IGEL OS 11 ========== Firmware version 11.03.500 Release date 2020-04-01 Last update of this document 2020-04-01 [> IGEL Release Notes](https://kb.igel.com/igelos11/releasenotes) Supported Devices ------------------------------------------------------------------------------- UD2-LX 51, UD2-LX 50, UD2-LX 40 UD3-LX 60, UD3-LX 51, UD3-LX 50 UD5-LX 50 UD6-LX 51 UD7-LX 11, UD7-LX 10 UD9-LX Touch 41, UD9-LX 40 [> Supported IGEL OS 11 thirdparty devices](https://kb.igel.com/os11-supported-hardware) Component Versions ------------------------------------------------------------------------------- +-------------------------------------------+----------------------------------+ | Clients | | +===========================================+==================================+ | Cisco JVDI Client | 12.7.1 | +-------------------------------------------+----------------------------------+ | Citrix HDX Realtime Media Engine | 2.8.0-2235 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 18.10.0.11 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 19.10.0.15 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 19.12.0.19 | +-------------------------------------------+----------------------------------+ | deviceTRUST Citrix Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | Crossmatch DP Citrix Channel | 0515.2 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.0.1.0.20170219.2-_dev_-34574 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.5_x64_20190619_12.5.1.40008 | +-------------------------------------------+----------------------------------+ | Evidian AuthMgr | 1.5.7116 | +-------------------------------------------+----------------------------------+ | Evince PDF Viewer | 3.18.2-1ubuntu4.6 | +-------------------------------------------+----------------------------------+ | FabulaTech USB for Remote Desktop | 5.2.29 | +-------------------------------------------+----------------------------------+ | Firefox | 68.6.0 | +-------------------------------------------+----------------------------------+ | IBM iAccess Client Solutions | 1.1.8.1 | +-------------------------------------------+----------------------------------+ | IGEL RDP Client | 2.2 | +-------------------------------------------+----------------------------------+ | IGEL WVD Client | 1.0.5 | +-------------------------------------------+----------------------------------+ | Imprivata OneSign ProveID Embedded | onesign-bootstrap-loader_1.0.523630_amd64 | +-------------------------------------------+----------------------------------+ | deviceTRUST RDP Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | NCP Secure Enterprise Client | 5.10_rev40552 | +-------------------------------------------+----------------------------------+ | NX Client | 6.7.6 | +-------------------------------------------+----------------------------------+ | Open VPN | 2.3.10-1ubuntu2.2 | +-------------------------------------------+----------------------------------+ | Zulu JRE | 8.44.0.11 | +-------------------------------------------+----------------------------------+ | Parallels Client (64 bit) | 17.0.21474 | +-------------------------------------------+----------------------------------+ | Spice GTK (Red Hat Virtualization) | 0.37-1igel62 | +-------------------------------------------+----------------------------------+ | Remote Viewer (Red Hat Virtualization) | 8.0-1igel49 | +-------------------------------------------+----------------------------------+ | Usbredir (Red Hat Virtualization) | 0.8.0-1+b1igel71 | +-------------------------------------------+----------------------------------+ | Teradici PCoIP Software Client | 19.05.9-18.04 | +-------------------------------------------+----------------------------------+ | ThinLinc Client | 4.10.1-6197 | +-------------------------------------------+----------------------------------+ | ThinPrint Client | 7.5.88 | +-------------------------------------------+----------------------------------+ | Totem Media Player | 2.30.2 | +-------------------------------------------+----------------------------------+ | Parole Media Player | 1.0.5-1igel1583919770 | +-------------------------------------------+----------------------------------+ | VNC Viewer | 1.9.0+dfsg-3igel8 | +-------------------------------------------+----------------------------------+ | VMware Horizon client | 5.3.0-15208949 | +-------------------------------------------+----------------------------------+ | Voip Client Ekiga | 4.0.1 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Dictation | | +===========================================+==================================+ | Diktamen driver for dictation | | +-------------------------------------------+----------------------------------+ | Grundig Business Systems dictation driver | | +-------------------------------------------+----------------------------------+ | Nuance Audio Extensions for dictation | B301 | +-------------------------------------------+----------------------------------+ | Olympus driver for dictation | 20180621 | +-------------------------------------------+----------------------------------+ | Philips Speech driver | 12.8.5 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Signature | | +===========================================+==================================+ | Kofax SPVC Citrix Channel | 3.1.41.0 | +-------------------------------------------+----------------------------------+ | signotec Citrix Channel | 8.0.8 | +-------------------------------------------+----------------------------------+ | signotec VCOM Daemon | 2.0.0 | +-------------------------------------------+----------------------------------+ | StepOver TCP Client | 2.3.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Smartcard | | +===========================================+==================================+ | PKCS#11 Library A.E.T. SafeSign | 3.0.101 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Athena IDProtect | 7 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library cryptovision sc/interface | 7.1.20 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Gemalto SafeNet | 10.7.77 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library OpenSC | 0.19.0-2igel35 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library SecMaker NetID | 6.8.1.31 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library 90meter | 20190522 | +-------------------------------------------+----------------------------------+ | Reader Driver ACS CCID | 1.1.6-1igel2 | +-------------------------------------------+----------------------------------+ | Reader Driver Gemalto eToken | 10.7.77 | +-------------------------------------------+----------------------------------+ | Reader Driver HID Global Omnikey | 4.3.3 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive CCID | 5.0.35 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive eHealth200 | 1.0.5 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive SCRKBC | 5.0.24 | +-------------------------------------------+----------------------------------+ | Reader Driver MUSCLE CCID | 1.4.31-1igel10 | +-------------------------------------------+----------------------------------+ | Reader Driver REINER SCT cyberJack | 3.99.5final.sp13igel15 | +-------------------------------------------+----------------------------------+ | Resource Manager PC/SC Lite | 1.8.23-1igel11 | +-------------------------------------------+----------------------------------+ | Cherry USB2LAN Proxy | 3.2.0.3 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | System Components | | +===========================================+==================================+ | OpenSSL | 1.0.2g-1ubuntu4.15 | +-------------------------------------------+----------------------------------+ | OpenSSH Client | 7.2p2-4ubuntu2.8 | +-------------------------------------------+----------------------------------+ | OpenSSH Server | 7.2p2-4ubuntu2.8 | +-------------------------------------------+----------------------------------+ | Bluetooth Stack (bluez) | 5.50-0ubuntu1igel5 | +-------------------------------------------+----------------------------------+ | MESA OpenGL Stack | 19.2.5-1igel93 | +-------------------------------------------+----------------------------------+ | VAAPI ABI Version | 0.40 | +-------------------------------------------+----------------------------------+ | VDPAU Library Version | 1.2-1igel911 | +-------------------------------------------+----------------------------------+ | Graphics Driver INTEL | 2.99.917+git20191117-igel939 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/RADEON | 19.0.1-3igel936 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/AMDGPU | 19.0.1-5igel924 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nouveau (Nvidia Legacy) | 1.0.16-1igel867 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nvidia | 418.56-0ubuntu1 | +-------------------------------------------+----------------------------------+ | Graphics Driver Vboxvideo | 1.0.0-igel798 | +-------------------------------------------+----------------------------------+ | Graphics Driver VMware | 13.3.0-2igel857 | +-------------------------------------------+----------------------------------+ | Graphics Driver QXL (Spice) | 0.1.5-2build2-igel925 | +-------------------------------------------+----------------------------------+ | Graphics Driver FBDEV | 0.5.0-1igel819 | +-------------------------------------------+----------------------------------+ | Graphics Driver VESA | 2.4.0-1igel855 | +-------------------------------------------+----------------------------------+ | Input Driver Evdev | 2.10.6-1igel975 | +-------------------------------------------+----------------------------------+ | Input Driver Elographics | 1.4.1-1build5igel633 | +-------------------------------------------+----------------------------------+ | Input Driver eGalax | 2.5.7413 | +-------------------------------------------+----------------------------------+ | Input Driver Synaptics | 1.9.1-1ubuntu1igel866 | +-------------------------------------------+----------------------------------+ | Input Driver VMMouse | 13.1.0-1ubuntu2igel635 | +-------------------------------------------+----------------------------------+ | Input Driver Wacom | 0.36.1-0ubuntu2igel888 | +-------------------------------------------+----------------------------------+ | Kernel | 4.19.85 #mainline-lxos-r2875 | +-------------------------------------------+----------------------------------+ | Xorg X11 Server | 1.20.5-1igel914 | +-------------------------------------------+----------------------------------+ | Xorg Xephyr | 1.20.5-1igel914 | +-------------------------------------------+----------------------------------+ | CUPS Printing Daemon | 2.1.3-4ubuntu0.10igel29 | +-------------------------------------------+----------------------------------+ | PrinterLogic | 25.1.0.381 | +-------------------------------------------+----------------------------------+ | Lightdm Graphical Login Manager | 1.18.3-0ubuntu1.1 | +-------------------------------------------+----------------------------------+ | XFCE4 Window Manager | 4.12.3-1ubuntu2igel675 | +-------------------------------------------+----------------------------------+ | ISC DHCP Client | 4.3.3-5ubuntu12.10igel7 | +-------------------------------------------+----------------------------------+ | NetworkManager | 1.2.6-0ubuntu0.16.04.3igel74 | +-------------------------------------------+----------------------------------+ | ModemManager | 1.10.0-1~ubuntu18.04.2igel3 | +-------------------------------------------+----------------------------------+ | GStreamer 0.10 | 0.10.36-2ubuntu0.2 | +-------------------------------------------+----------------------------------+ | GStreamer 1.x | 1.16.1-1igel222 | +-------------------------------------------+----------------------------------+ | WebKit2Gtk | 2.26.2-1igel27 | +-------------------------------------------+----------------------------------+ | Python2 | 2.7.12 | +-------------------------------------------+----------------------------------+ | Python3 | 3.5.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited IGEL Support | | +===========================================+==================================+ | Mobile Device Access USB (MTP) | 1.1.16-2igel1 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (imobile) | 1.2.1~git20191129.9f79242-1igel7 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (gphoto) | 2.5.23-2igel2 | +-------------------------------------------+----------------------------------+ | VPN OpenConnect | 7.08-1 | +-------------------------------------------+----------------------------------+ | Scanner support | 1.0.27-1 | +-------------------------------------------+----------------------------------+ | VirtualBox | 6.0.14-dfsg-1igel33 | +-------------------------------------------+----------------------------------+ General Information -------------------------------------------------------------------------------- ### CAUTION: * Firmware downgrade to older versions (11.01 or 11.02) is not possible, due to the unsigned firmware update files. ### The following clients and features are not supported anymore * Caradigm * Citrix Legacy Sessions * Citrix Web Interface * Citrix StoreFront Legacy * Citrix HDX Flash Redirection * Citrix XenDesktop Appliance Mode * Flash Player Download * JAVA Web Start * Leostream Java Connect * Systancia AppliDis * VIA graphics driver Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to 68.6.0 ESR: - Fixes for mfsa2020-09, also known as: CVE-2020-6805, CVE-2020-6806, CVE-2020-6807, CVE-2020-6811, CVE-2019-20503, CVE-2020-6812, CVE-2020-6814 - Fix for mfsa2020-03, also known as CVE-2019-17026. - Fixes for mfsa2020-02, also known as: CVE-2019-17016, CVE-2019-17017, CVE-2019-17022, CVE-2019-17024. - Fixes for mfsa2019-37, also known as: CVE-2019-17008, CVE-2019-11745, CVE-2019-17010, CVE-2019-17005, CVE-2019-17011, CVE-2019-17012. ### Base system * Fixed libxml2 security issues CVE-2020-7595 and CVE-2019-19956. * Fixed nss security issues CVE-2019-17007, CVE-2019-17006 and CVE-2019-11745. * Fixed libvncserver security issue CVE-2019-15681. * Fixed libexif security issues CVE-2019-9278, CVE-2017-7544 and CVE-2016-6328. * Fixed cyrus-sasl2 security issue CVE-2019-19906. * Fixed samba security issues CVE-2019-14907, CVE-2019-14870 and CVE-2019-14861. * Fixed zulu security issues CVE-2020-2583, CVE-2020-2590, CVE-2020-2593, CVE-2020-2601, CVE-2020-2604, CVE-2020-2659 and CVE-2020-2654. Known Issues -------------------------------------------------------------------------------- ### Firmware Update * On devices with 2 GB of flash storage it could happen that there is too less space for updating all features. In this case a corresponding error message occurs and unused features must be disabled in IGEL Setup under System > Firmware Customization > Features to perform the firmware update. ### Firefox * Firefox IGEL extensions are not updated automatically under some circumstances. After an update from 11.03.10x to 11.03.500 the IGEL extensions will stay on the old version. In this case, the following settings concerning kiosk mode cannot be executed: - Switch off Hotkey for new window/tab - Blocking of internal browser pages like preferences, file picker, specific local directories As a workaround: - a reset to defaults should be performed - or the browser's mimetype template can be switched from "Standard" to "Minimal" by registry key browserglobal.app.mimetypes_template. There the browser profile is renewed as well. After the TC got the new setting, reboot and set the mimetypes_template registry key back to "Standard". ### Citrix * With activated DRI3 and an AMD GPU Citrix H.264 acceleration plugin could freeze. Selective H.264 mode (API v2) is not affected from this issue. * Citrix has known issues with GStreamer1.0 which describe problems with multimedia redirection of H.264, MPEG1 and MPEG2. GStreamer1.0 is used if browser content redirection is active. * Browser content redirection does not work with activated DRI3 and hardware accelerated H.264 deep compression codec. * Citrix StoreFront login with Gemalto smartcard middleware does not detect smartcard correctly if the card is inserted after start of login. As a workaround, insert the smartcard before starting the StoreFront login. * Citrix H.264 acceleration plugin does not work with **enabled** server policy "Optimize for 3D graphics workload" in combination with server policy "Use video codec compression" -> *"For the entire screen"**. * To launch multiple desktop sessions with Citrix HDX RTME and Citrix H.264 acceleration plugin the following registry key must be enabled: +------------+-----------------------------------------------------------------+ |Parameter |`Activate workaround for dual RTME sessions and H264 acceleration` | +------------+-----------------------------------------------------------------+ |Registry |`ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ |Range | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * This workaround is not applicable when "Enable Secure ICA" is active for the specific delivery group. * Using CWA 19.x sometimes freezes the session while session logoff from a published desktop. Workaround: Use CWA 18.10.0. ### VMware Horizon * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, when using USB redirection for storage devices: The USB on-insertion feature is only working when the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. - On the other hand, when using drive mapping instead, it is recommended to either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. Furthermore Horizon Client relies on the OS to mount the storage devices itself. Enable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. * External drives mounted already before connection do not appear in the remote desktop. Workaround: map the directory /media as a drive. Then the external devices will show up inside the media drive. * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview cannot be resized anymore. * Seamless application windows in Horizon Client may not be displayed correctly. When starting the first seamless app a new iconified window appears in the taskbar and only if you click on it the application will show up. On some hardware (UD7-H850, UD2-M250, UD2-D220) however, the client aborts when this new window is de-iconified. ### Imprivata * On devices with 2 GB of flash storage it could happen that there is too less space to enable the Imprivata partition after the update to 11.03.500. In this case a corresponding error message occurs and unused features must be disabled (in IGEL Setup under System > Firmware Customization > Features). Imprivata has to be (re-)enabled after a reboot then. ### WiFi * TP-Link Archer T2UH WiFi adapters does not work after system suspend/resume. Workaround: Disable system suspend at IGEL Setup > System > Power Options > Shutdown. ### Parallels Client * Native USB redirection does not work with Parallels Client. ### Smartcard * In seldom cases the authentication hung when using A.E.T. SafeSign smartcards. ### Appliance Mode * Appliance mode RHEV/Spice: spice-xpi firefox plugin is no longer supported. The "Console Invocation" has to allow 'Native' client (auto is also possible) and should be started in fullscreen to prevent any opening windows. ### Multimedia * Multimedia redirection with GStreamer could fail with the Nouveau GPU driver ### Hyper-V * Hyper-V (Generation 2) needs a lot of memory. The machine needs a sufficient amount of memory allocated. ### VirtualBox * The current VirtualBox Guest Tools/Drivers will not work with VirtualBox 5.2.x or older hosts which leads to black screen and non working graphic. Workaround: Install with 'Failsafe Installation + Recovery' and set **x.drivers.force_vesa** registry key to true. * When running in VirtualBox virtualization, resizing the window will not automatically change desktop resolution of IGEL OS guest. ### Audio * Audio jack detection on Advantec POC-W243L doesn't work. Sound output goes through the headset connection and the internal speakers. * IGEL UD2 (D220) fails to restore the volume level of the speaker when the device used firmware version 11.01.110 before. ### Hardware * HP t730 could freeze when monitors with different resolutions are connected (1920x1200 + 2560x1440 + 3840x1600 for example). When this occors, the registry key **x.drivers.kms.best_console_mode** has to be set to **disabled**. * Some newer Delock 62599 active DisplayPort to DVI (4k) adapters only work with INTEL devices. ### Remote Management * AIT feature with IGEL Starter License is supported by the next UMS version 6.05.100. New Features -------------------------------------------------------------------------------- ### Citrix * Integrated **Citrix Workspace app 19.12** * Available Citrix Workspace apps in this release: 19.12(default), 19.10 and 18.10 * New registry keys: * Added a registry key to enable a fullscreen banner "Citrix Desktop Viewer" when starting Desktop or Application session. +------------+-----------------------------------------------------------------+ |Parameter |`Show Citrix Desktop Viewer screen` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.cdviewerscreen` | +------------+-----------------------------------------------------------------+ |Value |**off** (default)/on | +------------+-----------------------------------------------------------------+ * Added a registry key to enable usage of Chromium Embedded Framework (CEF) for Browser Content Redirection (BCR) [Experimental]. +------------+-----------------------------------------------------------------+ |Parameter |`Use Chromium Embedded Framework (CEF)` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.usecefbrowser` | +------------+-----------------------------------------------------------------+ |Value |**factory default is "\**"* (default)/false/true | +------------+-----------------------------------------------------------------+ * "factory default" impact can be set by config file. * Changed default: +------------+-----------------------------------------------------------------+ |Parameter |`VDTUI protocol` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.virtualdriver.vdtui.enable` | +------------+-----------------------------------------------------------------+ |Value |off/**on** (default) | +------------+-----------------------------------------------------------------+ ### WVD * Integrated Igel WVD Client. ### VMware Horizon * Updated VMware Horizon Client to version 5.3.0 ### ThinLinc * Updated ThinLinc Client to version 4.11.0. ### Smartcard * Updated Gemalto / Safenet smartcard middleware to version 10.7.7. * Added support for smartcard reader HP Business Slim Smartcard CCID Keyboard. * Added configuration parameter to disable PIN pad functionality of smartcard readers, driven by Open Source CCID driver. This might work solve problems with PIN pads, but lowers security level. +------------+-----------------------------------------------------------------+ |Parameter |`Disable PIN pad` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.ccid.disable_pinpad` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ * Added possibility to add custom CCID smart card readers to Open Source CCID driver. Readers can be specified by USB Vendor, Product Id and custom name: +------------+-----------------------------------------------------------------+ |Parameter |`USB Vendor Id` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.ccid.custom_reader.vid` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`USB Product Id` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.ccid.custom_reader.pid` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Reader name` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.ccid.custom_reader.name` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ * Updated Athena IDProtect library to version 7. This version supports CRYPTAS TicTok V3 cards. Known issue: detection of locked PIN does not work. ### CUPS Printing * Added CUPS Printer port "USB class printer". The USB printer in this case is assigned by matching patterns of USB Manufacturer and Product name strings. In this way, a single printer definition could work for a class of different USB printer models. +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Printer > CUPS > Printers` | +------------+-----------------------------------------------------------------+ |Parameter |`Printer port` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.backend` | +------------+-----------------------------------------------------------------+ |Value |`USB class printer` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Printer > CUPS > Printers` | +------------+-----------------------------------------------------------------+ |Parameter |`Pattern matching mode` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.usbclass_mode` | +------------+-----------------------------------------------------------------+ |Value |pattern / pattern, case insensitive / regular expression | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Printer > CUPS > Printers` | +------------+-----------------------------------------------------------------+ |Parameter |`Manufacturer pattern` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.usbclass_manufacturer` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Printer > CUPS > Printers` | +------------+-----------------------------------------------------------------+ |Parameter |`Product pattern` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.product` | +------------+-----------------------------------------------------------------+ * Updated PrinterLogic Printer-Installer-Client to version 25.1.0.381. Fixed tray icon functionality. ### Cisco JVDI Client * Integrated Cisco JVDI 12.7.1 client. Cisco JVDI 12.7.0 has been removed. ### Base system * Added Starter License functionality. This license is now part of every new IGEL OS installation and is valid for 30 days. The license will be activated with the first boot after the initial installation. More and detailed information via https://kb.igel.com/licensing. * Added 'Licensing' tool to 'System' in local Start menu. Disable the tool by key: +------------+-----------------------------------------------------------------+ |IGEL Setup |`Accessories > License Browser` | +------------+-----------------------------------------------------------------+ |Parameter |`Start Menu's System tab` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.license_browser0.startmenu_system` | +------------+-----------------------------------------------------------------+ |Value | **enabled** / disabled | +------------+-----------------------------------------------------------------+ * If there's only the Starter License and no UMS connection the Licensing tool is shown on the desktop by default. * Added feature Custom Partition to Workspace Edition license. * Updated Fluendo multimedia codecs to the following versions:ÿ gst-fluendo- vadec - 30/01/2020 0.10.212 * Kerberos Logon: You can now turn on/off numlock and/or capslock for password input. Registry keys +------------+-----------------------------------------------------------------+ |Parameter |`Handling of numlock` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.xlock0.options.numlock_approach` | +------------+-----------------------------------------------------------------+ |Range |[**don't change** (default)][set on][set off] | +------------+-----------------------------------------------------------------+ > "set on": force numlock on when password is entered > "set off": force numlock off when password is entered +------------+-----------------------------------------------------------------+ |Parameter |`Handling of capslock` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.xlock0.options.capslock_approach` | +------------+-----------------------------------------------------------------+ |Range |[**don't change** (default)][set on][set off] | +------------+-----------------------------------------------------------------+ > "set on": force capslock on when password is entered > "set off": force capslock off when password is entered * Added configuration for special thinkpad keyboard model: +------------+-----------------------------------------------------------------+ |IGEL Setup |`User Interface > Input > Keyboard` | +------------+-----------------------------------------------------------------+ |Parameter |`Keyboard type` | +------------+-----------------------------------------------------------------+ |Registry |`userinterface.keyboard.type` | +------------+-----------------------------------------------------------------+ |Range |[**Default**][Standard PC Keyboard (105 Keys)] | | |[IBM Keyboard (122 Keys)][Trimodal Keyboard][Sun Type 6 Keyboard]| | |[Chromebook][Macbook][Macbook international][Thinkpad] | +------------+-----------------------------------------------------------------+ ### WiFi * Added driver for Realtek 8822ce and 8822be WiFi hardware. * Added driver for Realtek 8821cu WiFI hardware. ### Driver * Updated Crossmatch DP driver for fingerprint. The new version allows the fingerprint image to be sent via the Citrix channel. With this change customers will be able to develop their own SW using the Crossmatch DP SDK. ### Misc * Updated Login PI 3.6 to the new Login Enterprise 4.0. Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Fixed video playback on BBC websites redirected via Citrix Browser Content Redirection. * Fixed **Multimedia redirection** and **HDX RealTime Media Engine** may used concurrently. ### OSC Installer * Fixed issue with failed partitioning. ### RDP/IGEL RDP Client 2 * Added a new parameter to control audio latency (in milliseconds) which defines amount of buffered audio data in the RDP client. +------------+-----------------------------------------------------------------+ | Registry | `rdp.winconnect.sound-latency` | +------------+-----------------------------------------------------------------+ | Value | **125** (default) (msec) | +------------+-----------------------------------------------------------------+ ### WVD * Improved overall sound quality. * Fixed issue caused audio redirection to fail randomly. * Clipboard redirection has potential privacy and security risks and is therefore disabled by default. * Fixed dead key support (key composition). * Fixed sound getting choppy after a while. * Several bugfixes for all kind of stability issues. ### VMware Horizon * Fixed:ÿ Save VMWare Horizon user from last login when in appliance mode Reduced the options for "Preset login information" to either "from last login" or "from session setup". The redundant option "from appliance mode" is removed, because the appliance mode is also treated as a session. +------------+-----------------------------------------------------------------+ |IGEL Setup |`Sessions > Horizon Client > Horizon Client Global > Local Logon`| +------------+-----------------------------------------------------------------+ |Parameter |`Preset login information` | +------------+-----------------------------------------------------------------+ |Registry |`vmware.login.saveusertype` | +------------+-----------------------------------------------------------------+ |Range |[**Set user/domain from last login** (default)] | | |[Set user/domain from session setup] | +------------+-----------------------------------------------------------------+ * Fixed Skype for business integration. ### Firefox * Fixed switching off firmware feature PrinterLogic removes browser policies file. * Fixed hiding the URL-Input results in disappearing webcontent. * Fixed browser startscript which was waiting for new window even when browser was not configured to open an extra one. ### Network * Use e1000e driver out-of-the-kernel as default instead of the thirdparty driver. ### WiFi * Fixed connection problems by updating the regulatory domain database * Improved persistence of WiFi switch state across reboots * Fixed problems with WiFi backports driver and older WiFi adapters or adapters with external kernel drivers. ### Open VPN * Fixed timing in OpenVPN credential dialogs to prevent focus loss when started too early at system boot. * Fixed session management, where VPN connections could get stuck when wrong passwords were entered with no possibility of retry. ### Imprivata * Hide the Imprivata session templates on the desktop as this is misleading ### Smartcard * Fixed smartcard reader VASCO/OneSpan Digipass 905. Disabled USB auto suspend for all smart card readers. * Added parameter to control the used smartcard protocol, when connecting with raw and other protocols allowed. Enable to read smartcards using NHS Identity Agent. +------------+-----------------------------------------------------------------+ |Parameter |`Avoid raw protocol` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.avoid_raw_protocol` | +------------+-----------------------------------------------------------------+ |Value |**false** (default) / true | +------------+-----------------------------------------------------------------+ * Fixed use of IDPrime smartcards inside sessions with readers driven by Open Source CCID smart card reader driver: implemented attribute SCARD_ATTR_CHANNEL_ID. * Added parameter to delay smartcard insertion events (in milliseconds). This solves issues reading smartcards within the Citrix Workspace App. Issue occured when inserting the card after already started StoreFront login. +------------+-----------------------------------------------------------------+ |Parameter |`Delay smart card insertion event time` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.card_insert_event_delay` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ ### Base system * Fixed NTP sync problem with some Windows Timeservers. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `NTP max allowed distance` | +------------+-----------------------------------------------------------------+ | Tooltip | `Set this to a larger value can help to synchronize with unreliable NTP servers` | +------------+-----------------------------------------------------------------+ | Registry | `system.time.ntp_max_distance` | +------------+-----------------------------------------------------------------+ | Type | `Integer` | +------------+-----------------------------------------------------------------+ | Value | **16** (new default 16 seconds instead of 3 before) | +------------+-----------------------------------------------------------------+ * Added _diag kernel modules needed by Stratusphere IPS. * Fixed Next button usage in Setup Assistant while registering for evaluation license. * Fixed issue with mounting USB devices in Licensing tool. * If used as master image the image will expand itself to full size (limited to 16 GiB) on flash. This is done only on first boot and never again. * Possible rollout of initial settings, certificates or licenses, placed on first partition. The necessary steps are - Writing image to USB or Flash medium - Mount or simply access the 1. VFAT partition which is present (should be empty) - Copying the modified setup.ini and/or **.lic files to the 1st partition (no directories) - For copying certificates, a ca-certs directory must be created where the desired certificates can be inserted. These will be copied to the /wfs/ca-certs directory on first boot. - The USB/Flash medium can be copied several times as needed - With the initial boot, the device will reboot out of the splash screen (re-read changed partition table) - The settings, certificates and/or licenses will be deployed and also deleted from the 1st partition. ### Firmware update * Improve download speed for sftp update sources. ### Appliance Mode * Fixed RHEV/Spice appliance mode. ### X11 system * Fixed displays not being automatically set up on boot. ### Media Player (Parole) * Fixed handling of player latency (stream buffering). ### Hardware * Fixed non working Prolific PL2303 USB to serial adapters. * Fixed non working keyboard and touchpad on Microsoft Surface 3 Laptop. ### IGEL Cloud Gateway * Handle UMS jobs intended to be executed on the next boot. This feature requires UMS 6.05.100 or later.