New Features 11.02.100

Citrix

• Integrated Citrix Workspace app 19.06.
  Available Citrix Workspace apps in this release: 19.06, 13.10 and 13.5.

• Added a new registry key to support 1536-bit RSA keys for client authentication. Factory default for this release is "true".

   More...

  Parameter	Enables RSA 1536 cipher suite
  Registry	ica.allregions.enable_rsa_1536
  Range	factory default / false / true

• Added a new registry key to enable different cipher suites for client authentication. Factory default for this release is "ALL".

   More...

  Parameter	Enables different cipher suite
  Registry	ica.allregions.sslciphers
  Range	factory default / ALL / GOV / COM

  > TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 – GOV/ALL
  > TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 – GOV/ALL
  > TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA – COM/ALL

• Added a new registry key to support keyboard layout synchronization.

   More...

  Parameter	Keyboard layout synchronization
  Registry	ica.modules.virtualdriver.keyboardsync.enable
  Value	false/ true

• Updated Citrix HDX RTME used for optimization of Skype for Business to version 2.8.0-2235.
• Added support for Citrix Workspace Launcher functionality as described at https://support.citrix.com/article/CTX237727.

• Added Citrix Farm Selection, a facility to manually select one of the configured services / farms for StoreFront login.

   More...

  Parameter	Citrix store selection
  Registry	ica.pnlogin.farm_selection.enabled
  Value	off / on
  Info: Off: All servers are used in parallel. If switched on, a user has to select the store via a dialog box before entering the login data.

  • Timeout for the selection dialog:

     More...

    Parameter	Timeout
    Registry	ica.pnlogin.farm_selection.timeout
    Value	0 (no timeout) seconds

  • Width of the dialog window:

     More...

    Parameter	Selection box window width
    Registry	ica.pnlogin.farm_selection.win_width
    Value	400 pixel

  • Height of the dialog window:

     More...

    Parameter	Selection box window height
    Registry	ica.pnlogin.farm_selection.win_height
    Value	400 pixel

• Changed the defaults for following parameters:

   More...

  IGEL Setup	Sessions > Citrix > Citrix Global > Window
  Parameter	Multimonitor full-screen mode
  Registry	ica.wfclient.usexdgfullscreen ica.wfclient.spanmonitorenable
  Range	[Restrict full-screen session to one monitor] [Expand full-screen session across all monitors] [Expand the session over a self-selected number of monitors]

  IGEL Setup	Sessions > Citrix > Citrix Global > HDX Multimedia
  Parameter	Multimedia redirection
  Registry	ica.module.virtualdriver.multimedia.enable
  Value	enabled / disabled

  IGEL Setup	Sessions > Citrix > Citrix Global > HDX Multimedia
  	Sessions > Citrix > Citrix Global > Unified Communications > Skype for Business
  Parameter	HDX Realtime Media Engine
  Registry	ica.module.virtualdriver.hdxrtme.enable
  Value	enabled / disabled

• Updated the Nuance virtual channel for ICA to version B301.
  
  

RDP/IGEL RDP Client 2

• Added a field 'Collection' to RDP session server page.

   More...

  IGEL Setup > Sessions > RDP > RDP Sessions > RDP Session > Server
  IGEL Setup > Sessions > RDP > RDP Sessions > RDP Session > Options
  Parameter	Collection
  Registry	sessions.winconnect<NR>.option.load-balance-info

VMware Horizon

• Added parameters to specify webcam frame size and rate for RTAV.

   More...

  Parameter	Webcam frame width
  Registry	vmware.view.rtav-frame-width
  Value	<empty_string>

  Parameter	Webcam frame height
  Registry	vmware.view.rtav-frame-height
  Value	<empty_string>

  Parameter	Webcam frame rate
  Registry	vmware.view.rtav-frame-rate
  Value	<empty_string>

• Updated Horizon Client to version 5.0.0-12557422.

• Added a possibility to easily evaluate Horizon Blast decoder states. By default, sessions are evaluated after usage, and the result is written into the journal log. This can also be used with GUI notifications at runtime.

• Added new USB classes to Horizon USB Redirection class configuration: Audio (input), Audio (Output), Imaging, Video (Input).

Parallels Client

• Updated Parallels Client to version 17.0.
• Added a possibility to set apps to autostart on Parallels RAS.

PowerTerm

• Added Ericom PowerTerm terminal emulation. This feature requires an additional license.
  The following versions are available:
  12.0.1.0.20170219.2-_dev_-34574
  12.5_x64_20190619_12.5.1.40008

IBM_525

• Improved startup time of IBM iAccess Client.

• Improved configuration of IBM iAccess Client via IGEL Setup.

   More...

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Connection > Advanced
  Parameter	Bypass signon
  Registry	sessions.iaccess<NR>.options.ssoenabled
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Font
  Parameter	Antialiasing
  Registry	sessions.iaccess<NR>.options.textantialiasing
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Cursor
  Parameter	Allow blinking cursor
  Registry	sessions.iaccess<NR>.options.blinkcursor
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Cursor
  Parameter	Show blinking text with
  Registry	sessions.iaccess<NR>.options.blinkstate
  Value	[Blinking Text] [Host Color] [Mapped Color]

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Cursor
  Parameter	Blink Color
  Registry	sessions.iaccess<NR>.options.blinkcolor_fg
  Value	#ffc800

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Cursor
  Parameter	Blink Color Background
  Registry	sessions.iaccess<NR>.options.blinkcolor_bg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Rule Line
  Parameter	Rule Line
  Registry	sessions.iaccess<NR>.options.ruleline
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Rule Line
  Parameter	Follow Cursor
  Registry	sessions.iaccess<NR>.options.rulelinefollows
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Rule Line
  Parameter	Style
  Registry	sessions.iaccess<NR>.options.rulelinestyle
  Value	[Crosshair] [Vertical] [Horizontal]

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Green
  Registry	sessions.iaccess<NR>.options.color_fgn_fg
  Value	#00ff00

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Green Background
  Registry	sessions.iaccess<NR>.options.color_fgn_bg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	White
  Registry	sessions.iaccess<NR>.options.color_fwt_fg
  Value	#ffffff

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	White Background
  Registry	sessions.iaccess<NR>.options.color_fwt_bg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Red
  Registry	sessions.iaccess<NR>.options.color_frd_fg
  Value	#ff0000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Red Background
  Registry	sessions.iaccess<NR>.options.color_frd_bg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Turquoise
  Registry	sessions.iaccess<NR>.options.color_ftq_fg
  Value	#00ffff

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Turquoise Background
  Registry	sessions.iaccess<NR>.options.color_ftq_bg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Yellow
  Registry	sessions.iaccess<NR>.options.color_fyw_fg
  Value	#ffff00

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Yellow Background
  Registry	sessions.iaccess<NR>.options.color_fyw_bg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Pink
  Registry	sessions.iaccess<NR>.options.color_fpk_fg
  Value	#ff00ff

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Pink Background
  Registry	sessions.iaccess<NR>.options.color_fpk_bg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Blue
  Registry	sessions.iaccess<NR>.options.color_fbl_fg
  Value	#7890f0

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Blue Background
  Registry	sessions.iaccess<NR>.options.color_fbl_bg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Status Indicators
  Registry	sessions.iaccess<NR>.options.color_osi
  Value	#7890f0

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Information Indicators
  Registry	sessions.iaccess<NR>.options.color_oii
  Value	#ffffff

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Attention Indicators
  Registry	sessions.iaccess<NR>.options.color_oai
  Value	#ffff00

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Error Indicators
  Registry	sessions.iaccess<NR>.options.color_oei
  Value	#ff0000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	OIA Background
  Registry	sessions.iaccess<NR>.options.color_oob
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Screen Background
  Registry	sessions.iaccess<NR>.options.color_sbg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Highlight active field
  Registry	sessions.iaccess<NR>.options.actfieldhilite
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Active Field
  Registry	sessions.iaccess<NR>.options.color_actf_fg
  Value	#000000

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Active Field Background
  Registry	sessions.iaccess<NR>.options.color_actf_bg
  Value	#ffff00

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Crosshair Ruler Color
  Registry	sessions.iaccess<NR>.options.color_crc
  Value	#00ff00

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Screen > Color
  Parameter	Column Separator
  Registry	sessions.iaccess<NR>.options.color_ccs
  Value	#ffffff

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Preferences
  Parameter	Start window maximized
  Registry	sessions.iaccess<NR>.options.ismaximized
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Preferences > Keyboard
  Parameter	Keyboard Remapping File
  Registry	sessions.iaccess<NR>.options.keyremapfile
  Value	IBMi.kmp

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Preferences > Popup Keypad
  Parameter	Popup Keypad File
  Registry	sessions.iaccess<NR>.options.poppadfile

  Setup	Sessions > IBM iAccess Client > iAccess Sessions > Session Name > Preferences > Toolbar
  Parameter	Toolbar File
  Registry	sessions.iaccess<NR>.options.toolbarfile

  Setup	Sessions > IBM iAccess Client > iAccess Global > Tab Setup
  Parameter	Open new sessions in a new tab
  Registry	ibm.iaccess.acssm.opensessionintab
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Global > Tab Setup
  Parameter	Always display the tab bar
  Registry	ibm.iaccess.acssm.alwaysshowtabbar
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Global > Tab Setup
  Parameter	Switch to new tab when created
  Registry	ibm.iaccess.acssm.switchtonewtab
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Global > Tab Setup
  Parameter	Send a warning when closing multiple tabs
  Registry	ibm.iaccess.acssm.closemultipletabwarning
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Global > Tab Setup
  Parameter	Do not start tabbed sessions until the tab is selected
  Registry	ibm.iaccess.acssm.tabdelayedstart
  Value	enabled / disabled

  Setup	Sessions > IBM iAccess Client > iAccess Global > Tab Setup
  Parameter	New Tab Action
  Registry	ibm.iaccess.acssm.newtabaction
  Value	[Disable and Hide] [Run the Same] [Run Other...]

  Setup	Sessions > IBM iAccess Client > iAccess Global > Tab Setup
  Parameter	Tab Placement
  Registry	ibm.iaccess.acssm.tabplacement
  Value	[Top] [Bottom] [Left] [Right]

  
  

NX client

• Updated NoMachine Client to version 6.7.6.

ThinLinc

• Updated Cendio ThinLinc to version 4.10.

• Added support for all of ThinLinc's login methods: password, public key, smartcard and Kerberos. Additional parameters can be set when smartcard is chosen.

   More...

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Method of authentication
  Registry	sessions.thinlinc%.login.authentication_method
  Value	password / publickey / scpublickey / kerberos

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	User
  Registry	sessions.thinlinc%.options.user
  Value

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Password
  Registry	sessions.thinlinc%.option.crypt_password
  Value

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Use certificate subject as name for login
  Registry	sessions.thinlinc%.login.smartcard_subject_as_name
  Value	enabled / disabled

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Connect the client automatically when a smartcard is found
  Registry	sessions.thinlinc%.login.smartcard_autoconnect
  Value	enabled / disabled

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Disconnect the client automatically when the smartcard is removed
  Registry	sessions.thinlinc%.login.smartcard_disconnect
  Value	enabled / disabled

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Allow transmission of the smartcard's passphrase for logging in
  Registry	sessions.thinlinc%.login.smartcard_passphrase_sso
  Value	enabled / disabled

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Smartcard filter
  Registry	sessions.thinlinc%.login.smartcard_filter_1
  Value

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Smartcard filter
  Registry	sessions.thinlinc%.login.smartcard_filter_2
  Value

  IGEL Setup	Sessions > ThinLinc > ThinLinc Sessions > ThinLinc Session > Login
  Parameter	Smartcard filter
  Registry	sessions.thinlinc%.login.smartcard_filter_3
  Value

Teradici PCoIP Client

• Added Teradici PCoIP Client version 19.05.5. This feature requires an additional license.
  The following parameters are available:

   More...

  IGEL Setup	System > Firmware Customization > Features
  Parameter	Teradici PCoIP Client
  Registry	services.addition_teradici_pcoip_client.enabled
  Value	enabled / disabled

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings
  Parameter	Use IGEL Setup for configuration
  Registry	sessions.pcoip<NR>.options.igel-connection
  Value	disabled / enabled

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings
  Parameter	Server
  Registry	sessions.pcoip<NR>.options.address

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings
  Parameter	Server certificate verification mode
  Registry	sessions.pcoip<NR>.options.security-mode
  Range	[Not required] [Warn but allow] [Full verification]

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Login
  Parameter	Authentication type
  Registry	sessions.pcoip<NR>.options.auth-type
  Range	[Password authentication] [Smartcard authentication]

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window
  Parameter	Window mode
  Registry	sessions.pcoip<NR>.options.window-mode
  Range	[User defined] [Fullscreen One Monitor] [Fullscreen All Monitors][Window]

  IGEL Setup	Sessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window
  Parameter	User interface translation
  Registry	sessions.pcoip<NR>.options.language
  Range	[System setting] [English] [German] [French] [Spanish] [Portuguese (EU)] [Portuguese (Brazil)] [Italian] [Japanese] [Chinese(Simplified)] [Chinese(Traditional)]

  Parameter	Log level
  Registry	sessions.pcoip<NR>.options.log-level
  Range	[Global setting] [Critical] [Error] [Info] [Debug]

• Added support for global settings:

   More...

  Parameter	Log level
  Registry	pcoip.log-level
  Range	[Critical] [Error] [Info] [Debug]

  Parameter	Show codec indicator
  Registry	pcoip.codec_indicator
  Value	disabled / enabled
  Info: Added small dot in the bottom left corner during the session to indicate which codec is being used. Green indicates simple codec; blue indicates tic2 codec. This is only available as global setting.

• UMS option "Save device files for support" now includes Teradici PCoIP client's data.

Firefox

• Added new parameters: Allow a custom command before and after browser session.

   More...

  Parameter	init_action
  Registry	sessions.browser%.init_action
  Value	<empty_string>

  Parameter	final_action
  Registry	sessions.browser%.final_action
  Value	<empty_string>

Network

• New feature regarding lock and logon screen: Network icons are shown on the panel and appear under the same conditions as during normal operation. None of them has a context menu though.
  Clicking on the Wi-Fi icon directly invokes the Wireless Manager when it is enabled.
  If blocking/unblocking Wi-Fi by the user is enabled, there is an additional button on the Wireless Manager for blocking and a preceding dialog for unblocking.

• SCEP: Added a registry key for specifiying a suffix for CommonName/SubjectAltName when the type is "DNS Name (auto)" or "DNS Name as UPN (auto)".

   More...

  Parameter	CommonName/SubjectAltName Suffix
  Registry	network.scepclient.cert%.subjectaltnamesuffix
  Value	<empty>
  Info: Automatic replacements in the value: %D -> the system's DNS domain name at the time the CSR is created %% -> % Other %X are currently discarded.

• Added a mechanism for retrieving the SCEP challenge password with a custom script. Setting the following registry key to "true" enables the use of the script. The registry key network.scepclient.cert%.crypt_password will be ignored. (The script may use it for its own purpose though.)

   More...

  Parameter	Use Challenge Password Command
  Registry	network.scepclient.cert%.use_challenge_password_command
  Value	enabled / disabled

  If the above key is enabled, the value of this key will be passed to bash for execution. It happens when the SCEP challenge password is needed for creating a certificate signing request. The script is supposed to output the challenge password on its standard output. For convenience, any Carriage-Return characters are stripped off the script before execution by bash.

   More...

  Parameter	Challenge Password Command
  Registry	network.scepclient.cert%.challenge_password_command
  Value	<empty_string>

• Added NCP Secure Enterprise VPN Client version 5.10_rev40552 (configurable under IGEL Setup > Network > VPN > NCP VPN Client).

Wi-Fi

• Added: Wi-Fi adapters can be turned off and on by the tray icon context menu when the following registry key is enabled:

   More...

  Parameter	Enable Wi-Fi switch
  Registry	network.applet.wireless.enable_wifi_switch
  Value	enabled / disabled

• Added support for Realtek 8821CE wireless cards.

Imprivata

• Imprivata Appliance 6.3 or higher is needed now.
  Please see the Imprivata Supported Components guide (http://documentation.imprivata.com/01RefArch/Content/Topics/OSSupportedComponents.htm#ProveID) for support and upgrade considerations.

• Added a new parameter to Imprivata.conf: "Redirection of Smartcards".

   More...

  IGEL Setup > Sessions > Appliance Mode > Imprivata
  Parameter	Redirection of Smartcards
  Registry	imprivata.native_smartcard_redirection
  Value	enabled / disabled

• Added a new parameter: "Path to Certificate".

   More...

  IGEL Setup > Sessions > Appliance Mode > Imprivata
  Parameter	Path to Certificate
  Registry	imprivata.path_to_certificate

Smartcard

• Added 90meter smartcard library. This feature requires an additional license.
  Use the following parameters to activate:

   More...

  IGEL Setup	System > Firmware Customization > Features
  Parameter	90meter Smart Card Support
  Registry	services.addition_smartcard_90meter.enabled
  Value	enabled / disabled

  IGEL Setup	Sessions > Horizon Client > Horizon Client Global > Smartcard
  Parameter	Horizon logon with smartcards supported by 90meter library
  Registry	vmware.view.pkcs11.use_90meter
  Value	enabled / disabled

  IGEL Setup	Sessions > Browser > Browser Global > Smartcard Middleware
  Parameter	90meter Security Device
  Registry	browserglobal.security_device.90meter
  Value	enabled / disabled

  IGEL Setup	Security > Smartcard > Middleware
  Parameter	90meter
  Registry	scard.pkcs11.use_90meter
  Value	enabled / disabled

• New IGEL Smartcard mode without Locking Desktop (reintroduced feature of Linux 5.x firmware).

   More...

  IGEL Setup > Security > Logon > IGEL Smartcard
  Parameter	Enable IGEL Smartcard without Locking Desktop
  Registry	scard.scardd.enable_nolock
  Value	enabled / disabled

  IGEL Setup > Security > Logon > IGEL Smartcard
  Parameter	On Smartcard Removal, terminate
  Registry	scard.scardd.session_termination
  Value	all / smartcard

• Updated SecMaker NetID to version 6.7.2.36: now YubiKey 5 is supported.

• Updated CHERRY USB-LAN Proxy to version 3.2.0.3. This version provides enhanced configuration.

   More...

  IGEL Setup > Security > Smartcard > Services
  Parameter	Bind IP
  Registry	devices.cherry.usblanproxy.bind-ip
  Value	auto

  IGEL Setup > Security > Smartcard > Services
  Parameter	Https Server Port
  Registry	devices.cherry.usblanproxy.https-port
  Value	443

  IGEL Setup > Security > Smartcard > Services
  Parameter	SICCT Announce IP
  Registry	devices.cherry.usblanproxy.sicct-announce-ip
  Value	broadcast

  IGEL Setup > Security > Smartcard > Services
  Parameter	SICCT Announce Port
  Registry	devices.cherry.usblanproxy.sicct-announce-port
  Value	4742

  IGEL Setup > Security > Smartcard > Services
  Parameter	SICCT Announce Interval
  Registry	devices.cherry.usblanproxy.sicct-announce-interval
  Value	30

  IGEL Setup > Security > Smartcard > Services
  Parameter	USB Fast Mode
  Registry	devices.cherry.usblanproxy.usb-fast-mode
  Value	enabled /disabled

  IGEL Setup > Security > Smartcard > Services
  Parameter	Alternate Initialization Method for G87-1505
  Registry	devices.cherry.usblanproxy.usb-1505-alt-setup
  Value	enabled /disabled

• Added a command line tool pcsc_scan for smartcard debugging.

• Added configuration parameters for some settings of smartcard library OpenSC.

   More...

  Parameter	Debug level
  Registry	scard.pkcs11.opensc.default.debug
  Value	0

  Parameter	Debug file
  Registry	scard.pkcs11.opensc.default.debug_file
  Value	stderr

  Parameter	Max. send size
  Registry	scard.pkcs11.opensc.default.pcsc.max_send_size
  Value	255

  Parameter	Max. receive size
  Registry	scard.pkcs11.opensc.default.pcsc.max_recv_size
  Value	256

  Parameter	Connect exclusive
  Registry	scard.pkcs11.opensc.default.pcsc.connect_exclusive
  Value	enabled / disabled

  Parameter	Disconnect action
  Registry	scard.pkcs11.opensc.default.pcsc.disconnect_action
  Value	leave / reset / unpower

  Parameter	Transaction end action
  Registry	scard.pkcs11.opensc.default.pcsc.transaction_end_action
  Value	leave / reset / unpower

  Parameter	Reconnect action
  Registry	scard.pkcs11.opensc.default.pcsc.reconnect_action
  Value	leave / reset / unpower

  Parameter	Enable pinpad
  Registry	scard.pkcs11.opensc.default.pcsc.enable_pinpad
  Value	enabled / disabled

  Parameter	Use PIN caching
  Registry	scard.pkcs11.opensc.default.pkcs15.use_pin_caching
  Value	enabled / disabled

  Parameter	How many times to use a PIN from cache before re-authenticating it
  Registry	scard.pkcs11.opensc.default.pkcs15.pin_cache_counter
  Value	10

  Parameter	PIN caching ignores user consent
  Registry	scard.pkcs11.opensc.default.pkcs15.pin_cache_ignore_user_consent
  Value	enabled / disabled

• Updated cryptovision sc/interface PKCS#11 smartcard library to version 7.1.20.
  Changes in this revision:

  • Fixed a possible deadlock in the PKCS#11 module on Linux, if C_Finalize is called during a PCSC event, for example C_WaitForSlotEvent.

  • ROCA check in the Smartcard Manager, based on the "ROCA detection tool", see https://github.com/crocs-muni/roca.

  • Renaming of the container label in Smartcard Manager with F2 is now possible.

CUPS Printing

• Added SMB Network Print client function.

   More...

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	Printer Port
  Registry	print.cups.printer<NR>.backend
  Value	smb

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	SMB Server
  Registry	print.cups.printer<NR>.smb_server

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	SMB Workgroup
  Registry	print.cups.printer<NR>.smb_workgroup

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	SMB Printer
  Registry	print.cups.printer<NR>.smb_printer

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	SMB Port
  Registry	print.cups.printer<NR>.smb_port

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	Use Kerberos Authentication
  Registry	print.cups.printer<NR>.smb_kerberos
  Value	enabled / disabled

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	Use Passthrough Authentication
  Registry	print.cups.printer<NR>.smb_passthrough
  Value	enabled /disabled

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	SMB User
  Registry	print.cups.printer<NR>.smb_user

  IGEL Setup > Devices > Printer > CUPS > Printers > Dialog
  Parameter	SMB Password
  Registry	print.cups.printer<NR>.crypt_password

Base system

• Added a possibility to configure scheduled commands. Registry keys: system.cron.**

• Buddy update enhancements:

  • Automatic load balancing:
    A client collects up to eight server candidates from which one is selected randomly. Collection stops when the number specified in the following registry key is reached. Otherwise collection stops after a timeout.

     More...

    Parameter	Buddy Update Server Candidates
    Registry	update.ftp.buddy_server_candidates
    Value	1

  • Grouping:
    Buddy update servers and clients only interact with each other when they are in the same group determined by the following registry key (a non-negative integer number). This feature is mainly useful when different firmware versions shall be used in parallel.

     More...

    Parameter	Buddy Group ID
    Registry	update.ftp.buddy_group_id
    Value	0

• Added: Firmware update scheduled on shutdown is now invoked on reboot too.

• Added package ldap-utils which can be used by custom scripts.

• Updated Kernel to mainline version 4.19.65.

• Moved the EULA page in IGEL Setup Assistant into the demo activation workflow.

• Updated EULA displayed in OSC and IGEL Setup Assistant.

• Added: When IGEL Setup Assistant is used to download a demo license via Wi-Fi, the local Wi-Fi manager will be enabled by default.

• Updated Fluendo multimedia codecs to the following versions:

   More...

  gst-fluendo-aacdec	21/03/2019	0.10.39
  gst-fluendo-asfdemux	21/03/2019	0.10.89
  gst-fluendo-h264dec	21/03/2019	0.10.53
  gst-fluendo-mp3	21/03/2019	0.10.39
  gst-fluendo-mpeg4video	21/03/2019	0.10.43
  gst-fluendo-vadec	21/03/2019	0.10.208
  gst-fluendo-wmadec	21/03/2019	0.10.68
  gst-fluendo-wmvdec	20/03/2019	0.10.65

• Replaced timesyncd with chrony NTP. Added a new registry key:

   More...

  Parameter	Use NTP Servers from DNS SRV record
  Registry	system.time.ntp_use_dnssrv_timeservers
  Value	enabled / disabled

• Updated CA Certificates to version 20190122 (Mozilla authority bundle version 2.30).
  The following authorities were added:

   More...

  • "Certigna Root CA"
  • "GTS Root R1"
  • "GTS Root R2"
  • "GTS Root R3"
  • "GTS Root R4"
  • "UCA Extended Validation Root"
  • "UCA Global G2 Root"
  • "GlobalSign Root CA - R6"
  • "OISTE WISeKey Global Root GC CA"
  • "GDCA TrustAUTH R5 ROOT"
  • "SSL.com EV Root Certification Authority ECC" 
  • "SSL.com EV Root Certification Authority RSA R2"
  • "SSL.com Root Certification Authority ECC" 
  • "SSL.com Root Certification Authority RSA"
  • "TrustCor ECA-1"
  • "TrustCor RootCert CA-1"
  • "TrustCor RootCert CA-2"

  
  The following authorities were removed:

   More...

  • "Certplus Root CA G1" 
  • "Certplus Root CA G2" 
  • "OpenTrust Root CA G1" 
  • "OpenTrust Root CA G2" 
  • "OpenTrust Root CA G3" 
  • "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5" 
  • "Visa eCommerce Root" 
  • "ACEDICOM Root" 
  • "AddTrust Low-Value Services Root" 
  • "AddTrust Public Services Root" 
  • "AddTrust Qualified Certificates Root" 
  • "CA Disig Root R1" 
  • "CNNIC ROOT" 
  • "Camerfirma Chambers of Commerce Root" 
  • "Camerfirma Global Chambersign Root" 
  • "Certinomis - Autorité Racine" 
  • "Certum Root CA" 
  • "China Internet Network Information Center EV Certificates Root" 
  • "Comodo Secure Services root" 
  • "Comodo Trusted Services root" 
  • "DST ACES CA X6" 
  • "GeoTrust Global CA 2" 
  • "PSCProcert" 
  • "Security Communication EV RootCA1" 
  • "Swisscom Root CA 1" 
  • "Swisscom Root CA 2" 
  • "Swisscom Root EV CA 2" 
  • "TURKTRUST Certificate Services Provider Root 2007" 
  • "TUBITAK UEKAE Kok Sertifika Hizmet Saglayicisi - Surum 3" 
  • "UTN USERFirst Hardware Root CA"

Driver

• Added registry keys to modify the Intel graphic driver usage of framebuffer compression and power management.
  New registry keys:

   More...

  Parameter	Power saving display C-States to use
  Registry	x.drivers.intel.dc_setting
  Range	[Default] [Disable] [Up to DC5] [Up to DC6]
  Info: "Default" - driver default

  Parameter	Use framebuffer compression
  Registry	x.drivers.intel.fbc_setting
  Range	[Default] [Disable]
  Info: "Default" - driver default

• Updated Philips Speech Driver to version 12.7.11.

• Updated signotec Citrix Virtual Channel driver to version 8.0.8.

• Updated StepOver TCP Client to version 2.3.2.

• Updated deviceTRUST Client to version 19.1.200. These are the release notes:
  Welcome to the release of the deviceTRUST 19.1.200 IGEL client, providing the context of IGEL thin client and UD Pocket devices into your virtual sessions. This release includes support for logical disks attached to the IGEL endpoint, plus bug fixes and stability improvements over the previous 19.1.100 release.
  
  

  Logical Disks

  We’ve added support for real-time properties representing the LOGICAL DISKS attached to the IGEL endpoint. This includes:

   More...

  DEVICE_LOGICALDISK_X_TYPE – Either Fixed or Removable.
  DEVICE_LOGICALDISK_X_LABEL – The volume label.
  DEVICE_LOGICALDISK_X_FILESYSTEM – The type of file system.
  DEVICE_LOGICALDISK_X_PATHS – The paths that the disk is mounted.
  DEVICE_LOGICALDISK_X_TOTALMB – The total space available on the disk. This property is only available for mounted disks.
  DEVICE_LOGICALDISK_X_FREEMB – The free space available on the disk. This property is only available for mounted disks.
  DEVICE_LOGICALDISK_X_NAME – The name of the underlying physical disk.
  DEVICE_LOGICALDISK_X_VENDORID – The vendor identifier uniquely identifying the manufacturer. This property is only available for USB or PCI connected devices.
  DEVICE_LOGICALDISK_X_PRODUCTID – The product identifier uniquely identifying the product. This property is only available for USB or PCI connected devices.
  DEVICE_LOGICALDISK_X_SERIALNUMBER – The serial number of the physical disk.
  DEVICE_LOGICALDISK_X_BUSTYPE – The storage bus type linked to the physical disk.
  DEVICE_LOGICALDISK_COUNT – The number of logical disks.

X11 system

• Added a new parameter to allow configuration of 'Display Switch' confirmation dialog timeout.

   More...

  IGEL Setup	Accessories > Display Switch > Options
  Parameter	Timeout for confirmation dialog
  Registry	sessions.user_display0.options.confirm_timeout
  Value	10

• Re-Enable 'Display Switch' session start script to cycle simple modes.

• Added new options for lid handling.

   More...

  Parameter	Lid close action while plugged in
  Registry	system.actions.lid.ac
  Range	[Turn off display] [Suspend]

  Parameter	Lid close action while not plugged in
  Registry	system.actions.lid.battery
  Range	[Turn off display] [Suspend]

• Added new registry keys to change the xorg input driver for an input device class.
  New registry keys:
  
  For keyboards:

   More...

  Parameter	Xorg driver to use
  Registry	userinterface.keyboard.driver
  Range	[Evdev] [Libinput]

  For touchpads:

   More...

  Parameter	Xorg driver to use
  Registry	userinterface.touchpad.driver
  Range	[Evdev] [Synaptics] [Libinput]

  For touchscreens:

   More...

  Parameter	Xorg driver to use
  Registry	userinterface.touchscreen.xorg_driver
  Range	[Evdev] [Libinput]

  For mouse:

   More...

  Parameter	Xorg driver to use
  Registry	userinterface.mouse.driver
  Range	[Evdev] [Libinput]

• Added some registry keys to disable loading of DRM kernel modules (graphic).

   More...

  Parameter	Disable the loading of the RADEON DRM driver
  Registry	x.drivers.ati.disable
  Value	0

  Parameter	Disable the loading of the AMDGPU DRM driver
  Registry	x.drivers.amdgpu.disable
  Value	0

  Parameter	Disable the loading of the i915 DRM driver
  Registry	x.drivers.intel.disable
  Value	0

  Parameter	Disable the loading of the NVIDIA kernel driver
  Registry	x.drivers.nvidia.disable
  Value	0

  Parameter	Disable the loading of the NOUVEAU DRM driver
  Registry	x.drivers.nouveau.disable
  Value	0

  Parameter	Disable the loading of the QXL DRM driver
  Registry	x.drivers.qxl.disable
  Value	0

  Parameter	Disable the loading of the VMGFX DRM driver
  Registry	x.drivers.vmware.disable
  Value	0

  Parameter	Disable the loading of the VBOXVIDEO DRM driver
  Registry	x.drivers.vboxvideo.disable
  Value	0

• Updated DisplayLink driver to version 5.1.26 to solve some startup issues.

Evidian

• Updated Evidian rsUserAuth to version 1.5.7116.

Hardware

• Added hardware support for Rein Medical Silenio 122CT and 124CT.
• Added hardware support for Advantech POC-W213L and POC-W243L.
• Added hardware support for ADS-TEC VMT 9000 Serie.
• Added hardware support for Fujitsu Esprimo Q957.
• Added hardware support for ADS-TEC VMT 9000 Serie.
• Added hardware support for LG AiO Cloud Device 38"
  
  

• Added hardware support for the following headsets:

   More...

  • Jabra Engage 50
  • Jabra Engage 65
  • Jabra Engage 75
  • Jabra Evolve 30 II (Ver. B)
  • Jabra Evolve 30 II (Ver. C)
  • Jabra Evolve 40 (Ver. B) - USB-C
  • Jabra Evolve 40 (Ver. D)
  • Jabra Evolve 65
  • Jabra Evolve 75
  • Plantronics Voyager 5200 UC
  • Plantronics Voyager 6200 UC
  • Plantronics Voyager 8200 UC
  • Plantronics ENCOREPRO 720 + DA70
  • Plantronics ENCOREPRO 720 + DA80
  • Plantronics ENCOREPRO 520D + DA90
  • Sennheiser SC70
• Added hardware support for HP t430.
• Added hardware support for HP t420.

Java

• Replaced Oracle JRE by AZUL's Zulu JRE.
• Updated Zulu JRE to version 8.40.0.25.

Remote Management

• Connection order between UMS and ICG can now be configured.

   More...

  Registry	system.remotemanager.icg_try_ums_connect
  Value	enabled / disabled

  When an ICG connection is configured and the parameter is enabled, the device tries to connect directly to UMS. If the connection was established successfully, the device is managed by UMS and not over ICG until new start of the device or network.

IGEL Cloud Gateway

• Added VNC Shadowing support over ICG. To use this feature, UMS 6.02.110 or later and ICG 2.01.100 or later are required.