Downgrade Limit on IGEL OS 12.7.1 or Higher

As of IGEL OS 12.7.1, there is a downgrade limit for the IGEL OS Base System app in certain situations. IGEL OS Base System can no longer be downgraded to versions older than 12.7.0. This restriction applies to IGEL UD Pocket devices and endpoints with Secure Boot enabled (see Verifying that Secure Boot is Enabled). In such cases, downgrade attempts to versions prior to 12.7.0 will be refused to maintain system integrity and boot security.

Known Issues for IGEL OS 12.7.1

• Downgrades to versions prior to 12.7.0 are possible - despite the implemented downgrade limit - via the Local App Portal or using igelpkgctl through local terminal. In UMS-managed environments, disabling the Local App Portal is recommended to enforce the downgrade limit. For how to disable the local app installation, see Installing IGEL OS Apps Locally on the Device.

If the older shim bootloader signature (in 12.6.1 PR1 or earlier) is revoked and Secure Boot is enabled, the device may become unbootable. Verify boot compatibility before downgrading.