New Features 10.05.100

Citrix Receiver 13

• Integrated Citrix Receiver 13.10. Citrix Receiver version 13.7.0 was removed. Citrix Receiver version 13.8.0 was removed. Available Citrix Receiver versions: 13.5.0, 13.9.1, 13.10 (default)

• • Enable Browser content redirection for rendering of whitelisted webpages on the IGEL Thin Client. 

    More...

    IGEL Setup	Sessions > Citrix XenDesktop > HDX / ICA Global > HDX Multimedia
    Parameter	Browser content redirection
    Registry	ica.module.virtualdriver.webpageredirection
    Value	enabled / disabled

  • Enhanced Citrix retail logging. 

    More...

    Parameter	Citrix Logging
    Registry	ica.module.syslogthreshold
    Value	0 / 3 / 7
    > 0 = Disabled; > 3 = Log only errors; > 7 = Log all levels

  • Enable Port forwarding. 

    More...

    Parameter	Portforward
    Registry	ica.module.virtualdriver.portforward
    Value	enabled / disabled

  • Workspace configuration parameter for Citrix Cloud is now available on setup page. 

    More...

    IGEL Setup	Sessions > Citrix XenDesktop > HDX / ICA Global > Options
    Parameter	Connect to cloud
    Registry	ica.cloudconnect
    Value	enabled / disabled

  • Added a registry key to control the visibility of the Citrix connection bar for desktop sessions. If activated, the In-Session Control Bar should be disabled at userinterface.igel_toolbar.enable  and userinterface.igel_toolbar.show_always. 
    This enables the control of the new Multi-monitor layout persistence feature. 

    More...

    Parameter	Citrix Connection Bar
    Registry	ica.allregions.connectionbar
    Value	factory default / off / on / server determined

• • Added a registry key to control the availability of deprecated cipher suites: 

    TLS_RSA_AES256_GCM_SHA384, TLS_RSA_AES128_GCM_SHA256,

    TLS_RSA_AES256_CBC_SHA256, TLS_RSA_AES256_CBC_SHA, TLS_RSA_AES128_CBC_SHA,

    TLS_RSA_3DES_CBC_EDE_SHA. 

    More...

    Parameter	TLS RSA cipher suites
    Registry	ica.allregions.enable_tls_rsa
    Value	factory default / false / true
    Factory default: true/enabled. Citrix explicitly remarks: Important: Set the flag enable_tls_rsa to true to use the other two cipher suites Enable_RC4-MD5 and Enable_RC4_128_SHA.

• • Added a registry key to control the availability of the deprecated cipher suite: RC4-MD5. 

    More...

    Parameter	RC4-MD5 cipher suite
    Registry	ica.allregions.enable_rc4_md5
    Value	factory default / false / true
    Factory default: false/disabled.

  • Added a registry key to control the availability of the deprecated cipher suite: RC4_128_SHA. 

    More...

    Parameter	RC4_128_SHA cipher suite
    Registry	ica.allregions.enable_rc4_128_sha
    Value	factory default / false / true
    Factory default: false/disabled.

• Added Selective H.264 (API v2) to the  hardware accelerated Citrix deep compression codec. XenDesktop/XenApp server policy: Use video codec for compression -> For actively changing regions
• Added DRI3 acceleration support to the hardware accelerated Citrix deep compression codec (for INTEL and AMD graphics adapters).

• Enable debugging to log file /var/log/user/ctxh264.log. 

  More...

  Parameter	Enable H264 codec debug output
  Registry	ica.hw-accelerated-h264-codec-debug
  Value	enabled / disabled

• Added Kerberos Passthrough (domain passthrough) authentication to StoreFront. Configurable at Sessions > Citrix XenDesktop / XenApp > HDX / ICA Global > StoreFront Logon > Authentication Type.
• Updated Citrix HDX RTME used for optimization of Skype for Business to 2.6.0-2030. This new version adds the support for hardware accelerated H.264 en- and decoding on AMD platforms. 
  See https://support.citrix.com/article/CTX236304 section Capability Checker for Linux platforms how to enable hardware decoding with Citrix VDA registry keys DisableLinuxAMDH264HardwareDecoding and SupportedAMDHWAVideoCardList. The capability check program RTOP-CapabilityChk-x64 is already installed at path /services/ica/hdx_rtme/RTOP-CapabilityChk-x64. The check program must be run with user permissions.
• Added display of logged on Citrix username in screen lock, when screen lock password is synchronized with Citrix password.

• Added checkbox to activate autostart of a single published application/desktop session. 

  More...

  IGEL Setup	Sessions > Citrix XenDesktop / XenApp > Citrix StoreFront/Web Interface > Login
  Parameter	Start a single published application automatically
  Registry	ica.pnlogin.autostart_single_application
  Value	enabled / disabled

• Added Lakeside SysTrack virtual channel in Citrix, RDP and Horizon sessions. Activation via parameters in Setup. 

  More...

  IGEL Setup	Sessions > Citrix XenDesktop/XenApp > HDX/ICA Global > Mapping > Device Support
  Parameter	Lakeside Systrack channel
  Registry	ica.module.virtualdriver.lakeside.enable
  Value	enabled / disabled

  IGEL Setup	Sessions > RDP > RDP Global > Mapping > Device Support
  Parameter	Lakeside Systrack channel
  Registry	rdp.winconnect.plugins.lakeside.use
  Value	enabled / disabled

  IGEL Setup	Sessions > Horizon Client > Horizon Client Global > Performance
  Parameter	Lakeside Systrack
  Registry	vmware.view.lakeside_systrack
  Value	enabled / disabled

• Updated Olympus dictation channel for Citrix to version 20180621. 

  More...

  IGEL Setup	Sessions > Citrix XenDesktop / XenApp > HDX / ICA Global > Mapping > Device Support
  Parameter	Olympus channel for dictation
  Registry	ica.module.virtualdriver.olycom.enable
  Value	enabled / disabled

• Added CrossMatch / DigitalPersona channel for Citrix version 0515. 

  More...

  IGEL Setup	Sessions > Citrix XenDesktop /XenApp > HDX / ICA Global > Mapping > Device Support
  Parameter	Crossmatch DigitalPersona fingerprint channel
  Registry	ica.module.virtualdriver.dpicacnt.enable
  Value	enabled / disabled

RDP/IGEL RDP Client 2

• Support for new RDP 10 codec AVC444 (H.264), which reduces network bandwidth with Server 2016 and Windows 10 hosts. AMD Radeon graphics is required on the client side. Other  graphics hardware (e.g. Intel) as well as other RDP 10 codecs (AVC420 and AVC444V2) will be supported in the future. 

  More...

  IGEL Setup	Sessions > RDP > RDP Global > Performance
  Parameter	Hardware accelerated codecs AVC420/AVC444 (H.264)
  Registry	rdp.winconnect.enable-h264
  Value	auto / on / off

  IGEL Setup	Sessions > RDP > RDP Sessions > Session Name > Performance
  Parameter	Hardware accelerated codecs AVC420/AVC444 (H.264)
  Registry	sessions.winconnect%.option.enable-h264
  Value	Global setting / auto / on / off

  The value "auto" enables supported codecs on supported hardware.

  The value "on" enables supported codecs on all hardware.

  The value "off" disables H.264 codecs.

• Added new parameter ignore_errors to RDP Session config to suppress RDP error messages. 

  More...

  Registry	sessions.winconnect%.ignore_errors
  Value	enabled / disabled

• Added Olympus dictation channel for RDP version 20180621. 

  More...

  IGEL Setup	Sessions > RDP > RDP Global > Mapping > Device Support
  Parameter	Olympus channel for dictation
  Registry	rdp.winconnect.plugins.olyvc.use
  Value	enabled / disabled

UD Pocket

• UD Pocket demo license registration dialog will now show an option to set up proxy servers when IGEL servers cannot be reached.
• Updated the page displayed for the UD Pocket demo registration. It can be choosen now whether a partner or the customer is setting up the device, before displaying the form asking for customer information.

Parallels Client

• Updated Parallels client to version 16.5.1.20446 (32-Bit)

• Added support for FIPS 140-2 compliance. 

  More...

  IGEL Setup	System > Registry
  Parameter	Enable support for FIPS 140-2 compliance
  Registry	sessions.twox%.connection.fips_compliance
  Value	enabled / disabled

VMware Horizon

• Updated Horizon client to version 4.8.0-8518891.

ThinLinc

• Updated ThinLinc client to version 4.9.0.
  • Shadowing notification is now more reliable and interactive, allowing end users more control of their sessions.
  • More than 80 minor enhancements and fixes. See https://www.cendio.com/thinlinc/docs/relnotes/4.9.0.

RedHat Enterprise Virtualization client

• Updated spice components (virt-viewer 7.0, spice-gtk 0.35).
• Removed support for spice-xpi plugin.

X session (Xephyr)

• Added support for X sessions configurable at `IGEL Setup > Sessions > X Sessions`. The available XDMCP connection types: indirect via localhost, indirect, direct and broadcast. With the additional connection type "local display" a command can be specified, that will be displayed inside the X session window. 

  More...

  IGEL Setup	Sessions > X Sessions > X Session > Server
  Parameter	Connection type
  Registry	sessions.xnest<NR>.server.connectiontype
  Range	[Indirect via localhost] [Indirect] [Direct] [Broadcast] [Local display]

  IGEL Setup	Sessions > X Sessions > X Session > Server
  Parameter	Command to be displayed
  Registry	sessions.xnest<NR>.server.runcommand

Firefox

• Updated Mozilla Firefox to version 60.2.2 ESR.
• The initial page displayed by firefox with default settings is now https://wiki.test.toolchain.igel.kreuzwerker.net/ instead of the older https://edocs.igel.com/.
• Updated Adobe Flash Player download URL to version 31.0.0.122.
• Removed the webapp specific options, this feature was removed from Firefox and is not relevant anymore.
• Moved Browser Certificate configuration to page Sessions > Browser > Browser Global > Certificates. 
• Moved Browser Security Device configuration to page Sessions > Browser > Browser Global > Smartcard Middleware.
• Added Fluendo FFmpeg GStreamer proxy: Provides ffmpeg-libavcodec-compatible library, which is needed for H.264 playback in firefox. Instead decoding by standard ffmpeg libraries, the video stream is redirected to GStreamer framework.

Network

• SCEP: Added subject alternative name type DNS Name as UPN (auto). This is similar to DNS Name (auto). In the CSR the result is a Microsoft User Principal Name (UPN) that consists of the hostname.
• NetworkManager updated to version 1.2.6.

Cisco JVDI Client

• Integrated new Cisco Jabber Softphone for VDI (Cisco JVDI client) version 12.0.0 as feature with limited functionality. See product documentation for details -> https://wiki.test.toolchain.igel.kreuzwerker.net/cisco-jvdi/en. Activation of this feature at: System > Firmware Customization > Features > Cisco JVDI client. Only Citrix Receiver 13.9.1 is supported. 

  More...

  Parameter	Log Level
  Registry	multimedia.ciscovxme.log_level
  Range	[Info] [Warning] [Error] [Fatal] [Debug] [Trace]

  IGEL Setup	Sessions > Citrix XenDesktop/XenApp > HDX/ICA Global > Unified Communications > Cisco JVDI Client
  Parameter	Cisco JVDI Client
  Registry	ica.module.virtualdriver.vdcisco.enable
  Value	enabled / disabled
  Registry path for Common JVDI options: `multimedia.ciscovxme.**` The Cisco JVDI Client configuration is only displayed if the Multimedia Codec Pack (MMC) is present.

Java

• Updated Oracle Java Runtime Environment to version 1.8.0 U181.

Smartcard

• Updated SecMaker Net iD to version 6.7.0.23.
• Updated HID Global Omnikey smartcard reader driver to version 4.3.3.
• Updated cryptovision sc/interface to version 7.1.9. Changelog since version 7.0.5:
  • Fixed an error during certificate registration using the MS Minidriver for MS VSC. Compatible with sc/interface cache version 1.2 or higher.
  • Fixed an error where writing a certificate using the Minidriver for MS VSC corrupted the Container-ID. As a result the key could not be used using CNG/CAPI.
  • Fixed an error during certificate registration using the Minidriver for MS VSC where some Container-ID's could not be used by CNG/CAPI.
  • General Bug Fixes.
  • Fixed error during profile creation on JCOP3 with ePasslet-Suite 3.0
  • Added support for additional BWI card profiles based on CardOS-5.x.
    Versions 1.7, 1.8, 1.9, 4.2, 4.3 and 4.4. Support 4k RSA for 1.9 and 4.4.
  • Fixed support for remote logon in sc/interface cache.
  • Fixed Free after use in ReadOnly Minidriver.
  • PKCS#11 Fixed MS VSC (GIDSv2) support.
  • PKCS#11 Fixed CardOS-4.x "non sc/interface card profile" support.
  • MS VSC (GIDSv2) Support for PKCS#11 - Maximum CKA_ID length reduced to 25 bytes!
  • Support for JCOP3 and Infineon JTOP - DolphinV2.
  • Support for cryptovision's ePasslet-Suite-3.0.
  • New ePKIApplet-2.129 for JCOP3, SCE7 and JTOP (DolphinV2) with up to 4096 bits RSA and 512 bits
  • EC support, PACE optional.
  • RegisterTool plugins now available in Setup. Removed from "support\RegisterTool_Plugins".
  • New sc/interface Minidriver support for MS VSC (instead of the MS Minidriver) to allow extended PIN cache configuration.
  • Added support for sc/interface cache version 1.0 for Minidriver/ReadOnly Minidriver and PKCS#11.
  • Cross-application PIN cache for Windows 8.1 and later.
  • WARNING: No longer compatible with Credential Cache (CSP). When there are any questions, support@cryptovision.com should be contacted.
  • Added macOS CTK Token Driver for 10.12 and later. Unfortunately, after the installation, a shell script must be executed to enable the full functionality.
  • Removed macOS tokend support beginning with version 10.12, installation of 10.10 can be used if needed.
  • WARNING: macOS tokend support will discontinue, usage of new CTK Token Driver is necessary.
  • Re-Added cvSimpleCardProv for Windows (based on 6.4.2) to enabled the default login selection, see "support\CredentialProvider".
• Updated OpenSC library to version 0.19.0. Improved handling of PIV and CAC ALT token.

Base system

• Updated to kernel version 4.18.11.

• Added new GStreamer 1.x support version 1.14.2. 
  There will only ever be GStreamer in version 1.0 or version 0.10. By default, clients run with the version they have best support for. The provided registry key can be used to override the automatic detection/setting and pin a single version if required. 

  More...

  Parameter	Fluendo GStreamer Codec Version
  Registry	multimedia.gstreamer.version
  Value	[1.x] [0.10] [automatic]

• With GStreamer 1.x the new Parole player is used for media player sessions. When there occur problems with the new player, a switch back to totem/GStreamer 0.10 media player is possible by Fluendo GStreamer Codec Version parameter.

• Added optional logoff button in taskbar when the screenlock is active. 

  More...

  IGEL Setup	Security > Logon > Taskbar
  Parameter	Show logoff button
  Registry	userinterface.screenlock_taskbar_logged_in.logoff_button
  Value	enabled / disabled

• Mobile broadband configuration dialog now provides a simple mode, that displays 3 dropdown boxes to select country, provider and access point (plan). The former version is available via an Expert Mode button.
• IGEL Setup Assistant enhancements: 
  • displaying page for mobile broadband configuration when any mobile broadband modem is detected.
  • displaying page to show broken network connectivity
  • desktop icon will now be displayed when the assistant was not yet finished.
  • the assistant is now always started on devices without IGEL license, that are not registered at UMS
  • new icon design
• Added support for chinese, japanese, korean and thai fonts.
• KVM kernel modules added.

• Added policiykit-1-gnome session agent to get a gui interface for actions which requires root authentification.

• Added remote (network attached) logging via rsyslog. 

  More...

  IGEL Setup	System -> Remote Syslog
  Parameter	Remote mode
  Registry	system.syslog.remote_mode
  Range	[Server] [Client] [Off]

  Parameter	Custom client config entries
  Registry	system.syslog.client_custom

  • Server mode is possible, though limited and intended for short-term debugging. 

    More...

    IGEL Setup	System -> Remote Syslog
    Parameter	Template for log file storage
    Registry	system.syslog.template
    Value	/var/log/%HOSTNAME%/messages

    Parameter	Local port
    Registry	system.syslog.input%.port
    Value	514

    Parameter	Transport protocol
    Registry	system.syslog.input%.transport
    Value	[TCP] [UDP]

    Parameter	Local Address
    Registry	system.syslog.input%.local_address

    Parameter	Name
    Registry	system.syslog.input%.name

  • Client mode allows to filter and send commands to multiple remotes.

    More...

    IGEL Setup	System -> Remote Syslog
    Parameter	Remote port
    Registry	system.syslog.output%.port
    Value	514

    Parameter	Transport protocol
    Registry	system.syslog.output%.transport
    Value	[TCP] [UDP]

    Parameter	Remote address
    Registry	system.syslog.output%.address

    Parameter	Syslog facility
    Registry	system.syslog.output%.facility
    Range	[Any] [AUTH] [CRON] [DAEMON] [FTP] [KERN] [LPR] [MAIL] [NEWS] [USER] UUCP]

    Parameter	Syslog level
    Registry	system.syslog.output%.level
    Range	[Any] [EMERG] [ALERT] [CRIT] [ERR] [WARNING] [NOTICE] [INFO] [DEBUG]

    
    
    

• Shutdown or suspend by inactivity. 

  More...

  IGEL Setup	System > Power Options > System
  Parameter	System action on inactivity
  Registry	system.power_management.system_standby.ac_action
  Value	Suspend / Shutdown

• Enhanced Change Password utility to be able changing the following items of the logged on user:
  • Password of local user (screen lock password).
  • PIN of IGEL smartcard.
  • PIN of PKCS#11 smartcard.

CUPS Printing

• Added PrinterLogic support, Version 18.2.1.128. 

  More...

  IGEL Setup	Devices > Printer > PrinterLogic
  Parameter	Manage printers by Printer Installer Client
  Registry	printerlogic.active
  Value	enabled / disabled

  Parameter	HomeURL Protocol
  Registry	printerlogic.homeurl.protocol
  Value	http:// / https://

  Parameter	HomeURL Hostname
  Registry	printerlogic.homeurl.hostname
  Value	.printercloud.com

  Parameter	Authorization Code
  Registry	printerlogic.auth.crypt_password

  Parameter	(Mapping in sessions) ICA Sessions
  Registry	printerlogic.map_ica
  Value	enabled / disabled

  Parameter	(Mapping in sessions) RDP Sessions
  Registry	printerlogic.map_rdp
  Value	enabled / disabled

  Parameter	(Mapping in sessions) NX Sessions
  Registry	printerlogic.map_nxclient
  Value	enabled / disabled

  Parameter	(Mapping in sessions) Parallels Client Sessions
  Registry	printerlogic.map_twox
  Value	enabled / disabled

Driver

• Added Kofax virtual channel for signature pads in Citrix sessions. 

  More...

  IGEL Setup	Sessions > Citrix XenDesktop/XenApp > HDX/ICA Global > Mapping > Device Support
  Parameter	Kofax SPVC Signature Pad Channel
  Registry	ica.module.virtualdriver.spvc.enable
  Value	enabled / disabled

• Improved support for FIBOCOM L830-EB LTE module in Lenovo Thinpad L480.

• Added configuration to change the dynamic power management settings for ATI graphics driver. 

  More...

  Parameter	ATI dynamic power management
  Registry	x.drivers.ati.dpm
  Value	default / enabled / disabled

• Added the possibility to change the dynamic power management settings for graphics AMDGPU driver. 

  More...

  Parameter	AMDGPU dynamic power management
  Registry	x.drivers.amdgpu.dpm
  Value	default / enabled / disabled

• Added possibility to use generic modesetting graphics driver instead of the hardware specific one.  

  More...

  Parameter	Use generic modesetting driver for ATI hardware.
  Registry	x.drivers.ati.use_modesetting
  Value	enabled / disabled

  Parameter	Use generic modesetting driver for AMDGPU hardware.
  Registry	x.drivers.amdgpu.use_modesetting
  Value	enabled / disabled

  Parameter	Use generic modesetting driver for NVIDIA hardware.
  Registry	x.drivers.nouveau.use_modesetting
  Value	enabled / disabled

Bluetooth

• Added new Bluetooth Autopairing Wizard for IGEL OS installations without keyboard or mouse available, but with unpaired bluetooth keyboard/mouse. The Autopairing Wizard is started together with IGEL Setup Assistant.

Appliance Mode

• The wireless manager can now be invoked from the In-Session control bar. Furthermore, it will be automatically started when no network connection can be established.
  Prerequisites: A WiFi device is availabe and the following registry keys are set to true. 

  More...

  Parameter	Activate Wireless Interface
  Registry	network.interfaces.wirelesslan.device0.active
  Value	enabled / disabled

  Parameter	Enable wireless manager
  Registry	network.applet.wireless.enable_connection_editor
  Value	enabled / disabled

• It is possible to use Accessories, VPN connections and other session types in Appliance Mode now. The access to those session types must be explicitely enabled by a new parameter Appliance Mode Access. The possible starting methods:
  • XDMCP Appliance mode: Hotkey

  • All other Appliance modes: Desktop icon, Desktop Context Menu,Application Launcher (+ System tab), Hotkey, Autostart. 

    More...

    IGEL Setup	Accessories > ICA Connection Center
    Parameter	Application Mode Access
    Registry	sessions.icaconncenter0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Task Manager
    Parameter	Application Mode Access
    Registry	sessions.taskmanager0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Application Launcher
    Parameter	Application Mode Access
    Registry	sessions.launcher0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Firmware Update
    Parameter	Application Mode Access
    Registry	sessions.firmware_update0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Quick Settings
    Parameter	Application Mode Access
    Registry	sessions.usersetup0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Sound Preferences
    Parameter	Application Mode Access
    Registry	sessions.mixer0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Disk Removal
    Parameter	Application Mode Access
    Registry	sessions.storage_dcdm0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Disk Utility
    Parameter	Application Mode Access
    Registry	sessions.storage_info0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Commands  User Interface > Hotkeys > Commands
    Parameter	Application Mode Access
    Registry	sessions.commands<NR>.appliance_mode_access sessions.wmcommands<NR>.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Webcam Information
    Parameter	Application Mode Access
    Registry	sessions.webcaminfo0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Touchscreen Calibration
    Parameter	Application Mode Access
    Registry	sessions.touchcalib0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	User Interface > Screenlock / Screensaver
    Parameter	Application Mode Access
    Registry	sessions.xlock0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Monitor Calibration
    Parameter	Application Mode Access
    Registry	sessions.xpattern0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Network Tools
    Parameter	Application Mode Access
    Registry	sessions.gnome-nettool0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Screenshot Tool
    Parameter	Application Mode Access
    Registry	sessions.screenshooter0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > System Information
    Parameter	Application Mode Access
    Registry	sessions.device_manager0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Bluetooth Tool
    Parameter	Application Mode Access
    Registry	sessions.bluetooth0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Display Switch
    Parameter	Application Mode Access
    Registry	sessions.user_display.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Identify Monitors
    Parameter	Application Mode Access
    Registry	sessions.screenid0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > System Log Viewer (> Options)
    Parameter	Application Mode Access
    Registry	sessions.systemviewer0.appliance_mode_access
    Value	enabled / disabled

    Registry	sessions.setup.displaynames.add_layout.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Terminals > Local Terminal
    Parameter	Application Mode Access
    Registry	sessions.xterm<NR>.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Sessions > SSH > SSH Session
    Parameter	Application Mode Access
    Registry	sessions.ssh<NR>.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	System > Firmware Customization -> Custom Application -> Custom Application
    Parameter	Application Mode Access
    Registry	sessions.custom_application<NR>.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Accessories > Mobile Device Access
    Parameter	Application Mode Access
    Registry	sessions.mtp-devices0.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Network > VPN > OpenConnect VPN (> OpenVPN Connection (> Desktop Integration))
    Parameter	Application Mode Access
    Registry	sessions.openvpn<NR>.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Network > VPN > OpenConnect VPN (> VPN OpenConnection (> Desktop Integration))
    Parameter	Application Mode Access
    Registry	sessions.openconnect<NR>.appliance_mode_access
    Value	enabled / disabled

    IGEL Setup	Network > VPN > genucard (> Desktop Integration)
    Parameter	Application Mode Access
    Registry	sessions.genucard_vpn_connection0.appliance_mode_access
    Value	enabled / disabled

X11 system

• Set of User Interface > Display > Options > Monitor DPI now automatically affects the size of the mouse cursor, the panel height, the desktop icons, the application launcher, the size of the start menu and the window manager decorations.

VirtualBox

• Added VirtualBox as feature with limited support. Activation of the feature at: System > Firmware Customization > Features > VirtualBox. Added new registry keys under `virtualbox` and `sessions.virtualbox<NR>`.

Audio

• Updated Pulseaudio to version 12.0-1.

• The resample method in Pulseaudio can now be configured by the newly introduced parameter resample-method. 

  More...

  Parameter	Resample method
  Registry	multimedia.pulseaudio.daemon.resample-method
  Range	[soxr-vhq] [soxr-hq] [soxr-mq] [speex-float-10] [speex-float-5] [speex-float-3] [speex-float-1]

Media Player (Parole/Totem)

• Added new Parole Media Player 1.0.1-0ubuntu1. It is used for media player sessions by default now. When there occur problems with the new player, switch back to totem/GStreamer 0.10 media player is possible by setting Fluendo GStreamer Codec Version parameter to 0.10. 

  More...

  Parameter	Fluendo GStreamer Codec Version
  Registry	multimedia.gstreamer.version
  Range	[1.x] [0.10] [automatic]

• Added RTSP/RTMP support to parole media player / gstreamer 1.x.

• The following parameters are only functional with Totem media player/GStreamer 0.10 and not for Parole media player. 

  More...

  IGEL Setup	Sessions > Media Player > Media Player Global > Window
  Parameter	Automatically resize the player window when a new video is loaded
  Registry	multimedia.mediaplayer.auto_resize
  Value	enabled / disabled

  IGEL Setup	Sessions > Media Player > Media Player Global > Window
  Parameter	Main window should stay on top
  Registry	multimedia.mediaplayer.window_on_top
  Value	enabled / disabled

  IGEL Setup	Sessions > Media Player > Media Player Global > Playback
  Parameter	Visualization size
  Registry	multimedia.mediaplayer.visual_quality
  Range	[Small] [Normal] [Large] [Extra Large]

  IGEL Setup	Sessions > Media Player > Media Player Global > Options
  Parameter	Network connection speed
  Registry	multimedia.mediaplayer.connection_speed
  Range	[56 kbps Modem/ISDN] [112 kbps Dual ISDN/DSL] [256 kbps DSL/Cable] [384 kbps DSL/Cable] [512 kbps DSL/Cable] [1.5 mbps T1/Intranet/LAN] [Intranet/LAN]

  Parameter	Enable deinterlacing
  Registry	multimedia.mediaplayer.deinterlace
  Value	enabled / disabled

  Parameter	Enable debug
  Registry	multimedia.mediaplayer.debug
  Value	enabled / disabled

  Parameter	Network buffering threshold
  Registry	multimedia.mediaplayer.network_buffer_threshold
  Value	2

• As the Media Player Browser Plugin is not supported with Firefox 60 ESR, the following parameters are not available anymore. 

  More...

  IGEL Setup	Sessions > Media Player > Media Player Global > Browser Plugin
  Parameter	Video output
  Registry	multimedia.mediaplayer.browser_plugin.video_sink
  Range	[Default] [Auto] [Hardware Accelerated] [X Video Extension] [X Window System]

  IGEL Setup	Sessions > Media Player > Media Player Global > Browser Plugin
  Parameter	Aspect ratio
  Registry	multimedia.mediaplayer.browser_plugin.aspect_ratio
  Range	[Default] [Auto] [Square] [4:3 (TV)] [16:9 (Widescreen)] [2.11:1 (DVB)]

Evidian

• Integrated Evidian AuthMgr version 1.5.6840.
  • Evidian AuthMgr sessions can be configured at IGEL Setup > Sessions > Evidian AuthMgr > Evidian AuthMgr Sessions (registry keys: sessions.rsuserauth%).
  • Evidian AuthMgr global settings can be configured at IGEL Setup > Sessions > Evidian AuthMgr > Evidian AuthMgr Global (registry keys: evidian).

• Added support for Custom catalog of messages. 

  More...

  IGEL Setup	Sessions > Evidian AuthMgr > Evidian AuthMgr Sessions > Evidian AuthMgr Session > Options
  Parameter	Language selection
  Registry	sessions.rsuserauth<NR>.parameters.message_catalog
  Range	[Automatic] [English (UK)] [English (US)] [German] [French] [Custom]

  IGEL Setup	Sessions > Evidian AuthMgr > Evidian AuthMgr Global > Options
  Parameter	Language selection
  Registry	evidian.message_catalog
  Range	[Global setting] [English (UK)] [English (US)] [German] [French] [Custom]

  IGEL Setup	Sessions > Evidian AuthMgr > Evidian AuthMgr Global > Options
  Parameter	Custom catalog of messages
  Registry	evidian.custom_message_catalog
  Value	/services/evidian/share/locale/en/rsUserAuth.cat

• Added support for Evidian Data Partition.

  More...

  IGEL Setup	Sessions > Evidian AuthMgr > Evidian AuthMgr Global > Options
  Parameter	Evidian AuthMgr Data Partition
  Registry	evidian.datapart.enabled
  Value	enabled / disabled

  IGEL Setup	Sessions > Evidian AuthMgr > Evidian AuthMgr Global > Options
  Parameter	Size
  Registry	evidian.datapart.size
  Value	10

• Added support for Password Authentication. 

  More...

  IGEL Setup	Sessions > Evidian AuthMgr > Evidian AuthMgr Sessions > Evidian AuthMgr Session > Options
  Parameter	Allow password authentication
  Registry	sessions.rsuserauth<NR>.parameters.password_authentication
  Value	enabled / disabled

  IGEL Setup	Sessions > Evidian AuthMgr > Evidian AuthMgr Sessions > Evidian AuthMgr Session > Options
  Parameter	Allow password forgotten
  Registry	sessions.rsuserauth<NR>.parameters.password_forgotten
  Value	enabled / disabled

  IGEL Setup	Sessions > Evidian AuthMgr > Evidian AuthMgr Sessions > Evidian AuthMgr Session > Options
  Parameter	Default domain name for password authentication
  Registry	sessions.rsuserauth<NR>.parameters.password_default_domain
  Value

Misc

• Added support for local scanning as feature with limited support. Activate the feature at: System > Firmware Customization > Features > Scanner support. This has been tested with a Canon LiDE 120 scanner. 

  More...

  Parameter	Scanner support
  Registry	product.partitions41.enabled
  Value	enabled / disabled
  This must be enabled for the feature to become active and the remaining keys to be valid.

  Parameter	Enable scanner daemon
  Registry	devices.scanner.daemon
  Range	[none] [scanbd] [saned]
  The key determines the daemon to be started. scanbd is necessary for handling buttons on the scanner. It runs saned when necessary (and the scanner is available). saned alone provides scanning functionality to local and remote applications (xsane, scanimage, ..). If none is selected the system can still be used as a client for remote scanner servers (using xsane or scanimage).

  Parameter	Allowed remote clients
  Registry	devices.scanner.allowed_clients
  The key may contain a space-separated list of hosts and networks (CIDR > notation) that are allowed to connect to a local server.

  Parameter	Remote scanners
  Registry	devices.scannerclient.remote
  This may contain a space-separated list of remote scanner servers to be used by local applications (xsane, scanimage). It is only relevant if no local server is configured.

• The remaining keys influence scanner button handling. For each button there is an instance of the devices.scanner.scanbd.action% template.

• In order to keep scanner button handling flexible the default handling may be replaced by custom scripts. Details of the default handling are listed at the end of this section. 

  More...

  Parameter	Scanner button name
  Registry	devices.scanner.scanbd.action%.button
  This contains the (symbolic) name of the button. There are currently four predefined instances of the template where the value is 'file', 'scan', 'copy', and 'email' respectively. (These refer to the buttons on a Canon LiDE 120 from left to right where 'file' may be labeled 'PDF')

  Parameter	Allow while nobody is logged in
  Registry	devices.scanner.scanbd.action%.allow_lockpanel_logged_out
  Value	enabled / disabled
  If this is set to false, the button is ignored when nobody is logged in (only > relevant when local logon is configured)

  Parameter	Allow while screen is locked
  Registry	devices.scanner.scanbd.action%.allow_lockpanel_logged_in
  Value	enabled / disabled
  When this is set to false, the button is ignored while the screen is locked.

  Parameter	scanbd custom action
  Registry	devices.scanner.scanbd.action%.custom_cmd
  This may contain a custom button handling command. The value is empty by default. If it is not, the value will be passed to "bash -c .." and the default button handling will not be effective. The consequence is that entering some space characters results in disabling the button.

  Parameter	Directory
  Registry	devices.scanner.scanbd.action%.directory
  Value	/tmp
  Set the target directory for scan results.

  Parameter	Format
  Registry	devices.scanner.scanbd.action%.format
  Range	[pnm] [tiff] [png] [jpeg]
  Determines the image format (passed as argument to scanimage).

  Parameter	Color mode
  Registry	devices.scanner.scanbd.action%.mode
  Value	[Color] [Gray] [Lineart]
  Determines the color mode (passed as argument to scanimage).

  Parameter	Resolution in dpi
  Registry	devices.scanner.scanbd.action%.resolution
  Range	[75] [100] [150] [300] [600] [1200] [2400] [4800]
  Determines the resolution (passed as argument to scanimage).

  Parameter	Brightness
  Registry	devices.scanner.scanbd.action%.brightness
  Value	0
  Determines the brightness (passed as argument to scanimage).

• Default button handling script: There is a default button handling script /etc/scanbd/scripts/action. It might be used as a potential starting point for custom button handling. The script handles the four buttons of a Canon LiDE 120 in the following ways:
  • file results in a PDF document that contains a series of pages where each page contains a scan result acquired with scanimage according to the settings. This needs user interaction on the local machine's desktop.
  • scan results in an image file that is silently created and stored according to the settings.
  • copy makes the script use scanimage according to the settings, convert the resulting image to PDF and send it to the default printer. This obviously requires that a printer is configured.
  • email just results in xsane being started. The following settings are not respected in this case:
    • devices.scanner.scanbd.action%.directory
    • devices.scanner.scanbd.action%.format
    • devices.scanner.scanbd.action%.mode
    • devices.scanner.scanbd.action%.resolution
    • devices.scanner.scanbd.action%.brightness

Hardware

• Added official support for HP T630.
• Added official support for Intel NUC 6CAYH and 5i5MYHE.
• Added official support for Dell/Wyse 3040.
• Added official support for Toshiba Tecra C50-B1503.
• Added official support for Toshiba R50.
• Added official support for Dell/Wyse AIO 5212.
• Added official support for LG 24CK550W AiO Thin Client.

TC Setup (Java)

• Updated TC Setup to version 5.9.11.
• Added an additional local administrator access to IGEL setup. The local administrator password is configurable at Security > Password setup page. The page permissions are configurable at Accessories > Setup > Setup Administrator Permissions setup page.
• Reworked Accessories > Commands and User Interface > Hotkeys > Commands setup pages.
• Reworked Storage Hotplug setup page.

Remote Management

• Added support for UMS File Transfer Status.

• Added a new configuration to prevent a user from canceling UMS actions like firmware update, reboot, shutdown, etc. through the UMS notification dialog. 

  More...

  Parameter	Allow user to cancel UMS actions
  Registry	userinterface.rmagent.cancel_usermessage
  Value	enabled / disabled

Fabulatech

• FabulaTech USB for Remote Desktop updated to versions 5.2.29; FabulaTech FTPlugin updated to version 3.4.0.
• Support for some specific devices has been improved.