Release Notes for Automate 25.3#
Release Overview#
These are the official release notes, including upgrade notes, for:
Product: Automate
Release Version: 25.3
Release Details#
Platform |
|---|
Release : |
Build Number : |
Platform Version : |
Release Date: December 3rd, 2025 |
Delta Platform |
|---|
Release : |
Build Number : |
Platform Version : |
Release Date: December 3rd, 2025 |
Supported Upgrade Paths:
25.1 => 25.3 (Delta Bundle upgrade only)
24.x => 25.3 (ISO Upgrade only)
Application Compatibility
Ensure that the hardware version of your virtual machines (VMs) are compatible. Supported install VMs:
ESXi
Nutanix
Hyper-V
Refer to the Compatibility Matrix for all virtual machine, app and browser compatibility support.
Ensure that your VM host CPU supports AVX (Advanced Vector Extensions).
A cluster check command in the Automate pre-upgrade steps checks for AVX support.
Highlights#
Release 25.3 contains the following highlights and enhancements:
Support Update Sync Flow Through Provisioning for Microsoft Users#
Support for Flow Through Provisioning (FTP) is based on update activity in the sync, which enables scenarios such as automating the orchestrated move of users between sites. This extension of the automated flow through capabilities enables more actions to be handled automatically by the system without the need for administrators to initiate the changes.
It is now possible to configure rules and behavior to process FTP during update syncs affecting Microsoft users. Previously, FTP would only be triggered when new user records were created during a data sync. Now, it is possible to invoke provisioning during an update of an existing Microsoft user record - for instance noting the city changed and moving the user to a new site based on that directory change. The use of filter criteria and default settings for Subscriber Profiles and Number Management handling, enables administrators to configure their environment to automatically handle user provisioning, when changes are triggered from data syncs affecting users.
Role Management System Optimization#
It is now possible to perform Direct Role Assignment, reducing complex role cloning across hierarchies. This allows administrators to use roles straight out of the box, without the need to clone them. Administrators can still clone roles and their elements to fine-tune their exact business needs, but it is no longer a requirement in order to use roles. This also reduces complexity and confusion due to multiple cloned roles with the same names across various hierarchies.
Microsoft Tenant App Registration Enhancements#
This feature supports the functionality to split up the permissions and rights across multiple application registrations from a security and functionality perspective.
Extend Wingman AI Assistant Capabilities#
This release expands Wingman AI Assistant capabilities to further drive administrator efficiencies in completing tasks or querying for key information and metrics. The expanded capabilities are:
Introducing an enhanced agentic chat interface, which tracks conversation history, provides real-time progress updates during query processing, and conversation context awareness. This means that admins can have multiple threads with the agent with different contexts, purposes, and history, driving more powerful and effective outcomes.
Action recommendations have been expanded to supporting all actions on an administrators menu layout. This provides a quick and easy way for admins to initiate actions, further streamlining admin adoption and training.
The agent can now access a wider range of data resources in the system to respond to admin queries across the product suite. This improves its ability to deliver a wider set of outcomes to admins by ensuring the Wingman capabilities can be realized across the products enabled on the platform (such as Assurance, Analytics, and other products).
Introducing a new guided troubleshooting workflow to enable a structured and intelligent analysis for admins to quickly investigate, identify, and resolve issues. An initial use case will be Microsoft Teams call quality, with more use cases planned.
Microsoft Defender for Office & Endpoint#
This feature delivers many of the core capabilities of the VOSS platform to the security management space, including segmentation, role-based access, and configurable user experience and dashboards. This release brings support for an initial range of MACDs and dashboards related to Microsoft Defender for Office and Defender for Endpoint use cases. This enables the ability to provide controlled and segmented access to administration and key reporting metrics outside the central SecOps. This enables faster responses and enabling processes that better support the business needs from a security perspective while maintaining control and consistency in the environment.
System User Audit and Cleanup Process#
This enhancement solves data discrepancies due to workflow or sync failures when users are created, updated, or deleted as part of automated workflows during provisioning or data syncs. This will address scenarios where users do not have all their services correctly stamped or co-located at their sites.
Improve Search Performance and Experience#
It is now possible to search values in dropdown lists with “contains” criteria. Before this change, dropdown lists could be searched only by specifying values that had a “starts with” criteria. Operationally, this has a major usability improvement where administrators can find their intended resource much quicker than before. Certain system dropdowns contain a link you can click to go directly to the entity referenced in the drop-down. For example, when looking at existing roles admins can see a link next to the dashboard and menu layout drop-downs to navigate straight to the entity to see what the configuration looks like.
Small Enhancements and Bug Fixes#
In addition to the new features in this release, we’ve added a variety of updates to optimize and improve workflows, usability, customization, accessibility, and performance in the Admin Portal. You can find further details, including links to the relevant topics, at What’s New by Feature.
Upgrade Overview#
Important Information#
Important
If upgrading from 25.x to 25.3, refer to the Upgrade Guide with Delta or Patch Bundle
If upgrading from 24.x to 25.3, refer to the Upgrade Guide with ISO and Template
Before upgrading:
Inspect the Release and Upgrade Notes of all releases in your upgrade path. These documents may contain additional upgrade information. All documentation for previous releases, including Release and Upgrade Notes, are available from the VOSS Automate Documentation website.
After upgrading to Automate 25.1 or above, the default
full-transactionsync schedule for theinsights-voss-syncsync app is hourly. For more details, refer to the Insights Analytics topic in the Platform Guide.
Important
Microsoft customers: Before proceeding with the upgrade, ensure that you have the required version of Windows PowerShell installed. For details, refer to Run PowerShell proxy server setup script in the Automate Core Feature Guide.
Upgrade Notes#
There are a number of changes in a new release that could relate to exposing new features or capabilities in the system. The default, out-of-the box system would expose these. However, on a system where the configuration around the user experience has been applied, this might mean some changes to configured menus, display policies, and so on to expose the new features in your setup.
Where relevant, we have included this information with the feature information to assist in planning for configuration changes as part of the upgrades. This setup could vary.
Note
From Automate release 24.1 onwards, language packs are available from https://voss.portalshape.com at Downloads > VOSS Automate > Language Packs
Issues containing upgrade notes in this release:
Features: Summary#
Automate#
Automate Admin GUI#
VOSS-1537: Extend Wingman AI assistant capabilities.
EKB-26946: Adds a new permission, “Export Dashboard Data”, to grant permissions to admins to export dashboard data.
EKB-25327: Solve problem with widget order on export and alignment data.
EKB-24170: Improve Action Search list details.
EKB-22231: Add Refresh icon on list pages.
EKB-20180: Add the ability to navigate to related entities from dropdowns.
EKB-17419: Support contains filtering for drop down across entire data set.
Automate Core#
VOSS-1507: Microsoft Defender for Office & Endpoint.
VOSS-1476: Number Inventory range loading and audit performance.
VOSS-1462: Improve Search performance and Experience.
EKB-26602: Improved API logging config for analysis.
EKB-26378: Upgrade Gunicorn Python library to 23.0.0.
EKB-26046: SDE: Add Phone number for Webex Workspaces.
Automate Dashboard#
EKB-26403: In a Chart widget, add min/max for yAxis.
EKB-26082: Some MS Teams call record resources don’t have hierarchy_path field.
EKB-25722: Improved support for Automate date fields on dashboards.
EKB-25719: Support for custom Reporter Resource fields.
EKB-25303: Update Automate Insights-api driver to use prepared statement to create SQL query.
EKB-24855: Support for scheduled dashboard data exports / delivery.
Automate Platform#
Automate Templates#
VOSS-1590: Microsoft: Enhance update sync FTP/Move via Data Sync and Manual Move (Move User).
VOSS-1575: Role Management System Optimization.
VOSS-1545: Configurable Microsoft Sync.
VOSS-1464: System User Audit and cleanup process.
EKB-26824: Microsoft: Increase retry limit from 10 to 15 when adding resource accounts.
EKB-26360: Microsoft: Exchange Distribution Group - Membership Tool.
EKB-26316: Refactor Webex userConfig device model to use namespace and add missing fields.
EKB-25992: Add CsTeamsSurvivableBranchAppliancePolicy to Microsoft Detailed Configuration dashboard.
EKB-25958: view/HcsDeleteSiteVIEW does not include option to delete data from Webex.
EKB-25937: Enhance Number Inventory Audit to change numbers from Cooling or Reserved to Used status if they are used.
EKB-25746: Move Webex user device model to use namespace in order to avoid sync failures.
EKB-25524: Create standalone Datasync/MTL/MIF builder.
EKB-25422: Set default values for lineType and lineWeight when adding a line to a Webex device.
EKB-25420: Allow creation of Webex Workspaces for phones or conference devices.
EKB-23107: Webex Workspaces: Modify workflows to allow update of workspace and device settings and show TelephoneNumbers in listings.
EKB-22640: Model Instance Filter (MIF) for Teams user inconsistent.
EKB-21907: Show “Licensed Applications” on License page.
Features: Detail#
Automate#
VOSS-1563: Support across the product suite for alternative virtualization/hypervisor solution for on-prem deployments. Adds support for VMWare Esxi 8, HyperV and Nutanix deployments for all products on the 25.3 Release: Automate, Migrate, Insights Dashboard, Insights Arbitrator, Insights DS9.
VOSS-1560: Microsoft Tenant App Registration Enhancements. This feature includes enhancements to the management of Microsoft App Registration as well as integration of Configurable Microsoft Sync within App Registration.
Upgrade Notes - VOSS-1560
Introduction
This upgrade delivers significant enhancements to Microsoft App Registration management within the platform, enabling flexible setup and configuration of Microsoft Tenants with one or more distinct solutions. Admins can now assign and manage the following solutions per tenant, each utilizing the appropriate authentication method:
UC Automation
UC Assurance
UC Analytics
Security
Email
License Management
Meeting Rooms
Solutions can be enabled in the UI via a new Global Settings tab/panel (“Enabled Solutions”), and can be managed individually or in combination, allowing tenants to support any mixture of the above, based on requirements. The system ensures that each solution can be associated with only one app registration configuration, validating app reg logic for consistency and correctness.
The enhancements also include a new panel on the Microsoft Tenant form (“Data Sync Settings”), which adds the capability to create configurable Microsoft data syncs/schedules/MTLs, and MIFs for any vendor against pre-configured templates (VOSS-1545). Refer also to the upgrade notes for VOSS-1545 (Configurable Microsoft Sync) for for more details.
Important pre-upgrade step
During the upgrade to 25.3, a migration will be performed on all Microsoft Tenant instances. Please export all existing instances of the Microsoft Tenant configurations (
relation/MicrosoftTenant) to Excel or JSON, prior to upgrading, to be used as a reference in case connectivity issues to either MSGraph or PowerShell are encountered during the upgrade.Automatic Migration and Validation
Upon upgrade, existing tenant configurations are automatically migrated to leverage the new capability-based app registration approach. The platform will:
Validate existing configurations so that each capability is singularly mapped to an app registration.
Use the appropriate app registration details when connecting to Microsoft APIs, depending on the enabled capabilities for the tenant.
Highlight any migration or validation issues encountered, guiding remediation as needed.
Management and Visibility
Enhanced UI and list pages provide clear visibility into the capabilities supported by each tenant, and the app registration (and authentication type) used per capability. This makes it easier to audit tenant capabilities and ensure correct configurations.
Global Settings
Review the Global Settings tab/panel, “Enabled Solutions”, for the list of solutions that can be enabled for a tenant. By default, the following solutions are enabled: UC Automation and Email
Field Display Policy
Review the Default field display policy for the
relation/MicrosoftTenantmodel, which now contains new fields and field groupings.Access Profiles
Review the Automate - Admin access profile for latest permissions related to the following model types:
Model Type:
relation/MicrosoftTenantOperations: Configuration Template, Create, Delete, Export, Export Bulkload Template, Field Display Policy, Read, TestConnection, Update
Automate Admin GUI#
VOSS-1537: Extend Wingman AI assistant capabilities. This release expands Wingman AI Assistant capabilities to further drive administrator efficiencies in completing tasks or querying for key information and metrics.
EKB-26946: Adds a new permission, “Export Dashboard Data”, to grant permissions to admins to export dashboard data. This enhancement adds a new permission for
data/Dashboardsto control the export of Dashboard data. Access profiles that have been cloned to a lower level will need to be updated with the new permission, “export_dashboard_data”, to allow the export of Dashboard data to CSV or Excel.
EKB-25327: Solve problem with widget order on export and alignment data. Resolved the issue where navigating a dashboard through tabbing, does not move through the widgets in a consistent order. Instead, the focus on icons/links jumps between random widgets. This is not seen in older versions.
EKB-24170: Improve Action Search list details. Added sorting and filtering to Action Search results page.
EKB-22231: Add Refresh icon on list pages. A “Refresh” icon has been added to list pages to allow the page to be easily refreshed without having to navigate back or reload the page.
EKB-20180: Add the ability to navigate to related entities from dropdowns. Dropdown fields, that link to related entities, now display a link icon for convenient navigation.
EKB-17419: Support contains filtering for drop down across entire data set. Updated form dropdowns to support paginated scrolling and contains filtering across all options.
Automate Core#
VOSS-1507: Microsoft Defender for Office & Endpoint. This feature adds support for Microsoft Defender for Office and Endpoint. Security teams can manage Safe Links and Safe Attachments policies with approval workflows - view and act on quarantine messages at scale, monitor devices, alerts, and incidents, and perform actions like scan or isolate - all with granular, role-based access. New dashboards and hierarchy-aware segmentation deliver the right visibility to the right teams, accelerating responses while preserving central control. Onboarding is simplified with VOSS-managed or customer app registrations. This release extends VOSS security capabilities to improve operational efficiency.
VOSS-1476: Number Inventory range loading and audit performance. Improves performance of Number Inventory Audit and addition of new Number ranges.
VOSS-1462: Improve Search performance and Experience. This feature improves search and selection, enhancing the application’s search and selection capability so that it’s less effort for users to find numbers, groups, and users, reducing frustration and improving overall user experience.
Upgrade Notes - VOSS-1462
Upon install or upgrade, restart services.
EKB-26602: Improved API logging config for analysis. This enhancement improves API logging for analysis and fault finding.
EKB-26378: Upgrade Gunicorn Python library to 23.0.0. The Gunicorn library has been updated to version 23.0.0.
EKB-26046: SDE: Add Phone number for Webex Workspaces. Adds the Phone Number field to the Subscriber Data Export file for Webex Workspaces.
Automate Dashboard#
EKB-26403: In a Chart widget, add min/max for yAxis. This enhancement improves chart visualization by allowing users to set minimum and maximum values for the y-axis in Chart widgets. This provides better control over data display and enhances usability.
EKB-26082: Some MS Teams call record resources don’t have hierarchy_path field. Update the Insights resources to include the hierarchy_path field in the following data models:
data_DataModel_AssuranceMsTeamsCallrecord.json
data_DataModel_AssuranceMsTeamsCallrecordDirectRoutingCalls.json
data_DataModel_AssuranceMsTeamsCallrecordSession.json
EKB-25722: Improved support for Automate date fields on dashboards. Improves handling and display of date fields on Dashboards for Automate Analyzed data.
EKB-25719: Support for custom Reporter Resource fields. Users can now add custom calculation fields to reporter resources without modifying the default Reporter model. A new data model allows defining custom fields for specific reporter resources, and a migration script updates instances to include these fields.
EKB-25303: Update Automate Insights-api driver to use prepared statement to create SQL query. Enhance the Insights API driver to use prepared statements when generating SQL queries to mitigate the risk of blind SQL injection.
EKB-24855: Support for scheduled dashboard data exports / delivery. This release adds the ability to export an entire dashboard and deliver the data to an SFTP or Email destination. You can also schedule dashboard exports for ongoing data delivery.
Automate Platform#
EKB-25384: Add a check into “cluster check” for open NRS sessions. Cluster check will now inform of any NRS sessions that are left open on any node.
EKB-23903: Enhance “app cleanup” command to remove old release script file from the admin/home/backups folder. Enhances “app cleanup” command to remove the old release script files, left behind during upgrades from the admin/home/backups folder.
Automate Templates#
VOSS-1590: Microsoft: Enhance update sync FTP/Move via Data Sync and Manual Move (Move User). Enhance update sync Flow Through Provisining / Move via Data Sync and Manual Move For Microsoft Users.
Upgrade Notes - VOSS-1590
Introduction
This upgrade delivers enhanced control and flexibility for Flow-Through Provisioning (FTP) through the introduction of two new global settings that add comprehensive validation logic to ensure that only eligible users are processed, increasing data accuracy and reliability throughout Microsoft-specific provisioning operations.
Additionally, this upgrade introduces enhancements to the Move User feature (specifically for Microsoft users), which now includes enhanced new line configuration options:
Ability to configure LineURI using either the new Automatic Line option or Manual selection
Inclusion of Line Filter criteria for customizable line selection.
Note that for the Move User feature, Bulk loaders should be reviewed and updated if the Automatic Line or Line Filter settings need to be accommodated.
Global Settings
Two new configuration options have been added under the Flow Through Provisioning settings, specifically related to enabling Move and Flow Through Provisioning to users that are updated via data syncs through the Enable Move & Provisioning (Update Sync) setting.
These new configuration settings are ONLY configurable and enforced if Enable Move & Provisioning (Update Sync) is enabled:
Number Assignment Control (Update Sync): Option to retain an existing number or assign a new number during user moves (Default: Keep Existing Number).
User Profile Control (Update Sync): Seamless selection from a dropdown list for standardized user assignments (Default: Default).
Field Display Policies
Review the Default Field Display Policy for the following Model Type and fields for a configuration example:
Model Type:
view/MultiVendorServiceUserMove_VIEWField Group: Line Configuration
Fields: automatic_line, line_filter, lines.line_filter
VOSS-1575: Role Management System Optimization. This feature addresses critical usability and operational efficiency problems in the role management system by eliminating redundant HCS elements and streamlining role assignment processes. The change will reduce administrative burden, improve user experience, and remove technical debt while delivering measurable customer value.
Upgrade Notes - VOSS-1575
Introduction
This feature introduces a complete migration to the standardized
data/Rolemodel for all role-based access control (RBAC) logic and references. Previous legacy models (relation/HcsRoleRELanddata/HcsRoleDAT) have been fully removed. All workflows, templates, access profiles, and supporting code now refer exclusively todata/Role.All current configurations and bulk loaders should be reviewed in regards to the Role Based Access Control features (described with the access profiles, menu layouts, and dashboard, below).
Access Profiles
Review the Automate - Admin access profile for permission examples for the following model types:
Model Type:
data/RoleOperation: Create, Read, Update, Delete, Export, Export Bulkload Template
Menu Layouts
Review the HcsAdminMenu menu layout for a configuration example on the following item, which now only includes the following item referencing
data/Role:Role Based Access > Roles: Items referencing
relation/HcsRoleRELanddata/HcsRoleDAThave been deprecated and should be removed and replaced with adata/Role equivalentif they exist
Dashboard
Review the Automate - Admin dashboard for a configuration example on the following item, which now only includes the following item referencing
data/Role:Role Based Access > Role Management: Items referencing
relation/HcsRoleRELanddata/HcsRoleDAThave been deprecated and should be removed and replaced with adata/Roleequivalent if they exist.
VOSS-1545: Configurable Microsoft Sync. This feature allows the creation of data sync templates. Each template allows the configuration of MIFs, MTLs, data syncs, and schedules. Data sync templates can be created for any vendor or connection, such as Microsoft or Webex.
VOSS-1464: System User Audit and cleanup process. This feature introduces a comprehensive audit and cleanup System User Audit feature that allows for reporting on and resolution of key inconsistencies in the
data/Usermodel, including missing records, improper linkages, orphaned references, and site mismatches.Upgrade Notes - VOSS-1464
Introduction
This upgrade introduces a comprehensive audit and cleanup System User Audit feature that allows for reporting on and resolution of key inconsistencies in the
data/Usermodel, including missing records, improper linkages, orphaned references, and site mismatches. The goal is to ensure that all system user records and their associations are accurate and reliable, improving system reliability and data hygiene across all relevant workflows.It is recommended that you run the user audit in “report mode” first using the Create a report option, for specific hierarchies; that is, sites first (smaller user scale), or user count scale (small to large), to determine the impact prior to execution.
Access Profiles
Review the Automate - Admin access profile for a permission example regarding the following model types:
Model Type:
view/SystemUserAuditOperation: Create, Read
Dashboard
Review the Automate - System Configuration dashboard for a configuration example. The dashboard now includes the following item:
License Audit Setup > System User Audit
EKB-26824: Microsoft: Increase retry limit from 10 to 15 when adding resource accounts. This enhancement increases the retry limit from 10 to 15 when creating new resource accounts and Microsoft PowerShell returns the error, “was not found in AdminApi”.
EKB-26360: Microsoft: Exchange Distribution Group - Membership Tool. Adds a new tool for managing Microsoft Exchange Distribution Group membership, “view/MsExchangeManageDistributionGroupMembership”.
EKB-26316: Refactor Webex userConfig device model to use namespace and add missing fields. This enhancement streamlines and optimizes how Automate interprets data to and from the Webex API. It also introduces support for additional configuration options, ensuring compatibility with Cisco’s latest updates.
EKB-25992: Add CsTeamsSurvivableBranchAppliancePolicy to Microsoft Detailed Configuration dashboard. This enhancement adds CsTeamsSurvivableBranchAppliancePolicy to the Microsoft Detailed Configuration dashboard.
EKB-25958: view/HcsDeleteSiteVIEW does not include option to delete data from Webex. This feature extends hierarchy delete to cover Webex configuration. Note that deletion of the Webex Location is not supported and must be performed via the control hub.
EKB-25937: Enhance Number Inventory Audit to change numbers from Cooling or Reserved to Used status if they are used. This feature enhances number inventory audit to change numbers that are in either “Cooling” or “Reserved” status to “Used”, if the numbers are being referenced by users or devices; previously “Cooling” or “Reserved” numbers were skipped by the audit. “Cooling” or “Reserved” numbers that are unused will still remain in “Cooling” or “Reserved” status.
EKB-25746: Move Webex user device model to use namespace in order to avoid sync failures. This update standardizes the Spark User to use the less error prone namespace rendering approach.
EKB-25524: Create standalone Datasync/MTL/MIF builder. This feature adds the ability to create data syncs, model type lists, and model instance filters from templates. It also allows scheduling of these data syncs at creation.
EKB-25422: Set default values for lineType and lineWeight when adding a line to a Webex device. This enhancements adds the default values of lineType:PRIMARY and lineWeight:1 when adding a line to a Webex device.
EKB-25420: Allow creation of Webex Workspaces for phones or conference devices. Enhances Webex Workspace management by allowing Collaboration devices to be added with Workspaces.
EKB-23107: Webex Workspaces: Modify workflows to allow update of workspace and device settings and show TelephoneNumbers in listings. Enhances Webex Workspace management to allow updating of Workspace and Device Settings.
EKB-22640: Model Instance Filter (MIF) for Teams user inconsistent. Model instance filters will now be consistently applied to the msteamsonline CsOnlineUser device model.
EKB-21907: Show “Licensed Applications” on License page. This enhancement adds a new field, “Licensed Applications”, to the License page,
view/AboutLicense.
Defects Fixed: Detail#
Automate#
EKB-26506: PowerShell setup script does not cater for PS5.1 session configuration existing with same name. Fixes an issue so that the Windows PowerShell server setup script will now correctly configure PowerShell session configurations such that device models will use PowerShell 7 inside PowerShell sessions.
Automate Admin GUI#
EKB-26801: Automate dashboards, Counters, background color not working. This fix enables the Automate counter widget to support custom text and background colors through color mapping.
EKB-26790: AddSubscriberFromProfile: Tab selects similar named user in dropdown list instead of adding a new entry. Fixes keyboard navigation issues on dropdown components to allow pressing Tab to preserve current input value.
EKB-26656: Login shows username and password fields squashed when credentials are saved in browser. Fixes an issue where username and password fields appear overlapped, on the Admin Portal login page, when the credentials have been saved in the browser credential manager.
EKB-26198: Add Phone modal does not popup on MultiVendorSubscriber when connection is very slow. Fixes an issue where clicking the Plus icon (+) on the Phone panel on MultiVendorSubscriber was not showing the modal as expected, under certain network conditions.
EKB-26092: Default search mode is not retained for admins on logout. Fixes an issue where default search mode is not preserved after logout.
EKB-25841: Portal gets stuck loading when requests remain pending. Fixes an issue where Automate Admin Portal can get stuck in loading state during navigation.
EKB-25545: Multivendor subscriber doesn’t link to Microsoft Teams user if the Teams user is disabled. Fixes an issue where Multivendor Subscriber does not link to Microsoft Teams user if the Teams user is disabled.
EKB-25131: Insecure Content Security Policy. Fixes a misconfigured or insecurely configured Content Security Policy (CSP) header.
EKB-21022: Misconfigured Content Security Policy (CSP). Fixes issues with misconfigured Content Security Policy.
Automate Core#
EKB-26935: fn.get_available_vm_patterns_dropdown performance problems with very large set of number inventory instances. This fix improves the performance of the
fn.get_available_vm_patterns_dropdownfunction, which is used for Number dropdown choices for voicemail.
EKB-26626: Cisco Phone Status Export (view/ExportDeviceStatusView) fails to execute for multicluster customer. Fixes Cisco Phone Status Export for multicluster customers.
EKB-26462: Unassigned phone count is not correct after 25.2. Fixes an issue where the Unassigned Phone count in License Audit for Standalone Devices was incorrect because null values for Owner User ID were not handled properly.
EKB-26440: MultiVendorSubscriber: Missing Move panels on Move Subscriber page. Fixes an issue where the Move panels are hidden for all users with both Cisco and Webex services on the MultiVendorSubscriber page.
EKB-26414: Existing values for PULL_SYNC_DELETE_THRESHOLD macros are not migrated to global_setting_pull_sync equivalents. Fixes an issue where threshold macros were not migrated during the upgrade to version 25.2 when moved to Global Settings. This fix ensures all custom macro values are automatically migrated and old macros are cleaned up during upgrade, preserving previous configurations without manual intervention.
EKB-26191: Authorized admin hierarchy: Bulkloading permissions should be allowed for admins with AuthorizedAdmin roles. This fix removes incorrect ancestor validation when bulkloading as Authorized Admin user.
EKB-26132: Slow login on scale systems. Fixes an issue where initial login is slow due to Menu and Dashboard conditional evaluations.
EKB-26004: MS Teams sync - remove workflows showing error in macro function ``fn.user_discover_apps`` - string indices must be integers. Error in macro function fn.user_discover_apps - string indices must be integers.
EKB-25928: Cisco 9851, 9861, and 9871 don’t show the Expansion Module fields. Fixes an issue where the following phones did not support adding expansion modules: Cisco 9851, Cisco 9861, Cisco 9861NR, Cisco 9871, Cisco 9871NR.
EKB-25842: Moving number inventory with intermediate level admin fails. Refresh cached hierarchy on Move and Bulk Move actions.
EKB-25467: Cloning down a duplicate Microsoft license mapping breaks the lookup for all other mappings. Fixes an issue where cloning down an instance Microsoft License Mapping breaks the lookup for all other mappings.
EKB-25293: Credential Policy: Dropdown for relation/User and data/User should only show values from the same or above hierarchies. Fixes an issue on the User page where the Credential Policy dropdown choices showed options from below the user’s hierarchy, only the same and above hierarchies should be shown.
EKB-25268: QAS assumes Unity Connection exists and fails when it doesn’t. Resolves an issue where QAS fails as it assumes that the NDL should contain a UnityConnection.
EKB-25124: Cross site request forgery token weakness. Improves security of the tokens used for Cross-Site Request Forgery (CSRF) controls.
Automate Platform#
EKB-26823: SNMP alarms raised intermittently. Fixes an issue so that the SNMP service will restart automatically should it fail for any reason.
EKB-26508: 500 Error reported when Primary has two NTP servers but other nodes have one. Fixes an issue where a 500 error was shown in the platform CLI, during “cluster check”, when the Primary Node has two NTP servers configured but the other Nodes only have one.
EKB-26058: Scheduling voss clear_device_pending_changes from CLI fails to execute. Fixes an issue where it was not possible schedule the command “voss clear_device_pending_changes” to execute in the CLI.
EKB-26048: voss-wsgi running (unhealthy) didn’t create SNMP trap or send notification. Fixes an issue where the “voss-wsgi” service reported unhealthy in the CLI but did not create and SNMP or notification.
EKB-25981: Remove X-XSS-Protection and X-Frame-Options headers. This removes the X-XSS-Protection and X-Frame-Options headers from the web service.
EKB-25938: voss-wsgi running (unhealthy) not showing up on Cluster Check or Cluster Status. Fixes an issue where Cluster Check does not report unhealthy app statuses.
EKB-25471: “voss check license” prints the time in GMT+2 instead of UTC. voss check-license reported times using GMT+2 when they should be UTC.
EKB-22599: When using the SSO login URL (without admin in it) the system doesn’t render the GUI. Fixes an issue where the Portal does not render correctly if the SSO login URL has been constructed without “/admin” in the URL suffix.
EKB-22062: Migrate: Drives Reassign doesn’t copy existing data. Fixes an issue where existing data is not copied during drive reassignment for Migrate deployed on generic Automate node.
Automate Templates#
EKB-26780: Microsoft, audio file upload fails with “We can’t upload the audio file. Verify the contents of the file and try again”. Fixes an issue where the audio file transfer failed to be processed on the Microsoft WinRM server.
EKB-26619: Employee ID not syncing on device/msgraph/MsolUser. Fixes an issue where
employeeIdfield was not being set when importing adevice/msgraph/MsolUserinstance.
EKB-26611: Phone Number and State fields on device/spark/Number should not be mandatory. Fixes an issue that caused null values to be returned for
device/spark/Numberinstances.
EKB-26599: NumberInventoryAudit - SiteSpecific Number Inventory Audit failing with Error in macro function ‘fn.add_backslash_to_plus. Fixes an issue that was causing the
add_backslash_to_plusfunction to fail when number lists contained null entries.
EKB-26573: Number inventory - release date is cleared from cooling number when modifying a DN. Fixes an issue where the release date is inadvertently cleared from a cooling number when performing a manual update on a number, to change any other field like Description.
EKB-26537: Update fails for Cisco subscriber with two remote destination profiles (one Cisco and one created for Cisco-MS-Hybrid). Fixes an issue where updating a subscriber configured with multiple Remote Destination Profiles (RDPs), including Cisco and Cisco-MS-Hybrid, could fail. The fix ensures that modifications to subscribers with one or more Remote Destinations across multiple RDPs are processed successfully.
EKB-26519: Site Build - Default CSS (COS mappings) not showing correctly for selected NDL. Fixes an issue where the Default Calling Search Space and Default Call Forward Calling Search Space dropdowns were not populating correctly for Site Build.
EKB-26460: LDAP users cannot authenticate if hierarchy is below the LDAP server and auth method is LDAP. This fix disregards LDAP server scope if user authentication method is set as LDAP.
EKB-26459: Cisco User Service > Manage Users (MultiVendorSubscribers): Voicemail icon not displayed for users with Cisco voicemail service. Fixes an issue where voicemail icons were not displayed for Cisco users with Cisco voicemail enabled in the MultivendorSubscribers list view. The code was updated to reference the correct alias, ensuring voicemail icons now appear as expected.
EKB-26451: VOSS Automate - MultiVendor Dashboard - correct lock voicemail account voicemail behavior. Fixes incorrect text and ability to unlock voicemail on multi-vendor subscriber form.
EKB-26346: Inefficient query from macro RegexAvailableOrUsedMCR. This fix improves response times for Directory Number dropdowns and optimizes performance of the following related macros:
RegexAvailableOrUsedMCR
HcsNoSelfServiceRegexMCR
MSTEAMS_NUMBERS_WITH_NO_DIRECT_ROUTING_REGEX.
EKB-26335: Webex: Import of numbers does not work when Control Hub has “Webex Calling - Workspaces” license and not “Webex Calling - Professional”. This fix ensures that the system now recognizes “Webex Calling - Workspaces” as a valid calling license.
EKB-26318: Outbound Internet proxy on Windows PowerShell server does not work when using PowerShell 7. The outbound internet proxy can now be successfully configured on the Windows PowerShell server when PowerShell 7 is in use.
EKB-26311: Update of Cisco UCM IM&P server IP address fails. Fixes an issue where updating the Cisco UCM IM&P server IP address failed due to workflow validation errors. The fix ensures successful updates for all CUCM server types.
EKB-26281: Cisco user “Call Forward” settings not auto-cleared from a line when voicemail is deleted, if the line contains a + prefix. Fixes an issue where line settings were not automatically cleared from a line after a user’s voicemail was deleted, leaving forward/busy options and the voicemail profile still applied. The fix ensures these settings are removed as expected when voicemail is deleted.
EKB-26273: Cooling and Reservation - strange filter/selection behavior. Fixes an issue where filtering options in the Cooling and Reservation tool behaved inconsistently when performing actions such as Unreserve or Remove from cooling. The resolution ensures that both filter boxes now consistently show relevant options based on the selected action.
EKB-26241: RefreshAllCustomerAccessTokens fails if one of the Customers does not have a token. Fixes an issue where the scheduled RefreshAllCustomerAccessTokens workflow failed if any customer lacked a valid Webex token.
EKB-26200: Add Subscriber with Webex fails via a bulk loader if there is no mailid. Fixes an issue in the bulk loader where the process failed during Spark user instance provisioning if the mailid field was missing.
EKB-26196: SyncSparkDataAll migration CFT is missing CXDialNumber, which removes the model from the MTL. Fixes an issue where the SparkDataAll Model Type List is not automatically updated to include the CXDialNumber model type on upgrade.
EKB-26177: Selecting a user email in relation/SparkUser does not fill in the user fields. Fixes an issue where selecting a user email in relation/SparkUser did not auto-populate the related user fields.
EKB-26130: Webex groups: Remove add/update permissions from ``device/spark/group`` and from AP. Remove the add, delete, and modify operations from access profiles and permissions in the device model for
device/spark/group.
EKB-26127: Add Cisco Phone fails: Value for field [enableActivationID] failed with [’’ is not of type ‘boolean’]. This fix translates MRA boolean values from empty string in CFT to boolean.
EKB-26015: Microsoft: Some attributes are not synced for CsOnlineUser when using a Model Instance Filter. Fixes an issue where the following attributes are not updated when MS Teams users(CsOnlineUser) are imported using a Model Instance Filter.
EKB-25933: Webex Workspace call settings sync fails for hotdesk-only workspaces. Fixes an issue where importing Webex Workspace Call Settings fails for Hot Desk Only workspaces.
EKB-25914: Webex: Import of schedules fails if the schedule name contains a colon character. Fixes an issue where import of Webex Schedule fails if the Schedule name contains a colon (:) character.
EKB-25891: Listing Webex groups fails if members do not have display names. Fixes an issue where importing Webex Groups failed if the group members do not have Display Name values set.
EKB-25797: Update Entitlement profile from relation/CiscoSubscriber is not honoured when user has webex app services. Fixes an issue with updating an Entitlement Profile from relation/CiscoSubscriber.
EKB-25699: Unreserve numbers does not clear Reservation Notes. Fixes an issue where the Reservation Notes field is not cleared when un-reserving Numbers.
EKB-25631: Webex: Push option is shown for existing Webex numbers when modifying. Fixes an issue where the Push to Webex options were incorrectly shown on the Number Range Management page when action is set to Modify.
EKB-25437: Webex activation code cleanup fails. Fixes an issue where expired Webex Device Activation codes were not cleaned up on the daily Schedule.
EKB-25396: Top down LDAP sync changes to user do not update Webex user details. Fixes an issue where top-down LDAP sync changes to a user were not updating the users Webex details.
EKB-25200: Import Webex Location incorrectly creates sites at customer level when intermediate node mapping exists. Fixes an issue where syncing a Webex Location with the same name as an existing site in VOSS incorrectly created a new empty site at Customer level, even though the Location was correctly linked and moved to the existing site.
EKB-22005: Webex Teams: Fail the Add User step when there are not enough licenses to assign - “Not enough available licenses for assigning to a user”. This change is to improve the handling of the error condition where Webex returns a 206 for licenses being exhausted.
Core Platform#
EKB-26065: Set SameSite flag on sso_login_url cookie. Fixes an issue where samesite=Lax was not set in the cookie for SSO logins.