Breadcrumbs

New Features 11.02.100

Citrix

  • Integrated Citrix Workspace app 19.06.
    Available Citrix Workspace apps in this release: 19.06, 13.10 and 13.5.

  • Added a new registry key to support 1536-bit RSA keys for client authentication. Factory default for this release is "true".

    More...

    Parameter

    Enables RSA 1536 cipher suite

    Registry

    ica.allregions.enable_rsa_1536

    Range

    factory default / false / true

  • Added a new registry key to enable different cipher suites for client authentication. Factory default for this release is "ALL".

    More...

    Parameter

    Enables different cipher suite

    Registry

    ica.allregions.sslciphers

    Range

    factory default / ALL / GOV / COM

    > TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 – GOV/ALL
    > TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 – GOV/ALL
    > TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA – COM/ALL

  • Added a new registry key to support keyboard layout synchronization.

    More...

    Parameter

    Keyboard layout synchronization

    Registry

    ica.modules.virtualdriver.keyboardsync.enable

    Value

    false/ true

  • Updated Citrix HDX RTME used for optimization of Skype for Business to version 2.8.0-2235.

  • Added support for Citrix Workspace Launcher functionality as described at https://support.citrix.com/article/CTX237727.

  • Added Citrix Farm Selection, a facility to manually select one of the configured services / farms for StoreFront login.

    More...

    Parameter

    Citrix store selection

    Registry

    ica.pnlogin.farm_selection.enabled

    Value

    off / on

    Info:

    Off: All servers are used in parallel. If switched on, a user has to select the store via a dialog box before entering the login data.


    • Timeout for the selection dialog:

      More...

      Parameter

      Timeout

      Registry

      ica.pnlogin.farm_selection.timeout

      Value

      0 (no timeout) seconds

    • Width of the dialog window:

      More...

      Parameter

      Selection box window width

      Registry

      ica.pnlogin.farm_selection.win_width

      Value

      400 pixel

    • Height of the dialog window:

      More...

      Parameter

      Selection box window height

      Registry

      ica.pnlogin.farm_selection.win_height

      Value

      400 pixel

  • Changed the defaults for following parameters:

    More...

    IGEL Setup

    Sessions > Citrix > Citrix Global > Window

    Parameter

    Multimonitor full-screen mode

    Registry

    ica.wfclient.usexdgfullscreen
    ica.wfclient.spanmonitorenable                             

    Range

    [Restrict full-screen session to one monitor]
    [Expand full-screen session across all monitors]
    [Expand the session over a self-selected number of monitors]

    IGEL Setup

    Sessions > Citrix > Citrix Global > HDX Multimedia  

    Parameter

    Multimedia redirection

    Registry

    ica.module.virtualdriver.multimedia.enable

    Value

    enabled / disabled

    IGEL Setup

    Sessions > Citrix > Citrix Global > HDX Multimedia 


    Sessions > Citrix > Citrix Global > Unified Communications > Skype for Business

    Parameter

    HDX Realtime Media Engine

    Registry

    ica.module.virtualdriver.hdxrtme.enable

    Value

    enabled / disabled

  • Updated the Nuance virtual channel for ICA to version B301.

RDP/IGEL RDP Client 2

  • Added a field 'Collection' to RDP session server page.

    More...

    IGEL Setup > Sessions > RDP > RDP Sessions > RDP Session > Server  

    IGEL Setup > Sessions > RDP > RDP Sessions > RDP Session > Options

    Parameter

    Collection

    Registry

    sessions.winconnect<NR>.option.load-balance-info

VMware Horizon

  • Added parameters to specify webcam frame size and rate for RTAV.

    More...

    Parameter

    Webcam frame width

    Registry

    vmware.view.rtav-frame-width

    Value

    <empty_string>

    Parameter

    Webcam frame height

    Registry

    vmware.view.rtav-frame-height

    Value

    <empty_string>

    Parameter

    Webcam frame rate

    Registry

    vmware.view.rtav-frame-rate

    Value

    <empty_string>

  • Updated Horizon Client to version 5.0.0-12557422.

  • Added a possibility to easily evaluate Horizon Blast decoder states. By default, sessions are evaluated after usage, and the result is written into the journal log. This can also be used with GUI notifications at runtime.

  • Added new USB classes to Horizon USB Redirection class configuration: Audio (input), Audio (Output), Imaging, Video (Input).


Parallels Client

  • Updated Parallels Client to version 17.0.

  • Added a possibility to set apps to autostart on Parallels RAS.

PowerTerm

  • Added Ericom PowerTerm terminal emulation. This feature requires an additional license.
    The following versions are available:
    12.0.1.0.20170219.2-_dev_-34574
    12.5_x64_20190619_12.5.1.40008

IBM_525

  • Improved startup time of IBM iAccess Client.

  • Improved configuration of IBM iAccess Client via IGEL Setup.

    More...

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Connection > Advanced

    Parameter

    Bypass signon

    Registry

    sessions.iaccess<NR>.options.ssoenabled

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Font

    Parameter

    Antialiasing

    Registry

    sessions.iaccess<NR>.options.textantialiasing

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Cursor

    Parameter

    Allow blinking cursor

    Registry

    sessions.iaccess<NR>.options.blinkcursor

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Cursor

    Parameter

    Show blinking text with

    Registry

    sessions.iaccess<NR>.options.blinkstate

    Value

     [Blinking Text] [Host Color] [Mapped Color]

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Cursor

    Parameter

    Blink Color

    Registry

    sessions.iaccess<NR>.options.blinkcolor_fg

    Value

    #ffc800

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Cursor

    Parameter

    Blink Color Background

    Registry

    sessions.iaccess<NR>.options.blinkcolor_bg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Rule Line

    Parameter

    Rule Line

    Registry

    sessions.iaccess<NR>.options.ruleline

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Rule Line

    Parameter

    Follow Cursor

    Registry

    sessions.iaccess<NR>.options.rulelinefollows

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Rule Line

    Parameter

    Style

    Registry

    sessions.iaccess<NR>.options.rulelinestyle

    Value

    [Crosshair] [Vertical] [Horizontal]

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Green

    Registry

    sessions.iaccess<NR>.options.color_fgn_fg

    Value

    #00ff00

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Green Background

    Registry

    sessions.iaccess<NR>.options.color_fgn_bg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    White

    Registry

    sessions.iaccess<NR>.options.color_fwt_fg

    Value

    #ffffff

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    White Background

    Registry

    sessions.iaccess<NR>.options.color_fwt_bg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Red

    Registry

    sessions.iaccess<NR>.options.color_frd_fg

    Value

    #ff0000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Red Background

    Registry

    sessions.iaccess<NR>.options.color_frd_bg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Turquoise

    Registry

    sessions.iaccess<NR>.options.color_ftq_fg

    Value

    #00ffff

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Turquoise Background

    Registry

    sessions.iaccess<NR>.options.color_ftq_bg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Yellow

    Registry

    sessions.iaccess<NR>.options.color_fyw_fg

    Value

    #ffff00

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Yellow Background

    Registry

    sessions.iaccess<NR>.options.color_fyw_bg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Pink

    Registry

    sessions.iaccess<NR>.options.color_fpk_fg

    Value

    #ff00ff

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Pink Background

    Registry

    sessions.iaccess<NR>.options.color_fpk_bg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Blue

    Registry

    sessions.iaccess<NR>.options.color_fbl_fg

    Value

    #7890f0

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Blue Background

    Registry

    sessions.iaccess<NR>.options.color_fbl_bg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Status Indicators

    Registry

    sessions.iaccess<NR>.options.color_osi

    Value

    #7890f0

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Information Indicators

    Registry

    sessions.iaccess<NR>.options.color_oii

    Value

    #ffffff

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Attention Indicators

    Registry

    sessions.iaccess<NR>.options.color_oai

    Value

    #ffff00

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Error Indicators

    Registry

    sessions.iaccess<NR>.options.color_oei

    Value

    #ff0000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    OIA Background

    Registry

    sessions.iaccess<NR>.options.color_oob

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Screen Background

    Registry

    sessions.iaccess<NR>.options.color_sbg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Highlight active field

    Registry

    sessions.iaccess<NR>.options.actfieldhilite

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Active Field

    Registry

    sessions.iaccess<NR>.options.color_actf_fg

    Value

    #000000

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Active Field Background

    Registry

    sessions.iaccess<NR>.options.color_actf_bg

    Value

    #ffff00

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Crosshair Ruler Color

    Registry

    sessions.iaccess<NR>.options.color_crc

    Value

    #00ff00

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color

    Parameter

    Column Separator

    Registry

    sessions.iaccess<NR>.options.color_ccs

    Value

    #ffffff

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Preferences

    Parameter

    Start window maximized

    Registry

    sessions.iaccess<NR>.options.ismaximized

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Preferences > Keyboard

    Parameter

    Keyboard Remapping File

    Registry

    sessions.iaccess<NR>.options.keyremapfile

    Value

    IBMi.kmp

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Preferences > Popup Keypad

    Parameter

    Popup Keypad File

    Registry

    sessions.iaccess<NR>.options.poppadfile

    Setup

    Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Preferences > Toolbar

    Parameter

    Toolbar File

    Registry

    sessions.iaccess<NR>.options.toolbarfile

    Setup

    Sessions > IBM iAccess Client > iAccess Global > Tab Setup

    Parameter

    Open new sessions in a new tab

    Registry

    ibm.iaccess.acssm.opensessionintab

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Global > Tab Setup

    Parameter

    Always display the tab bar

    Registry

    ibm.iaccess.acssm.alwaysshowtabbar

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Global > Tab Setup

    Parameter

    Switch to new tab when created

    Registry

    ibm.iaccess.acssm.switchtonewtab

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Global > Tab Setup

    Parameter

    Send a warning when closing multiple tabs

    Registry

    ibm.iaccess.acssm.closemultipletabwarning

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Global > Tab Setup

    Parameter

    Do not start tabbed sessions until the tab is selected

    Registry

    ibm.iaccess.acssm.tabdelayedstart

    Value

    enabled / disabled

    Setup

    Sessions > IBM iAccess Client > iAccess Global > Tab Setup

    Parameter

    New Tab Action

    Registry

    ibm.iaccess.acssm.newtabaction

    Value

    [Disable and Hide] [Run the Same] [Run Other...] 

    Setup

    Sessions > IBM iAccess Client > iAccess Global > Tab Setup

    Parameter

    Tab Placement

    Registry

    ibm.iaccess.acssm.tabplacement

    Value

    [Top] [Bottom] [Left] [Right] 



NX client

  • Updated NoMachine Client to version 6.7.6.

ThinLinc

  • Updated Cendio ThinLinc to version 4.10.

  • Added support for all of ThinLinc's login methods: password, public key, smartcard and Kerberos. Additional parameters can be set when smartcard is chosen.

    More...

    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Method of authentication

    Registry

    sessions.thinlinc%.login.authentication_method

    Value

    password / publickey / scpublickey / kerberos

    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    User

    Registry

    sessions.thinlinc%.options.user

    Value


    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Password

    Registry

    sessions.thinlinc%.option.crypt_password

    Value


    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Use certificate subject as name for login

    Registry

    sessions.thinlinc%.login.smartcard_subject_as_name

    Value

    enabled / disabled

    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Connect the client automatically when a smartcard is found

    Registry

    sessions.thinlinc%.login.smartcard_autoconnect

    Value

    enabled / disabled

    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Disconnect the client automatically when the smartcard is removed

    Registry

    sessions.thinlinc%.login.smartcard_disconnect

    Value

    enabled / disabled

    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Allow transmission of the smartcard's passphrase for logging in

    Registry

    sessions.thinlinc%.login.smartcard_passphrase_sso

    Value

    enabled / disabled

    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Smartcard filter

    Registry

    sessions.thinlinc%.login.smartcard_filter_1

    Value


    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Smartcard filter

    Registry

    sessions.thinlinc%.login.smartcard_filter_2

    Value


    IGEL Setup

    Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login

    Parameter

    Smartcard filter

    Registry

    sessions.thinlinc%.login.smartcard_filter_3

    Value


Teradici PCoIP Client

  • Added Teradici PCoIP Client version 19.05.5. This feature requires an additional license.
    The following parameters are available:

    More...

    IGEL Setup

    System > Firmware Customization > Features

    Parameter

    Teradici PCoIP Client

    Registry

    services.addition_teradici_pcoip_client.enabled

    Value

    enabled / disabled

    IGEL Setup

    Sessions > Teradici PCoIP Client > PCoIP Sessions >
    PCoIP Session > Connection settings

    Parameter

    Use IGEL Setup for configuration

    Registry

    sessions.pcoip<NR>.options.igel-connection

    Value

    disabled / enabled

    IGEL Setup

    Sessions > Teradici PCoIP Client > PCoIP Sessions >
    PCoIP Session > Connection settings

    Parameter

    Server

    Registry

    sessions.pcoip<NR>.options.address

    IGEL Setup

    Sessions > Teradici PCoIP Client > PCoIP Sessions >
    PCoIP Session > Connection settings

    Parameter

    Server certificate verification mode

    Registry

    sessions.pcoip<NR>.options.security-mode

    Range

    [Not required] [Warn but allow] [Full verification]

    IGEL Setup

    Sessions > Teradici PCoIP Client > PCoIP Sessions >
    PCoIP Session > Login

    Parameter

    Authentication type

    Registry

    sessions.pcoip<NR>.options.auth-type

    Range

    [Password authentication] [Smartcard authentication]  

    IGEL Setup

    Sessions > Teradici PCoIP Client > PCoIP Sessions >
    PCoIP Session > Window

    Parameter

    Window mode

    Registry

    sessions.pcoip<NR>.options.window-mode

    Range

    [User defined] [Fullscreen One Monitor] [Fullscreen All Monitors][Window]

    IGEL Setup

    Sessions > Teradici PCoIP Client > PCoIP Sessions >
    PCoIP Session > Window

    Parameter

    User interface translation

    Registry

    sessions.pcoip<NR>.options.language

    Range

    [System setting] [English] [German] [French] [Spanish] [Portuguese (EU)] [Portuguese (Brazil)] [Italian] [Japanese] [Chinese(Simplified)] [Chinese(Traditional)] 

    Parameter

    Log level

    Registry

    sessions.pcoip<NR>.options.log-level

    Range

    [Global setting] [Critical] [Error] [Info] [Debug]

  • Added support for global settings:

    More...

    Parameter

    Log level

    Registry

    pcoip.log-level

    Range

    [Critical] [Error] [Info] [Debug]

    Parameter

    Show codec indicator

    Registry

    pcoip.codec_indicator

    Value

    disabled / enabled

    Info:

    Added small dot in the bottom left corner during the session to indicate which codec is being used. Green indicates simple codec; blue indicates tic2 codec.
    This is only available as global setting.

  • UMS option "Save device files for support" now includes Teradici PCoIP client's data.


Firefox

  • Added new parameters: Allow a custom command before and after browser session.

    More...

    Parameter

    init_action

    Registry

    sessions.browser%.init_action

    Value

    <empty_string>

    Parameter

    final_action

    Registry

    sessions.browser%.final_action

    Value

    <empty_string>

Network

  • New feature regarding lock and logon screen: Network icons are shown on the panel and appear under the same conditions as during normal operation. None of them has a context menu though.
    Clicking on the Wi-Fi icon directly invokes the Wireless Manager when it is enabled.
    If blocking/unblocking Wi-Fi by the user is enabled, there is an additional button on the Wireless Manager for blocking and a preceding dialog for unblocking.

  • SCEP: Added a registry key for specifiying a suffix for CommonName/SubjectAltName when the type is "DNS Name (auto)" or "DNS Name as UPN (auto)".

    More...

    Parameter

    CommonName/SubjectAltName Suffix

    Registry

    network.scepclient.cert%.subjectaltnamesuffix

    Value

    <empty>

    Info:

    Automatic replacements in the value:

    %D -> the system's DNS domain name at the time the CSR is created
    %% -> %
    Other %X are currently discarded.

  • Added a mechanism for retrieving the SCEP challenge password with a custom script. Setting the following registry key to "true" enables the use of the script. The registry key network.scepclient.cert%.crypt_password will be ignored. (The script may use it for its own purpose though.)

    More...

    Parameter

    Use Challenge Password Command

    Registry

    network.scepclient.cert%.use_challenge_password_command

    Value

    enabled / disabled

    If the above key is enabled, the value of this key will be passed to bash for execution. It happens when the SCEP challenge password is needed for creating a certificate signing request. The script is supposed to output the challenge password on its standard output. For convenience, any Carriage-Return characters are stripped off the script before execution by bash.

    More...

    Parameter

    Challenge Password Command

    Registry

    network.scepclient.cert%.challenge_password_command

    Value

    <empty_string>

  • Added NCP Secure Enterprise VPN Client version 5.10_rev40552 (configurable under IGEL Setup > Network > VPN > NCP VPN Client).


Wi-Fi

  • Added: Wi-Fi adapters can be turned off and on by the tray icon context menu when the following registry key is enabled:

    More...

    Parameter

    Enable Wi-Fi switch

    Registry

    network.applet.wireless.enable_wifi_switch

    Value

    enabled / disabled

  • Added support for Realtek 8821CE wireless cards.


Imprivata

  • Imprivata Appliance 6.3 or higher is needed now.
    Please see the Imprivata Supported Components guide (http://documentation.imprivata.com/01RefArch/Content/Topics/OSSupportedComponents.htm#ProveID) for support and upgrade considerations.

  • Added a new parameter to Imprivata.conf: "Redirection of Smartcards".

    More...

    IGEL Setup > Sessions > Appliance Mode > Imprivata  

    Parameter

    Redirection of Smartcards

    Registry

    imprivata.native_smartcard_redirection

    Value

    enabled / disabled

  • Added a new parameter: "Path to Certificate".

    More...

    IGEL Setup > Sessions > Appliance Mode > Imprivata  

    Parameter

    Path to Certificate

    Registry

    imprivata.path_to_certificate

Smartcard

  • Added 90meter smartcard library. This feature requires an additional license.
    Use the following parameters to activate:

    More...

    IGEL Setup

    System > Firmware Customization > Features

    Parameter

    90meter Smart Card Support

    Registry

    services.addition_smartcard_90meter.enabled

    Value

    enabled / disabled

    IGEL Setup

    Sessions > Horizon Client > Horizon Client Global > Smartcard

    Parameter

    Horizon logon with smartcards supported by 90meter library

    Registry

    vmware.view.pkcs11.use_90meter

    Value

    enabled / disabled

    IGEL Setup

    Sessions > Browser > Browser Global > Smartcard Middleware

    Parameter

    90meter Security Device

    Registry

    browserglobal.security_device.90meter

    Value

    enabled / disabled

    IGEL Setup

    Security > Smartcard > Middleware

    Parameter

    90meter

    Registry

    scard.pkcs11.use_90meter

    Value

    enabled / disabled

  • New IGEL Smartcard mode without Locking Desktop (reintroduced feature of Linux 5.x firmware).

    More...

    IGEL Setup > Security > Logon > IGEL Smartcard

    Parameter

    Enable IGEL Smartcard without Locking Desktop

    Registry

    scard.scardd.enable_nolock

    Value

    enabled / disabled

    IGEL Setup > Security > Logon > IGEL Smartcard

    Parameter

    On Smartcard Removal, terminate

    Registry

    scard.scardd.session_termination

    Value

    all / smartcard

  • Updated SecMaker NetID to version 6.7.2.36: now YubiKey 5 is supported.

  • Updated CHERRY USB-LAN Proxy to version 3.2.0.3. This version provides enhanced configuration.

    More...

    IGEL Setup > Security > Smartcard > Services

    Parameter

    Bind IP

    Registry

    devices.cherry.usblanproxy.bind-ip

    Value

    auto

    IGEL Setup > Security > Smartcard > Services

    Parameter

    Https Server Port

    Registry

    devices.cherry.usblanproxy.https-port

    Value

    443

    IGEL Setup > Security > Smartcard > Services

    Parameter

    SICCT Announce IP

    Registry

    devices.cherry.usblanproxy.sicct-announce-ip

    Value

    broadcast

    IGEL Setup > Security > Smartcard > Services

    Parameter

    SICCT Announce Port

    Registry

    devices.cherry.usblanproxy.sicct-announce-port

    Value

    4742

    IGEL Setup > Security > Smartcard > Services

    Parameter

    SICCT Announce Interval

    Registry

    devices.cherry.usblanproxy.sicct-announce-interval

    Value

    30

    IGEL Setup > Security > Smartcard > Services

    Parameter

    USB Fast Mode

    Registry

    devices.cherry.usblanproxy.usb-fast-mode

    Value

    enabled /disabled

    IGEL Setup > Security > Smartcard > Services

    Parameter

    Alternate Initialization Method for G87-1505

    Registry

    devices.cherry.usblanproxy.usb-1505-alt-setup

    Value

    enabled /disabled

  • Added a command line tool pcsc_scan for smartcard debugging.

  • Added configuration parameters for some settings of smartcard library OpenSC.

    More...

    Parameter

    Debug level

    Registry

    scard.pkcs11.opensc.default.debug

    Value

    0

    Parameter

    Debug file

    Registry

    scard.pkcs11.opensc.default.debug_file

    Value

    stderr

    Parameter

    Max. send size

    Registry

    scard.pkcs11.opensc.default.pcsc.max_send_size

    Value

    255

    Parameter

    Max. receive size

    Registry

    scard.pkcs11.opensc.default.pcsc.max_recv_size

    Value

    256

    Parameter

    Connect exclusive

    Registry

    scard.pkcs11.opensc.default.pcsc.connect_exclusive

    Value

    enabled / disabled

    Parameter

    Disconnect action

    Registry

    scard.pkcs11.opensc.default.pcsc.disconnect_action

    Value

    leave / reset / unpower

    Parameter

    Transaction end action

    Registry

    scard.pkcs11.opensc.default.pcsc.transaction_end_action

    Value

    leave / reset / unpower

    Parameter

    Reconnect action

    Registry

    scard.pkcs11.opensc.default.pcsc.reconnect_action

    Value

    leave / reset / unpower

    Parameter

    Enable pinpad

    Registry

    scard.pkcs11.opensc.default.pcsc.enable_pinpad

    Value

    enabled / disabled

    Parameter

    Use PIN caching

    Registry

    scard.pkcs11.opensc.default.pkcs15.use_pin_caching

    Value

    enabled / disabled

    Parameter

    How many times to use a PIN from cache before re-authenticating it

    Registry

    scard.pkcs11.opensc.default.pkcs15.pin_cache_counter

    Value

    10

    Parameter

    PIN caching ignores user consent

    Registry

    scard.pkcs11.opensc.default.pkcs15.pin_cache_ignore_user_consent

    Value

    enabled / disabled

  • Updated cryptovision sc/interface PKCS#11 smartcard library to version 7.1.20.
    Changes in this revision:

    • Fixed a possible deadlock in the PKCS#11 module on Linux, if C_Finalize is called during a PCSC event, for example C_WaitForSlotEvent.

    • ROCA check in the Smartcard Manager, based on the "ROCA detection tool", see https://github.com/crocs-muni/roca.

    • Renaming of the container label in Smartcard Manager with F2 is now possible.


CUPS Printing

  • Added SMB Network Print client function.

    More...

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    Printer Port

    Registry

    print.cups.printer<NR>.backend

    Value

    smb

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    SMB Server

    Registry

    print.cups.printer<NR>.smb_server

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    SMB Workgroup

    Registry

    print.cups.printer<NR>.smb_workgroup

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    SMB Printer

    Registry

    print.cups.printer<NR>.smb_printer

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    SMB Port

    Registry

    print.cups.printer<NR>.smb_port

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    Use Kerberos Authentication

    Registry

    print.cups.printer<NR>.smb_kerberos

    Value

    enabled / disabled

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    Use Passthrough Authentication

    Registry

    print.cups.printer<NR>.smb_passthrough

    Value

    enabled /disabled

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    SMB User

    Registry

    print.cups.printer<NR>.smb_user

    IGEL Setup > Devices > Printer > CUPS > Printers > Dialog

    Parameter

    SMB Password

    Registry

    print.cups.printer<NR>.crypt_password

Base system

  • Added a possibility to configure scheduled commands. Registry keys: system.cron.**

  • Buddy update enhancements:

    • Automatic load balancing:
      A client collects up to eight server candidates from which one is selected randomly. Collection stops when the number specified in the following registry key is reached. Otherwise collection stops after a timeout.

      More...

      Parameter

      Buddy Update Server Candidates

      Registry

      update.ftp.buddy_server_candidates

      Value

      1

    • Grouping:
      Buddy update servers and clients only interact with each other when they are in the same group determined by the following registry key (a non-negative integer number). This feature is mainly useful when different firmware versions shall be used in parallel.

      More...

      Parameter

      Buddy Group ID

      Registry

      update.ftp.buddy_group_id

      Value

      0

  • Added: Firmware update scheduled on shutdown is now invoked on reboot too.

  • Added package ldap-utils which can be used by custom scripts.

  • Updated Kernel to mainline version 4.19.65.

  • Moved the EULA page in IGEL Setup Assistant into the demo activation workflow.

  • Updated EULA displayed in OSC and IGEL Setup Assistant.

  • Added: When IGEL Setup Assistant is used to download a demo license via Wi-Fi, the local Wi-Fi manager will be enabled by default.

  • Updated Fluendo multimedia codecs to the following versions:

    More...

    gst-fluendo-aacdec

    21/03/2019

    0.10.39

    gst-fluendo-asfdemux

    21/03/2019

    0.10.89

    gst-fluendo-h264dec

    21/03/2019

    0.10.53

    gst-fluendo-mp3

    21/03/2019

    0.10.39

    gst-fluendo-mpeg4video

    21/03/2019

    0.10.43

    gst-fluendo-vadec

    21/03/2019

    0.10.208

    gst-fluendo-wmadec

    21/03/2019

    0.10.68

    gst-fluendo-wmvdec

    20/03/2019

    0.10.65

  • Replaced timesyncd with chrony NTP. Added a new registry key:

    More...

    Parameter

    Use NTP Servers from DNS SRV record

    Registry

    system.time.ntp_use_dnssrv_timeservers

    Value

    enabled / disabled

  • Updated CA Certificates to version 20190122 (Mozilla authority bundle version 2.30).
    The following authorities were added:

    More...

    • "Certigna Root CA"

    • "GTS Root R1"

    • "GTS Root R2"

    • "GTS Root R3"

    • "GTS Root R4"

    • "UCA Extended Validation Root"

    • "UCA Global G2 Root"

    • "GlobalSign Root CA - R6"

    • "OISTE WISeKey Global Root GC CA"

    • "GDCA TrustAUTH R5 ROOT"

    • "SSL.com EV Root Certification Authority ECC" 

    • "SSL.com EV Root Certification Authority RSA R2"

    • "SSL.com Root Certification Authority ECC" 

    • "SSL.com Root Certification Authority RSA"

    • "TrustCor ECA-1"

    • "TrustCor RootCert CA-1"

    • "TrustCor RootCert CA-2"


    The following authorities were removed:

    More...

    • "Certplus Root CA G1" 

    • "Certplus Root CA G2" 

    • "OpenTrust Root CA G1" 

    • "OpenTrust Root CA G2" 

    • "OpenTrust Root CA G3" 

    • "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5" 

    • "Visa eCommerce Root" 

    • "ACEDICOM Root" 

    • "AddTrust Low-Value Services Root" 

    • "AddTrust Public Services Root" 

    • "AddTrust Qualified Certificates Root" 

    • "CA Disig Root R1" 

    • "CNNIC ROOT" 

    • "Camerfirma Chambers of Commerce Root" 

    • "Camerfirma Global Chambersign Root" 

    • "Certinomis - Autorité Racine" 

    • "Certum Root CA" 

    • "China Internet Network Information Center EV Certificates Root" 

    • "Comodo Secure Services root" 

    • "Comodo Trusted Services root" 

    • "DST ACES CA X6" 

    • "GeoTrust Global CA 2" 

    • "PSCProcert" 

    • "Security Communication EV RootCA1" 

    • "Swisscom Root CA 1" 

    • "Swisscom Root CA 2" 

    • "Swisscom Root EV CA 2" 

    • "TURKTRUST Certificate Services Provider Root 2007" 

    • "TUBITAK UEKAE Kok Sertifika Hizmet Saglayicisi - Surum 3" 

    • "UTN USERFirst Hardware Root CA"


Driver

  • Added registry keys to modify the Intel graphic driver usage of framebuffer compression and power management.
    New registry keys:

    More...

    Parameter

    Power saving display C-States to use

    Registry

    x.drivers.intel.dc_setting

    Range

    [Default] [Disable] [Up to DC5] [Up to DC6]

    Info: "Default" - driver default

    Parameter

    Use framebuffer compression

    Registry

    x.drivers.intel.fbc_setting

    Range

    [Default] [Disable]

    Info: "Default" - driver default

  • Updated Philips Speech Driver to version 12.7.11.

  • Updated signotec Citrix Virtual Channel driver to version 8.0.8.

  • Updated StepOver TCP Client to version 2.3.2.

  • Updated deviceTRUST Client to version 19.1.200. These are the release notes:
    Welcome to the release of the deviceTRUST 19.1.200 IGEL client, providing the context of IGEL thin client and UD Pocket devices into your virtual sessions. This release includes support for logical disks attached to the IGEL endpoint, plus bug fixes and stability improvements over the previous 19.1.100 release.

    Logical Disks

    We’ve added support for real-time properties representing the LOGICAL DISKS attached to the IGEL endpoint. This includes:

    More...

    DEVICE_LOGICALDISK_X_TYPE – Either Fixed or Removable.
    DEVICE_LOGICALDISK_X_LABEL – The volume label.
    DEVICE_LOGICALDISK_X_FILESYSTEM – The type of file system.
    DEVICE_LOGICALDISK_X_PATHS – The paths that the disk is mounted.
    DEVICE_LOGICALDISK_X_TOTALMB – The total space available on the disk. This property is only available for mounted disks.
    DEVICE_LOGICALDISK_X_FREEMB – The free space available on the disk. This property is only available for mounted disks.
    DEVICE_LOGICALDISK_X_NAME – The name of the underlying physical disk.
    DEVICE_LOGICALDISK_X_VENDORID – The vendor identifier uniquely identifying the manufacturer. This property is only available for USB or PCI connected devices.
    DEVICE_LOGICALDISK_X_PRODUCTID – The product identifier uniquely identifying the product. This property is only available for USB or PCI connected devices.
    DEVICE_LOGICALDISK_X_SERIALNUMBER – The serial number of the physical disk.
    DEVICE_LOGICALDISK_X_BUSTYPE – The storage bus type linked to the physical disk.
    DEVICE_LOGICALDISK_COUNT – The number of logical disks.

X11 system

  • Added a new parameter to allow configuration of 'Display Switch' confirmation dialog timeout.

    More...

    IGEL Setup

    Accessories > Display Switch > Options

    Parameter

    Timeout for confirmation dialog

    Registry

    sessions.user_display0.options.confirm_timeout

    Value

    10

  • Re-Enable 'Display Switch' session start script to cycle simple modes.

  • Added new options for lid handling.


    More...

    Parameter

    Lid close action while plugged in

    Registry

    system.actions.lid.ac

    Range

    [Turn off display] [Suspend]

    Parameter

    Lid close action while not plugged in

    Registry

    system.actions.lid.battery

    Range

    [Turn off display] [Suspend]

  • Added new registry keys to change the xorg input driver for an input device class.
    New registry keys:

    For keyboards:

    More...

    Parameter

    Xorg driver to use

    Registry

    userinterface.keyboard.driver

    Range

    [Evdev] [Libinput]

    For touchpads:

    More...

    Parameter

    Xorg driver to use

    Registry

    userinterface.touchpad.driver

    Range

    [Evdev] [Synaptics] [Libinput]

    For touchscreens:

    More...

    Parameter

    Xorg driver to use

    Registry

    userinterface.touchscreen.xorg_driver

    Range

    [Evdev] [Libinput]

    For mouse:

    More...

    Parameter

    Xorg driver to use

    Registry

    userinterface.mouse.driver

    Range

    [Evdev] [Libinput]

  • Added some registry keys to disable loading of DRM kernel modules (graphic).

    More...

    Parameter

    Disable the loading of the RADEON DRM driver

    Registry

    x.drivers.ati.disable

    Value

    0

    Parameter

    Disable the loading of the AMDGPU DRM driver

    Registry

    x.drivers.amdgpu.disable

    Value

    0

    Parameter

    Disable the loading of the i915 DRM driver

    Registry

    x.drivers.intel.disable

    Value

    0

    Parameter

    Disable the loading of the NVIDIA kernel driver

    Registry

    x.drivers.nvidia.disable

    Value

    0

    Parameter

    Disable the loading of the NOUVEAU DRM driver

    Registry

    x.drivers.nouveau.disable

    Value

    0

    Parameter

    Disable the loading of the QXL DRM driver

    Registry

    x.drivers.qxl.disable

    Value

    0

    Parameter

    Disable the loading of the VMGFX DRM driver

    Registry

    x.drivers.vmware.disable

    Value

    0

    Parameter

    Disable the loading of the VBOXVIDEO DRM driver

    Registry

    x.drivers.vboxvideo.disable

    Value

    0

  • Updated DisplayLink driver to version 5.1.26 to solve some startup issues.

Evidian

  • Updated Evidian rsUserAuth to version 1.5.7116.

Hardware

  • Added hardware support for Rein Medical Silenio 122CT and 124CT.

  • Added hardware support for Advantech POC-W213L and POC-W243L.

  • Added hardware support for ADS-TEC VMT 9000 Serie.

  • Added hardware support for Fujitsu Esprimo Q957.

  • Added hardware support for ADS-TEC VMT 9000 Serie.

  • Added hardware support for LG AiO Cloud Device 38"

  • Added hardware support for the following headsets:

    More...

    • Jabra Engage 50

    • Jabra Engage 65

    • Jabra Engage 75

    • Jabra Evolve 30 II (Ver. B)

    • Jabra Evolve 30 II (Ver. C)

    • Jabra Evolve 40 (Ver. B) - USB-C

    • Jabra Evolve 40 (Ver. D)

    • Jabra Evolve 65

    • Jabra Evolve 75

    • Plantronics Voyager 5200 UC

    • Plantronics Voyager 6200 UC

    • Plantronics Voyager 8200 UC

    • Plantronics ENCOREPRO 720 + DA70

    • Plantronics ENCOREPRO 720 + DA80

    • Plantronics ENCOREPRO 520D + DA90

    • Sennheiser SC70

  • Added hardware support for HP t430.

  • Added hardware support for HP t420.


Java

  • Replaced Oracle JRE by AZUL's Zulu JRE.

  • Updated Zulu JRE to version 8.40.0.25.


Remote Management

  • Connection order between UMS and ICG can now be configured.

    More...

    Registry

    system.remotemanager.icg_try_ums_connect

    Value

    enabled / disabled

    When an ICG connection is configured and the parameter is enabled, the device tries to connect directly to UMS. If the connection was established successfully, the device is managed by UMS and not over ICG until new start of the device or network.


IGEL Cloud Gateway

  • Added VNC Shadowing support over ICG. To use this feature, UMS 6.02.110 or later and ICG 2.01.100 or later are required.