IGEL Universal Desktop LX / IGEL Zero =============================================================================== Version 10.03.210 Release date 2017-10-20 Last update of this document 2017-10-19 [> IGEL eDOCS Release Notes](http://edocs.igel.com/index.htm#15179.htm) Supported Devices ------------------------------------------------------------------------------- * IZ2-RFX, IZ2-HDX, IZ2-HORIZON * IZ3-RFX, IZ3-HDX, IZ3-HORIZON * UD2-LX 40 * UD3-LX 50, UD3-LX 42, UD3-LX 41, UD3-LX 40 * UD5-LX 50, UD5-LX 40 * UD6-LX 51 * UD9-LX Touch 41, UD9-LX 40 * UD10-LX Touch 10, UD10-LX 10 Component Versions ------------------------------------------------------------------------------- | Clients | | | ----------------------------------------- | ----------------------------- | | Citrix HDX Realtime Media Engine | 2.3.0-1075 | | Citrix Receiver | 13.3.2.366713 | | Citrix Receiver | 13.4.2.10146724 | | Citrix Receiver | 13.5.0.10185126 | | Ericom PowerTerm | 12.0.1.0.20170219.2-_dev_-34574 | | Evidian AuthMgr | 1.4.6132 | | FabulaTech USB for Remote Desktop | 5.1.3 | | Firefox | 52.3.0 | | IBM iAccess Client Solutions | 1.1.5.0 | | IGEL RDP Client | 2.2 | | Imprivata OneSign ProveID Embedded | | | Leostream Java Connect | 3.3.7.0 | | NX Client | 5.2.11 | | Oracle JRE | 1.8.0_141 | | Parallels Client (32 bit) | 16.0.1.18456 | | Remote Viewer 7.0 for RedHat Enterprise Virtualization Desktops | | | Systancia AppliDis | 4.0.0.17 | | Thinlinc Client | 4.8.0-5456 | | ThinPrint Client | 7.0.78 | | Totem Media Player | 2.30.2 | | VMware Horizon client | 4.6.0-6617224 | | Dictation | | | ----------------------------------------- | ----------------------------- | | Diktamen driver for dictation | | | Driver for Grundig Business Systems dictation devices | | | Nuance Audio Extensions for dictation B048 | | | Olympus driver for dictation | 20161103 | | Philips Speech Driver | 12.4.15 | | Signature | | | ----------------------------------------- | ----------------------------- | | signotec Citrix Channel | 8.0.6 | | signotec VCOM Daemon | 2.0.0 | | StepOver TCP Client | 2.1.0 | | Smartcard | | | ----------------------------------------- | ----------------------------- | | PKCS#11 Library A.E.T. SafeSign | 3.0.101 | | PKCS#11 Library Athena IDProtect | 623.07 | | PKCS#11 Library cryptovision sc/interface | 6.6.3.502 | | PKCS#11 Library Gemalto IDPrime | 1.2.3 | | PKCS#11 Library SecMaker NetID | 6.6.0.30 | | Reader Driver ACS CCID | 1.1.3 | | Reader Driver Gemalto eToken | 9.0.43 | | Reader Driver HID Global Omnikey | 4.2.4 | | Reader Driver Identiv CCID | 5.0.35 | | Reader Driver Identiv eHealth200 | 1.0.5 | | Reader Driver MUSCLE CCID | 1.4.27 | | Reader Driver REINER SCT cyberJack | 3.99.5final.sp09 | | Resource Manager PC/SC Lite | 1.8.20 | | Cherry USB2LAN Proxy | 3.0.0.4 | | System Components | | | ----------------------------------------- | ----------------------------- | | Graphics Driver INTEL | 2.99.917+git20170607-igel | | Graphics Driver ATI/RADEON | 7.9.0-0ubuntu1 | | Graphics Driver ATI/AMDGPU | 1.3.0-0ubuntu1 | | Graphics Driver VIA | 5.76.52.92-009-005f78-20150730 | | Graphics Driver FBDEV | 0.4.4-1build5 | | Graphics Driver VESA | 2.3.4-1build2 | | Input Driver Evdev | 2.10.5-1ubuntu1 | | Input Driver Elographics | 1.4.1-1build5 | | Input Driver eGalax | 2.5.5814 | | Input Driver Synaptics | 1.9.0-1ubuntu1 | | Input Driver Vmmouse | 13.1.0-1ubuntu2 | | Input Driver Wacom | 0.34.0-0ubuntu2 | | Kernel | 4.10.17 #29.33-ud-r1874 | Security Fixes ------------------------------------------------------------------------------- * Fixed wpa security issues (KRACK vulnerability) CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088, CVE-2016-4476 and CVE-2016-4477. General Information ------------------------------------------------------------------------------- ### The following clients and features are not supported anymore * Citrix Receiver 12.1 and 13.1 * Citrix Access Gateway Standard Plug-in * Dell vWorkspace Connector for Linux * Ericom PowerTerm Emulation 9 and 11 * Ericom Webconnect * IGEL Legacy RDP Client (rdesktop) * Virtual Bridges VERDE Client * PPTP VPN Support * IGEL Upgrade License Tool with IGEL Smartcard Token * Remote Management by setup.ini file transfer (TFTP) * XC Font Service * Remote Access via RSH * Legacy Philips Speech Driver * Digital Persona Support * Sane Scanner Support * Softpro/Kofax Citrix Virtual Channel * t-Systems TCOS Smartcard Support * DUS Series touch screens * Elo serial touch screens * IGEL Smartcard without locking desktop * Video Hardware Acceleration Support is discontinued on UD3-LX 42, UD3-LX 41, UD3-LX 40 (M320C/M330C) and UD10-LX Touch 10, UD10-LX 10 * H.264 Hardware Acceleration Support is discontinued on UD3-LX 42, UD3-LX 41, UD3-LX 40 (M320C/M330C) and UD10-LX Touch 10, UD10-LX 10 * Storage Hotplug devices are not automatically removed anymore, instead they must be always ejected manually: - by panel tray icon - by an icon in the "In-Session Control Bar" (configurable at `IGEL Setup > User Interface > Desktop`) - by a "Safely Remove Hardware" session (configurable at `IGEL Setup > Accessories`) ### The following clients and features are not available in this release * Voip Client Ekiga * X session (Xorg Xephyr) * XDMCP * Cherry eGK Channel * Open VPN Smartcard Support * NCP Secure Client * Asian Input Methods * Composite Manager Known Issues ------------------------------------------------------------------------------- ### Citrix * Citrix Multi Stream policy does not work with StoreFront sessions, only with Self-Service and Browser. ### VMware Horizon * Blast: On Intel Baytrail based chipsets, H.264 rendering breaks after 20min. Therefore, by default, on following devices the GL-Basic Renderering Engine is used instead of the H.264 GL-Renderer: IGEL UD 6 51 (H830C), IGEL UD 5 50 (H820), IGEL UD9 40/41 (TC-215B) and IGEL UD2 40 (D220). * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, if you want to use USB redirection for your storage devices: Note that the USB on-insertion feature is only working if the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local Storage Hotplug: On page `Devices > Storage Devices > Storage Hotplug`, put number of storage hotplug devices to 0. - On the other hand, if you use drive mapping instead, it is recommended that you should either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. And because Horizon Client relies on the OS to mount the storage devices itself, please go to setup page: `Devices > Storage Devices > Storage Hotplug` and switch on "Enable dynamic drive mapping" and put "Number of storage hotplug devices" to at least 1. * External drives mounted already before connection do not appear in the remote desktop. Workaround: map the directory /media as a drive in your desktop. Then the external devices will show up inside the media drive. ### Firefox * Because the support for the gstreamer framework was dropped by recent Firefox versions, support for H264 decoding in the browser is not possible anymore due to licensing restrictions. * After firmware update a fullscreen browser session starts once in window mode. Afterwards the fullscreen mode is functional again. Release Notes 10.03.210 (based on 10.03.170) =============================================================================== New Features ------------------------------------------------------------------------------- ### VMware Horizon * Integrated **VMware Horizon Client 4.6.0-6617224** * Added **media provider optimization for Skype for Business**: | | | | ---------- | ---------------------------------------- | | IGEL Setup | Sessions > Horizon Client > Horizon Client Global > Unified Communications > Skype for Business | | Parameter | `Virtualization Pack Skype for Business` | | Registry | `vmware.view.mediaprovider_skype` | | Value | **enabled**(default) / disabled | * Added new parameter to modify the **USB redirection behavior**: | | | | --------- | ---------------------------------------- | | Parameter | `Redirect HID functionality of some headsets or headphones` | | Registry | `vmware.view.redirect_headset_hid` | | Value | **enabled**(default) / disabled | > If enabled, Jabra, Plantronics and Sennheiser headsets/headphones > will be ignored as HID devices by the X-server. * Added possibility regarding USB redirection to **split up composite USB devices** and redirect only a subset of their interfaces. This can be done automatically according to their class type or explicitly by naming the interfaces' number to exclude. Enable this parameter for automatic device splitting: | | | | ---------- | ---------------------------------------------- | | IGEL Setup | Sessions > Horizon Client > Horizon Client Global > USB Redirection | | Parameter | `Automatic splitting of composite USB devices` | | Registry | `vmware.view.usb.allowautodevicesplitting` | | Value | enabled / **disabled**(default) | | | | | ---------- | ---------------------------------------------------- | | IGEL Setup | Sessions > Horizon Client > Horizon Client Global > USB Redirection | | Parameter | `Device Rules > Rule` | | Registry | `vmware.view.usb.devicepolicy.product_rule.rule` | | Range | [Deny (default)] [Allow] [Split] [No auto-split] | > Additionally to "Deny" and "Allow" for every usb device, there are > two new rules: "Split" and "No auto-split". > Default is "Deny". | | | | ---------- | ---------------------------------------------------- | | IGEL Setup | Sessions > Horizon Client > Horizon Client Global > USB Redirection | | Parameter | `Device Rules > Interface Exclude List` | | Registry | `vmware.view.usb.devicepolicy.product_rule.excludeif` | > If the rule is set to "Split" you can specify the interfaces to > exclude in the new key. Default is empty. Interface numbers can be > separated by commas. > If the rule is set to "No auto-split" you can prevent the specific > USB device from being split. (This is only effective if > `Automatic splitting of composite USB devices` is enabled.) ### Firefox * Updated Flash Player download URL to version 27.0.0.170 ### Touch screen * Added an overlay button to open and close the on-screen keyboard for touch screen operation. With touch and hold the button can be moved around. | Registry keys | | | -------------------- | --------------------------------------------- | | Parameter | `Show button` | | Registry | `userinterface.touchscreen.keyboard_touchkey` | | Value | enabled / **disabled**(default) | | | | | -------------------- | --------------------------------------------- | | Parameter | `Button size` | | Registry | `userinterface.touchscreen.window_size` | | Value | [40px] [50px] [60px (default)] [70px] [80px] | | | | | -------------------- | --------------------------------------------- | | Parameter | `Touch and hold delay in ms` | | Registry | `userinterface.touchscreen.time_to_hold` | | Value | 1000 | Resolved Issues ------------------------------------------------------------------------------- ### RDP/IGEL RDP Client 2 * Added support for **shell variables in local logon** configurations. The shell variable configuration is available at setup page `System > Firmware Customization > Environment Variables` * Fixed reading German health care cards with reader Cherry ST-2052 via RDP. * Fixed possible crash of RDP client when using smart cards. ### Network * Fixed an annoying network notification that occurred when DHCP lease was renewed. * Fixed bug in 10.03.170: Missing tray icon for HiLink devices, particularly Huawei E3372 * Fixed wpa security issues (KRACK vulnerability) CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088, CVE-2016-4476 and CVE-2016-4477. ### WiFi * Fixed a bug where setting the following registry keys to a BSSID or "bestsignal" resulted in network configuration failure: | | For the first configured SSID: | | ----------------- | ------------------------------------------------ | | Parameter | `BSSID` | | Registry | `network.interfaces.wirelesslan.device0.bssid` | | | For additional SSIDs: | | ----------------- | ------------------------------------------------ | | Parameter | `BSSID` | | Registry | `network.interfaces.wirelesslan.device0.alt_ssid.bssid` | > If the BSSID (MAC address) is configured, then the WPA supplicant > is restricted to associate only with this Access Point. > The BSSID parameter can be set to the string value "bestsignal", > then the BSSID of the Access Point with the best signal level is > selected. The detection of the Access Point providing best > signal level is executed once during network configuration. > Detection of the Access Point providing best signal level isn't > supported for VIA VNT VT6656. ### genucard VPN * Fixed genucard connection failure. ### CUPS Printing * Fixed printing to CUPS printers connected to the serial port. ### Base system * Fixed "Update of Bootcode ongoing" loop. * Fixed Secure Shell (SSH) Access with public key authentication (caused due to wrong /wfs directory permissions). [> Best Practice](http://edocs.igel.com/index.htm#10204371.htm) ### Storage Devices * Fixed Mobile Device Access with iOS11 devices. ### Audio * Fixed automatic selection of the sound output on IGEL H830C, IGEL M340C and IGEL D220 devices. Release Notes 10.03.170 (based on 10.03.150) =============================================================================== New Features ------------------------------------------------------------------------------- ### RedHat Enterprise Virtualization client * Updated virt-viewer to version 7.0 ### Parallels Client * Updated Parallels 2X Client to version 16.0.1-18456 Resolved Issues ------------------------------------------------------------------------------- ### RedHat Enterprise Virtualization client * Fixed support for "Native Client" option. ### Parallels Client * Fixed audio issue. ### Network * Improved ethernet hotplug handling, e.g. in the case where the TC gets connected to a docking station. Release Notes 10.03.150 (based on 10.03.110) =============================================================================== New Features ------------------------------------------------------------------------------- ### Citrix * Added Citrix HDX RTME 2.3.0 used for Skype for Business optimization in ICA sessions. Resolved Issues ------------------------------------------------------------------------------- ### Network * Fixed USB mode switching (necessary for mobile broadband USB sticks) Release Notes 10.03.110 (based on 10.03.100) =============================================================================== Resolved Issues ------------------------------------------------------------------------------- ### Hardware * Fixed CPU Power Plan configuration so that the 'Power Saver' mode is usable again.