IGEL OS 11 ========== Firmware version 11.01.120 Release date 2019-07-05 Last update of this document 2019-07-05 Supported Devices ------------------------------------------------------------------------------- UD2-LX 40, UD2-LX 50 UD3-LX 51, UD3-LX 50 UD5-LX 50 UD6-LX 51 UD7-LX 10 UD9-LX Touch 41, UD9-LX 40 [> Supported IGEL OS 11 thirdparty devices](https://kb.igel.com/os11-supported-hardware) Component Versions ------------------------------------------------------------------------------- +-------------------------------------------+----------------------------------+ | Clients | | +===========================================+==================================+ | Citrix HDX Realtime Media Engine | 2.8.0-2235 | +-------------------------------------------+----------------------------------+ | Citrix Receiver | 13.10.0.20 | +-------------------------------------------+----------------------------------+ | Citrix Receiver | 13.5.0.10185126 | +-------------------------------------------+----------------------------------+ | Citrix Receiver | 19.3.0.5 | +-------------------------------------------+----------------------------------+ | deviceTRUST Citrix Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | Evidian AuthMgr | 1.5.6840 | +-------------------------------------------+----------------------------------+ | Evince PDF Viewer | 3.18.2-1ubuntu4.3 | +-------------------------------------------+----------------------------------+ | FabulaTech USB for Remote Desktop | 5.2.29 | +-------------------------------------------+----------------------------------+ | Firefox | 60.7.2 | +-------------------------------------------+----------------------------------+ | IBM iAccess Client Solutions | 1.1.8.1 | +-------------------------------------------+----------------------------------+ | IGEL RDP Client | 2.2 | +-------------------------------------------+----------------------------------+ | Imprivata OneSign ProveID Embedded | | +-------------------------------------------+----------------------------------+ | deviceTRUST RDP Channel | 19.1.200.2 | +-------------------------------------------+----------------------------------+ | NCP Secure Enterprise Client | 5.10_rev40552 | +-------------------------------------------+----------------------------------+ | NX Client | 5.3.12 | +-------------------------------------------+----------------------------------+ | Open VPN | 2.3.10-1ubuntu2.1 | +-------------------------------------------+----------------------------------+ | Zulu JRE | 8.38.0.13 | +-------------------------------------------+----------------------------------+ | Parallels Client (64 bit) | 16.5.2.20595 | +-------------------------------------------+----------------------------------+ | Remote Viewer (Red Hat Virtualization) | 7.0-igel47 | +-------------------------------------------+----------------------------------+ | Spice GTK (Red Hat Virtualization) | 0.35 | +-------------------------------------------+----------------------------------+ | Spice Protocol (Red Hat Virtualization) | 0.12.14 | +-------------------------------------------+----------------------------------+ | Usbredir (Red Hat Virtualization) | 0.8.0 | +-------------------------------------------+----------------------------------+ | Teradici PCoIP Software Client | 19.05.4-18.04 | +-------------------------------------------+----------------------------------+ | ThinLinc Client | 4.9.0-5775 | +-------------------------------------------+----------------------------------+ | ThinPrint Client | 7.5.88 | +-------------------------------------------+----------------------------------+ | Totem Media Player | 2.30.2 | +-------------------------------------------+----------------------------------+ | Parole Media Player | 1.0.1-0ubuntu1igel16 | +-------------------------------------------+----------------------------------+ | VNC Viewer | 1.8.0+git20180123-igel1 | +-------------------------------------------+----------------------------------+ | VMware Horizon client | 5.0.0-12557422 | +-------------------------------------------+----------------------------------+ | Voip Client Ekiga | 4.0.1 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Dictation | | +===========================================+==================================+ | Diktamen driver for dictation | | +-------------------------------------------+----------------------------------+ | Grundig Business Systems dictation driver | | +-------------------------------------------+----------------------------------+ | Nuance Audio Extensions for dictation | B048 | +-------------------------------------------+----------------------------------+ | Olympus driver for dictation | 20180621 | +-------------------------------------------+----------------------------------+ | Philips Speech driver | 12.6.36 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Signature | | +===========================================+==================================+ | Kofax SPVC Citrix Channel | 3.1.41.0 | +-------------------------------------------+----------------------------------+ | signotec Citrix Channel | 8.0.6 | +-------------------------------------------+----------------------------------+ | signotec VCOM Daemon | 2.0.0 | +-------------------------------------------+----------------------------------+ | StepOver TCP Client | 2.1.0 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Smartcard | | +===========================================+==================================+ | PKCS#11 Library A.E.T. SafeSign | 3.0.101 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Athena IDProtect | 623.07 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library cryptovision sc/interface | 7.1.9.620 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library Gemalto SafeNet | 10.0.37-0 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library SecMaker NetID | 6.7.0.23 | +-------------------------------------------+----------------------------------+ | PKCS#11 Library 90meter | 20190522 | +-------------------------------------------+----------------------------------+ | Reader Driver ACS CCID | 1.1.6-1igel1 | +-------------------------------------------+----------------------------------+ | Reader Driver Gemalto eToken | 10.0.37-0 | +-------------------------------------------+----------------------------------+ | Reader Driver HID Global Omnikey | 4.3.3 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive CCID | 5.0.35 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive eHealth200 | 1.0.5 | +-------------------------------------------+----------------------------------+ | Reader Driver Identive SCRKBC | 5.0.24 | +-------------------------------------------+----------------------------------+ | Reader Driver MUSCLE CCID | 1.4.30-1igel3 | +-------------------------------------------+----------------------------------+ | Reader Driver REINER SCT cyberJack | 3.99.5final.sp13igel15 | +-------------------------------------------+----------------------------------+ | Resource Manager PC/SC Lite | 1.8.23-1igel1 | +-------------------------------------------+----------------------------------+ | Cherry USB2LAN Proxy | 3.0.0.6 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | System Components | | +===========================================+==================================+ | OpenSSL | 1.0.2g-1ubuntu4.14 | +-------------------------------------------+----------------------------------+ | OpenSSH Client | 7.2p2-4ubuntu2.7 | +-------------------------------------------+----------------------------------+ | OpenSSH Server | 7.2p2-4ubuntu2.7 | +-------------------------------------------+----------------------------------+ | Bluetooth Stack (bluez) | 5.50-0ubuntu1igel5 | +-------------------------------------------+----------------------------------+ | MESA OpenGL Stack | 18.3.3-1igel57 | +-------------------------------------------+----------------------------------+ | VAAPI ABI Version | 0.40 | +-------------------------------------------+----------------------------------+ | VDPAU Library Version | 1.1.1-3ubuntu1 | +-------------------------------------------+----------------------------------+ | Graphics Driver INTEL | 2.99.917+git20190301-igel870 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/RADEON | 18.1.0-1igel854 | +-------------------------------------------+----------------------------------+ | Graphics Driver ATI/AMDGPU | 18.1.0-1igel853 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nouveau (Nvidia Legacy) | 1.0.15-2igel775 | +-------------------------------------------+----------------------------------+ | Graphics Driver Nvidia | 410.93-0ubuntu1 | +-------------------------------------------+----------------------------------+ | Graphics Driver Vboxvideo | 5.2.18-dfsg-2igel17 | +-------------------------------------------+----------------------------------+ | Graphics Driver VMware | 13.3.0-2igel857 | +-------------------------------------------+----------------------------------+ | Graphics Driver QXL (Spice) | 0.1.5-2build1igel775 | +-------------------------------------------+----------------------------------+ | Graphics Driver FBDEV | 0.5.0-1igel819 | +-------------------------------------------+----------------------------------+ | Graphics Driver VESA | 2.4.0-1igel855 | +-------------------------------------------+----------------------------------+ | Input Driver Evdev | 2.10.5-1ubuntu1igel750 | +-------------------------------------------+----------------------------------+ | Input Driver Elographics | 1.4.1-1build5igel633 | +-------------------------------------------+----------------------------------+ | Input Driver eGalax | 2.5.5814 | +-------------------------------------------+----------------------------------+ | Input Driver Synaptics | 1.9.0-1ubuntu1igel748 | +-------------------------------------------+----------------------------------+ | Input Driver VMMouse | 13.1.0-1ubuntu2igel635 | +-------------------------------------------+----------------------------------+ | Input Driver Wacom | 0.36.1-0ubuntu1igel813 | +-------------------------------------------+----------------------------------+ | Kernel | 4.18.20 #mainline-udos-r2755 | +-------------------------------------------+----------------------------------+ | Xorg X11 Server | 1.19.6-1ubuntu4.2igel842 | +-------------------------------------------+----------------------------------+ | Xorg Xephyr | 1.19.6-1ubuntu4.2igel842 | +-------------------------------------------+----------------------------------+ | CUPS Printing Daemon | 2.1.3-4ubuntu0.7igel23 | +-------------------------------------------+----------------------------------+ | PrinterLogic | 18.2.1.128 | +-------------------------------------------+----------------------------------+ | Lightdm Graphical Login Manager | 1.18.3-0ubuntu1.1 | +-------------------------------------------+----------------------------------+ | XFCE4 Window Manager | 4.12.3-1ubuntu2igel675 | +-------------------------------------------+----------------------------------+ | ISC DHCP Client | 4.3.3-5ubuntu12.10igel7 | +-------------------------------------------+----------------------------------+ | NetworkManager | 1.2.6-0ubuntu0.16.04.2igel58 | +-------------------------------------------+----------------------------------+ | ModemManager | 1.6.8-2ubuntu1igel2 | +-------------------------------------------+----------------------------------+ | GStreamer 0.10 | 0.10.36-2ubuntu0.1 | +-------------------------------------------+----------------------------------+ | GStreamer 1.x | 1.14.4-1ubuntu1igel203 | +-------------------------------------------+----------------------------------+ | Python2 | 2.7.12 | +-------------------------------------------+----------------------------------+ | Python3 | 3.5.2 | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited IGEL Support | | +===========================================+==================================+ | Mobile Device Access USB | | +-------------------------------------------+----------------------------------+ | VPN OpenConnect | | +-------------------------------------------+----------------------------------+ | Scanner support | | +-------------------------------------------+----------------------------------+ | VirtualBox | | +-------------------------------------------+----------------------------------+ +-------------------------------------------+----------------------------------+ | Features with Limited Functionality | | +===========================================+==================================+ | Cisco JVDI Client | | +-------------------------------------------+----------------------------------+ General Information -------------------------------------------------------------------------------- ### The following clients and features are not supported anymore * Caradigm * Citrix Legacy Sessions * Citrix Web Interface * Citrix StoreFront Legacy * Citrix HDX Flash Redirection * Citrix XenDesktop Appliance Mode * Flash Player Download * Ericom PowerTerm * JAVA Web Start * Leostream Java Connect * Systancia AppliDis * VIA graphics driver Release Notes 11.01.120 (Based On 11.01.110) -------------------------------------------------------------------------------- Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Firefox browser to version 60.7.2 ESR. * Fixes for mfsa2019-19, also known as: CVE-2019-11708 * Fixes for mfsa2019-18, also known as: CVE-2019-11707 * Fixes for mfsa2019-08, also known as: CVE-2019-9790, CVE-2019-9791, CVE-2019-9792, CVE-2019-9793, CVE-2019-9795, CVE-2019-9796, CVE-2018-18506, CVE-2019-9788. * Fixes for mfsa2019-05, also known as: CVE-2018-18356, CVE-2019-5785. * Fixes for mfsa2019-02, also known as: CVE-2018-18500, CVE-2018-18505, CVE-2018-18501. ### Base system * Fixed kernel TCP vulnerabilities CVE-2019-11477: SACK Panic, CVE-2019-11478: SACK Slowness and CVE-2019-11479: Excess Resource Consumption Due to Low MSS Values. * Changed minimal allowed MSS size to 1000 to prevent possible Denial of Service attacks. New Features -------------------------------------------------------------------------------- ### Citrix * Added support for Citrix Workspace Launcher functionality as described at [https://support.citrix.com/article/CTX237727] ### Teradici PCoIP Client * Update Teradici PCoIP Client to version 19.05.4 Resolved Issues -------------------------------------------------------------------------------- ### Citrix * SpaceMouse: Improved USB handling. * Citrix Workspace App 19.03: Improved USB redirection handling. ### RD Web Access * Fixed not starting RDP Remote Applications. ### Network * Fixed: Second Ethernet interface did not get configured when the first one was disabled ### Base system * Fixed license expiry warning at boot. Before this fix in some cases the warning wrongly appeared at every boot. * Fixed: System logoff waits for Citrix logoff now. ### Appliance Mode * Fixed: In-Session Control Bar could not be deactivated in Citrix Selfservice appliance mode ### X11 system * Fixed: Problems with internal graphic cards and nvidia graphic cards. ### Hardware * Fixed non working network on Beckhoff CB3163, CB6263 and CB6363 systems. * Fixed non working network on Lex 3I380D. * Fixed black screen issue with some monitors and 2560x1440 resolution - occured on UD2 LX50. * Added possibility to change some drm settings and limit the DisplayPort lane bandwidth on Intel devices. * Added new registry keys: +------------+-----------------------------------------------------------------+ |Parameter |`Use best graphic mode for all screens on console.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.best_console_mode` | +------------+-----------------------------------------------------------------+ |Range | [Default][Enabled][Disabled] | +------------+-----------------------------------------------------------------+ |Value |**Default** (Enabled in most cases cases) | +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum console resolution width to this value (0 means default setting).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.max_console_width` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**0** (use default setting) | +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum console resolution height to this value (0 means default setting).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.max_console_height` | +------------+-----------------------------------------------------------------+ |Type |Integer | +------------+-----------------------------------------------------------------+ |Value |**0** (use default setting) | +------------+-----------------------------------------------------------------+ |Parameter |`Set graphic kernel driver debug level (warning log will grow very fast).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.kms.debug_level` | +------------+-----------------------------------------------------------------+ |Range | [No debug][Basic][Basic + core][Basic + core + atomic][Full] | +------------+-----------------------------------------------------------------+ |Value |**No debug** | +------------+-----------------------------------------------------------------+ * Only for Intel i915 driver: +------------+-----------------------------------------------------------------+ |Parameter |`Limit the maximum DisplayPort lane link rate.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.max_dp_link_rate` | +------------+-----------------------------------------------------------------+ |Range | [default][1.62Gbps][2.16Gbps][2.7Gbps][3.24Gbps][4.32Gbps] | | | [5.4Gbps][6.48Gbps][8.1Gbps] | +------------+-----------------------------------------------------------------+ |Value |**default** (means hardware default limit) | +------------+-----------------------------------------------------------------+ Release Notes 11.01.110 (Based On 11.01.100) -------------------------------------------------------------------------------- Security Fixes -------------------------------------------------------------------------------- ### Firefox * Updated Mozilla Firefox to version 60.7.0esr * Fixes for mfsa2019-08, also known as: CVE-2019-9790, CVE-2019-9791, CVE-2019-9792, CVE-2019-9793, CVE-2019-9795, CVE-2019-9796, CVE-2018-18506, CVE-2019-9788. * Fixes for mfsa2019-05, also known as: CVE-2018-18356, CVE-2019-5785. * Fixes for mfsa2019-02, also known as: CVE-2018-18500, CVE-2018-18505, CVE-2018-18501. * Allow firefox to access yubikey (FIDO/U2F) if apparmor is active. ### Base system * Updated libwebkit2gtk-4.0-37 to version 1.24.2. Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-6251, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4345, CVE-2018-4386, CVE-2018-4372 Known Issues -------------------------------------------------------------------------------- ### Citrix * With activated DRI3 and an AMD GPU, Citrix H.264 acceleration plugin could freeze. Selective H.264 mode (API v2) is not affected from this issue. * Citrix has known issues with GStreamer1.0 which describe problems with multimedia redirection of H.264, MPEG1 and MPEG2. GStreamer1.0 is used if browser content redirection is active. * Browser content redirection does not work with activated DRI3 and hardware accelerated H.264 deep compression codec. * Citrix StoreFront Login with Gemalto smartcard middleware does not detect smartcard correctly if the card is inserted after start of Login. As a workaround, insert the smartcard before starting StoreFront Login. * When using Citrix Workspace App 19.03 in combination with Philips Speech driver, the session occasionally does not proper terminate at logoff and hangs. As a workaround, usage of Citrix Receiver 13.10 is recommended when Philips Speech driver is needed. * Citrix H.264 acceleration plugin does not work with **enabled** server policy "Optimize for 3D graphics workload" in combination with server policy "Use video codec compression" -> *"For the entire screen"**. * To launch multiple desktop sessions with Citrix HDX RTME and Citrix H.264 acceleration plugin the following registry key must be enabled: +------------+-----------------------------------------------------------------+ |Parameter |`Activate workaround for dual RTME sessions and H264 acceleration`| +------------+-----------------------------------------------------------------+ |Registry |`ica.workaround-dual-rtme` | +------------+-----------------------------------------------------------------+ |Range | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ This workaround is not applicable when "Enable Secure ICA" is active for the specific delivery group. ### VMware Horizon * External drives are mounted already before connection, do not appear in the remote desktop. Workaround: mapping the directory /media as a drive on desktop. The external devices will show up within the media drive then. * Client drive mapping and USB redirection for storage devices should not be enabled both at the same time. - On the one hand, when using USB redirection for storage devices: The USB on-insertion feature is only working when the client drive mapping is switched off. In the IGEL Setup client drive mapping can be found in: `Sessions > Horizon Client > Horizon Client Global > Drive Mapping > Enable Drive Mapping`. It is also recommended to disable local `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug`. - On the other hand, when using drive mapping instead, it is recommended to either switch off USB redirection entirely or at least deny storage devices by adding a filter to the USB class rules. Furthermore Horizon Client relies on the OS to mount the storage devices itself. `Storage Hotplug` on setup page `Devices > Storage Devices > Storage Hotplug` has to be enabled and the "Number of storage hotplug devices" has to set to at least 1. ### Parallels Client * Native USB redirection does not work with Parallels Client. * For using the new FIPS 140-2 compliance mode, it is necessary to connect to the Parallels RAS once with disabled FIPS support. ### Smartcard * In seldom cases the authentication hung when using A.E.T. SafeSign smartcards. ### Multimedia * Multimedia redirection with GStreamer could fail with the Nouveau GPU driver. ### Base system * On NVIDIA GPU drivers, the reported resolutions of a display may contain unsupported resolutions. When any of those are configured, there are visual bugs (e.g. the desktop does not render properly). New Features -------------------------------------------------------------------------------- ### Citrix * Integrated **Citrix Workspace app 19.03**. - Added new registry key to support 1536-bit RSA keys for client authentication. +------------+-----------------------------------------------------------------+ |Parameter |`Enable RSA 1536 cipher suit` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.enabl_rsa_1536` | +------------+-----------------------------------------------------------------+ |Range |**factory default** (default) / false / true | +------------+-----------------------------------------------------------------+ - Added new registry key enable different cipher suites for client authentication. +------------+-----------------------------------------------------------------+ |Parameter |`Enables different cipher suites` | +------------+-----------------------------------------------------------------+ |Registry |`ica.allregions.sslciphers` | +------------+-----------------------------------------------------------------+ |Range |**factory default** (default) / ALL / GOV / COM | +------------+-----------------------------------------------------------------+ * TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - GOV/ALL TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - GOV/ALL TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA - COM/ALL - Added new registry key to support keyboard layout syncroniyation. +------------+-----------------------------------------------------------------+ |Parameter |`Keyboard layout synchronization` | +------------+-----------------------------------------------------------------+ |Registry |`ica.modules.virtualdriver.keyboardsync.enable` | +------------+-----------------------------------------------------------------+ |Range | **false** (default) / true | +------------+-----------------------------------------------------------------+ * Updated Citrix HDX RTME, used for optimization of Skype for Business, to version 2.8.0-2235 ### RDP/IGEL RDP Client 2 * Added Field Collection to RDP session server page ### VMware Horizon * Added parameters to specify webcam frame size and rate for RTAV. +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame width | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-width` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame height | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-height` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ |Parameter |Webcam frame rate | +------------+-----------------------------------------------------------------+ |Registry |`vmware.view.rtav-frame-rate` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ * Updated Horizon Client to version 5.0.0-12557422 * Added possibility to easily evaluate Horizon Blast decoder states. By default sessions are evaluated after usage and the result is written into the journal log. This can also be used with GUI notifications at runtime. ### Teradici PCoIP Client * Added Teradici PCoIP Client version 19.05.1. This feature requires an additional license. The following parameters are available: +------------+-----------------------------------------------------------------+ |IGEL Setup |System > Firmware Customization > Features | +------------+-----------------------------------------------------------------+ |Parameter |Teradici PCoIP Client | +------------+-----------------------------------------------------------------+ |Registry |services.addition_teradici_pcoip_client.enabled | +------------+-----------------------------------------------------------------+ |Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings | +------------+-----------------------------------------------------------------+ |Parameter |Use IGEL Setup for configuration | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.igel-connection | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings | +------------+-----------------------------------------------------------------+ |Parameter |Server | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.address | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings | +------------+-----------------------------------------------------------------+ |Parameter |Server certificate verification mode | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.security-mode | +------------+-----------------------------------------------------------------+ |Range | [Not required][ **Warn but allow** (default)][Full verification]| +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Login | +------------+-----------------------------------------------------------------+ |Parameter |Authentication type | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.auth-type | +------------+-----------------------------------------------------------------+ |Range | [ **Password authentication** (default)] | | | [Smartcard authentication] | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window | +------------+-----------------------------------------------------------------+ |Parameter |Window mode | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.window-mode | +------------+-----------------------------------------------------------------+ |Range | [ **User defined** (default)][Fullscreen One Monitor] | +------------+-----------------------------------------------------------------+ | | [Fullscreen All Monitors][Window] | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window | +------------+-----------------------------------------------------------------+ |Parameter |User interface translation | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.language | +------------+-----------------------------------------------------------------+ |Range | [ **System setting** (default)] [English] [German] [French] | +------------+-----------------------------------------------------------------+ | | [Spanish] [Portuguese (EU)] [Portuguese (Brazil)] [Italian] | +------------+-----------------------------------------------------------------+ | | [Japanese] [Chinese(Simplified)] [Chinese(Traditional)] | +------------+-----------------------------------------------------------------+ |Parameter |Log level | +------------+-----------------------------------------------------------------+ |Registry |sessions.pcoip.options.log-level | +------------+-----------------------------------------------------------------+ |Range | [Critical][Error][ **Info** (default)][Debug] | +------------+-----------------------------------------------------------------+ ### Network * Added NCP Secure Enterprise VPN Client version 5.10_rev40552: Configurable at IGEL Setup > Network > VPN > NCP VPN Client * Added a mechanism for retrieving the SCEP challenge password with a custom script. Setting the following registry key to true enables the use of the script. The registry key network.scepclient.cert%.crypt_password will be ignored. (The script may use it for its own purpose though.) +------------+-----------------------------------------------------------------+ |Parameter |Use Challenge Password Command | +------------+-----------------------------------------------------------------+ |Registry |`network.scepclient.cert%.use_challenge_password_command` | +------------+-----------------------------------------------------------------+ |Value |**false** (default) | +------------+-----------------------------------------------------------------+ * If the above key is true, the value of this key will be passed to bash for execution. It happens when the SCEP challenge password is needed for creating a certificate signing request. The script is supposed to output the challenge password on its standard output. For convenience any carriage return characters are stripped off the script before execution by bash. +------------+-----------------------------------------------------------------+ |Parameter |Challenge Password Command | +------------+-----------------------------------------------------------------+ |Registry |`network.scepclient.cert%.challenge_password_command` | +------------+-----------------------------------------------------------------+ |Value |*** (default) | +------------+-----------------------------------------------------------------+ ### WiFi * Added support for Realtek 8821CE wireless cards. ### Smartcard * Added 90meter smart card library. This feature requires an additional license. The following parameters are available: +------------+-----------------------------------------------------------------+ |IGEL Setup |System > Firmware Customization > Features | +------------+-----------------------------------------------------------------+ |Parameter |90meter Smart Card Support | +------------+-----------------------------------------------------------------+ |Registry |services.addition_smartcard_90meter.enabled | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Horizon Client > Horizon Client Global > Smartcard | +------------+-----------------------------------------------------------------+ |Parameter |Horizon logon with smartcards supported by 90meter library | +------------+-----------------------------------------------------------------+ |Registry |vmware.view.pkcs11.use_90meter | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Sessions > Browser > Browser Global > Smartcard Middleware | +------------+-----------------------------------------------------------------+ |Parameter |90meter Security Device | +------------+-----------------------------------------------------------------+ |Registry |browserglobal.security_device.90meter | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ |IGEL Setup |Security > Smartcard > Middleware | +------------+-----------------------------------------------------------------+ |Parameter |90meter | +------------+-----------------------------------------------------------------+ |Registry |scard.pkcs11.use_90meter | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ ### Base system * Added package ldap-utils which can be used by custom scripts. * Updated libwebkit2gtk-4.0-37 to version 1.24.2. Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-6251, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4345, CVE-2018-4386, CVE-2018-4372 * Updated EULA displayed in OSC and IGEL Setup Assistant. * When the IGEL Setup Assistant is used to download a demo license via WiFi, the local WiFi manager will be enabled by default. * Added possibility to configure scheduled commands. Registry keys: system.cron.* ### Driver * Updated deviceTRUST Client to version 19.1.200. This release includes support for logical disks attached to the IGEL endpoint, plus bug fixes and stability improvements over the previous 19.1.100 release. Logical Disks Added support for real-time properties representing the LOGICAL DISKS attached to the IGEL endpoint. This includes: * DEVICE_LOGICALDISK_X_TYPE - Either Fixed or Removable. * DEVICE_LOGICALDISK_X_LABEL - The volume label. * DEVICE_LOGICALDISK_X_FILESYSTEM - The type of file system. * DEVICE_LOGICALDISK_X_PATHS - The paths that the disk is mounted. * DEVICE_LOGICALDISK_X_TOTALMB - The total space available on the disk. This property is only available for mounted disks. * DEVICE_LOGICALDISK_X_FREEMB - The free space available on the disk. This property is only available for mounted disks. * DEVICE_LOGICALDISK_X_NAME - The name of the underlying physical disk. * DEVICE_LOGICALDISK_X_VENDORID - The vendor identifier uniquely identifying the manufacturer. This property is only available for USB or PCI connected devices. * DEVICE_LOGICALDISK_X_PRODUCTID - The product identifier uniquely identifying the product. This property is only available for USB or PCI connected devices. * DEVICE_LOGICALDISK_X_SERIALNUMBER - The serial number of the physical disk. * DEVICE_LOGICALDISK_X_BUSTYPE - The storage bus type linked to the physical disk. * DEVICE_LOGICALDISK_COUNT - The number of logical disks. * Added registry keys to modify the intel graphic driver usage of framebuffer compression and power management. New registry keys: +------------+-----------------------------------------------------------------+ | Parameter | `Power saving display C-States to use.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.intel.dc_setting` | +------------+-----------------------------------------------------------------+ | Range | [Default][Disable][Up to DC5][Up to DC6] | +------------+-----------------------------------------------------------------+ | Value | **Default** (driver default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use framebuffer compression.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.intel.fbc_setting` | +------------+-----------------------------------------------------------------+ | Range | [Default][Disable] | +------------+-----------------------------------------------------------------+ | Value | **Default** (driver default) | +------------+-----------------------------------------------------------------+ ### X11 system * Added new registry keys to change the xorg input driver for a input device class. New registry keys: For keyboards: +------------+-----------------------------------------------------------------+ | Parameter | `Xorg driver to use` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.keyboard.driver` | +------------+-----------------------------------------------------------------+ | Range | [Evdev] [Libinput] | +------------+-----------------------------------------------------------------+ | Value | **Evdev** (default) | +------------+-----------------------------------------------------------------+ * For Touchpads: +------------+-----------------------------------------------------------------+ | Parameter | `Xorg driver to use` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.touchpad.driver` | +------------+-----------------------------------------------------------------+ | Range | [Evdev] [Synaptics] [Libinput] | +------------+-----------------------------------------------------------------+ | Value | **Evdev** (default) | +------------+-----------------------------------------------------------------+ * For Touchscreens: +------------+-----------------------------------------------------------------+ | Parameter | `Xorg driver to use` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.touchscreen.xorg_driver` | +------------+-----------------------------------------------------------------+ | Range | [Evdev] [Libinput] | +------------+-----------------------------------------------------------------+ | Value | **Evdev** (default) | +------------+-----------------------------------------------------------------+ * For Mouse: +------------+-----------------------------------------------------------------+ | Parameter | `Xorg driver to use` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.mouse.driver` | +------------+-----------------------------------------------------------------+ | Range | [Evdev] [Libinput] | +------------+-----------------------------------------------------------------+ | Value | **Evdev** (default) | +------------+-----------------------------------------------------------------+ * Added some registry keys to disable loading of DRM kernel modules (graphic). New registry keys: +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the RADEON DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.ati.disable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the AMDGPU DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.amdgpu.disable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the i915 DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.disable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the NVIDIA kernel driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.nvidia.disable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the NOUVEAU DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.nouveau.disable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the QXL DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.qxl.disable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the VMGFX DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.vmware.disable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |Parameter |`Disable the loading of the VBOXVIDEO DRM driver.` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.vboxvideo.disable` | +------------+-----------------------------------------------------------------+ |Value |**disabled** (default) / enabled | +------------+-----------------------------------------------------------------+ ### Java * Replaced Oracle JRE by AZUL's Zulu JRE version 8.38.0.13. ### Hardware * Added hardware support for ADVANTECH POC-W213L and POC-W243L. * Added hardware support for HP t430 Resolved Issues -------------------------------------------------------------------------------- ### OSC Installer * Fixed OSC Installer to not disable EFI, if MSDOS partitioning was choosen. ### Citrix * Fixed stability issues with Citrix Browser Content Redirection. * Fixed crash when H264 acceleration and RTME will be used on two or more concurrent VDI sessions. ### RDP/IGEL RDP Client 2 * Added registry key to use rdpglobal window settings for remote apps. +------------+-----------------------------------------------------------------+ | Parameter | Enable global windows settings for remote app | +------------+-----------------------------------------------------------------+ | Registry | `rdp.winconnect.enable-global-window-settings-for-remote-app` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ ### VMware Horizon * Added recognition for password-change and password-expired-dialog in Horizon local-logon sessions or appliance mode * Fixed the configuration choice to˙ use the relative mouse feature ### Firefox * Fixed firefox not accepting proxy credentials from setup. * Fixed print hotkey disable option not working with Firefox 60. * Fixed browserglobal.app.local_subdirs_whitelist not working. * Updated Firefox browser to version 60.7.0esr. * Fixes for mfsa2019-08, also known as: CVE-2019-9790, CVE-2019-9791, CVE-2019-9792, CVE-2019-9793, CVE-2019-9795, CVE-2019-9796, CVE-2018-18506, CVE-2019-9788. * Fixes for mfsa2019-05, also known as: CVE-2018-18356, CVE-2019-5785. * Fixes for mfsa2019-02, also known as: CVE-2018-18500, CVE-2018-18505, CVE-2018-18501. ### Network * Fixed: Failure to reach SCEP server in the client certificate renewal phase resulted in loss of SCEP server and client certificates * Changed e1000e driver to out of tree version 3.4.2.3 - directly from Intel. * Changed igb driver to out of tree version 5.3.5.22 - directly from Intel. * Added possibility to switch between thirdparty and kernel intel IGB network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty igb kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.igb.prefer_thirdparty` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use thirdparty in most cases) | +------------+-----------------------------------------------------------------+ * Added possibility to switch between thirdparty and kernel intel E1000E network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty e1000e kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.e1000e.prefer_thirdparty` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use thirdparty in most cases) | +------------+-----------------------------------------------------------------+ * Fixed instability with netmounts with static ip configuration. * Added possibility to switch between thirdparty r8168 and kernel r8169 realtek network driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Use thirdparty r8168 kernel module.` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.r8169.prefer_r8168` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [Yes] [No] | +------------+-----------------------------------------------------------------+ | Value | **Auto** (use r8169 in most cases) | +------------+-----------------------------------------------------------------+ * Added possibilty to choose the variant of the realtek r8168 driver. New registry key: +------------+-----------------------------------------------------------------+ | Parameter | `Choose realtek r8168 variant (only if prefer r8168 is choosen).` | +------------+-----------------------------------------------------------------+ | Registry | `network.drivers.r8169.r8168_variant` | +------------+-----------------------------------------------------------------+ | Range | [Default][No NAPI][NAPI] | +------------+-----------------------------------------------------------------+ | Value | **Default** (use NAPI in most cases) | +------------+-----------------------------------------------------------------+ ### WiFi * Fixed non working TP Link Archer T2UH. ### Imprivata * Fixed Fast User Switching with Citrix connections. ### Smartcard * Fixed OpenSC setting max_send_size for reader driver pcsc in /etc/opensc/opensc.conf. * Fixed Dell KB813 Smartcard Keyboard in combination with certain smart cards driven by OpenSC PKCS#11 module. Before this fix authentication to Citrix StoreFront and VMWare Horizon failed. ### Base system * Fixed retrieving of serial number from display. * Fixed random 90 seconds shutdown delay (systemd). * Fixed wrong behavior with expired evaluation licenses in some cases. * Fixed a bug in the screenlock countdown that occurred when display of remaining seconds was not desired * Added apparmor rule to allow tcpdump to write to /debuglog. * Bugfix "hotkey setting need reboot". * Fixed UD2 screen goes black problem with certain multimonitor configurations. * Fixed gtk-3 icon sizes for High-DPI configurations. * Enhanced bootloader to allow the setting of some kernel commandline parameters with registry keys: +------------+-----------------------------------------------------------------+ | Parameter | `Disable use of APIC controller.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.noapic` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Disable use of ACPI.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.noacpi` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Use only one CPU core and disable all others.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.nosmp` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Enable debug console on serial port 1.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.serial_console_debug` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Limit CPU core usage (0 means no limit).` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.maxcpus` | +------------+-----------------------------------------------------------------+ | Type | Integer | +------------+-----------------------------------------------------------------+ | Value | **0** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Set maximum allowed cstate on intel cpus.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.max_cstate` | +------------+-----------------------------------------------------------------+ | Range | [No limit] [1] [2] [3] [4] [5] [6] | +------------+-----------------------------------------------------------------+ | Value | **No limit** (do not limit intel cstate) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] [Passthrough] [Force] | +------------+-----------------------------------------------------------------+ | Value | **On** (Use IOMMU if possible) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting for AMD systems.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.amd_iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] | +------------+-----------------------------------------------------------------+ | Value | **On** (Use IOMMU if possible) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `IOMMU usage setting for Intel systems.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.intel_iommu` | +------------+-----------------------------------------------------------------+ | Range | [On] [Off] | +------------+-----------------------------------------------------------------+ | Value | **On** (Use IOMMU if possible) | +------------+-----------------------------------------------------------------+ * Moved the EULA page in IGEL Setup Assistant into the demo activation workflow. * Added new registry key to set USB quirks: +------------+-----------------------------------------------------------------+ | Parameter | `Set XHCI USB quirks to fix some hardware issues.` | +------------+-----------------------------------------------------------------+ | Registry | `system.kernel.bootparams.xhci-hcd_quirks` | +------------+-----------------------------------------------------------------+ | Range | [No quirk] [Spurious Reboot quirk] [Spurious Wakeup quirk] | | | [Spurious Reboot Wakeup quirk] | +------------+-----------------------------------------------------------------+ | Value | **No quirk** | +------------+-----------------------------------------------------------------+ * Lenovo ThinkCentre M73 needs the system.kernel.bootparams.xhci-hcd_quirks registry key set to `Spurious Reboot quirk` to fix reboot after shutdown problem. ### Driver * Updated deviceTRUST Client to version 19.1.200. Bug Fixes: * Fixed an issue reading the DEVICE_IGEL_ICG_SERVER property. * Fixed an issue where the NETWORK and LOCATION property providers could cause the client to freeze if a disconnection occurred whilst these property providers were checking for changes. * Fixed an open file handle leak which lead to the client process reaching its file handle limits when left running for a long period of time. * Fixed non working WACOM device DTU-1141B. ### Custom Partition * Fixed ownership of extracted data: don't preserve original owner while extracting data into custom partition. ### Storage Devices * Fixed auto mounting of storage devices inside of Olympus DS-9500 Digital Voice Recorder. ### X11 system * There is now a registry key to ignore a 3Dconnexion SpaceMouse for IGEL graphical use (X11). If activated, the SpaceMouse is only passed through to the desktop session. If false, it acts also as the standard mouse. +------------+-----------------------------------------------------------------+ |IGEL Setup |System > Registry | +------------+-----------------------------------------------------------------+ |Parameter |`Deactivates a 3Dconnexion SpaceMouse as a standard mouse.` | +------------+-----------------------------------------------------------------+ |Registry |`userinterface.mouse.spacemouse.x11_ignore` | +------------+-----------------------------------------------------------------+ |Value |**enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ * The following SpaceMouse products are included (VID, PID, Vendor, Product): - 0x046D; 0xC603; Logitech, Inc.; 3Dconnexion Spacemouse Plus XT - 0x046D; 0xC605; Logitech, Inc.; 3Dconnexion CADman - 0x046D; 0xC606; Logitech, Inc.; 3Dconnexion Spacemouse Classic - 0x046D; 0xC621; Logitech, Inc.; 3Dconnexion Spaceball 5000 - 0x046D; 0xC623; Logitech, Inc.; 3Dconnexion Space Traveller 3D Mouse - 0x046D; 0xC625; Logitech, Inc.; 3Dconnexion Space Pilot 3D Mouse - 0x046D; 0xC626; Logitech, Inc.; 3Dconnexion Space Navigator 3D Mouse - 0x046D; 0xC627; Logitech, Inc.; 3Dconnexion Space Explorer 3D Mouse - 0x046D; 0xC628; Logitech, Inc.; 3Dconnexion Space Navigator for Notebooks - 0x046D; 0xC629; Logitech, Inc.; 3Dconnexion SpacePilot Pro 3D Mouse - 0x046D; 0xC62B; Logitech, Inc.; 3Dconnexion Space Mouse Pro - 0x256F; **; 3Dconnexion; SpaceMouse * USB device reset via USB powercycle on UD6/UD7 available. * Fixed screen flicker in some cases if "Force NumLock On" (x.global.forcenumlock) is active. * Fixed Display Switch utility not starting with some translations. * Fixed an issue with the noDDC mode not always working as expected. * Fixed wrongly detected embedded DisplayPort on Dell Wyse 5070 Extended hardware. * Added the possibility to change an embedded DisplayPort to a normal DisplayPort. +------------+-----------------------------------------------------------------+ |Parameter |`Use embedded displayport as normal displayport (reboot required).` | +------------+-----------------------------------------------------------------+ |Registry |`x.drivers.intel.edp_is_dp` | +------------+-----------------------------------------------------------------+ |Range | [default][enable][disable] | +------------+-----------------------------------------------------------------+ |Value |**default** (default) | +------------+-----------------------------------------------------------------+ * Fixed some multimonitor (>4) issues with Nvidia graphic cards. * Updated DisplayLink driver to version 5.1.26 to solve some startup issues. * Fixed configuration from the old Display Switch taking precedence over configuration from new Display Switch and preventing changes. ### Audio * Fixed bad quality sound over DisplayPort in a Citrix ICA session or other applications using ALSA API. * Fixed jack detection of the headphone port in Dell Wyse 3040. * Fixed configuration of default audio output and input. ### Media Player (Parole) * Fixed a problem where parole media player would hang instead of playing audio while audio-visualization is enabled. ### Hardware * Fixed vanishing mouse cursor on Ryzen 3 devices. * Fixed issues with non working Touchpad and Trackpoint on Lenovo laptops. * Hardware detect HP t430. * Added possibility to use AMDGPU PRO driver instead of the kernel integrated driver. Ryzen 3 devices (1200, 1300X, 2200G, 2200U and 2300U) will use the AMDGPU PRO driver if registry key x.drivers.amdgpu.use_amdgpu_pro is set to auto (default). New registry key (settings to this key will only work after reboot): +------------+-----------------------------------------------------------------+ | Parameter | `Use AMDGPU PRO driver.` | +------------+-----------------------------------------------------------------+ | Registry | `x.drivers.amdgpu.use_amdgpu_pro` | +------------+-----------------------------------------------------------------+ | Range | [Auto] [True] [False] | +------------+-----------------------------------------------------------------+ | Value | **Auto** | +------------+-----------------------------------------------------------------+ ### Remote Management * If TC is managed over ICG, then settings does not apply immediately when received in connection stage. The settings must be applied after user prompt dialog. --- Release Notes 11.01.100 New Features -------------------------------------------------------------------------------- ### Base system * Support for IGEL OS 11 license deployment with IGEL UMS 6 (via 'Automatic License Deployment') * Support for manual license deployment in IGEL Setup Assistant * Support for demo license registration in IGEL Setup Assistant * Unified IGEL OS 11 firmware for IGEL and thirdparty hardware (New update file prefix: lxos) * Writable partitions are encrypted now * Use IGEL OS Creator for IGEL OS 11 installation and recovery (Download file: OSC_11.01.100.zip) ### X11 system * Reworked user interface * New wallpapers have been added with transparent background so that the custom desktop color shows through. Selection of one of the new "**Desktop Color**" wallpapers in combination with an adjustment of desktop colors will provide this individual effect. The 2nd desktop color and the gradients also work with that. * The new Display Switch tool can use multiple different profiles, automatically chosen at runtime depending on the currently connected monitors. A profile is created, when the current monitor layout/resolution is configured via the Display Switch utility. The profile will be associated with the current connected displays automatically (manufacturer, model and used connector are used for allocation) and if applicable, the state of the laptop lid. The setup will be restored by hot-(un)plugging known displays, means the system will automatically switch to the already configured profile. The Display Switch utility itself got a new interface. All base functionality can be configured via Drag&Drop. * An example workflow: * Connect the hardware and close/open lid * Open the Display Switch Utility - A quick (simple) setting can be selected directly. - Should the desired use case be different from the provided choices, the `Advanced´ button opens a drag and drop interface for further settings. * In this interface the displays can be dragged and dropped for the intended configuration. The display will snap adjacent to others. * If a display should not be used, it can be dragged to the `Disabled´ area on the top right - the screen will be reactivated when it is dragged back to the active area. * To show the same content on multiple displays, one display should be dragged onto an other active screen. The interface will show "Mirror". The mirroring monitor will be displayed on the lower right. * With the `Apply´ button the current state will be set, with `Yes´ on the "Keep configuration" dialog the current settings will be saved to persistent storage and associated with the profile. * Advanced functionality (panning/scaling/resolutions) can be configured in drop- down boxes, hidden in a drawer on the right side. The drawer can be expanded by clicking the `<´ button on the right edge. * For the Display Switch functionality the following parameters should be enabled for proper usage: +------------+-----------------------------------------------------------------+ |IGEL Setup | `Accessories > Display Switch > Options` | +------------+-----------------------------------------------------------------+ |Parameter | `Preserve settings over reboot` | +------------+-----------------------------------------------------------------+ |Registry | `sessions.user_display0.options.preserve_settings` | +------------+-----------------------------------------------------------------+ |Value | **enabled** /disabled (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ |IGEL Setup | `Accessories > Display Switch > Options` | +------------+-----------------------------------------------------------------+ |Parameter | `Smart display configuration` | +------------+-----------------------------------------------------------------+ |Registry | `x.auto_associate` | +------------+-----------------------------------------------------------------+ |Value | **enabled** /disabled (default) | +------------+-----------------------------------------------------------------+ * The IGEL Display Switch utility is now used for NVIDIA graphics devices as well. * Automatic DPI detection has been added by the following parameter: +------------+-----------------------------------------------------------------+ | IGEL Setup | User Interface > Display > Options | +------------+-----------------------------------------------------------------+ | Parameter | `Monitor DPI Detection` | +------------+-----------------------------------------------------------------+ | Registry | `x.xserver0.auto_dpi` | +------------+-----------------------------------------------------------------+ | Value | Off / **Smart** (default) / Pixel-Precise | +------------+-----------------------------------------------------------------+ > With the "Smart" automatic DPI detection the user interface is now usable > out of the box on 4k displays. > "Smart": Auto detect the DPI but only use a few values whichever is closest > to the calculated DPI value. Used DPI values: 96, 125, 150, 175, 200, 225, > 250, 275, 300. > "Off": No auto DPI detection, fixed Monitor DPI value is used. > "Pixel-Precise": Auto detect the DPI value and use it when it is within > 65-300 DPI. Otherwise 96 DPI is used. * Improved High DPI support for various applications. * Added xprintidle tool to firmware. * Added a parameter to delay DisplayPort handling by a certain number of seconds to mitigate disabled outputs causing a reconfiguration. +------------+-----------------------------------------------------------------+ | Parameter | `Delay DisplayPort disconnect events by N seconds to prevent reconfiguration with weird monitors` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.user_display0.options.delay_dp_hotplug` | +------------+-----------------------------------------------------------------+ | Value | **none** | +------------+-----------------------------------------------------------------+ ### Firefox * The Firefox configuration is now only done by global parameters found at setup pages: IGEL Setup > Sessions > Browser > Browser Global * Session specific parameters are: startup page, start monitor and autostart ### Audio - Added support for deployment of Jabra Xpress packages with IGEL UMS 6. +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices > Unified Communications > Jabra > Jabra Xpress | +------------+-----------------------------------------------------------------+ | Parameter | Device Dashboard URL | +------------+-----------------------------------------------------------------+ | Registry | `jabra.xpress.device_dashboard.server_url` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices > Unified Communications > Jabra > Jabra Xpress | +------------+-----------------------------------------------------------------+ | Parameter | Package | +------------+-----------------------------------------------------------------+ | Registry | `jabra.xpress.package_name` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices > Unified Communications > Jabra > Jabra Xpress | +------------+-----------------------------------------------------------------+ | Parameter | Source URL | +------------+-----------------------------------------------------------------+ | Registry | `jabra.xpress.package_url` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices > Unified Communications > Jabra > Jabra Xpress | +------------+-----------------------------------------------------------------+ | Parameter | Check SSL certificate | +------------+-----------------------------------------------------------------+ | Registry | `jabra.xpress.package_url_ssl_cert_check` | +------------+-----------------------------------------------------------------+ | Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices > Unified Communications > Jabra > Jabra Xpress | +------------+-----------------------------------------------------------------+ | Parameter | User name | +------------+-----------------------------------------------------------------+ | Registry | `jabra.xpress.package_url_login` | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices > Unified Communications > Jabra > Jabra Xpress | +------------+-----------------------------------------------------------------+ | Parameter | Password | +------------+-----------------------------------------------------------------+ | Registry | `jabra.xpress.package_url_crypt_password` | +------------+-----------------------------------------------------------------+ - Added support of automatic suspend for wireless Jabra USB audio devices. A device will be suspended after idle time over 5 seconds and automatically resumed again, when an application wants to playback or record audio data over the device. +------------+-----------------------------------------------------------------+ | IGEL Setup | Devices > Unified Communications > Jabra > Options | +------------+-----------------------------------------------------------------+ | Parameter | Suspend on idle | +------------+-----------------------------------------------------------------+ | Registry | `devices.jabra.suspend_on_idle` | +------------+-----------------------------------------------------------------+ | Value | **enabled** (default) / disabled | +------------+-----------------------------------------------------------------+ ### TC Setup (Java) * Local TC setup theme can be configured now: +------------+-----------------------------------------------------------------+ | Parameter | `Color Theme` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.setup.theme` | +------------+-----------------------------------------------------------------+ | Value | **Auto** (default) / Dark / Dark & Light / Light / Ocean | +------------+-----------------------------------------------------------------+ * Added High DPI scaling ### On-screen keyboard * Added new parameters to auto show and hide the on-screen keyboard. To use this feature, the on-screen keyboard should be set to autostart and restart. The on-screen keyboard will start in a hidden state and automatically appears when a text field is selected. Confirmed to work within Firefox and on lockscreen. +------------+-----------------------------------------------------------------+ | IGEL Setup | `Accessories > On-Screen Keyboard > Application Integration` | +------------+-----------------------------------------------------------------+ | Parameter | `Automatically show On-Screen Keyboard when text field is selected` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.softkeyboard.autoshow` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ +------------+-----------------------------------------------------------------+ | Parameter | `Automatically hide On-Screen Keyboard when text field is deselected` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.softkeyboard.autohide` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ ### Appliance Mode * Streamlined the on-screen keyboard settings for appliance mode. * Add new parameter to enable the on-screen keyboard in appliance mode. With enabled `Appliance Mode Access` the on-screen keyboard should set to auto start. +------------+-----------------------------------------------------------------+ | IGEL Setup | Accessories > On-Screen Keyboard | +------------+-----------------------------------------------------------------+ | Parameter | `Appliance Mode Access` | +------------+-----------------------------------------------------------------+ | Registry | `sessions.gtkeyboard0.appliance_mode_access` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Alternatively, the button to show/hide the on-screen keyboard can be displayed in appliance mode, to provide a quick method to turn the keyboard on or off. +------------+-----------------------------------------------------------------+ | IGEL Setup | Accessories > On-Screen Keyboard > Application Integration | | | > On-Screen Keyboard Toggle Button | +------------+-----------------------------------------------------------------+ | Parameter | `Show button` | +------------+-----------------------------------------------------------------+ | Registry | `userinterface.touchscreen.keyboard.touchkey.enable` | +------------+-----------------------------------------------------------------+ | Value | enabled / **disabled** (default) | +------------+-----------------------------------------------------------------+ * Removed the old options to individually enable/disable and position the on-screen keyboard for various appliance mode settings. ### Hardware * Added hardware support for HP t530.