Opsi Extensions

The powerful core functionality of opsi can be further increased and adapted to special use cases by paid extensions. Discover the opsi extensions here.

feature image

Custom Certificate Authority New

Use additional certification authorities (CAs) to issue certificates for the opsi config server. This can be, for example, a certificate authority managed internally by your organization or a public trusted certification authority. This way, the configserver certificate is seamlessly integrated into your organization’s chain of trust.

feature image

Directory Connector

Avoid data maintenance in multiple systems and transfer your users, devices and groups from your directory service into opsi. This avoids additional maintenance effort and ensures data consistency. The Directory-Connector supports Active-Directory, Samba 4 and OpenLDAP. Adjust the Directory Connector to your needs over various configuration possibilities.

feature image

Let’s Encrypt New

With the Let’s Encrypt extension for opsi, you automatically receive SSL/TLS certificates for the opsi config server - simply, securely and reliably. All certificates are automatically generated, stored, verified and renewed as required. Certificate chains are also stored and renewed automatically. All common browsers trust Let’s Encrypt and accept the opsi server certificates without warning. This improves the security and user-friendliness of your systems.

feature image

With the Linux Agent you can integrate Linux devices into the administration with opsi, as clients or server. opsi supports the administration of all common Linux distributions (Debian, Ubuntu, RHEL, SLES, openSuse, Oracle, Alma, Mint, …). With the Linux Agent you can also inlcude these devices in the hardware and software inventory of opsi.

feature image

License Management

The management of software licenses is a complex and time-consuming task. This can be unified and simplified with the opsi license management extension. This way you always have the overview of your software licenses.

Handling of license management within the same interface as software distribution and operating system installation.
Automatic provisioning, allocation and reservation of license keys.
Availability of the license models standard single license, volume license as well as device-bound license.
Automatic release of license keys when uninstalling software.
Manual editing of license assignments, e.g. for licenses of software that is not distributed with opsi.
Report function to compare the licenses managed by opsi with the software inventory.

feature image

Is it possible to bring a whole classroom up to state during the coffee break? No problem with the Local Image extension!

Originally developed for use in schools, this extension has also proven itself outside the classroom. A local image is created from the installation of a client. This image is used for later recovery. Both is done via centralized control by the administrator. This makes it possible to reset even a large number of clients to a defined state in no time at all.

feature image

With the macOS Agent you can also include macOS devices in the administration with opsi. The agent supports the unattended installation of .app directories, .dmg, .pkg and .zip files. The patch management initiates a connection of the macOs devices to the Apple servers and regulates the download and installation of existing updates. There is also the option to write scripts for updating third-party applications. The configuration of software also runs automatically. The opsi script interpreter can process and deliver different formats of setup files, such as XML, JSON, .ini or key-value files. With the macOS Agent your macOS devices are also included in the hardware and software inventory.

feature image

Monitoring Connector

Integrate opsi comfortably into your existing monitoring solution. Now you can quickly react to unpredictable events. No matter if there is a failed installation on a client or outdated software states on one of your servers: the monitoring connector passes this data to your monitoring system.

Checks against clients are possible without additional software, because the opsi client agent is already installed on the clients. The execution of the checks can be done by the opsi server, so there is no need for a connection between monitoring server and clients (indirect checks).

Designed as Nagios interface the integration is also easily possible in compatible solutions, e.g. Icinga.

feature image

The Scalability extension offers the possibility to scale the opsi service over several CPUs and servers. This way the opsi service is always performant even in very large environments. Beside scalability there is also the possibility of a failover. Scalability makes it possible to operate environments with tens of thousands of clients or very many locations. Depending on the usage of the system (e.g.: mass rollouts) this module can be useful even for smaller installations.

feature image

Secure Boot makes it possible to ensure that only signed operating systems are started when a computer is booted. This extension allows an OS installation via opsi on devices with activated Secure Boot without weakening the security mechanisms.

feature image

Single Sign-On New

Experience maximum convenience and security with the Single Sign-On (SSO) extension for opsi. Thanks to the integration of a central identity provider, you can use your existing login data to log in to opsi. This greatly simplifies administration, reduces security risks and increases productivity. Log in once with SSO - and work seamlessly!

feature image

Two-Factor Authentication

Enhance the security of your opsi server with two-factor authentication. In addition to your password, a security code is required, which is updated regularly. This extra layer of security protects your systems from unauthorized access and ensures maximum data protection. Rely on a standard method that is simple, effective, and secure.

feature image

Should administrators in complex environments only see the devices of selected sites or specific groups of devices in the management interface? Or should they only be responsible for products from specific product groups? Or not have access to global server administration?

If the User Roles extension is enabled, client or product visibility in the Management Interface can be configured specifically for all of these aspects and optionally also prevent editing of global settings.

Readonly access can also be set up for the HelpDesk, for example.

feature image

Managing computers in the field or home office does not have to be a problem.

An intelligent caching mechanism ensures that even remote clients can be equipped with new software without affecting the user.

The administrator has full control over the computer, even though it is located outside of the company network.

This extension is also a good choice for unstable network connections.

feature image

The re-installation of a computer, can become a test of patience if a lot of software packages or operating system updates have to be installed. With opsi-WIM-Capture the installed Windows including all operating system updates, software installations and configurations can be read out from an existing computer. This information is then stored in the form of a WIM archive (Windows Imaging Format). Such a WIM then serves again as a basis for new installations.

You are interested in one or more opsi extensions? Find out how to test the extensions and request an offer here.