IGEL Universal Desktop LX ========================= Firmware version 10.06.100 Release date 2019-07-16 Last update of this document 2019-07-11 [> IGEL Release Notes](https://kb.igel.com/igelos10/releasenotes) Supported Devices ------------------------------------------------------------------------------- IZ2-RFX, IZ2-HDX, IZ2-HORIZON IZ3-RFX, IZ3-HDX, IZ3-HORIZON UD2-LX 40 UD3-LX 51, UD3-LX 50 UD5-LX 50 UD6-LX 51 UD7-LX 10 UD9-LX Touch 41, UD9-LX 40 UD10-LX Touch 10, UD10-LX 10 Component Versions ------------------------------------------------------------------------------- +-------------------------------------------+----------------------------------+ | Clients | | +===========================================+==================================+ | Citrix HDX Realtime Media Engine | 2.8.0-2235 | +-------------------------------------------+----------------------------------+ | Citrix Receiver | 13.10.0.20 | +-------------------------------------------+----------------------------------+ | Citrix Receiver | 13.5.0.10185126 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 19.3.0.5 | +-------------------------------------------+----------------------------------+ | deviceTRUST Citrix Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.0.1.0.20170219.2-_dev_-34574 | +-------------------------------------------+----------------------------------+ | Evidian AuthMgr | 1.5.6840 | +-------------------------------------------+----------------------------------+ | Evince PDF Viewer | 3.18.2-1ubuntu4.5 | +-------------------------------------------+----------------------------------+ | FabulaTech USB for Remote Desktop | 5.2.29 | +-------------------------------------------+----------------------------------+ | Firefox | 60.7.2 | +-------------------------------------------+----------------------------------+ | IBM iAccess Client Solutions | 1.1.8.1 | +-------------------------------------------+----------------------------------+ | IGEL RDP Client | 2.2 | +-------------------------------------------+----------------------------------+ | Imprivata OneSign ProveID Embedded | onesign-bootstrap-loader_1.0.523630_amd64 | +-------------------------------------------+----------------------------------+ | deviceTRUST RDP Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | Leostream Java Connect | 3.3.7.0 | +-------------------------------------------+----------------------------------+ | NCP Secure Enterprise Client | 5.10_rev40552 | +-------------------------------------------+----------------------------------+ | NX Client | 6.5.6 | +-------------------------------------------+----------------------------------+ | Open VPN | 2.3.10-1ubuntu2.2 | +-------------------------------------------+----------------------------------+ | Zulu JRE | 8.38.0.13 | +-------------------------------------------+----------------------------------+ | Parallels Client (64 bit) | 16.5.3.20735 | +-------------------------------------------+----------------------------------+ | Spice GTK (Red Hat Virtualization) | 0.36-1~git20190601igel61 | +-------------------------------------------+----------------------------------+ | Remote Viewer (Red Hat Virtualization) | 8.0-1igel49 | +-------------------------------------------+----------------------------------+ | Usbredir (Red Hat Virtualization) | 0.8.0-1igel49 | +-------------------------------------------+----------------------------------+ | Systancia AppliDis | 4.0.0.17 | +-------------------------------------------+----------------------------------+ | ThinLinc Client | 4.10.0-6068 | +-------------------------------------------+----------------------------------+ | ThinPrint Client | 7.5.88 | +-------------------------------------------+----------------------------------+ | Totem Media Player | 2.30.2 | +-------------------------------------------+----------------------------------+ | Parole Media Player | 1.0.1-0ubuntu1igel18 | +-------------------------------------------+----------------------------------+ | VNC Viewer | 1.9.0+dfsg-3igel8 | +-------------------------------------------+----------------------------------+ | VMware Horizon client | 5.0.0-12557422 | +-------------------------------------------+----------------------------------+ | Voip Client Ekiga | 4.0.1 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Dictation | | +===========================================+==================================+ | Diktamen driver for dictation | | +-------------------------------------------+----------------------------------+ | Grundig Business Systems dictation driver | | +-------------------------------------------+----------------------------------+ | Nuance Audio Extensions for dictation | B301 | +-------------------------------------------+----------------------------------+ | Olympus driver for dictation | 20180621 | +-------------------------------------------+----------------------------------+ | Philips Speech driver | 12.7.11 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Signature | | +===========================================+==================================+ | Kofax SPVC Citrix Channel | 3.1.41.0 | +-------------------------------------------+----------------------------------+ | signotec Citrix Channel | 8.0.8 | +-------------------------------------------+----------------------------------+ | signotec VCOM Daemon | 2.0.0 | +-------------------------------------------+----------------------------------+ | StepOver TCP Client | 2.1.0 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Smartcard | | +===========================================+==================================+ | PKCS#11 Library A.E.T. SafeSign | 3.0.101 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Athena IDProtect | 623.07 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library cryptovision sc/interface | 7.1.20 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Gemalto SafeNet | 10.0.37-0 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library SecMaker Net iD | 6.7.2.36 | +-------------------------------------------+----------------------------------+ | Reader Driver ACS CCID | 1.1.6-1igel1 | +-------------------------------------------+----------------------------------+ | Reader Driver Gemalto eToken | 10.0.37-0 | +-------------------------------------------+----------------------------------+ | Reader Driver HID Global Omnikey | 4.3.3 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive CCID | 5.0.35 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive eHealth200 | 1.0.5 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive SCRKBC | 5.0.24 | +-------------------------------------------+----------------------------------+ | Reader Driver MUSCLE CCID | 1.4.30-1igel3 | +-------------------------------------------+----------------------------------+ | Reader Driver REINER SCT cyberJack | 3.99.5final.sp13igel15 | +-------------------------------------------+----------------------------------+ | Resource Manager PC/SC Lite | 1.8.23-1igel1 | +-------------------------------------------+----------------------------------+ | Cherry USB2LAN Proxy | 3.2.0.3 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | System Components | | +===========================================+==================================+ | OpenSSL | 1.0.2g-1ubuntu4.15 | +-------------------------------------------+----------------------------------+ | OpenSSH Client | 7.2p2-4ubuntu2.8 | +-------------------------------------------+----------------------------------+ | OpenSSH Server | 7.2p2-4ubuntu2.8 | +-------------------------------------------+----------------------------------+ | Bluetooth Stack (bluez) | 5.50-0ubuntu1igel5 | +-------------------------------------------+----------------------------------+ | MESA OpenGL Stack | 19.0.8-1igel73 | +-------------------------------------------+----------------------------------+ | VAAPI ABI Version | 0.40 | +-------------------------------------------+----------------------------------+ | VDPAU Library Version | 1.1.1-3ubuntu1 | +-------------------------------------------+----------------------------------+ | Graphics Driver INTEL | 2.99.917+git20190301-igel870 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/RADEON | 19.0.1-2igel890 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/AMDGPU | 19.0.1-4igel894 | +-------------------------------------------+----------------------------------+ | Graphics Driver VIA | 5.76.52.92-opensource-009-005f78-20150730igel871 | +-------------------------------------------+----------------------------------+ | Graphics Driver FBDEV | 0.5.0-1igel819 | +-------------------------------------------+----------------------------------+ | Graphics Driver VESA | 2.4.0-1igel855 | +-------------------------------------------+----------------------------------+ | Input Driver Evdev | 2.10.6-1igel888 | +-------------------------------------------+----------------------------------+ | Input Driver Elographics | 1.4.1-1build5igel633 | +-------------------------------------------+----------------------------------+ | Input Driver eGalax | 2.5.5814 | +-------------------------------------------+----------------------------------+ | Input Driver Synaptics | 1.9.1-1ubuntu1igel866 | +-------------------------------------------+----------------------------------+ | Input Driver VMMouse | 13.1.0-1ubuntu2igel635 | +-------------------------------------------+----------------------------------+ | Input Driver Wacom | 0.36.1-0ubuntu2igel888 | +-------------------------------------------+----------------------------------+ | Kernel | 4.19.57 #mainline-ud-r2762 | +-------------------------------------------+----------------------------------+ | Xorg X11 Server | 1.20.5-1igel891 | +-------------------------------------------+----------------------------------+ | Xorg Xephyr | 1.20.5-1igel891 | +-------------------------------------------+----------------------------------+ | CUPS Printing Daemon | 2.1.3-4ubuntu0.9igel27 | +-------------------------------------------+----------------------------------+ | PrinterLogic | 18.2.1.128 | +-------------------------------------------+----------------------------------+ | Lightdm Graphical Login Manager | 1.18.3-0ubuntu1.1 | +-------------------------------------------+----------------------------------+ | XFCE4 Window Manager | 4.12.3-1ubuntu2igel656 | +-------------------------------------------+----------------------------------+ | ISC DHCP Client | 4.3.3-5ubuntu12.10igel7 | +-------------------------------------------+----------------------------------+ | NetworkManager | 1.2.6-0ubuntu0.16.04.3igel74 | +-------------------------------------------+----------------------------------+ | ModemManager | 1.10.0-1~ubuntu18.04.2igel3 | +-------------------------------------------+----------------------------------+ | GStreamer 0.10 | 0.10.36-2ubuntu0.2 | +-------------------------------------------+----------------------------------+ | GStreamer 1.x | 1.16.0-1igel214 | +-------------------------------------------+----------------------------------+ | WebKit2Gtk | 2.24.2-0ubuntu0.19.04.1igel18 | +-------------------------------------------+----------------------------------+ | Python2 | 2.7.12 | +-------------------------------------------+----------------------------------+ | Python3 | 3.5.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited IGEL Support | | +===========================================+==================================+ | Mobile Device Access USB (MTP) | 1.1.16-2igel1 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (imobile) | 1.2.1~git20181030.92c5462-1igel5 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (gphoto) | 2.5.22-3igel1 | +-------------------------------------------+----------------------------------+ | VPN OpenConnect | 7.08-1 | +-------------------------------------------+----------------------------------+ | Scanner support / SANE | 1.0.27-1 | +-------------------------------------------+----------------------------------+ | VirtualBox | 6.0.8-dfsg-4igel25 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited Functionality | | +===========================================+==================================+ | Cisco JVDI Client | 12.1.0 | +-------------------------------------------+----------------------------------+ General Information ------------------------------------------------------------------------------- ### The following clients and features are not supported anymore * Citrix Receiver 12.1 and 13.1 - 13.4 * Citrix Access Gateway Standard Plug-in * Dell vWorkspace Connector for Linux * Ericom PowerTerm Emulation 9 and 11 * Ericom Webconnect * IGEL Legacy RDP Client (rdesktop) * Virtual Bridges VERDE Client * PPTP VPN Support * IGEL Upgrade License Tool with IGEL Smartcard Token * Remote Management by setup.ini file transfer (TFTP) * Remote Access via RSH * Legacy Philips Speech Driver * T-Systems TCOS Smartcard Support * DUS Series touch screens * Elo serial touch screens * Video Hardware Acceleration Support is discontinued on UD10-LX Touch 10, UD10-LX 10 * H.264 Hardware Acceleration Support is discontinued on UD10-LX Touch 10, UD10-LX 10 * Storage Hotplug devices are not automatically removed anymore, instead they must be always ejected manually: - by panel tray icon - by an icon in the 'In-Session Control Bar' (configurable at `IGEL Setup > User Interface > Desktop`) - by a 'Safely Remove Hardware' session (configurable at `IGEL Setup > Accessories`) * Java WebStart ### The following clients and features are not available in this release * Cherry eGK Channel * Open VPN Smartcard Support * Asian Input Methods * Composite Manager Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to version 60.7.2 ESR: * Fixes for mfsa2019-19, also known as: CVE-2019-11708 * Fixes for mfsa2019-18 CVE-2019-11707 * Fixes for mfsa2019-10, also known as: CVE-2019-9810, CVE-2019-9813. * Fixes for mfsa2019-08, also known as: CVE-2019-9790, CVE-2019-9791, CVE-2019-9792, CVE-2019-9793, CVE-2019-9795, CVE-2019-9796, CVE-2018-18506, CVE-2019-9788. * Fixes for mfsa2019-05, also known as: CVE-2018-18356, CVE-2019-5785. * Fixes for mfsa2019-02, also known as: CVE-2018-18500, CVE-2018-18505, CVE-2018-18501. * Fixes for mfsa2018-30, also known as: CVE-2018-17466, CVE-2018-18492, CVE-2018-18493, CVE-2018-18494, CVE-2018-18498, CVE-2018-12405. * Allow firefox to access yubikey (FIDO/U2F) when apparmor is active. ### Base system * Fixed a vulnerability in Java configuration script. * Fixed possible malicious owner change with TC setup configuration. * Fixed policykit-1 security issues CVE-2018-19788 and CVE-2019-6133. * Fixed nss security issues CVE-2018-18508, CVE-2018-12404, CVE-2018-12384 and CVE-2018-0495. * Fixed ppp security issue CVE-2018-11574. * Fixed imagemagick security issues CVE-2018-16750, CVE-2018-16749, CVE-2018-16645, CVE-2018-16644, CVE-2018-16643, CVE-2018-16642, CVE-2018-16640, CVE-2018-16323, CVE-2018-14437, CVE-2018-14436, CVE-2018-14435, CVE-2018-14434, CVE-2017-13144, CVE-2017-12430, CVE-2019-9956, CVE-2019-7398, CVE-2019-7397, CVE-2019-7396, CVE-2019-7175, CVE-2019-11598, CVE-2019-11597, CVE-2019-11472, CVE-2019-11470, CVE-2019-10650, CVE-2019-10131, CVE-2018-20467, CVE-2018-18025, CVE-2018-18024, CVE-2018-18016, CVE-2018-17966, CVE-2018-17965, CVE-2018-16413, CVE-2018-16412, CVE-2017-12806 and CVE-2017-12805. * Fixed systemd security issues CVE-2018-16866, CVE-2018-16865, CVE-2018-16864 and CVE-2018-15688. * Fixed cups security issue CVE-2018-4700. * Fixed libarchive security issues CVE-2019-1000020, CVE-2019-1000019, CVE-2018-1000878, CVE-2018-1000877 and CVE-2017-14502. * Fixed avahi security issues CVE-2018-1000845 and CVE-2017-6519. * Fixed bind9 security issues CVE-2019-6465 and CVE-2018-5745. * Fixed libcaca security issues CVE-2018-20549, CVE-2018-20548, CVE-2018-20547, CVE-2018-20546, CVE-2018-20545 and CVE-2018-20544. * Fixed libgd2 security issues CVE-2019-6978 and CVE-2019-6977. * Fixed ghostscript security issues CVE-2019-6116, CVE-2018-19477, CVE-2018-19476, CVE-2018-19475, CVE-2018-19409, CVE-2018-18284, CVE-2018-18073, CVE-2018-17961, CVE-2019-3838 and CVE-2019-3835. * Fixed krb5 security issues CVE-2018-5730, CVE-2018-5729, CVE-2017-11462, CVE-2017-11368, CVE-2016-3120 and CVE-2016-3119. * Fixed texlive-bin security issue CVE-2018-17407. * Fixed ldb security issue CVE-2019-3824. * Fixed libmspack security issues CVE-2018-18585 and CVE-2018-18584. * Fixed perl security issues CVE-2018-18314, CVE-2018-18313, CVE-2018-18312 and CVE-2018-18311. * Fixed poppler security issues CVE-2019-7310, CVE-2018-20650, CVE-2018-20551, CVE-2018-20481, CVE-2018-19149, CVE-2018-19060, CVE-2018-19059, CVE-2018-19058, CVE-2018-16646 and CVE-2019-9200. * Fixed python3.5 security issues CVE-2018-14647, CVE-2018-1061, CVE-2018-1060 and CVE-2018-106. * Fixed net-snmp security issue CVE-2018-18065. * Fixed openssl security issues CVE-2019-1559, CVE-2018-5407 and CVE-2018-0734. * Fixed tiff security issues CVE-2018-8905, CVE-2018-7456, CVE-2018-18661, CVE-2018-18557, CVE-2018-17101, CVE-2018-17100, CVE-2018-1710, CVE-2018-10963, CVE-2019-7663, CVE-2019-6128, CVE-2018-19210, CVE-2018-17000, CVE-2018-12900 and CVE-2018-10779. * Fixed libvncserver security issues CVE-2018-6307, CVE-2018-20750, CVE-2018-20749, CVE-2018-20748, CVE-2018-20024, CVE-2018-20023, CVE-2018-20022, CVE-2018-20021, CVE-2018-20020, CVE-2018-20019, CVE-2018-15127 and CVE-2018-15126. * Fixed wavpack security issue CVE-2018-19840. * Fixed samba security issues CVE-2018-16851, CVE-2018-16841, CVE-2018-14629, CVE-2019-3880 and CVE-2018-16860. * Fixed libxkbcommon security issues CVE-2018-15864, CVE-2018-15863, CVE-2018-15862, CVE-2018-15861, CVE-2018-15859, CVE-2018-15858, CVE-2018-15857, CVE-2018-15856, CVE-2018-15855, CVE-2018-15854 and CVE-2018-15853. * Fixed openssh security issues CVE-2019-6111, CVE-2019-6109, CVE-2018-20685, CVE-2018-15473 and CVE-2016-10708. * Fixed python2.7 security issues CVE-2018-14647, CVE-2018-1061, CVE-2018-1060, CVE-2018-106, CVE-2018-1000802 and CVE-2018-1000030. * Fixed lxml security issue CVE-2018-19787. * Fixed gdk-pixbuf security issues CVE-2017-6314, CVE-2017-6313, CVE-2017-6312, CVE-2017-6311, CVE-2017-2870, CVE-2017-2862, CVE-2017-1000422, CVE-2016-6352 and CVE-2017-12447. * Fixed file security issues CVE-2019-8907 and CVE-2019-8905. * Fixed wget security issue CVE-2019-5953. * Fixed libxslt security issue CVE-2019-11068. * Fixed bind9 security issue CVE-2018-5743. * Fixed evince security issue CVE-2019-11459. * Fixed webkit2gtk security issues CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-6251, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4345, CVE-2018-4386, CVE-2018-4372. * Fixed gst-plugins-base0.10 security issue CVE-2019-9928. * Fixed wpa security issues CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499 and CVE-2019-11555. * Fixed heimdal security issues CVE-2019-12098 and CVE-2018-16860. * Fixed libimobiledevice security issue CVE-2016-5104. . * Fixed libpng1.6 security issues CVE-2019-7317 and CVE-2018-13785. * Fixed gimp security issues CVE-2017-17786, CVE-2017-17789, CVE-2017-17784, CVE-2017-17787, CVE-2017-17785 and CVE-2017-17788. * Fixed libtomcrypt security issue CVE-2018-12437. * Fixed curl security issues CVE-2018-16840, CVE-2018-16839, CVE-2019-3823, CVE-2019-3822, CVE-2018-16890, CVE-2019-5346. * Fixed gnutls28 security issues CVE-2018-10846, CVE-2018-10845, CVE-2018-10844 and CVE-2018-1084. * Fixed qtbase-opensource-src security issues CVE-2018-19873, CVE-2018-19870 and CVE-2018-15518. * Fixed db5.3 security issue CVE-2019-8457. * Fixed libssh2 security issues CVE-2019-3863, CVE-2019-3862, CVE-2019-3861, CVE-2019-3860, CVE-2019-3859, CVE-2019-3858, CVE-2019-3857, CVE-2019-3856 and CVE-2019-3855. * Fixed network-manager security issue CVE-2018-15688. * Fixed elfutils security issues CVE-2019-7665, CVE-2019-7150, CVE-2019-7149, CVE-2018-18521, CVE-2018-18520, CVE-2018-18310, CVE-2018-16403, CVE-2018-16402 and CVE-2018-16062. * Fixed libsndfile security issues CVE-2019-3832, CVE-2018-19758, CVE-2018-19662, CVE-2018-19661, CVE-2018-19432, CVE-2018-13139, CVE-2017-6892, CVE-2017-17457, CVE-2017-17456, CVE-2017-16942, CVE-2017-14634, CVE-2017-14246 and CVE-2017-14245. * Fixed dbus security issue CVE-2019-12749. * Fixed vim security issues CVE-2019-12735 and CVE-2017-5953. * Fixed sqlite3 security issues CVE-2019-9937, CVE-2019-9936, CVE-2019-8457, CVE-2018-20506, CVE-2018-20346, CVE-2017-2520, CVE-2017-2519, CVE-2017-2518, CVE-2017-13685, CVE-2017-10989 and CVE-2016-6153. * Fixed systemd security issues CVE-2019-6454, CVE-2019-6454, CVE-2018-1049, CVE-2018-15686 and CVE-2019-3842. * Fixed libseccomp security issue CVE-2019-9893. * Fixed bzip2 security issues CVE-2019-12900 and CVE-2016-3189. * Fixed expat security issue CVE-2018-20843. * Fixed unzip security issues CVE-2019-13232, CVE-2018-1000035, CVE-2016-9844 and CVE-2014-9913. * Mount partitions with "nodev" flag option. * Remote users home is now /home/ruser. * Default umask is set to 0077 for all non root users. * Fixed a vulnerability in the custom environment variable framework. * Fixed kernel TCP vulnerabilities CVE-2019-11477: SACK Panic, CVE-2019-11478: SACK Slowness and CVE-2019-11479: Excess Resource Consumption Due to Low MSS Values. * Changed minimal allowed MSS size to 1000 to prevent possible Denial of Service attacks. Known Issues -------------------------------------------------------------------------------- ### Citrix * With activated DRI3 and an AMD GPU Citrix H.264 acceleration plugin could freeze. Selective H.264 mode (API v2) is not affected from this issue. * Citrix has known issues with GStreamer1.0 which describe problems with multimedia redirection of H.264, MPEG1 and MPEG2. GStreamer1.0 is used if browser content redirection is active. * Browser content redirection does not work with activated DRI3 and hardware accelerated H.264 deep compression codec. * Citrix StoreFront login with Gemalto smartcard middleware does not detect smartcard correctly if the card is inserted after start of login. As a workaround, insert the smartcard before starting the StoreFront login. * Citrix H.264 acceleration plugin does not work with **enabled** server policy "Optimize for 3D graphics workload" in combination with server policy "Use video codec compression" -> *"For the entire screen"**. * To launch multiple desktop sessions with Citrix HDX RTME and Citrix H.264 acceleration plugin, the following registry key has to be enabled: +------------+-----------------------------------------------------------------+ |Parameter |`Activate workaround for dual RTME sessions and H264 acceleration` | +------------+-----------------------------------------------------------------+ |Registry |`ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ |Range | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ > This workaround is not applicable when "Enable Secure ICA" is active for the > specific delivery group. ### VMware Horizon * External drives mounted already before connection do not appear in the remote desktop. Workaround: map the directory /media as a drive. Then the external devices will show up inside the media drive. * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, when using USB redirection for storage devices: The USB on-insertion feature is only working when the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. - On the other hand, when using drive mapping instead, it is recommended to either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. Furthermore Horizon Client relies on the OS to mount the storage devices itself. Enable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. ### Parallels Client * Native USB redirection does not work with Parallels Client. * For using the new FIPS 140-2 compliance mode it is necessary to connect to the Parallels RAS once with disabled FIPS support. ### Smartcard * In seldom cases the authentication hung when using A.E.T. SafeSign smartcards. ### Appliance Mode * Appliance mode RHEV/Spice: spice-xpi firefox plugin is no longer supported. The "Console Invocation" has to allow Native client (auto is also possible) and it should start in fullscreen to prevent opening windows. ### WiFi * TP-Link Archer T2UH WiFi adapters don't work after system suspend/resume. Workaround: Disable system suspend at IGEL Setup > System > Power Options > Shutdown. ### Base system * Due to the removal of the Oracle JRE Java WebStart is not supported anymore. ### Hardware * Suspend on UD10 is disabled. New Features -------------------------------------------------------------------------------- ### OS 11 Upgrade * It is now possible to upgrade to IGEL OS 11. For more information, please see the particular section in kb.igel.com: [> Upgrading IGEL Devices](https://kb.igel.com/os10-upgrade-to-os11) The parameters for the upgrade: +------------+-----------------------------------------------------------------+ | IGEL Setup | System -> Update -> OS 11 Upgrade | +------------+-----------------------------------------------------------------+ | Parameter | `Upgrade to OS 11` | +------------+-----------------------------------------------------------------+ | Registry | `update.firmware_migrate_to_11` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ | Parameter | `Upgrade to OS 11 even if a previous upgrade attempt failed` | +------------+-----------------------------------------------------------------+ | Registry | `update.force_firmware_migrate_to_11` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ | Parameter | `Upgrade to OS 11 even if PowerTerm is enabled` | +------------+-----------------------------------------------------------------+ | Registry | `update.migrate_to_11_with_powerterm` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ | Parameter | `Require an Enterprise Management Pack license to upgrade to OS 11` | +------------+-----------------------------------------------------------------+ | Registry | `update.migrate_to_11_enterprise_required` | +------------+-----------------------------------------------------------------+ | Range | [Smart] [Always] [Never] | +------------+-----------------------------------------------------------------+ | Value | **Smart** | +------------+-----------------------------------------------------------------+ | Parameter | `Timeout waiting for OS 11 license to start automatic upgrade` | +------------+-----------------------------------------------------------------+ | Registry | `update.migrate_to_11_license_timeout` | +------------+-----------------------------------------------------------------+ | Range | [Disabled] [10 Minutes] [15 Minutes] [30 Minutes] [60 Minutes] | +------------+-----------------------------------------------------------------+ | Value | **10 Minutes** | +------------+-----------------------------------------------------------------+ * The parameters for configuring the desktop integration of the 'IGEL OS 11 Upgrade tool' are: +------------+-----------------------------------------------------------------+ |IGEL Setup |Accessories > OS 11 Upgrade | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.startmenu` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.applaunch` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.startmenu_system` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.applaunch_system` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.menu_path` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.desktop_path` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.applaunch_path` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.quick_start` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.pwprotected` | +------------+-----------------------------------------------------------------+ |Range | [None] [Administrator] [User] [Setup user] | +------------+-----------------------------------------------------------------+ |Value |**None** | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.desktop` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Registry |`sessions.os11_migration0.pulldown` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ ### Citrix * Integrated **Citrix Workspace app 19.03**. - Added new registry key to support 1536-bit RSA keys for client authentication. Factory default for this release is "true". +------------+-----------------------------------------------------------------+ |Parameter |`Enables RSA 1536 cipher suite` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.enable_rsa_1536` | +------------+-----------------------------------------------------------------+ |Range |**factory default** (default) / false / true | +------------+-----------------------------------------------------------------+ - Added new registry key to enable different cipher suites. Factory default for this release is "ALL". +------------+-----------------------------------------------------------------+ |Parameter |`Enables different cipher suite` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.sslciphers` | +------------+-----------------------------------------------------------------+ |Range |**factory default** (default) / ALL / GOV / COM | +------------+-----------------------------------------------------------------+ > TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - GOV/ALL > TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - GOV/ALL > TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA - COM/ALL - Added new registry key to support keyboard layout synchronization. +------------+-----------------------------------------------------------------+ |Parameter |`Keyboard layout synchronization` | +------------+-----------------------------------------------------------------+ |Registry |`ica.modules.virtualdriver.keyboardsync.enable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ * Updated Citrix HDX RTME used for optimization of Skype for Business to version 2.8.0-2235 * Added support for Citrix Workspace Launcher functionality as described at https://support.citrix.com/article/CTX237727 * Added Citrix plugin for hardware accelerated VDPAU based H.264 decoding on AMD graphics chipsets: +------------+-----------------------------------------------------------------+ | Parameter | `Enable HW accelerated H264 vdpau codec (experimental)` | +------------+-----------------------------------------------------------------+ | Registry | `ica.hw-accelerated-h264-vdpau-codec` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ ### RDP/IGEL RDP Client 2 * Added field 'Collection' to RDP session server page +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > RDP > RDP Sessions > RDP Session > Server | +------------+-----------------------------------------------------------------+ | |Sessions > RDP > RDP Sessions > RDP Session > Options | +------------+-----------------------------------------------------------------+ |Parameter |`Collection` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.winconnect.option.load-balance-info` | +------------+-----------------------------------------------------------------+ ### VMware Horizon * Updated Horizon Client to version 5.0.0-12557422 * Added parameters to specify webcam frame size and rate for RTAV. +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame width | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-width` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame height | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-height` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame rate | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-rate` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ * Added possibility to easily evaluate Horizon Blast decoder states.˙By default sessions are evaluated after use and the result is written to the journal log. * Added continuous run mode for USB-Arbitrator. +------------+-----------------------------------------------------------------+ | Parameter | USB-Arbitrator continuous run mode | +------------+-----------------------------------------------------------------+ | Registry | `vmware.view.usb.arbitrator-continuous-runmode` | +------------+-----------------------------------------------------------------+ | Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ * Added recognition for password change and password expired dialog in Horizon local logon sessions or appliance mode * Added switch for Blast H.264 decoding for VMware Horizon Client +------------+-----------------------------------------------------------------+ | Parameter | Blast H.264 decoding | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.blast-h264` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ * Added switch to use systemwide proxy in VMware Horizon appliance mode. +------------+-----------------------------------------------------------------+ |Parameter |`Use the systemwide proxy.` | +------------+-----------------------------------------------------------------+ |Registry |`vmwarevdmapp.use_proxy` | +------------+-----------------------------------------------------------------+ |Value |disabled / **enabled** (default) | +------------+-----------------------------------------------------------------+ ### Parallels Client * Updated Parallels Client to version 16.5.3 (64-Bit) * Added possibility to set apps to autostart on Parallels RAS ### ThinLinc * Updated Cendio ThinLinc to version 4.10. ### RedHat Enterprise Virtualization client * Updated Remote Viewer (RedHat Virtualization) to version 8.0. * Updated Spice GTK (RedHat Virtualization) to version 0.36. ### IBM_5250 * Updated IBM iAccess Client Solutions to version 1.1.8.1. * Improved startup time of IBM iAccess Client * Improved configuration of IBM iAccess Client via IGEL Setup +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Connection>Advanced` | +------------+-----------------------------------------------------------------+ |Parameter |`Bypass signon` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.ssoenabled` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Font` | +------------+-----------------------------------------------------------------+ |Parameter |`Antialiasing` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.textantialiasing` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Cursor` | +------------+-----------------------------------------------------------------+ |Parameter |`Allow blinking cursor` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.blinkcursor` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Cursor` | +------------+-----------------------------------------------------------------+ |Parameter |`Show blinking text with` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.blinkstate` | +------------+-----------------------------------------------------------------+ |Value |Blinking Text/**Host Color**/Mapped Color | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Cursor` | +------------+-----------------------------------------------------------------+ |Parameter |`Blink Color` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.blinkcolor_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ffc800** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Cursor` | +------------+-----------------------------------------------------------------+ |Parameter |`Blink Color Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.blinkcolor_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Rule Line` | +------------+-----------------------------------------------------------------+ |Parameter |`Rule Line` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.ruleline` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Rule Line` | +------------+-----------------------------------------------------------------+ |Parameter |`Follow Cursor` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.rulelinefollows` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Rule Line` | +------------+-----------------------------------------------------------------+ |Parameter |`Style` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.rulelinestyle` | +------------+-----------------------------------------------------------------+ |Value |**Crosshair**/Vertical/Horizontal | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Green` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fgn_fg` | +------------+-----------------------------------------------------------------+ |Value |**#00ff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Green Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fgn_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`White` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fwt_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ffffff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`White Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fwt_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Red` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_frd_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ff0000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Red Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_frd_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Turquoise` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_ftq_fg` | +------------+-----------------------------------------------------------------+ |Value |**#00ffff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Turquoise Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_ftq_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Yellow` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fyw_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ffff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Yellow Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fyw_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Pink` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fpk_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ff00ff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Pink Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fpk_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Blue` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fbl_fg` | +------------+-----------------------------------------------------------------+ |Value |**#7890f0** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Blue Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fbl_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Status Indicators` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_osi` | +------------+-----------------------------------------------------------------+ |Value |**#7890f0** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Information Indicators` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_oii` | +------------+-----------------------------------------------------------------+ |Value |**#ffffff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Attention Indicators` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_oai` | +------------+-----------------------------------------------------------------+ |Value |**#ffff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Error Indicators` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_oei` | +------------+-----------------------------------------------------------------+ |Value |**#ff0000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`OIA Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_oob` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Screen Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_sbg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Highlight active field` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.actfieldhilite` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Active Field` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_actf_fg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Active Field Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_actf_bg` | +------------+-----------------------------------------------------------------+ |Value |**#ffff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Crosshair Ruler Color` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_crc` | +------------+-----------------------------------------------------------------+ |Value |**#00ff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Column Separator` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_ccs` | +------------+-----------------------------------------------------------------+ |Value |**#ffffff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Preferences` | +------------+-----------------------------------------------------------------+ |Parameter |`Start window maximized` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.ismaximized` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Preferences>Keyboard` | +------------+-----------------------------------------------------------------+ |Parameter |`Keyboard Remapping File` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.keyremapfile` | +------------+-----------------------------------------------------------------+ |Value |**IBMi.kmp** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Preferences>Popup Keypad` | +------------+-----------------------------------------------------------------+ |Parameter |`Popup Keypad File` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.poppadfile` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Preferences>Toolbar` | +------------+-----------------------------------------------------------------+ |Parameter |`Toolbar File` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.toolbarfile` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Open new sessions in a new tab` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.opensessionintab` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Always display the tab bar` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.alwaysshowtabbar` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Switch to new tab when created` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.switchtonewtab` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Send a warning when closing multiple tabs` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.closemultipletabwarning` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Do not start tabbed sessions until the tab is selected` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.tabdelayedstart` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`New Tab Action` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.newtabaction` | +------------+-----------------------------------------------------------------+ |Value |Disable and Hide/**Run the Same**/Run Other... | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Tab Placement` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.tabplacement` | +------------+-----------------------------------------------------------------+ |Value |**Top**/Bottom/Left/Right | +------------+-----------------------------------------------------------------+ ### Firefox * Updated Mozilla Firefox to version 60.7.2 ESR * Added new keys to auto show and hide the on-screen software keyboard. To use this feature, the keyboard should be set to autostart. After a restart is is activated the keyboard will appear automatically when an input box is selected. Confirmed to work in firefox and on lockscreen. +------------+-----------------------------------------------------------------+ | Parameter | `Automatically hide software keyboard depending on focused widget` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.softkeyboard.autohide` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Automatically show software keyboard depending on focused widget` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.softkeyboard.autoshow` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added new parameters: Allow a custom command before and after browser session: +------------+-----------------------------------------------------------------+ |Parameter |`init_action` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.browser%.init_action` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`final_action` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.browser%.final_action` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ * Added options to customize firefox overflow menu and hide navigation buttons. +------------+-----------------------------------------------------------------+ | Parameter | `Hide Navigation buttons` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.browser.app.navigation_buttons_hidden` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Overflow Menu` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.browser.app.custom_toolbar.overflow-menu` | +------------+-----------------------------------------------------------------+ | Value | **open-file-button,feed-button,characterencoding-button** | +------------+-----------------------------------------------------------------+ ### Imprivata * Imprivata Appliance 6.3 or higher is needed now. * Added new parameter to Imprivata.conf: "Redirection of Smartcards" +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > Appliance Mode > Imprivata | +------------+-----------------------------------------------------------------+ | Parameter | `Redirection of Smartcards` | +------------+-----------------------------------------------------------------+ | Registry | `imprivata.native_smartcard_redirection` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter: "Path to Certificate" +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > Appliance Mode > Imprivata | +------------+-----------------------------------------------------------------+ | Parameter | `Path to Certificate` | +------------+-----------------------------------------------------------------+ | Registry | `imprivata.path_to_certificate` | +------------+-----------------------------------------------------------------+ ### Network * Added NCP Secure Enterprise VPN Client version 5.10_rev40552: Configurable at IGEL Setup > Network > VPN > NCP VPN Client * New feature: Network status icons are shown on the lock and logon screens * Added a mechanism for retrieving the SCEP challenge password with a custom script. Setting the following registry key to true enables the use of the script. The registry key network.scepclient.cert%.crypt_password will be ignored. (The script may use it for its own purpose though.) +------------+-----------------------------------------------------------------+ |Parameter |Use Challenge Password Command | +------------+-----------------------------------------------------------------+ |Registry |`network.scepclient.cert%.use_challenge_password_command` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ * If the above key is enabled the value of this key will be passed to bash for execution. It happens when the SCEP challenge password is needed for creating a certificate signing request. The script is supposed to output the challenge password on its standard output. For convenience any Carriage-Return characters are stripped off the script before execution by bash. +------------+-----------------------------------------------------------------+ |Parameter |Challenge Password Command | +------------+-----------------------------------------------------------------+ |Registry |`network.scepclient.cert%.challenge_password_command` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ ### WiFi * Added support for Realtek 8821CE wireless cards. * Added switch to determine the source of WiFi scan results for Wireless Manager. Selecting default is currently identical with the old mechanism (using the iwlist command). This may change in the future. When iwlist fails NetworkManager is automatically used as a fallback. +------------+-----------------------------------------------------------------+ |Parameter |`WiFi Scanner` | +------------+-----------------------------------------------------------------+ |Registry |`network.interfaces.wirelesslan.device0.mssid_scanner` | +------------+-----------------------------------------------------------------+ |Range | [default][iwlist][NetworkManager] | +------------+-----------------------------------------------------------------+ |Value |**default** | +------------+-----------------------------------------------------------------+ ### Smartcard * New IGEL Smartcard mode without Locking Desktop (reintroduced feature of Linux 5.x firmware): +------------+-----------------------------------------------------------------+ |Setup |`Security>Logon>IGEL Smartcard` | +------------+-----------------------------------------------------------------+ |Parameter |`Enable IGEL Smartcard without Locking Desktop` | +------------+-----------------------------------------------------------------+ |Registry |`scard.scardd.enable_nolock` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Setup |`Security>Logon>IGEL Smartcard` | +------------+-----------------------------------------------------------------+ |Parameter |`On Smartcard Removal, terminate` | +------------+-----------------------------------------------------------------+ |Registry |`scard.scardd.session_termination` | +------------+-----------------------------------------------------------------+ |Value |**all**/smartcard | +------------+-----------------------------------------------------------------+ * Updated MUSCLE CCID smartcard reader driver to version 1.4.30 * Updated ACS CCID smartcard driver to version 1.1.6 * Updated REINER SCT smartcard reader driver to version 3.99.5final.sp13 * Updated SecMaker NetID to version 6.7.2.36: now Yubikey 5 is supported. * Updated cryptovision sc/interface PKCS#11 smartcard library to version 7.1.20 * Added configuration parameters for some settings of smartcard library OpenSC: +------------+-----------------------------------------------------------------+ |Parameter |`Debug level` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.debug` | +------------+-----------------------------------------------------------------+ |Value |**0** | +------------+-----------------------------------------------------------------+ |Parameter |`Debug file` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.debug_file` | +------------+-----------------------------------------------------------------+ |Value |**stderr** | +------------+-----------------------------------------------------------------+ |Parameter |`Max. send size` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.max_send_size` | +------------+-----------------------------------------------------------------+ |Value |**255** | +------------+-----------------------------------------------------------------+ |Parameter |`Max. receive size` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.max_recv_size` | +------------+-----------------------------------------------------------------+ |Value |**256** | +------------+-----------------------------------------------------------------+ |Parameter |`Connect exclusive` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.connect_exclusive` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |Parameter |`Disconnect action` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.disconnect_action` | +------------+-----------------------------------------------------------------+ |Value |**leave**/reset/unpower | +------------+-----------------------------------------------------------------+ |Parameter |`Transaction end action` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.transaction_end_action` | +------------+-----------------------------------------------------------------+ |Value |**leave**/reset/unpower | +------------+-----------------------------------------------------------------+ |Parameter |`Reconnect action` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.reconnect_action` | +------------+-----------------------------------------------------------------+ |Value |**leave**/reset/unpower | +------------+-----------------------------------------------------------------+ |Parameter |`Enable pinpad` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.enable_pinpad` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Parameter |`Use PIN caching` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pkcs15.use_pin_caching` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Parameter |`How many times to use a PIN from cache before re-authenticating it` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pkcs15.pin_cache_counter` | +------------+-----------------------------------------------------------------+ |Value |**10** | +------------+-----------------------------------------------------------------+ |Parameter |`PIN caching ignores user consent` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pkcs15.pin_cache_ignore_user_consent` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ * Updated CHERRY USB-LAN Proxy to version 3.2.0.3. This version provides enhanced configuration: +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`Bind IP` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.bind-ip` | +------------+-----------------------------------------------------------------+ |Value |**auto** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`Https Server Port` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.https-port` | +------------+-----------------------------------------------------------------+ |Value |**443** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`SICCT Announce IP` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.sicct-announce-ip` | +------------+-----------------------------------------------------------------+ |Value |**broadcast** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`SICCT Announce Port` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.sicct-announce-port` | +------------+-----------------------------------------------------------------+ |Value |**4742** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`SICCT Announce Interval` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.sicct-announce-interval` | +------------+-----------------------------------------------------------------+ |Value |**30** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`USB Fast Mode` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.usb-fast-mode` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`Alternate Initialization Method for G87-1505` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.usb-1505-alt-setup` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ ### CUPS Printing * Added SMB Network Print client function. +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`Printer Port` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.backend` | +------------+-----------------------------------------------------------------+ |Value |smb | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Server` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_server` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Workgroup` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_workgroup` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Printer` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_printer` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Port` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_port` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`Use Kerberos Authentication` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_kerberos` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`Use Passthrough Authentication` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_passthrough` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB User` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_user` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Password` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.crypt_password` | +------------+-----------------------------------------------------------------+ ### Base system * Updated kernel from 4.18.20 to 4.19.57 version. * Enhanced bootloader to allow the set of some kernel commandline parameters with registry keys: +------------+-----------------------------------------------------------------+ | Parameter | `Disable use of APIC controller.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.noapic` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Disable use of ACPI.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.noacpi` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use only one CPU core and disable all others.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.nosmp` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Enable debug console on serial port 1.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.serial_console_debug` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Limit CPU core usage (0 means no limit).` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.maxcpus` | +------------+-----------------------------------------------------------------+ | Type | Integer | +------------+-----------------------------------------------------------------+ | Value | **0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Set maximum allowed cstate on intel cpus.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.max_cstate` | +------------+-----------------------------------------------------------------+ | Range | [No limit] [1] [2] [3] [4] [5] [6] | +------------+-----------------------------------------------------------------+ | Value | **No limit** (do not limit intel cstate) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] [Passthrough] [Force] | +------------+-----------------------------------------------------------------+ | Value | **On** (Use IOMMU if possible) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting for AMD systems.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.amd_iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] | +------------+-----------------------------------------------------------------+ | Value | **On** (Use IOMMU if possible) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting for Intel systems.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.intel_iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] | +------------+-----------------------------------------------------------------+ | Value | **On** (Use IOMMU if possible) | +------------+-----------------------------------------------------------------+ * Added possibility to configure scheduled commands. Registry keys: system.cron.** * Buddy update enhancements -Automatic load balancing A client collects up to eight server candidates from which one is selected randomly. Collection stops when the number specified in the following registry key is reached. Otherwise collection stops after a timeout. +------------+-----------------------------------------------------------------+ |Parameter |Buddy Update Server Candidates | +------------+-----------------------------------------------------------------+ |Registry |`update.ftp.buddy_server_candidates` | +------------+-----------------------------------------------------------------+ |Value |**1** (default) | +------------+-----------------------------------------------------------------+ -Grouping Buddy update servers and clients only interact with each other when they are in the same group determined by the following registry key (a non-negative integer number). This feature is mainly useful when different firmware versions shall be used in parallel. +------------+-----------------------------------------------------------------+ |Parameter |Buddy Group ID | +------------+-----------------------------------------------------------------+ |Registry |`update.ftp.buddy_group_id` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ * Updated libwebkit2gtk-4.0-37 to version 1.24.2. Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-6251, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4345, CVE-2018-4386, CVE-2018-4372 * Updated Fluendo multimedia codecs to the following versions: gst-fluendo-aacdec - 21/03/2019 0.10.39 gst-fluendo-asfdemux - 21/03/2019 0.10.89 gst-fluendo-h264dec - 21/03/2019 0.10.53 gst-fluendo-mp3 - 22/03/2019 0.10.39 gst-fluendo-mpeg4video - 21/03/2019 0.10.43 gst-fluendo-vadec - 21/03/2019 0.10.208 gst-fluendo-wmadec - 21/03/2019 0.10.68 gst-fluendo-wmvdec - 20/03/2019 0.10.65 * Added package ldap-utils which can be used by custom scripts. ### Driver * Updated DisplayLink driver to version 5.1.26. * Updated Philips Speech Driver to version 12.7.11 - added support for Philips AirBridge. * Added registry keys to modify the Intel graphic driver usage of framebuffer compression and power management. New registry keys: +------------+-----------------------------------------------------------------+ | Parameter | `Power saving display C-States to use.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.intel.dc_setting` | +------------+-----------------------------------------------------------------+ | Range | [Default][Disable][Up to DC5][Up to DC6] | +------------+-----------------------------------------------------------------+ | Value | **Default** (driver default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use framebuffer compression.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.intel.fbc_setting` | +------------+-----------------------------------------------------------------+ | Range | [Default][Disable] | +------------+-----------------------------------------------------------------+ | Value | **Default** (driver default) | +------------+-----------------------------------------------------------------+ * Updated signotec Citrix Virtual Channel driver to version 8.0.8 * Updated deviceTRUST Client to version 19.1.200. These are the release notes: Welcome to the release of the deviceTRUST 19.1.200 IGEL client, providing the context of IGEL thin client and UD Pocket devices into your virtual sessions. This release includes support for logical disks attached to the IGEL endpoint, plus bug fixes and stability improvements over the previous 19.1.100 release. Logical Disks We´ve added support for real-time properties representing the LOGICAL DISKS attached to the IGEL endpoint. This includes: * DEVICE_LOGICALDISK_X_TYPE - Either Fixed or Removable. * DEVICE_LOGICALDISK_X_LABEL - The volume label. * DEVICE_LOGICALDISK_X_FILESYSTEM - The type of file system. * DEVICE_LOGICALDISK_X_PATHS - The paths that the disk is mounted. * DEVICE_LOGICALDISK_X_TOTALMB - The total space available on the disk. This property is only available for mounted disks. * DEVICE_LOGICALDISK_X_FREEMB - The free space available on the disk. This property is only available for mounted disks. * DEVICE_LOGICALDISK_X_NAME - The name of the underlying physical disk. * DEVICE_LOGICALDISK_X_VENDORID - The vendor identifier uniquely identifying the manufacturer. This property is only available for USB or PCI connected devices. * DEVICE_LOGICALDISK_X_PRODUCTID - The product identifier uniquely identifying the product. This property is only available for USB or PCI connected devices. * DEVICE_LOGICALDISK_X_SERIALNUMBER - The serial number of the physical disk. * DEVICE_LOGICALDISK_X_BUSTYPE - The storage bus type linked to the physical disk. * DEVICE_LOGICALDISK_COUNT - The number of logical disks. ### X11 system * Updated Xorg server from 1.19.6 to 1.20.5 version. * Updated Virtualbox from 5.2.18 to 6.0.8 version. * Updated Mesa from 18.2.1 to 19.0.8 version. * Updated Xorg video and input driver to current upstream versions. * Added new options for laptop lid handling dependent on power supply: +------------+-----------------------------------------------------------------+ | Parameter | `Lid close action while plugged in` | +------------+-----------------------------------------------------------------+ | Registry | `system.actions.lid.ac` | +------------+-----------------------------------------------------------------+ | Range | [Turn off display] [Suspend] | +------------+-----------------------------------------------------------------+ | Value | **Turn off display** | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Lid close action while not plugged in` | +------------+-----------------------------------------------------------------+ | Registry | `system.actions.lid.battery` | +------------+-----------------------------------------------------------------+ | Range | [Turn off display] [Suspend] | +------------+-----------------------------------------------------------------+ | Value | **Turn off display** | +------------+-----------------------------------------------------------------+ * The new Display Switch tool can use multiple different profiles, automatically chosen at runtime depending on the currently connected monitors. A profile is created, when the current monitor layout/resolution is configured via the Display Switch utility. The profile will be associated with the current connected displays automatically (manufacturer, model and used connector are used for allocation) and if applicable, the state of the laptop lid. The setup will be restored by hot-(un)plugging known displays, means the system will automatically switch to the already configured profile. The Display Switch utility itself got a new interface. All base functionality can be configured via Drag&Drop. * An example workflow: * Connect the hardware and close/open lid * Open the Display Switch Utility - A quick (simple) setting can be selected directly. - Should the desired use case be different from the provided choices, the `Advanced´ button opens a drag and drop interface for further settings. * In this interface the displays can be dragged and dropped for the intended configuration. The display will snap adjacent to others. * If a display should not be used, it can be dragged to the `Disabled´ area on the top right - the screen will be reactivated when it is dragged back to the active area. * To show the same content on multiple displays, one display should be dragged onto an other active screen. The interface will show "Mirror". The mirroring monitor will be displayed on the lower right. * With the 'Apply' button the current state will be set, with `Yes´ on the "Keep configuration" dialog the current settings will be saved to persistent storage and associated with the profile. * Advanced functionality (panning/scaling/resolutions) can be configured in drop- down boxes, hidden in a drawer on the right side. The drawer can be expanded by clicking the '<' button on the right edge. * For the Display Switch functionality the following parameters should be enabled for proper usage: +------------+-----------------------------------------------------------------+ |IGEL Setup | `Accessories > Display Switch > Options` | +------------+-----------------------------------------------------------------+ |Parameter | `Preserve settings over reboot` | +------------+-----------------------------------------------------------------+ |Registry | `sessions.user_display0.options.preserve_settings` | +------------+-----------------------------------------------------------------+ |Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup | `Accessories > Display Switch > Options` | +------------+-----------------------------------------------------------------+ |Parameter | `Smart display configuration` | +------------+-----------------------------------------------------------------+ |Registry | `x.auto_associate` | +------------+-----------------------------------------------------------------+ |Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter to optionally start with opened 'Advanced' drawer in Display Switch. +------------+-----------------------------------------------------------------+ | Parameter | `Start with the advanced drawer opened` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.user_display0.options.start_open` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added xprintidle tool to firmware. * Added some registry keys to disable loading of DRM kernel modules (graphic). New registry keys: +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the RADEON DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.ati.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the AMDGPU DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.amdgpu.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the i915 DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ * Added the possibility to change an embedded DisplayPort to a normal DisplayPort. +------------+-----------------------------------------------------------------+ |Parameter |`Use embedded displayport as normal displayport (reboot required).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.edp_is_dp` | +------------+-----------------------------------------------------------------+ |Range | [default][enable][disable] | +------------+-----------------------------------------------------------------+ |Value |**default** (default) | +------------+-----------------------------------------------------------------+ ### Java * Replaced Oracle JRE by AZUL's Zulu JRE. * Removed deprecated Java WebStart since it is not supported with non Oracle JRE's. ### X server * Updated Xephyr x session to version 1.20.5 ### Hardware * Added hardware support for the following headsets: - Jabra Engage 50 - Jabra Engage 65 - Jabra Engage 75 - Jabra Evolve 30 II (Ver. B) - Jabra Evolve 30 II (Ver. C) - Jabra Evolve 40 (Ver. B) - USB-C - Jabra Evolve 40 (Ver. D) - Jabra Evolve 65 - Jabra Evolve 75 - Plantronics Voyager 5200 UC - Plantronics Voyager 6200 UC - Plantronics Voyager 8200 UC - Sennheiser SC70 ### Remote Management / IGEL Cloud Gateway * Connection order between UMS and ICG can now be configured. +------------+-----------------------------------------------------------------+ | Parameter | Prefer UMS over ICG | +------------+-----------------------------------------------------------------+ | Registry | `system.remotemanager.icg_try_ums_connect` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * When an ICG connection is configured and the parameter is enabled, the device tries to connect directly to UMS. If the connection was established successful, the device is managed by UMS and not over ICG until new start of the device or networking. * Firmware update scheduled on shutdown is now invoked on reboot as well. * Added some adaptations in UMS Agent concerning migration to IGEL OS11. Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Now ica.pnlogin.syncpasswordwithxscrnsvr is removed, ica.pnlogin.syncpasswordwithxlock should be used, this provides the same functionality. * Fixed online meeting in VDI: An enabled webcam will not cut the audio streaming anymore. * Citrix Workspace App 19.03: Improved USB redirection handling. * Custom icons now are visible after StoreFront logon using Citrix authentication method. * Appropriate icons arise with IGEL and Citrix authentication. * Fixed stability issues with Citrix Browser Content Redirection. * Updated the Nuance virtual channel for ICA up to version B301. ### RDP/IGEL RDP Client 2 * Added Negotiate:Kerberos as fallback if NTLM is disabled. This only works if Active Directory/Kerberos Logon is enabled. * Added registry key to use rdpglobal window settings for remote apps. +------------+-----------------------------------------------------------------+ | Parameter | Enable global windwos settings for remote app | +------------+-----------------------------------------------------------------+ | Registry | `rdp.winconnect.enable-global-window-settings-for-remote-app` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Fixed empty warning window being shown when closing RDP Web Applications started from browser * Fixed smartcard redirection in RDP: SCardGetAttrib was failing if pbAttr was NULL. The fix should help running Dutch Zorg-ID applications. ### RD Web Access * Fixed RD Web Access not woking with special characters in name or password. This only works if Active Directory/Kerberos Logon is enabled. * Fixed empty warning dialogs appearing when opening RD Web Application in the browser. * Fixed not starting RDP Remote Applications. ### VMware Horizon * Fixed Optimization for Skype for Business. * Fixed the configuration choice to use the relative mouse feature ### Parallels Client * Updated Parallels Client to version 16.5.3 (64-Bit): * Fixed: Maximized windows for published applications can be displayed incorrectly * Fixed: Incorrect user credentials can be picked up during connection if the same farm is registered in the client multiple times and with different user credentials * Fixed: Client did not accept universal printing policies set from the server * Fixed: Module opened in the background and blocked the launcher in some cases. * Fixed: Redirected smartcard did not work in a remote session * Fixed: Printers would not redirect to a remote session when redirection is enforced via policies. ### PowerTerm * Fixed editing of parameter sessions.powerterm\.logindialog.loginscript in Setup Registry: now multiple lines are possible. * PowerTerm Terminal Emulation: remove obsolete SSH type SSH1 and obsolete SSH cipher DES from parameter ranges. ### Firefox * Fixed issue where Firefox does not accept proxy credentials from setup. * Fixed print hotkey disable option with Firefox 60+. * Fixed browserglobal.app.local_subdirs_whitelist not working. * Fixed Adobe Flash Player download possibility ### Network * Improved SCEP client robustness - The cert_agent script doesn't terminate anymore when a problem occurs (e.g. the SCEP server is unreachable) but tries again after the expiry check interval. - When the client certificate has expired there is still one attempt at renewing it. However, when that fails, a new one is requested. That obviously will fail if the client presents a challenge password that is not valid anymore. * Restoring WLAN/WWAN Modem state after wakeup from standby or reboot * Improved expire time of ethernet no-link notification * Added all ethernet network drivers from OS to LX version. * Changed e1000e driver to out of tree version 3.4.2.3 directly from Intel. * Changed igb driver to out of tree version 5.3.5.22 directly from Intel. * Fixed bug: Failure to reach SCEP server in the client certificate renewal phase resulted in loss of SCEP server and client certificates * SCEP: A change of the CA fingerprint setting does not result in discarding all SCEP data anymore, if the fingerprint matches that of the current CA certificate. Firmware versions before 10.05.100 allowed an empty fingerprint. So, this is meant for users who must belatedly configure the fingerprint in order for client certificate renewal to work. A change of the CAIdentifier setting is not detected immediately and does not result in discarding all current data anymore. The new CAIdentifier will, however, be used in future SCEP operations. * Fixed instability with netmounts with static ip configuration. * Fixed problems with windows share mounts. * Fixed MBB router configuration (broken since 10.05.500) * Added possibility to switch between thirdparty and kernel Intel IGB network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty igb kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.igb.prefer_thirdparty` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use thirdparty in most cases) | +------------+-----------------------------------------------------------------+ * Added possibility to switch between thirdparty and kernel Intel E1000E network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty e1000e kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.e1000e.prefer_thirdparty` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use thirdparty in most cases) | +------------+-----------------------------------------------------------------+ * Added possibility to switch between thirdparty r8168 and kernel r8169 realtek network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty r8168 kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.r8169.prefer_r8168` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use r8168 in most cases) | +------------+-----------------------------------------------------------------+ * Added possibilty to choose the variant of the realtek r8168 driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Choose realtek r8168 variant (only if prefer r8168 is choosen).` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.r8169.r8168_variant` | +------------+-----------------------------------------------------------------+ | Range | [Default][No NAPI][NAPI] | +------------+-----------------------------------------------------------------+ | Value | **Default** (use NAPI in most cases) | +------------+-----------------------------------------------------------------+ * Fixed bug: Second Ethernet interface did not get configured when the first one was disabled * Fixed 802.1X ethernet configuration with user interaction. ### WiFi * Fixed bug: WiFi connection to hidden SSID did not work anymore after reediting with the Wireless Manager. * Fixed non working Broadcom SDIO WLAN cards as present in Advantech AIM8IAC device for example. ### Smartcard * Fixed Dell KB813 Smartcard Keyboard in combination with certain smart cards driven by OpenSC PKCS#11 module. Before this fix authentication to Citrix StoreFront and VMWare Horizon failed. * Improved handling of PIV/CAC smart cards in OpenSC. * Updated cryptovision sc/interface PKCS#11 smart card library to version 7.1.20 Changes in this revision: - Fixed a possible deadlock in the PKCS#11 module on Linux if C_Finalize is called during a PCSC event, for example C_WaitForSlotEvent. - ROCA check in the Smartcard Manager, based on the "ROCA detection tool", see [https://github.com/crocs-muni/roca] - Renaming container label in Smartcard Manager with F2 now possible. * Fixed OpenSC setting max_send_size for reader driver pcsc in /etc/opensc/opensc.conf. ### Application Launcher * Fixed confusion in nameserver list caused by comments in /etc/resolv.conf ### Base system * Fixed issues with gen4/5 Intel graphic driver in kernel 4.18.20. * Fixed Screensaver and Screenlock timeouts to be independent. This means, if both timeouts are set, the start of Screenlock will not reset the Screensaver timeout any more. * Fixed retrieving of serial number of a display. * Fixed playback of AAC coded audio streams on IGEL Zero products. * Added possibility to set intel_idle.max_cstate kernel cmdline parameter with registry keys to work against Intel CPU freezes. * Ensure that the Unit ID for IGEL devices is the MAC address of the onboard network card. * Enhanced handling of Unit ID. On IGEL hardware the Unit ID isn't stored persistently any more by default. The persistent Unit ID can be removed with command "get_unit_id -r". The persistent Unit ID storage can be forced with "get_unit_id -i -f -p" or with "get_unit_id -m" to manually choose a Unit ID from several network interfaces found on the device. Handle with extreme care since the Unit ID is the key for handling the endpoint in UMS. * Replaced MIT Kerberos clients by Heimdal Kerberos clients. * Improved the buddy update server performance for multiple simultaneous update clients. * Fixed handling of an "update on shutdown" during suspend/resume. * Fixed shutdown while IGEL Setup Assistant is shown. * Fixed delay in logon as local user when logon with IGEL Smartcard is also active. * Fixed sporadic bootsplash issue. * Fixed suspend/resume hangs when logged into Citrix sessions. * Fixed CPU scaler and volume control applet suspend/resume issue. * Added AppArmor rule to allow tcpdump to write to /debuglog. * Fixed random 90 seconds shutdown delay (systemd). * Fixed Custom Bootsplash installation. * Bugfix: Create shortcuts for terminal shutdown, terminal restart and icon sort directly after reconfiguration. A reboot is not needed anymore. * Fixed: System logoff waits for Citrix logoff now. * Fixed broken custom bootsplash when doing a reset to factory defaults via UMS. * Bugfix: hotkey setting need restart. * IGEL Setup Assistant will persistently activate WiFi when a connection is enabled instead of after finishing it, to preserve settings when UMS sends license and stops it. * Fixed AD/Kerberos logon in case parameter auth.login.krb5_enterprise is set to false. * Added new registry key to set USB quirks: +------------+-----------------------------------------------------------------+ | Parameter | `Set XHCI USB quirks to fix some hardware issues.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.xhci-hcd_quirks` | +------------+-----------------------------------------------------------------+ | Range | [No quirk] [Spurious Reboot quirk] [Spurious Wakeup quirk] | | | [Spurious Reboot Wakeup quirk] | +------------+-----------------------------------------------------------------+ | Value | **No quirk** | +------------+-----------------------------------------------------------------+ * Fixed: Migration tool did not start with Spanish language setting. * Disabled martian packet logging. ### Driver * Updated deviceTRUST Client to version 19.1.200: Bug Fixes: - Fixed an issue reading the DEVICE_IGEL_ICG_SERVER property. - Fixed an issue where the NETWORK and LOCATION property providers could cause the client to freeze if a disconnection occurred whilst these property providers were checking for changes. - Fixed an open file handle leak which lead to the client process reaching its file handle limits when left running for a long period of time. * Fixed non working WACOM device DTU-1141B. ### Custom Partition * Fixed ownership of extracted data: Don't preserve owner information while extracting data into custom partition. ### Storage Devices * Fixed auto mounting of storage devices inside of Olympus DS-9500 Digital Voice Recorder. ### Appliance Mode * Fixed bug: In-session control bar could not be deactivated in Citrix Selfservice appliance mode ### X11 system * Fixed Microsoft Surface Pro 4 screen resolution issue. * Fixed the missing volume control in the panel when the panel is configured to disappear while the login/lock screen is shown. * There is now a registry key to ignore a 3Dconnexion SpaceMouse for IGEL graphical use (X11). If activated, the SpaceMouse is only passed thru to the desktop session. If false, it acts also as the standard mouse. +------------+-----------------------------------------------------------------+ |Parameter |`Deactivates a 3Dconnexion SpaceMouse as a standard mouse.` | +------------+-----------------------------------------------------------------+ |Registry |`userinterface.mouse.spacemouse.x11_ignore` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ * The following SpaceMouse products are included (VID, PID, Vendor, Product): - 0x046D; 0xC603; Logitech, Inc.; 3Dconnexion Spacemouse Plus XT - 0x046D; 0xC605; Logitech, Inc.; 3Dconnexion CADman - 0x046D; 0xC606; Logitech, Inc.; 3Dconnexion Spacemouse Classic - 0x046D; 0xC621; Logitech, Inc.; 3Dconnexion Spaceball 5000 - 0x046D; 0xC623; Logitech, Inc.; 3Dconnexion Space Traveller 3D Mouse - 0x046D; 0xC625; Logitech, Inc.; 3Dconnexion Space Pilot 3D Mouse - 0x046D; 0xC626; Logitech, Inc.; 3Dconnexion Space Navigator 3D Mouse - 0x046D; 0xC627; Logitech, Inc.; 3Dconnexion Space Explorer 3D Mouse - 0x046D; 0xC628; Logitech, Inc.; 3Dconnexion Space Navigator for Notebooks - 0x046D; 0xC629; Logitech, Inc.; 3Dconnexion SpacePilot Pro 3D Mouse - 0x046D; 0xC62B; Logitech, Inc.; 3Dconnexion Space Mouse Pro - 0x256F; **; 3Dconnexion; SpaceMouse * USB device reset via USB powercycle on UD6/UD7 available. * Fixed screen flicker in some cases if "Force NumLock On" (x.global.forcenumlock) is active. * Fixed non working x.xserver0.screen1.flipscreens registry key. * Use Index and Mode from Advanced mode in Simple Mode for Display Switch. * Fixed display hotplug failing on initial lock screen with Active Directory logon. * The In-Session Control Bar now scales with the current DPI setting. * Fixed Display Switch utility not starting with some translations. * Fixed a issue with the noDDC mode not always working as expected. * Fixed a bug with thinclients reporting the wrong monitor serial number. ### Window manager * Fixed the option to disable the local window manager. ### Audio * Fixed bad quality sound over DisplayPort in a Citrix ICA session or other applications using ALSA API. * Fixed configuration of default audio output and input. ### Media Player (Parole) * Fixed a problem where parole media player would hang instead of playing audio while audio-visualization is enabled. * Fixed parole media player not handling audio hotkeys in fullscreen mode. ### Multimedia * Updated multimedia codecs to fix freeze when audio visualization is used. ### Misc * Monitoring Agent uses now only the half size of the debuglog partition. When the setup option log_max_size with the option log_rotation creates an overall consumption that is bigger than 50% of the debuglog partition size, then the size for each log automatically will be decreased to a value that allows a full rotation which occupies exactly 50% of the partition size. ### Hardware * Fixed problems with mouse cursor on Intel cherryview devices. * Added possibility to change some drm settings and limit the DisplayPort lane bandwidth on Intel devices. - Added new registry keys: +------------+-----------------------------------------------------------------+ |Parameter |`Use best graphic mode for all screens on console.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.best_console_mode` | +------------+-----------------------------------------------------------------+ |Range | [Default][Enabled][Disabled] | +------------+-----------------------------------------------------------------+ |Value |**Default** (Enabled in most cases cases) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum console resolution width to this value (0 means default setting).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.max_console_width` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**0** (use default setting) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum console resolution height to this value (0 means default setting).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.max_console_height` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**0** (use default setting) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Set graphic kernel driver debug level (warning log will grow very fast).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.debug_level` | +------------+-----------------------------------------------------------------+ |Range | [No debug][Basic][Basic + core][Basic + core + atomic][Full] | +------------+-----------------------------------------------------------------+ |Value |**No debug** | +------------+-----------------------------------------------------------------+ - Only for Intel i915 driver: +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum DisplayPort lane link rate.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.max_dp_link_rate` | +------------+-----------------------------------------------------------------+ |Range | [default][1.62Gbps][2.16Gbps][2.7Gbps][3.24Gbps][4.32Gbps] | | | [5.4Gbps][6.48Gbps][8.1Gbps] | +------------+-----------------------------------------------------------------+ |Value |**default** (means hardware default limit) | +------------+-----------------------------------------------------------------+ ### Remote Management / IGEL Cloud Gateway * Fixed wallpaper configuration when ICG protocol is used. * Fixed UMS synchronization of configuration when changes were made in "Emergency mode". * Fixed sporadic failures while sending data over ICG. * Fixed removal from UMS when the device was offline. * Added IGEL UMS agent sends monitor information for maximum eight monitors now. ### Caradigm * Fixed Horizon session crash ### IGEL Linux 10 Recovery * Fixed problem with forced no EFI installation.