New Features 11.01.110

Citrix

• Integrated Citrix Workspace app 19.03.
  Added new registry key to support 1536-bit RSA keys for client authentication. 

  More...

  Parameter	Enable RSA 1536 cipher suit
  Registry	ica.allregions.enabl_rsa_1536
  Range	factory default / false / true

• Added new registry key to enable different cipher suites for client authentication.

  More...

  Parameter	Enables different cipher suites
  Registry	ica.allregions.sslciphers
  Range	factory default / ALL / GOV / COM

• TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 – GOV/ALL
  TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 – GOV/ALL
  TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA – COM/ALL
• Added new registry key to support keyboard layout syncroniyation.

• Updated Citrix HDX RTME, used for optimization of Skype for Business, to version  2.8.0-2235

RDP/IGEL RDP Client 2

• Added Field Collection to RDP session server page

VMware Horizon

• Added parameters to specify webcam frame size and rate for RTAV.

  More...

  Parameter	Webcam frame width
  Registry	vmware.view.rtav-frame-width
  Value	<empty_string>

  Parameter	Webcam frame height
  Registry	vmware.view.rtav-frame-height
  Value	<empty_string>

  Parameter	Webcam frame rate
  Registry	vmware.view.rtav-frame-rate
  Value	<empty_string>

• Updated Horizon Client to version 5.0.0-12557422
• Added possibility to easily evaluate Horizon Blast decoder states. By default sessions are evaluated after usage and the result is written into the journal log.
  This can also be used with GUI notifications at runtime.

Teradici PCoIP Client

• Added Teradici PCoIP Client version 19.05.1. This feature requires an additional license. 

  More...

  IGEL Setup	System > Firmware Customization > Features
  Parameter	Teradici PCoIP Client
  Registry	services.addition_teradici_pcoip_client.enabled
  Value	enabled / disabled

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings
  Parameter	Use IGEL Setup for configuration
  Registry	sessions.pcoip<NR>.options.igel-connection
  Value	enabled / disabled

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings
  Parameter	Server
  Registry	sessions.pcoip<NR>.options.address
  Value	<empty_string>

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings
  Parameter	Server certificate verification mode
  Registry	sessions.pcoip<NR>.options.security-mode
  Range	[Not required][Warn but allow][Full verification]

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Login
  Parameter	Authentication type
  Registry	sessions.pcoip<NR>.options.auth-type
  Range	[Password authentication][Smartcard authentication]

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window
  Parameter	Window mode
  Registry	sessions.pcoip<NR>.options.window-mode
  Range	[User defined][Fullscreen One Monitor][Fullscreen All Monitors][Window]

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window
  Parameter	User interface translation
  Registry	sessions.pcoip<NR>.options.language
  Range	[System setting][English] [German] [French][Spanish] [Portuguese (EU)] [Portuguese (Brazil)] [Italian][Japanese] [Chinese(Simplified)] [Chinese(Traditional)]

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window
  Parameter	Log level
  Registry	sessions.pcoip<NR>.options.log-level
  Range	[Critical][Error][ Info][Debug]

Network

• Added a mechanism for retrieving the SCEP challenge password with a custom script. 
  Setting the following registry key to true enables the use of the script. The registry key network.scepclient.cert%.crypt_password will be ignored. (The script may use it for its own purpose though.)

  More...

  Parameter	Use Challenge Password Command
  Registry	network.scepclient.cert%.use_challenge_password_command
  Value	enabled / disabled

• If the above key is true, the value of this key will be passed to bash for execution. It happens when the SCEP challenge password is needed for creating a certificate signing request. The script is supposed to output the challenge password on its standard output. For convenience any carriage return characters are stripped off the script before execution by bash.

  More...

  Parameter	Challenge Password Command
  Registry	network.scepclient.cert%.challenge_password_command
  Value	<empty_string>

Wi-Fi

• Added support for Realtek 8821CE wireless cards.

Smartcard

• Added 90meter smart card library. This feature requires an additional license. 

  More...

  IGEL Setup	System > Firmware Customization > Features
  Parameter	90meter Smart Card Support
  Registry	services.addition_smartcard_90meter.enabled
  Value	enabled / disabled

  IGEL Setup	Sessions > Horizon Client > Horizon Client Global > Smartcard
  Parameter	Horizon logon with smartcards supported by 90meter library
  Registry	vmware.view.pkcs11.use_90meter
  Value	enabled / disabled

  IGEL Setup	Sessions > Browser > Browser Global > Smartcard Middleware
  Parameter	90meter Security Device
  Registry	browserglobal.security_device.90meter
  Value	enabled / disabled

  IGEL Setup	Security > Smartcard > Middleware
  Parameter	90meter
  Registry	scard.pkcs11.use_90meter
  Value	enabled / disabled

Base System

• Added package ldap-utils which can be used by custom scripts.

• Updated libwebkit2gtk-4.0-37 to version 1.24.2.

  More...

  CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-6251,

  CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378,

  CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4345,

  CVE-2018-4386, CVE-2018-4372

• Updated EULA displayed in OSC and IGEL Setup Assistant.
• When the IGEL Setup Assistant is used to download a demo license via WiFi, the local WiFi manager will be enabled by default.
• Added possibility to configure scheduled commands. Registry keys: system.cron.*

Driver

• Updated deviceTRUST Client to version 19.1.200.  This release includes support for logical disks attached to the IGEL endpoint, plus bug fixes and stability improvements over the previous 19.1.100 release.
  Logical Disks
  Added support for real-time properties representing the LOGICAL DISKS  attached to the IGEL endpoint. 

  This includes...

  • DEVICE_LOGICALDISK_X_TYPE – Either Fixed or Removable.
  • DEVICE_LOGICALDISK_X_LABEL – The volume label.
  • DEVICE_LOGICALDISK_X_FILESYSTEM – The type of file system.
  • DEVICE_LOGICALDISK_X_PATHS – The paths that the disk is mounted.
  • DEVICE_LOGICALDISK_X_TOTALMB – The total space available on the disk. This property is only available for mounted disks.
  • DEVICE_LOGICALDISK_X_FREEMB – The free space available on the disk. This  property is only available for mounted disks.
  • DEVICE_LOGICALDISK_X_NAME – The name of the underlying physical disk.
  • DEVICE_LOGICALDISK_X_VENDORID – The vendor identifier uniquely identifying the  manufacturer. This property is only available for USB or PCI connected  devices.
  • DEVICE_LOGICALDISK_X_PRODUCTID – The product identifier uniquely identifying  the product. This property is only available for USB or PCI connected devices.
  • DEVICE_LOGICALDISK_X_SERIALNUMBER – The serial number of the physical disk.
  • DEVICE_LOGICALDISK_X_BUSTYPE – The storage bus type linked to the physical  disk.
  • DEVICE_LOGICALDISK_COUNT – The number of logical disks.

• Added registry keys to modify the intel graphic driver usage of framebuffer compression and power management.

  More...

  Parameter	Power saving display C-States to use.
  Registry	x.drivers.intel.dc_setting
  Range	[Default][Disable][Up to DC5][Up to DC6]

  Parameter	Use framebuffer compression.
  Registry	x.drivers.intel.fbc_setting
  Range	[Default][Disable]

X11 System

• Added new registry keys to change the xorg input driver for a input device class.

  More...

  For keyboards:

  Parameter	Xorg driver to use
  Registry	userinterface.keyboard.driver
  Range	[Evdev] [Libinput]

  For touchpads:

  Parameter	Xorg driver to use
  Registry	userinterface.touchpad.driver
  Range	[Evdev] [Synaptics] [Libinput]

  For touchscreens:

  Parameter	Xorg driver to use
  Registry	userinterface.touchscreen.xorg_driver
  Range	[Evdev][Libinput]

  For mouse:

  Parameter	Xorg driver to use
  Registry	userinterface.mouse.driver
  Range	[Evdev][Libinput]

• Added some registry keys to disable loading of DRM kernel modules (graphic).

  More...

  Parameter	Disable the loading of the RADEON DRM driver.
  Registry	x.drivers.ati.disable
  Value	enabled / disabled

  Parameter	Disable the loading of the AMDGPU DRM driver.
  Registry	x.drivers.amdgpu.disable
  Value	enabled / disabled

  Parameter	Disable the loading of the i915 DRM driver.
  Registry	x.drivers.intel.disable
  Value	enabled / disabled

  Parameter	Disable the loading of the NVIDIA kernel driver.
  Registry	x.drivers.nvidia.disable
  Value	enabled / disabled

  Parameter	Disable the loading of the NOUVEAU DRM driver.
  Registry	x.drivers.nouveau.disable
  Value	enabled / disabled

  Parameter	Disable the loading of the QXL DRM driver.
  Registry	x.drivers.qxl.disable
  Value	enabled / disabled

  Parameter	Disable the loading of the VMGFX DRM driver.
  Registry	x.drivers.vmware.disable
  Value	enabled / disabled

  Parameter	Disable the loading of the VBOXVIDEO DRM driver.
  Registry	x.drivers.vboxvideo.disable
  Value	enabled / disabled

Java

• Replaced Oracle JRE by AZUL's Zulu JRE version 8.36.0.1.