IGEL OS 11 ========== Firmware version 11.05.100 Release date 2021-02-25 Last update of this document 2021-02-25 [> IGEL Release Notes](https://kb.igel.com/igelos11/releasenotes) Supported Devices ------------------------------------------------------------------------------- UD2-LX 51, UD2-LX 50, UD2-LX 40 UD3-LX 60, UD3-LX 51, UD3-LX 50 UD5-LX 50 UD6-LX 51 UD7-LX 20, UD7-LX 11, UD7-LX 10 UD9-LX Touch 41, UD9-LX 40 [> Supported IGEL OS 11 thirdparty devices](https://kb.igel.com/os11-supported-hardware) Component Versions ------------------------------------------------------------------------------- +-------------------------------------------+----------------------------------+ | Clients | | +===========================================+==================================+ | Chromium | 88.0.4324.150-igel1612763117 | +-------------------------------------------+----------------------------------+ | CID Key | 6.5.0-2 | +-------------------------------------------+----------------------------------+ | Cisco JVDI Client | 12.9.3 | +-------------------------------------------+----------------------------------+ | Cisco Webex Teams VDI Client | 41.1.0.17621 | +-------------------------------------------+----------------------------------+ | Cisco Webex Meetings VDI Client | 41.2.0.142 | +-------------------------------------------+----------------------------------+ | Zoom Media Plugin | 5.4.59458.0109 | +-------------------------------------------+----------------------------------+ | Citrix HDX Realtime Media Engine | 2.9.200-2506 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 19.12.0.19 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 20.10.0.6 | +-------------------------------------------+----------------------------------+ | Citrix Workspace App | 20.12.0.12 | +-------------------------------------------+----------------------------------+ | deskMate Client | 2.1.3 | +-------------------------------------------+----------------------------------+ | deviceTRUST Citrix Channel | 20.1.200.0 | +-------------------------------------------+----------------------------------+ | Crossmatch DP Citrix Channel | 0125 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 12.0.1.0.20170219.2-_dev_-34574 | +-------------------------------------------+----------------------------------+ | Ericom PowerTerm | 14.0.0.45623 | +-------------------------------------------+----------------------------------+ | Evidian AuthMgr | 1.5.7617 | +-------------------------------------------+----------------------------------+ | Evince PDF Viewer | 3.28.4-0ubuntu1.2 | +-------------------------------------------+----------------------------------+ | FabulaTech USB for Remote Desktop | 6.0.28 | +-------------------------------------------+----------------------------------+ | FabulaTech Scanner for Remote Desktop | 2.7.0.1 | +-------------------------------------------+----------------------------------+ | FabulaTech Webcam for Remote Desktop | 2.8.10 | +-------------------------------------------+----------------------------------+ | Firefox | 78.6.1 | +-------------------------------------------+----------------------------------+ | IBM iAccess Client Solutions | 1.1.8.1 | +-------------------------------------------+----------------------------------+ | IGEL RDP Client | 2.2igel1605251065 | +-------------------------------------------+----------------------------------+ | IGEL WVD Client | 1.0.22igel1612537530 | +-------------------------------------------+----------------------------------+ | Imprivata OneSign ProveID Embedded | onesign-bootstrap-loader_1.0.523630_amd64 | +-------------------------------------------+----------------------------------+ | deviceTRUST RDP Channel | 20.1.200.0 | +-------------------------------------------+----------------------------------+ | NCP Secure Enterprise Client | 5.10_rev40552 | +-------------------------------------------+----------------------------------+ | NX Client | 6.11.2-1igel8 | +-------------------------------------------+----------------------------------+ | Open VPN | 2.5.0-1igel1606475118 | +-------------------------------------------+----------------------------------+ | Zulu JRE | 8.48.0.51-2 | +-------------------------------------------+----------------------------------+ | Parallels Client | 17.1.2.1 | +-------------------------------------------+----------------------------------+ | Spice GTK (Red Hat Virtualization) | 0.39-1igel106 | +-------------------------------------------+----------------------------------+ | Remote Viewer (Red Hat Virtualization) | 8.0-2git20191213.e4bacb8igel83 | +-------------------------------------------+----------------------------------+ | Usbredir (Red Hat Virtualization) | 0.8.0-1+b1igel71 | +-------------------------------------------+----------------------------------+ | SpeechWrite | 1.0 | +-------------------------------------------+----------------------------------+ | Teradici PCoIP Software Client | 20.10.0-18.04 | +-------------------------------------------+----------------------------------+ | ThinLinc Client | 4.12.0-6517 | +-------------------------------------------+----------------------------------+ | ThinPrint Client | 7-7.6.126 | +-------------------------------------------+----------------------------------+ | Totem Media Player | 2.30.2-0ubuntu1igel55 | +-------------------------------------------+----------------------------------+ | Parole Media Player | 1.0.5-1igel1583919770 | +-------------------------------------------+----------------------------------+ | VNC Viewer | 1.10.1+dfsg-9igel17 | +-------------------------------------------+----------------------------------+ | VMware Horizon client | 2012-8.1.0-17349998 | +-------------------------------------------+----------------------------------+ | Voip Client Ekiga | 4.0.1-9build1igel6 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Dictation | | +===========================================+==================================+ | Diktamen driver for dictation | | +-------------------------------------------+----------------------------------+ | Grundig Business Systems dictation driver | | +-------------------------------------------+----------------------------------+ | Nuance Audio Extensions for dictation | B301 | +-------------------------------------------+----------------------------------+ | Olympus driver for dictation | 20201118 | +-------------------------------------------+----------------------------------+ | Philips Speech driver | 12.9.1 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Signature | | +===========================================+==================================+ | Kofax SPVC Citrix Channel | 3.1.41.0 | +-------------------------------------------+----------------------------------+ | signotec Citrix Channel | 8.0.9 | +-------------------------------------------+----------------------------------+ | signotec VCOM Daemon | 2.0.0 | +-------------------------------------------+----------------------------------+ | StepOver TCP Client | 2.4.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Smartcard | | +===========================================+==================================+ | PKCS#11 Library A.E.T. SafeSign | 3.6.0.0-AET.000 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Athena IDProtect | 7 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library cryptovision sc/interface | 7.3.1 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Gemalto SafeNet | 10.7.77 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library OpenSC | 0.21.0-1igel39 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library SecMaker NetID | 6.8.3.21 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library 90meter | 20190522 | +-------------------------------------------+----------------------------------+ | Reader Driver ACS CCID | 1.1.6-1igel2 | +-------------------------------------------+----------------------------------+ | Reader Driver Gemalto eToken | 10.7.77 | +-------------------------------------------+----------------------------------+ | Reader Driver HID Global Omnikey | 4.3.3 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive CCID | 5.0.35 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive eHealth200 | 1.0.5 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive SCRKBC | 5.0.24 | +-------------------------------------------+----------------------------------+ | Reader Driver MUSCLE CCID | 1.4.31-1igel11 | +-------------------------------------------+----------------------------------+ | Reader Driver REINER SCT cyberJack | 3.99.5final.sp13igel15 | +-------------------------------------------+----------------------------------+ | Resource Manager PC/SC Lite | 1.9.0-1igel16 | +-------------------------------------------+----------------------------------+ | Cherry USB2LAN Proxy | 3.2.0.3 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | System Components | | +===========================================+==================================+ | OpenSSL | 1.0.2n-1ubuntu5.5 | +-------------------------------------------+----------------------------------+ | OpenSSL | 1.1.1-1ubuntu2.1~18.04.7 | +-------------------------------------------+----------------------------------+ | OpenSSH Client | 8.4p1-3igel4 | +-------------------------------------------+----------------------------------+ | OpenSSH Server | 8.4p1-3igel4 | +-------------------------------------------+----------------------------------+ | Bluetooth Stack (bluez) | 5.55-0ubuntu1.1igel10 | +-------------------------------------------+----------------------------------+ | MESA OpenGL Stack | 20.2.6-1igel131 | +-------------------------------------------+----------------------------------+ | VAAPI ABI Version | 0.40 | +-------------------------------------------+----------------------------------+ | VDPAU Library Version | 1.4-3igel1099 | +-------------------------------------------+----------------------------------+ | Graphics Driver INTEL | 2.99.917+git20200515-igel1013 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/RADEON | 19.1.0-2igel1066 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/AMDGPU | 19.1.0-2+git20200828igel1064 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nouveau (Nvidia Legacy) | 1.0.16-1igel867 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nvidia | 450.102.04-0ubuntu0.20.04.1 | +-------------------------------------------+----------------------------------+ | Graphics Driver VMware | 13.3.0-2igel857 | +-------------------------------------------+----------------------------------+ | Graphics Driver QXL (Spice) | 0.1.5-2build2-igel925 | +-------------------------------------------+----------------------------------+ | Graphics Driver FBDEV | 0.5.0-1igel1012 | +-------------------------------------------+----------------------------------+ | Graphics Driver VESA | 2.4.0-1igel1010 | +-------------------------------------------+----------------------------------+ | Input Driver Evdev | 2.10.6-2igel1037 | +-------------------------------------------+----------------------------------+ | Input Driver Elographics | 1.4.1-1+b6igel952 | +-------------------------------------------+----------------------------------+ | Input Driver eGalax | 2.5.8825 | +-------------------------------------------+----------------------------------+ | Input Driver Synaptics | 1.9.1-1ubuntu1igel1009 | +-------------------------------------------+----------------------------------+ | Input Driver VMMouse | 13.1.0-1ubuntu2igel957 | +-------------------------------------------+----------------------------------+ | Input Driver Wacom | 0.39.0-0ubuntu1igel1036 | +-------------------------------------------+----------------------------------+ | Input Driver ELO Multitouch | 3.0.0 | +-------------------------------------------+----------------------------------+ | Input Driver ELO Singletouch | 5.1.0 | +-------------------------------------------+----------------------------------+ | Kernel | 5.9.16 #mainline-lxos-g1613995475 | +-------------------------------------------+----------------------------------+ | Xorg X11 Server | 1.20.10-2igel1100 | +-------------------------------------------+----------------------------------+ | Xorg Xephyr | 1.20.10-2igel1100 | +-------------------------------------------+----------------------------------+ | CUPS Printing Daemon | 2.2.7-1ubuntu2.8igel32 | +-------------------------------------------+----------------------------------+ | PrinterLogic | 25.1.0.425 | +-------------------------------------------+----------------------------------+ | Lightdm Graphical Login Manager | 1.26.0-0ubuntu1igel13 | +-------------------------------------------+----------------------------------+ | XFCE4 Window Manager | 4.14.2-1~18.04igel1600339249 | +-------------------------------------------+----------------------------------+ | ISC DHCP Client | 4.3.5-3ubuntu7.1 | +-------------------------------------------+----------------------------------+ | NetworkManager | 1.20.4-2ubuntu2.2igel105 | +-------------------------------------------+----------------------------------+ | ModemManager | 1.10.0-1~ubuntu18.04.2 | +-------------------------------------------+----------------------------------+ | GStreamer 0.10 | 0.10.36-2ubuntu0.1igel201 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo aacdec | 0.10.42 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo asfdemux | 0.10.90 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo h264dec | 0.10.58 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo mp3dec | 0.10.40 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo mpegdemux | 0.10.85 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo mpeg4videodec | 0.10.44 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo vadec | 0.10.224 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo wmadec | 0.10.70 | +-------------------------------------------+----------------------------------+ | Gstreamer 0.10 Fluendo wmvdec | 0.10.66 | +-------------------------------------------+----------------------------------+ | GStreamer 1.x | 1.18.3-1igel283 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo aacdec | 0.10.42.2-8d6d | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo asfdemux | 0.10.90 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo h264dec | 0.10.58 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo mp3dec | 0.10.40 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo mpeg4videodec | 0.10.44 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo vadec | 0.10.224 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo wmadec | 0.10.70 | +-------------------------------------------+----------------------------------+ | Gstreamer 1.0 Fluendo wmvdec | 0.10.66 | +-------------------------------------------+----------------------------------+ | WebKit2Gtk | 2.30.4-1igel40 | +-------------------------------------------+----------------------------------+ | Python2 | 2.7.17 | +-------------------------------------------+----------------------------------+ | Python3 | 3.6.9 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | VM Guest Support Components | | +===========================================+==================================+ | Virtualbox Guest Utils | 6.1.18-dfsg-1igel49 | +-------------------------------------------+----------------------------------+ | Virtualbox X11 Guest Utils | 6.1.18-dfsg-1igel49 | +-------------------------------------------+----------------------------------+ | Open VM Tools | 11.0.5-4ubuntu0.18.04.1 | +-------------------------------------------+----------------------------------+ | Open VM Desktop Tools | 11.0.5-4ubuntu0.18.04.1 | +-------------------------------------------+----------------------------------+ | Xen Guest Utilities | 7.10.0-0ubuntu1 | +-------------------------------------------+----------------------------------+ | Spice Vdagent | 0.20.0-2igel104 | +-------------------------------------------+----------------------------------+ | Qemu Guest Agent | 5.2+dfsg-3igel17 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited IGEL Support | | +===========================================+==================================+ | Mobile Device Access USB (MTP) | 1.1.17-3igel5 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (imobile) | 1.3.0-5igel11 | +-------------------------------------------+----------------------------------+ | Mobile Device Access USB (gphoto) | 2.5.26-2igel7 | +-------------------------------------------+----------------------------------+ | VPN OpenConnect | 8.10-2igel6 | +-------------------------------------------+----------------------------------+ | Scanner support | 1.0.27-1 | +-------------------------------------------+----------------------------------+ | VirtualBox | 6.1.18-dfsg-1igel49 | +-------------------------------------------+----------------------------------+ +------------------------------------------------------------------------+ | Services | Size | Reduced Firmware | +========================================================================+ | Asian Language Support | 22.5M | Included | +------------------------------------------------------------------------+ | Java SE Runtime Environment | 36.0M | Included | +------------------------------------------------------------------------+ | Citrix StoreFront | 235.8M | Included | | Citrix Workspace app | | | | Citrix Appliance | | | +------------------------------------------------------------------------+ | Ericom PowerTerm InterConnect | 15.5M | Included | +------------------------------------------------------------------------+ | Media Player | 512.0K | Included | +------------------------------------------------------------------------+ | Citrix Appliance | 76.5M | Included | | Local Browser (Firefox) | | | +------------------------------------------------------------------------+ | VMware Horizon | 4.5M | Included | | RDP | | | +------------------------------------------------------------------------+ | Cendio ThinLinc | 10.0M | Included | +------------------------------------------------------------------------+ | Printing (Internet printing protocol CUPS) | 22.2M | Included | +------------------------------------------------------------------------+ | NoMachine NX | 26.8M | Included | +------------------------------------------------------------------------+ | VMware Horizon | 131.2M | Included | +------------------------------------------------------------------------+ | Voice over IP (Ekiga) | 6.5M | Included | +------------------------------------------------------------------------+ | Citrix Appliance | 768.0K | Included | +------------------------------------------------------------------------+ | NCP Enterprise VPN Client | 27.0M | Not included | +------------------------------------------------------------------------+ | Fluendo GStreamer Codec Plugins | 6.5M | Included | +------------------------------------------------------------------------+ | IBM i Access Client Solutions | 72.5M | Not included | +------------------------------------------------------------------------+ | Red Hat Enterprise Virtualization | 3.0M | Included | +------------------------------------------------------------------------+ | Parallels Client | 5.5M | Included | +------------------------------------------------------------------------+ | NVIDIA graphics driver | 126.8M | Not included | +------------------------------------------------------------------------+ | Imprivata Appliance | 10.8M | Included | +------------------------------------------------------------------------+ | Evidian AuthMgr | 2.5M | Included | +------------------------------------------------------------------------+ | Hardware Video Acceleration | 13.5M | Included | +------------------------------------------------------------------------+ | Extra Font Package | 1.0M | Included | +------------------------------------------------------------------------+ | Fluendo GStreamer AAC Decoder | 1.2M | Included | +------------------------------------------------------------------------+ | x32 Compatibility Support | 3.5M | Included | +------------------------------------------------------------------------+ | Cisco JVDI client | 45.8M | Included | +------------------------------------------------------------------------+ | PrinterLogic | 40.8M | Not included | +------------------------------------------------------------------------+ | Biosec BS Login | 10.0M | Not included | +------------------------------------------------------------------------+ | Login VSI Login Enterprise | 28.8M | Not included | +------------------------------------------------------------------------+ | Stratusphere UX CID Key software | 2.8M | Not included | +------------------------------------------------------------------------+ | Elastic Filebeat | 15.8M | Not included | +------------------------------------------------------------------------+ | WVD | 88.2M | Included | +------------------------------------------------------------------------+ | Local Browser (Chromium) | 87.8M | Not included | +------------------------------------------------------------------------+ | deskMate Client | 5.8M | Included | +------------------------------------------------------------------------+ | Cisco Webex Teams VDI | 36.8M | Not included | +------------------------------------------------------------------------+ | Cisco Webex Meetings VDI | 32.2M | Not included | +------------------------------------------------------------------------+ | Zoom VDI Media Plugin | 42.2M | Not included | +------------------------------------------------------------------------+ | DriveLock | 13.2M | Included | +------------------------------------------------------------------------+ | SpeechWrite Client | 256.0K | Included | +------------------------------------------------------------------------+ | Teradici PCoIP Client | 14.5M | Included | +------------------------------------------------------------------------+ | 90meter Smart Card Support | 256.0K | Included | +------------------------------------------------------------------------+ | Limited Support Features | 256.0K | Not included | | Virtualbox (Limited support) | | | | Mobile Device Access USB (Limited support) | | | | Scanner support / SANE (Limited support) | | | | VPN OpenConnect (Limited support) | | | +------------------------------------------------------------------------+ | Mobile Device Access USB (Limited support) | 256.0K | Not included | +------------------------------------------------------------------------+ | VPN OpenConnect (Limited support) | 1.0M | Not included | +------------------------------------------------------------------------+ | Scanner support / SANE (Limited support) | 2.5M | Not included | +------------------------------------------------------------------------+ | Virtualbox (Limited support) | 63.8M | Not included | +------------------------------------------------------------------------+ General Information -------------------------------------------------------------------------------- To be benefical of all new features and implementations, it is recommended to use UMS 6.07.100 or later and updating the corresponding profiles. ### CAUTION: * Firmware downgrade to older versions (11.01 or 11.02) is not possible, due to the unsigned firmware update files. ### The following clients and features are not supported anymore * Caradigm * Citrix Legacy Sessions * Citrix Web Interface * Citrix StoreFront Legacy * Citrix HDX Flash Redirection * Citrix XenDesktop Appliance Mode * Flash Player Download * JAVA Web Start * Leostream Java Connect * Systancia AppliDis * VIA graphics driver Known Issues -------------------------------------------------------------------------------- ### Firmware Update * On devices with 2 GB of flash storage it could happen that there is not enough space for updating all features. In this case a corresponding error message occurs. Please visit https://kb.igel.com/igelos-11.04/en/error-not-enough-space-on-local-drive-when-updating-to-igel-os-11-04-or-higher-32870765.html for a possible solution and additional information. ### Citrix * With activated DRI3 and an AMD GPU Citrix H.264 acceleration plugin could freeze. Selective H.264 mode (API v2) is not affected from this issue. * Citrix has known issues with GStreamer1.0 which describe problems with multimedia redirection of H.264, MPEG1 and MPEG2. GStreamer1.0 is used if browser content redirection is active. * Browser content redirection does not work with activated DRI3 and hardware accelerated H.264 deep compression codec. * Citrix H.264 acceleration plugin does not work with **enabled** server policy "Optimize for 3D graphics workload" in combination with server policy "Use video codec compression" -> *"For the entire screen"**. * To launch multiple desktop sessions with Citrix HDX RTME and Citrix H.264 acceleration plugin the following registry key must be enabled: +------------+-----------------------------------------------------------------+ |Parameter |`Activate workaround for dual RTME sessions and H264 acceleration` | +------------+-----------------------------------------------------------------+ |Registry |`ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ |Range | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * This workaround is not applicable when "Enable Secure ICA" is active for the specific delivery group. * Adding smartcard readers while the session is ongoing does not work. The reader is visible, but cannot be used due to permanently unknown reader status. ### VMware Horizon * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, when using USB redirection for storage devices: The USB on-insertion feature is only working when the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. - On the other hand, when using drive mapping instead, it is recommended to either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. Furthermore Horizon Client relies on the OS to mount the storage devices itself. Enable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. * External drives mounted already before connection do not appear in the remote desktop. Workaround: map the directory /media as a drive. Then the external devices will show up inside the media drive. * After disconnect of an RDP based session, the Horizon main window which contains the server or sessions overview cannot be resized anymore. * Copying Text from Horizon Blast sessions isn't possible * The on-screen keyboard in Horizon appliance mode doesn't work correctly with local logon. You have to switch off local logon and switch on this two keys in the IGEL registry: userinterface.softkeyboard.autoshow userinterface.softkeyboard.autohide * Zoom VDI Media Plugin makes Horizon Client crash upon connection to the remote desktop in cases when TCSetup is running at the same time. ### Chromium * H.264 decoding is not supported anymore. ### WiFi * TP-Link Archer T2UH WiFi adapters does not work after system suspend/resume. Workaround: Disable system suspend at IGEL Setup > System > Power Options > Shutdown. ### Parallels Client * Native USB redirection does not work with Parallels Client. ### Cisco JVDI Client * There may be a segfault shown in the logs (during logout of Citrix Desktop session). Occurs only when using Citrix Workspace app 20.10 and Cisco JVDI. ### Multimedia * Multimedia redirection with GStreamer could fail with the Nouveau GPU driver ### Hyper-V * Hyper-V (Generation 2) needs a lot of memory (RAM). The machine needs a sufficient amount of memory allocated. ### VirtualBox * The current VirtualBox Guest Tools/Drivers will not work with VirtualBox 5.2.x or older hosts, which leads to black screen and non working graphic. Possible workaround: Install with 'Failsafe Installation + Recovery' and set **x.drivers.force_vesa** registry key to true. ### Audio * Audio jack detection on Advantec POC-W243L does not work. Therefore, sound output goes through a possibly connected headset and also the internal speakers. * IGEL UD2 (D220) fails to restore the volume level of the speaker when the device used firmware version 11.01.110 before. ### Hardware * Some newer Delock 62599 active DisplayPort to DVI (4k) adapters only work on INTEL-based devices. ### Remote Management * AIT feature with IGEL Starter License is only supported by UMS version 6.05.100 or newer. ### Base system * Update from memory stick requires network online state (at least when multiple update stages are involved) * Unreliable messages in user dialog for applying settings during boot. Could occure when new settings were fetched from the UMS. ### deskMate * Some stability issues may remain. ### Appliance Mode * When ending a Citrix session in browser appliance mode, the browser is restarted twice instead of once. * Appliance mode RHEV/Spice: spice-xpi firefox plugin is not longer supported. The "Console Invocation" has to allow 'Native' client (auto is also possible) and should be started in fullscreen to prevent any opening windows. Security Fixes -------------------------------------------------------------------------------- ### Citrix * Fixed file properties for /var/log/.ctxlogconf adjusted, so no code can be executed by user. ### Firefox * Added view-source:file:/// to the blocklist in case the browser should not have random access to local file system. ### Base system * Fixed bluez security issue CVE-2020-0556. * Fixed librsvg security issue CVE-2019-20446. * Fixed ppp security issue CVE-2020-15704. * Fixed chromium-browser security issues CVE-2020-6541, CVE-2020-6540, CVE-2020-6539, CVE-2020-6538, CVE-2020-6537, CVE-2020-6536, CVE-2020-6535, CVE-2020-6534, CVE-2020-6533, CVE-2020-6532, CVE-2020-6531, CVE-2020-6530, CVE-2020-6529, CVE-2020-6528, CVE-2020-6527, CVE-2020-6526, CVE-2020-6525, CVE-2020-6524, CVE-2020-6523, CVE-2020-6522, CVE-2020-6521, CVE-2020-6520, CVE-2020-6519, CVE-2020-6518, CVE-2020-6517, CVE-2020-6516, CVE-2020-6515, CVE-2020-6514, CVE-2020-6513, CVE-2020-6512, CVE-2020-6511, CVE-2020-6510, CVE-2020-6509, CVE-2020-6507, CVE-2020-6506, CVE-2020-6505, CVE-2020-6496, CVE-2020-6495, CVE-2020-6494, CVE-2020-6493, CVE-2020-6571, CVE-2020-6570, CVE-2020-6569, CVE-2020-6568, CVE-2020-6567, CVE-2020-6566, CVE-2020-6565, CVE-2020-6564, CVE-2020-6563, CVE-2020-6562, CVE-2020-6561, CVE-2020-6560, CVE-2020-6559, CVE-2020-6558, CVE-2020-6556, CVE-2020-6555, CVE-2020-6554, CVE-2020-6553, CVE-2020-6552, CVE-2020-6551, CVE-2020-6550, CVE-2020-6549, CVE-2020-6548, CVE-2020-6547, CVE-2020-6546, CVE-2020-6545, CVE-2020-6544, CVE-2020-6543, CVE-2020-6542, CVE-2020-6576, CVE-2020-6575, CVE-2020-6574, CVE-2020-6573, CVE-2020-15966, CVE-2020-15965, CVE-2020-15964, CVE-2020-15963, CVE-2020-15962, CVE-2020-15961, CVE-2020-15960, CVE-2020-15959, CVE-2020-6557, CVE-2020-15992, CVE-2020-15991, CVE-2020-15990, CVE-2020-15989, CVE-2020-15988, CVE-2020-15987, CVE-2020-15986, CVE-2020-15985, CVE-2020-15984, CVE-2020-15983, CVE-2020-15982, CVE-2020-15981, CVE-2020-15980, CVE-2020-15979, CVE-2020-15978, CVE-2020-15977, CVE-2020-15976, CVE-2020-15975, CVE-2020-15974, CVE-2020-15973, CVE-2020-15972, CVE-2020-15971, CVE-2020-15970, CVE-2020-15969, CVE-2020-15968, CVE-2020-15967, CVE-2020-16017, CVE-2020-16013, CVE-2020-16011, CVE-2020-16009, CVE-2020-16008, CVE-2020-16007, CVE-2020-16006, CVE-2020-16005, CVE-2020-16003, CVE-2020-16002, CVE-2020-16001, CVE-2020-16000, CVE-2020-15999, CVE-2020-16036, CVE-2020-16035, CVE-2020-16034, CVE-2020-16033, CVE-2020-16032, CVE-2020-16031, CVE-2020-16030, CVE-2020-16029, CVE-2020-16028, CVE-2020-16027, CVE-2020-16026, CVE-2020-16025, CVE-2020-16024, CVE-2020-16023, CVE-2020-16022, CVE-2020-16021, CVE-2020-16020, CVE-2020-16019, CVE-2020-16018, CVE-2020-16015, CVE-2020-16014, CVE-2020-16012, CVE-2019-8075, CVE-2020-16042, CVE-2020-16041, CVE-2020-16040, CVE-2020-16039, CVE-2020-16038, CVE-2020-16037, CVE-2021-21116, CVE-2021-21115, CVE-2021-21114, CVE-2021-21113, CVE-2021-21112, CVE-2021-21111, CVE-2021-21110, CVE-2021-21109, CVE-2021-21108, CVE-2021-21107, CVE-2021-21106, CVE-2020-16043, CVE-2020-15995, CVE-2021-21148, CVE-2021-21147, CVE-2021-21146, CVE-2021-21145, CVE-2021-21144, CVE-2021-21143, CVE-2021-21142, CVE-2021-21141, CVE-2021-21140, CVE-2021-21139, CVE-2021-21138, CVE-2021-21137, CVE-2021-21136, CVE-2021-21135, CVE-2021-21134, CVE-2021-21133, CVE-2021-21132, CVE-2021-21131, CVE-2021-21130, CVE-2021-21129, CVE-2021-21128, CVE-2021-21127, CVE-2021-21126, CVE-2021-21125, CVE-2021-21124, CVE-2021-21123, CVE-2021-21122, CVE-2021-21121, CVE-2021-21120, CVE-2021-21119, CVE-2021-21118, CVE-2021-21117 and CVE-2020-16044. * Fixed ffmpeg security issues CVE-2020-14212, CVE-2020-13904, CVE-2020-35965 and CVE-2020-35964. * Fixed pulseaudio security issues CVE-2020-11931 and CVE-2020-16123. * Fixed nss security issues CVE-2020-6829, CVE-2020-12401, CVE-2020-12400 and CVE-2020-12403. * Fixed libvirt security issues CVE-2020-14301, CVE-2020-12430, CVE-2020-10701 and CVE-2020-14339. * Fixed libslirp security issues CVE-2020-10756, CVE-2020-29130 and CVE-2020-29129. * Fixed samba security issues CVE-2020-14303, CVE-2020-1472, CVE-2020-1472, CVE-2020-14383, CVE-2020-14323 and CVE-2020-14318. * Fixed qemu security issues CVE-2020-16092, CVE-2020-14364, CVE-2020-15863, CVE-2020-13800, CVE-2020-13791, CVE-2020-13754, CVE-2020-13659, CVE-2020-13362, CVE-2020-13361, CVE-2020-13253, CVE-2020-12829, CVE-2020-10761, CVE-2020-28916, CVE-2020-27821, CVE-2020-27661, CVE-2020-27617, CVE-2020-27616, CVE-2020-25723, CVE-2020-25707, CVE-2020-25625, CVE-2020-25624, CVE-2020-25085, CVE-2020-25084 and CVE-2020-15859. * Fixed bind9 security issues CVE-2020-8624, CVE-2020-8623 and CVE-2020-8622. * Fixed grub2 security issues CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15706 and CVE-2020-15707. * Fixed sane-backends security issues CVE-2020-12867, CVE-2020-12866, CVE-2020-12865, CVE-2020-12864, CVE-2020-12863, CVE-2020-12862 and CVE-2020-12861. * Fixed ghostscript security issues CVE-2020-17538, CVE-2020-16310, CVE-2020-16309, CVE-2020-16308, CVE-2020-16307, CVE-2020-16306, CVE-2020-16305, CVE-2020-16304, CVE-2020-16303, CVE-2020-16302, CVE-2020-16301, CVE-2020-16300, CVE-2020-16299, CVE-2020-16298, CVE-2020-16297, CVE-2020-16296, CVE-2020-16295, CVE-2020-16294, CVE-2020-16293, CVE-2020-16292, CVE-2020-16291, CVE-2020-16290, CVE-2020-16289, CVE-2020-16288, CVE-2020-16287, CVE-2020-16, CVE-2020-8112, CVE-2020-6851, CVE-2020-27845, CVE-2020-27843, CVE-2020-27842, CVE-2020-27841, CVE-2020-27824, CVE-2020-27814 and CVE-2018-5727. * Fixed net-snmp security issues CVE-2020-15862 and CVE-2020-15861. * Fixed curl security issues CVE-2020-8231, CVE-2020-8177, CVE-2020-8169, CVE-2020-8286, CVE-2020-8285 and CVE-2020-8284. * Fixed chrony security issue CVE-2020-14367. * Fixed libx11 security issue CVE-2020-14344. * Fixed xorg-server security issues CVE-2020-14347, CVE-2020-25712, CVE-2020-14360, CVE-2020-14362, CVE-2020-14361, CVE-2020-14346 and CVE-2020-14345. * Fixed cairo security issues CVE-2018-19876 and CVE-2020-35492. * Fixed openssl1.0 security issues CVE-2020-1968, CVE-2019-1563, CVE-2019-1551, CVE-2019-1547 and CVE-2020-1971. * Fixed libproxy security issues CVE-2020-25219 and CVE-2020-26154. * Fixed gnupg2 security issue CVE-2019-14855. * Fixed util-linux security issue CVE-2018-7738. * Fixed ntp security issue CVE-2019-8936. * Fixed tigervnc security issue CVE-2020-26117. * Fixed brotli security issue CVE-2020-8927. * Fixed vim security issue CVE-2019-20807. * Fixed python2.7 security issue CVE-2020-26116. * Fixed python3.6 security issue CVE-2020-26116. * Fixed freetype security issue CVE-2020-15999. * Fixed perl security issues CVE-2020-12723, CVE-2020-10878 and CVE-2020-10543. * Fixed spice security issue CVE-2020-14355. * Fixed glibc security issue CVE-2017-18269. * Fixed python-cryptography security issue CVE-2020-25659. * Fixed openldap security issues CVE-2020-25692, CVE-2020-25710 and CVE-2020-25709. * Fixed libexif security issue CVE-2020-0452. * Fixed krb5 security issue CVE-2020-28196. * Fixed libvncserver security issues CVE-2018-21247 and CVE-2020-14396. * Fixed poppler security issues CVE-2020-27778, CVE-2019-9959, CVE-2019-10871 and CVE-2018-21009. * Fixed xdg-utils security issue CVE-2020-27748. * Fixed wpa security issue CVE-2020-12695. * Fixed x11vnc security issue CVE-2020-29074. * Fixed spice-gtk security issue CVE-2020-14355. * Fixed libssh2 security issues CVE-2019-17498 and CVE-2019-13115. * Fixed spice-vdagent security issues CVE-2020-25653, CVE-2020-25652, CVE-2020-25651, CVE-2020-25650 and CVE-2020-2565. * Fixed openssl security issue CVE-2020-1971. * Fixed libxml2 security issue CVE-2020-24977. * Fixed webkit2gtk security issues CVE-2020-9983, CVE-2020-9952, CVE-2020-9951, CVE-2020-9948 and CVE-2020-13584. * Fixed lxml security issue CVE-2020-27783. * Fixed p11-kit security issues CVE-2020-29363, CVE-2020-29362 and CVE-2020-29361. * Fixed wavpack security issue CVE-2020-35738. * Fixed nvidia-graphics-drivers-450 security issues CVE-2021-1053 and CVE-2021-1052. * Fixed tar security issues CVE-2019-9923 and CVE-2018-20482. * Fixed pillow security issues CVE-2020-35655 and CVE-2020-35653. * Fixed dnsmasq security issues CVE-2020-25687, CVE-2020-25686, CVE-2020-25685, CVE-2020-25684, CVE-2020-25683, CVE-2020-25682, CVE-2020-25681 and CVE-2019-14834. * Fixed sudo security issues CVE-2021-3156 and CVE-2021-23239. * Fixed privilege escalation via environment variable PATH in /bin/usershell binary. * Fixed privilege escalation via environment variables in the /bin/update binary. * Fixed BleedingTooth security issue which means CVE-2020-12351, CVE-2020-12352 and CVE-2020-24490. * Fixed kernel security issues named Platypus (CVE-2020-8694 and CVE-2020-8695). * Fixed possible security issue * Fixed a local command injection with SSH Session. ### Remote Management * Added secure channel for following commands: show_message, get_file_from_url, write_file_to_url and upload_tc_support_information sends all relevant data in a secured way. ### VNC * Fixed a Secure Terminal and Secure VNC Shadowing remote code execution vulnerability. New Features -------------------------------------------------------------------------------- ### Citrix * The new "screen pinning" feature for Citrix desktop sessions has been integrated. With this feature it is possible to start multiple Citrix desktop sessions on different screens. The following parameters have been added for this purpose. * This parameter defines the session name on which the settings are to be used. Also the known wildcards like * and ? are possible here. +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Citrix > Citrix Global > Window | +------------+-----------------------------------------------------------------+ |Parameter |`Citrix session name` | +------------+-----------------------------------------------------------------+ |Registry |`ica.destination_window.session%.name` | +------------+-----------------------------------------------------------------+ |Value |"" | +------------+-----------------------------------------------------------------+ * The parameter defines which mode should be used. +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Citrix > Citrix Global > Window | +------------+-----------------------------------------------------------------+ |Parameter |`Multimonitor full-screen mode` | +------------+-----------------------------------------------------------------+ |Registry |`ica.destination_window.session%.multimonitor_mode` | +------------+-----------------------------------------------------------------+ |Range | [Restrict full-screen session to one monitor] | | | [ **Expand full-screen session across all monitors** ] | | | [Expand the session over a self-selected number of monitors] | +------------+-----------------------------------------------------------------+ * For "Restrict full-screen session to one monitor" also ica.destination_window.session%.monitor needs to be set. For "Expand the session over a self-selected number of monitors" also ica.destination_window.session%.multimonitor_selection needs to be set. Further information is also offered via tooltip. +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Citrix > Citrix Global > Window | +------------+-----------------------------------------------------------------+ |Parameter |`Desktop session start monitor` | +------------+-----------------------------------------------------------------+ |Registry |`ica.destination_window.session%.monitor` | +------------+-----------------------------------------------------------------+ |Range | [1st Monitor][2nd Monitor][3rd Monitor][4rd ...] | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Citrix > Citrix Global > Window | +------------+-----------------------------------------------------------------+ |Parameter |`Monitor selection` | +------------+-----------------------------------------------------------------+ |Registry |`ica.destination_window.session%.multimonitor_selection` | +------------+-----------------------------------------------------------------+ |Value |"" | +------------+-----------------------------------------------------------------+ * Integrated HDX RTME 2.9.200 for usage of SfB (Skype for Business) * Available Citrix Workspace apps in this release: 20.12(default), 20.10 and 19.12 * Added new feature, where multiple audio devices could be mapped inside the sessions. This will display audio devices with their device name and not only HDX audio +------------+-----------------------------------------------------------------+ |Parameter |`Multiple Audio Device support` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.vdcamversion4support` | +------------+-----------------------------------------------------------------+ |Value |**False** (default)/True | +------------+-----------------------------------------------------------------+ * Note: Bluetooth devices are currently not supported for Device Redirection. **New centralized Citrix logging in IGEL OS, only one parameter is needed to activate logging. +------------+-----------------------------------------------------------------+ |Parameter |`Enable logging for Citrix sessions` | +------------+-----------------------------------------------------------------+ |Registry |`ica.logging.debug` | +------------+-----------------------------------------------------------------+ |Value |**off** (default)/on | +------------+-----------------------------------------------------------------+ * Since Workspace app 20.09 the tool setlog is used to configure the logging. For this purpose parameters are provided in the registry ica.logging.setlog, but usually nothing needs to be changed. * Fixed Issue: mic and webcam devices can be redirected using Browser Content Redirection. +------------+-----------------------------------------------------------------+ |Parameter |`Enables mic and webcam redirection using BCR` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.cefenablemediadevices` | +------------+-----------------------------------------------------------------+ |Value | [Factory default is "**"] [False][True] | +------------+-----------------------------------------------------------------+ * Added new parameter ReadersStatusPollPeriod to specifies the delay, in milliseconds, for reading information from a smartcard after the card is inserted or removed, or a reader is disconnected, etc. +------------+-----------------------------------------------------------------+ |Parameter |`Readers Status Poll Period` | +------------+-----------------------------------------------------------------+ |Registry |`ica.wfclient.ReadersStatusPollPeriod` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**250** (default)/Range 100..5000 | +------------+-----------------------------------------------------------------+ * Integrated Zoom Media Plugin 5.4.59458.0109 * The default value of the parameter ica.module.vdcamversion4support was set to true ### WVD * Added option to always prompt for password upon session host connection. * The same can be achieved on server side by setting the RDP group policy of "Always prompt for password upon connection". +------------+-----------------------------------------------------------------+ | Parameter | `Always prompt for password upon session host connection` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.always-prompt-for-session-password` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added options to configure Fabulatech for WVD. This includes Webcam redirection, Scanner redirection and USB redirection. * The USB redirection configuration is still to be done via Sessions > RDP > RDP Global > Fabulatech USB Redirection. Later releases should mirror that under WVD as well. * There are global WVD settings to select which redirections (Webcam, Scanner, USB) should be enabled for WVD. * There is a switch per WVD session that allows to enable/disable Fabulatech for that sessions respectively. * Note: Technically the Fabulatech redirections are selected system wide. That means, when Scanner redirection is enabled for Citrix and Webcam redirection is enabled for WVD, both these redirections are visible in Citry and in WVD sessions. Only disabling Fabulatech support in general for a WVD session is possible. +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > WVD > WVD Global > Plugins > Fabulatech | +------------+-----------------------------------------------------------------+ | Parameter | `Fabulatech Webcam Redirection` | +------------+-----------------------------------------------------------------+ | Registry | `wvd.plugins.fabulatech.webcam` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > WVD > WVD Global > Plugins > Fabulatech | +------------+-----------------------------------------------------------------+ | Parameter | `Fabulatech Scanner Redirection` | +------------+-----------------------------------------------------------------+ | Registry | `wvd.plugins.fabulatech.scanner` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > WVD > WVD Global > Plugins > Fabulatech | +------------+-----------------------------------------------------------------+ | Parameter | `Fabulatech USB Redirection` | +------------+-----------------------------------------------------------------+ | Registry | `wvd.plugins.fabulatech.usb` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > WVD > WVD Sessions > WVD Session > Plugins > Fabulatech | +------------+-----------------------------------------------------------------+ | Parameter | `Fabulatech Webcam/Scanner/USB Redirection` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.plugins.fabulatech` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Integrated Zoom Media Plugin 5.4.59458.0109 with support for WVD. +------------+-----------------------------------------------------------------+ | IGEL Setup | Sessions > WVD > WVD Sessions > WVD Session > Plugins > Fabulatech | +------------+-----------------------------------------------------------------+ |Parameter |`Zoom VDI Media Plugin` | +------------+-----------------------------------------------------------------+ |Registry |`sessions.wvd%.plugins.zoomvdi` | +------------+-----------------------------------------------------------------+ |Value |enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added option to always prompt for username and password upon session host connection. +------------+-----------------------------------------------------------------+ | Parameter | `Always prompt for username and password upon session host connection` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.always-prompt-for-session-username-and-password` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added option to preset the workspace view zoom +------------+-----------------------------------------------------------------+ | Parameter | `Initial workspace zoom` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.workspacezoom` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | **100** (default) | +------------+-----------------------------------------------------------------+ * Added option to select specific monitors in a multi monitor session. * Only monitors matching this mask are used. * Monitors start with zero (0). * If empty all monitors are enabled, which is the default. * Can be one or a comma separated list of the following specifiers without the quotes: - "1-2": An inclusive range of monitor indexes. - "-2": An inclusive range beginning from 0 to the given monitor index. - "2-": An inclusive range beginning with the specified monitor up to index 63, which is the maximum monitor index supported. - "2,3,5": A comma separated list of monitor indexes. +------------+-----------------------------------------------------------------+ | Parameter | `Multimonitor enable mask` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.multimonitormask` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | (empty by default) | +------------+-----------------------------------------------------------------+ * If the username is preset with a string that starts with "@", the rest of the string is taken as a preset domain name. The user then only needs to enter her/his username and the domain name is automatically appended for AAD login. * Additionally the following parameter has been added to allow/disallow the preset domain being overwritten when the username enters a name that contains an @ symbol itself. If this option is enabled, the entered domain is accepted. Otherwise the entered domain is replaced by the preset domain. +------------+-----------------------------------------------------------------+ | Parameter | `Allow preset domain overwrite` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.allow-preset-domain-overwrite` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added company logo customization, but download of custom images to the local filesystem needs to be defined. So at the moment the settings are not really useful, except for disabling the IGEL logo maybe. +------------+-----------------------------------------------------------------+ | Parameter | `Disable company logo` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.no-logo` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Logo image filename` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.logo-image` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | (empty by default) | +------------+-----------------------------------------------------------------+ * Added background customization, but download of custom images to the local filesystem needs to be defined. So at the moment the settings are not really useful, except for disabling the background image or defining a solid color for the background. +------------+-----------------------------------------------------------------+ | Parameter | `Disable background image` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.no-background` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Background image filename or color (#rrggbb)` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.options.background-image` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | (empty by default) / filename / #rrggbb | +------------+-----------------------------------------------------------------+ ### VMware Horizon * Updated Horizon Client to version 2012 * Integrated Zoom Media Plugin 5.4.59458.0109 * Fixed failure to start horizon serial port redirection service at boot time ### Chromium * Updated chromium browser to version 88.0.4324.150. * H.264 decoding is not supported anymore. * Custom preferences setup is not supported anymore. * Reworked custom commandline setup: Enter all commandline parameters in a single entry field. ### WiFi * Added support for WPS push button connect method ### Imprivata * Added: The FUS Username is editable combobox with prefilled values now. * Hostname of the endpoint * MAC address of the endpoint * Serial number of the endpoint Of course, set of an own string is also and still possible. +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Appliance mode > Imprivata | +------------+-----------------------------------------------------------------+ |Parameter |`FUS User` | +------------+-----------------------------------------------------------------+ |Registry |`imprivata.fus.user` | +------------+-----------------------------------------------------------------+ ### Smartcard * Updated A.E.T. Europe SafeSign Identity Client to version 3.6.0.0. * Added Smartcard PIN passthrough in Firefox and Chromium. The PIN will be cached while logging on via Active Directory/Kerberos with smartcard. In Firefox and Chromium no further PIN input is necessary to use the smartcard. +------------+-----------------------------------------------------------------+ |Parameter |`Smartcard PIN caching` | +------------+-----------------------------------------------------------------+ |Registry |`scard.pkcs11.pin_cache.enable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ * Updated SecMaker Net iD to version 6.8.3. New features are: - Support for Thales IDPrime 940 SIS & IDPrime 3940 SIS - Support for FIPS level 3 versions of Thales IDPrime MD smart cards (based on MD830B and MD840) - Support for FINEID 3.0 - Updated support for Yubico YubiKey serial numbers (version 5 and later) - Updated support for Feitian ePass FIDO serial numbers (version 99 and later) For detailed release information see https://docs.secmaker.com/net-id- enterprise/6.8/nie-release-notes/nie-683-release-notes.html ### ThinPrint * Added ezeep by ThinPrint support for WVD +------------+-----------------------------------------------------------------+ | IGEL Setup |Sessions > WVD > WVD Sessions > WVD Session > Printing > ezeep by ThinPrint | +------------+-----------------------------------------------------------------+ | Parameter | `Printing with ezeep` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.wvd%.printing.thinprint-ezeep` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Note: Ezeep is directly related to the ThinPrint configuration under Devices > Printer > Thinprint > ... * Note: When Thinprint configuration is changed, you need to close running WVD sessions and reconnect to make ThinPrint/Ezeep work again for the related session. ### Application Launcher * Added optional custom message in 'About' page of application launcher. The message is displayed below the License Information section. The text can be plain text or HTML, supported HTML subset are mentioned in Qt RichText. +------------+-----------------------------------------------------------------+ |Parameter |`Custom message` | +------------+-----------------------------------------------------------------+ |Registry |`userinterface.launcher.custom_message` | +------------+-----------------------------------------------------------------+ |Value |**empty** (default) | +------------+-----------------------------------------------------------------+ ### Cisco Webex * Integrated Cisco Webex Meetings 41.2.0.142 * Integrated Cisco Webex Teams˙41.1.0.17621 ### Cisco JVDI Client * Integrated Cisco JVDI 12.9.3 client ### Base system * Added post session command support for WVD sessions. * Updated openVPN to Version 2.5.0. * Updated openssh to version 8.4p1-2. * Added warning at boot time if Workspace Edition maintenance has been expired. * Updated Fluendo multimedia codecs. * Updated linux kernel to version 5.9.16. * Added inhibit screensaver when zoom, teams or skype of business meeting is active. Possible for native clients and citrix optimization plugins. +------------+-----------------------------------------------------------------+ | Parameter | `Enable debug logging for igel-screensaver-monitor` | +------------+-----------------------------------------------------------------+ | Registry | `debug.tools.igel-screensaver-monitor.enable` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Added functionality to change the desktop icon font color via new setup parameter. +------------+-----------------------------------------------------------------+ | IGEL Setup | User Interface > Desktop | +------------+-----------------------------------------------------------------+ | Parameter | `Desktop Icon Font Color` | +------------+-----------------------------------------------------------------+ | Registry | `windowmanager.defaulttheme.desktop.iconfont_color` | +------------+-----------------------------------------------------------------+ ### CID Key Agent * Update of CID Key Agent to version 6.5.0-2 ### Driver * Updated Olympus dictation driver for Citrix and RDP to version 20201118. The changes are: - Support motion events for Olympus RecMic devices - Support integration with the Olympus AudioSDK for limited server side device communication * Updated Crossmatch driver to version 0125. The changes are: - Improved USB encryption for the 4500 readers - Support for the 5300-101 reader (the 5300-100 was already supported) * Updated deviceTRUST client plugin for Citrix and RDP to version 20.1.200.0. Detailed release notes can be found at https://docs.devicetrust.com/docs/releases-igel-20.1.200/ ### X11 system * Enhanced x.xserver%.mirror_mode registry key with new Scaling down mode (Scales all monitors to the monitor with the lowest resolution) +------------+-----------------------------------------------------------------+ | Parameter | `Choose the mode which should be used for mirroring monitors if resolution differs.` | +------------+-----------------------------------------------------------------+ | Registry | `x.xserver%.mirror_mode` | +------------+-----------------------------------------------------------------+ | Range | [Default][Biggest common resolution][Scaling][Scaling down] | +------------+-----------------------------------------------------------------+ | Value | **Default** | +------------+-----------------------------------------------------------------+ ### Audio * Added EPOS Connect 5.0.1.2795 +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices -> Unified Communications -> EPOS Audio -> EPOS Connect | +============+=================================================================+ | Parameter | `Enable EPOS Connect` | +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.enable` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices -> Unified Communications -> EPOS Audio -> EPOS Connect | +============+=================================================================+ | Parameter | `Tenant ID` | +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.tenant_id` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | `` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices -> Unified Communications -> EPOS Audio -> EPOS Connect | +============+=================================================================+ | Parameter | `Backend Endpoint` | +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.tenant_url` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | `` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices -> Unified Communications -> EPOS Audio -> EPOS Connect | +============+=================================================================+ | Parameter | `Proxy` | +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.proxy` | +------------+-----------------------------------------------------------------+ | Type | string | +------------+-----------------------------------------------------------------+ | Value | `` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Registry | `devices.epos.connect.log_level` | +------------+-----------------------------------------------------------------+ | Value | Trace / Debug / **Information** (default) / Warnings / Errors / Exceptions / No logs | +------------+-----------------------------------------------------------------+ * Pulseaudio upgraded to the 13.99 version. * Added parameter to differentiate sound volume for applications. If the parameter is set to true, each application can set it's own volume level. Otherwise the sound volume is set to the same value as the default volume for output and input device respectively. +------------+-----------------------------------------------------------------+ | Registry | `userinterface.sound.app_volume_ctrl` | +------------+-----------------------------------------------------------------+ | Value | false / **true** (default) | +------------+-----------------------------------------------------------------+ ### Misc * Added DriveLock Agent 20.1.4.30482 for USB device access control. +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Storage Devices > DriveLock` | +------------+-----------------------------------------------------------------+ |Parameter |`Enable DriveLock agent` | +------------+-----------------------------------------------------------------+ |Registry |`devices.drivelock.enable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Storage Devices > DriveLock` | +------------+-----------------------------------------------------------------+ |Parameter |`DES server URL` | +------------+-----------------------------------------------------------------+ |Registry |`devices.drivelock.server` | +------------+-----------------------------------------------------------------+ |Value |**(empty)** | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup |`Devices > Storage Devices > DriveLock` | +------------+-----------------------------------------------------------------+ |Parameter |`Tenant` | +------------+-----------------------------------------------------------------+ |Registry |`devices.drivelock.tenant` | +------------+-----------------------------------------------------------------+ |Value |**root** | +------------+-----------------------------------------------------------------+ ### Evidian * Added new session type RD Web Access. * Updated Evidian to version 1.5.7617. ### Hardware * Added hardware support for new IGEL UD7-LX 20 (H860C) * Added hardware support for LG 34CN650N AiO. * Added hardware support for Dell Wyse Z Class thin client. * Added hardware support for Lenovo ThinkCentre M70q. * Added hardware support for Dell Wyse 5470 * Added hardware support for Lenovo L14. * Added hardware support for Lenovo ThinkCentre M75n * Added hardware support for Lenovo 14W. * Added hardware support for LG CN65 All in one. * Added hardware support for DELL LATITUDE 5510 * Added hardware support for ELO i2 Touch all-in-one (15 and 22) inch. * Added detection of UD Pocket UC5-LX 2. * Added support for headset Jabra Evolve2 65. * Added detection of new board revision 1.0 of IGEL M250C as UD2-LX 52. ### Remote Management * Added support for Reportable Heartbeats to the UMS. * Added support for exchanging ICG certificates. * The remote management of the endpoint device automatically installs TLS certificates provided by the UMS into the local trusted CA certificates storage. The automatic deployment of TLS certificates to endpoint devices requires UMS 6.06.100 or higher. This feature allows to verify certificates using in downloading files from the UMS, downloading of a firmware update and custom partition archives over HTTPS or FTPS protocols. The verifying of certificates must be enabled by the parameter `system.security.remote_management.tls_verify_peer`. +------------+-----------------------------------------------------------------+ | Registry | `system.security.remote_management.tls_verify_peer` | +------------+-----------------------------------------------------------------+ | Value | true / **false** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Registry | `system.security.remote_management.tls_hostname_validation` | +------------+-----------------------------------------------------------------+ | Value | **true** (default) / false | +------------+-----------------------------------------------------------------+ * Added support for UMS commands to store and remove ICG configuration. * Introduced parameters for ICG Websocket connections: debug log, network timeout (in seconds) and ping-pong interval (in seconds). The parameters are applied on the next established ICG agent connection and ICG tunnel connections: VNC and Secure Terminal. The ping-pong mechanism is supported only for ICG tunnel connections. +------------+-----------------------------------------------------------------+ | Registry | `system.icg.websocket.debug` | +------------+-----------------------------------------------------------------+ | Value | **off** (default) / all / tunnel / agent | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Registry | `system.icg.websocket.network_timeout` | +------------+-----------------------------------------------------------------+ | Value | **30** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Registry | `system.icg.websocket.pingpong_interval` | +------------+-----------------------------------------------------------------+ | Value | **120** (default) | +------------+-----------------------------------------------------------------+ * IGEL Remote Management agent sends now keep-alive packets to the ICG server to prevent the Websocket connection to the ICG server from being closed by networking infrastructure. The Websocket's ping-pong mechanism is used for that purpose (see RFC6455). The keep-alive interval in seconds can be configured by the parameter `system.icg.websocket.pingpong_interval`, 0 disables the keep-alive mechanism. +------------+-----------------------------------------------------------------+ | Registry | `system.icg.websocket.pingpong_interval` | +------------+-----------------------------------------------------------------+ | Value | 120 | +------------+-----------------------------------------------------------------+ ### Fabulatech * Updated FabulaTech USB for Remote Desktop to version 6.0.28 * Updated FabulaTech Scanner for Remote Desktop to version 2.7.0.1 * Fixed FabulaTech scanner redirection not working for Citrix if it's exclusively enabled in Igel Setup Resolved Issues -------------------------------------------------------------------------------- ### Citrix * Fixed the problem with apparmor and the Citrix MS Teams workaround * Following registry keys help to edit horizontal and vertical window size (Works only for Desktops not for applications). +------------+-----------------------------------------------------------------+ |Parameter |`Set desired horizontal window dimension` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.desiredhres` | +------------+-----------------------------------------------------------------+ |Value | [**]**/ [640][800][1024][1280][1600] | +------------+-----------------------------------------------------------------+ |Parameter |`Set desired vertical window dimension` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.desiredvres` | +------------+-----------------------------------------------------------------+ |value | [**]**/ [480][600][768][1024][1200] | +------------+-----------------------------------------------------------------+ * Citrix Desktop sessions have a sound device again, when using smartcard watch daemon. scard.scwatchd.insert_action = su user -c /config/sessions/pnlogin0 * Parameter **ica.module.virtualdrivers.vdwebrtc.keyboard_workaround** has been removed. This workaround is no longer needed because the problem is solved as of CWA 20.10. * Added new parameters to add config parameters for Citrix USB devices: the parameter string is appended to the config line in usb.conf, when the device is explicitly allowed. Citrix introduced this to handle special behavior with single devices, e.g. to set "disableselectconfig=1". +------------+-----------------------------------------------------------------+ |Parameter |`Extra Config` | +------------+-----------------------------------------------------------------+ |Registry |`ica.usbredirection.devicepolicy.product_rule%.parameter` | +------------+-----------------------------------------------------------------+ |Type |String | +------------+-----------------------------------------------------------------+ |Value |"" (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Extra Config` | +------------+-----------------------------------------------------------------+ |Registry |`ica.usbredirection.devicepolicy.product_rule_igel%.parameter` | +------------+-----------------------------------------------------------------+ |Type |String | +------------+-----------------------------------------------------------------+ |Value |"" (default) | +------------+-----------------------------------------------------------------+ * Improved Fabulatech USB Redirection and Scanner Support * New parameter added: +------------+-----------------------------------------------------------------+ |Parameter |`Fabulatech loglevel` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.virtualdriver.fabulatech.loglevel` | +------------+-----------------------------------------------------------------+ |Value |**1** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter AckDelayThresh: Max time (in milliseconds) between sending "resource free" message if any resources free. Default=350 +------------+-----------------------------------------------------------------+ |Parameter |`AckDelayThresh` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.AckDelayThresh` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**350** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter AudioBufferSizeMilliseconds: Audio buffer size, in ms. Default=200 ms +------------+-----------------------------------------------------------------+ |Parameter |`AudioBufferSizeMilliseconds` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.AudioBufferSizeMilliseconds` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**200** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter AudioLatencyControlEnabled: Enables latency control. Default=False +------------+-----------------------------------------------------------------+ |Parameter |`AudioLatencyControlEnabled` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.AudioLatencyControlEnabled` | +------------+-----------------------------------------------------------------+ |Type |Boolean | +------------+-----------------------------------------------------------------+ |Value |**false** (default)/true | +------------+-----------------------------------------------------------------+ * Added new parameter AudioMaxLatency: Sets the maximum latency (in ms) before trying to discard audio data. Default=300 ms +------------+-----------------------------------------------------------------+ |Parameter |`AudioMaxLatency` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.AudioMaxLatency` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**300** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter AudioLatencyCorrectionInterval: Defines how often to correct the latency (in ms). Default=300 ms +------------+-----------------------------------------------------------------+ |Parameter |`AudioLatencyCorrectionInterval` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.AudioLatencyCorrectionInterval` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**300** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter AudioTempLatencyBoost: Sets the higher latency band (in ms) above the lower PlaybackDelayThresh band. Default=300 ms +------------+-----------------------------------------------------------------+ |Parameter |`AudioTempLatencyBoost` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.AudioTempLatencyBoost` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**300** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter CommandAckThresh: Number of free client command buffers causing a "resource free" message to be sent to the server. Default=10 +------------+-----------------------------------------------------------------+ |Parameter |`CommandAckThresh` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.CommandAckThresh` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**10** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter DataAckThresh: Number of free client data buffers causing a "resource free" message to be sent to the server. Default=10 +------------+-----------------------------------------------------------------+ |Parameter |`DataAckThresh` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.DataAckThresh` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**10** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter MaxDataBufferSize: Maximum size of each data buffer. Default=2048 bytes +------------+-----------------------------------------------------------------+ |Parameter |`MaxDataBufferSize` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.MaxDataBufferSize` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**2048** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter NumCommandBuffers: Number of client buffers to use for audio commands. Default=64 +------------+-----------------------------------------------------------------+ |Parameter |`NumCommandBuffers` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.NumCommandBuffers` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**64** (default) | +------------+-----------------------------------------------------------------+ * Added new parameter PlaybackDelayThresh: Delay (in ms) between being asked to start audio playback and actually starting audio playback in order to build up a backlog of sound. Default=150 +------------+-----------------------------------------------------------------+ |Parameter |`PlaybackDelayThresh` | +------------+-----------------------------------------------------------------+ |Registry |`ica.module.PlaybackDelayThresh` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**150** (default) | +------------+-----------------------------------------------------------------+ * Fixed: ICA Connection Center starts again as expected. * Fixed Citrix Kerberos Passthrough authentication. * Added: When password has expired but the password change is not allowed on the Citrix server, the Citrix error message is displayed. * Added: The parameter for mouseinput **ica.wfclient.mousesendcontrolv** is available with this release on the Setup page Sessions > Citrix > Citrix Global > Keyboard. * Added: The parameter for the Citrix Connection bar **ica.allregions.connectionbar** is available on the setup page Sessions > Citrix > Citrix Global > Window. ### OSC Installer * Fixed warning message after feature deselection for installations on 2 GB flashes. * Fixed a display issue with Intel and Nvidia GPU. ### RDP/IGEL RDP Client 2 * Fixed USB redirection for RDP Sessions. * Added new parameter to enable/disable dynamic drive mapping. +------------+-----------------------------------------------------------------+ |Registry |`rdp.winconnect.enable-dynamic-drivemapping` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |Registry |`sessions.winconnect%.option.enable-dynamic-drivemapping` | +------------+-----------------------------------------------------------------+ |Range |**Global Setting** (default) / On / Off | +------------+-----------------------------------------------------------------+ * Fixed login information not being set after reboot. * Improved error logging. ### WVD * WVD now comes with Qt 5.12.10 in order to get fixes mainly for QWebEngine. This should fix issues with .htaccess protected login pages. * Fixed proxy usage for WVD feed download. ### RD Web Access * Fixed RD Web Access Login not working with user@domain. * Fixed RD Webaccess username not being set correctly after reboot. ### VMware Horizon * Fixed remember last user functionality in Horizon local logon * Fixed Local Logon Window for visibility in appliance mode * When using the PCoIP protocol the virtual channel provided by VMware used for both serial port and scanner redirection, may hang on logout. The virtual channel is not used when both redirection methods are set to false which is the default. For usage of either one of this redirection methods, enable the corresponding below parameter to prevent the logout freeze. These settings can be found here in the IGEL Registry: vmware.view.enable-serial-port-redir vmware.view.enable-scanner-redir ### Firefox * Fixed smartcard access in Firefox. Before this fix, smartcards were not recognized in seldom cases. * Fixed possibility to use the pre-installed spellcheckers in Firefox input fields. ### Chromium * Fixed browser and download history not being cleared. * Fixed Chromium browser was not clearing browsing history properly. * Fixed: Custom Chromium Policies datatypes now written in the correct way to policies.json * Fixed resetting kiosk mode would only work after reboot * Fixed: Chromium settings were parent settings did not influence the child settings ### Network * Added registry keys for enabling/disabling sending of hostname in DHCPv4 and DHCPv6 requests. +------------+-----------------------------------------------------------------+ | Parameter | `Send hostname in DHCP requests` | +------------+-----------------------------------------------------------------+ | Registry | `network.dhcp.send_hostname` | +------------+-----------------------------------------------------------------+ | Range | [Disabled][Network Manager default] | +------------+-----------------------------------------------------------------+ | Value | **Network Manager default** | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Send hostname in DHCPv6 requests` | +------------+-----------------------------------------------------------------+ | Registry | `network.dhcp6.send_hostname` | +------------+-----------------------------------------------------------------+ | Range | [Disabled][Network Manager default] | +------------+-----------------------------------------------------------------+ | Value | **Network Manager default** | +------------+-----------------------------------------------------------------+ * Fixed: SCEP failed when scep_getca received only a single certificate. * Added registry key specifying the number of 802.1X authentication attempts on Ethernet. +------------+-----------------------------------------------------------------+ | Registry | `network.interfaces.ethernet.device%.ieee8021x.auth_attempts` | +------------+-----------------------------------------------------------------+ | Type | integer | +------------+-----------------------------------------------------------------+ | Value | 1 **Default** | +------------+-----------------------------------------------------------------+ * The default value of network.interfaces.ethernet.device%.nm_disable_link_config (forbidding Network Manager to modify Ethernet link settings) has been changed to true. * Fixed handling of DNS default domain * Added registry key for disabling Ethernet link reconfiguration by Network Manager. +------------+-----------------------------------------------------------------+ | Parameter | `Disable NetworkManager link configuration` | +------------+-----------------------------------------------------------------+ | Registry | `network.interfaces.ethernet.device%.nm_disable_link_config` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | true / **false** (default) | +------------+-----------------------------------------------------------------+ * Setting this to true can be beneficial when 802.1X authentication is disturbed. It is currently enforced automatically in the case of e1000e drivers. * Changed default value of minimum size of a TCP packet from 750 to 500 bytes as a result this would allow a minimal MTU size of 576 bytes. ### WiFi * Added missing iwlwifi-6000-4 firmware file. * Fixed issues with D-Link DWA-131 WLAN dongle. * Removed network.drivers.use_backport_drivers IGEL registry key as this is not used anymore. * Added some missing iwlwifi firmware files to IGEL OS. ### Open VPN * Fixed segmentation fault when nameserver is used Now it is allowed to use an empty password for the private key. Important: Not enter a password when the private key don't have one. * OpenConnect VPN: Different protocols are selectable: +------------+-----------------------------------------------------------------+ | Parameter | `protocol` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.openconnect%.vpnopts.protocol` | +------------+-----------------------------------------------------------------+ | Value | **Cisco AnyConnect** (default)/ Juniper Network / Junos Pulse / PAN GlobalProtect | +------------+-----------------------------------------------------------------+ ### Imprivata * Fixed: Usage the Horizon Window Size settings * Fixed: Set keyboard repeat rate correctly on Horizon session end * added Imprivatas "grid-theme" feature +------------+-----------------------------------------------------------------+ | Parameter | `PIE Application Launcher for Citrix` | +------------+-----------------------------------------------------------------+ | Registry | `imprivata.grid_theme` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ ### Smartcard * Added parameter to disable HID Global OMNIKEY smartcard reader driver. If this driver is disabled, some of the readers are handled by the MUSCLE CCID driver. This can help when problems with OMNIKEY reader driver occur. +------------+-----------------------------------------------------------------+ | Parameter | `HID Global OMNIKEY driver for smart card readers` | +------------+-----------------------------------------------------------------+ | Registry | `scard.pcscd.omnikey_enable` | +------------+-----------------------------------------------------------------+ | Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ ### HID * Fixing double tapping of desktop icons on touchscreen devices. ### CUPS Printing * Fixed cups printer spooling configuration where printjob files were preserved in the spooling directory too long and could fill up the file system ### Logging * Fixed: Filebeat now starts after the hostnames are set so they will be shown in the logs. ### Base system * Fixed problems with hostnames containing one or more "_" characters. * Post session command binaries and return codes are now customizable via registry. Allows post session commands if a binary doesn't return 0. * Name of the binary: +------------+-----------------------------------------------------------------+ |Parameter |`Binary` | +------------+-----------------------------------------------------------------+ |Registry |`pcom.valid_return_codes%.binary` | +------------+-----------------------------------------------------------------+ |Value |binary name | +------------+-----------------------------------------------------------------+ * Comma seperated return codes (e.g. 7,99) or/and return code ranges (e.g. 3..5 for 3,4,5) to be accepted: +------------+-----------------------------------------------------------------+ |Parameter |`Return Codes` | +------------+-----------------------------------------------------------------+ |Registry |`pcom.valid_return_codes%.returncodes` | +------------+-----------------------------------------------------------------+ |Value |e.g. 3,5,10..15 for 3,5,10,11,12,13,14,15 | +------------+-----------------------------------------------------------------+ * Improved post session command parameter pcom.valid_return_codes%.returncodes to handle ranges a la 1..255 (see tooltip). * Fixed remembering last user name with Active Directory/Kerberos logon. Before this fix the user name could not be stored in UMS to appear again after a reboot. * Fixed possibility to add certificates to Chromium and Firefox which are given in DER format. * Fixed default browser not being set properly after reboot. * Fix GtkMessage dialog localization. * Fixed: Fluendo vadec codec update closed a memory leak with AMD devices using VAAPI acceleration. * Fixed possible USB issues with suspend/resume on IGEL M350c devices. * Fixed: Shutdown delay when Post session command is enabled. * Fixed NetworkManager could not create ipv6 pid/lease file while apparmor is active. * Bugfix for missing bluetooth trayicon after suspend ### Storage Devices * Fixed display of hotplug eject menu in applicance mode ### X11 system * Fixed display hotplug detection not working in some situations. * Fixed Display Switch sometimes losing config after reboot. * Fixed missing custom background image after migration from OS 10. * Fixed sporadic hang in logoff session restart. * Updated Display Switch rotate buttons to have usable size. * Added registry key to solve an issue with buggy monitors connected over a DP to DVI adapter (only works for radeon devices like UD3 LX50). +------------+-----------------------------------------------------------------+ | Parameter | `Fix issues with buggy monitors connected over DP-DVI adapter.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.ati.dp_dvi_probe_workaround` | +------------+-----------------------------------------------------------------+ | Type | bool | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Fixed touchpad enable and disable with hotkey. * Fixed issues if 2 DisplayPort MST Hubs are connected behind each other. * Fixed notifications not being hidden properly when in do-not-disturb mode. * Fixed monitor configuration issues with DisplayLink based Dockingstations with more then one independent monitor output. * Fixed issue with non correctly working default mirror mode. * Fixed screen configuration issues with Nvidia and Intel graphics cards in one device. * Added: Allowance of up to 8 different custom wallpapers (was limited to 4 up to now). * Added notification mute-all parameter in setup to mute all notifications including urgent ones. ### X server * Fixed tearing issue of UD7 with additional graphic card. ### Window manager * Fixed desktop icons not being restricted to one monitor. * Fixed a bug where icons where missing or miss-aligned in some multi-screen setups. * Fixed notify window width not remaining constant. * Fixed crash of start menu when it is not populated with any items. * Fixed start monitor mapping for Firefox. * Fixed notification urgency for critical background color. ### VirtualBox * Fixed authentication window popup if screen configuration is changed in Virtualbox. ### Audio * Fixed erroneous closing of the Pulse PCM device as well as a possible deadlock in the ALSA Pulse PCM. * Fixed the ALSA Pulse PCM - a possible deadlock while writing audio data and closing Pulse PCM. * Fixed audio for HP Elitebook TRRS 840 G7 * Fixed internal microphone in Elitebook TRRS 840 G7 * Fixed headset not properly detected if connected on boot in UD2-LX50. * Fixed microphone issues with UD3-LX60 device. * Fixed a sporadic aborting of an application on closing ALSA Pulse PCM. The problem concerns only applications using ALSA API directly, like Citrix Receiver. * Added debug output to the ALSA Pulse PCM which must be enabled by the environment variable ALSA_PULSE_PCM_DEBUG=1, the debug output is collected then by the system logging facility (journalctl). * Fixed missing audio trayicon after suspend ### Evidian * Fixed error on restart. ### Hardware * Added script to fix issues with DP MST KVM and connected DaisyChaining monitors. * Fixed: When KVM is used, mishandling of connectors can occure. Added possible workaround via adding /etc/igel/kms/kvm-workaround.sh to the userinterface.rccustom.custom_cmd_x11_init registry key. ### TC Setup (Java) * Fixed problems with passwords of length longer than 127 characters. ### Remote Management * Fixed automatic establishment of the configured ICG connection if the UMS server is unreachable. * Fixed sending the user logoff message to the UMS. * Fixed: Disabled Nagle caching algorithm on the underlying TCP socket used for SSL connection between IGEL rmagent and UMS. * Fixed sporadic failures while retrieving the Unit ID by the IGEL Remote Management agent. * Fixed ICG HA functionality broken in the 11.04.100 release. ### VNC * Fixed handling of CapsLock status in VNC server. Keyboard input now appears correctly also when CapsLock is active on client or server side. This especially fixes upper case "umlaut" characters with Swiss German keyboard layout.