Citrix Receiver 13

  • Fixed: Now applications may be displayed in application launcher independently from startmenu.
  • Fixed Citrix Azure Cloud login window.
  • Added a new window manager tweak to automatically unmap unwanted Citrix fragment windows when seamless apps are used. 

    Parameter

    Auto-close unwanted Wfica windows

    Registry

    windowmanager.tweaks.suppress_wfica_window_in_seamless_session

    Value

    enabled / disabled

  • Fixed native USB redirection with Citrix receiver 13.10.
  • Fixed black rectangle around 32-bit mouse icons.
  • Fixed sound playback over Nuance channel.
  • Fixed stopping of the Pulseaudio PCM I/O plugin which is used by Citrix Receiver for sound output and recording.
  • When using the Citrix login method the system language is used now.
  • Fixed a problem with the parameter ica.pnlogin.suppressconnectiondialogconnection messages are suppressed as desired.

RDP/IGEL RDP Client 2

  • Fixed locking in smartcard transactions.
  • Fixed audio recording in RDP sessions.
  • Fixed $HOSTNAME to work for RDP login when variable substitution is enabled. 

    IGEL SetupSystem > Firmware Customization > Environment Variables

    Parameter

    Enable variable substitution in session

    Registry

    system.environment_variables.enable_application_variables

    Value

    enabled / disabled

    IGEL SetupSessions > RDP > RDP Global > Local Logon

    Parameter

    Type

    Registry

    rdp.login.saveusertype

    Value

    Set user/domain from session setup / Set user/domain from last login

  • Added Arabic (101) keyboard layout to RDP client.
  • Added MultiPointServer 2016 to supported servers for RDP MultiPoint Server appliance.

RD Web Access

  • Fixed wrong RDP Remote Application icon when opening a application twice.
  • Fixed unexpected behavior when maximizing/minimizing RDP Remote Applications.

UD Pocket

  • Fixes for UD Pocket demo license registration dialog:
    • Fixed german translation.
    • The toolbar context menu is not available anymore (it could hide the toolbar without a way to restore it).
    • The javascript confirm popup from igel.com is hidden now.

VMware Horizon

  • Added possibility to make certificate verification mandatory

    Parameter

    Allow change of certificate verification mode

    Registry

    vmware.view.ssl-verify-mode-change-allow

    Value

    enabled / disabled

  • Fixed H.264 hardware decoding for Horizon.

PowerTerm

  • Fixed printing to CUPS printers in PowerTerm.
  • Added TLS-1.2 in list of SSL Versions for PowerTerm on page Sessions > PowerTerm Terminal Emulation > PowerTerm Sessions > session name > Connection.

Parallels Client

  • Fixed: Authentication fails with Gemalto smartcards.
  • Fixed: Sometimes remote session windows remain on screen after one was logged off from the remote session.
  • Fixed: Remote session closes unexpectedly.
  • Fixed: Combination of CTRL-C doesn't work in remote session.
  • Improved: Use of multiple monitors.
  • Fixed: Client might hang while watching YouTube videos.
  • Fixed: Multiple USB drives might not be auto-mapped to a remote session.
  • Fixed: Logoff from a remote session blocks Linux desktop with a black screen.

Firefox

  • Fixed occasional loss of trusted certificates in Firefox. Certificates transmitted via UMS filetransfer were not reinstalled when Firefox profile was rebuilt.
  • Fixed PDF Plugin in Firefox browser.
  • Removed the browser plugin option from RHEV/Spice as it is no longer supported.
  • Removed the browser plugin option from SecMaker as it is no longer supported.

Network

  • Fixed failing Wake-on-LAN configuration after update on shutdown. Particularly UD2-LX40 devices were affected.
  • Fixed bug in the GetCA operation for SCEP: An intermediate certificate in addition to the root certificate and any RA certificates resulted in confusion.
  • sscep version is now 0.6.1
  • CA certificate fingerprint is now mandatory for SCEP. So far it could be left empty for debugging purposes.
  • Added parameter to specify whether a slash (/) is appended to SCEP URL. The slash is needed e.g. with Microsoft servers, but not with Nexus servers. 

    Parameter

    Append slash (/) to SCEP server URL

    Registry

    network.scepclient.cert0.scepurlappendslash

    Value

    enabled / disabled

  • Fixed generating certificate request if challenge password or other fields include special characters like $, #, quotes or spaces in SCEP.
  • Reaction to Ethernet 802.1X reauthentication failure is now configurable. 

    Parameter

    Restart on reauthentication failure

    Registry

    network.interfaces.ethernet.device%.ieee8021x.restart_on_reauth_failure

    Value

    enabled / disabled

    The default value preserves the traditional behaviour. If the registry key is set to enabled the network connection will get restarted when a reauthentication failure occurs. This way the system might switch to a guest VLAN where authentication is not required.

  • Added support for SFTP protocol (enabled as default) configurable with new registry key. 

    Parameter

    Enable SFTP server

    Registry

    network.ssh_server.enable_sftp_server

    Value

    enabled / disabled

  • Improved general security in regards of SCEP

WiFi

  • Fixed non working Mediatek MT7630e WiFi driver.
  • Added several WiFi drivers (Realtek 8188eu, 8822be, 8150, 8187, 8192ce, 8192de, 8192ee, 8723ae, 8821ae....) to the firmware.
  • Re-enforce configuration after IGEL Setup Assistant exits to ensure consistent state between configuration and system.
  • Added drivers for Realtek rtl8723de and rtl8822be WiFi devices.
  • Added support for StarTech USB300WN2X2C Wireless-N WiFi adapter.

Smartcard

  • Updated OpenSC library to version 0.19.0. Improved handling of PIV and CAC ALT token and other improvements.
  • Fixed problem with ActivClient smartcards in VMware Horizon sessions. Before this fix, smartcard access inside the session was blocked. 

    Parameter

    Smartcard SCardConnect in non-blocking mode

    Registry

    vmware.view.pcsc-connect-nonblocking

    Value

    enabled / disabled

  • Improved PC/SC lite daemon to handle attributes SCARD_ATTR_DEVICE_FRIENDLY_NAME_W and SCARD_ATTR_DEVICE_SYSTEM_NAME_W.
  • Updated Cherry USB2LAN Proxy to version 3.0.0.6.
    • Fixed an issue where the SICCT listener was not restarted when a SICCT connection has been closed by the EGK device (ORS-880).
    • Fixed TLS errors resulting from re-using channels before the EGK device confirmed the disconnection of the previous connection (ORS-735).
    • Increase connection handshake timeout from 1 second to 20 seconds. This is necessary as the EGK device (G87-1505, firmware 2.108.3) does not process the handshake immediately in all situations. (ORS-735).
    • Added timestamp to log output.
  • Fixed AD/Kerberos log on with smartcard and Smartcard Removal Action: Lock Thin Client.
  • Fixed custom PKCS#11 module  for VMware Horizon logon. Before this fix, the parameters did not get effective. 

    Parameter

    Horizon logon with custom PKCS#11 module

    Registry

    vmware.view.pkcs11.use_custom

    Value

    enabled / disabled

    Parameter

    Path to the library

    Registry

    vmware.view.pkcs11.custom_path

    Value


  • Fixed error in IGEL Smartcard which prevented login with personalized cards when certain card holder names contained non-ASCII characters.

HID

  • Added support for Wacom HID 483C touchscreens (HP Pro x2 612 g2).
  • Fixed non working Lenovo KBRFBU71 wireless keyboard.
  • Fixed mouse button mapping.

CUPS Printing

  • Fixed HPLIP related printer drivers.
  • Added missing LaserJet 200 color MFP M276 Postscript to Printer Names for manufacturer HP in the TC Setup under Devices > Printer > CUPS > Printers.

Application Launcher

  • Fixed display order of DNS servers in Application Launcher and About dialog.

Base system

  • IGEL Setup Assistant fixes:
    • Fixed startup on first boot.
    • Retain network configuration if exited via cancel.
    • Fixed graphical glitches
    • Fixed WiFi configuration
    • Prevent startup if an administrator passphrase is set (e.g. from a IGEL System 5 migration).
  • Fixed System suspend on inactivity showing the suspend dialog directly after system resume.
  • Fixed the custom bootsplash scaling when multiple monitors are configured. Necessary to force a re-installation of the custom bootsplash for this fix to take effect. To force a re-installation:
    • Trigger the Update desktop customization command via UMS or
    • Press the Bootsplash update button at IGEL Setup > System > Firmware Customization > Corporate Design > Custom Bootsplash.
  • Fixed sporadic problems with custom bootsplash and wallpaper installation.
  • Fixed the buddy update server so that UD Pocket devices can also update from buddy update servers.
  • Fixed handling of custom environment variables. If values contained white spaces the variables could not be set.
  • Fixed reboot/shutdown when triggered from the lock screen panel.
  • Removed maximize button from on-screen keyboard window.
  • Fixed deletion of debuglog partition content when booted in emergency boot.
  • Fixed handling of optional partitions which are not active as default while booting in emergency mode.
  • Fixed instability in authentication module pam_igelsession.so in some special cases.
  • Fixed ECDSA/ECDH support in HEIMDAL libraries.
  • Fixed black screen issues if hostname contains other characters as 'A-Z a-z 0-9 . _ - ' .
  • Improved debuglog partition based login.
  • Restricted access to command **su** to root and user.
  • Root home is now /root.
  • Removed system group (GID 0) which shadowed root group (GID 0).
  • Stricter folder and file permissions.
  • Prevent flickering problems on 4k 60Hz screens.

Storage Devices

  • Fixed mount issue of PTP devices (Mobile Device Access USB feature must be enabled).
  • Fixed double detection of MTP and PTP. MTP is preferred over PTP now (Mobile Device Access USB feature must be enabled).

Appliance Mode

  • Fixed configuration of post session commands via UMS profile: There is no second reboot required anymore to apply the settings properly in Appliance Mode.

X11 system

  • Fixed graphic card support for HP EliteBook 745 G5 (disabled AMDGPU framebuffer compression as default).
  • Fixed non loading DRM/KMS driver on Spectra Nise 106.
  • Added possibility to change the framebuffer compression for AMDGPU driver

    Parameter

    AMDGPU framebuffer compression.

    Registry

    x.drivers.amdgpu.use_fbc

    Range

    [default][enable][disable]
  • Fixed DP MST handling (fixes Dell XPS Notebook Dock Station monitor issues).
  • Fixed sessions.user_display0.options.lid_events work for eDP also.
  • Fixed VESA only boot with UEFI system.
  • AMDGPU stability fixes applied.
  • Fixed issue with screen configuration for certain cases.
  • Fixed screen configuration getting in endless loop with multi monitor setups.
  • Fixed memleak in igel_drm_daemon.
  • Fixed DRI2 memleak with AMDGPU driver.
  • Changed x.xserver0.force_reconfig registry key (former bool now range). 

    Parameter

    Force a display reconfiguration

    Registry

    x.xserver0.force_reconfig

    Range

    [default][only on Xorg start/restart][always][never]
  • Usage of only on Xorg start/restart as new default for AMDGPU based devices.
  • Removed x.xserver0.composite registry key to prevent problems with AMD/ATI devices.
  • Fixed screen remains black when Monitor Probing (DDC) option is "Off", configurable at setup page User Interface > Display > Options.
  • Fixed wrong detected DisplayPort (eDP instead of DP) for Dell Wyse 5070.
  • Added possibility to configure graphic displays only if DPMS state is not OFF

    Parameter

    Do not reconfigure if monitors are in DPMS off state

    Registry

    x.xserver0.config_on_dpms_on

    Value

    enabled / disabled

Window Manager

  • On-Screen Keyboard will keep aspect ratio when resized via double click on edge.

Shadowing/VNC

  • Fixed instability of Secure Shadowing connector.

Audio

  • Added a workaround for button handling of Sennheiser USB headsets.
  • Fixed saving and restoring of volume controls in Pulseaudio and ALSA.
  • Fixed volume control of the internal speaker in Wyse ZX0D.
  • Improved consistency while storing of changed volume values.
  • Fixed configuration of the default sound output or input on hardware when presence detection in jack connector is missing.

Hardware

  • Fixed shutdown problems for Dell Wyse Thin Client AIO 5212 (use legacy boot instead of EFI).
  • Fixed support for four screens with Nvidia Quadro graphic cards (all current cards which are able to drive four outputs).
  • Fixed graphic issues for HP ProBook 455 G5.
  • Fixed non working StarTech.com USB2DVIPRO2 DisplayLink graphics adapter.
  • Fixed freezes of Intel Baytrail devices.
  • Fixed VDPAU hardware accelerated video support for NVIDIA graphics cards.
  • Fixed non working DisplayLink USB graphics adapter after reboot.

Remote Management

  • Fixed zero touch deployment by adding a timeout to the Setup Assistant abort message.
  • Fixed computation of Unit ID. The Unit ID is the identification key of the thin client in UMS, and also thin client licenses will be bound to the Unid ID. Now the Unit ID is computed once and persistently saved. It consists of the serial number of UD Pocket or the MAC address of a network interface. When multiple network interfaces are present, the interface is selected taking following attributes into account: 
    If a license bound to the interface exists, how it is connected (PCI, SDIO, USB or other) and if it is wireless or wired. 
    It is best practice not to connect external network interfaces when a freshly installed thin client device is booted for the first time, so that the Unit ID will consist of a MAC address of a network interface which cannot be removed from the thin client device.
  • Fixed monitor serial numbers not shown in UMS.
  • Fixed Bluetooth Asset Inventory zombie when bluetooth dongle is removed.
  • Fixed UMS filetransfer - now filetransfer action is triggered also if only the file classification was changed.
  • Fixed Update on shutdown UMS job which could be stucked if update is failed once for some reasons.