New name CH-J Tools
Server Manager is now called CH-J Tools. On first launch, the existing data folder moves automatically, the Windows installer removes the old installation, and the ch-j-tools DEB package replaces ch-j-server-manager.
Signed and notarized macOS version
The DMG package is signed with an Apple Developer ID Application certificate and notarized by Apple. Each installer file also has a detached OpenPGP signature and a SHA-512 checksum.
Standby Helper and signatures from the context menu
A small background process without WebView is enabled after installation and can be disabled in Settings. It adds Verify signature and Sign (OpenPGP) actions to Finder, Explorer, Nautilus, Nemo and Dolphin. Quick verification uses keys from Keychain, saved public keys, a selected key file or a key from keys.ch-j.de based on the fingerprint in the signature, and shows the key's revocation status on keys.ch-j.de.
Apache Manager, Rsync Manager and Network Manager
Apache Manager manages sites, modules, PHP, TLS and reverse proxies with change previews. Rsync Manager copies, mirrors and backs up with previews and scheduling. Network Manager shows interfaces, routes, ports and the firewall; it rolls back a network change if you do not confirm it after logging in again via SSH.
Post-quantum cryptography
Keychain and Key Generator offer hybrid and post-quantum OpenPGP algorithms under RFC 9980 (ML-DSA, SLH-DSA, ML-KEM) and the SSH key ssh-mldsa44-ed25519. SSH connections offer three hybrid ML-KEM key exchanges under RFC 10042, with “prefer hybrid” or “hybrid only” options.
Terminal, modules and settings
The terminal suggests commands based on the connected system and offers appearance profiles. Modules open in the main window and can be moved to their own window. Settings is divided into sections, and the application starts faster on Windows.
What the Beta does not yet offer
Port forwarding, remote archive extraction, dragging files from Finder or Explorer, and copying between servers requiring sudo are not yet available. The Windows installer is not signed with a publisher certificate. The test on 8 November 2026 confirmed a Hagrid bug on keys.ch-j.de: for 15 certificates with a PQ primary key, the server returns only the primary key without signatures or subkeys, although the application reports a successful upload. Beta 0.1.2 still uses this server. Local certificates remain complete. The loss of signatures and subkeys is the reason for moving future application versions to CH-J's own keyserver, CH-J Keys2 (keys2.ch-j.de). It was Keys2 that preserved 30/30 certificates including subkeys in the VKS test. The original keys.ch-j.de uses Hagrid and is a separate service. The transition includes a planned migration of public keys from keys.ch-j.de to keys2.ch-j.de so they remain available to users. Missing signatures and subkeys in incomplete PQ certificates will need to be restored from a complete public certificate.
