Opal 2.1.0
Firmware campaigns upgrade switches from approved images, a pilot first and then in waves; switch changes cover more settings evenly across Cisco, Junos, EXOS and VOSS; every register row is one line; and the top tier is named District Administrator again.
Release notesReleased October 20, 2026All releases
New
- Firmware campaigns. A District Administrator adds a vendor image with the SHA-256 from the vendor’s download page; Cenovel keeps it only when the checksum matches and the malware scanner passes it, and checks it again before each copy. A campaign upgrades one switch alone first, then the rest in waves of up to 50, farthest from Cenovel first. Each switch goes through copy, activate, post-check, and commit or roll back, on Cisco, Junos, EXOS, VOSS and Mist-managed switches.
- Start a campaign from a model in Approved versions (Upgrade to its preferred version) or from a switch’s Firmware tile. Campaigns are listed under Approved versions › Upgrade campaigns, where each wave’s images are copied and started.
- Switch changes now cover voice VLANs, edge ports and BPDU guard, trunks and switch-wide settings the same way on Cisco, Junos, EXOS and VOSS. On Extreme switches a restart timer is the undo, and a change never carries a restart unless it is part of a firmware campaign.
- Every command Cenovel reads or writes has its own plain explanation, held at Needs review until someone approves it.
- Registers show the columns that fit at 1280 first and the rest under one Columns chooser: Wireless, Circuits and a site’s Outages.
Improved
- Every register row is one line across the console. A fact that left a row has its own column, sits in the cell’s hover title, or is on the record.
- Special ports are only the ports a person recorded; Cenovel never lists a device nobody recorded as a finding. Each recorded port is still checked against the switches, and a port that can’t be checked says why: no address recorded, no switch, a trunk port, or no current reading.
- The top tier is named District Administrator again (Organization Administrator in the enterprise edition), everywhere it appears.
- The nightly find card reads as one row: the switch, the time with its zone in words, and Save. The time is inactive while the find is off.
- Switching between light and dark goes straight from one theme to the other, with nothing showing through pop-ups and the dark background in place from the first frame.
- The navigation filter narrows and widens with the sidebar instead of fading out while a second box appears.
- A site’s photos keep their height while its notes are edited.
- Your week and Your places on Home are as tall as what they hold.
- A row’s More menu opens over its table, so a short list never clips it.
Fixed
- An uplink outage whose lost links were all to access points or other end devices now closes on the next cycle, even when the switch can’t be read.
- The Add a location and Set site type drawers scroll in every browser.
- Every audit entry is sealed where it is written, and a restart’s clock catch-up is no longer recorded as a license clock jump.
Security
- Advisory CENOVEL-SA-2026-001 is published: in releases before Opal 2.0.8, an API token could act with its creator’s tier rather than only through the pages it was given. 2.0.8 fixed it; see Trust › Advisories.
- Firmware images for Junos and Switch Engine switches are served on port 8080 only while a campaign is copying them. Each switch gets only its own image, with its own two-hour token, from its own management address; anything else gets a bare not-found. On the appliance the firewall opens 8080 to the on-site device ranges only for that time.
Upgrade notes
- Two database changes: the command explanations’ reviews and firmware campaigns. Back up first, as for every upgrade.
- Docker Compose: the console now publishes port 8080 for firmware delivery. Take the new docker-compose.yml, and on the host’s firewall allow 8080 only from your switch networks. Nothing listens on 8080 unless a campaign is copying images.
- Switches fetch their images from Address devices see Cenovel at (Settings › System › Deployment), on port 8080. Set it before your first campaign if switches reach Cenovel at a different address than you do.