TikMan v2.0.0

A big release: TikMan now runs in your browser, talks to your devices securely by default, and reads
everything over SSH when a RouterOS device's HTTPS is broken. Highlights below.

🌐 Built-in web server (new)

Toggle it from the Web server menu (off by default) and manage the whole fleet from a browser —
even your phone. It runs in-process and mirrors the desktop app:

• Live device list (filter + sort), scan control with live progress, and the topology map.
• Per-device detail with Wake-on-LAN, set login, and backup download (config .rsc and
  full binary .backup).
• A full SSH terminal (xterm.js) and a VNC viewer (noVNC), right in the browser.
• Security: HTTP Basic auth is required; every credential- or screen-bearing action (login,
  backup, terminal, VNC) is HTTPS-only and refused over plain HTTP. Bring your own certificate or
  let TikMan generate and cache a self-signed one. Set the port, user and password under
  Settings › Web.

🔒 Secure by default

Credentials and configuration now only ever travel over HTTPS or SSH. Plain HTTP is off unless
you turn it on (Settings › Connections). When it's off, a device that only answers over HTTP is
skipped with a hint instead of silently sending your password in clear text.

🔓 Full SSH fallback for RouterOS

Many RouterOS devices ship a broken HTTPS handshake. Instead of failing (or falling back to HTTP),
TikMan now reads everything over the encrypted SSH CLI when HTTPS doesn't work:

• Monitoring (CPU/RAM/uptime/version), the physical topology (bridge FDB + neighbours),
  Wi-Fi network names (incl. CAPsMAN), and the device log.
• Config export (/export) and the full binary backup, and installing updates, all over SSH.

So a MikroTik with broken HTTPS is fully and securely usable — with no HTTP anywhere.

💾 Backup assistant

"Save backups" now opens an assistant (like the update one): pick the devices that have a login,
set the order, watch the progress. A checkbox additionally pulls the full binary .backup from
MikroTik devices (over SSH); other vendors ignore it.

🗺️ Topology & UI

• A "Building the map…" indicator while the forwarding tables are gathered, and a fix so the map
  isn't flat right after restoring a saved device list.
• A 🔑 column marking devices that have a stored login.

🐛 Notable fixes

• Settings and the device list now actually persist across restarts (they never did before — a
  serialization bug reset everything to defaults on load).
• Config backup no longer fails on :443 for RouterOS devices with a broken HTTPS stack.

Downloads

File	Platform	Runtime
TikMan-2.0.0-win-x64.exe	Intel/AMD 64-bit	none (self-contained, ~68 MB)
TikMan-2.0.0-win-x64-fdd.exe	Intel/AMD 64-bit	.NET 10 Desktop Runtime (~12 MB)
TikMan-2.0.0-win-arm64.exe	ARM64	none (self-contained, ~65 MB)
TikMan-2.0.0-win-arm64-fdd.exe	ARM64	.NET 10 Desktop Runtime (~12 MB)

When in doubt, take the self-contained build (-x64 or -arm64). The exes are unsigned, so Windows
SmartScreen shows an "unknown publisher" notice on first run — More info → Run anyway.