New Features 10.04.100

Citrix Receiver 13

• Integrated Citrix Receiver 13.8.0.

  More

  Parameter	Use Citrix Cloud with receiver 13.8 or newer
  Registry	ica.cloudconnect
  Value	enabled / disabled

  • Support for Azure Active Directory (Azure AD) authentication
  • Support for Workspace configuration from Citrix Cloud
• Integrated Citrix Receiver 13.4.2. Citrix Receiver version 13.5.0 was removed. Available Citrix Receiver versions: 13.3.2, 13.4.2, 13.7.0, 13.8.0 (default)
• Updated Citrix HDX RTME used for optimization of Skype for Business to 2.4.0.

RDP / IGEL RDP Client 2

• Added possibility to use RDP local logon for smartcard login. This can be activated in the setup.

  More

  Parameter	Enable smartcard support for local logon
  Registry	rdp.login.smartcard-local-logon
  Value	enabled / disabled
  By enabling this parameter local logon can be used for smartcard authentication. If Username is left empty the connection to the RDP server will be made without sending credentials, so you can choose Smartcard as login method in the microsoft login window . However this will not work with NLA.

• Added support for CredSSP up to version 6.

VMware Horizon

• Updated VMware Horizon Client to version 4.7.0-7395152.

• Added key to enable seamless window mode in each application session.

  More

  Parameter	Seamless Application Windows
  Registry	sessions.vdm_client.options.enable_seamless_window
  Value	enabled / disabled

• Added possibility to use Fabulatech USB Redirection in a Horizon Client PCoIP session.

  More

  IGEL Setup	Sessions > Horizon Client > Horizon Client Global > Fabulatech USB Redirection
  Parameter	Enable Fabulatech USB Redirection
  Registry	vmware.view.usb.enable-fabulatech-usb
  Value	enabled / disabled

Parallels Client

• Integrated Parallels Client version 16.2.0 (19039)

• Added support for USB Redirection, configurable at new IGEL Setup page Sessions > Parallels Client > Parallels Client Global > USB Redirection.

  More

  IGEL Setup	Sessions > Parallels Client > Parallels Client Global > USB Redirection
  Parameter	Enable USB Redirection
  Registry	twox.usb_redirection.usb_enable
  Value	enabled / disabled

  Parameter	Product ID
  Registry	twox.usb_redirection.devicepolicy.product_rule.product

  Parameter	Vendor ID
  Registry	twox.usb_redirection.devicepolicy.product_rule.vendor

  Parameter	Rule
  Registry	twox.usb_redirection.devicepolicy.product_rule.rule
  Value	Deny / Allow

  Parameter	Name
  Registry	twox.usb_redirection.devicepolicy.product_rule.name
  Value	Policy Rule

  Parameter	Automatically redirect all USB devices
  Registry	twox.usb_redirection.devicepolicy.redirect_all
  Value	enabled / disabled

• Added support for PTP/MTP Redirection.

  More

  IGEL Setup	Sessions > Parallels Client > Parallels Client Global > USB Redirection
  Parameter	Enable PTP/MTP Redirection
  Registry	twox.mtp_redirection.mtp_enable
  Value	enabled / disabled

  Parameter	Product ID
  Registry	twox.mtp_redirection.devicepolicy.product_rule.product

  Parameter	Vendor ID
  Registry	twox.mtp_redirection.devicepolicy.product_rule.vendor

  Parameter	Rule
  Registry	twox.mtp_redirection.devicepolicy.product_rule.rule
  Value	Deny / Allow

  Parameter	Name
  Registry	twox.mtp_redirection.devicepolicy.product_rule.name
  Value	Policy Rule

  Parameter	Automatically redirect all PTP/MTP devices
  Registry	twox.mtp_redirection.devicepolicy.redirect_all
  Value	enabled / disabled

• Added support for Clipboard Redirection.

  More

  IGEL Setup	Sessions > Parallels Client > Parallels Client Sessions > Parallels Client Session > Local Resources
  Parameter	Connect clipboard
  Registry	sessions.twox.local_resources.connect_clipboard
  Value	enabled / disabled

VoIP

• Added VoIP client Ekiga 4.0.1.

Firefox

• Updated Firefox to version 52.7.2 ESR.
• Updated Adobe Flash Player download URL to version 29.0.0.113.

Network

• Added TTLS/PAP and TTLS/MSCHAPv2 to possible 802.1x authentication methods.

• Improved support for Sierra EM7305 LTE device (e.g. in Toshiba Portégé and Fujitsu LIFEBOOK E Series).

  

  The EM7305 comes in various variants, e.g. one with ProductId 9041 and another one with ProductId 9063. The latter comes at least with one or with two USB configuration options. A device with only one configuration option has been observed on a Toshiba Tecra Z-50-D-115 notebook. It only works in MBIM mode and with IGEL firmware, when the device has successfully connected before with the same settings (particularly APN), e.g. under Microsoft Windows 10.
• Added support for Sierra EM7455 WWAN module.
• Added support for running the Huawei E3531i WWAN device in modem mode (in addition to HiLink mode).

• Added possibility to adopt the hostname from a DHCP lease as permanent terminal name. The purpose is to use the name received as part of a DHCP lease in future interactions with the DHCP server.

  More

  Parameter	Adopt permanent Terminal Name from DHCP lease
  Registry	network.dns.hostname_adopt_from_dhcp
  Value	enabled / disabled

• NetworkManager updated to version 1.2.2
• ModemManager updated to version 1.6.4
• usb_modeswitch updated to version 2.5.1

Open VPN

• Added Huawei HiLink Mobile Broadband USB device as possible uplink to OpenVPN sessions.

OpenConnect VPN

• Added OpenConnect client version 7.08 to connect to Cisco AnyConnect and Juniper VPN. The feature must be enabled.

  More

  IGEL Setup	System > Firmware Customization > Features
  Parameter	VPN OpenConnect (Limited support - functionality "as is", see product documentation for details)
  Registry	services.unsupported02.enabled
  Value	enabled / disabled

• The OpenConnect VPN configuration is available at IGEL Setup page Network > VPN > OpenConnect VPN.

  More

  IGEL Setup	Network > VPN > OpenConnect VPN > VPN OpenConnect > Session
  Parameter	Gateway
  Registry	sessions.openconnect.vpnopts.gateway

  Parameter	Enable Name/Password Authentication
  Registry	sessions.openconnect.vpnopts.enable-name-pwd
  Value	enabled / disabled

  Parameter	User Name
  Registry	sessions.openconnect.vpnopts.username

  Parameter	Password
  Registry	sessions.openconnect.vpnopts.crypt_password

  Parameter	CA Certificate
  Registry	sessions.openconnect.vpnopts.ca-cert

  Parameter	User Certificate
  Registry	sessions.openconnect.vpnopts.user-cert

  Parameter	Private Key
  Registry	sessions.openconnect.vpnopts.priv-key

  Parameter	Private Key password
  Registry	sessions.openconnect.vpnopts.priv-key-pwd.crypt_password

  Parameter	Connect to Juniper Networks VPN
  Registry	sessions.openconnect%.vpnopts.is-juniper
  Value	enabled / disabled

  

  Tray icon is placed in the panel to disconnect from a running OpenConnect VPN connection.

Smartcard

• Added CoolKey PKCS#11 library for access to Common Access Card (CAC) smartcards.

  More

  IGEL Setup	Sessions > Browser > Browser Global > Encryption
  Parameter	Coolkey Security Device
  Registry	browserglobal.security_device.coolkey
  Value	enabled / disabled

  IGEL Setup	Sessions > Horizon Client > Horizon Client Global > Smartcard
  Parameter	Horizon logon with smartcards supported by Coolkey library
  Registry	vmware.view.pkcs11.use_coolkey
  Value	enabled / disabled

  IGEL Setup	Security > Smartcard > Middleware
  Parameter	Coolkey
  Registry	scard.pkcs11.use_coolkey
  Value	enabled / disabled

• Updated Gemalto SafeNet PKCS#11 library to version 10.0.37-0. This package replaces Gemalto/SafeNet eToken and Gemalto IDPrime libraries.
  Gemalto SafeNet (formerly Gemalto/SafeNet eToken) now handles Gemalto cards and tokens including eToken and IDPrime.
  Gemalto IDPrime now handles IDPrime cards and tokens, preferred Common Creteria (CC) cards and tokens in Unlinked Mode.

• Added full integration of OpenSC PKCS#11 library for access to smartcards.

  More

  IGEL Setup	Sessions > Browser > Browser Global > Encryption
  Parameter	OpenSC Security Device
  Registry	browserglobal.security_device.opensc
  Value	enabled / disabled

  IGEL Setup	Sessions > Horizon Client > Horizon Client Global > Smartcard
  Parameter	Horizon logon with smartcards supported by OpenSC library
  Registry	vmware.view.pkcs11.use_opensc
  Value	enabled / disabled

  IGEL Setup	Security > Smartcard > Middleware
  Parameter	OpenSC
  Registry	scard.pkcs11.use_opensc
  Value	enabled / disabled

• Updated MUSCLE CCID smartcard reader driver to version 1.4.28.
• Updated ACS CCID smartcard reader driver to version 1.1.5.
• Updated REINER SCT cyberJack smartcard reader driver to version 3.99.5final.sp11.

• Added parameter to disable Identive CCID smartcard reader driver. If this driver is disabled, some of the readers are handled by the MUSCLE CCID driver. This can help when problems with Identive reader driver occur.

  More

  Parameter	Identive driver for smart card readers
  Registry	scard.pcscd.identiv_enable
  Value	enabled / disabled

• Updated cryptovision sc/interface PKCS#11 library to version 7.0.5.592.
• New smartcard reader driver for Fujitsu KB SCR eSIG version 5.0.24.

HID

• Added layout toggle feature to on-screen keyboard.

  More

  IGEL Setup	Accessories > On-Screen Keyboard > Appearance
  Parameter	Enable switching to alternative layout
  Registry	userinterface.softkeyboard.enable_alternative_layout
  Value	enabled / disabled
  If this is enabled there is a key on the on-screen keyboard for toggling between the normal layout and a reduced layout, that saves space on the screen and has more or less the same features as the number block of an ordinary keyboard with some extensions.

Base System

• Added support for UEFI Secure Boot.

  

  When booted with Secure Boot the downgrade to a firmware version older than 10.04.100 is locked.
• Updated kernel to version 4.15.15
• Boot time optimization (up to 25% faster)

• Switch power off on USB ports on shutdown and reboot. The feature can be enabled in IGEL Setup. At the moment only IGEL H830C is supported.

  More

  IGEL Setup	System > Registry
  Parameter	Power off on shutdown
  Registry	devices.usb.poweroff_shutdown
  Value	enabled / disabled

• Added Unit ID in Application Launcher About > Hardware section.
• Showing number of CPU cores in Application Launcher About > Hardware section now.

Storage Devices

• Added support for Mobile Device Access feature in Appliance Mode. The Mobile Device Access tool can be opened via a new icon in the In-session control bar. The Mobile Device Access tool can also be started automatically.

  More

  Parameter	Autostart
  Registry	sessions.mtp-devices0.autostart
  Value	enabled / disabled
  Mobile Device Access must be enabled at IGEL Setup > System > Firmware Customization > Features. Appliance Mode must be enabled at IGEL Setup > Sessions > Appliance Mode.

• The Mobile Device Access tool is now configurable at IGEL Setup > Accessories > Mobile Device Access.
• The Mobile Device Access tray icon respects the current theme now.

X11 System

• Added support for XDMCP Appliance Mode. The XDMCP connection is configurable.

  More

  IGEL Setup	Sessions > Appliance Mode
  Parameter	XDMCP for this Display
  Registry	x.xdmcp0.enabled
  Value	enabled / disabled

  IGEL Setup	Sessions > Appliance Mode
  Parameter	Connection Type
  Registry	x.xdmcp0.server.connectiontype
  Range	indirect via localhost / indirect / direct / broadcast

  IGEL Setup	Sessions > Appliance Mode
  Parameter	Name or IP of server
  Registry	x.xdmcp0.server.servername

  IGEL Setup	Sessions > Appliance Mode
  Parameter	Enable hotkeys for XDMCP Display
  Registry	x.xdmcp0.hotkeys.enabled
  Value	enabled / disabled
  The default hotkey to open IGEL Setup is: CTRL + ALT + F2. The setup page User Interface > Display > XDMCP was removed.

• Added XC Font Service support.

  More

  IGEL Setup	User Interface > Font Services > XC Font Service
  Parameter	Enable XC Font Service
  Registry	x.xc_fontservice.enabled
  Value	enabled / disabled

  IGEL Setup	User Interface > Font Services > XC Font Service
  Parameter	XC Font Server
  Registry	x.xc_fontservice.fontserver

  IGEL Setup	User Interface > Font Services > XC Font Service
  Parameter	Port Number
  Registry	x.xc_fontservice.port
  Value	7100

  IGEL Setup	User Interface > Font Services > XC Font Service
  Parameter	Prefer Local Fonts
  Registry	x.xc_fontservice.prefer_localfonts
  Value	enabled / disabled

• Added auto detection of monitor refresh rate. This can be controlled with new parameters.

  More

  IGEL Setup	User Interface > Display > Advanced
  Parameter	Detect refresh rate automatically
  Registry	x.xserver0.auto_frequency
  Value	enabled / disabled

  
  

  IGEL Setup	User Interface > Display > Advanced
  Parameter	Detect refresh rate automatically
  Registry	x.xserver0.screen.auto_frequency
  Value	enabled / disabled

  
  

• Added xorg debug script /etc/igel/igel_debug_tools/xorg-debug.sh to make collecting Xorg debug data easier (a /tmp/xorg-debug.log file is generated).

Window Manager

• Added possibility to
  • a) change the preferred placement mode and
  • b) modify the threshold value up to which window size this placement mode should be chosen (otherwise window placement defaults to so called smart mode which tries to minimize overlapping).
  More

  Parameter	Preferred Placement
  Registry	windowmanager.wm0.variables.placement_mode
  Value	At mouse position / Centered

  Parameter	Maximum window size for which the preferred placement should apply
  Registry	windowmanager.wm0.variables.placement_ratio
  Value	0% / 10% / 20% / 30% / 40% / 50% / 60% / 70% / 80% / 90% / 100%

Audio

• Volume of audio output and input can now be configured up to 150% at IGEL Setup page Accessories > Sound Preferences > Options.

• Added a parameter for log level configuration of Pulseaudio service.

  More

  Parameter	Log level
  Registry	multimedia.pulseaudio.daemon.log-level
  Range	debug / info / notice / warning / error

Misc

• An EULA must be accepted now in IGEL setup assistant before finalizing it and using the IGEL OS.

Java

• Updated Oracle JRE to 1.8U162.

Remote Management

• Added new log file transfer mechanism for UMS feature Save TC files for support (UMS 5.08.110 or higher required). By default, it collects all log files visible in system log viewer, system configuration files group.ini, setup.ini and dhclient lease files. More files can be specified at IGEL Setup > Accessories > System Log Viewer > Options. The resulting zip file has now a folder structure.

IGEL Cloud Gateway

• Added UMS structure tag handling for usage with ICG agent.

Hardware

• Added support for IGEL UD7-LX 10.