Impex release information

Release Type: General

Release date: 2026-06-25

The IMPEX 6.0.0 release

This is a major release for SYSCTL.

We add support for multiple partitions on media for Scan and Transfer. This is quite a complex feature add-on since we need to support it in combination with our File Selection, Not-format-the-target and not using the internal disk cache. There were also multiple challenges on how to re-create the partition table on the target drive when doing a transfer. We aim to preserve the partition size ratios on smaller and larger target drives except the EFI (boot) partitions since that should usually never have to be larger than a certain size.

ICC administration got several new features which should make the life of an ICC admin easier for the operations and maintenance of all Impex products; see the detailed list in the “ICC changes” section below.

Some DataLock users have asked for better handling of files that have been uploaded into DataLock. This release will have a first implementation for queue management with status reporting. In upcoming releases there will also be an ability to change queue content.

More security hardening have been applied to further strengthen the system for known as well as possible future vulnerabilities.

ICC changes

  • The operations view will now show running, failed and queued up Datalock scans
  • Added a new task “reboot” on the Station Detailed View which one can use to initiate a reboot of a station.
  • Added a new task “Upload logs now” on the Station Detailed View which one can use to initiate an upload of the station logs.
  • Added two new tasks “Look for AV update now” and “Look for system updates now” on the Station Detailed View which one can use to tell the station to check for updates before the normal schedule.
  • Added a new task “Install Xtransfer functionality” which can be used to turn a USBProtect station into an Xtransfer Station which is a USBProtect station with AD filesystem integration.
  • Moved “Daily Logs” to default view in the Station Detailed view and added timestamp for when the log was uploaded
  • Moved all Signify Bundle to one sub-topic in the Station detailed view
  • The Files view, printer receipts, PDF and CSV reports now also contain partition information for files
  • Single Sign-On (OpenID Connect) improvements: proxy support for the OIDC connection and clearer user management — SSO users no longer have a local password option, and all users and groups are listed and editable
  • Added validation of the repository hostname and upstream address when configuring repositories
  • The daily station token now has a defined minimum and maximum length
  • Renamed the “Reset Sides” task to “Reset USB port mapping” to make its purpose clearer
  • Hardened the web Content-Security-Policy

ISO install image changes

  • ISO USBProtect install now supports installing on hardware without a network card
  • ISO USBProtect install now supports choosing an install target disk if more than one is detected
  • ISO USBProtect Offline install now adds a default offline configuration which means after install you only need to apply the software.tgz and definitions.tgz bundles and then the station is ready to be used
  • ISO files are now signed with the Offline Signify key which means they can be verified after download. One way to verify them without any tooling is to copy the .iso and .iso.sha256.sig file to a USB drive, click “View contents” and look for a green check mark.

USBProtect changes

  • Adjusted Kilo Byte unit from 1024 to SI definition 1000 in the frontend to be consistent with the backend
  • We now support multiple partitions on media for Scan, Transfer, Xtransfer with all different settings for File selector, not formatting the target and not using the internal drive for cache.
  • Improved detection of encrypted archives: detection is more reliable, is no longer limited to the first 1000 archives found, and now correctly handles large directory trees and very small files
  • Files verified through a Signify bundle are now marked as verified in the file listing
  • The station now shows a warning in the Network/ICC settings view when a proxy or repository configuration received from the ICC cannot be reached, with details available on click; the station keeps using the last working configuration and stays online instead of becoming unreachable
  • A clear error message is now shown when two read-only devices are connected at the same time
  • Transfer receipts now show the BitLocker filesystem, list files in the same order as the file browser, and include the source side
  • The mouse pointer is now shown on stations running on non-touchscreen hardware, such as laptops
  • Xtransfer: the YubiKey can now be removed during an export, and action buttons are hidden until files are selected

DataLock changes

  • Report queued up Scans, Scan status and if Scans fail to the ICC
  • Fixed receipt generation so that special characters in file names and data are correctly escaped, which also corrects file-type detection for such files
  • Datalock now restarts its management service automatically on update for smoother upgrades

Security hardening

  • Unused kernel modules are now blacklisted on all components (USBProtect stations, Datalock, ICC and repository servers) to reduce the attack surface
  • Several system services now run further sandboxed (Landlock) and with reduced privileges

Operating system packages

All system components have been updated to their latest respective version.

Information

Online Documentation

Further details and configuration guidance are available in the official documentation:

https://sysctl.se/impex/documentation/

SBOM

Each ISO and VHD release has a software bill of materials (SBOM), to make introspection of the release easy to integrate with a number of security tools. Current and historic SBOM’s are available for download at the customer portal.

Update Instructions

For networked Impex stations this release will be automatically installed as part of the regular update process. No manual steps are required from administrators or users. The system will apply the update seamlessly in the background, ensuring that the latest fixes are in place without any interruption to normal operations.

For standalone Impex stations, your organisation needs to download the update from portal.sysctl.se in accordance with the update instructions in chapter “USBProtect in offline mode” in the Impex USB Protect user manual.

Sysctl web page

https://www.sysctl.se

Sysctl page for Impex releases

https://sysctl.se/impex/releases/

Sysctl documentation for Impex

https://sysctl.se/impex/documentation/

Sysctl customer portal

https://portal.sysctl.se/

Sysctl rss/atom

https://sysctl.se/feed.xml