New Features 11.05.100 | IGEL Knowledge Base

Citrix

The new "screen pinning" feature for Citrix desktop sessions has been integrated. With this feature, it is possible to start multiple Citrix desktop sessions on different screens.
The following parameters have been added for this purpose:This parameter defines the session name on which the settings are to be used. Also the known wildcards like * and ? are possible here.More...IGEL SetupSessions > Citrix > Citrix Global > Window ParameterCitrix session nameRegistryica.destination_window.session%.nameValue""The parameter defines which mode should be used.More...IGEL SetupSessions > Citrix > Citrix Global > Window ParameterMultimonitor full-screen modeRegistryica.destination_window.session%.multimonitor_modeRange[Restrict full-screen session to one monitor] [Expand full-screen session across all monitors][Expand the session over a self-selected number of monitors]For "Restrict full-screen session to one monitor" also ica.destination_window.session%.monitor needs to be set.For "Expand the session over a self-selected number of monitors" also ica.destination_window.session%.multimonitor_selection needs to be set.Further information is also offered via tooltip.More...IGEL SetupSessions > Citrix > Citrix Global > Window ParameterDesktop session start monitorRegistryica.destination_window.session%.monitorRange[1st Monitor][2nd Monitor][3rd Monitor][4rd ...]IGEL SetupSessions > Citrix > Citrix Global > Window ParameterMonitor selectionRegistryica.destination_window.session%.multimonitor_selectionValue""
Integrated HDX RTME 2.9.200 for the usage of SfB (Skype for Business).
Available Citrix Workspace apps in this release: 20.12 (default), 20.10 and 19.12.

Added new feature, where multiple audio devices could be mapped inside the sessions. This will display audio devices with their device name and not only HDX audio.

More...

Parameter	Multiple Audio Device support
Registry	`ica.module.vdcamversion4support`
Value	true/false

Note: Bluetooth devices are currently not supported for Device Redirection.

New centralized Citrix logging in IGEL OS, only one parameter is needed to activate logging.

More...

Parameter	Enable logging for Citrix sessions
Registry	`ica.logging.debug`
Value	on/off

Since Workspace app 20.09, the tool setlog is used to configure the logging. For this purpose, parameters are provided in the registry ica.logging.setlog, but usually nothing needs to be changed.

Fixed issue: mic and webcam devices can be redirected using Browser Content Redirection.

More...

Parameter	Enables mic and webcam redirection using BCR
Registry	`ica.allregions.cefenablemediadevices`
Value	[Factory default is "**"] [False][True]

Added new parameter Readers Status Poll Period to specify the delay, in milliseconds, for reading information from a smartcard after the card is inserted or removed, or a reader is disconnected, etc.

More...

Parameter	Readers Status Poll Period
Registry	`ica.wfclient.ReadersStatusPollPeriod`
Type	Integer
Value	250/Range 100..5000

Integrated Zoom Media Plugin 5.4.59458.0109
The default value of the parameter ica.module.vdcamversion4support was set to "true".

WVD

Added option to always prompt for password upon session host connection.

More...

Parameter	Always prompt for password upon session host connection
Registry	`sessions.wvd%.options.always-prompt-for-session-password`
Type	bool
Value	enabled / disabled
Note:	The same can be achieved on the server side by setting the RDP group policy of "Always prompt for password upon connection".

Added options to configure Fabulatech for WVD. This includes Webcam redirection, Scanner redirection, and USB redirection.
The USB redirection configuration is still to be done via Sessions > RDP > RDP Global > Fabulatech USB Redirection. Later releases should mirror that under WVD as well.
There are global WVD settings to select which redirections (Webcam, Scanner, USB) should be enabled for WVD.
There is a switch per WVD session that allows to enable/disable Fabulatech for that sessions respectively.

Note: Technically, the Fabulatech redirections are selected system-wide. That means, when Scanner redirection is enabled for Citrix and Webcam redirection is
enabled for WVD, both these redirections are visible in Citrix and in WVD sessions. Only disabling Fabulatech support in general for a WVD session is possible.

More...

IGEL Setup	Sessions > WVD > WVD Global > Plugins > Fabulatech
Parameter	Fabulatech Webcam Redirection
Registry	`wvd.plugins.fabulatech.webcam`
Value	enabled / disabled

IGEL Setup	Sessions > WVD > WVD Global > Plugins > Fabulatech
Parameter	Fabulatech Scanner Redirection
Registry	`wvd.plugins.fabulatech.scanner`
Value	enabled / disabled

IGEL Setup	Sessions > WVD > WVD Global > Plugins > Fabulatech
Parameter	Fabulatech USB Redirection
Registry	`wvd.plugins.fabulatech.usb`
Value	enabled / disabled

IGEL Setup	Sessions > WVD > WVD Sessions > WVD Session > Plugins > Fabulatech
Parameter	Fabulatech Webcam/Scanner/USB Redirection
Registry	`sessions.wvd%.plugins.fabulatech`
Value	enabled / disabled

Integrated Zoom Media Plugin 5.4.59458.0109 with support for WVD.

More...

IGEL Setup	Sessions > WVD > WVD Sessions > WVD Session > Plugins > Fabulatech
Parameter	Zoom VDI Media Plugin
Registry	`sessions.wvd%.plugins.zoomvdi`
Value	enabled / disabled

Added option to always prompt for username and password upon session host connection.

More...

Parameter	Always prompt for username and password upon session host connection
Registry	`sessions.wvd%.options.always-prompt-for-session-username-and-password`
Type	bool
Value	enabled / disabled

Added option to preset the workspace view zoom

More...

Parameter	Initial workspace zoom
Registry	`sessions.wvd%.options.workspacezoom`
Type	string
Value	100

Added option to select specific monitors in a multimonitor session.
Only monitors matching this mask are used.Monitors start with zero (0).If empty all monitors are enabled, which is the default.Can be one or a comma-separated list of the following specifiers without the quotes:"1-2": An inclusive range of monitor indexes."-2": An inclusive range beginning from 0 to the given monitor index."2-": An inclusive range beginning with the specified monitor up to index 63, which is the maximum monitor index supported."2,3,5": A comma-separated list of monitor indexes.More...ParameterMultimonitor enable maskRegistrysessions.wvd%.options.multimonitormaskTypestringValue(empty by default)

If the username is preset with a string that starts with "@", the rest of the string is taken as a preset domain name. The user then only needs to enter her/his username and the domain name is automatically appended for AAD login.

Additionally, the following parameter has been added to allow/disallow the preset domain being overwritten when the username enters a name that contains an @ symbol itself. If this option is enabled, the entered domain is accepted. Otherwise, the entered domain is replaced by the preset domain.

More...

Parameter	Allow preset domain overwrite
Registry	`sessions.wvd%.options.allow-preset-domain-overwrite`
Type	bool
Value	enabled / disabled

Added company logo customization, but the download of custom images to the local filesystem needs to be defined. So at the moment, the settings are not really useful, except for disabling the IGEL logo maybe.

More...

Parameter	Disable company logo
Registry	`sessions.wvd%.options.no-logo`
Type	bool
Value	enabled / disabled

Parameter	Logo image filename
Registry	`sessions.wvd%.options.logo-image`
Type	string
Value	(empty by default)

Added background customization, but download of custom images to the local filesystem needs to be defined. So at the moment, the settings are not really useful, except for disabling the background image or defining a solid color for the background.

More...

Parameter	Disable background image
Registry	`sessions.wvd%.options.no-background`
Type	bool
Value	enabled / disabled

Parameter	Background image filename or color (#rrggbb)
Registry	`sessions.wvd%.options.background-image`
Type	string
Value	(empty by default) / filename / #rrggbb

VMware Horizon

Updated Horizon Client to version 2012-8.1.0-17349998
Integrated Zoom Media Plugin 5.4.59458.0109
Fixed failure to start Horizon serial port redirection service at boot time

Chromium

Updated Chromium browser to version 88.0.4324.150.
H.264 decoding is not supported anymore.
Custom preferences setup is not supported anymore.
Reworked custom commandline setup: Enter all commandline parameters in a single entry field.

Wi-Fi

Added support for WPS push button connect method

Imprivata

Added: The FUS Username is an editable combobox with prefilled values now. Set of an own string is also possible. Hostname of the endpointMAC address of the endpointSerial number of the endpointMore...IGEL SetupSessions > Appliance mode > Imprivata ParameterFUS UserRegistryimprivata.fus.user

Smartcard

Updated A.E.T. Europe SafeSign Identity Client to version 3.6.0.0.

Added Smartcard PIN passthrough in Firefox and Chromium. The PIN will be cached while logging on via Active Directory/Kerberos with smartcard. In Firefox and Chromium, no further PIN input is necessary to use the smartcard.

More...

Parameter	Smartcard PIN caching
Registry	`scard.pkcs11.pin_cache.enable`
Value	enabled / disabled

Updated SecMaker Net iD to version 6.8.3. New features are:
- Support for Thales IDPrime 940 SIS & IDPrime 3940 SIS
- Support for FIPS level 3 versions of Thales IDPrime MD smart cards (based on MD830B and MD840)
- Support for FINEID 3.0
- Updated support for Yubico YubiKey serial numbers (version 5 and later)
- Updated support for Feitian ePass FIDO serial numbers (version 99 and later)
  For detailed release information, see https://docs.secmaker.com/net-id-enterprise/6.8/nie-release-notes/nie-683-release-notes.html.

ThinPrint

Added ezeep by ThinPrint support for WVD

More...

IGEL Setup	Sessions > WVD > WVD Sessions > WVD Session > Printing > ezeep by ThinPrint
Parameter	Printing with ezeep
Registry	`sessions.wvd%.printing.thinprint-ezeep`
Value	enabled / disabled
Note	Ezeep is directly related to the ThinPrint configuration under Devices > Printer > ThinPrint > ... When ThinPrint configuration is changed, you need to close running WVD sessions and reconnect to make ThinPrint/Ezeep work again for the related session.

Application Launcher

Added optional custom message in 'About' page of application launcher. The message is displayed below the License Information section. The text can be plain text or HTML, supported HTML subset are mentioned in Qt RichText.

More...

Parameter	Custom message
Registry	`userinterface.launcher.custom_message`
Value	empty

Cisco Webex

Integrated Cisco Webex Meetings 41.2.0.142
Integrated Cisco Webex Teams 41.1.0.17621

Cisco JVDI Client

Integrated Cisco JVDI 12.9.3 client

Base system

Added post-session command support for WVD sessions.
Updated OpenVPN to version 2.5.0.
Updated OpenSSH to version 8.4p1-2.
Added warning at boot time if Workspace Edition maintenance has expired.
Updated Fluendo multimedia codecs.
Updated Linux kernel to version 5.9.16.

Added inhibit screensaver when Zoom, Teams or Skype for Business meeting is active. Possible for native clients and Citrix optimization plugins.

More...

Parameter	Enable debug logging for igel-screensaver-monitor
Registry	`debug.tools.igel-screensaver-monitor.enable`
Value	enabled / disabled

Added functionality to change the desktop icon font color via new Setup parameter.

More...

IGEL Setup	User Interface > Desktop
Parameter	Desktop Icon Font Color
Registry	`windowmanager.defaulttheme.desktop.iconfont_color`

CID Key Agent

Update of CID Key Agent to version 6.5.0-2

Driver

Updated Olympus dictation driver for Citrix and RDP to version 20201118.
The changes are:Support motion events for Olympus RecMic devicesSupport integration with the Olympus AudioSDK for limited server-side device communication
Updated Crossmatch driver to version 0125.
The changes are:Improved USB encryption for the 4500 readersSupport for the 5300-101 reader (the 5300-100 was already supported)
Updated deviceTRUST client plugin for Citrix and RDP to version 20.1.200.0. Detailed release notes can be found at https://docs.devicetrust.com/docs/releases-igel-20.1.200/.

X11 system

Enhanced x.xserver%.mirror_mode registry key with new Scaling down mode (Scales all monitors to the monitor with the lowest resolution)

More...

Parameter	Choose the mode which should be used for mirroring monitors if resolution differs
Registry	`x.xserver%.mirror_mode`
Range	[Default] [Biggest common resolution] [Scaling] [Scaling down]

Audio

Added EPOS Connect 5.0.1.2795

More...

IGEL Setup	Devices > Unified Communications > EPOS Audio > EPOS Connect
Parameter	Enable EPOS Connect
Registry	`devices.epos.connect.enable`
Type	bool
Value	enabled / disabled

IGEL Setup	Devices > Unified Communications > EPOS Audio > EPOS Connect
Parameter	Tenant ID
Registry	`devices.epos.connect.tenant_id`
Type	string
Value	''

IGEL Setup	Devices > Unified Communications > EPOS Audio > EPOS Connect
Parameter	Backend Endpoint
Registry	`devices.epos.connect.tenant_url`
Type	string
Value	''

IGEL Setup	Devices > Unified Communications > EPOS Audio > EPOS Connect
Parameter	Proxy
Registry	`devices.epos.connect.proxy`
Type	string
Value	''

Registry	`devices.epos.connect.log_level`
Value	Trace / Debug / Information / Warnings / Errors / Exceptions / No logs

Pulseaudio upgraded to the 13.99 version.

Added parameter to differentiate sound volume for applications. If the parameter is set to true, each application can set its own volume level. Otherwise, the sound volume is set to the same value as the default volume for output and input device respectively.

More...

Registry	`userinterface.sound.app_volume_ctrl`
Value	true / false

Misc

Added DriveLock Agent 20.1.4.30482 for USB device access control.

More...

IGEL Setup	Devices > Storage Devices > DriveLock
Parameter	Enable DriveLock agent
Registry	`devices.drivelock.enable`
Value	enabled / disabled

IGEL Setup	Devices > Storage Devices > DriveLock
Parameter	DES server URL
Registry	`devices.drivelock.server`
Value	(empty)

IGEL Setup	Devices > Storage Devices > DriveLock
Parameter	Tenant
Registry	`devices.drivelock.tenant`
Value	root

Evidian

Added new session type RD Web Access.
Updated Evidian to version 1.5.7617.

Hardware

Added hardware support for new IGEL UD7-LX 20 (H860C).
Added hardware support for LG 34CN650N AiO.
Added hardware support for Dell Wyse Z Class thin client.
Added hardware support for Lenovo ThinkCentre M70q.
Added hardware support for Dell Wyse 5470.
Added hardware support for Lenovo L14.
Added hardware support for Lenovo ThinkCentre M75n.
Added hardware support for Lenovo 14w.
Added hardware support for LG CN65 All in one.
Added hardware support for DELL LATITUDE 5510.
Added hardware support for ELO i2 Touch all-in-one (15 and 22) inch.
Added detection of UD Pocket UC5-LX 2.
Added support for headset Jabra Evolve2 65.

Remote Management

Added support for Reportable Heartbeats to the UMS.
Added support for exchanging ICG certificates.

The remote management of the endpoint device automatically installs TLS certificates provided by the UMS into the local trusted CA certificates storage. The automatic deployment of TLS certificates to endpoint devices requires UMS 6.06.100 or higher. This feature allows verifying certificates used in downloading files from the UMS, downloading of a firmware update and custom partition archives over HTTPS or FTPS protocols. The verifying of certificates must be enabled by the parameter system.security.remote_management.tls_verify_peer.

More...

Registry	`system.security.remote_management.tls_verify_peer`
Value	true / false

Registry	`system.security.remote_management.tls_hostname_validation`
Value	true / false

Added support for UMS commands to store and remove ICG configuration.

Introduced parameters for ICG Websocket connections: debug log, network timeout (in seconds) and ping-pong interval (in seconds). The parameters are applied on the next established ICG agent connection and ICG tunnel connections: VNC and Secure Terminal.

More...

Registry	`system.icg.websocket.debug`
Value	off / all / tunnel / agent

Registry	`system.icg.websocket.network_timeout`
Value	30

Registry	`system.icg.websocket.pingpong_interval`
Value	120

IGEL Remote Management agent sends now keep-alive packets to the ICG server to prevent the Websocket connection to the ICG server from being closed by networking infrastructure. The Websocket's ping-pong mechanism is used for that purpose (see RFC6455). The keep-alive interval in seconds can be configured by the parameter system.icg.websocket.pingpong_interval, 0 disables the keep-alive mechanism.

More...

Registry	`system.icg.websocket.pingpong_interval`
Value	120

Fabulatech

Updated FabulaTech USB for Remote Desktop to version 6.0.28
Updated FabulaTech Scanner for Remote Desktop to version 2.7.0.1
Fixed FabulaTech scanner redirection not working for Citrix if it's exclusively enabled in IGEL Setup.