Citrix

  • Integrated Citrix Workspace app 19.03.
    Added new registry key to support 1536-bit RSA keys for client authentication. 

    Parameter

    Enable RSA 1536 cipher suit

    Registry

    ica.allregions.enabl_rsa_1536

    Range

    factory default / false / true

  • Added new registry key to enable different cipher suites for client authentication.

    Parameter

    Enables different cipher suites

    Registry

    ica.allregions.sslciphers

    Range

    factory default / ALL / GOV / COM

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 – GOV/ALL
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 – GOV/ALL
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA – COM/ALL
  • Added new registry key to support keyboard layout syncroniyation.

Parameter

Keyboard layout synchronization

Registry

ica.modules.virtualdriver.keyboardsync.enable

Value

enabled / disabled

  • Updated Citrix HDX RTME, used for optimization of Skype for Business, to version  2.8.0-2235

RDP/IGEL RDP Client 2

  • Added Field Collection to RDP session server page

VMware Horizon

  • Added parameters to specify webcam frame size and rate for RTAV.

    Parameter

    Webcam frame width

    Registry

    vmware.view.rtav-frame-width

    Value

    <empty_string>

    Parameter

    Webcam frame height

    Registry

    vmware.view.rtav-frame-height

    Value

    <empty_string>

    Parameter

    Webcam frame rate

    Registry

    vmware.view.rtav-frame-rate

    Value

    <empty_string>

  • Updated Horizon Client to version 5.0.0-12557422
  • Added possibility to easily evaluate Horizon Blast decoder states. By default sessions are evaluated after usage and the result is written into the journal log.
    This can also be used with GUI notifications at runtime.

Teradici PCoIP Client

  • Added Teradici PCoIP Client version 19.05.1. This feature requires an additional license. 

    IGEL SetupSystem > Firmware Customization > Features

    Parameter

    Teradici PCoIP Client

    Registry

    services.addition_teradici_pcoip_client.enabled

    Value

    enabled / disabled

    IGEL SetupSessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings

    Parameter

    Use IGEL Setup for configuration

    Registry

    sessions.pcoip<NR>.options.igel-connection

    Value

    enabled / disabled

    IGEL SetupSessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings

    Parameter

    Server

    Registry

    sessions.pcoip<NR>.options.address

    Value

    <empty_string>

    IGEL SetupSessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Connection settings

    Parameter

    Server certificate verification mode

    Registry

    sessions.pcoip<NR>.options.security-mode

    Range

    [Not required][Warn but allow][Full verification]

    IGEL SetupSessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Login

    Parameter

    Authentication type

    Registry

    sessions.pcoip<NR>.options.auth-type

    Range

    [Password authentication][Smartcard authentication]

    IGEL SetupSessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window

    Parameter

    Window mode

    Registry

    sessions.pcoip<NR>.options.window-mode

    Range

    [User defined][Fullscreen One Monitor][Fullscreen All Monitors][Window]

    IGEL SetupSessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window

    Parameter

    User interface translation

    Registry

    sessions.pcoip<NR>.options.language

    Range

    [System setting][English] [German] [French][Spanish] [Portuguese (EU)] [Portuguese (Brazil)] [Italian][Japanese] [Chinese(Simplified)] [Chinese(Traditional)]

    IGEL SetupSessions > Teradici PCoIP Client > PCoIP Sessions > PCoIP Session > Window

    Parameter

    Log level

    Registry

    sessions.pcoip<NR>.options.log-level

    Range

    [Critical][Error][ Info][Debug]

Network

  • Added a mechanism for retrieving the SCEP challenge password with a custom script
    Setting the following registry key to true enables the use of the script. The registry key network.scepclient.cert%.crypt_password will be ignored. (The script may use it for its own purpose though.)

    Parameter

    Use Challenge Password Command

    Registry

    network.scepclient.cert%.use_challenge_password_command

    Value

    enabled / disabled

  • If the above key is true, the value of this key will be passed to bash for execution. It happens when the SCEP challenge password is needed for creating a certificate signing request. The script is supposed to output the challenge password on its standard output. For convenience any carriage return characters are stripped off the script before execution by bash.

    Parameter

    Challenge Password Command

    Registry

    network.scepclient.cert%.challenge_password_command

    Value

    <empty_string>

Wi-Fi

  • Added support for Realtek 8821CE wireless cards.

Smartcard

  • Added 90meter smart card library. This feature requires an additional license. 

    IGEL SetupSystem > Firmware Customization > Features

    Parameter

    90meter Smart Card Support

    Registry

    services.addition_smartcard_90meter.enabled

    Value

    enabled / disabled

    IGEL SetupSessions > Horizon Client > Horizon Client Global > Smartcard

    Parameter

    Horizon logon with smartcards supported by 90meter library

    Registry

    vmware.view.pkcs11.use_90meter

    Value

    enabled / disabled

    IGEL SetupSessions > Browser > Browser Global > Smartcard Middleware

    Parameter

    90meter Security Device

    Registry

    browserglobal.security_device.90meter

    Value

    enabled / disabled

    IGEL SetupSecurity > Smartcard > Middleware

    Parameter

    90meter 

    Registry

    scard.pkcs11.use_90meter

    Value

    enabled / disabled

Base System

  • Added package ldap-utils which can be used by custom scripts.
  • Updated libwebkit2gtk-4.0-37 to version 1.24.2.

    CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-6251,

    CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378,

    CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4345,

    CVE-2018-4386, CVE-2018-4372

  • Updated EULA displayed in OSC and IGEL Setup Assistant.
  • When the IGEL Setup Assistant is used to download a demo license via WiFi, the local WiFi manager will be enabled by default.
  • Added possibility to configure scheduled commands. Registry keys: system.cron.*

Driver

  • Updated deviceTRUST Client to version 19.1.200.  This release includes support for logical disks attached to the IGEL endpoint, plus bug fixes and stability improvements over the previous 19.1.100 release.
    Logical Disks
    Added support for real-time properties representing the LOGICAL DISKS  attached to the IGEL endpoint. 

    • DEVICE_LOGICALDISK_X_TYPE – Either Fixed or Removable.
    • DEVICE_LOGICALDISK_X_LABEL – The volume label.
    • DEVICE_LOGICALDISK_X_FILESYSTEM – The type of file system.
    • DEVICE_LOGICALDISK_X_PATHS – The paths that the disk is mounted.
    • DEVICE_LOGICALDISK_X_TOTALMB – The total space available on the disk. This property is only available for mounted disks.
    • DEVICE_LOGICALDISK_X_FREEMB – The free space available on the disk. This  property is only available for mounted disks.
    • DEVICE_LOGICALDISK_X_NAME – The name of the underlying physical disk.
    • DEVICE_LOGICALDISK_X_VENDORID – The vendor identifier uniquely identifying the  manufacturer. This property is only available for USB or PCI connected  devices.
    • DEVICE_LOGICALDISK_X_PRODUCTID – The product identifier uniquely identifying  the product. This property is only available for USB or PCI connected devices.
    • DEVICE_LOGICALDISK_X_SERIALNUMBER – The serial number of the physical disk.
    • DEVICE_LOGICALDISK_X_BUSTYPE – The storage bus type linked to the physical  disk.
    • DEVICE_LOGICALDISK_COUNT – The number of logical disks.
  • Added registry keys to modify the intel graphic driver usage of framebuffer compression and power management.

    Parameter

    Power saving display C-States to use. 

    Registry

    x.drivers.intel.dc_setting

    Range

    [Default][Disable][Up to DC5][Up to DC6]

    Parameter

    Use framebuffer compression.

    Registry

    x.drivers.intel.fbc_setting

    Range

    [Default][Disable]

X11 System

  • Added new registry keys to change the xorg input driver for a input device class.

    For keyboards:

    Parameter

    Xorg driver to use

    Registry

    userinterface.keyboard.driver

    Range

    [Evdev] [Libinput]

    For touchpads:

    Parameter

    Xorg driver to use

    Registry

    userinterface.touchpad.driver

    Range

    [Evdev] [Synaptics] [Libinput]

    For touchscreens:

    Parameter

    Xorg driver to use

    Registry

    userinterface.touchscreen.xorg_driver

    Range

    [Evdev][Libinput]

    For mouse:

    Parameter

    Xorg driver to use

    Registry

    userinterface.mouse.driver

    Range

    [Evdev][Libinput]

  • Added some registry keys to disable loading of DRM kernel modules (graphic).

    Parameter

    Disable the loading of the RADEON DRM driver.

    Registry

    x.drivers.ati.disable

    Value

    enabled / disabled

    Parameter

    Disable the loading of the AMDGPU DRM driver.

    Registry

    x.drivers.amdgpu.disable

    Value

    enabled / disabled

    Parameter

    Disable the loading of the i915 DRM driver.

    Registry

    x.drivers.intel.disable

    Value

    enabled / disabled

    Parameter

    Disable the loading of the NVIDIA kernel driver.

    Registry

    x.drivers.nvidia.disable

    Value

    enabled / disabled

    Parameter

    Disable the loading of the NOUVEAU DRM driver.

    Registry

    x.drivers.nouveau.disable

    Value

    enabled / disabled

    Parameter

    Disable the loading of the QXL DRM driver.

    Registry

    x.drivers.qxl.disable

    Value

    enabled / disabled

    Parameter

    Disable the loading of the VMGFX DRM driver.

    Registry

    x.drivers.vmware.disable

    Value

    enabled / disabled

    Parameter

    Disable the loading of the VBOXVIDEO DRM driver.

    Registry

    x.drivers.vboxvideo.disable

    Value

    enabled / disabled

Java

  • Replaced Oracle JRE by AZUL's Zulu JRE version 8.36.0.1.