New Features 11.09.260

AVD

• Updated AVD client to version 1.1.40.

• Improved login speed.

• Added support for Okta and Ping Identity IDPs.

• Fixed resizing if external monitor is disconnected while laptop lid is closed and opened again.

VMware Horizon

• Updated VMware Horizon client to version 2312-8.12.0-23149323

  More...

  
  

  Parameter	Lock user name
  Registry	vmware.view.lock-user-name
  Range	[on][off]
  Value	off

  
  

  Parameter	Lock user name
  Registry	sessions.vdm_client%.options.lock-user-name
  Range	[Global setting][on][off]
  Value	Global setting

  
  

  
  

ThinLinc

• Updated ThinLinc to version 4.16.0 to fix CVE-2023-3446, CVE-2023-3817, CVE-2023-4807, CVE-2023-5678.

deviceTRUST

• Updated deviceTRUST Client Extension to version 23.1.200.

• Added support for IGEL Remote Desktop (RDP3) sessions.

  More...

  
  

  Parameter	deviceTRUST
  Registry	sessions.msigelrdp.plugins.devicetrust
  Value	disabled (default)/ enabled

  
  

  
  

Network

• Added WWAN support on HP mt440 device with BIOS v1.08.00 and Intel XMM7560 module Firmware v1.16.48.

Smartcard

• Updated Pointsharp Net iD Client to version 1.1.3.37. All details via https://docs.pointsharp.com/net-id-client/latest/nic-release-notes/nic-113-release-notes.html

Base system

• Added ready-made challenge password retrieval for Microsoft NDES

• Set the following to NDES for enabling the feature:

  More...

  
  

  Parameter	Ready-made Challenge Password Command
  Registry	network.scepclient.cert%.use_ready_made_challenge_password_command
  Range	[none][NDES]
  Value	none

  
  

  Parameter	User name
  Registry	network.scepclient.cert%.ndes.challenge_password_retrieval.user
  Type	string
  Value	empty Default

  
  

  Parameter	Password
  Registry	network.scepclient.cert%.ndes.challenge_password_retrieval.crypt_password
  Type	string
  Value	empty Default

  
  

  
  

• If the following is not 'none', https will be used. The default "getca" means the CA certificate received in the SCEP GetCA operation. The full path to a different CA certificate may also be specified

  More...

  
  

  Parameter	CA certificate
  Registry	network.scepclient.cert%.ndes.challenge_password_retrieval.cacert
  Range	[none (not using https)][from getca operation]
  Value	from getca operation

  
  

  Parameter	Debug level
  Registry	network.scepclient.cert%.ndes.challenge_password_retrieval.debuglevel
  Type	integer
  Value	0 Default

  
  

  
  

• Added registry key to prevent terrapin attack (mitigation is not active as default) on the SSH server:

  More...

  
  

  Parameter	Disable weak MACs and Chipers to prevent terrapin attack.
  Registry	network.ssh_server.enable_terrapin_mitigation
  Type	bool
  Value	enabled / disabled (default)

  
  

  
  

• Added registry key to prevent terrapin attack (mitigation is not active as default) on the SSH client:

  More...

  
  

  Parameter	Disable weak MACs and Chipers to prevent terrapin attack.
  Registry	network.ssh_client.enable_terrapin_mitigation
  Type	bool
  Value	enabled / disabled (default)

  
  

  
  

• Added power saving settings for Intel and AMD devices.

• Changed some powersave settings defaults to Auto so powersave is enabled as default on Lenovo laptops:

  More...

  
  

  Parameter	Use powertop auto tune to reduce power usage
  Registry	system.powersave.powertop_auto_tune
  Range	[Auto][Enable][Disable]
  Value	Auto

  
  

  Parameter	Use laptop mode to reduce power usage
  Registry	system.powersave.laptop_mode
  Range	[Auto][Enable][Disable]
  Value	Auto

  
  

  Parameter	Clock down AMDGPU if system is idle (idle action time reached).
  Registry	system.powersave.clock_down_amdgpu_on_idle
  Range	[Auto][Enable][Disable]
  Value	Auto

  
  

  Parameter	Set Ryzen CPU to power save mode if system is idle (idle action time reached).
  Registry	system.powersave.use_ryzenadj_on_idle
  Range	[Auto][Enable][Disable]
  Value	Auto

  
  

  
  

• Set idle action default time to 50 seconds:

  More...

  
  

  Parameter	Call idle actions on AC after this time of inactivity (greater 10 seconds, value 9 or lower is never)
  Registry	system.powersave.idle_action_on_ac
  Type	integer
  Value	50 Default

  
  

  Parameter	Call idle actions on battery after this time of inactivity (greater 10 seconds, value 9 or lower is never)
  Registry	system.powersave.idle_action_on_battery
  Type	integer
  Value	50 Default

  
  

  
  

• Added registry keys for Intel system specific power saving settings:

  More...

  
  

  Parameter	Clock down Intel GPU if system is idle (idle action time reached).
  Registry	system.powersave.clock_down_i915_on_idle
  Range	[Auto][Enable][Disable]
  Value	Auto

  
  

  Parameter	Set Intel CPU to power save mode if system is idle (idle action time reached).
  Registry	system.powersave.use_energy_policy_on_idle
  Range	[Auto][Enable][Disable]
  Value	Auto

  
  

  
  

• Changed default of power saving settings for screen getting dimmed to 20% after 120 seconds inactivity.

  More...

  
  

  Setup page	System > Power Options > Display > Brightness Reduction
  Parameter	Reduce after
  Registry	x.xserver%.brightness_on_ac
  Type	integer
  Value	120 Default

  
  

  Parameter	Reduce after
  Registry	x.xserver%.brightness_on_battery
  Type	integer
  Value	120 Default

  
  

  Parameter	On inactivity reduce to
  Registry	x.xserver%.brightness_level_ac
  Type	integer
  Value	20 Default

  
  

  
  

Driver

• Updated Thales SafeNet Authentication Client to version 10.8.1050.

zoomvdi

• Updated Zoom VDI plugin to version 5.17.5 (24500).

Hardware

• Added support for Lenovo USB-C to Ethernet Adapter

• Added hardware support for HP Elite t755.

• Added BIOS configuration support for HP Elite t755. IGEL supports the BIOS update mechanism. The BIOS update itself is validated by the device manufacturer and performed at your own risk.