New Features 11.05.100

Citrix

• The new "screen pinning" feature for Citrix desktop sessions has been integrated. With this feature, it is possible to start multiple Citrix desktop sessions on different screens.
  The following parameters have been added for this purpose:

  • This parameter defines the session name on which the settings are to be used. Also the known wildcards like * and ? are possible here.

    More...

    IGEL Setup	Sessions > Citrix > Citrix Global > Window
    Parameter	Citrix session name
    Registry	ica.destination_window.session%.name
    Value	""

  • The parameter defines which mode should be used.

    More...

    IGEL Setup	Sessions > Citrix > Citrix Global > Window
    Parameter	Multimonitor full-screen mode
    Registry	ica.destination_window.session%.multimonitor_mode
    Range	[Restrict full-screen session to one monitor] [Expand full-screen session across all monitors] [Expand the session over a self-selected number of monitors]

  • For "Restrict full-screen session to one monitor" also ica.destination_window.session%.monitor needs to be set.
    For "Expand the session over a self-selected number of monitors" also ica.destination_window.session%.multimonitor_selection needs to be set.
    Further information is also offered via tooltip.

    More...

    IGEL Setup	Sessions > Citrix > Citrix Global > Window
    Parameter	Desktop session start monitor
    Registry	ica.destination_window.session%.monitor
    Range	[1st Monitor][2nd Monitor][3rd Monitor][4rd ...]

    IGEL Setup	Sessions > Citrix > Citrix Global > Window
    Parameter	Monitor selection
    Registry	ica.destination_window.session%.multimonitor_selection
    Value	""

• Integrated HDX RTME 2.9.200 for the usage of SfB (Skype for Business).
• Available Citrix Workspace apps in this release: 20.12 (default), 20.10 and 19.12.

• Added new feature, where multiple audio devices could be mapped inside the sessions. This will display audio devices with their device name and not only HDX audio.

  More...

  Parameter	Multiple Audio Device support
  Registry	ica.module.vdcamversion4support
  Value	true/false

• Note: Bluetooth devices are currently not supported for Device Redirection.

• New centralized Citrix logging in IGEL OS, only one parameter is needed to activate logging.

  More...

  Parameter	Enable logging for Citrix sessions
  Registry	ica.logging.debug
  Value	on/off

• Since Workspace app 20.09, the tool setlog is used to configure the logging. For this purpose, parameters are provided in the registry ica.logging.setlog, but usually nothing needs to be changed.

• Fixed issue: mic and webcam devices can be redirected using Browser Content Redirection.

  More...

  Parameter	Enables mic and webcam redirection using BCR
  Registry	ica.allregions.cefenablemediadevices
  Value	[Factory default is "**"] [False][True]

• Added new parameter Readers Status Poll Period to specify the delay, in milliseconds, for reading information from a smartcard after the card is inserted or removed, or a reader is disconnected, etc.

  More...

  Parameter	Readers Status Poll Period
  Registry	ica.wfclient.ReadersStatusPollPeriod
  Type	Integer
  Value	250/Range 100..5000

• Integrated Zoom Media Plugin 5.4.59458.0109
• The default value of the parameter ica.module.vdcamversion4support was set to "true".

WVD

• Added option to always prompt for password upon session host connection. 

  More...

  Parameter	Always prompt for password upon session host connection
  Registry	sessions.wvd%.options.always-prompt-for-session-password
  Type	bool
  Value	enabled / disabled
  Note:	The same can be achieved on the server side by setting the RDP group policy of "Always prompt for password upon connection".

• Added options to configure Fabulatech for WVD. This includes Webcam redirection, Scanner redirection, and USB redirection.
• The USB redirection configuration is still to be done via Sessions > RDP > RDP Global > Fabulatech USB Redirection. Later releases should mirror that under WVD as well.
• There are global WVD settings to select which redirections (Webcam, Scanner, USB) should be enabled for WVD.
• There is a switch per WVD session that allows to enable/disable Fabulatech for that sessions respectively.

• Note: Technically, the Fabulatech redirections are selected system-wide. That means, when Scanner redirection is enabled for Citrix and Webcam redirection is
  enabled for WVD, both these redirections are visible in Citrix and in WVD sessions. Only disabling Fabulatech support in general for a WVD session is possible.

  More...

  IGEL Setup	Sessions > WVD > WVD Global > Plugins > Fabulatech
  Parameter	Fabulatech Webcam Redirection
  Registry	wvd.plugins.fabulatech.webcam
  Value	enabled / disabled

  IGEL Setup	Sessions > WVD > WVD Global > Plugins > Fabulatech
  Parameter	Fabulatech Scanner Redirection
  Registry	wvd.plugins.fabulatech.scanner
  Value	enabled / disabled

  IGEL Setup	Sessions > WVD > WVD Global > Plugins > Fabulatech
  Parameter	Fabulatech USB Redirection
  Registry	wvd.plugins.fabulatech.usb
  Value	enabled / disabled

  IGEL Setup	Sessions > WVD > WVD Sessions > WVD Session > Plugins > Fabulatech
  Parameter	Fabulatech Webcam/Scanner/USB Redirection
  Registry	sessions.wvd%.plugins.fabulatech
  Value	enabled / disabled

• Integrated Zoom Media Plugin 5.4.59458.0109 with support for WVD.

  More...

  IGEL Setup	Sessions > WVD > WVD Sessions > WVD Session > Plugins > Fabulatech
  Parameter	Zoom VDI Media Plugin
  Registry	sessions.wvd%.plugins.zoomvdi
  Value	enabled / disabled

• Added option to always prompt for username and password upon session host connection.

  More...

  Parameter	Always prompt for username and password upon session host connection
  Registry	sessions.wvd%.options.always-prompt-for-session-username-and-password
  Type	bool
  Value	enabled / disabled

• Added option to preset the workspace view zoom
  

  More...

  Parameter	Initial workspace zoom
  Registry	sessions.wvd%.options.workspacezoom
  Type	string
  Value	100

• Added option to select specific monitors in a multimonitor session.
  Only monitors matching this mask are used.
  • Monitors start with zero (0).
  • If empty all monitors are enabled, which is the default.
  • Can be one or a comma-separated list of the following specifiers without the quotes:
    • "1-2": An inclusive range of monitor indexes.
    • "-2": An inclusive range beginning from 0 to the given monitor index.
    • "2-": An inclusive range beginning with the specified monitor up to index 63, which is the maximum monitor index supported.

    • "2,3,5": A comma-separated list of monitor indexes.

      More...

      Parameter	Multimonitor enable mask
      Registry	sessions.wvd%.options.multimonitormask
      Type	string
      Value	(empty by default)

• If the username is preset with a string that starts with "@", the rest of the string is taken as a preset domain name. The user then only needs to enter her/his username and the domain name is automatically appended for AAD login.

• Additionally, the following parameter has been added to allow/disallow the preset domain being overwritten when the username enters a name that contains an @ symbol itself. If this option is enabled, the entered domain is accepted. Otherwise, the entered domain is replaced by the preset domain.

  More...

  Parameter	Allow preset domain overwrite
  Registry	sessions.wvd%.options.allow-preset-domain-overwrite
  Type	bool
  Value	enabled / disabled

• Added company logo customization, but the download of custom images to the local filesystem needs to be defined. So at the moment, the settings are not really useful, except for disabling the IGEL logo maybe.

  More...

  Parameter	Disable company logo
  Registry	sessions.wvd%.options.no-logo
  Type	bool
  Value	enabled / disabled

  Parameter	Logo image filename
  Registry	sessions.wvd%.options.logo-image
  Type	string
  Value	(empty by default)

• Added background customization, but download of custom images to the local filesystem needs to be defined. So at the moment, the settings are not really useful, except for disabling the background image or defining a solid color for the background.

  More...

  Parameter	Disable background image
  Registry	sessions.wvd%.options.no-background
  Type	bool
  Value	enabled / disabled

  Parameter	Background image filename or color (#rrggbb)
  Registry	sessions.wvd%.options.background-image
  Type	string
  Value	(empty by default) / filename / #rrggbb

VMware Horizon

• Updated Horizon Client to version 2012-8.1.0-17349998
• Integrated Zoom Media Plugin 5.4.59458.0109
• Fixed failure to start Horizon serial port redirection service at boot time

Chromium

• Updated Chromium browser to version 88.0.4324.150.
• H.264 decoding is not supported anymore.
• Custom preferences setup is not supported anymore.
• Reworked custom commandline setup: Enter all commandline parameters in a single entry field.

Wi-Fi

• Added support for WPS push button connect method

Imprivata

• Added: The FUS Username is an editable combobox with prefilled values now. Set of an own string is also possible. 

  • Hostname of the endpoint

  • MAC address of the endpoint

  • Serial number of the endpoint

    More...

    IGEL Setup	Sessions > Appliance mode > Imprivata
    Parameter	FUS User
    Registry	imprivata.fus.user

Smartcard

• Updated A.E.T. Europe SafeSign Identity Client to version 3.6.0.0.

• Added Smartcard PIN passthrough in Firefox and Chromium. The PIN will be cached while logging on via Active Directory/Kerberos with smartcard. In Firefox and Chromium, no further PIN input is necessary to use the smartcard.

  More...

  Parameter	Smartcard PIN caching
  Registry	scard.pkcs11.pin_cache.enable
  Value	enabled / disabled

• Updated SecMaker Net iD to version 6.8.3. New features are:

  • Support for Thales IDPrime 940 SIS & IDPrime 3940 SIS

  • Support for FIPS level 3 versions of Thales IDPrime MD smart cards (based on MD830B and MD840)

  • Support for FINEID 3.0 

  • Updated support for Yubico YubiKey serial numbers (version 5 and later) 

  • Updated support for Feitian ePass FIDO serial numbers (version 99 and later)
    For detailed release information, see https://docs.secmaker.com/net-id-enterprise/6.8/nie-release-notes/nie-683-release-notes.html.

ThinPrint

• Added ezeep by ThinPrint support for WVD
  

  More...

  IGEL Setup	Sessions > WVD > WVD Sessions > WVD Session > Printing > ezeep by ThinPrint
  Parameter	Printing with ezeep
  Registry	sessions.wvd%.printing.thinprint-ezeep
  Value	enabled / disabled
  Note	Ezeep is directly related to the ThinPrint configuration under Devices > Printer > ThinPrint > ... When ThinPrint configuration is changed, you need to close running WVD sessions and reconnect to make ThinPrint/Ezeep work again for the related session.

Application Launcher

• Added optional custom message in 'About' page of application launcher. The message is displayed below the License Information section. The text can be plain text or HTML, supported HTML subset are mentioned in Qt RichText.

  More...

  Parameter	Custom message
  Registry	userinterface.launcher.custom_message
  Value	empty

Cisco Webex

• Integrated Cisco Webex Meetings 41.2.0.142
• Integrated Cisco Webex Teams 41.1.0.17621

Cisco JVDI Client

• Integrated Cisco JVDI 12.9.3 client

Base system

• Added post-session command support for WVD sessions.
• Updated OpenVPN to version 2.5.0.
• Updated OpenSSH to version 8.4p1-2.
• Added warning at boot time if Workspace Edition maintenance has expired.
• Updated Fluendo multimedia codecs.
• Updated Linux kernel to version 5.9.16.

• Added inhibit screensaver when Zoom, Teams or Skype for Business meeting is active. Possible for native clients and Citrix optimization plugins.

  More...

  Parameter	Enable debug logging for igel-screensaver-monitor
  Registry	debug.tools.igel-screensaver-monitor.enable
  Value	enabled / disabled

• Added functionality to change the desktop icon font color via new Setup parameter.

  More...

  IGEL Setup	User Interface > Desktop
  Parameter	Desktop Icon Font Color
  Registry	windowmanager.defaulttheme.desktop.iconfont_color

CID Key Agent

• Update of CID Key Agent to version 6.5.0-2

Driver

• Updated Olympus dictation driver for Citrix and RDP to version 20201118.
  The changes are:
  • Support motion events for Olympus RecMic devices
  • Support integration with the Olympus AudioSDK for limited server-side device communication
• Updated Crossmatch driver to version 0125.
  The changes are:
  • Improved USB encryption for the 4500 readers
  • Support for the 5300-101 reader (the 5300-100 was already supported)
• Updated deviceTRUST client plugin for Citrix and RDP to version 20.1.200.0. Detailed release notes can be found at https://docs.devicetrust.com/docs/releases-igel-20.1.200/.

X11 system

• Enhanced x.xserver%.mirror_mode registry key with new Scaling down mode (Scales all monitors to the monitor with the lowest resolution)

  More...

  Parameter	Choose the mode which should be used for mirroring monitors if resolution differs
  Registry	x.xserver%.mirror_mode
  Range	[Default] [Biggest common resolution] [Scaling] [Scaling down]

Audio

• Added EPOS Connect 5.0.1.2795
  

  More...

  IGEL Setup	Devices > Unified Communications > EPOS Audio > EPOS Connect
  Parameter	Enable EPOS Connect
  Registry	devices.epos.connect.enable
  Type	bool
  Value	enabled / disabled

  IGEL Setup	Devices > Unified Communications > EPOS Audio > EPOS Connect
  Parameter	Tenant ID
  Registry	devices.epos.connect.tenant_id
  Type	string
  Value	''

  IGEL Setup	Devices > Unified Communications > EPOS Audio > EPOS Connect
  Parameter	Backend Endpoint
  Registry	devices.epos.connect.tenant_url
  Type	string
  Value	''

  IGEL Setup	Devices > Unified Communications > EPOS Audio > EPOS Connect
  Parameter	Proxy
  Registry	devices.epos.connect.proxy
  Type	string
  Value	''

  Registry	devices.epos.connect.log_level
  Value	Trace / Debug / Information / Warnings / Errors / Exceptions / No logs

• Pulseaudio upgraded to the 13.99 version.

• Added parameter to differentiate sound volume for applications. If the parameter is set to true, each application can set its own volume level. Otherwise, the sound volume is set to the same value as the default volume for output and input device respectively.

  More...

  Registry	userinterface.sound.app_volume_ctrl
  Value	true / false

Misc

• Added DriveLock Agent 20.1.4.30482 for USB device access control.

  More...

  IGEL Setup	Devices > Storage Devices > DriveLock
  Parameter	Enable DriveLock agent
  Registry	devices.drivelock.enable
  Value	enabled / disabled

  IGEL Setup	Devices > Storage Devices > DriveLock
  Parameter	DES server URL
  Registry	devices.drivelock.server
  Value	(empty)

  IGEL Setup	Devices > Storage Devices > DriveLock
  Parameter	Tenant
  Registry	devices.drivelock.tenant
  Value	root

Evidian

• Added new session type RD Web Access.
• Updated Evidian to version 1.5.7617.

Hardware

• Added hardware support for new IGEL UD7-LX 20 (H860C).
• Added hardware support for LG 34CN650N AiO.
• Added hardware support for Dell Wyse Z Class thin client.
• Added hardware support for Lenovo ThinkCentre M70q.
• Added hardware support for Dell Wyse 5470.
• Added hardware support for Lenovo L14.
• Added hardware support for Lenovo ThinkCentre M75n.
• Added hardware support for Lenovo 14w.
• Added hardware support for LG CN65 All in one.
• Added hardware support for DELL LATITUDE 5510.
• Added hardware support for ELO i2 Touch all-in-one (15 and 22) inch.
• Added detection of UD Pocket UC5-LX 2.
• Added support for headset Jabra Evolve2 65.

Remote Management

• Added support for Reportable Heartbeats to the UMS.
• Added support for exchanging ICG certificates.

• The remote management of the endpoint device automatically installs TLS certificates provided by the UMS into the local trusted CA certificates storage. The automatic deployment of TLS certificates to endpoint devices requires UMS 6.06.100 or higher. This feature allows verifying certificates used in downloading files from the UMS, downloading of a firmware update and custom partition archives over HTTPS or FTPS protocols. The verifying of certificates must be enabled by the parameter system.security.remote_management.tls_verify_peer.

  More...

  Registry	system.security.remote_management.tls_verify_peer
  Value	true / false

  Registry	system.security.remote_management.tls_hostname_validation
  Value	true / false

• Added support for UMS commands to store and remove ICG configuration.

• Introduced parameters for ICG Websocket connections: debug log, network timeout (in seconds) and ping-pong interval (in seconds). The parameters are applied on the next established ICG agent connection and ICG tunnel connections: VNC and Secure Terminal. 

  More...

  Registry	system.icg.websocket.debug
  Value	off / all / tunnel / agent

  Registry	system.icg.websocket.network_timeout
  Value	30

  Registry	system.icg.websocket.pingpong_interval
  Value	120

• IGEL Remote Management agent sends now keep-alive packets to the ICG server to prevent the Websocket connection to the ICG server from being closed by networking infrastructure. The Websocket's ping-pong mechanism is used for that purpose (see RFC6455). The keep-alive interval in seconds can be configured by the parameter system.icg.websocket.pingpong_interval, 0 disables the keep-alive mechanism.

  More...

  Registry	system.icg.websocket.pingpong_interval
  Value	120

Fabulatech

• Updated FabulaTech USB for Remote Desktop to version 6.0.28
• Updated FabulaTech Scanner for Remote Desktop to version 2.7.0.1
• Fixed FabulaTech scanner redirection not working for Citrix if it's exclusively enabled in IGEL Setup.