IGEL OS 11 ========== Firmware version 11.02.150 Release date 2019-09-09 Last update of this document 2019-09-09 Supported Devices ------------------------------------------------------------------------------- UD2-LX 40, UD2-LX 50 UD3-LX 51, UD3-LX 50 UD5-LX 50 UD6-LX 51 UD7-LX 10 UD9-LX Touch 41, UD9-LX 40 [> Supported IGEL OS 11 thirdparty devices](https://kb.igel.com/os11-supported-hardware) Component Versions ------------------------------------------------------------------------------- +-------------------------------------------+----------------------------------+ | Clients | | +===========================================+==================================+ | Citrix HDX Realtime Media Engine | 2.8.0-2235 | +-------------------------------------------+----------------------------------+ | Citrix Receiver | 13.10.0.20 | +-------------------------------------------+----------------------------------+ | Citrix Receiver | 13.5.0.10185126 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 19.6.0.60 | +-------------------------------------------+----------------------------------+ | deviceTRUST Citrix Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.0.1.0.20170219.2-_dev_-34574 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.5_x64_20190619_12.5.1.40008 | +-------------------------------------------+----------------------------------+ | Evidian AuthMgr | 1.5.7116 | +-------------------------------------------+----------------------------------+ | Evince PDF Viewer | 3.18.2-1ubuntu4.6 | +-------------------------------------------+----------------------------------+ | FabulaTech USB for Remote Desktop | 5.2.29 | +-------------------------------------------+----------------------------------+ | Firefox | 60.8.0 | +-------------------------------------------+----------------------------------+ | IBM iAccess Client Solutions | 1.1.8.1 | +-------------------------------------------+----------------------------------+ | IGEL RDP Client | 2.2 | +-------------------------------------------+----------------------------------+ | Imprivata OneSign ProveID Embedded | onesign-bootstrap-loader_1.0.523630_amd64 | +-------------------------------------------+----------------------------------+ | deviceTRUST RDP Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | NCP Secure Enterprise Client | 5.10_rev40552 | +-------------------------------------------+----------------------------------+ | NX Client | 6.7.6 | +-------------------------------------------+----------------------------------+ | Open VPN | 2.3.10-1ubuntu2.2 | +-------------------------------------------+----------------------------------+ | Zulu JRE | 8.40.0.25 | +-------------------------------------------+----------------------------------+ | Parallels Client (64 bit) | 17.0.21282 | +-------------------------------------------+----------------------------------+ | Spice GTK (Red Hat Virtualization) | 0.36-1~git20190601igel61 | +-------------------------------------------+----------------------------------+ | Remote Viewer (Red Hat Virtualization) | 8.0-1igel49 | +-------------------------------------------+----------------------------------+ | Usbredir (Red Hat Virtualization) | 0.8.0-1igel49 | +-------------------------------------------+----------------------------------+ | Teradici PCoIP Software Client | 19.05.5-18.04 | +-------------------------------------------+----------------------------------+ | ThinLinc Client | 4.10.0-6068 | +-------------------------------------------+----------------------------------+ | ThinPrint Client | 7.5.88 | +-------------------------------------------+----------------------------------+ | Totem Media Player | 2.30.2 | +-------------------------------------------+----------------------------------+ | Parole Media Player | 1.0.1-0ubuntu1igel18 | +-------------------------------------------+----------------------------------+ | VNC Viewer | 1.9.0+dfsg-3igel8 | +-------------------------------------------+----------------------------------+ | VMware Horizon client | 5.0.0-12557422 | +-------------------------------------------+----------------------------------+ | Voip Client Ekiga | 4.0.1 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Dictation | | +===========================================+==================================+ | Diktamen driver for dictation | | +-------------------------------------------+----------------------------------+ | Grundig Business Systems dictation driver | | +-------------------------------------------+----------------------------------+ | Nuance Audio Extensions for dictation | B301 | +-------------------------------------------+----------------------------------+ | Olympus driver for dictation | 20180621 | +-------------------------------------------+----------------------------------+ | Philips Speech driver | 12.7.11 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Signature | | +===========================================+==================================+ | Kofax SPVC Citrix Channel | 3.1.41.0 | +-------------------------------------------+----------------------------------+ | signotec Citrix Channel | 8.0.8 | +-------------------------------------------+----------------------------------+ | signotec VCOM Daemon | 2.0.0 | +-------------------------------------------+----------------------------------+ | StepOver TCP Client | 2.3.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Smartcard | | +===========================================+==================================+ | PKCS#11 Library A.E.T. SafeSign | 3.0.101 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Athena IDProtect | 623.07 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library cryptovision sc/interface | 7.1.20 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Gemalto SafeNet | 10.0.37-0 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library SecMaker NetID | 6.7.2.36 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library 90meter | 20190522 | +-------------------------------------------+----------------------------------+ | Reader Driver ACS CCID | 1.1.6-1igel1 | +-------------------------------------------+----------------------------------+ | Reader Driver Gemalto eToken | 10.0.37-0 | +-------------------------------------------+----------------------------------+ | Reader Driver HID Global Omnikey | 4.3.3 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive CCID | 5.0.35 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive eHealth200 | 1.0.5 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive SCRKBC | 5.0.24 | +-------------------------------------------+----------------------------------+ | Reader Driver MUSCLE CCID | 1.4.30-1igel3 | +-------------------------------------------+----------------------------------+ | Reader Driver REINER SCT cyberJack | 3.99.5final.sp13igel15 | +-------------------------------------------+----------------------------------+ | Resource Manager PC/SC Lite | 1.8.23-1igel1 | +-------------------------------------------+----------------------------------+ | Cherry USB2LAN Proxy | 3.2.0.3 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | System Components | | +===========================================+==================================+ | OpenSSL | 1.0.2g-1ubuntu4.15 | +-------------------------------------------+----------------------------------+ | OpenSSH Client | 7.2p2-4ubuntu2.8 | +-------------------------------------------+----------------------------------+ | OpenSSH Server | 7.2p2-4ubuntu2.8 | +-------------------------------------------+----------------------------------+ | Bluetooth Stack (bluez) | 5.50-0ubuntu1igel5 | +-------------------------------------------+----------------------------------+ | MESA OpenGL Stack | 19.0.8-1igel73 | +-------------------------------------------+----------------------------------+ | VAAPI ABI Version | 0.40 | +-------------------------------------------+----------------------------------+ | VDPAU Library Version | 1.1.1-3ubuntu1 | +-------------------------------------------+----------------------------------+ | Graphics Driver INTEL | 2.99.917+git20190724-igel907 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/RADEON | 19.0.1-2igel890 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/AMDGPU | 19.0.1-4igel894 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nouveau (Nvidia Legacy) | 1.0.16-1igel867 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nvidia | 418.56-0ubuntu1 | +-------------------------------------------+----------------------------------+ | Graphics Driver Vboxvideo | 1.0.0-igel798 | +-------------------------------------------+----------------------------------+ | Graphics Driver VMware | 13.3.0-2igel857 | +-------------------------------------------+----------------------------------+ | Graphics Driver QXL (Spice) | 0.1.5-2build1igel775 | +-------------------------------------------+----------------------------------+ | Graphics Driver FBDEV | 0.5.0-1igel819 | +-------------------------------------------+----------------------------------+ | Graphics Driver VESA | 2.4.0-1igel855 | +-------------------------------------------+----------------------------------+ | Input Driver Evdev | 2.10.6-1igel888 | +-------------------------------------------+----------------------------------+ | Input Driver Elographics | 1.4.1-1build5igel633 | +-------------------------------------------+----------------------------------+ | Input Driver eGalax | 2.5.5814 | +-------------------------------------------+----------------------------------+ | Input Driver Synaptics | 1.9.1-1ubuntu1igel866 | +-------------------------------------------+----------------------------------+ | Input Driver VMMouse | 13.1.0-1ubuntu2igel635 | +-------------------------------------------+----------------------------------+ | Input Driver Wacom | 0.36.1-0ubuntu2igel888 | +-------------------------------------------+----------------------------------+ | Kernel | 4.19.65 #mainline-lxos-r2782 | +-------------------------------------------+----------------------------------+ | Xorg X11 Server | 1.19.7-1igel913 | +-------------------------------------------+----------------------------------+ | Xorg Xephyr | 1.19.7-1igel913 | +-------------------------------------------+----------------------------------+ | CUPS Printing Daemon | 2.1.3-4ubuntu0.9igel27 | +-------------------------------------------+----------------------------------+ | PrinterLogic | 18.2.1.128 | +-------------------------------------------+----------------------------------+ | Lightdm Graphical Login Manager | 1.18.3-0ubuntu1.1 | +-------------------------------------------+----------------------------------+ | XFCE4 Window Manager | 4.12.3-1ubuntu2igel675 | +-------------------------------------------+----------------------------------+ | ISC DHCP Client | 4.3.3-5ubuntu12.10igel7 | +-------------------------------------------+----------------------------------+ | NetworkManager | 1.2.6-0ubuntu0.16.04.3igel74 | +-------------------------------------------+----------------------------------+ | ModemManager | 1.10.0-1~ubuntu18.04.2igel3 | +-------------------------------------------+----------------------------------+ | GStreamer 0.10 | 0.10.36-2ubuntu0.2 | +-------------------------------------------+----------------------------------+ | GStreamer 1.x | 1.16.0-1igel214 | +-------------------------------------------+----------------------------------+ | WebKit2Gtk | 2.24.2-0ubuntu0.19.04.1igel18 | +-------------------------------------------+----------------------------------+ | Python2 | 2.7.12 | +-------------------------------------------+----------------------------------+ | Python3 | 3.5.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited IGEL Support | | +===========================================+==================================+ | Mobile Device Access USB (MTP) | 1.1.16-2igel1 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (imobile) | 1.2.1~git20181030.92c5462-1igel5 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (gphoto) | 2.5.22-3igel1 | +-------------------------------------------+----------------------------------+ | VPN OpenConnect | 7.08-1 | +-------------------------------------------+----------------------------------+ | Scanner support | 1.0.27-1 | +-------------------------------------------+----------------------------------+ | VirtualBox | 6.0.10-dfsg-4igel31 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited Functionality | | +===========================================+==================================+ | Cisco JVDI Client | 12.1.0 | +-------------------------------------------+----------------------------------+ General Information -------------------------------------------------------------------------------- ### The following clients and features are not supported anymore * Caradigm * Citrix Legacy Sessions * Citrix Web Interface * Citrix StoreFront Legacy * Citrix HDX Flash Redirection * Citrix XenDesktop Appliance Mode * Flash Player Download * JAVA Web Start * Leostream Java Connect * Systancia AppliDis * VIA graphics driver General Information -------------------------------------------------------------------------------- ### The following clients and features are not supported anymore * Caradigm * Citrix Legacy Sessions * Citrix Web Interface * Citrix StoreFront Legacy * Citrix HDX Flash Redirection * Citrix XenDesktop Appliance Mode * Flash Player Download * JAVA Web Start * Leostream Java Connect * Systancia AppliDis * VIA graphics driver Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Firefox browser to version 60.8.0 ESR. * Fixes for mfsa2019-22, also known as: CVE-2019-9811, CVE-2019-11711, CVE-2019-11712, CVE-2019-11713, CVE-2019-11729, CVE-2019-11715, CVE-2019-11717, CVE-2019-11719, CVE-2019-11730, CVE-2019-11709 * Fixes for mfsa2019-19, also known as: CVE-2019-11708 * Fixes for mfsa2019-18, also known as: CVE-2019-11707 * Fixes for mfsa2019-08, also known as: CVE-2019-9790, CVE-2019-9791, CVE-2019-9792, CVE-2019-9793, CVE-2019-9795, CVE-2019-9796, CVE-2018-18506, CVE-2019-9788. * Fixes for mfsa2019-05, also known as: CVE-2018-18356, CVE-2019-5785. * Fixes for mfsa2019-02, also known as: CVE-2018-18500, CVE-2018-18505, CVE-2018-18501. - Added allowance for Firefox to access Yubikey (FIDO/U2F) if apparmor is active. ### Base system * Set default umask to 0077 for all non root users. * Remote users home is now /home/ruser . * Fixed policykit-1 security issue CVE-2019-6133. * Fixed tiff security issues CVE-2019-7663, CVE-2019-6128, CVE-2018-19210, CVE-2018-17000, CVE-2018-12900 and CVE-2018-10779. * Fixed lcms2 security issue CVE-2018-16435. * Fixed libpng1.6 security issue CVE-2019-7317. * Fixed nss security issues CVE-2018-18508, CVE-2019-11729 and CVE-2019-11719. * Fixed procps security issues CVE-2018-1126, CVE-2018-1125, CVE-2018-1124, CVE-2018-1123 and CVE-2018-1122. * Fixed evince security issues CVE-2019-11459 and CVE-2019-1010006. * Fixed gdk-pixbuf security issue CVE-2017-12447. * Fixed gst-plugins-base0.10 security issue CVE-2019-9928. * Fixed bind9 security issues CVE-2019-6465, CVE-2018-5745 and CVE-2018-5743. * Fixed libgd2 security issues CVE-2019-6978 and CVE-2019-6977. * Fixed ghostscript security issues CVE-2019-3838 and CVE-2019-3835. * Fixed ldb security issue CVE-2019-3824. * Fixed file security issues CVE-2019-8907 and CVE-2019-8905. * Fixed poppler security issues CVE-2019-9200, CVE-2019-9903, CVE-2019-9631, CVE-2019-12293, CVE-2019-10872, CVE-2019-10023, CVE-2019-10021, CVE-2019-10019, CVE-2019-10018, CVE-2018-20662, CVE-2018-18897 and CVE-2017-9865. * Fixed samba security issue CVE-2019-3880. * Fixed openssl security issue CVE-2019-1559. * Fixed libxslt security issue CVE-2019-11068. * Fixed openssh security issue CVE-2019-6111. * Fixed wget security issue CVE-2019-5953. * Fixed wpa security issues CVE-2019-9495, CVE-2019-9497, CVE-2019-9498 and CVE-2019-9499. * Fixed gtk+2.0 security issue CVE-2013-7447. * Fixed heimdal security issues CVE-2019-12098 and CVE-2018-16860. * Fixed wpa security issue CVE-2019-11555. * Fixed ghostscript security issue CVE-2019-3839. * Fixed samba security issue CVE-2018-16860 and CVE-2019-3880. * Fixed webkit2gtk security issues CVE-2019-8615, CVE-2019-8607 and CVE-2019-8595. * Fixed libpng1.6 security issues CVE-2019-7317 and CVE-2018-13785. * Fixed gimp security issues CVE-2017-17786, CVE-2017-17789, CVE-2017-17784, CVE-2017-17787, CVE-2017-17785 and CVE-2017-17788. * Fixed libtomcrypt security issue CVE-2018-12437. * Fixed unzip security issues CVE-2019-13232, CVE-2018-1000035, CVE-2016-9844 and CVE-2014-9913. * Fixed curl security issues CVE-2018-16840, CVE-2018-16839, CVE-2019-3823, CVE-2019-3822, CVE-2018-16890, CVE-2019-5346. * Fixed gnutls28 security issues CVE-2018-10846, CVE-2018-10845, CVE-2018-10844 and CVE-2018-1084. * Fixed db5.3 security issue CVE-2019-8457. * Fixed qtbase-opensource-src security issues CVE-2018-19873, CVE-2018-19870 and CVE-2018-15518. * Fixed libssh2 security issues CVE-2019-3863, CVE-2019-3862, CVE-2019-3861, CVE-2019-3860, CVE-2019-3859, CVE-2019-3858, CVE-2019-3857, CVE-2019-3856 and CVE-2019-3855. * Fixed network-manager security issue CVE-2018-15688. * Fixed elfutils security issues CVE-2019-7665, CVE-2019-7150, CVE-2019-7149, CVE-2018-18521, CVE-2018-18520, CVE-2018-18310, CVE-2018-16403, CVE-2018-16402 and CVE-2018-16062. * Fixed libsndfile security issues CVE-2019-3832, CVE-2018-19758, CVE-2018-19662, CVE-2018-19661, CVE-2018-19432, CVE-2018-13139, CVE-2017-6892, CVE-2017-17457, CVE-2017-17456, CVE-2017-16942, CVE-2017-14634, CVE-2017-14246 and CVE-2017-14245. * Fixed dbus security issue CVE-2019-12749. * Fixed vim security issues CVE-2019-12735 and CVE-2017-5953. * Fixed glib2.0 security issue CVE-2019-12450. * Fixed openssl (1.1.x) security issues CVE-2019-1543, CVE-2018-0737, CVE-2018-0735, CVE-2018-0734 and CVE-2018-0732. * Fixed sqlite3 security issues CVE-2019-9937, CVE-2019-9936, CVE-2019-8457, CVE-2018-20506, CVE-2018-20346, CVE-2017-2520, CVE-2017-2519, CVE-2017-2518, CVE-2017-13685, CVE-2017-10989 and CVE-2016-6153. * Fixed systemd security issues CVE-2019-6454, CVE-2019-6454, CVE-2018-1049, CVE-2018-15686 and CVE-2019-3842. * Fixed libseccomp security issue CVE-2019-9893. * Fixed bzip2 security issues CVE-2019-12900 and CVE-2016-3189. * Fixed imagemagick security issues CVE-2019-9956, CVE-2019-7398, CVE-2019-7397, CVE-2019-7396, CVE-2019-7175, CVE-2019-11598, CVE-2019-11597, CVE-2019-11472, CVE-2019-11470, CVE-2019-10650, CVE-2019-10131, CVE-2018-20467, CVE-2018-18025, CVE-2018-18024, CVE-2018-18016, CVE-2018-17966, CVE-2018-17965, CVE-2018-16413, CVE-2018-16412, CVE-2017-12806 and CVE-2017-12805. * Fixed expat security issue CVE-2018-20843. * Fixed glib2.0 security issue CVE-2019-13012. * Fixed libvirt security issues CVE-2019-10167 and CVE-2019-10161. * Fixed gvfs security issue CVE-2019-12795. * Fixed libmspack security issue CVE-2019-1010305. * Fixed bash security issue CVE-2019-9924. * Fixed openldap security issues CVE-2019-13565 and CVE-2019-13057. * Updated libwebkit2gtk-4.0-37 to version 2.24.2. Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-6251, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4345, CVE-2018-4386, CVE-2018-4372 * Fixed a vulnerability in the custom environment variable framework * Fixed possible malicious owner change within TC setup configuration. * Fixed kernel TCP vulnerabilities CVE-2019-11477: SACK Panic, CVE-2019-11478: SACK Slowness and CVE-2019-11479: Excess resource consumption due to low MSS values. * Changed minimal allowed MSS size to 1000 to prevent possible Denial of Service attacks. * Fixed a vulnerability in Java configuration script. Known Issues -------------------------------------------------------------------------------- ### Citrix * With activated DRI3 and an AMD GPU Citrix H.264 acceleration plugin could freeze. Selective H.264 mode (API v2) is not affected from this issue. * Citrix has known issues with GStreamer1.0 which describe problems with multimedia redirection of H.264, MPEG1 and MPEG2. GStreamer1.0 is used if browser content redirection is active. * Browser content redirection does not work with activated DRI3 and hardware accelerated H.264 deep compression codec. * Citrix StoreFront login with Gemalto smartcard middleware does not detect smartcard correctly if the card is inserted after start of login. As a workaround, insert the smartcard before starting the StoreFront login. * Citrix H.264 acceleration plugin does not work with **enabled** server policy "Optimize for 3D graphics workload" in combination with server policy "Use video codec compression" -> *"For the entire screen"**. * To launch multiple desktop sessions with Citrix HDX RTME and Citrix H.264 acceleration plugin the following registry key must be enabled: +------------+-----------------------------------------------------------------+ |Parameter |`Activate workaround for dual RTME sessions and H264 acceleration` | +------------+-----------------------------------------------------------------+ |Registry |`ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ |Range | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ > This workaround is not applicable when "Enable Secure ICA" is active for the > specific delivery group. ### VMware Horizon * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, when using USB redirection for storage devices: The USB on-insertion feature is only working when the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. - On the other hand, when using drive mapping instead, it is recommended to either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. Furthermore Horizon Client relies on the OS to mount the storage devices itself. Enable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. * External drives mounted already before connection do not appear in the remote desktop. Workaround: map the directory /media as a drive. Then the external devices will show up inside the media drive. ### WiFi * TP-Link Archer T2UH WiFi adapters does not work after system suspend/resume. Workaround: Disable system suspend at IGEL Setup > System > Power Options > Shutdown. ### Parallels Client * Native USB redirection does not work with Parallels Client. * For using the new FIPS 140-2 compliance mode it is necessary to connect to the Parallels RAS once with disabled FIPS support. ### Smartcard * In seldom cases the authentication hung when using A.E.T. SafeSign smartcards. ### Appliance Mode * Appliance mode RHEV/Spice: spice-xpi firefox plugin is no longer supported. The "Console Invocation" has to allow 'Native' client (auto is also possible) and should be started in fullscreen to prevent any opening windows. ### Multimedia * Multimedia redirection with GStreamer could fail with the Nouveau GPU driver. ### Audio * IGEL UD2 (D220) fails to restore the volume level of the speaker when the device used firmware version 11.01.110 before. --- Release Notes 11.02.150 (Based On 11.02.140) -------------------------------------------------------------------------------- Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to version 60.9.0esr Including Fixes from Security Advisory 2019-27: CVE-2019-11746, CVE-2019-11744, CVE-2019-11753, CVE-2019-11752, CVE-2019-9812, CVE-2019-11743, CVE-2019-11740 ### Base system * Fixed security issue CVE-2019-15902 in 4.19.x kernel. New Features -------------------------------------------------------------------------------- ### Hardware * Improved support for ADS-Tec VMT9000 devices: - Enable rs-232 additional power supply without restart. - Enable external wlan antenna without restart. - Enable shutdown by ignition off. Resolved Issues -------------------------------------------------------------------------------- ### RDP/IGEL RDP Client 2 * Fixed RDP graphics issues with Windows 2008(R2) Server (when RemoteFX is not enabled) * Fixed some smaller graphical RDP issues with Windows 2012r2 if using Clearcodec. ### Network * Changed minimal allowed MSS size to 750 to avoid problems with some VPN solutions. * Added new registry keys to be able to configure the minimal allowed TCP MSS size. New registry keys: +------------+-----------------------------------------------------------------+ | Parameter | `Minimal TCP send MSS size.` | +------------+-----------------------------------------------------------------+ | Registry | `system.sysctl.tcp_min_snd_mss` | +------------+-----------------------------------------------------------------+ | Type | Integer | +------------+-----------------------------------------------------------------+ | Value | **750** (default) | +------------+-----------------------------------------------------------------+ | Tooltip | Minimal TCP send MSS size (configurable value in the area from 200 to 1450). | +------------+-----------------------------------------------------------------+ ### Hardware * Fixed EFI freeze problem after bootcode update on devices like the HP t630 and probably others too. Release Notes 11.02.140 (Based On 11.02.130) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### Hardware * Enable rs-232 without restart. Enable external wlan antena without restart. Enable shutdown by ignition off. * Add hardware support for Dell WYSE 5020. Resolved Issues -------------------------------------------------------------------------------- ### Firefox * Fixed: Homepage cannot be set ### X11 system * Fixed Multi-GPU NVIDIA setups with Display Switch. * Prevent configuration of Display Switch utility on unlicensed device. * Added new registry keys to be able to configure some modesetting options if needed. New registry keys: +------------+-----------------------------------------------------------------+ | Parameter | `Use DRI3 PageFlip feature.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.modesetting.use_page_flip` | +------------+-----------------------------------------------------------------+ | Range | [Default] [False] [True] | +------------+-----------------------------------------------------------------+ | Value | **Default** (normally use page flip feature) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use shadow framebuffer layer.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.modesetting.use_shadow_fb` | +------------+-----------------------------------------------------------------+ | Range | [Default] [False] [True] | +------------+-----------------------------------------------------------------+ | Value | **Default** (normally use shadow framebuffer) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use double shadow framebuffer to improve VNC performance.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.modesetting.use_double_shadow` | +------------+-----------------------------------------------------------------+ | Range | [False] [True] | +------------+-----------------------------------------------------------------+ | Value | **False** | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use software cursor for modesetting driver.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.modesetting.use_sw_cursor` | +------------+-----------------------------------------------------------------+ | Range | [Default] [False] [True] | +------------+-----------------------------------------------------------------+ | Value | **Default** (normally false) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Choose acceleration method.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.modesetting.accel_method` | +------------+-----------------------------------------------------------------+ | Range | [Default] [Glamor] [None] | +------------+-----------------------------------------------------------------+ | Value | **Default** (normally Glamor is used) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Force usage of DRI3 regardless of x.drivers.use_dri3 setting.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.modesetting.force_dri3` | +------------+-----------------------------------------------------------------+ | Type | Bool | +------------+-----------------------------------------------------------------+ | Value | **False** (default) | +------------+-----------------------------------------------------------------+ ### Hardware * Added support for newer Prolific PL2303 USB serial adapters (used in UD3 LX60). Release Notes 11.02.130 (Based On 11.02.100) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### VMware Horizon * Sound redirection in PCoIP is broken when the so called lightweight-client is used, which has become the new default. But Sound redirection can still be used by choosing the rollback-client instead. This can be done by setting the IGEL Registry key: +------------+-----------------------------------------------------------------+ |Parameter |`Allow rollback to former client variant.` | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.allow-client-rollback` | +------------+-----------------------------------------------------------------+ |Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ Resolved Issues -------------------------------------------------------------------------------- ### Base system * Fixed ActiveDirectory/Kerberos password change with "Change Password" accessory for users which are member of many (~300+) AD groups. * Fixed IGEL License retrieval via FTP protocol in IGEL Setup Assistant and Licenses Browser tool. ### Remote Management * Fixed automatic registering in the UMS using DNS entry or DHCP tag for initial rollout. --- Release Notes 11.02.100 -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### Citrix * Integrated **Citrix Workspace app 19.06**. AvailableÿCitrix Workspace apps in this release: 19.06, 13.10 and 13.5. - Added new registry key to support 1536-bit RSA keys for client authentication. Factory default for this release is "true". +------------+-----------------------------------------------------------------+ |Parameter |`Enable RSA 1536 cipher suit` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.enabl_rsa_1536` | +------------+-----------------------------------------------------------------+ |Range |**factory default** (default) / false / true | +------------+-----------------------------------------------------------------+ - Added new registry key enable different cipher suites for client authentication. Factory default for this release is "ALL". +------------+-----------------------------------------------------------------+ |Parameter |`Enables different cipher suites` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.sslciphers` | +------------+-----------------------------------------------------------------+ |Range |**factory default** (default) / ALL / GOV / COM | +------------+-----------------------------------------------------------------+ * TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - GOV/ALL TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - GOV/ALL TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA - COM/ALL - Added new registry key to support keyboard layout syncroniyation. +------------+-----------------------------------------------------------------+ |Parameter |`Keyboard layout synchronization` | +------------+-----------------------------------------------------------------+ |Registry |`ica.modules.virtualdriver.keyboardsync.enable` | +------------+-----------------------------------------------------------------+ |Range | **false** (default) / true | +------------+-----------------------------------------------------------------+ * Updated Citrix HDX RTME (used for optimization of Skype for Business) to version 2.8.0-2235 * Added support for "Citrix Workspace Launcher" functionality as described at https://support.citrix.com/article/CTX237727 * Added "Citrix Farm Selection", a facility to manually select one of the configured services/farms for Storefront login. +------------+-----------------------------------------------------------------+ |Parameter |`Citrix store selection` | +------------+-----------------------------------------------------------------+ |Registry |`ica.pnlogin.farm_selection.enabled` | +------------+-----------------------------------------------------------------+ |Value |**off** (default)/on | +------------+-----------------------------------------------------------------+ * Off: All servers are used parallel. If switched on, user has to select the store via a dialog box before entering the login data. ** Timeout for selection dialog: +------------+-----------------------------------------------------------------+ |Parameter |`Timeout` | +------------+-----------------------------------------------------------------+ |Registry |`ica.pnlogin.farm_selection.timeout` | +------------+-----------------------------------------------------------------+ |Value |**0** (default, no timeout) seconds | +------------+-----------------------------------------------------------------+ ** Width of dialog window: +------------+-----------------------------------------------------------------+ |Parameter |`Selection box window width` | +------------+-----------------------------------------------------------------+ |Registry |`ica.pnlogin.farm_selection.win_width` | +------------+-----------------------------------------------------------------+ |Value |**400** pixel | +------------+-----------------------------------------------------------------+ ** Height of dialog window: +------------+-----------------------------------------------------------------+ |Parameter |`Selection box window height` | +------------+-----------------------------------------------------------------+ |Registry |`ica.pnlogin.farm_selection.win_height` | +------------+-----------------------------------------------------------------+ |Value |**400** pixel | +------------+-----------------------------------------------------------------+ * Changed the defaults for following parameters: +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions -> Citrix -> Citrix Global -> Window | +------------+-----------------------------------------------------------------+ | Parameter | `Multimonitor full-screen mode` | +------------+-----------------------------------------------------------------+ | Registry | `ica.wfclient.usexdgfullscreen` | | | `ica.wfclient.spanmonitorenable` | +------------+-----------------------------------------------------------------+ | Range | [Restrict full-screen session to one monitor] | | | [Expand full-screen session across all monitors] | | | [Expand the session over a self-selected number of monitors] | +------------+-----------------------------------------------------------------+ | Value | **Expand full-screen session across all monitors** | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions -> Citrix -> Citrix Global -> HDX Multimedia | +------------+-----------------------------------------------------------------+ | Parameter | `Multimedia redirection` | +------------+-----------------------------------------------------------------+ | Registry | `ica.module.virtualdriver.multimedia.enable` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions -> Citrix -> Citrix Global -> HDX Multimedia | +------------+-----------------------------------------------------------------+ | | Sessions -> Citrix -> Citrix Global -> Unified Communications -> Skype for Business | +------------+-----------------------------------------------------------------+ | Parameter | `HDX Realtime Media Engine` | +------------+-----------------------------------------------------------------+ | Registry | `ica.module.virtualdriver.hdxrtme.enable` | +------------+-----------------------------------------------------------------+ | Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ * Updated the Nuance virtual channel for ICA to version B301. ### RDP/IGEL RDP Client 2 * Added Field Collection to RDP session server page ### VMware Horizon * Added parameters to specify webcam frame size and rate for RTAV. +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame width | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-width` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame height | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-height` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame rate | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-rate` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ * Updated Horizon Client to version 5.0.0-12557422 * Added possibility to easily evaluate Horizon Blast decoder states. By default sessions are evaluated after usage and the result is written into the journal log. This can also be used with GUI notifications at runtime. * Added new USB classes to Horizon USB Redirection class configuration: Audio (input), Audio (Output), Imaging, Video (Input) ### Parallels Client * Updated Parallels Client to version 17.0 * Added possibility to set apps for autostart on the Parallels RAS ### PowerTerm * Added Ericom PowerTerm terminal emulation. This feature requires an additional license. The following versions are available: 12.0.1.0.20170219.2-_dev_-34574 12.5_x64_20190619_12.5.1.40008 ### IBM_5250 * Improved startup time of IBM iAccess Client * Improved configuration of IBM iAccess Client via IGEL Setup +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Connection>Advanced` | +------------+-----------------------------------------------------------------+ |Parameter |`Bypass signon` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.ssoenabled` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Font` | +------------+-----------------------------------------------------------------+ |Parameter |`Antialiasing` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.textantialiasing` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Cursor` | +------------+-----------------------------------------------------------------+ |Parameter |`Allow blinking cursor` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.blinkcursor` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Cursor` | +------------+-----------------------------------------------------------------+ |Parameter |`Show blinking text with` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.blinkstate` | +------------+-----------------------------------------------------------------+ |Value |Blinking Text/**Host Color**/Mapped Color | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Cursor` | +------------+-----------------------------------------------------------------+ |Parameter |`Blink Color` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.blinkcolor_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ffc800** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Cursor` | +------------+-----------------------------------------------------------------+ |Parameter |`Blink Color Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.blinkcolor_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Rule Line` | +------------+-----------------------------------------------------------------+ |Parameter |`Rule Line` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.ruleline` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Rule Line` | +------------+-----------------------------------------------------------------+ |Parameter |`Follow Cursor` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.rulelinefollows` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Rule Line` | +------------+-----------------------------------------------------------------+ |Parameter |`Style` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.rulelinestyle` | +------------+-----------------------------------------------------------------+ |Value |**Crosshair**/Vertical/Horizontal | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Green` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fgn_fg` | +------------+-----------------------------------------------------------------+ |Value |**#00ff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Green Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fgn_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`White` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fwt_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ffffff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`White Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fwt_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Red` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_frd_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ff0000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Red Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_frd_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Turquoise` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_ftq_fg` | +------------+-----------------------------------------------------------------+ |Value |**#00ffff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Turquoise Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_ftq_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Yellow` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fyw_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ffff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Yellow Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fyw_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Pink` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fpk_fg` | +------------+-----------------------------------------------------------------+ |Value |**#ff00ff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Pink Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fpk_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Blue` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fbl_fg` | +------------+-----------------------------------------------------------------+ |Value |**#7890f0** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Blue Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_fbl_bg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Status Indicators` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_osi` | +------------+-----------------------------------------------------------------+ |Value |**#7890f0** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Information Indicators` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_oii` | +------------+-----------------------------------------------------------------+ |Value |**#ffffff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Attention Indicators` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_oai` | +------------+-----------------------------------------------------------------+ |Value |**#ffff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Error Indicators` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_oei` | +------------+-----------------------------------------------------------------+ |Value |**#ff0000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`OIA Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_oob` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Screen Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_sbg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Highlight active field` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.actfieldhilite` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Active Field` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_actf_fg` | +------------+-----------------------------------------------------------------+ |Value |**#000000** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Active Field Background` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_actf_bg` | +------------+-----------------------------------------------------------------+ |Value |**#ffff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Crosshair Ruler Color` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_crc` | +------------+-----------------------------------------------------------------+ |Value |**#00ff00** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Screen>Color` | +------------+-----------------------------------------------------------------+ |Parameter |`Column Separator` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.color_ccs` | +------------+-----------------------------------------------------------------+ |Value |**#ffffff** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Preferences` | +------------+-----------------------------------------------------------------+ |Parameter |`Start window maximized` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.ismaximized` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Preferences>Keyboard` | +------------+-----------------------------------------------------------------+ |Parameter |`Keyboard Remapping File` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.keyremapfile` | +------------+-----------------------------------------------------------------+ |Value |**IBMi.kmp** | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Preferences>Popup Keypad` | +------------+-----------------------------------------------------------------+ |Parameter |`Popup Keypad File` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.poppadfile` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Sessions>Session Name>Preferences>Toolbar` | +------------+-----------------------------------------------------------------+ |Parameter |`Toolbar File` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.iaccess.options.toolbarfile` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Open new sessions in a new tab` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.opensessionintab` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Always display the tab bar` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.alwaysshowtabbar` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Switch to new tab when created` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.switchtonewtab` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Send a warning when closing multiple tabs` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.closemultipletabwarning` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Do not start tabbed sessions until the tab is selected` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.tabdelayedstart` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`New Tab Action` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.newtabaction` | +------------+-----------------------------------------------------------------+ |Value |Disable and Hide/**Run the Same**/Run Other... | +------------+-----------------------------------------------------------------+ |Setup |`Sessions>IBM iAccess Client>iAccess Global>Tab Setup` | +------------+-----------------------------------------------------------------+ |Parameter |`Tab Placement` | +------------+-----------------------------------------------------------------+ |Registry |`ibm.iaccess.acssm.tabplacement` | +------------+-----------------------------------------------------------------+ |Value |**Top**/Bottom/Left/Right | +------------+-----------------------------------------------------------------+ ### NX client * Updated NoMachine Client to version 6.7.6 ### ThinLinc * Updated Cendio ThinLinc to version 4.10. * Added support for all of ThinLinc's login methods: password, public key, smart card and Kerberos, additional parameters can be set when smartcard is chosen. +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Method of authentication` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.login.authentication_method` | +------------+-----------------------------------------------------------------+ |Value |**password** (default) / publickey / scpublickey / kerberos | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`User` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.options.user` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Password` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.option.crypt_password` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Use subject of smart card as name for login` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.login.smartcard_subject_as_name` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Connect the client automatically when a smart card is found` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.login.smartcard_autoconnect` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Disconnect the client automatically when the smart card is removed` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.login.smartcard_disconnect` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Allow transmission of the smart card's passphrase for logging in` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.login.smartcard_passphrase_sso` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Smartcard filter` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.login.smartcard_filter_1` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Smartcard filter` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.login.smartcard_filter_2` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |`Smartcard filter` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.thinlinc%.login.smartcard_filter_3` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ ### Teradici PCoIP Client * Added Teradici PCoIP Client version 19.05.5. This feature requires an additional license. The following parameters are available: +------------+-----------------------------------------------------------------+ |IGEL Setup |System > Firmware Customization > Features | +------------+-----------------------------------------------------------------+ |Parameter |Teradici PCoIP Client | +------------+-----------------------------------------------------------------+ |Registry |services.addition_teradici_pcoip_client.enabled | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings | +------------+-----------------------------------------------------------------+ |Parameter |Use IGEL Setup for configuration | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.igel-connection | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings | +------------+-----------------------------------------------------------------+ |Parameter |Server | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.address | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings | +------------+-----------------------------------------------------------------+ |Parameter |Server certificate verification mode | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.security-mode | +------------+-----------------------------------------------------------------+ |Range | [Not required][ **Warn but allow** (default)][Full verification]| +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |Authentication type | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.auth-type | +------------+-----------------------------------------------------------------+ |Range | [ **Password authentication** (default)] | | | [Smartcard authentication] | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window | +------------+-----------------------------------------------------------------+ |Parameter |Window mode | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.window-mode | +------------+-----------------------------------------------------------------+ |Range | [ **User defined** (default)][Fullscreen One Monitor] | +------------+-----------------------------------------------------------------+ | | [Fullscreen All Monitors][Window] | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window | +------------+-----------------------------------------------------------------+ |Parameter |User interface translation | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.language | +------------+-----------------------------------------------------------------+ |Range | [ **System setting** (default)] [English] [German] [French] | +------------+-----------------------------------------------------------------+ | | [Spanish] [Portuguese (EU)] [Portuguese (Brazil)] [Italian] | +------------+-----------------------------------------------------------------+ | | [Japanese] [Chinese(Simplified)] [Chinese(Traditional)] | +------------+-----------------------------------------------------------------+ |Parameter |Log level | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.log-level | +------------+-----------------------------------------------------------------+ |Range | [**Global setting** (default)][Critical][Error][Info][Debug] | +------------+-----------------------------------------------------------------+ * Added support for global settings: +------------+-----------------------------------------------------------------+ |Parameter |`Log level` | +------------+-----------------------------------------------------------------+ |Registry |`pcoip.log-level` | +------------+-----------------------------------------------------------------+ |Value |[Critical][Error][**Info** (default)][Debug] | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Show codec indicator` | +------------+-----------------------------------------------------------------+ |Registry |`pcoip.codec_indicator` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ > Added small dot in the bottom left corner during the session to indicate > which codec is being used. Green indicates simple codec; blue indicates tic2 > codec. > This is only available as global setting. * UMS-option "Save device files for support" now includes Teradici PCoIP clients data ### Firefox * Added new parameters: Allow a custom command before and after browser session: +------------+-----------------------------------------------------------------+ |Parameter |`init_action` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.browser%.init_action` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ |Parameter |`final_action` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.browser%.final_action` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ ### Network * New feature regarding lock and logon screen: Network icons are shown on the panel and appear under the same conditions as during normal operation. None of them has a context menu though. Clicking on the WiFi icon directly invokes the Wireless Manager when enabled. If blocking/unblocking WiFi by the user is enabled, there is an additional button on the Wireless Manager for blocking and a preceding dialog for unblocking. * SCEP: Added registry key for specifiying a suffix for CommonName/SubjectAltName when the type is "DNS Name (auto)" or "DNS Name as UPN (auto)" +------------+-----------------------------------------------------------------+ |Parameter |CommonName/SubjectAltName Suffix | +------------+-----------------------------------------------------------------+ |Registry |`network.scepclient.cert%.subjectaltnamesuffix` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ > Automatic replacements in the value: > %D -> the system's DNS domain name at the time the CSR is created > %% -> % > Other %X are currently discarded. * Added a mechanism for retrieving the SCEP challenge password with a custom script. Set of following registry key to true enables the use of the script. The registry key network.scepclient.cert%.crypt_password will be ignored. (The script may use it for its own purpose though.) +------------+-----------------------------------------------------------------+ |Parameter |Use Challenge Password Command | +------------+-----------------------------------------------------------------+ |Registry |`network.scepclient.cert%.use_challenge_password_command` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) /enabled | +------------+-----------------------------------------------------------------+ * When the above key is enabled, the value of this key will be passed to bash for execution. It happens when the SCEP challenge password is needed for creating a certificate signing request. The script is supposed to output the challenge password within standard output. For convenience, any Carriage-Return characters are stripped off the script before execution by bash. +------------+-----------------------------------------------------------------+ |Parameter |Challenge Password Command | +------------+-----------------------------------------------------------------+ |Registry |`network.scepclient.cert%.challenge_password_command` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ * Added NCP Secure Enterprise VPN Client version 5.10_rev40552: Configurable at IGEL Setup > Network > VPN > NCP VPN Client ### WiFi * Added: Wifi-Adapters can be turned off and on by the tray icon context menu when following registry key is enabled: +------------+-----------------------------------------------------------------+ |Parameter |Enable Wi-Fi switch | +------------+-----------------------------------------------------------------+ |Registry |`network.applet.wireless.enable_wifi_switch` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ * Added support for Realtek 8821CE wireless cards. ### Imprivata * Imprivata Appliance 6.3 or higher is needed now. Please see the Imprivata Supported Components guide (http://documentation.imprivata.com/01RefArch/Content/Topics/OSSupportedComponents.htm#ProveID) for support and upgrade considerations. * Added new parameter to Imprivata.conf: "Redirection of Smartcards" +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > Appliance Mode > Imprivata | +------------+-----------------------------------------------------------------+ | Parameter | `Redirection of Smartcards` | +------------+-----------------------------------------------------------------+ | Registry | `imprivata.native_smartcard_redirection` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter: "Path to Certificate" +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > Appliance Mode > Imprivata | +------------+-----------------------------------------------------------------+ | Parameter | `Path to Certificate` | +------------+-----------------------------------------------------------------+ | Registry | `imprivata.path_to_certificate` | +------------+-----------------------------------------------------------------+ ### Smartcard * Added 90meter smartcard library. This feature requires an additional license. Use the following parameters to activate: +------------+-----------------------------------------------------------------+ |IGEL Setup |System > Firmware Customization > Features | +------------+-----------------------------------------------------------------+ |Parameter |90meter Smart Card Support | +------------+-----------------------------------------------------------------+ |Registry |services.addition_smartcard_90meter.enabled | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Horizon Client > Horizon Client Global > Smartcard | +------------+-----------------------------------------------------------------+ |Parameter |Horizon logon with smartcards supported by 90meter library | +------------+-----------------------------------------------------------------+ |Registry |vmware.view.pkcs11.use_90meter | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Browser > Browser Global > Smartcard Middleware | +------------+-----------------------------------------------------------------+ |Parameter |90meter Security Device | +------------+-----------------------------------------------------------------+ |Registry |browserglobal.security_device.90meter | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Security > Smartcard > Middleware | +------------+-----------------------------------------------------------------+ |Parameter |90meter | +------------+-----------------------------------------------------------------+ |Registry |scard.pkcs11.use_90meter | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ * New IGEL Smartcard mode without 'Locking Desktop' (reintroduced feature of Linux 5.x firmware): +------------+-----------------------------------------------------------------+ |Setup |`Security>Logon>IGEL Smartcard` | +------------+-----------------------------------------------------------------+ |Parameter |`Enable IGEL Smartcard without Locking Desktop` | +------------+-----------------------------------------------------------------+ |Registry |`scard.scardd.enable_nolock` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Setup |`Security>Logon>IGEL Smartcard` | +------------+-----------------------------------------------------------------+ |Parameter |`On Smartcard Removal, terminate` | +------------+-----------------------------------------------------------------+ |Registry |`scard.scardd.session_termination` | +------------+-----------------------------------------------------------------+ |Value |**all**/smartcard | +------------+-----------------------------------------------------------------+ * Updated SecMaker Net iD to version 6.7.2.36: now Yubikey 5 is supported. * Updated CHERRY USB-LAN Proxy to version 3.2.0.3. This version provides enhanced configuration: +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`Bind IP` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.bind-ip` | +------------+-----------------------------------------------------------------+ |Value |**auto** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`Https Server Port` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.https-port` | +------------+-----------------------------------------------------------------+ |Value |**443** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`SICCT Announce IP` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.sicct-announce-ip` | +------------+-----------------------------------------------------------------+ |Value |**broadcast** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`SICCT Announce Port` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.sicct-announce-port` | +------------+-----------------------------------------------------------------+ |Value |**4742** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`SICCT Announce Interval` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.sicct-announce-interval` | +------------+-----------------------------------------------------------------+ |Value |**30** | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`USB Fast Mode` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.usb-fast-mode` | +------------+-----------------------------------------------------------------+ |Value |**false**/true | +------------+-----------------------------------------------------------------+ |Setup |`Security>Smartcard>Services` | +------------+-----------------------------------------------------------------+ |Parameter |`Alternate Initialization Method for G87-1505` | +------------+-----------------------------------------------------------------+ |Registry |`devices.cherry.usblanproxy.usb-1505-alt-setup` | +------------+-----------------------------------------------------------------+ |Value |**false**/true | +------------+-----------------------------------------------------------------+ * Added a command line tool "pcsc_scan" for smartcard debugging. * Added configuration parameters for some settings of smartcard library OpenSC: +------------+-----------------------------------------------------------------+ |Parameter |`Debug level` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.debug` | +------------+-----------------------------------------------------------------+ |Value |**0** | +------------+-----------------------------------------------------------------+ |Parameter |`Debug file` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.debug_file` | +------------+-----------------------------------------------------------------+ |Value |**stderr** | +------------+-----------------------------------------------------------------+ |Parameter |`Max. send size` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.max_send_size` | +------------+-----------------------------------------------------------------+ |Value |**255** | +------------+-----------------------------------------------------------------+ |Parameter |`Max. receive size` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.max_recv_size` | +------------+-----------------------------------------------------------------+ |Value |**256** | +------------+-----------------------------------------------------------------+ |Parameter |`Connect exclusive` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.connect_exclusive` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |Parameter |`Disconnect action` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.disconnect_action` | +------------+-----------------------------------------------------------------+ |Value |**leave**/reset/unpower | +------------+-----------------------------------------------------------------+ |Parameter |`Transaction end action` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.transaction_end_action` | +------------+-----------------------------------------------------------------+ |Value |**leave**/reset/unpower | +------------+-----------------------------------------------------------------+ |Parameter |`Reconnect action` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.reconnect_action` | +------------+-----------------------------------------------------------------+ |Value |**leave**/reset/unpower | +------------+-----------------------------------------------------------------+ |Parameter |`Enable pinpad` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pcsc.enable_pinpad` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Parameter |`Use PIN caching` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pkcs15.use_pin_caching` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Parameter |`How many times to use a PIN from cache before re-authenticating it` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pkcs15.pin_cache_counter` | +------------+-----------------------------------------------------------------+ |Value |**10** | +------------+-----------------------------------------------------------------+ |Parameter |`PIN caching ignores user consent` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.opensc.default.pkcs15.pin_cache_ignore_user_consent` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ * Updated cryptovision sc/interface PKCS#11 smartcard library to version 7.1.20 Changes in this revision: - Fixed a possible deadlock in the PKCS#11 module on Linux, if C_Finalize is called during a PCSC event, for example C_WaitForSlotEvent. - ROCA check in the Smartcard Manager, based on the "ROCA detection tool", see [https://github.com/crocs-muni/roca] - Renaming container label in Smartcard Manager with F2 now possible. ### CUPS Printing * Added SMB Network Print Client function. +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`Printer Port` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.backend` | +------------+-----------------------------------------------------------------+ |Value |smb | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Server` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_server` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Workgroup` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_workgroup` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Printer` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_printer` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Port` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_port` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`Use Kerberos Authentication` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_kerberos` | +------------+-----------------------------------------------------------------+ |Value |true/**false** | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`Use Passthrough Authentication` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_passthrough` | +------------+-----------------------------------------------------------------+ |Value |true/**false** | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB User` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.smb_user` | +------------+-----------------------------------------------------------------+ |Setup |`Devices>Printer>CUPS>Printers>Dialog` | +------------+-----------------------------------------------------------------+ |Parameter |`SMB Password` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.crypt_password` | +------------+-----------------------------------------------------------------+ ### Base system * Added possibility to configure scheduled commands. Registry keys: system.cron.** * Buddy Update enhancements -Automatic load balancing A client collects up to eight server candidates from which one is selected randomly. Collection stops when the number specified in the following registry key is reached. Otherwise collection stops after a timeout. +------------+-----------------------------------------------------------------+ |Parameter |Buddy Update Server Candidates | +------------+-----------------------------------------------------------------+ |Registry |`update.ftp.buddy_server_candidates` | +------------+-----------------------------------------------------------------+ |Value |**1** (default) | +------------+-----------------------------------------------------------------+ -Grouping Buddy update servers and clients only interact with each other when they are in the same group determined by the following registry key (a non-negative integer number). This feature is useful when different firmware versions shall be used in parallel. +------------+-----------------------------------------------------------------+ |Parameter |Buddy Group ID | +------------+-----------------------------------------------------------------+ |Registry |`update.ftp.buddy_group_id` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ * Added: Firmware update scheduled on shutdown is now invoked on reboot too. * Added package ldap-utils which can be used by custom scripts. * Updated Kernel to mainline version 4.19.65. * Moved the EULA page in "IGEL Setup Assistant" into the demo activation workflow. * Updated EULA displayed in OSC and "IGEL Setup Assistant". * Added: When "IGEL Setup Assistant" is used to download a demo license via Wifi, the local WiFi manager will be enabled by default. * Updated Fluendo multimedia codecs to the following versions: gst-fluendo-aacdec - 21/03/2019 0.10.39 gst-fluendo-asfdemux - 21/03/2019 0.10.89 gst-fluendo-h264dec - 21/03/2019 0.10.53 gst-fluendo-mp3 - 22/03/2019 0.10.39 gst-fluendo-mpeg4video - 21/03/2019 0.10.43 gst-fluendo-vadec - 21/03/2019 0.10.208 gst-fluendo-wmadec - 21/03/2019 0.10.68 gst-fluendo-wmvdec - 20/03/2019 0.10.65 * Replaced timesyncd with chrony NTP. Added new registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use NTP Servers from DNS SRV record` | +------------+-----------------------------------------------------------------+ | Registry | `system.time.ntp_use_dnssrv_timeservers` | +------------+-----------------------------------------------------------------+ | Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ * Updated CA Certificates to version 20190122 (Mozilla authority bundle version 2.30). The following authorities were added: - "Certigna Root CA" - "GTS Root R1" - "GTS Root R2" - "GTS Root R3" - "GTS Root R4" - "UCA Extended Validation Root" - "UCA Global G2 Root" - "GlobalSign Root CA - R6" - "OISTE WISeKey Global Root GC CA" - "GDCA TrustAUTH R5 ROOT" - "SSL.com EV Root Certification Authority ECC" - "SSL.com EV Root Certification Authority RSA R2" - "SSL.com Root Certification Authority ECC" - "SSL.com Root Certification Authority RSA" - "TrustCor ECA-1" - "TrustCor RootCert CA-1" - "TrustCor RootCert CA-2" The following authorities were removed: - "Certplus Root CA G1" - "Certplus Root CA G2" - "OpenTrust Root CA G1" - "OpenTrust Root CA G2" - "OpenTrust Root CA G3" - "TšRKTRUST Elektronik Sertifika Hizmet Saglayicisi H5" - "Visa eCommerce Root" - "ACEDICOM Root" - "AddTrust Low-Value Services Root" - "AddTrust Public Services Root" - "AddTrust Qualified Certificates Root" - "CA Disig Root R1" - "CNNIC ROOT" - "Camerfirma Chambers of Commerce Root" - "Camerfirma Global Chambersign Root" - "Certinomis - Autorit‚ Racine" - "Certum Root CA" - "China Internet Network Information Center EV Certificates Root" - "Comodo Secure Services root" - "Comodo Trusted Services root" - "DST ACES CA X6" - "GeoTrust Global CA 2" - "PSCProcert" - "Security Communication EV RootCA1" - "Swisscom Root CA 1" - "Swisscom Root CA 2" - "Swisscom Root EV CA 2" - "TURKTRUST Certificate Services Provider Root 2007" - "TUBITAK UEKAE Kok Sertifika Hizmet Saglayicisi - Surum 3" - "UTN USERFirst Hardware Root CA" ### Driver * Added registry keys to modify the Intel graphic driver usage of framebuffer compression and power management. New registry keys: +------------+-----------------------------------------------------------------+ | Parameter | `Power saving display C-States to use.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.intel.dc_setting` | +------------+-----------------------------------------------------------------+ | Range | [Default][Disable][Up to DC5][Up to DC6] | +------------+-----------------------------------------------------------------+ | Value | **Default** (driver default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use framebuffer compression.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.intel.fbc_setting` | +------------+-----------------------------------------------------------------+ | Range | [Default][Disable] | +------------+-----------------------------------------------------------------+ | Value | **Default** (driver default) | +------------+-----------------------------------------------------------------+ * Updated Philips Speech driver to version 12.7.11 * Updated signotec Citrix Virtual Channel driver to version 8.0.8 * Updated StepOver TCP Client to version 2.3.2. * Updated deviceTRUST Client to version 19.1.200. These are the release notes: "Welcome to the release of the deviceTRUST 19.1.200 IGEL client, providing the context of IGEL thin client and UD Pocket devices into your virtual sessions. This release includes support for logical disks attached to the IGEL endpoint, plus bug fixes and stability improvements over the previous 19.1.100 release. Logical Disks We´ve added support for real-time properties representing the LOGICAL DISKS attached to the IGEL endpoint. This includes: * DEVICE_LOGICALDISK_X_TYPE - Either Fixed or Removable. * DEVICE_LOGICALDISK_X_LABEL - The volume label. * DEVICE_LOGICALDISK_X_FILESYSTEM - The type of file system. * DEVICE_LOGICALDISK_X_PATHS - The paths that the disk is mounted. * DEVICE_LOGICALDISK_X_TOTALMB - The total space available on the disk. This property is only available for mounted disks. * DEVICE_LOGICALDISK_X_FREEMB - The free space available on the disk. This property is only available for mounted disks. * DEVICE_LOGICALDISK_X_NAME - The name of the underlying physical disk. * DEVICE_LOGICALDISK_X_VENDORID - The vendor identifier uniquely identifying the manufacturer. This property is only available for USB or PCI connected devices. * DEVICE_LOGICALDISK_X_PRODUCTID - The product identifier uniquely identifying the product. This property is only available for USB or PCI connected devices. * DEVICE_LOGICALDISK_X_SERIALNUMBER - The serial number of the physical disk. * DEVICE_LOGICALDISK_X_BUSTYPE - The storage bus type linked to the physical disk. * DEVICE_LOGICALDISK_COUNT - The number of logical disks." ### X11 system * Added new parameter to allow configuration of 'Display Switch' confirmation dialog timeout. +------------+-----------------------------------------------------------------+ | Setup | Accessories > Display Switch > Options | +------------+-----------------------------------------------------------------+ | Parameter | `Timeout for confirmation dialog` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.user_display0.options.confirm_timeout` | +------------+-----------------------------------------------------------------+ | Value | **10** | +------------+-----------------------------------------------------------------+ * Re-Enable 'Display Switch' session start script to cycle simple modes. * Added new options for lid handling. +------------+-----------------------------------------------------------------+ | Parameter | `Lid close action while plugged in` | +------------+-----------------------------------------------------------------+ | Registry | `system.actions.lid.ac` | +------------+-----------------------------------------------------------------+ | Range | [Turn off display] [Suspend] | +------------+-----------------------------------------------------------------+ | Value | **Turn off display** | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Lid close action while not plugged in` | +------------+-----------------------------------------------------------------+ | Registry | `system.actions.lid.battery` | +------------+-----------------------------------------------------------------+ | Range | [Turn off display] [Suspend] | +------------+-----------------------------------------------------------------+ | Value | **Turn off display** | +------------+-----------------------------------------------------------------+ * Added new registry keys to change the xorg input driver for a input device class. New registry keys: For keyboards: +------------+-----------------------------------------------------------------+ | Parameter | `Xorg driver to use` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.keyboard.driver` | +------------+-----------------------------------------------------------------+ | Range | [Evdev] [Libinput] | +------------+-----------------------------------------------------------------+ | Value | **Evdev** (default) | +------------+-----------------------------------------------------------------+ * For touchpads: +------------+-----------------------------------------------------------------+ | Parameter | `Xorg driver to use` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.touchpad.driver` | +------------+-----------------------------------------------------------------+ | Range | [Evdev] [Synaptics] [Libinput] | +------------+-----------------------------------------------------------------+ | Value | **Evdev** (default) | +------------+-----------------------------------------------------------------+ * For touchscreens: +------------+-----------------------------------------------------------------+ | Parameter | `Xorg driver to use` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.touchscreen.xorg_driver` | +------------+-----------------------------------------------------------------+ | Range | [Evdev] [Libinput] | +------------+-----------------------------------------------------------------+ | Value | **Evdev** (default) | +------------+-----------------------------------------------------------------+ * For mouse: +------------+-----------------------------------------------------------------+ | Parameter | `Xorg driver to use` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.mouse.driver` | +------------+-----------------------------------------------------------------+ | Range | [Evdev] [Libinput] | +------------+-----------------------------------------------------------------+ | Value | **Evdev** (default) | +------------+-----------------------------------------------------------------+ * Added some registry keys to disable loading of DRM kernel modules (graphic). New registry keys: +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the RADEON DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.ati.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the AMDGPU DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.amdgpu.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the i915 DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the NVIDIA kernel driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.nvidia.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the NOUVEAU DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.nouveau.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the QXL DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.qxl.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the VMGFX DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.vmware.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the VBOXVIDEO DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.vboxvideo.disable` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ * Updated DisplayLink driver to version 5.1.26 to solve some startup issues. ### Evidian * Updated Evidian rsUserAuth to Version 1.5.7116 ### Hardware * Added hardware support for Rein Medical Silenio 122CT and 124CT. * Added hardware support for Advantech POC-W213L and POC-W243L. * Added hardware support for ADS-TEC VMT 9000 Serie. * Added hardwareÿsupport for Fujitsu Esprimo Q957. * Added hardware support for ADS-TEC VMT 9000 Serie. * Added hardware support for LG AiO Cloud Device 38" * Added hardware support for the following headsets: - Jabra Engage 50 - Jabra Engage 65 - Jabra Engage 75 - Jabra Evolve 30 II (Ver. B) - Jabra Evolve 30 II (Ver. C) - Jabra Evolve 40 (Ver. B) - USB-C - Jabra Evolve 40 (Ver. D) - Jabra Evolve 65 - Jabra Evolve 75 - Plantronics Voyager 5200 UC - Plantronics Voyager 6200 UC - Plantronics Voyager 8200 UC - Plantronics ENCOREPRO 720 + DA70 - Plantronics ENCOREPRO 720 + DA80 - Plantronics ENCOREPRO 520D + DA90 - Sennheiser SC70 * Added hardware support for HP t430. * Added hardware support for HP t420. ### Java * Replaced Oracle JRE by AZUL's Zulu JRE. * Updated Zulu JRE to version 8.40.0.25 ### Remote Management * Connection order between UMS and ICG can now be configured. +------------+-----------------------------------------------------------------+ | Registry | `system.remotemanager.icg_try_ums_connect` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * When ICG connection is configured and the parameter is enabled, the device tries to connect directly to UMS. When the connection was established, the device is managed by UMS and not over ICG until new start of the device or network. ### IGEL Cloud Gateway * Added VNC Shadowing support over ICG To use this feature UMS 6.02.110 or later and ICG 2.01.100 or later are required. Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Improved USB handling of SpaceMouse * Improved USB redirection handling with Citrix Workspace App 19.06 * Fixed stability issues with Citrix Browser Content Redirection. ### OSC Installer * Fixed OSC Installer does not disable EFI when MSDOS partitioning was choosen. ### Citrix Receiver 13 * Added a switch to enable the possibility to launch multiple desktop sessions with RTME and h.264 acceleration. This switch should not be used when "Enable Secure ICA" is active for specific delivery group. +------------+-----------------------------------------------------------------+ | Registry | `ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ ### RDP/IGEL RDP Client 2 * Added registry key to use rdpglobal window settings for remote apps. +------------+-----------------------------------------------------------------+ | Parameter | Enable global windows settings for remote app | +------------+-----------------------------------------------------------------+ | Registry | `rdp.winconnect.enable-global-window-settings-for-remote-app` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added negotiation: Kerberos as fallback for disabled NTLM authentication. This only works when Active Directory/Kerberos Logon is enabled. * Fixed RD Web Access not woking with special characters in name or password. This only works when Active Directory/Kerberos Logon is enabled. * Fixed smartcard redirection in RDP: SCardGetAttrib was failing if pbAttr was NULL. The fix should help running Dutch Zorg-ID applications. ### RD Web Access * Fixed not starting RDP Remote Applications. ### VMware Horizon * Added recognition for password-change and password-expired-dialog in Horizon local-logon sessions or appliance mode * Fixed configuration choice for usage of relative mouse feature * Added possibility using the rollback variant of the Horizon Client. +------------+-----------------------------------------------------------------+ |Parameter |`Allow rollback to former client variant.` | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.allow-client-rollback` | +------------+-----------------------------------------------------------------+ |Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Fixed a problem with the client where connection to the remote desktop using PCoIP protocol failed occasionally. ### Teradici PCoIP Client * Fixed unwanted restart of login window after session logoff or disconnect. ### Firefox * Fixed Firefox not accepting proxy credentials from setup. * Fixed print hotkey disable option not working with Firefox 60. * Fixed browserglobal.app.local_subdirs_whitelist not working. ### Network * Fixed: Failure to reach SCEP server in the client certificate renewal phase resulted in loss of SCEP server and client certificates * Changed e1000e driver to out of tree version 3.4.2.3 directly from Intel. * Changed igb driver to out of tree version 5.3.5.22 directly from Intel. * Added possibility to switch between thirdparty and kernel Intel IGB network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty igb kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.igb.prefer_thirdparty` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use thirdparty in most cases) | +------------+-----------------------------------------------------------------+ * Added possibility to switch between thirdparty and kernel intel E1000E network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty e1000e kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.e1000e.prefer_thirdparty` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use thirdparty in most cases) | +------------+-----------------------------------------------------------------+ * Fixed instability of netmounts with static ip configuration. * Added possibility to switch between thirdparty r8168 and kernel r8169 realtek network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty r8168 kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.r8169.prefer_r8168` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use r8169 in most cases) | +------------+-----------------------------------------------------------------+ * Added possibilty to choose the variant of the realtek r8168 driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Choose realtek r8168 variant (only if prefer r8168 is choosen).` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.r8169.r8168_variant` | +------------+-----------------------------------------------------------------+ | Range | [Default][No NAPI][NAPI] | +------------+-----------------------------------------------------------------+ | Value | **Default** (use NAPI in most cases) | +------------+-----------------------------------------------------------------+ * Fixed: Second Ethernet interface did not get configured when the first one was disabled * Fixed: 802.1X Ethernet configuration with user interaction was broken. ### WiFi * Fixed non working TP Link Archer T2UH. * Fixed non working Broadcom SDIO WLAN cards as present in Advantech AIM8IAC device for example. ### Smartcard * Updated cryptovision sc/interface PKCS#11 smartcard library to version 7.1.20 - Fixed a possible deadlock in the PKCS#11 module on Linux if C_Finalize is called during a PCSC event, for example C_WaitForSlotEvent. * Fixed OpenSC setting max_send_size for reader driver pcsc in /etc/opensc/opensc.conf. * Fixed Dell KB813 Smartcard Keyboard in combination with certain smartcards driven by OpenSC PKCS#11 module. Before this fix authentication to Citrix StoreFront and VMWare Horizon failed. ### Base system * Improved: Ensured that the Unit ID for IGEL devices is the MAC address of the onboard network card. * Fixed license expiry warning at boot. Before this fix, in some cases the warning wrongly appeared at every boot. * Fixed unmounting storage devices via In-session control bar * Fixed server dependent crash when installing license via ftp. * Fixed retrieving of serial number of a connected screen. * Fixed random 90 seconds shutdown delay (systemd). * Fixed wrong behavior with expired evaluation licenses in some cases. * Added message in bootsplash when a custom partition will get created. * Fixed bug in the screenlock countdown that occurred, when display of remaining seconds was not desired * Fixed shortcut configuration for shutdown, restart and icon sort to be applied without reboot. * Added apparmor rule to allow tcpdump to write to /debuglog. * Fixed hotkey configuration to be applied without reboot. * Fixed UD2 screen goes black problem with certain multi monitor configurations. * Improved new license detection in "IGEL Setup Assistant". * Fixed AD/Kerberos logon in case parameter auth.login.krb5_enterprise is set to false. * Fixed: System logoff waits for Citrix logoff now. * Fixed NTP synchronisation problems when changing the NTP client from timesyncd to chrony. * Added switch to enable DNS hostname lookup for SSH server: +------------+-----------------------------------------------------------------+ | Parameter | Use DNS to resolve client hostnames | +------------+-----------------------------------------------------------------+ | Registry | `network.ssh_server.use_dns` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Fixed USB printer aliases. * Fixed gtk-3 icon sizes for High DPI configurations. * Enhanced bootloader to allow the setting of some kernel commandline parameters with registry keys. * New registry keys: +------------+-----------------------------------------------------------------+ | Parameter | `Disable use of APIC controller.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.noapic` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Disable use of ACPI.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.noacpi` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use only one CPU core and disable all others.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.nosmp` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Enable debug console on serial port 1.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.serial_console_debug` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Limit CPU core usage (0 means no limit).` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.maxcpus` | +------------+-----------------------------------------------------------------+ | Type | Integer | +------------+-----------------------------------------------------------------+ | Value | **0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Set maximum allowed cstate on intel cpus.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.max_cstate` | +------------+-----------------------------------------------------------------+ | Range | [No limit] [1] [2] [3] [4] [5] [6] | +------------+-----------------------------------------------------------------+ | Value | **No limit** (do not limit intel cstate) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] [Passthrough] [Force] | +------------+-----------------------------------------------------------------+ | Value | **Passthrough** (Use IOMMU passthrough possible) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting for AMD systems.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.amd_iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] | +------------+-----------------------------------------------------------------+ | Value | **On** (Use IOMMU if possible) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting for Intel systems.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.intel_iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] | +------------+-----------------------------------------------------------------+ | Value | **On** (Use IOMMU if possible) | +------------+-----------------------------------------------------------------+ * Added new registry key to set USB quirks: +------------+-----------------------------------------------------------------+ | Parameter | `Set XHCI USB quirks to fix some hardware issues.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.xhci-hcd_quirks` | +------------+-----------------------------------------------------------------+ | Range | [No quirk] [Spurious Reboot quirk] [Spurious Wakeup quirk] | | | [Spurious Reboot Wakeup quirk] | +------------+-----------------------------------------------------------------+ | Value | **No quirk** | +------------+-----------------------------------------------------------------+ > Lenovo ThinkCentre M73 needs the system.kernel.bootparams.xhci-hcd_quirks > registry key set to `Spurious Reboot quirk` to fix reboot after shutdown > problem. * Added column "Syslog style template" to Remote Syslog setup page. This allows to change rsyslog output style e.g. to newer SyslogProtocol23Format which is supported by graylog. * Disable martian packet logging. ### Driver * Updated deviceTRUST Client to version 19.1.200. - Fixed an issue reading the DEVICE_IGEL_ICG_SERVER property. - Fixed an issue where the NETWORK and LOCATION property providers could cause the client to freeze if a disconnection occurred whilst these property providers were checking for changes. - Fixed an open file handle leak which lead to the client process reaching its file handle limits when left running for a long period of time. * Fixed non working WACOM device DTU-1141B. ### Custom Partition * Added message in bootsplash when a custom partition will get created. * Fixed ownership of extracted data: don't preserve original owner while extracting data into custom partition. ### Storage Devices * Fixed automounting of storage devices inside of Olympus DS-9500 Digital Voice Recorder. ### Appliance Mode * Fixed: In-Session Control Bar could not be deactivated in Citrix Selfservice appliance mode ### X11 system * There is now a registry key to ignore a 3Dconnexion SpaceMouse for IGEL graphical use (X11). If activated, the SpaceMouse is only passed thru to the desktop session. If false, it acts like a standard mouse. +------------+-----------------------------------------------------------------+ |IGEL Setup |System > Registry | +------------+-----------------------------------------------------------------+ |Parameter |`Deactivates a 3Dconnexion SpaceMouse as a standard mouse.` | +------------+-----------------------------------------------------------------+ |Registry |`userinterface.mouse.spacemouse.x11_ignore` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ * The following SpaceMouse products are included (VID, PID, Vendor, Product): - 0x046D; 0xC603; Logitech, Inc.; 3Dconnexion Spacemouse Plus XT - 0x046D; 0xC605; Logitech, Inc.; 3Dconnexion CADman - 0x046D; 0xC606; Logitech, Inc.; 3Dconnexion Spacemouse Classic - 0x046D; 0xC621; Logitech, Inc.; 3Dconnexion Spaceball 5000 - 0x046D; 0xC623; Logitech, Inc.; 3Dconnexion Space Traveller 3D Mouse - 0x046D; 0xC625; Logitech, Inc.; 3Dconnexion Space Pilot 3D Mouse - 0x046D; 0xC626; Logitech, Inc.; 3Dconnexion Space Navigator 3D Mouse - 0x046D; 0xC627; Logitech, Inc.; 3Dconnexion Space Explorer 3D Mouse - 0x046D; 0xC628; Logitech, Inc.; 3Dconnexion Space Navigator for Notebooks - 0x046D; 0xC629; Logitech, Inc.; 3Dconnexion SpacePilot Pro 3D Mouse - 0x046D; 0xC62B; Logitech, Inc.; 3Dconnexion Space Mouse Pro - 0x256F; **; 3Dconnexion; SpaceMouse * USB device reset via USB powercycle on UD6/UD7 available. * Fixed: Problems with internal graphic cards and Nvidia graphic cards. * Display Switch application will now use some settings from 'Advanced' dialog in 'Simple' mode. * Fixed display hotplug failing on initial lock screen with Active Directory logon. * Fixed screen corruption with DPMS and enabled composite manager. * Fixed screen flickering in some cases when "Force NumLock On" (x.global.forcenumlock) is active. * Fixed Display Switch utility not starting with some translations. * Fixed an issue with the noDDC mode which was not always working as expected. * Fixed wrongly detected embedded DisplayPort on Dell Wyse 5070 Extended hardware. * Added the possibility to change an embedded DisplayPort to a normal DisplayPort. +------------+-----------------------------------------------------------------+ |Parameter |`Use embedded displayport as normal displayport (reboot required).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.edp_is_dp` | +------------+-----------------------------------------------------------------+ |Range | [default][enable][disable] | +------------+-----------------------------------------------------------------+ |Value |**default** (default) | +------------+-----------------------------------------------------------------+ * Fixed some multimonitor (>4) issues with Nvidia graphic cards. * Fixed monitor screen ID shown with Nvidia nvs810 GPU. * Added consideration of hardware limits for choosing automatic resolution in Xorg config (currently only for IGEL hardware). * Fixed problem with modesetting driver and two 2160x1440 monitors in extended configuration. * Added new registry key to enable use of linear framebuffer for modesetting driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use linear instead of tiled framebuffer.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.modesetting.use_linear_framebuffer` | +------------+-----------------------------------------------------------------+ | Range | [Default] [False] [True] | +------------+-----------------------------------------------------------------+ | Value | **Default** (use linear framebuffer only in special cases) | +------------+-----------------------------------------------------------------+ * Fixed configuration where old Display Switch took precedence over configuration from new Display Switch and preventing changes. ### X Server * Fixed issue with primary / secondary screens were switched in some cases. ### Audio * Fixed bad quality sound over DisplayPort in a Citrix ICA session or other applications using ALSA API. * Fixed jack detection of the headphone port in Dell Wyse 3040. * Fixed configuration of default audio output and input. ### Media Player (Parole) * Fixed a problem where parole media player would hang instead of playing audio while audio-visualization is enabled. * Fixed parole media player not handling audio hotkeys in fullscreen mode. ### Misc * Monitoring Agent uses now only the half size of the debuglog partition. When the setup option log_max_size with the option log_rotation creates an overall consumption that is bigger than 50% of the debuglog partition size, then the size for each log automatically will be decreased to a value that allows a full rotation that occupies exactly 50% of the partition size. ### Hardware * Fixed non working network on Beckhoff CB3163, CB6263 and CB6363 systems. * Fixed non working network on Lex 3I380D. * Fixed shutdown issue of Lenovo ThinkCentre M73 (rebooted 2 - 3 seconds after power off) * Added possibility to change some drm settings and limit the DisplayPort lane bandwidth on Intel devices. * Added new registry keys: +------------+-----------------------------------------------------------------+ |Parameter |`Use best graphic mode for all screens on console.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.best_console_mode` | +------------+-----------------------------------------------------------------+ |Range | [Default][Enabled][Disabled] | +------------+-----------------------------------------------------------------+ |Value |**Default** (Enabled in most cases cases) | +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum console resolution width to this value (0 means default setting).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.max_console_width` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**0** (use default setting) | +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum console resolution height to this value (0 means default setting).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.max_console_height` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**0** (use default setting) | +------------+-----------------------------------------------------------------+ |Parameter |`Set graphic kernel driver debug level (warning log will grow very fast).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.debug_level` | +------------+-----------------------------------------------------------------+ |Range | [No debug][Basic][Basic + core][Basic + core + atomic][Full] | +------------+-----------------------------------------------------------------+ |Value |**No debug** | +------------+-----------------------------------------------------------------+ * Only for Intel i915 driver: +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum DisplayPort lane link rate.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.max_dp_link_rate` | +------------+-----------------------------------------------------------------+ |Range | [default][1.62Gbps][2.16Gbps][2.7Gbps][3.24Gbps][4.32Gbps] | | | [5.4Gbps][6.48Gbps][8.1Gbps] | +------------+-----------------------------------------------------------------+ |Value |**default** (means hardware default limit) | +------------+-----------------------------------------------------------------+ |Parameter |`Disable the DP audio support in the i915 DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.disable_dp_audio` | +------------+-----------------------------------------------------------------+ |Range | [Default][No][Yes] | +------------+-----------------------------------------------------------------+ |Value |**Default** (support is enabled) | +------------+-----------------------------------------------------------------+ |Parameter |`Disable the HDMI audio support in the i915 DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.disable_hdmi_audio` | +------------+-----------------------------------------------------------------+ |Range | [Default][No][Yes] | +------------+-----------------------------------------------------------------+ |Value |**Default** (support is enabled) | +------------+-----------------------------------------------------------------+ * Fixed black screen issue with some monitors and 2560x1440 resolution - occured on UD2 LX50 and other Intel GPUs. * Fixed detection of Dell Wyse 5070 for the non extended version. * Fixed issues with non working Touchpad and Trackpoint on Lenovo laptops. * Fixed vanishing mouse cursor on Ryzen 3 devices. * Fixed problems with 2 or more monitors on a DisplayLink adapter. * Added possibility to use AMDGPU PRO driver instead of the kernel integrated driver. * Ryzen 3 devices (1200, 1300X, 2200G, 2200U and 2300U) will use the AMDGPU PRO driver if registry key x.drivers.amdgpu.use_amdgpu_pro is set to auto (default). * New registry key (settings to this key will only work after reboot): +------------+-----------------------------------------------------------------+ | Parameter | `Use AMDGPU PRO driver.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.amdgpu.use_amdgpu_pro` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [True] [False] | +------------+-----------------------------------------------------------------+ | Value | **Auto** | +------------+-----------------------------------------------------------------+ ### Remote Management * When TC is managed over ICG, settings received in the connection stage does not apply immediately. The settings must be applied after user prompt dialog. * Fixed UMS synchronization of configuration changes made in "Emergency mode". * Fixed sporadically failures while sending data over ICG. * Fixed wallpaper configuration if ICG protocol is used. * Fixed releasing from UMS when the device was offline during removal from UMS. * Added: The endpoint can now report up to 8 monitors in UMS information. * Fixed UMS jobs have not been executed when delivered at next system boot.