IGEL OS 11 ========== Firmware version 11.04.270 Release date 2021-02-11 Last update of this document 2021-02-10 [> IGEL Release Notes](https://kb.igel.com/igelos11/releasenotes) Supported Devices ------------------------------------------------------------------------------- UD2-LX 51, UD2-LX 50, UD2-LX 40 UD3-LX 60, UD3-LX 51, UD3-LX 50 UD5-LX 50 UD6-LX 51 UD7-LX 11, UD7-LX 10 UD9-LX Touch 41, UD9-LX 40 [> Supported IGEL OS 11 thirdparty devices](https://kb.igel.com/os11-supported-hardware) Component Versions ------------------------------------------------------------------------------- +-------------------------------------------+----------------------------------+ | Clients | | +===========================================+==================================+ | Chromium | 83.0.4103.61-0ubuntu0.18.04.1 | +-------------------------------------------+----------------------------------+ | Cisco JVDI Client | 12.9.3 | +-------------------------------------------+----------------------------------+ | Cisco Webex Teams VDI Client | 41.1.0.17621 | +-------------------------------------------+----------------------------------+ | Cisco Webex Meetings VDI Client | 41.2.0.142 | +-------------------------------------------+----------------------------------+ | Zoom Media Plugin | 5.4.53376 | +-------------------------------------------+----------------------------------+ | Citrix HDX Realtime Media Engine | 2.9.0-2330 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 19.12.0.19 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 20.10.0.6 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 20.12.0.12 | +-------------------------------------------+----------------------------------+ | deviceTRUST Citrix Channel | 20.1.200.0 | +-------------------------------------------+----------------------------------+ | Crossmatch DP Citrix Channel | 0515.2 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.0.1.0.20170219.2-_dev_-34574 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 14.0.0.45623 | +-------------------------------------------+----------------------------------+ | Evidian AuthMgr | 1.5.7617 | +-------------------------------------------+----------------------------------+ | Evince PDF Viewer | 3.28.4-0ubuntu1.2 | +-------------------------------------------+----------------------------------+ | FabulaTech USB for Remote Desktop | 6.0.28 | +-------------------------------------------+----------------------------------+ | Firefox | 68.12.0 | +-------------------------------------------+----------------------------------+ | IBM iAccess Client Solutions | 1.1.8.1 | +-------------------------------------------+----------------------------------+ | IGEL RDP Client | 2.2igel1600249269 | +-------------------------------------------+----------------------------------+ | IGEL WVD Client | 1.0.21igel1608136172 | +-------------------------------------------+----------------------------------+ | Imprivata OneSign ProveID Embedded | onesign-bootstrap-loader_1.0.523630_amd64 | +-------------------------------------------+----------------------------------+ | deviceTRUST RDP Channel | 20.1.200.0 | +-------------------------------------------+----------------------------------+ | NCP Secure Enterprise Client | 5.10_rev40552 | +-------------------------------------------+----------------------------------+ | NX Client | 6.11.2-1igel8 | +-------------------------------------------+----------------------------------+ | Open VPN | 2.4.4-2ubuntu1.3 | +-------------------------------------------+----------------------------------+ | Zulu JRE | 8.48.0.51-2 | +-------------------------------------------+----------------------------------+ | Parallels Client | 17.1.2.1 | +-------------------------------------------+----------------------------------+ | Spice GTK (Red Hat Virtualization) | 0.38-2igel93 | +-------------------------------------------+----------------------------------+ | Remote Viewer (Red Hat Virtualization) | 8.0-2git20191213.e4bacb8igel83 | +-------------------------------------------+----------------------------------+ | Usbredir (Red Hat Virtualization) | 0.8.0-1+b1igel71 | +-------------------------------------------+----------------------------------+ | Teradici PCoIP Software Client | 20.10.0-18.04 | +-------------------------------------------+----------------------------------+ | ThinLinc Client | 4.12.0-6517 | +-------------------------------------------+----------------------------------+ | ThinPrint Client | 7.5.88 | +-------------------------------------------+----------------------------------+ | Totem Media Player | 2.30.2-0ubuntu1igel55 | +-------------------------------------------+----------------------------------+ | Parole Media Player | 1.0.5-1igel1583919770 | +-------------------------------------------+----------------------------------+ | VNC Viewer | 1.10.1+dfsg-4igel13 | +-------------------------------------------+----------------------------------+ | VMware Horizon client | 5.5.0-16946361 | +-------------------------------------------+----------------------------------+ | Voip Client Ekiga | 4.0.1-9build1igel6 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Dictation | | +===========================================+==================================+ | Diktamen driver for dictation | | +-------------------------------------------+----------------------------------+ | Grundig Business Systems dictation driver | | +-------------------------------------------+----------------------------------+ | Nuance Audio Extensions for dictation | B301 | +-------------------------------------------+----------------------------------+ | Olympus driver for dictation | 20200323 | +-------------------------------------------+----------------------------------+ | Philips Speech driver | 12.9.1 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Signature | | +===========================================+==================================+ | Kofax SPVC Citrix Channel | 3.1.41.0 | +-------------------------------------------+----------------------------------+ | signotec Citrix Channel | 8.0.9 | +-------------------------------------------+----------------------------------+ | signotec VCOM Daemon | 2.0.0 | +-------------------------------------------+----------------------------------+ | StepOver TCP Client | 2.4.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Smartcard | | +===========================================+==================================+ | PKCS#11 Library A.E.T. SafeSign | 3.6.0.0-AET.000 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Athena IDProtect | 7 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library cryptovision sc/interface | 7.3.1 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Gemalto SafeNet | 10.7.77 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library OpenSC | 0.20.0-3igel37 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library SecMaker NetID | 6.8.1.31 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library 90meter | 20190522 | +-------------------------------------------+----------------------------------+ | Reader Driver ACS CCID | 1.1.6-1igel2 | +-------------------------------------------+----------------------------------+ | Reader Driver Gemalto eToken | 10.7.77 | +-------------------------------------------+----------------------------------+ | Reader Driver HID Global Omnikey | 4.3.3 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive CCID | 5.0.35 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive eHealth200 | 1.0.5 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive SCRKBC | 5.0.24 | +-------------------------------------------+----------------------------------+ | Reader Driver MUSCLE CCID | 1.4.31-1igel11 | +-------------------------------------------+----------------------------------+ | Reader Driver REINER SCT cyberJack | 3.99.5final.sp13igel15 | +-------------------------------------------+----------------------------------+ | Resource Manager PC/SC Lite | 1.8.26-3igel14 | +-------------------------------------------+----------------------------------+ | Cherry USB2LAN Proxy | 3.2.0.3 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | System Components | | +===========================================+==================================+ | OpenSSL | 1.0.2n-1ubuntu5.3 | +-------------------------------------------+----------------------------------+ | OpenSSL | 1.1.1-1ubuntu2.1~18.04.6 | +-------------------------------------------+----------------------------------+ | OpenSSH Client | 7.6p1-4ubuntu0.3 | +-------------------------------------------+----------------------------------+ | OpenSSH Server | 7.6p1-4ubuntu0.3 | +-------------------------------------------+----------------------------------+ | Bluetooth Stack (bluez) | 5.52-1igel6 | +-------------------------------------------+----------------------------------+ | MESA OpenGL Stack | 20.0.8-1igel117 | +-------------------------------------------+----------------------------------+ | VAAPI ABI Version | 0.40 | +-------------------------------------------+----------------------------------+ | VDPAU Library Version | 1.4-1igel1003 | +-------------------------------------------+----------------------------------+ | Graphics Driver INTEL | 2.99.917+git20200515-igel1013 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/RADEON | 19.1.0-1+git20200220igel987 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/AMDGPU | 19.1.0-1+git20200318igel986 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nouveau (Nvidia Legacy) | 1.0.16-1igel867 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nvidia | 440.100-0ubuntu0.20.04.1 | +-------------------------------------------+----------------------------------+ | Graphics Driver VMware | 13.3.0-2igel857 | +-------------------------------------------+----------------------------------+ | Graphics Driver QXL (Spice) | 0.1.5-2build2-igel925 | +-------------------------------------------+----------------------------------+ | Graphics Driver FBDEV | 0.5.0-1igel819 | +-------------------------------------------+----------------------------------+ | Graphics Driver VESA | 2.4.0-1igel855 | +-------------------------------------------+----------------------------------+ | Input Driver Evdev | 2.10.6-1igel975 | +-------------------------------------------+----------------------------------+ | Input Driver Elographics | 1.4.1-1+b6igel952 | +-------------------------------------------+----------------------------------+ | Input Driver eGalax | 2.5.8825 | +-------------------------------------------+----------------------------------+ | Input Driver Synaptics | 1.9.1-1ubuntu1igel866 | +-------------------------------------------+----------------------------------+ | Input Driver VMMouse | 13.1.0-1ubuntu2igel957 | +-------------------------------------------+----------------------------------+ | Input Driver Wacom | 0.36.1-0ubuntu2igel888 | +-------------------------------------------+----------------------------------+ | Input Driver ELO Multitouch | 3.0.0 | +-------------------------------------------+----------------------------------+ | Input Driver ELO Singletouch | 5.1.0 | +-------------------------------------------+----------------------------------+ | Kernel | 5.4.48 #mainline-lxos-g1607354578 | +-------------------------------------------+----------------------------------+ | Xorg X11 Server | 1.20.8-2igel1016 | +-------------------------------------------+----------------------------------+ | Xorg Xephyr | 1.20.8-2igel1016 | +-------------------------------------------+----------------------------------+ | CUPS Printing Daemon | 2.2.7-1ubuntu2.8igel32 | +-------------------------------------------+----------------------------------+ | PrinterLogic | 25.1.0.425 | +-------------------------------------------+----------------------------------+ | Lightdm Graphical Login Manager | 1.26.0-0ubuntu1igel13 | +-------------------------------------------+----------------------------------+ | XFCE4 Window Manager | 4.14.2-1~18.04igel1600339249 | +-------------------------------------------+----------------------------------+ | ISC DHCP Client | 4.3.5-3ubuntu7.1 | +-------------------------------------------+----------------------------------+ | NetworkManager | 1.20.4-2ubuntu2.2igel105 | +-------------------------------------------+----------------------------------+ | ModemManager | 1.10.0-1~ubuntu18.04.2 | +-------------------------------------------+----------------------------------+ | GStreamer 0.10 | 0.10.36-2ubuntu0.1igel201 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo aacdec | 0.10.42 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo asfdemux | 0.10.90 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo h264dec | 0.10.58 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo mp3dec | 0.10.40 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo mpegdemux | 0.10.85 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo mpeg4videodec | 0.10.44 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo vadec | 0.10.224 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo wmadec | 0.10.70 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo wmvdec | 0.10.66 | +-------------------------------------------+----------------------------------+ | GStreamer 1.x | 1.16.2-4igel239 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo aacdec | 0.10.42.2-8d6d | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo asfdemux | 0.10.90 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo h264dec | 0.10.58 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo mp3dec | 0.10.40 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo mpeg4videodec | 0.10.44 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo vadec | 0.10.224 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo wmadec | 0.10.70 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo wmvdec | 0.10.66 | +-------------------------------------------+----------------------------------+ | WebKit2Gtk | 2.28.3-2igel36 | +-------------------------------------------+----------------------------------+ | Python2 | 2.7.17 | +-------------------------------------------+----------------------------------+ | Python3 | 3.6.9 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | VM Guest Support Components | | +===========================================+==================================+ | Virtualbox Guest Utils | 6.1.10-dfsg-1igel41 | +-------------------------------------------+----------------------------------+ | Virtualbox X11 Guest Utils | 6.1.10-dfsg-1igel41 | +-------------------------------------------+----------------------------------+ | Open VM Tools | 11.0.5-4ubuntu0.18.04.1 | +-------------------------------------------+----------------------------------+ | Open VM Desktop Tools | 11.0.5-4ubuntu0.18.04.1 | +-------------------------------------------+----------------------------------+ | Xen Guest Utilities | 7.10.0-0ubuntu1 | +-------------------------------------------+----------------------------------+ | Spice Vdagent | 0.20.0-1igel95 | +-------------------------------------------+----------------------------------+ | Qemu Guest Agent | 5.0-5igel12 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited IGEL Support | | +===========================================+==================================+ | Mobile Device Access USB (MTP) | 1.1.17-3igel5 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (imobile) | 1.2.1~git20191129.9f79242-1+b1igel8 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (gphoto) | 2.5.25-2igel4 | +-------------------------------------------+----------------------------------+ | VPN OpenConnect | 8.10-1igel4 | +-------------------------------------------+----------------------------------+ | Scanner support | 1.0.27-1 | +-------------------------------------------+----------------------------------+ | VirtualBox | 6.1.10-dfsg-1igel41 | +-------------------------------------------+----------------------------------+ +------------------------------------------------------------------------+ | Services | Size | Reduced Firmware | +========================================================================+ | Asian Language Support | 22.5M | Included | +------------------------------------------------------------------------+ | Java SE Runtime Environment | 36.0M | Included | +------------------------------------------------------------------------+ | Citrix Workspace app | 235.5M | Included | | Citrix Appliance | | | | Citrix StoreFront | | | +------------------------------------------------------------------------+ | Ericom PowerTerm InterConnect | 15.5M | Included | +------------------------------------------------------------------------+ | Media Player | 512.0K | Included | +------------------------------------------------------------------------+ | Local Browser (Firefox) | 70.5M | Included | | Citrix Appliance | | | +------------------------------------------------------------------------+ | VMware Horizon | 4.2M | Included | | RDP | | | +------------------------------------------------------------------------+ | Cendio ThinLinc | 10.0M | Included | +------------------------------------------------------------------------+ | Printing (Internet printing protocol CUPS) | 22.2M | Included | +------------------------------------------------------------------------+ | NoMachine NX | 26.8M | Included | +------------------------------------------------------------------------+ | VMware Horizon | 123.2M | Included | +------------------------------------------------------------------------+ | Voice over IP (Ekiga) | 6.5M | Included | +------------------------------------------------------------------------+ | Citrix Appliance | 768.0K | Included | +------------------------------------------------------------------------+ | NCP Enterprise VPN Client | 27.0M | Not included | +------------------------------------------------------------------------+ | Fluendo GStreamer Codec Plugins | 7.5M | Included | +------------------------------------------------------------------------+ | IBM i Access Client Solutions | 72.5M | Not included | +------------------------------------------------------------------------+ | Red Hat Enterprise Virtualization | 3.0M | Included | +------------------------------------------------------------------------+ | Parallels Client | 5.5M | Included | +------------------------------------------------------------------------+ | NVIDIA graphics driver | 115.0M | Not included | +------------------------------------------------------------------------+ | Imprivata Appliance | 10.8M | Included | +------------------------------------------------------------------------+ | Evidian AuthMgr | 2.5M | Included | +------------------------------------------------------------------------+ | Hardware Video Acceleration | 13.0M | Included | +------------------------------------------------------------------------+ | Extra Font Package | 1.0M | Included | +------------------------------------------------------------------------+ | Fluendo GStreamer AAC Decoder | 1.2M | Included | +------------------------------------------------------------------------+ | x32 Compatibility Support | 48.0M | Included | +------------------------------------------------------------------------+ | Cisco JVDI client | 45.8M | Included | +------------------------------------------------------------------------+ | PrinterLogic | 40.8M | Not included | +------------------------------------------------------------------------+ | Biosec BS Login | 10.0M | Not included | +------------------------------------------------------------------------+ | Login VSI Login Enterprise | 28.8M | Not included | +------------------------------------------------------------------------+ | Stratusphere UX CID Key software | 2.8M | Not included | +------------------------------------------------------------------------+ | Elastic Filebeat | 15.8M | Not included | +------------------------------------------------------------------------+ | WVD | 14.0M | Included | +------------------------------------------------------------------------+ | Local Browser (Chromium) | 81.2M | Not included | +------------------------------------------------------------------------+ | deskMate Client | 5.8M | Included | +------------------------------------------------------------------------+ | Cisco Webex Teams VDI | 36.8M | Not included | +------------------------------------------------------------------------+ | Cisco Webex Meetings VDI | 32.2M | Not included | +------------------------------------------------------------------------+ | Zoom Media Plugin | 40.5M | Not included | +------------------------------------------------------------------------+ | Teradici PCoIP Client | 14.5M | Included | +------------------------------------------------------------------------+ | 90meter Smart Card Support | 256.0K | Included | +------------------------------------------------------------------------+ | VPN OpenConnect (Limited support) | 256.0K | Not included | | Virtualbox (Limited support) | | | | Limited Support Features | | | | Scanner support / SANE (Limited support) | | | | Mobile Device Access USB (Limited support) | | | +------------------------------------------------------------------------+ | Mobile Device Access USB (Limited support) | 256.0K | Not included | +------------------------------------------------------------------------+ | VPN OpenConnect (Limited support) | 1.5M | Not included | +------------------------------------------------------------------------+ | Scanner support / SANE (Limited support) | 2.5M | Not included | +------------------------------------------------------------------------+ | Virtualbox (Limited support) | 62.5M | Not included | +------------------------------------------------------------------------+ General Information -------------------------------------------------------------------------------- To be benefical of all new features and implementations, it is recommended to use UMS 6.06.100 or later and updating the corresponding profiles. ### CAUTION: * Firmware downgrade to older versions (11.01 or 11.02) is not possible, due to the unsigned firmware update files. ### The following clients and features are not supported anymore * Caradigm * Citrix Legacy Sessions * Citrix Web Interface * Citrix StoreFront Legacy * Citrix HDX Flash Redirection * Citrix XenDesktop Appliance Mode * Flash Player Download * JAVA Web Start * Leostream Java Connect * Systancia AppliDis * VIA graphics driver Known Issues -------------------------------------------------------------------------------- ### Firmware Update * On devices with 2 GB of flash storage it could happen that there is not enough space for updating all features. In this case a corresponding error message occurs. Please visit https://kb.igel.com/igelos-11.04/en/error-not-enough-space-on-local-drive-when-updating-to-igel-os-11-04-or-higher-32870765.html for a possible solution and additional information. ### Firefox * Firefox IGEL extensions are not updated automatically under some circumstances. After an update from 11.03.xxx to 11.04.100 the IGEL extensions will stay on the old version. In this case, the following settings concerning kiosk mode cannot be executed: - Switch off Hotkey for new window/tab - Blocking of internal browser pages like preferences, file picker, specific local directories As a workaround: - a reset-to-defaults should be performed - or the browser's mimetype template could be switched from "Standard" to "Minimal" by registry key browserglobal.app.mimetypes_template. There the browser profile is renewed as well. After the TC received the new setting, a reboot and set the mimetypes_template registry key to "Standard" again. ### Citrix * With activated DRI3 and an AMD GPU Citrix H.264 acceleration plugin could freeze. Selective H.264 mode (API v2) is not affected from this issue. * Citrix has known issues with GStreamer1.0 which describe problems with multimedia redirection of H.264, MPEG1 and MPEG2. GStreamer1.0 is used if browser content redirection is active. * Browser content redirection does not work with activated DRI3 and hardware accelerated H.264 deep compression codec. * Citrix StoreFront login with Gemalto smartcard middleware does not detect smartcard correctly if the card is inserted after start of login. As a workaround, insert the smartcard before starting the StoreFront login. * Citrix H.264 acceleration plugin does not work with **enabled** server policy "Optimize for 3D graphics workload" in combination with server policy "Use video codec compression" -> *"For the entire screen"**. * To launch multiple desktop sessions with Citrix HDX RTME and Citrix H.264 acceleration plugin the following registry key must be enabled: +------------+-----------------------------------------------------------------+ |Parameter |`Activate workaround for dual RTME sessions and H264 acceleration` | +------------+-----------------------------------------------------------------+ |Registry |`ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ |Range | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * This workaround is not applicable when "Enable Secure ICA" is active for the specific delivery group. * During the running Microsoft Teams Optimization of Citrix Workspace App 20.09, webcam redirection or screen sharing may lead to display errors like black stripes or flickering. ### VMware Horizon * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, when using USB redirection for storage devices: The USB on-insertion feature is only working when the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. - On the other hand, when using drive mapping instead, it is recommended to either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. Furthermore Horizon Client relies on the OS to mount the storage devices itself. Enable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. * External drives mounted already before connection do not appear in the remote desktop. Workaround: map the directory /media as a drive. Then the external devices will show up inside the media drive. * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview cannot be resized anymore. * Seamless application windows in Horizon Client may not be displayed correctly. When starting the first seamless app a new iconified window appears in the taskbar and only if you click on it the application will show up. On some hardware (UD7-H850, UD2-M250, UD2-D220) however, the client aborts when this new window is de-iconified. * When using RDP protocol, the remote session has a fixed offset of approximately the height of the menubar . That means you have a black bar on top of the Window and as a result of that, the Windows panel on the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol don't send the keyup event and thus keep being pressed even when actually released. Only when you leave the session with the mouse the modifiers are reset. * Copying Text from Horizon Blast sessions isn't possible * The on-screen keyboard in Horizon appliance mode doesn't work correctly with local logon. You have to switch off local logon and switch on this two keys in the IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### WiFi * TP-Link Archer T2UH WiFi adapters does not work after system suspend/resume. Workaround: Disable system suspend at IGEL Setup > System > Power Options > Shutdown. ### Parallels Client * Native USB redirection does not work with Parallels Client. ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Cisco JVDI Client * There may be a segfault shown in the logs (during logout of Citrix Desktop session). Occurs only when using Citrix Workspace app 20.10 and Cisco JVDI. ### Multimedia * Multimedia redirection with GStreamer could fail with the Nouveau GPU driver ### Hyper-V * Hyper-V (Generation 2) needs a lot of memory (RAM). The machine needs a sufficient amount of memory allocated. ### VirtualBox * The current VirtualBox Guest Tools/Drivers will not work with VirtualBox 5.2.x or older hosts, which leads to black screen and non working graphic. Possible workaround: Install with 'Failsafe Installation + Recovery' and set **x.drivers.force_vesa** registry key to true. * When running in VirtualBox virtualization, resizing the window will not automatically change desktop resolution of IGEL OS guest. ### Audio * Audio jack detection on Advantec POC-W243L does not work. Therefore, sound output goes through a possibly connected headset and also the internal speakers. * IGEL UD2 (D220) fails to restore the volume level of the speaker when the device used firmware version 11.01.110 before. ### Hardware * HP t730 could freeze when monitors with different resolutions are connected (1920x1200 + 2560x1440 + 3840x1600 for example). When this occors, the registry key **x.drivers.kms.best_console_mode** has to be set to **disabled**. * Some newer Delock 62599 active DisplayPort to DVI (4k) adapters only work with INTEL devices. ### Remote Management * AIT feature with IGEL Starter License is only supported by UMS version 6.05.100 or newer. ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a Citrix session in browser appliance mode, the browser is restarted twice instead of once. * Appliance mode RHEV/Spice: spice-xpi firefox plugin is not longer supported. The "Console Invocation" has to allow 'Native' client (auto is also possible) and should be started in fullscreen to prevent any opening windows. --- Release Notes 11.04.270 (Based On 11.04.264) -------------------------------------------------------------------------------- Security Fixes -------------------------------------------------------------------------------- ### VNC * Fixed Secure Terminal and Secure VNC Shadowing remote code execution vulnerability. Release Notes 11.04.264 (Based On 11.04.260) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### Smartcard * Added Smartcard PIN passthrough in Firefox and Chromium. The PIN will be cached while logging on via Active Directory/Kerberos with smartcard. In Firefox and Chromium no further PIN input is necessary to use smartcard. +------------+-----------------------------------------------------------------+ |Parameter |`Smartcard PIN caching` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.pin_cache.enable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ ### Cisco JVDI Client * Integrated Cisco JVDI 12.9.3 client ### Cisco Webex * Integrated Cisco Webex Meetings 41.2.0.142 * Integrated Cisco Webex Teams˙41.1.0.17621 Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Fixed Citrix Kerberos Passthrough authentication. ### VMware Horizon * Fixed failure to start horizon serial port redirection service at boot time. ### Firefox * Fixed usage of pre-installed spellchecker in Firefox input fields. ### Audio * Fixed a sporadic aborting of an application on closing ALSA Pulse PCM. The problem affects only applications using ALSA API directly like Citrix Workspace App. * Added debug output to the ALSA Pulse PCM which must be enabled by the environment variable ALSA_PULSE_PCM_DEBUG=1, the debug output is collected by the system logging facility (journalctl). ### VNC * Fixed handling of CapsLock status in VNC server. Keyboard input now appears correctly also if CapsLock is active on client or server side. This especially fixes upper case 'umlaut' characters with Swiss and German keyboard layout. Release Notes 11.04.260 (Based On 11.04.253) -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### WVD * Fixed proxy usage for WVD feed download. ### Base system * Fixed issue with early IGEL UD3-LX 50 (M350C) revisions that can lead to read error from MMC. ### X11 system * Added registry key to solve an issue with buggy screens connected over a DP to DVI adapter (only works for radeon devices like IGEL UD3-LX 50). +------------+-----------------------------------------------------------------+ | Parameter | `Fix issues with buggy monitors connected over DP-DVI adapter.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.ati.dp_dvi_probe_workaround` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ Release Notes 11.04.253 (Based On 11.04.249) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### Citrix * Integrated Zoom Media Plugin 5.4.53376.1029 * Integrated Citrix Workspace App 20.12 Available Citrix Workspace apps in this release: 20.12(default), 20.10 and 19.12. * New Feature: App Protection [Experimental]**.* App protection is an add-on feature that provides enhanced security when using Citrix Virtual Apps and Desktops. The feature restricts the ability of clients to be compromised by keylogging and screen capturing malware. This feature is currently only available for Self-Service sessions. +------------+-----------------------------------------------------------------+ |Parameter |`Citrix App Protection` | +------------+-----------------------------------------------------------------+ |Registry |`ica.appprotection` | +------------+-----------------------------------------------------------------+ |Value |**False** (default)/True | +------------+-----------------------------------------------------------------+ * Fixed Issue: mic and webcam devices can be redirected using Browser Content Redirection. +------------+-----------------------------------------------------------------+ |Parameter |`Enables mic and webcam redirection using BCR` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.cefenablemediadevices` | +------------+-----------------------------------------------------------------+ |Value | [Factory default is "**"] [False][True] | +------------+-----------------------------------------------------------------+ ### VMware Horizon * Integrated Zoom Media Plugin 5.4.53376.1029 ### Cisco Webex * Integrated Cisco Webex Teams 40.11.0.16985 * Integrated Cisco Webex Meetings 40.11.5.11 Resolved Issues -------------------------------------------------------------------------------- ### Citrix * The parameter **ica.module.virtualdrivers.vdwebrtc.keyboard_workaround** has been removed. This workaround is no longer needed because the problem is solved as of CWA 20.10. ### Firefox * Added _TLS 1.3_ to the Range of _Maximum supported encryption protocol_ from _Sessions > Firefox Browser > Firefox Browser Global > Encryption_ +------------+-----------------------------------------------------------------+ | Parameter | `Maximum supported encryption protocol` | +------------+-----------------------------------------------------------------+ | Registry | `browserglobal.app.security_tls_version_max` | +------------+-----------------------------------------------------------------+ | Range | [SSL3][TLS 1.0][TLS 1.1][TLS 1.2][TLS 1.3] | +------------+-----------------------------------------------------------------+ | Value | **TLS 1.3** | +------------+-----------------------------------------------------------------+ ### Chromium * Fixed: Custom Chromium Policies datatypes now written in the correct way to policies.json ### Base system * Fixed crash of IGEL monitoring agent. ### OS Converter * Fixed language chooser in installations via Deployment Appliance. ### X11 system * Updated Display Switch rotate buttons to usable size. ### Audio * Fixed missing default setup device after reboot Release Notes 11.04.249 (Based On 11.04.245) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### VMware Horizon * Updated VMware Horizon Client to version 5.5.0-16946361 ### Audio * Added parameter to control applying of sound volume to application's streams. If the parameter is set to true, each application can set it's own volume level. Otherwise the sound volume is set to the same value as the default volume for output and input device respectively. +------------+-----------------------------------------------------------------+ | Registry | `userinterface.sound.app_volume_ctrl` | +------------+-----------------------------------------------------------------+ | Value | false / **true** (default) | +------------+-----------------------------------------------------------------+ Resolved Issues -------------------------------------------------------------------------------- ### VMware Horizon * Fixed remember last user functionality in Horizon local logon Release Notes 11.04.245 (Based On 11.04.244) -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### VMware Horizon * Fixed VMware integrated printing. ### Base system * Fixed possibility to add certificates to Chromium and Firefox which are given in DER format. * The Options dialog keeps the settings that were previously set * Fix GtkMessage dialog localization. * Fixed: Shutdown delay when Post session command is enabled. ### X11 system * Fixed notifications not being hidden properly when in do-not-disturb mode. ### Window manager * Fixed notifyd window width not remaining constant. * Fixed notification urgency critical background color. Release Notes 11.04.244 (Based On 11.04.241) -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### Evidian * New session type RD Web Access. * Updated Evidian to version 1.5.7617. Resolved Issues -------------------------------------------------------------------------------- ### RDP/IGEL RDP Client 2 * Added new parameter to enable/disable dynamic drive mapping. +------------+-----------------------------------------------------------------+ |Registry |`rdp.winconnect.enable-dynamic-drivemapping` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Registry |`sessions.winconnect%.option.enable-dynamic-drivemapping` | +------------+-----------------------------------------------------------------+ |Range |**Global Setting** (default) / On / Off | +------------+-----------------------------------------------------------------+ * Fixed login information not being set after reboot. ### RD Web Access * Fixed RD Web Access Login not working with user@domain. ### Parallels Client * Fixed a bug with Parallels not working if the Parallels RAS omits the machine name in the application list ### Chromium * Fixed browser and download history not being cleared. ### Network * Fixed bug: SCEP failed when scep_getca received only a single certificate. ### Base system * Fixed remembering last user name with Active Directory/Kerberos logon. Before this fix the user name could not be stored in UMS to appear again after a reboot. ### Evidian * Fixed error on restart. Release Notes 11.04.241 (Based On 11.04.240) -------------------------------------------------------------------------------- Release Notes 11.04.240 (Based On 11.04.230) -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### WiFi * Fixed issues with D-Link DWA-131 WLAN dongle. ### X11 system * Fixed a problem with display hotplug detection when display switch is not used. Release Notes 11.04.230 (Based On 11.04.222) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### VMware Horizon * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview, cannot be resized anymore. * Seamless Apps do not open automatically when started, but remain iconified. They only open with click on the taskbar button (via respective window button) * When using RDP protocol, the remote session has a fixed offset of the approximate height of the menubar . That means a black bar on top of the Window occurs and as a result of that, the Windows panel at the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol do not send the keyup event and keep being pressed, even when actually released. Only when closing the session via usage of mouse, the modifiers are reset. * Copying Text from Horizon Blast sessions is not possible * The on-screen keyboard in Horizon appliance mode does not work correctly with local logon. Workaround: Switch off local logon and switch on the corresponding two keys via IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Cisco JVDI Client * There may be a segfault shown in the logs (during logout of Citrix Desktop session). Occurs only when using Citrix Workspace app 20.10 and Cisco JVDI ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a citrix session in browser appliance mode, the browser is restarted twice instead of once. Security Fixes -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### VMware Horizon * Added support for VMware Integrated Printing. +------------+-----------------------------------------------------------------+ | Parameter | `Integrated Printing` | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.integrated-printing` | +------------+-----------------------------------------------------------------+ |Type |bool | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ ### Fabulatech * Updated FabulaTech USB for Remote Desktop to version 6.0.28 * Updated FabulaTech Scanner for Remote Desktop to version 2.5.0.7 Resolved Issues -------------------------------------------------------------------------------- ### WVD * WVD memory leak(s) fixed. * Switched back to the local login mask when the AAD login fails for whatever reason. At the moment there is no error message shown. This will come in one of the next versions. ### VMware Horizon * Fixed post-session behavior for VMware Horizon sessions where some exit codes of the client were discarded and therefore did not trigger the post-session action. ### CID Key Agent * Update of CID Key Agent to version 6.5.0-1 Release Notes 11.04.222 (Based On 11.04.220) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### VMware Horizon * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview, cannot be resized anymore. * Seamless Apps do not open automatically when started, but remain iconified. They only open with click on the taskbar button (via respective window button) * When using RDP protocol, the remote session has a fixed offset of the approximate height of the menubar . That means a black bar on top of the Window occurs and as a result of that, the Windows panel at the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol do not send the keyup event and keep being pressed, even when actually released. Only when closing the session via usage of mouse, the modifiers are reset. * Copying Text from Horizon Blast sessions is not possible * The on-screen keyboard in Horizon appliance mode does not work correctly with local logon. Workaround: Switch off local logon and switch on the corresponding two keys via IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Cisco JVDI Client * There may be a segfault shown in the logs (during logout of Citrix Desktop session). Occurs only when using Citrix Workspace app 20.10 and Cisco JVDI ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a citrix session in browser appliance mode, the browser is restarted twice instead of once. Security Fixes -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### WVD * WVD memory leak(s) fixed. * Switched back to the local login mask when the AAD login fails for whatever reason. At the moment there is no error message shown. This will come in one of the next versions. Release Notes 11.04.220 (Based On 11.04.215) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### VMware Horizon * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview, cannot be resized anymore. * Seamless Apps do not open automatically when started, but remain iconified. They only open with click on the taskbar button (via respective window button) * When using RDP protocol, the remote session has a fixed offset of the approximate height of the menubar . That means a black bar on top of the Window occurs and as a result of that, the Windows panel at the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol do not send the keyup event and keep being pressed, even when actually released. Only when closing the session via usage of mouse, the modifiers are reset. * Copying Text from Horizon Blast sessions is not possible * The on-screen keyboard in Horizon appliance mode does not work correctly with local logon. Workaround: Switch off local logon and switch on the corresponding two keys via IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Cisco JVDI Client * There may be a segfault shown in the logs (during logout of Citrix Desktop session). Occurs only when using Citrix Workspace app 20.10 and Cisco JVDI ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a citrix session in browser appliance mode, the browser is restarted twice instead of once. Security Fixes -------------------------------------------------------------------------------- ### Base system * Fixed BleedingTooth security issue which means CVE-2020-12351, CVE-2020-12352 and CVE-2020-24490. New Features -------------------------------------------------------------------------------- ### Citrix * Updates Zoom Media Plugin to version 5.4.53376.1029 ### VMware Horizon * Updated Zoom Media Plugin to version 5.4.53376.1029 * Added support for VMware Integrated Printing. +------------+-----------------------------------------------------------------+ | Parameter | `Integrated Printing` | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.integrated-printing` | +------------+-----------------------------------------------------------------+ |Type |bool | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ ### Cisco Webex VDI * Updated Cisco Webex Teams VDI to version 3.0.16605.0 * Updated Cisco webex Meetings VDI to version 40.10 ### Cisco JVDI Client * Updated Cisco JVDI client to version 12.9.1 ### Driver * Updated deviceTRUST client plugin for Citrix and RDP to version 20.1.200.0. Detailed release notes can be found at https://docs.devicetrust.com/docs/releases-igel-20.1.200/ ### Remote Management * Added support for exchanging ICG certificates. * The remote management of the endpoint device automatically installs TLS certificates provided by the UMS into the local trusted CA certificates storage. The automatic deployment of TLS certificates to endpoint devices requires UMS 6.06.100 or higher. This feature allows to verify certificates using in downloading files from the UMS, downloading of a firmware update and custom partition archives over HTTPS or FTPS protocols. The verifying of certificates must be enabled by the parameter `system.security.remote_management.tls_verify_peer`. +------------+-----------------------------------------------------------------+ | Registry | `system.security.remote_management.tls_verify_peer` | +------------+-----------------------------------------------------------------+ | Value | true / **false** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Registry | `system.security.remote_management.tls_hostname_validation` | +------------+-----------------------------------------------------------------+ | Value | **true** (default) / false | +------------+-----------------------------------------------------------------+ * Added support for UMS commands to store and remove ICG configuration. * Introduced parameters for ICG Websocket connections: debug log, network timeout (in seconds) and ping-pong interval (in seconds). The parameters are applied on the next established ICG agent connection and ICG tunnel connections: VNC and Secure Terminal. The ping-pong mechanism is supported only for ICG tunnel connections. +------------+-----------------------------------------------------------------+ | Registry | `system.icg.websocket.debug` | +------------+-----------------------------------------------------------------+ | Value | **off** (default) / all / tunnel / agent | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Registry | `system.icg.websocket.network_timeout` | +------------+-----------------------------------------------------------------+ | Value | **30** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Registry | `system.icg.websocket.pingpong_interval` | +------------+-----------------------------------------------------------------+ | Value | **120** (default) | +------------+-----------------------------------------------------------------+ Resolved Issues -------------------------------------------------------------------------------- ### VMware Horizon * Fixed post-session behavior for VMware Horizon sessions where some exit codes of the client at where discarded and therefore did not trigger the post- session action. * Fixed Local Logon Window in that˙now we prevent it to get iconified because it always needs to be visible especially in appliance mode where there's no panel to de-iconify it. ### Teradici PCoIP Client * Updated Teradici PCoIP client to version 20.10 ### Network * Changed: Usage of r8168 as default network driver on Lenovo M75nano. * Added support for some newer intel e1000e network cards. ### Open VPN * Fixed segmentation fault, if nameserver is used Now it is allowed to use an empty password for the private key. Not needed to enter a password when the private key do not have one. ### Base system * Fixed: The fluendo vadec update closed a memory leak with AMD devices using VAAPI acceleration. * Updated Fluendo mutltimedia codecs to the following versions: +------------+-----------------------------------------------------------------+ | gst-fluendo-aacdec| 8/10/2020 | +------------+-----------------------------------------------------------------+ | gst-fluendo-asfdemux| 17/9/2020 | +------------+-----------------------------------------------------------------+ | gst-fluendo-h264dec| 22/9/2020 | +------------+-----------------------------------------------------------------+ | gst-fluendo-mp3| 17/9/2020 | +------------+-----------------------------------------------------------------+ | gst-fluendo-mpeg4video| 18/9/2020 | +------------+-----------------------------------------------------------------+ | gst-fluendo-vadec| 02/11/2020 | +------------+-----------------------------------------------------------------+ | gst-fluendo-wmadec| 17/9/2020 | +------------+-----------------------------------------------------------------+ | gst-fluendo-wmvdec| 17/9/2020 | +------------+-----------------------------------------------------------------+ * Fixed possible USB issues with suspend/resume on IGEL M350c devices. ### Audio * Fixed the ALSA Pulse PCM - a possible deadlock while writing audio data and closing Pulse PCM. * Fixed microphone issues with UD3-LX60 device. ### Remote Management * Fixed sporadic failures while retrieving the Unit ID by the IGEL Remote Management agent. Release Notes 11.04.215 (Based On 11.04.212) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### VMware Horizon * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview, cannot be resized anymore. * Seamless Apps do not open automatically when started, but remain iconified. They only open with click on the taskbar button (via respective window button) * When using RDP protocol, the remote session has a fixed offset of the approximate height of the menubar . That means a black bar on top of the Window occurs and as a result of that, the Windows panel at the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol do not send the keyup event and keep being pressed, even when actually released. Only when closing the session via usage of mouse, the modifiers are reset. * Copying Text from Horizon Blast sessions is not possible * The on-screen keyboard in Horizon appliance mode does not work correctly with local logon. Workaround: Switch off local logon and switch on the corresponding two keys via IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a citrix session in browser appliance mode, the browser is restarted twice instead of once. Security Fixes -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### Citrix * Integrated Citrix Workspace app 20.10 Available Citrix Workspace apps in this release: 20.10(default), 20.09 and 19.12 * Added: Multiple audio devices can be mapped inside the sessions. This will display audio devices with their device name and not only HDX audio anymore +------------+-----------------------------------------------------------------+ |Parameter |`Multiple Audio Device support` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.vdcamversion4support` | +------------+-----------------------------------------------------------------+ |Value |**False** (default)/True | +------------+-----------------------------------------------------------------+ * Note: Bluetooth devices are currently not supported for Device Redirection. Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Fixed issue with Workspace app 2010: Screen flickering while running a video call or sharing the screen in Microsoft Teams. * Fixed Issue with Workspace app 2010: Microsoft Teams calls are now working with different keyboard layouts. Release Notes 11.04.212 (Based On 11.04.210) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### Citrix * During the Microsoft Team optimization with Citrix Workspace app 20.06, webcam redirection or screen sharing can lead to display errors such as black stripes or flickering. ### VMware Horizon * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview, cannot be resized anymore. * Seamless Apps do not open automatically when started, but remain iconified. They only open with click on the taskbar button (via respective window button) * When using RDP protocol, the remote session has a fixed offset of the approximate height of the menubar . That means a black bar on top of the Window occurs and as a result of that, the Windows panel at the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol do not send the keyup event and keep being pressed, even when actually released. Only when closing the session via usage of mouse, the modifiers are reset. * Copying Text from Horizon Blast sessions is not possible * The on-screen keyboard in Horizon appliance mode does not work correctly with local logon. Workaround: Switch off local logon and switch on the corresponding two keys via IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a citrix session in browser appliance mode, the browser is restarted twice instead of once. Security Fixes -------------------------------------------------------------------------------- New Features -------------------------------------------------------------------------------- ### WVD * New parameter to set HTTP user agent string for AAD login requests. +------------+-----------------------------------------------------------------+ |Parameter |`HTTP user agent string` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.wvd%.options.http-user-agent` | +------------+-----------------------------------------------------------------+ |Type |editable | +------------+-----------------------------------------------------------------+ |Value |**System Default** (default) / Windows / Android / iOS / macOS / | +------------+-----------------------------------------------------------------+ Release Notes 11.04.210 (Based On 11.04.207) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### Citrix * During the Microsoft Team optimization with Citrix Workspace app 20.06, webcam redirection or screen sharing can lead to display errors such as black stripes or flickering. ### VMware Horizon * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview, cannot be resized anymore. * Seamless Apps do not open automatically when started, but remain iconified. They only open with click on the taskbar button (via respective window button) * When using RDP protocol, the remote session has a fixed offset of the approximate height of the menubar . That means a black bar on top of the Window occurs and as a result of that, the Windows panel at the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol do not send the keyup event and keep being pressed, even when actually released. Only when closing the session via usage of mouse, the modifiers are reset. * Copying Text from Horizon Blast sessions is not possible * The on-screen keyboard in Horizon appliance mode does not work correctly with local logon. Workaround: Switch off local logon and switch on the corresponding two keys via IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a citrix session in browser appliance mode, the browser is restarted twice instead of once. Security Fixes -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### CID Key Agent * Update of CID Key Agent to version 6.5.0-1 Release Notes 11.04.207 (Based On 11.04.203) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### Citrix * During the Microsoft Team optimization with the Citrix Workspace app 20.06, webcam redirection or screen sharing can lead to display errors such as black stripes or flickering. * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview, cannot be resized anymore. * Seamless Apps do not open automatically when started, but remain iconified. They only open with click on the taskbar button (via respective window button) * When using RDP protocol, the remote session has a fixed offset of the approximate height of the menubar . That means a black bar on top of the Window occurs and as a result of that, the Windows panel at the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol do not send the keyup event and keep being pressed, even when actually released. Only when closing the session via usage of mouse, the modifiers are reset. * Copying Text from Horizon Blast sessions is not possible * The on-screen keyboard in Horizon appliance mode does not work correctly with local logon. Workaround: Switch off local logon and switch on the corresponding two keys via IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a citrix session in browser appliance mode, the browser is restarted twice instead of once. Security Fixes -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### Network * Fixed: Failing Ethernet connection does not delay online state reached by other means anymore. * Added registry keys for enabling/disabling sending of hostname in DHCPv4 and DHCPv6 requests. +------------+-----------------------------------------------------------------+ | Parameter | `Send hostname in DHCP requests` | +------------+-----------------------------------------------------------------+ | Registry | `network.dhcp.send_hostname` | +------------+-----------------------------------------------------------------+ | Range | [Disabled][Network Manager default] | +------------+-----------------------------------------------------------------+ | Value | **Network Manager default** | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Send hostname in DHCPv6 requests` | +------------+-----------------------------------------------------------------+ | Registry | `network.dhcp6.send_hostname` | +------------+-----------------------------------------------------------------+ | Range | [Disabled][Network Manager default] | +------------+-----------------------------------------------------------------+ | Value | **Network Manager default** | +------------+-----------------------------------------------------------------+ * Fixed logon by 802.1X authentication. ### Base system * Fixed: Custom applications did not run while being offline even if they did not need network. ### X11 system * Fixed issues if 2 DisplayPort MST Hubs are connected behind each other. Release Notes 11.04.203 (Based On 11.04.200) -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### Citrix * During the Microsoft Team optimization with the Citrix Workspace app 20.06, webcam redirection or screen sharing can lead to display errors such as black stripes or flickering. ### VMware Horizon * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview, cannot be resized anymore. * Seamless Apps do not open automatically when started, but remain iconified. They only open with click on the taskbar button (via respective window button) * When using RDP protocol, the remote session has a fixed offset of the approximate height of the menubar . That means a black bar on top of the Window occurs and as a result of that, the Windows panel at the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol do not send the keyup event and keep being pressed, even when actually released. Only when closing the session via usage of mouse, the modifiers are reset. * Copying Text from Horizon Blast sessions is not possible * The on-screen keyboard in Horizon appliance mode does not work correctly with local logon. Workaround: Switch off local logon and switch on the corresponding two keys via IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smartcards. ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a citrix session in browser appliance mode, the browser is restarted twice instead of once. Security Fixes -------------------------------------------------------------------------------- Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Fixed: Improved pcom parameter pcom.valid_return_codes%.returncodes to handle ranges a la 1..255 (see tooltip). ### Network * Added registry key for disabling Ethernet link reconfiguration by Network Manager. +------------+-----------------------------------------------------------------+ | Parameter | `Disable NetworkManager link configuration` | +------------+-----------------------------------------------------------------+ | Registry | `network.interfaces.ethernet.device%.nm_disable_link_config` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | true / **false** (default) | +------------+-----------------------------------------------------------------+ * Setting this to true can be beneficial when 802.1X authentication is disturbed by link. It is currently set automatically when e1000e drivers are used. ### HID * Updated eGTouch (eGalax) drivers and xorg configuration. * Fixing double tapping of desktop icons on touchscreen devices. ### Window manager * Fixed desktop icons not being restricted to one monitor at all ### Audio * Fixed erroneous closing of the Pulse PCM device as well as a possible deadlock in the ALSA Pulse PCM. ### Remote Management * Fixed sending the user logoff message to the UMS. --- Release Notes 11.04.200 -------------------------------------------------------------------------------- Known Issues -------------------------------------------------------------------------------- ### Firmware Update * On devices with 2 GB of flash storage it could happen that there is not enough space for updating all features. In this case a corresponding error message occurs. Check https://kb.igel.com/igelos-11.04/en/error-not-enough-space-on-local-drive-when-updating-to-igel-os-11-04-or-higher-32870765.html for a solution. ### Firefox * Firefox IGEL extensions are not updated automatically under some circumstances. After an update from 11.03.xxx to 11.04.100 the IGEL extensions will stay on the old version. In this case, the following settings concerning kiosk mode cannot be executed: - Switch off Hotkey for new window/tab - Blocking of internal browser pages like preferences, file picker, specific local directories As a workaround: - a reset-to-defaults should be performed - or the browser's mimetype template could be switched from "Standard" to "Minimal" by registry key browserglobal.app.mimetypes_template. There the browser profile is renewed as well. After the TC received the new setting, a reboot and set the mimetypes_template registry key to "Standard" again. ### Citrix * With activated DRI3 and an AMD GPU Citrix H.264 acceleration plugin could freeze. Selective H.264 mode (API v2) is not affected from this issue. * Citrix has known issues with GStreamer1.0 which describe problems with multimedia redirection of H.264, MPEG1 and MPEG2. GStreamer1.0 is used if browser content redirection is active. * Browser content redirection does not work with activated DRI3 and hardware accelerated H.264 deep compression codec. * Citrix StoreFront login with Gemalto smartcard middleware does not detect smartcard correctly if the card is inserted after start of login. As a workaround, insert the smartcard before starting the StoreFront login. * Citrix H.264 acceleration plugin does not work with **enabled** server policy "Optimize for 3D graphics workload" in combination with server policy "Use video codec compression" -> *"For the entire screen"**. * To launch multiple desktop sessions with Citrix HDX RTME and Citrix H.264 acceleration plugin the following registry key must be enabled: +------------+-----------------------------------------------------------------+ |Parameter |`Activate workaround for dual RTME sessions and H264 acceleration` | +------------+-----------------------------------------------------------------+ |Registry |`ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ |Range | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * This workaround is not applicable when "Enable Secure ICA" is active for the specific delivery group. * During the running Microsoft Teams Optimization of Citrix Workspace App 20.06/20.09, webcam redirection or screen sharing may lead to display errors like black stripes or flickering. * The performance of Citrix sessions when using Workspace App 20.06 may be lower on some devices. Possible workaround is to disable the virtual channels for Microsoft Teams and NSAP or to set the HDX transport protocol to TCP only. - ica.module.virtualdriver.vdwebrtc.enable - ica.module.virtualdriver.nsap.enable The protocol can be set via the setup parameter Sessions > Citrix > Citrix Global > Options > HDX *Adaptive Transport over EDT or via the server policy 'HDX Adaptive Transport'. ### VMware Horizon * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, when using USB redirection for storage devices: The USB on-insertion feature is only working when the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. - On the other hand, when using drive mapping instead, it is recommended to either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. Furthermore Horizon Client relies on the OS to mount the storage devices itself. Enable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. * External drives mounted already before connection do not appear in the remote desktop. Workaround: map the directory /media as a drive. Then the external devices will show up inside the media drive. * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview cannot be resized anymore. * Seamless application windows in Horizon Client may not be displayed correctly. When starting the first seamless app a new iconified window appears in the taskbar and only if you click on it the application will show up. On some hardware (UD7-H850, UD2-M250, UD2-D220) however, the client aborts when this new window is de-iconified. * When using RDP protocol, the remote session has a fixed offset of approximately the height of the menubar . That means you have a black bar on top of the Window and as a result of that, the Windows panel on the bottom is cut off. * Modifier keys (Shift/Ctrl/Win/Alt) in session windows using RDP protocol don't send the keyup event and thus keep being pressed even when actually released. Only when you leave the session with the mouse the modifiers are reset. * Copying Text from Horizon Blast sessions isn't possible * The on-screen keyboard in Horizon appliance mode doesn't work correctly with local logon. You have to switch off local logon and switch on this two keys in the IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide ### WiFi * TP-Link Archer T2UH WiFi adapters does not work after system suspend/resume. Workaround: Disable system suspend at IGEL Setup > System > Power Options > Shutdown. ### Parallels Client * Native USB redirection does not work with Parallels Client. ### Smartcard * Citrix Certificate Identity Declaration login does not work with SecMaker smart cards. ### Multimedia * Multimedia redirection with GStreamer could fail with the Nouveau GPU driver ### Hyper-V * Hyper-V (Generation 2) needs a lot of memory (RAM). The machine needs a sufficient amount of memory allocated. ### VirtualBox * The current VirtualBox Guest Tools/Drivers will not work with VirtualBox 5.2.x or older hosts, which leads to black screen and non working graphic. Possible workaround: Install with 'Failsafe Installation + Recovery' and set **x.drivers.force_vesa** registry key to true. * When running in VirtualBox virtualization, resizing the window will not automatically change desktop resolution of IGEL OS guest. ### Audio * Audio jack detection on Advantec POC-W243L does not work. Therefore, sound output goes through a possibly connected headset and also the internal speakers. * IGEL UD2 (D220) fails to restore the volume level of the speaker when the device used firmware version 11.01.110 before. ### Hardware * HP t730 could freeze when monitors with different resolutions are connected (1920x1200 + 2560x1440 + 3840x1600 for example). When this occors, the registry key **x.drivers.kms.best_console_mode** has to be set to **disabled**. * Some newer Delock 62599 active DisplayPort to DVI (4k) adapters only work with INTEL devices. ### Remote Management * AIT feature with IGEL Starter License is only supported by the current UMS version 6.05.100 or newer. ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a Citrix session in browser appliance mode the browser is restarted twice instead of once. * Appliance mode RHEV/Spice: spice-xpi firefox plugin is not longer supported. The "Console Invocation" has to allow 'Native' client (auto is also possible) and should be started in fullscreen to prevent any opening windows. Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to 68.12.0esr: - Fixes for mfsa2020-11, also known as: CVE-2020-6819, CVE-2020-6820 - Fixes for mfsa2020-13, also known as: CVE-2020-6828, CVE-2020-6827, CVE-2020-6821, CVE-2020-6822, CVE-2020-6825 - Fixes for mfsa2020-17 also known as: CVE-2020-12387, CVE-2020-12388, CVE-2020-12389, CVE-2020-6831, CVE-2020-12392, CVE-2020-12393, CVE-2020-1239 - Fixes for mfsa2020-21 also known as: CVE-2020-12399, CVE-2020-12405, CVE-2020-12406, CVE-2020-12410 - Fixes for mfsa2020-25 also known as: CVE-2020-12417, CVE-2020-12418, CVE-2020-12419, CVE-2020-12420, CVE-2020-12421 - Fixes for mfsa2020-31 also known as: CVE-2020-15652, CVE-2020-6514, CVE-2020-6463, CVE-2020-15650, CVE-2020-15649, CVE-2020-15659 - Fixes for mfsa2020-37 also known as: CVE-2020-15663, CVE-2020-15664, CVE-2020-15669 ### Base system * Fixed privilege escalation via environment variables in the /bin/update binary. * Fixed privilege escalation via environment variable PATH in /bin/usershell binary. * Fixed privilege escalation via PATH environment variable in the /bin/update binary. New Features -------------------------------------------------------------------------------- ### Citrix * Integrated Citrix Workspace app 20.09. Removed Citrix Workspace app 18.10. Available Citrix Workspace apps in this release: 20.09(default), 20.06 and 19.12 The performance of the Citrix Workspace app 20.09 was improved and a more detailed logging was implemented. * Citrix logging was summarized, now only one parameter is needed to activate logging. +------------+-----------------------------------------------------------------+ |Parameter |`Enable logging for Citrix sessions` | +------------+-----------------------------------------------------------------+ |Registry |`ica.logging.debug` | +------------+-----------------------------------------------------------------+ |Value |**off** (default)/on | +------------+-----------------------------------------------------------------+ * Since Workspace app 20.09 the tool setlog is used to configure the logging. For this purpose parameters are provided in the registry ica.logging.setlog, usually nothing needs to be changed. * After disabling logging, the system must be restarted once. * Integrated **Zoom Media Plugin 5.2.456413.0902** * Added PAC proxy auto configuration support for Zoom Media Plugin (ZoomVDI). To configure, following parameter needs to be set network.proxy.settings.sys_proxy_type="Automatic proxy configuration" and set the paremter network.proxy.settings.sys_proxy_autoconfig_url="http://...." Alternatively, the manual HTTP/HTTPS proxy setting configured at IGEL Setup > Network > Proxy is used now for Zoom Media Plugin. * Improved configuration of ZoomVDI client. ### Cisco Webex ** Integrated Cisco webex Meetings 40.10 ### Parallels Client * Updated Parallels Client to version 17.1.2.1 Fixed security vulnerability issue disclosed in Parallels KB article https://kb.parallels.com/en/125112 ### Audio * Added EPOS Connect 5.0.1.2795 +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices -> Unified Communications -> EPOS Audio -> EPOS Connect | +============+=================================================================+ | Parameter | `Enable EPOS Connect` | +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.enable` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices -> Unified Communications -> EPOS Audio -> EPOS Connect | +============+=================================================================+ | Parameter | `Tenant ID` | +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.tenant_id` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | `` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices -> Unified Communications -> EPOS Audio -> EPOS Connect | +============+=================================================================+ | Parameter | `Backend Endpoint` | +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.tenant_url` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | `` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices -> Unified Communications -> EPOS Audio -> EPOS Connect | +============+=================================================================+ | Parameter | `Proxy` | +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.proxy` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | `` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.log_level` | +------------+-----------------------------------------------------------------+ | Value | Trace / Debug / **Information** (default) / Warnings / Errors / Exceptions / No logs | +------------+-----------------------------------------------------------------+ ### Smartcard * Updated A.E.T. Europe SafeSign Identity Client to version 3.6.0.0. ### Multimedia * Added possibility to fetch log files of the Zoom Media Plugin (ZoomVDI) via UMS support information. ### Hardware * Added detection of UD Pocket UC5-LX 2. ### Misc * Updated Login Enterprise to version 4.2. Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Fixed the problem with apparmor and the Citrix MS Teams workaround * Fixed: In some Citrix sessions there have been sporadic appearances of black rectangles when the feature "Accelerated H.264 Deep Compression Codec" is active. * Integrated parameter to activate the workaround for the keyboard language issue with MS Teams Optimization.. +------------+-----------------------------------------------------------------+ |Parameter |`Microsoft Teams optimization keyboard language workaround` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.virtualdriver.vdwebrtc.keyboard_workaround` | +------------+-----------------------------------------------------------------+ |Value |**off** (default)/on | +------------+-----------------------------------------------------------------+ ### RDP/IGEL RDP Client 2 * Improved error logging. * Fixed USB redirection for RDP Sessions. ### Firefox * Fixed smartcard access in Firefox. Before this fix, smartcards were not recognized occasionally. ### Network * Fixed handling of DNS default domain ### Window manager * Fixed crash of start menu, where is was not populated with any items. * Fixed start monitor mapping for Firefox. ### Network * Added registry key specifying the number of 802.1X authentication attempts on Ethernet. +------------+-----------------------------------------------------------------+ | Registry | `network.interfaces.ethernet.device%.ieee8021x.auth_attempts` | +------------+-----------------------------------------------------------------+ | Type | integer | +------------+-----------------------------------------------------------------+ | Value | 1 **Default** | +------------+-----------------------------------------------------------------+ * SCEP: Fixed derivation of 802.1X identity from client certificate. ### WiFi * Added missing iwlwifi-6000-4 firmware file. ### Open VPN * Fixed segmentation fault, when nameserver was used * Added: Different protocols are now selectable: +------------+-----------------------------------------------------------------+ | Parameter | `protocol` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.openconnect%.vpnopts.protocol` | +------------+-----------------------------------------------------------------+ | Value | **Cisco AnyConnect** (default)/ Juniper Network / Junos Pulse / PAN GlobalProtect | +------------+-----------------------------------------------------------------+ ### Base system * Fixed panels clock format via registry key 'windowmanager.wm%.variables.clock_time'. * Post session command binaries and return codes are now customizable via registry. Allows post session commands if a binary doesn't return 0. Name of the binary: +------------+-----------------------------------------------------------------+ | Parameter | `Binary` | +------------+-----------------------------------------------------------------+ | Registry | `pcom.valid_return_codes.binary` | +------------+-----------------------------------------------------------------+ | Value | binary name | +------------+-----------------------------------------------------------------+ Comma seperated return codes (e.g. 7,99) or/and return code ranges (e.g. 3..5 for 3,4,5) to be accepted: +------------+-----------------------------------------------------------------+ | Parameter | `Return Codes` | +------------+-----------------------------------------------------------------+ | Registry | `pcom.valid_return_codes.returncodes` | +------------+-----------------------------------------------------------------+ | Value | e.g. 3,5,10..15 for 3,5,10,11,12,13,14,15 | +------------+-----------------------------------------------------------------+ * Fixed problems with hostnames containing one or more "_" characters. * Added: Show AMD Memory Guard in Boot Mode, when enabled. ### Storage Devices * Fixed display of hotplug eject menu in appliance mode ### Remote Management * Fixed ICG HA functionality broken in the 11.04.100. * Fixed automatic establishment of the configured ICG connection if the UMS server is unreachable.