at once and table reads per switch, with the availability checks beside them on Settings › Monitoring › Schedule.
Access points read the same way through Juniper Mist and ExtremeCloud IQ, and say when a controller doesn’t report something.
One definition of a change across every view: refused or stale attempts never count as changes before an outage.
A frosted look in the dark theme, and one motion system across the console.

Upgrade notes

Upgrading changes the database. It adds storage for incident snapshots and situations, upload scanning, endpoint sightings, guides and resources, configuration backups and reachability, access point policies, battery backup and server readings, IP subnets and reservations, circuits, switch changes and their windows and templates, connectors and controller credentials, the site log, testing windows, the district standard, jacks, alert rules, test equipment, the school day, scripts, availability checks, automations, controller alarms and locator lights. Back up before upgrading; Settings › System › Updates does this for you. Going back to Agate needs the backup taken before the upgrade.
Container installs, and installs behind a firewall that translates addresses, should set Settings › System › Deployment › Address devices see Cenovel at, so each switch page can check the switch’s access lists against it. How Cenovel reaches a device
Locate is on by default for Operators and up. Turn off Let Cenovel blink locator lights in Settings › System › Features if your district doesn’t want it.
With no value saved, polling reads 16 switches over SNMP and 8 over SSH at once after the upgrade. A value saved for the retired Switches at once setting carries over to both.
The one-minute availability checks, their outages, outage parents, switch changes, scripts, automations, email and Teams alerts, and network tests are off until a district turns them on. A Juniper Mist or ExtremeCloud IQ connection already in use stays on.
Old addresses still open the same pages, and old page names still find them in search.

Cenovel Agate 1.3.0

2026-10-06T00:00:00Z

A redesigned console: each page is shaped for its job. Records like a switch keep their work beside a side panel, lists lead with a dated strip of figures and open a side panel only when you pick a row, and places like sites and closets lead with the place. Record drawers are wider, with the record's identity and actions in a left column. No database changes.

New

Switch page: the ports are the work, with Now and Changes beside them. Picking a port shows it in the side panel.
Lists such as Outages, Cases, Purchasing and E-Rate lead with a dated strip of figures you can click to filter. The side panel opens only for the row you pick.
Sites and closets lead with the place: facts, what needs a look and a timeline of changes, then the closets or the room and its rack.
Record drawers for assets, contracts, purchase orders, funding requests, battery backups, device logs and people put identity, key facts and actions in a left column.
My work, Activity and Background tasks open in the side panel on pages that have one.

Improved

One look for every status: checked, needs a look, failing, and a separate look for Not recorded, Unknown and Couldn't read.
Corners, type and buttons follow one scale, with one primary action per page and the rest under More.
Opening a record from a dialog brings the drawer to the front, with a way back to the dialog.
Page titles, tabs and the sidebar carry no status; each verdict lives in the page itself.
The sidebar and side panel draw no scrollbar, collapsed or expanded.
A site's overview leads with its own photos; closets live on the Closets tab.
Home stays calm when much is wrong: three items per group, the rest one click away, and no alarm on the headline.
Strips of figures close with a divider after the last figure, and the read time sits in a divided cell of its own.
The rear port view shows the switches only. Stack membership stays in the Stack slots table.
The public demo shows sample photos of its sites and closets.
The side panel opens and closes as one motion, fades at its scrolled edges, and never makes the page scroll sideways.
Pages open without jumping: tab rows, tables and switch diagrams take their final place from the first frame.
Every release reads with its full version number, such as Agate 1.3.0.
Page changes fade in, and content fades in as it arrives; closing the side panel widens the page smoothly.
Side panel actions sit in even columns; Storerooms shows its equipment table first; Software and lifecycle has its filter card back.
Monitoring leaves the sidebar: Needs a decision opens from Home and My work, and poll Runs are a tab in Settings › Monitoring. Old Monitoring links lead to their new places.
Opening the side panel mirrors closing it: the page makes room smoothly, then the panel fades in.
When Juniper Mist stands in for a switch, its facts appear in the switch page's own places (the Ports card, the port view, the selected port and Now), each labeled and dated, instead of a separate card.

Fixed

A switch whose stack is missing a member no longer stops the page.
The Audit trail never shows a raw record id.
On the switch page, slot names sit on the same line as their faceplate captions.
Settings › Updates › This build spans its card.
Modular buildings no longer repeats its blocked moves in a line under the figures.
Going to a page from Home, the sidebar or the command menu no longer flashes the page you were on before.
The Audit trail's tab mark no longer jumps while its entries load.
A side panel's pinned header keeps the card's rounded top while scrolling, with no gaps (My work, Activity, every selection).
Side-panel pickers keep their caret, My work's footer no longer covers its text, and several captions read correctly.
Vendor cases shows all its columns in Firefox.

Upgrade notes

Agate 1.3.0 has no database changes. Back up before upgrading as usual; Settings › Updates does this for you.

Cenovel Agate 1.2.1

2026-10-06T00:00:00Z

Cenovel reads your equipment only, by construction, collects device logs you can attach to vendor cases, and lets Juniper Mist stand in for switches with SSH turned off. Switch pages now say what changed since you last looked, show ports getting worse, port labels that disagree with what is plugged in, and Juniper Mist's own alarms. Small database changes; upgrades take a backup first.

New

Read-only by construction: every SSH command passes a per-platform list of read commands and a fixed list of refused commands that no setting can loosen. SNMP never sets a value, and controller and server connections only read. See Security.
If Cenovel ever tries to send a command that could change a device, nothing is sent: Cenovel stops talking to all devices, records it in the audit trail, alerts, and shows a banner until an Administrator EX who signs in again releases it.
Work › Device logs: collect read-only logs from a switch, stack member or access point, kept with a digest, and attach them to a vendor case. A case can now be downloaded with its logs as a .zip.
When a Juniper Mist switch has SSH turned off, Cenovel shows its state from Mist, labeled and dated, instead of calling it down. Switches Mist lists that Cenovel has no record of are proposed in Needs a decision.
Settings › Updates shows This build: release, build, commit, schema and collector, with Copy build details for support.
Since you last looked: the switch page says what changed since your last visit, or over the last 7, 30 or 90 days: restarts, software changes, stack members that left or rejoined, and ports that went down.
Today's Since your last visit adds Network changes: switch restarts, software changes and stack changes, with switches in one closet that restarted together said once.
Ports getting worse: the switch page lists ports whose errors, discards or link drops are well above their own previous four weeks, and ports that came back at a lower speed. Switches read over SSH say their counters aren't read instead of looking clean.
Labels that disagree: a port whose description names a different device from the one seen plugged into it is marked on the switch page and the selected port. Cenovel never changes a description.
Juniper Mist alarms appear on a Mist-managed switch or access point and on its outage, dated and labeled as Mist's report.
Open SSH and Copy SSH command on the switch page open your computer's own SSH program at the switch's address. Server records open the iDRAC, iLO or management console in a new tab.
Servers can record a host address and operating system; Windows servers then offer Open in Remote Desktop and Copy address. No username or password is ever included.

Improved

A calmer sidebar: Home, Outages and Monitoring sit together at the top, then Places, Equipment and Work. Labels read in white with quieter icons, the current page is marked in blue, and the filter stays out of the way until you use it. It fits at 1280 by 800 with room to spare.
Software and support is now Software and lifecycle; searching for support still finds it.
The header shows your name with your organization beneath it. My work and Activity show a dot instead of a number, the theme switch is in the account menu, and background tasks appear only while one is running or has failed.
The Cenovel logo is centered at the top of the sidebar over a thin divider, and the running release sits just above Settings; administrators can open Settings › Updates from it.
The Request a trial button on cenovel.com no longer picks up the header link underline.
Port highlights fit the drawn port on every switch model: the selection ring sits on the port's frame and the status color fills its real opening.
Settings › Updates names each release once in your local time, shows an install from the moment the appliance takes it, and clears the bundle once the update is done.
A switch's band says when it last answered as a relative time.
The keyboard focus ring on sidebar items is no longer cut off, and the sidebar no longer flickers while it collapses or expands.
The license line at the bottom of every page is gone; the license is in Settings › License.

Fixed

A power cut during an update’s check no longer leaves a scratch database behind that blocks later updates.
The times in the write-block release dialog are shown in your time zone.
A switch that refuses SSH is no longer reported as not answering.
The install dialog says what happens: you stay signed in, and the page comes back on its own.
Warranty status now agrees everywhere: Today, the Owned report and Explore use a recorded warranty first, as the asset page does, and month-end purchase dates count the same on every page.
Cards in a long outage panel no longer get squeezed.
A server with no controller address says Not recorded.
Restart counts no longer count a poll that didn't report uptime as a restart. Counts Cenovel can still check against its recent polls are recounted; older ones it can't check now read Unknown instead of a wrong number.

Upgrade notes

Agate 1.2.1 adds small database changes, and recounts stored restart counts once, which can take a few minutes on an install with years of history. Back up before upgrading; the upgrade script and Settings › Updates both do. Going back to 1.2.0 needs the backup taken before the upgrade.

Cenovel Agate 1.2.0

2026-10-05T00:00:00Z

A sidebar grouped by what things are, Home, Settings as a space of its own, one search that finds sites, equipment, pages and settings by name, and one list of what needs a decision. Every address stays the same, so bookmarks and links keep working. No data changes: Agate 1.1.1 upgrades by swapping the image.

New

The sidebar is grouped by what things are: Home, then Places (sites, modular buildings, storerooms), Equipment (monitoring, all equipment, battery backups, software and support), Work (outages, projects, cases and repairs) and Insight (reports, E-Rate). See Finding your way.
Settings is its own space at the foot of the sidebar, with six groups: People and access, Inventory data, Monitoring, Reports and notices, System, and Security. The pages within a group are tabs, and Back to the console returns to the main sidebar.
Press ⌘K (Ctrl+K on Windows) to find any site, switch, access point, page or setting by name, or to run a command. The header’s search box opens the same menu.
Needs a decision gathers everything waiting on you in one list, oldest first: access points ExtremeCloud IQ lists that no record matches, devices a find turned up, software with no approved version, disposal orders waiting for your approval, loss reports and project changes. Each line opens the place where it is decided, and Home shows how many are waiting.

Improved

Home, formerly Today, leads with four answers: open outages, what is answering Cenovel, what needs a decision, and what falls due in the next 90 days.
Monitoring’s daily views (Overview, Needs a decision and Runs) are under Monitoring. Its configuration is Settings › Monitoring, with tabs Credentials, Networks, Schedule and Advanced.
Pages that hold more than one view show them as tabs along the top, in the same look everywhere.
Collapsing and expanding the sidebar is one smooth motion: icons stay in place and labels fade. With reduced motion it switches at once.
Battery backups has its own place in the sidebar, under Equipment.
Counts and audits is in the sidebar for everyone who can see All equipment.
Home’s Due in 90 days also counts battery services and E-Rate deadlines, and opens the one that falls due first.
In Modular buildings, each asset in a building opens its own drawer, with a way back to the building.
The demo’s morning report uses the same wording as the console: place and room first, then the device and what happened.

Fixed

In-app updates keep answering after a refused request. A refusal is explained and never stops the next request.
A newly installed appliance refuses an update bundle older than the release it runs.
On a slow host the appliance waits longer for the console to settle after an update, and the wait can be set.

Upgrade notes

Some places have new names: Today is Home; Analytics is Reports, where Estate is Owned and Work is Work trends; Monitoring › Access is Settings › Monitoring › Credentials; and in Settings, Asset tags is Tag numbering and Vendors is Manufacturers.
No address changed. Saved views, scheduled report links, morning report links and bookmarks open the same pages as before, and page permissions are unchanged.
No data changes: an instance on Agate 1.1.1 upgrades by swapping the image, and goes back the same way.

Cenovel Agate 1.1.1

2026-10-05T00:00:00Z

A calmer, more consistent console, morning report lines that lead with the closet and its room, and accessibility fixes for keyboard and screen reader users. A later build adds in-app updates from Settings › Updates. No data changes: Agate 1.1.0 upgrades by swapping the image.

New

In-app updates: an Administrator EX uploads a signed release bundle in Settings › Updates, reads its check, and installs it after signing in again. The appliance checks the bundle again itself, takes and checks a backup after Cenovel stops, and shows a maintenance page with its steps while Cenovel is down.
If a new release doesn’t start, the appliance goes back on its own: to the earlier release when the database allows it, otherwise by restoring the backup it just took, so nothing is lost. A power cut during an update is resolved at the next start.
Update bundles are signed with their own update key, separate from the release key.
ExtremeCloud IQ: Cenovel reads every access point itself, so an access point’s state is Cenovel’s own reading. XIQ supplies the room from each access point’s description, and access points XIQ lists that no record matches appear in Monitoring › Automation to review and create.

Improved

Accessibility: Rapid intake opens with Alt+S instead of the single key S, and the slash shortcut is gone, so typing never starts an action by accident. The hints name the modifier.
Accessibility: Two minutes before an idle sign-out, the console warns and offers to keep you signed in. It asks you to sign in again only when the server says the session has ended.
Accessibility: Keyboard focus is visible on every control, including checkboxes and the sidebar filter. Focus moves to the page content after sign-in, and to Undo or Cancel when an action was started from the keyboard.
Accessibility: Toasts and the ten-second cancel wait while the pointer or focus is on them, and error toasts stay until dismissed. Add person shows its errors at the field, with focus moved there.
Accessibility: Drawers are dialogs, so their headers and footers are no longer page landmarks. Screen readers now hear the right headings, control names, and the command menu’s result count.
Accessibility: At 200% zoom and on short windows, pages and drawers scroll as one, side-by-side cards stack, and a search button appears where the search field is hidden.
Accessibility: a conformance report (VPAT) is being prepared; see Accessibility to ask for it.
Page actions sit in the title row on every page, and cards side by side line up their tops and titles.
Figures on stat grids sit in even rows, with notes clamped to two lines. The asset drawer’s Where shows the short location.
Analytics chart cards share one height per row, and a card on its own takes the whole row.
The If this fails drawer opens with the figures that matter, then what is affected and the path, on the console’s type scale.
The drawer’s Connections lead with the recorded links. Add a link stays a button until it is used.
A stack’s member fascias are spaced at the panel gap, the Projects board’s lanes fit their cards, and a maintenance tile’s Cancel is in its More menu.
Each morning report and Today outage line now leads with the closet and its room, then the device, its state once, and one reason. Notices and attention groups say outages the same way.
Visual consistency: the remaining older dialogs, the inventory pager and the status badges now use the console’s shared parts, so they look and behave like the rest of the console.
Pickers no longer show counts beside their options.
Priority polling says plainly that priority sites share the normal schedule, and its notes sit inside the form.
Tables reach the edge of their card, with no gap at the sides.
The Security page now covers exposure and ports, sign-in and sessions, secrets, backups, release signing and updates in detail.

Fixed

A site project’s type is shown in words, and its start, due and next-due dates in the one date style.
A polled device’s role on the outages register is shown in words.
The RMA stage row stays on one line at 1280 and 1440 pixels.
Escape dismisses a chart tooltip from anywhere on the page before it closes a drawer.
Exported workbooks open in Excel without a repair prompt, and downloads finish before the page lets go of them.
On a new appliance, background work such as polling waits for the database setup to finish instead of stopping on its first start.

Upgrade notes

Nothing in the database changes. Upgrading from Agate 1.1.0 is an image swap, and the 1.1.0 image still starts on the same database if you need to go back.
Take and verify a backup before upgrading, as with every release.
In-app updates come with the later build of Agate 1.1.1. An appliance on Agate 1.1.0, or on the first build of 1.1.1, gets them after one last upgrade from the appliance console, which also installs the update key; see Upgrades & rollback. After that, upgrade from Settings › Updates.
Docker Compose installs upgrade with one command, the upgrade script; Settings › Updates shows it.

Cenovel Agate 1.1.0

2026-10-04T00:00:00Z

Sign in with the district’s Active Directory, set up a new district from one spreadsheet, see each stack member’s software, and trust each server controller’s certificate. A new install starts ready for a district other than the first.

New

Directory sign-in: people sign in with their Active Directory username and password, checked over LDAPS or StartTLS, never plain LDAP. Directory groups map to tiers, and someone in no mapped group cannot sign in. Passwords are never stored or logged. Directory sign-in
Directory sign-in can ask for a 6-digit authenticator code after the password, set up by scanning a QR code at the first sign-in, with ten recovery codes. An Administrator EX can reset a person’s authenticator.
Sign in with Microsoft stays available as a second button when it is configured, and the local recovery account always works, including when the directory is not answering Cenovel.
Settings › Import your estate records a new district’s sites, closets and switch management addresses from one spreadsheet. A check lists every line as will be created, already recorded or refused, with the reason, and writes nothing; the import then writes everything in one step, or nothing. Import your estate
A stack whose members run different software says so, and shows each member’s own version. Cenovel reads member versions from Juniper, Cisco and Extreme stacks.
Server controllers (Redfish) are checked against a trusted certificate before Cenovel sends them a credential: the controller’s own pinned certificate, or a certificate authority you supply. Turning the check off for one server needs an Administrator EX and a reason, and is recorded.
A new install starts a 30-day evaluation the first time it runs: the full product with up to 25 sites, and no license needed. After 30 days it keeps working without a license with up to 5 sites, and never becomes read-only. Importing a license ends the evaluation at once. Licensing
A trial license: a signed license file for a set number of days and sites, usually 30 days and 25 sites, imported in Settings › License like any other. When it ends, the console keeps working with up to 5 sites and is never read-only; the district’s own license replaces it at once. A trial license
A plan for security incidents and breaches: who leads, how to contain an incident, what evidence to keep, and the 72-hour notice. Incident and breach response

Improved

A brand-new install starts with a status for each product state and a neutral asset tag scheme, so its first closet and first found switch can be recorded at once. Both can be renamed in Settings. Status states
A new install starts with no departments; the district adds its own. The set-up checklist on Today walks a new district from its first site to its first switch reading.
Microsoft sign-in checks each ID token against the tenant’s published keys, with a nonce on every sign-in. The tenant can be given as its directory ID or a verified domain name.
Site collector releases are signed with a key that stays offline, in three steps: built unsigned, signed offline, then checked against the code that ships. Security & data
Each release now carries a software bill of materials, and every release is checked for known dependency advisories and committed secrets before it ships.
The sign-in page loads only when someone is signed out, so the console opens faster for everyone signed in.
Times are shown to the minute, never the second, in one date style across the console.
A calmer console: type on one six-step scale, closets five to a row, site pages with one row of tabs, content on cards, and toolbars on one line at 1280 pixels.
The switch page shows the selected port under the port diagram, and a project’s page opens with one clear header.
The appliance is built as one virtual machine with four disks, and the OVA is checked by its published SHA-256.

Fixed

A console that held a license and no longer has one it can verify now says the license is missing, instead of saying it expired and asking for a renewal.
A found device’s reported time is shown in the display time zone, not in UTC.
A site with no closets says so, instead of saying no closet matches the filters.
The Add person drawer no longer shows “new” under its title.

Upgrade notes

Upgrading adds storage for each stack member’s software version, for directory sign-in identities, and for each server controller’s certificate trust. Nothing already recorded changes.
Directory sign-in is off until an Administrator EX sets it up. Its service account password is a file in the deployment’s secrets folder, named ldaps_service_password.
An Agate 1.0.1 image still starts on the upgraded database until someone signs in through the directory. After that, roll back by restoring the backup taken before the upgrade.
A server controller whose certificate Cenovel already recorded keeps working. One with no recorded certificate is sent no credential until someone checks its fingerprint on the controller and accepts it.
An install upgraded from an earlier release has no evaluation; it keeps its 90 days to import a license.

Known issues

The site collector that reads member versions from Cisco and Extreme stacks reaches a district once its new release is signed. Until then, collectors keep running the signed release they have.
Directory sign-in reads groups from Active Directory; departments still come from Settings › People and departments.
Releases before Agate 1.1 do not recognize a trial license. Upgrade first, then import it.

Cenovel Agate 1.0.1

2026-10-04T00:00:00Z

A closet page built around a visit, one Devices list per closet, a rebuilt switch page, a clearer asset drawer, and licensing. Each screen now starts with the question an operator brings to it.

New

A closet’s Overview now answers the questions before a visit: what is open there right now, how to get in, which spares to bring from the nearest storeroom, what a visit affects, and what changed since your last visit. Plan a closet visit
Record how to get into a closet: where the room is in the building, the key or badge, a contact and access notes. Every change is recorded with who made it.
A new Capacity page for each closet shows free ports by type, PoE remaining and ports that have been down for 30 days, and answers whether the closet can take a number of new devices. Check a closet’s capacity
A new Lifecycle page for each closet lists every unit with its end of support and end of life, warranty, support, software against the approved versions and any planned refresh. Read a closet’s lifecycle
Print a door label for a closet: a 4 by 2 inch label with a QR code that opens the closet’s page.
Record whether a network device is approved to connect from its record, with an optional note. The answer is dated and names who gave it. Record connect approval
Licensing: each district imports one signed license file in Settings › License. Cenovel checks it on the appliance, with no internet connection needed. Licensing and renewals
Settings › License shows the status, how many sites are counted against the license and why each place counts or not, the term and days left, and every license imported.
Going beyond the licensed site count by more than the tolerance starts 30 days of grace, then the console becomes read-only until a license for more sites is imported or sites are retired. A license for more sites covers them from the day the count went over.
After a term ends there are 30 days of grace, then the console is read-only until the renewal is imported. A renewal starts on the old end date, and one imported early waits for its start date.
In read-only, people can still sign in, read, export, take backups and import a license, and monitoring, outage detection and alerts keep running. Changes are refused with a clear message.
A modular building that is away from every site is not counted as a site. Settings › License says why each place counts or not.
If the server’s clock was wrong and Cenovel kept a later time, an Administrator EX can choose The clock was wrong in Settings › License once the clock is confirmed by the time source or by steady hourly checks. Every attempt is recorded.

Improved

A closet’s switches and servers are in one Devices list with a type filter. Links to the old Switches and Servers pages open Devices with that type chosen. Work with a switch or stack
The switch page leads with five answers: whether it is answering Cenovel, ports up, PoE used, software and end of support. The switch card holds the views, legend, faceplates, Front and Rear, zoom and a table view, and a port’s card appears only when you select a port.
Switch facts, Lifecycle and Where it sits now sit side by side under the switch, and a stack shows each member’s PoE and lifecycle where members differ.
The switch page names a stack member that a device read found but nobody recorded, under Device read differences.
The asset record opens on four answers (status, where, last seen and when support ends), then groups its facts into Where and who, Identity and software, Purchase and coverage, and E-Rate, each with one action. Move, check out and hand over equipment
The asset record’s footer keeps Edit, Check out or Check in and Move at hand, with Hand over, Start repair, Create work, Replace and Report lost or stolen under More.
Dialogs share one layout across the console, and every dialog has a close button.
The cause filter on a site’s outages moved into the register’s toolbar, and Storage’s less-used commands moved under More.
Dates, states and counts that some pages showed in raw form are now written in words.

Fixed

A closet’s outage count and its list of open outages now agree, including outages quieted by a maintenance window.
A port card shows its coverage state in words and its read times formatted, instead of raw values.

Upgrade notes

Upgrading adds storage for closet access details and for each person’s last visit to a closet. Nothing already recorded changes.
Upgrading removes the tables an older inventory system left in an upgraded database. Cenovel never read them; they held that system’s staff accounts, sign-in history and settings. Only the backup taken before the upgrade keeps them.
An install that already holds data gets 90 days after the upgrade with a notice to administrators only; nothing is refused. Import the district’s license in Settings › License before then; contact Cenovel for it. A new install works with up to 5 sites until a license is imported.

Known issues

A stack’s software is shown as one version, because a read stores one version per management address.
What a visit affects can count only the links recorded in Cenovel. With none recorded, it says so rather than showing zero.
Manual reads such as Poll now are refused while the console is read-only. Scheduled monitoring is unaffected.

Cenovel Agate 1.0.0

2026-10-03T00:00:00Z

The first numbered release of Cenovel. It keeps funded records safe from the deleted-records purge, adds Replace for failed switches, stack members and parts, connects Juniper Mist, and brings the hardware catalog up to date, access points included. It follows equipment from purchase to disposal: storerooms with receiving, a kiosk and RFID doorways, purchase orders and invoices, E-Rate compliance checks, physical counts, and disposal orders with approvals and sanitization records.

New

Replace a failed switch, stack member or part in place. The position keeps its name, ports, links and management address, and you decide whether the old unit goes to a storeroom, the RMA board or disposal. Replacement and disposition
When Find devices reads a different serial at a known position, Cenovel asks you to confirm a replacement instead of adding the switch as new equipment. Replace a failed switch
Connect Juniper Mist with a read-only token. Cenovel reads Mist's sites, inventory, device status, events and alarms every 5 minutes, and you map each Mist site to a Cenovel site yourself. Juniper Mist
An access point that Mist reports as disconnected opens an outage worded as Mist's report, kept separate from devices that are not answering Cenovel.
Optional Mist webhooks: a signed disconnect, reconnect or alarm event asks for an immediate read, so the change shows within seconds instead of at the next scheduled read. Optional webhooks
Site types are yours to edit. Add, rename, reorder and delete them, move a type's sites to another type when you delete it, and set the type of many sites at once. Give each site a type
Mark a site type as Priority. Outages at its sites are Critical and their alerts say URGENT, and its devices are read every 2 minutes, with an outage opening after 4 minutes without an answer. Both times can be changed. Outages and planned maintenance
Each status label now maps to a product state, such as in stock, in use, in repair or disposed, so you can rename labels without breaking storage, RMA or disposal. Status states
Settings has a Funding sources list, and a record's funding source must come from it. Asset tags follow a tag scheme you set in Settings.
Record whether a device is approved to connect, with the date of the decision.
A MAC address can belong to only one live record. A duplicate typed with different punctuation or case is refused.
Contracts on the Vendors page: support, subscription, license, purchase and co-op contracts, with start and end dates for each covered serial.
Each asset shows its coverage as Covered until a date, Not covered with the reason, or Not recorded.
Renewals and Coverage gaps under Vendors show what is about to end, what has lapsed, and units still covered after disposal or past end of life. Renewal notices go out ahead of each contract's notice period, 90 days by default.
Advance-replacement RMAs track when the failed unit is owed back, and the RMA board shows a return as overdue.
A current hardware catalog: Cisco Catalyst 9000 and Catalyst 1200 and 1300 switches, Cisco and Juniper routers, Juniper EX and QFX switches, and current Extreme switches, many with front and rear drawings. Supported hardware
Storerooms receive deliveries, hold units for pickup and accept returns. A reservation expires on its own, and custody changes only when the person receiving the unit accepts it.
A storeroom kiosk: sign in with a badge and PIN, collect a pickup, and be signed out after each pickup or after a minute without activity.
Set a minimum number of spares per storeroom and model. Shortfalls appear in the morning digest.
Purchase orders, invoices and suppliers under Vendors. A unit's purchase order line sets its cost and funding, which can be split across funding sources by percent or by amount.
Attach typed documents, such as packing slips, invoices and certificates. Removing a document hides it and keeps the file.
Imports show a preview first, then apply all or nothing, and can receive units onto a purchase order line.
An E-Rate compliance workspace: entities and their BENs, FRNs and Form 471 lines, the Category 2 budget for each cycle, and a register you can export by FRN, funding year or BEN. Run an E-Rate cycle
Transfers of E-Rate funded equipment are checked against the program rules. A transfer to another district within 3 years of purchase is refused, with the date it becomes allowed. Each rule shows its source and the date it was last checked.
Disposal of E-Rate funded equipment installed for less than 5 years is refused wherever a unit can be disposed of.
Physical counts: count a place and everything under it, blind by default, with several people scanning at once. Review what is missing, resolve each exception, and close the count with a signed record of what was found.
Each asset shows when it was last checked in person, separately from when a device last reported it.
Report a unit lost or stolen. A second Administrator EX approves the report, and a theft needs a police report number.
A federal equipment inventory report built from physical checks, with a CSV download, and a list of places due for a count: every 12 months by default, and never more than 24 months for places that hold federal equipment.
Disposal orders: declare, approve, sanitize, collect and certify. Approvals come from someone other than the person who declared the order, and a unit becomes Disposed only when its order is certified.
Sanitization records following NIST SP 800-88: method, tool, verification, who did it and who validated it. A record cannot be edited after it is saved.
Each model records whether it holds configuration or credentials. A model with no answer recorded is treated as one that does.
Units received into a storeroom go onto their purchase order line and E-Rate plan line, and each receipt counts as an in-person check.
Fixed RFID readers at storeroom doorways record units leaving and returning, through the site collector. A reading never changes custody on its own. A reader starts by only observing; it can act on its own only after a commissioning test of at least 300 passages with at least 99% correct and no false moves.
A storeroom kiosk can also run a blind count of its own room, signed in with a badge.
Deleted records on a purchase order line, or bought with a federal award, are kept from the purge like funded records.
If this fails: from a site, closet or switch, see everything that depends on it, which devices have only one path up, and the recorded chain up to the main closet.
Port heat on the switch page: color each port by link, speed, errors or PoE, with a table of the same values. A switch read only over SSH says why it has no error counts.
Topology opens on an uplink tree of each site’s closets, showing how each is connected and where a single failure would cut others off. It exports as SVG or for draw.io.
An operations timeline on Outages › History and on each site’s Activity tab: outages, maintenance windows, work and checks on one time line.
The E-Rate overview has a funding-year swimlane: program dates with their sources, FRN deadlines, the Category 2 budget, and each wave’s planned, received and installed units.
The current access points that Cisco (Catalyst, Catalyst Wireless and Meraki), Juniper Mist and Extreme sell are in the catalog. Cenovel maps an access point to its model from SSH, SNMP, Mist, ExtremeCloud IQ, or a switch’s CDP or LLDP neighbor. An access point that is not in the catalog is reported as such, never matched to a similar model. Supported hardware
Cisco access points are recognized over SSH.
The console shows the release it is running, such as Cenovel Agate 1.0, at the foot of every page. Open it for the release date, build, schema and collector version.

Improved

Deleted records that were funded, or that have RMA, replacement or disposal history, are never purged. Recently deleted shows how long each one is kept and why. E-Rate funding and retention
Maintenance windows offer only what Cenovel monitors, each listed once, and a closet window quiets only that closet. When a window ends with something still down, it returns to Outages and alerts once. Run a maintenance window
The E-Rate evidence pack has a Replaced units sheet with each serial chain, and its Deleted funded units sheet says how long each unit is kept.
Check-in can send a unit to RMA, which opens its vendor case, or to disposal.
Questions in words use your own site type names. Rename Elementary to Primary, and “primary schools” works. Questions in words
Outage history's “How long they last” counts only real recoveries. It leaves out outages closed because a device was removed or is no longer watched.
A switch that refuses an extra SSH session is recorded as busy, never as silent, and does not open an outage.
Site types show how often their sites are polled, and each site page shows its polling interval and when it last answered.
Mist site mapping no longer guesses from overlapping words. At most an exact name match is offered as a hint, and only you can confirm a mapping.
Notification channels can again subscribe to lifecycle and RMA notices, which renewals, coverage endings and overdue returns now send. Notifications and morning reports
Today's Do next is a compact list: one line per item, problems at one site grouped into one row, at most five rows before Show all, and each outage with its own evidence.
The E-Rate documents library opens on the documents themselves, with filters for category, year, FRN and official documents, and documents link to their FRNs.
Status marks on cards and callouts use a different shape for each tone, so they do not depend on color alone.
Cenovel draws its charts itself, showing the same values as before. The console downloads about 170 KB less, and bar charts you can click work better with screen readers.
Charts use even axis steps and whole numbers for counts, wrap long labels instead of cutting them, and can be read by keyboard, one mark at a time, with a tooltip and a table of the same values.
Fans and power supplies light their drawn bays on current Juniper EX and QFX switches and Extreme 5520 switches.

Fixed

A known switch is no longer queued as new equipment after one missed SSH probe. The first probe is retried.
A closet whose switch was polled before no longer says no switch has been polled when the last poll was more than a day ago.
Bulk edit previews name the status, location and model instead of showing numbers.
Asset pages offer Add a link to people allowed to add links, and the control to remove a link is visible again.
When a project plan change is refused because someone else changed it first, the reason stays on screen.
Projects, work items and phase owners show people's names instead of their sign-in addresses.
Today offers Post notice to people who can post notices.
The Movements page shows the asset in its Asset column.
Saving a model with a catalog name that is already taken is refused in plain words instead of failing with an error.
Contract changes appear in the audit history.
The sign-in screen has its Pause background motion control again.
Discovered Cisco IOS XE switches and routers are identified by the model they print, and a license-tier suffix is added only to models that Cisco sells with one.
The consumables table and the project work items table fit at desktop widths.
Today and the morning report keep PoE, SSH, UPS and similar terms in capitals.
Two switches saved for the first time at the same moment no longer stall each other during a sweep.
On the Extreme 5520-24X and 5520-24T rear drawings, the two power supplies were swapped. They now match the vendor’s figure.
The purchasing register shows the day a unit was disposed of, once its disposal order is certified.

Security

The Mist token is stored as a credential and never appears in error messages, addresses or logs. Cenovel talks only to Mist's official regional address and refuses redirects.
Mist webhooks are off by default. When they are on, each delivery's signature is checked, and forged or replayed deliveries are refused.
Mist activity is logged through the same redaction as the rest of the console.
Link controls and Post notice are offered only to people whom the server will allow to use them.

Upgrade notes

Take a backup and verify it with a restore drill before you upgrade. This is mandatory: there is no rollback to the previous image after this release, so the verified backup is the only way back. Create and verify a native backup
If the upgrade fails part-way, restore that backup. The previous image will not start on a database that has been partly upgraded. Upgrades & rollback
Plan for under 2 minutes of downtime. In rehearsal on a copy of a production database, the database upgrade took about 5 seconds.
Priority sites are read every 2 minutes from the moment you upgrade, and an outage opens after 4 minutes without an answer. To start more slowly, change Read priority sites every under Settings › Locations › Site types.
Site types whose sites were already treated as urgent by name, such as offices and bus lots, become Priority.
Any status label that Cenovel could not map to a product state is listed in Settings › Statuses. Choose a state for it, or delete it if nothing uses it.
Deleted records with no funding and no other history are still removed for good after the restorable period, 30 days by default. To keep them longer, raise Keep deleted records restorable for in Settings › Data retention (up to 365 days).
The average outage length under Outages › History drops after the upgrade, because it now counts only real recoveries.
On a new installation, asset tags are not numbered until you set a tag scheme.
E-Rate funded units with no install date cannot be moved to Pending disposal or Disposed until the install date is entered.
Purchase order numbers typed on assets and E-Rate plans are carried into purchase order records. For a unit on a purchase order line, cost and funding come from that line and cannot be typed on the unit.
A unit becomes Disposed only through a certified disposal order. By default an order needs one approval from an Administrator or Administrator EX other than the person who declared it. Review the approval chain under Disposal before the first order.
Places are due for a physical count every 12 months by default, and never more than 24 months where federal equipment is held. Review the interval under Audits.
Review each RFID reader’s mode in Settings before relying on it. Readers start by observing only.

Known issues

Some Cisco models have no drawing, because Cisco publishes only representative figures for them, and some ports are unnumbered where the vendor does not state their names. Supported hardware
The Mist connection has been tested against a simulation of Mist's documented interface, not yet against a live Mist organization.
Two-minute polling of priority sites has been tested against simulated switches. Watch the first day's reads at those sites.
A read requested by a Mist webhook is lost if Cenovel restarts before it runs; the regular 5-minute read covers it.
An alert queued just before a maintenance window starts is not sent again when the window ends.
On the Extreme 7520, 7720, 8520, 8720 and 5420 models, a discovered fan or power supply does not light its drawn bay, because the vendor does not publish which bay is which.
RFID doorways have been tested with a simulated reader, not yet with a real reader, antennas and people walking through.
For some access points the vendor publishes no exact text for what the device reports over SSH, SNMP or CDP. Those were mapped from the vendor’s documented patterns.
A Mist access point seen only through a switch’s LLDP neighbor cannot be mapped to a model, because Mist does not send its model there.
Accepting a large batch of returns at once is slow: 250 units take about 24 seconds.