Impex release information

Information about the IMPEX release 5.5.1

Release Type: General

Release date: 2025-10-08

The IMPEX 5.5.1 release

The 5.5.1 release is the first to enable the usage of the Impex Xtransfer product. Xtransfer is a new product which can be used to scan and import USB drive content into corporate fileshares using Kerberos authentication via smart card. Xtransfer is going to be introduced in a two-step process. In this first phase an import mode is made available. In the second phase the export mode and a file picker (for both import and export) is introduced. A separate license is needed to be allowed to run Xtransfer. Please contact sysctl for more info on Xtransfer.

There is an implicit 5.5.0 release but that one is only used to bootstrap the upgrade of the underlying operating system from Sysctl Linux 41 to 42.

This release also brings an overhaul of the language translations. We have had a professional translation company update the language files. If you are using another language than Swedish and English we would very much appreciate feedback on the new translations, both praise and complaints.

General

  • Added interactive configuration script for the installation.

ICC changes

  • There is now a button in the “Repository” card in the “Server Settings” to make the ICC trust the repository server’s TLS certificate.
  • Increased internal timeout when changing system settings like Syslog port which can take a long time due to SELinux rule compilation
  • GUI enhancements. We have added icons to the left menu pane in ICC to make it easier to navigate, to better find different menu items.

ICC fixes

  • The ICC backup functionality stopped working after earlier OS package updates. This has been fixed.

USBProtect changes

  • Updated translation of all strings.
  • The first view will now show an info panel if the USB drive contains encrypted archives.
  • The file content view now shows how many encrypted archives have been unlocked and how many are still to unlock. The password entered for an archive is cached for the current session and can be reused for the next archives.
  • The Disk status view in System Settings got a design upgrade.

USBProtect fixes

  • If the eject cdrom command hangs because of bad or glitchy CD-reader hardware we had no timeout, we added a timeout.
  • The installation configuration view for ICC had a regression where hostname was not extracted from the entered ICC server. This was only a cosmetic bug but annoying for the person configuring the new station.

Xtransfer

  • Initial release. Limited to import. Import is made in a style of “all files on the source media gets imported”.
  • Introduce smart card usage to Impex. Smart cards, using yubikeys, are used for windows authentication
  • Xtransfer authenticates the end user using Kerberos and then, using the tgt granted, obtains a service ticket to connect to the chosen cifs-share to upload the scanned files and folders to it

REPO changes

  • reposervice: make it possible to start it standalone and still be usable.

Documentation

  • Documentation has been updated in this release.
  • Updated incorrect quarantine limits to the current limit (1GB).
  • Updated the documentation to use correct brand names.
  • Explain that installation should use one disk.
  • Update documentation about the Repo Settings view, especially documenting the new button that allows an administrator to accept the certificate of an Repository server if it is not trusted
  • Moved the documentation of the Network Edit Signify Bundle to the Station card section as this is where the bundle now lives
  • Expand the explanation on the SSH Public key field on the station card

Information

Operating system packages

  • General packages updates in this release.

Online Documentation

Further details and configuration guidance are available in the official documentation:

https://sysctl.se/impex/documentation/

SBOM

Each ISO and VHD release has a software bill of materials (SBOM), to make introspection of the release easy to integrate with a number of security tools.

Update Instructions

For networked Impex stations this release will be automatically installed as part of the regular update process. No manual steps are required from administrators or users. The system will apply the update seamlessly in the background, ensuring that the latest fixes are in place without any interruption to normal operations.

For standalone Impex stations, your organisation needs to download the update from portal.sysctl.se in accordance with the update instructions in chapter “USBProtect in offline mode” in the Impex USB Protect user manual.

Sysctl portal

https://portal.sysctl.se/

Documentation for offline patching

https://sysctl.se/impex/documentation/usb-protect-user-manual/#updates-and-patching

Sysctl rss/atom

https://sysctl.se/feed.xml