IGEL OS 11 ========== Firmware version 11.03.580 Release date 2020-06-05 Last update of this document 2020-06-05 [> IGEL Release Notes](https://kb.igel.com/igelos11/releasenotes) Supported Devices ------------------------------------------------------------------------------- UD2-LX 51, UD2-LX 50, UD2-LX 40 UD3-LX 60, UD3-LX 51, UD3-LX 50 UD5-LX 50 UD6-LX 51 UD7-LX 11, UD7-LX 10 UD9-LX Touch 41, UD9-LX 40 [> Supported IGEL OS 11 thirdparty devices](https://kb.igel.com/os11-supported-hardware) Component Versions ------------------------------------------------------------------------------- +-------------------------------------------+----------------------------------+ | Clients | | +===========================================+==================================+ | Cisco JVDI Client | 12.7.1 | +-------------------------------------------+----------------------------------+ | Citrix HDX Realtime Media Engine | 2.9.0-2330 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 18.10.0.11 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 19.10.0.15 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 20.04.0.21 | +-------------------------------------------+----------------------------------+ | deviceTRUST Citrix Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | Crossmatch DP Citrix Channel | 0515.2 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.0.1.0.20170219.2-_dev_-34574 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.5_x64_20190619_12.5.1.40008 | +-------------------------------------------+----------------------------------+ | Evidian AuthMgr | 1.5.7116 | +-------------------------------------------+----------------------------------+ | Evince PDF Viewer | 3.18.2-1ubuntu4.6 | +-------------------------------------------+----------------------------------+ | FabulaTech USB for Remote Desktop | 5.2.29 | +-------------------------------------------+----------------------------------+ | Firefox | 68.9.0 | +-------------------------------------------+----------------------------------+ | IBM iAccess Client Solutions | 1.1.8.1 | +-------------------------------------------+----------------------------------+ | IGEL RDP Client | 2.2 | +-------------------------------------------+----------------------------------+ | IGEL WVD Client | 1.0.11 | +-------------------------------------------+----------------------------------+ | Imprivata OneSign ProveID Embedded | onesign-bootstrap-loader_1.0.523630_amd64 | +-------------------------------------------+----------------------------------+ | deviceTRUST RDP Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | NCP Secure Enterprise Client | 5.10_rev40552 | +-------------------------------------------+----------------------------------+ | NX Client | 6.7.6 | +-------------------------------------------+----------------------------------+ | Open VPN | 2.3.10-1ubuntu2.2 | +-------------------------------------------+----------------------------------+ | Zulu JRE | 8.44.0.11 | +-------------------------------------------+----------------------------------+ | Parallels Client (64 bit) | 17.0.21474 | +-------------------------------------------+----------------------------------+ | Spice GTK (Red Hat Virtualization) | 0.37-1igel62 | +-------------------------------------------+----------------------------------+ | Remote Viewer (Red Hat Virtualization) | 8.0-1igel49 | +-------------------------------------------+----------------------------------+ | Usbredir (Red Hat Virtualization) | 0.8.0-1+b1igel71 | +-------------------------------------------+----------------------------------+ | Teradici PCoIP Software Client | 19.05.9-18.04 | +-------------------------------------------+----------------------------------+ | ThinLinc Client | 4.10.1-6197 | +-------------------------------------------+----------------------------------+ | ThinPrint Client | 7.5.88 | +-------------------------------------------+----------------------------------+ | Totem Media Player | 2.30.2 | +-------------------------------------------+----------------------------------+ | Parole Media Player | 1.0.5-1igel1583919770 | +-------------------------------------------+----------------------------------+ | VNC Viewer | 1.9.0+dfsg-3igel8 | +-------------------------------------------+----------------------------------+ | VMware Horizon client | 5.4.1-15988340 | +-------------------------------------------+----------------------------------+ | Voip Client Ekiga | 4.0.1 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Dictation | | +===========================================+==================================+ | Diktamen driver for dictation | | +-------------------------------------------+----------------------------------+ | Grundig Business Systems dictation driver | | +-------------------------------------------+----------------------------------+ | Nuance Audio Extensions for dictation | B301 | +-------------------------------------------+----------------------------------+ | Olympus driver for dictation | 20200323 | +-------------------------------------------+----------------------------------+ | Philips Speech driver | 12.8.5 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Signature | | +===========================================+==================================+ | Kofax SPVC Citrix Channel | 3.1.41.0 | +-------------------------------------------+----------------------------------+ | signotec Citrix Channel | 8.0.8 | +-------------------------------------------+----------------------------------+ | signotec VCOM Daemon | 2.0.0 | +-------------------------------------------+----------------------------------+ | StepOver TCP Client | 2.3.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Smartcard | | +===========================================+==================================+ | PKCS#11 Library A.E.T. SafeSign | 3.0.101 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Athena IDProtect | 7 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library cryptovision sc/interface | 7.1.20 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Gemalto SafeNet | 10.7.77 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library OpenSC | 0.19.0-2igel35 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library SecMaker NetID | 6.8.1.31 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library 90meter | 20190522 | +-------------------------------------------+----------------------------------+ | Reader Driver ACS CCID | 1.1.6-1igel2 | +-------------------------------------------+----------------------------------+ | Reader Driver Gemalto eToken | 10.7.77 | +-------------------------------------------+----------------------------------+ | Reader Driver HID Global Omnikey | 4.3.3 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive CCID | 5.0.35 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive eHealth200 | 1.0.5 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive SCRKBC | 5.0.24 | +-------------------------------------------+----------------------------------+ | Reader Driver MUSCLE CCID | 1.4.31-1igel10 | +-------------------------------------------+----------------------------------+ | Reader Driver REINER SCT cyberJack | 3.99.5final.sp13igel15 | +-------------------------------------------+----------------------------------+ | Resource Manager PC/SC Lite | 1.8.23-1igel12 | +-------------------------------------------+----------------------------------+ | Cherry USB2LAN Proxy | 3.2.0.3 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | System Components | | +===========================================+==================================+ | OpenSSL | 1.0.2g-1ubuntu4.15 | +-------------------------------------------+----------------------------------+ | OpenSSH Client | 7.2p2-4ubuntu2.8 | +-------------------------------------------+----------------------------------+ | OpenSSH Server | 7.2p2-4ubuntu2.8 | +-------------------------------------------+----------------------------------+ | Bluetooth Stack (bluez) | 5.50-0ubuntu1igel5 | +-------------------------------------------+----------------------------------+ | MESA OpenGL Stack | 19.2.5-1igel93 | +-------------------------------------------+----------------------------------+ | VAAPI ABI Version | 0.40 | +-------------------------------------------+----------------------------------+ | VDPAU Library Version | 1.2-1igel911 | +-------------------------------------------+----------------------------------+ | Graphics Driver INTEL | 2.99.917+git20191117-igel939 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/RADEON | 19.0.1-3igel936 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/AMDGPU | 19.0.1-5igel924 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nouveau (Nvidia Legacy) | 1.0.16-1igel867 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nvidia | 418.56-0ubuntu1 | +-------------------------------------------+----------------------------------+ | Graphics Driver Vboxvideo | 1.0.0-igel798 | +-------------------------------------------+----------------------------------+ | Graphics Driver VMware | 13.3.0-2igel857 | +-------------------------------------------+----------------------------------+ | Graphics Driver QXL (Spice) | 0.1.5-2build2-igel925 | +-------------------------------------------+----------------------------------+ | Graphics Driver FBDEV | 0.5.0-1igel819 | +-------------------------------------------+----------------------------------+ | Graphics Driver VESA | 2.4.0-1igel855 | +-------------------------------------------+----------------------------------+ | Input Driver Evdev | 2.10.6-1igel975 | +-------------------------------------------+----------------------------------+ | Input Driver Elographics | 1.4.1-1build5igel633 | +-------------------------------------------+----------------------------------+ | Input Driver eGalax | 2.5.7413 | +-------------------------------------------+----------------------------------+ | Input Driver Synaptics | 1.9.1-1ubuntu1igel866 | +-------------------------------------------+----------------------------------+ | Input Driver VMMouse | 13.1.0-1ubuntu2igel635 | +-------------------------------------------+----------------------------------+ | Input Driver Wacom | 0.36.1-0ubuntu2igel888 | +-------------------------------------------+----------------------------------+ | Kernel | 4.19.85 #mainline-lxos-r2875 | +-------------------------------------------+----------------------------------+ | Xorg X11 Server | 1.20.5-1igel914 | +-------------------------------------------+----------------------------------+ | Xorg Xephyr | 1.20.5-1igel914 | +-------------------------------------------+----------------------------------+ | CUPS Printing Daemon | 2.1.3-4ubuntu0.10igel29 | +-------------------------------------------+----------------------------------+ | PrinterLogic | 25.1.0.397 | +-------------------------------------------+----------------------------------+ | Lightdm Graphical Login Manager | 1.18.3-0ubuntu1.1 | +-------------------------------------------+----------------------------------+ | XFCE4 Window Manager | 4.12.3-1ubuntu2igel675 | +-------------------------------------------+----------------------------------+ | ISC DHCP Client | 4.3.3-5ubuntu12.10igel7 | +-------------------------------------------+----------------------------------+ | NetworkManager | 1.2.6-0ubuntu0.16.04.3igel74 | +-------------------------------------------+----------------------------------+ | ModemManager | 1.10.0-1~ubuntu18.04.2igel3 | +-------------------------------------------+----------------------------------+ | GStreamer 0.10 | 0.10.36-2ubuntu0.2 | +-------------------------------------------+----------------------------------+ | GStreamer 1.x | 1.16.1-1igel222 | +-------------------------------------------+----------------------------------+ | WebKit2Gtk | 2.26.2-1igel27 | +-------------------------------------------+----------------------------------+ | Python2 | 2.7.12 | +-------------------------------------------+----------------------------------+ | Python3 | 3.5.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited IGEL Support | | +===========================================+==================================+ | Mobile Device Access USB (MTP) | 1.1.16-2igel1 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (imobile) | 1.2.1~git20191129.9f79242-1igel7 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (gphoto) | 2.5.23-2igel2 | +-------------------------------------------+----------------------------------+ | VPN OpenConnect | 7.08-1 | +-------------------------------------------+----------------------------------+ | Scanner support | 1.0.27-1 | +-------------------------------------------+----------------------------------+ | VirtualBox | 6.0.14-dfsg-1igel33 | +-------------------------------------------+----------------------------------+ General Information -------------------------------------------------------------------------------- ### CAUTION: * Firmware downgrade to older versions (11.01 or 11.02) is not possible, due to the unsigned firmware update files. ### The following clients and features are not supported anymore * Caradigm * Citrix Legacy Sessions * Citrix Web Interface * Citrix StoreFront Legacy * Citrix HDX Flash Redirection * Citrix XenDesktop Appliance Mode * Flash Player Download * JAVA Web Start * Leostream Java Connect * Systancia AppliDis * VIA graphics driver Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to 68.9.0esr: - Fixes for mfsa2020-11, also known as: CVE-2020-6819, CVE-2020-6820 - Fixes for mfsa2020-13, also known as: CVE-2020-6828, CVE-2020-6827, CVE-2020-6821, CVE-2020-6822, CVE-2020-6825 - Fixes for mfsa2020-17 also known as: CVE-2020-12387, CVE-2020-12388, CVE-2020-12389, CVE-2020-6831, CVE-2020-12392, CVE-2020-12393, CVE-2020-1239 - Fixes for mfsa2020-21 also known as: CVE-2020-12399, CVE-2020-12405, CVE-2020-12406, CVE-2020-12410 ### Base system * Updated AMD Microcode to version 3.20191218.1. * Updated Intel Microcode to version 20200520 and a special update for J1900 devices. Known Issues -------------------------------------------------------------------------------- ### Firmware Update * On devices with 2 GB of flash storage it could happen that there is too less space for updating all features. In this case a corresponding error message occurs and unused features must be disabled in IGEL Setup under System > Firmware Customization > Features to perform the firmware update. ### Firefox * Firefox IGEL extensions are not updated automatically under some circumstances. After an update from 11.03.10x to 11.03.500 the IGEL extensions will stay on the old version. In this case, the following settings concerning kiosk mode cannot be executed: - Switch off Hotkey for new window/tab - Blocking of internal browser pages like preferences, file picker, specific local directories As a workaround: - a reset to defaults should be performed - or the browser's mimetype template can be switched from "Standard" to "Minimal" by registry key browserglobal.app.mimetypes_template. There the browser profile is renewed as well. After the TC got the new setting, reboot and set the mimetypes_template registry key back to "Standard". ### Citrix * Citrix Workspace App 20.04 might fail to identify certain smart cards. As a result, attempts to launch a session with the card fail, and smartcards might not be usable in the session. Please use Workspace App 19.10 or earlier as a workaround. * With activated DRI3 and an AMD GPU Citrix H.264 acceleration plugin could freeze. Selective H.264 mode (API v2) is not affected from this issue. * Citrix has known issues with GStreamer1.0 which describe problems with multimedia redirection of H.264, MPEG1 and MPEG2. GStreamer1.0 is used if browser content redirection is active. * Browser content redirection does not work with activated DRI3 and hardware accelerated H.264 deep compression codec. * Citrix StoreFront login with Gemalto smartcard middleware does not detect smartcard correctly if the card is inserted after start of login. As a workaround, insert the smartcard before starting the StoreFront login. * Citrix H.264 acceleration plugin does not work with **enabled** server policy "Optimize for 3D graphics workload" in combination with server policy "Use video codec compression" -> *"For the entire screen"**. * To launch multiple desktop sessions with Citrix HDX RTME and Citrix H.264 acceleration plugin the following registry key must be enabled: +------------+-----------------------------------------------------------------+ |Parameter |`Activate workaround for dual RTME sessions and H264 acceleration` | +------------+-----------------------------------------------------------------+ |Registry |`ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ |Range | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * This workaround is not applicable when "Enable Secure ICA" is active for the specific delivery group. * Using CWA 19.x sometimes freezes the session while session logoff from a published desktop. Workaround: Use CWA 18.10.0. ### WVD * When an auto-reconnect happens in a WVD session and the access token is already expired, the reconnect hangs in the "Securing Gateway Connection" stage for some minutes before it times out and fails. MSFT is working on a fix for that, so a solution will be provided soon. * Although remote apps can be started and you can have multiple remote apps in one WVD session, we miss the UI to activate (give the focus) or to de-iconify applications at the moment. This is work in progress and will be supported soon. * When you run multiple sessions from a single WVD client instance, you cannot copy/paste things between these sessions at the moment. A fix is coming soon. ### VMware Horizon * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, when using USB redirection for storage devices: The USB on-insertion feature is only working when the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. - On the other hand, when using drive mapping instead, it is recommended to either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. Furthermore Horizon Client relies on the OS to mount the storage devices itself. Enable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. * External drives mounted already before connection do not appear in the remote desktop. Workaround: map the directory /media as a drive. Then the external devices will show up inside the media drive. * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview cannot be resized anymore. * Seamless application windows in Horizon Client may not be displayed correctly. When starting the first seamless app a new iconified window appears in the taskbar and only if you click on it the application will show up. On some hardware (UD7-H850, UD2-M250, UD2-D220) however, the client aborts when this new window is de-iconified. ### Imprivata * On devices with 2 GB of flash storage it could happen that there is too less space to enable the Imprivata partition after the update to 11.03.500. In this case a corresponding error message occurs and unused features must be disabled (in IGEL Setup under System > Firmware Customization > Features). Imprivata has to be (re-)enabled after a reboot then. ### WiFi * TP-Link Archer T2UH WiFi adapters does not work after system suspend/resume. Workaround: Disable system suspend at IGEL Setup > System > Power Options > Shutdown. ### Parallels Client * Native USB redirection does not work with Parallels Client. ### Smartcard * In seldom cases the authentication hung when using A.E.T. SafeSign smartcards. ### Appliance Mode * Appliance mode RHEV/Spice: spice-xpi firefox plugin is no longer supported. The "Console Invocation" has to allow 'Native' client (auto is also possible) and should be started in fullscreen to prevent any opening windows. ### Multimedia * Multimedia redirection with GStreamer could fail with the Nouveau GPU driver ### Hyper-V * Hyper-V (Generation 2) needs a lot of memory. The machine needs a sufficient amount of memory allocated. ### VirtualBox * The current VirtualBox Guest Tools/Drivers will not work with VirtualBox 5.2.x or older hosts which leads to black screen and non working graphic. Workaround: Install with 'Failsafe Installation + Recovery' and set **x.drivers.force_vesa** registry key to true. * When running in VirtualBox virtualization, resizing the window will not automatically change desktop resolution of IGEL OS guest. ### Audio * Audio jack detection on Advantec POC-W243L doesn't work. Sound output goes through the headset connection and the internal speakers. * IGEL UD2 (D220) fails to restore the volume level of the speaker when the device used firmware version 11.01.110 before. ### Hardware * HP t730 could freeze when monitors with different resolutions are connected (1920x1200 + 2560x1440 + 3840x1600 for example). When this occors, the registry key **x.drivers.kms.best_console_mode** has to be set to **disabled**. * Some newer Delock 62599 active DisplayPort to DVI (4k) adapters only work with INTEL devices. ### Remote Management * AIT feature with IGEL Starter License is supported by the next UMS version 6.05.100. --- Release Notes 11.03.580 (Based On 11.03.572) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### VMware Horizon * Added option to enable synchronization of lock modifiers +------------+-----------------------------------------------------------------+ |Parameter |`Sync lock modifiers num lock, caps lock and scroll lock` | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.enable-sync-numlock` | +------------+-----------------------------------------------------------------+ |Type |bool | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Fixed "Green artifacts" in Citrix sessions, when using hardware accelerated H.264 codec. ### WVD * Included latest RdCoreSDK library versions to ensure connectivity after 2020/06/15. * Potential login fix when HTML authentication is used. ### Base system * Fixed bug in folder generation of application launcher * Fixed TLS certificate verification problem of certificates signed by "USERTrust RSA CA" or "COMODO RSA CA". The problem could occur in clients like Citrix Workspace App and VMWare Horizon client. * Updated AMD Microcode to version 3.20191218.1. * Updated Intel Microcode to version 20200520 and special update for J1900 devices. * Updated time zone and daylight-saving time data to 2020 version. * Added userspace oom killer. ### Hardware * Added serial port driver for Exar UART PCIe card. ### VNC * Fixed: Shadowing notification is restricted to primary monitor and cannot be moved outside of the monitor's visible range. Release Notes 11.03.572 (Based On 11.03.570) -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### WVD * Session auto-reconnection is fully implemented now. Once a session gets disconnected due to network issues, the client tries to reconnect to the session. * Support ARMv2 and non-ARM (AzureResourceManager) deployments simultaneously * Fully support Chinese input method (and potentially most other input methods). * Fixed potential login issues. * Ctrl+MouseWheel zooms in/out of the workspace selection. Ctrl+MiddleMouseButton resets the zoom. * Fixed ARMv2-only deployments. Release Notes 11.03.570 (Based On 11.03.561) -------------------------------------------------------------------------------- Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to 68.8.0esr: - Fixes for mfsa2020-11, also known as: CVE-2020-6819, CVE-2020-6820 - Fixes for mfsa2020-13, also known as: CVE-2020-6828, CVE-2020-6827, CVE-2020-6821, CVE-2020-6822, CVE-2020-6825 - Fixes for mfsa2020-17 also known as: CVE-2020-12387, CVE-2020-12388, CVE-2020-12389, CVE-2020-6831, CVE-2020-12392, CVE-2020-12393, CVE-2020-1239 New Features -------------------------------------------------------------------------------- ### Citrix * Integrated Citrix HDX/RTME 2.9 ### VMware Horizon * Fixed handling of fullscreen span (over several screens) via RDP. ### Network * Genucard 3 is supported now. For connection with Igel OS, an upfront PIN is necessary. ### CUPS Printing * Updated PrinterLogic Printer-Installer-Client to version 25.1.0.397. Fixed tray icon functionality. Resolved Issues -------------------------------------------------------------------------------- ### OSC Installer * Fixed showing username and password in the error message when firmware file could not be downloaded. * Added URLs with username:password@ are functional now. ### RDP/IGEL RDP Client 2 * Add parameter to ignore Restore events for fullscreen windows. +------------+-----------------------------------------------------------------+ |Registry |`sessions.winconnect%.options.webaccess-fullscreen-fix` | +------------+-----------------------------------------------------------------+ |Value |enabled/**disabled**(default) | +------------+-----------------------------------------------------------------+ ### WVD * Added support for multiple desktops (in workspace view, right click on session icon to start session in the background) * Added new toolbar icon, which allows to switch back to workspace view in order to start or switch to other sessions * Added basic remote apps support through the multiple session start, still UI is needed to activate a remote app window from the workspace view. At the moment, just the session window is shown, minimized apps and apps in the background are not brought forth yet. * Added support for ARMv2 (Azure Resource Manager v2) WVD deployments * The following parameters have been added to fully configure workspaces. Usually these are only needed to enable/disable workspaces with its "enabled" option. The other values are usually fixed values and any other value combination is likely to fail, unless these values were recommend from administrator. **WVD Workspace 0 Settings (ARMv2, Azure Resource Manager v2)**: +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 0 - Enabled` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-0.enabled` | +------------+-----------------------------------------------------------------+ | Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 0 - Client Application ID` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-0.client-app-id` | +------------+-----------------------------------------------------------------+ | Value | **a85cf173-4192-42f8-81fa-777a763e6e2c** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 0 - Redirect URI` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-0.redirect-uri` | +------------+-----------------------------------------------------------------+ | Value | **https://www.wvd.microsoft.com/webclient** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 0 - Resource URI` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-0.resource-uri` | +------------+-----------------------------------------------------------------+ | Value | **https://www.wvd.microsoft.com** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 0 - Feed URL` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-0.feed-url` | +------------+-----------------------------------------------------------------+ | Value | **https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery** (default) | +------------+-----------------------------------------------------------------+ **WVD Workspace 1 Settings (MS-Prod):** +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 1 - Enabled` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-1.enabled` | +------------+-----------------------------------------------------------------+ | Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 1 - Client Application ID` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-1.client-app-id` | +------------+-----------------------------------------------------------------+ | Value | **fa4345a4-a730-4230-84a8-7d9651b86739** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 1 - Redirect URI` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-1.redirect-uri` | +------------+-----------------------------------------------------------------+ | Value | **https://mrs-prod.ame.gbl/mrs-RDInfraClient-prod** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 1 - Resource URI` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-1.resource-uri` | +------------+-----------------------------------------------------------------+ | Value | **https://mrs-prod.ame.gbl/mrs-RDInfra-prod** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `WVD Workspace 1 - Feed URL` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspace-1.feed-url` | +------------+-----------------------------------------------------------------+ | Value | **https://rdweb.wvd.microsoft.com/api/feeddiscovery/webfeeddiscovery.aspx** (default) | +------------+-----------------------------------------------------------------+ ### Network * wpa_supplicant now adds timestamps to entries of log file. ### WiFi * Fixed non working Marvell WLAN device 8997 (SDIO version). * Fixed possible crahses with realtek 8812au or 8821au devices. ### Base system * Updated IGEL EULA. Release Notes 11.03.561 (Based On 11.03.560) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### Citrix * Microsoft Teams is not working with first time call * Microsoft Teams is missing the test call option New Features -------------------------------------------------------------------------------- ### Citrix * Integrated Citrix Workspace app 20.04 Available Citrix Workspace apps in this release: 20.04(default), 19.10 and 18.10 * New Feature: 1. Audio optimization for Microsoft Teams [experimental] 2. Support for NetScaler App Experience (NSAP) virtual channel [experimental] * Note: a.) This Tech Preview has only Audio Support and would not support Video and Screen Sharing features. b.) Browser Content Redirection **musst** be active for gstreamer1.0 * Added a registry key to enable audio optimization for Microsoft Teams. +------------+-----------------------------------------------------------------+ |Parameter |`Microsoft Teams optimization` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.virtualdrivers.vdwebrtc.enable` | +------------+-----------------------------------------------------------------+ |Value |**on** (default)/off | +------------+-----------------------------------------------------------------+ * Added a registry key to enable support for NetScaler App Experience (NSAP) virtual channel. +------------+-----------------------------------------------------------------+ |Parameter |`Hdx uses the NSAP virtual channel` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.virtualdrivers.nsap.enable` | +------------+-----------------------------------------------------------------+ |Value |**on** (default)/off | +------------+-----------------------------------------------------------------+ Release Notes 11.03.560 (Based On 11.03.550) -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### OSC Installer * Fixed issue with filesystems not always detected correctly in initramfs OSC Installer (needed for usage of isofile boot parameter). ### X11 system * Fixed error with single-gpu Nvidia card support. ### Misc * Updated Login Enterprise 4.0 to Login Enterprise 4.1. Release Notes 11.03.550 (Based On 11.03.540) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### VMware Horizon * Updated VMware Horizon to version 5.4.1 Release Notes 11.03.540 (Based On 11.03.531) -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### Storage Devices * Fixed unwanted ownership change of automounted LX filesystem root directories. Release Notes 11.03.531 (Based On 11.03.530) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### Base system * Added correct UI handling for Wacom DTU-1141B. Release Notes 11.03.530 (Based On 11.03.520) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### Base system * Added brazil keyboard layout. Resolved Issues -------------------------------------------------------------------------------- ### WVD * Numpad keys now support regional settings for i.e. the decimal separator within the WVD session. * Local keyboard lock modifier states like CapsLock, NumLock etc. are now synchronized with the WVD session. Release Notes 11.03.520 (Based On 11.03.510) -------------------------------------------------------------------------------- Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to 68.7.0esr: - Fixes for mfsa2020-11, also known as: CVE-2020-6819, CVE-2020-6820 - Fixes for mfsa2020-13, also known as: CVE-2020-6828, CVE-2020-6827, CVE-2020-6821, CVE-2020-6822, CVE-2020-6825 Resolved Issues -------------------------------------------------------------------------------- ### WVD * Improved audio error handling. ### Smartcard * Fixed problem in smartcard resource manager PC/SC-Lite which caused disconnects of VMWare Horizon sessions when using smartcards with certain applications. ### VirtualBox * Fixed automatic resolution changes. ### Hardware * Added support for some of the newer Intel generation 10th CPU internal graphic devices. * Added driver for GSPCA based webcams. ### Remote Management * Fixed repetitious firmware registering over the ICG, which could occur after a new firmware was successfully registered in the UMS. The device invokes firmware registering (again) with every executed settings transfer from the device to the UMS. This behavior lasts until reboot. Release Notes 11.03.510 (Based On 11.03.500) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### WVD * Added AAC Codec for support of audio output redirection. +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.enable-aac` | +------------+-----------------------------------------------------------------+ | Value | **enabled**(default) / disabled | +------------+-----------------------------------------------------------------+ * Added autostart of session when there is only one available. +------------+-----------------------------------------------------------------+ | Parameter | `Autostart single session` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.autostartsingle` | +------------+-----------------------------------------------------------------+ | Value | **Enabled** (default) / Disabled | +------------+-----------------------------------------------------------------+ * Added proxy support to WVD client. +------------+-----------------------------------------------------------------+ | Parameter | `Proxy Mode` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.proxy-mode` | +------------+-----------------------------------------------------------------+ | Value | **Off** (default) / Global HTTP Proxy Settings / Session Specific Proxy | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Proxy Host` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.proxy-host` | +------------+-----------------------------------------------------------------+ | Value | Name or address of proxy host | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Proxy Port` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.proxy-port` | +------------+-----------------------------------------------------------------+ | Value | Port of proxy host | +------------+-----------------------------------------------------------------+ * Added high DPI scaling support. +------------+-----------------------------------------------------------------+ | Parameter | `Scale Factor` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.scalefactor` | +------------+-----------------------------------------------------------------+ | Value | **Automatic Scale** (default) / 100 / 125 / 150 / 175 / 200 / 250 / 300 / 400 / 500 | +------------+-----------------------------------------------------------------+ * Added support for auth challenge, when the session host requires different credentials than the Azure feed. Also added separate values to keep these credentials preset. +------------+-----------------------------------------------------------------+ | Parameter | `Preset Session Host Username` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.session_user` | +------------+-----------------------------------------------------------------+ | Value | Username for session host connection | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Preset Session Host Password` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.session_crypt_password` | +------------+-----------------------------------------------------------------+ | Value | Password for session host connection | +------------+-----------------------------------------------------------------+ Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Citrix hardware video acceleration now supports h.264 streams with multiple reference frames. ### OSC Installer * Fixed non working desktop about icon in the OSC Installer. ### WVD * New parameter to configure global keyboard grab. +------------+-----------------------------------------------------------------+ | Parameter | `Keyboard Grab` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.grabkeyboard` | +------------+-----------------------------------------------------------------+ | Value | Enabled / **Disabled** (default) | +------------+-----------------------------------------------------------------+ ### Driver * Updated Olympus driver for dictation to version 2020-03-23-143654. Changelog: New: DR-1200: PID 0225 DR-2300: PID 0256 Changed: PID 0253 from DR-2100 to DR-1200 ### Jabra * Avoid deploying of the same Jabra Xpress package several times on the same Jabra device. ### Hardware * Fixed problems with MMC support on HP t430 devices. --- Release Notes 11.03.500 -------------------------------------------------------------------------------- Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to 68.6.0 ESR: - Fixes for mfsa2020-09, also known as: CVE-2020-6805, CVE-2020-6806, CVE-2020-6807, CVE-2020-6811, CVE-2019-20503, CVE-2020-6812, CVE-2020-6814 - Fix for mfsa2020-03, also known as CVE-2019-17026. - Fixes for mfsa2020-02, also known as: CVE-2019-17016, CVE-2019-17017, CVE-2019-17022, CVE-2019-17024. - Fixes for mfsa2019-37, also known as: CVE-2019-17008, CVE-2019-11745, CVE-2019-17010, CVE-2019-17005, CVE-2019-17011, CVE-2019-17012. ### Base system * Fixed libxml2 security issues CVE-2020-7595 and CVE-2019-19956. * Fixed nss security issues CVE-2019-17007, CVE-2019-17006 and CVE-2019-11745. * Fixed libvncserver security issue CVE-2019-15681. * Fixed libexif security issues CVE-2019-9278, CVE-2017-7544 and CVE-2016-6328. * Fixed cyrus-sasl2 security issue CVE-2019-19906. * Fixed samba security issues CVE-2019-14907, CVE-2019-14870 and CVE-2019-14861. * Fixed zulu security issues CVE-2020-2583, CVE-2020-2590, CVE-2020-2593, CVE-2020-2601, CVE-2020-2604, CVE-2020-2659 and CVE-2020-2654. New Features -------------------------------------------------------------------------------- ### Citrix * Integrated **Citrix Workspace app 19.12** * Available Citrix Workspace apps in this release: 19.12(default), 19.10 and 18.10 * New registry keys: * Added a registry key to enable a fullscreen banner "Citrix Desktop Viewer" when starting Desktop or Application session. +------------+-----------------------------------------------------------------+ |Parameter |`Show Citrix Desktop Viewer screen` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.cdviewerscreen` | +------------+-----------------------------------------------------------------+ |Value |**off** (default)/on | +------------+-----------------------------------------------------------------+ * Added a registry key to enable usage of Chromium Embedded Framework (CEF) for Browser Content Redirection (BCR) [Experimental]. +------------+-----------------------------------------------------------------+ |Parameter |`Use Chromium Embedded Framework (CEF)` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.usecefbrowser` | +------------+-----------------------------------------------------------------+ |Value |**factory default is "\**"* (default)/false/true | +------------+-----------------------------------------------------------------+ * "factory default" impact can be set by config file. * Changed default: +------------+-----------------------------------------------------------------+ |Parameter |`VDTUI protocol` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.virtualdriver.vdtui.enable` | +------------+-----------------------------------------------------------------+ |Value |off/**on** (default) | +------------+-----------------------------------------------------------------+ ### WVD * Integrated Igel WVD Client. ### VMware Horizon * Updated VMware Horizon Client to version 5.3.0 ### ThinLinc * Updated ThinLinc Client to version 4.11.0. ### Smartcard * Updated Gemalto / Safenet smartcard middleware to version 10.7.7. * Added support for smartcard reader HP Business Slim Smartcard CCID Keyboard. * Added configuration parameter to disable PIN pad functionality of smartcard readers, driven by Open Source CCID driver. This might work solve problems with PIN pads, but lowers security level. +------------+-----------------------------------------------------------------+ |Parameter |`Disable PIN pad` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.ccid.disable_pinpad` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ * Added possibility to add custom CCID smart card readers to Open Source CCID driver. Readers can be specified by USB Vendor, Product Id and custom name: +------------+-----------------------------------------------------------------+ |Parameter |`USB Vendor Id` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.ccid.custom_reader.vid` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`USB Product Id` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.ccid.custom_reader.pid` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Reader name` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.ccid.custom_reader.name` | +------------+-----------------------------------------------------------------+ |Value | | +------------+-----------------------------------------------------------------+ * Updated Athena IDProtect library to version 7. This version supports CRYPTAS TicTok V3 cards. Known issue: detection of locked PIN does not work. ### CUPS Printing * Added CUPS Printer port "USB class printer". The USB printer in this case is assigned by matching patterns of USB Manufacturer and Product name strings. In this way, a single printer definition could work for a class of different USB printer models. +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Printer > CUPS > Printers` | +------------+-----------------------------------------------------------------+ |Parameter |`Printer port` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.backend` | +------------+-----------------------------------------------------------------+ |Value |`USB class printer` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Printer > CUPS > Printers` | +------------+-----------------------------------------------------------------+ |Parameter |`Pattern matching mode` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.usbclass_mode` | +------------+-----------------------------------------------------------------+ |Value |pattern / pattern, case insensitive / regular expression | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Printer > CUPS > Printers` | +------------+-----------------------------------------------------------------+ |Parameter |`Manufacturer pattern` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.usbclass_manufacturer` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Printer > CUPS > Printers` | +------------+-----------------------------------------------------------------+ |Parameter |`Product pattern` | +------------+-----------------------------------------------------------------+ |Registry |`print.cups.printer.product` | +------------+-----------------------------------------------------------------+ * Updated PrinterLogic Printer-Installer-Client to version 25.1.0.381. Fixed tray icon functionality. ### Cisco JVDI Client * Integrated Cisco JVDI 12.7.1 client. Cisco JVDI 12.7.0 has been removed. ### Base system * Added Starter License functionality. This license is now part of every new IGEL OS installation and is valid for 30 days. The license will be activated with the first boot after the initial installation. More and detailed information via https://kb.igel.com/licensing. * Added 'Licensing' tool to 'System' in local Start menu. Disable the tool by key: +------------+-----------------------------------------------------------------+ |IGEL Setup |`Accessories > License Browser` | +------------+-----------------------------------------------------------------+ |Parameter |`Start Menu's System tab` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.license_browser0.startmenu_system` | +------------+-----------------------------------------------------------------+ |Value | **enabled** / disabled | +------------+-----------------------------------------------------------------+ * If there's only the Starter License and no UMS connection the Licensing tool is shown on the desktop by default. * Added feature Custom Partition to Workspace Edition license. * Updated Fluendo multimedia codecs to the following versions:ÿ gst-fluendo- vadec - 30/01/2020 0.10.212 * Kerberos Logon: You can now turn on/off numlock and/or capslock for password input. Registry keys +------------+-----------------------------------------------------------------+ |Parameter |`Handling of numlock` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.xlock0.options.numlock_approach` | +------------+-----------------------------------------------------------------+ |Range |[**don't change** (default)][set on][set off] | +------------+-----------------------------------------------------------------+ > "set on": force numlock on when password is entered > "set off": force numlock off when password is entered +------------+-----------------------------------------------------------------+ |Parameter |`Handling of capslock` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.xlock0.options.capslock_approach` | +------------+-----------------------------------------------------------------+ |Range |[**don't change** (default)][set on][set off] | +------------+-----------------------------------------------------------------+ > "set on": force capslock on when password is entered > "set off": force capslock off when password is entered * Added configuration for special thinkpad keyboard model: +------------+-----------------------------------------------------------------+ |IGEL Setup |`User Interface > Input > Keyboard` | +------------+-----------------------------------------------------------------+ |Parameter |`Keyboard type` | +------------+-----------------------------------------------------------------+ |Registry |`userinterface.keyboard.type` | +------------+-----------------------------------------------------------------+ |Range |[**Default**][Standard PC Keyboard (105 Keys)] | | |[IBM Keyboard (122 Keys)][Trimodal Keyboard][Sun Type 6 Keyboard]| | |[Chromebook][Macbook][Macbook international][Thinkpad] | +------------+-----------------------------------------------------------------+ ### WiFi * Added driver for Realtek 8822ce and 8822be WiFi hardware. * Added driver for Realtek 8821cu WiFI hardware. ### Driver * Updated Crossmatch DP driver for fingerprint. The new version allows the fingerprint image to be sent via the Citrix channel. With this change customers will be able to develop their own SW using the Crossmatch DP SDK. ### Misc * Updated Login PI 3.6 to the new Login Enterprise 4.0. Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Fixed video playback on BBC websites redirected via Citrix Browser Content Redirection. * Fixed **Multimedia redirection** and **HDX RealTime Media Engine** may used concurrently. ### OSC Installer * Fixed issue with failed partitioning. ### RDP/IGEL RDP Client 2 * Added a new parameter to control audio latency (in milliseconds) which defines amount of buffered audio data in the RDP client. +------------+-----------------------------------------------------------------+ | Registry | `rdp.winconnect.sound-latency` | +------------+-----------------------------------------------------------------+ | Value | **125** (default) (msec) | +------------+-----------------------------------------------------------------+ ### WVD * Improved overall sound quality. * Fixed issue caused audio redirection to fail randomly. * Clipboard redirection has potential privacy and security risks and is therefore disabled by default. * Fixed dead key support (key composition). * Fixed sound getting choppy after a while. * Several bugfixes for all kind of stability issues. ### VMware Horizon * Fixed:ÿ Save VMWare Horizon user from last login when in appliance mode Reduced the options for "Preset login information" to either "from last login" or "from session setup". The redundant option "from appliance mode" is removed, because the appliance mode is also treated as a session. +------------+-----------------------------------------------------------------+ |IGEL Setup |`Sessions > Horizon Client > Horizon Client Global > Local Logon`| +------------+-----------------------------------------------------------------+ |Parameter |`Preset login information` | +------------+-----------------------------------------------------------------+ |Registry |`vmware.login.saveusertype` | +------------+-----------------------------------------------------------------+ |Range |[**Set user/domain from last login** (default)] | | |[Set user/domain from session setup] | +------------+-----------------------------------------------------------------+ * Fixed Skype for business integration. ### Firefox * Fixed switching off firmware feature PrinterLogic removes browser policies file. * Fixed hiding the URL-Input results in disappearing webcontent. * Fixed browser startscript which was waiting for new window even when browser was not configured to open an extra one. ### Network * Use e1000e driver out-of-the-kernel as default instead of the thirdparty driver. ### WiFi * Fixed connection problems by updating the regulatory domain database * Improved persistence of WiFi switch state across reboots * Fixed problems with WiFi backports driver and older WiFi adapters or adapters with external kernel drivers. ### Open VPN * Fixed timing in OpenVPN credential dialogs to prevent focus loss when started too early at system boot. * Fixed session management, where VPN connections could get stuck when wrong passwords were entered with no possibility of retry. ### Imprivata * Hide the Imprivata session templates on the desktop as this is misleading ### Smartcard * Fixed smartcard reader VASCO/OneSpan Digipass 905. Disabled USB auto suspend for all smart card readers. * Added parameter to control the used smartcard protocol, when connecting with raw and other protocols allowed. Enable to read smartcards using NHS Identity Agent. +------------+-----------------------------------------------------------------+ |Parameter |`Avoid raw protocol` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.avoid_raw_protocol` | +------------+-----------------------------------------------------------------+ |Value |**false** (default) / true | +------------+-----------------------------------------------------------------+ * Fixed use of IDPrime smartcards inside sessions with readers driven by Open Source CCID smart card reader driver: implemented attribute SCARD_ATTR_CHANNEL_ID. * Added parameter to delay smartcard insertion events (in milliseconds). This solves issues reading smartcards within the Citrix Workspace App. Issue occured when inserting the card after already started StoreFront login. +------------+-----------------------------------------------------------------+ |Parameter |`Delay smart card insertion event time` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pcscd.card_insert_event_delay` | +------------+-----------------------------------------------------------------+ |Value |**0** (default) | +------------+-----------------------------------------------------------------+ ### Base system * Fixed NTP sync problem with some Windows Timeservers. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `NTP max allowed distance` | +------------+-----------------------------------------------------------------+ | Tooltip | `Set this to a larger value can help to synchronize with unreliable NTP servers` | +------------+-----------------------------------------------------------------+ | Registry | `system.time.ntp_max_distance` | +------------+-----------------------------------------------------------------+ | Type | `Integer` | +------------+-----------------------------------------------------------------+ | Value | **16** (new default 16 seconds instead of 3 before) | +------------+-----------------------------------------------------------------+ * Added _diag kernel modules needed by Stratusphere IPS. * Fixed Next button usage in Setup Assistant while registering for evaluation license. * Fixed issue with mounting USB devices in Licensing tool. * If used as master image the image will expand itself to full size (limited to 16 GiB) on flash. This is done only on first boot and never again. * Possible rollout of initial settings, certificates or licenses, placed on first partition. The necessary steps are - Writing image to USB or Flash medium - Mount or simply access the 1. VFAT partition which is present (should be empty) - Copying the modified setup.ini and/or **.lic files to the 1st partition (no directories) - For copying certificates, a ca-certs directory must be created where the desired certificates can be inserted. These will be copied to the /wfs/ca-certs directory on first boot. - The USB/Flash medium can be copied several times as needed - With the initial boot, the device will reboot out of the splash screen (re-read changed partition table) - The settings, certificates and/or licenses will be deployed and also deleted from the 1st partition. ### Firmware update * Improve download speed for sftp update sources. ### Appliance Mode * Fixed RHEV/Spice appliance mode. ### X11 system * Fixed displays not being automatically set up on boot. ### Media Player (Parole) * Fixed handling of player latency (stream buffering). ### Hardware * Fixed non working Prolific PL2303 USB to serial adapters. * Fixed non working keyboard and touchpad on Microsoft Surface 3 Laptop. ### IGEL Cloud Gateway * Handle UMS jobs intended to be executed on the next boot. This feature requires UMS 6.05.100 or later.