Api - changed authentication process (
https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);Backup - do not encrypt backup file unless password is provided;
Btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
Cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
Mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
Radius - use MS-CHAPv2 for "login" service authentication;
Romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
Webfig - improved authentication process;
Winbox - improved authentication process excluding man-in-the-middle possibility (Winbox v3.14 required);
Backup - generate proper file name when router identity is longer than 32 symbols;
Bridge - added ingress filtering options to bridge interface;
Bridge - added initial Q-in-Q support;
Capsman - increase timeout for the CAP to CAPsMAN communication;
Certificate - added "expires-after" parameter;
Certificate - fixed "add-scep" template existence check when signing certificate;
Chr - by default enable link state tracking for virtual drivers with "/interface ethernet disable-running-check=no";
Chr - fixed boot on hosts older than Windows Server 2012 when running CHR on Hyper-V;
Chr - fixed interface name assign process when running CHR on Hyper-V;
Chr - fixed MTU changing process when running CHR on Hyper-V;
Chr - fixed various network hang scenarios when running CHR on Hyper-V;
Chr - provide part of network interface GUID at the beginning of "bindstr2" value when running CHR on Hyper-V;
Console - fixed script permissions if script is executed by other RouterOS service;
Dhcpv6-server - added initial dynamic simple queue support;
Ipsec - added "responder" parameter for "mode-config" to allow multiple initiator configurations;
Ipsec - separate phase1 proposal configuration from peer menu;
Lte - improved modem event processing;
Ppp - fixed "hunged up" grammar to "hung up" within PPP log messages;
Ppp - show comments from "/ppp secrets" menu within "/ppp active" menu when client is connected;
Quickset - added missing wireless "channel-width" settings;
Quickset - added support for "5ghz-a/n" band when CPE mode is used;
Quickset - recognize 160 MHz channel as HomeAP mode;
Romon - fixed RoMON services becoming unavailable after disabled once during active scanning process;
Supout - added "partitions" section to supout file;
Switch - added support for port isolation by switch chip;
Webfig - properly display time interval within Kid Control menu;
Webfig - properly show NTP clients "last-adjustment" value;
Winbox - added "poe-fault" LED trigger;
Winbox - added "secondary-channel" setting to wireless interface if 80 MHz mode is selected;
Winbox - added missing "dscp" and "clamp-tcp-mss" settings to IPv6 tunnels;
Winbox - allow to specify full URL in SCEP certificate signing process;
Winbox - fixed arrow key handling within table filter fields;
Winbox - properly close session when uploading multiple files to the router at the same time;
Winbox - removed duplicate "20/40/80MHz" value from "channel-width" setting options;
Winbox - show "scep-url" for certificates;
Winbox - show "System/Health" only on boards that have health monitoring;
Winbox - show firmware upgrade message at the bottom of "System/RouterBOARD" menu;