AVD

  • Updated AVD client to version 1.1.40.
  • Improved login speed.
  • Added support for Okta and Ping Identity IDPs.
  • Fixed resizing if external monitor is disconnected while laptop lid is closed and opened again.

VMware Horizon

  • Updated VMware Horizon client to version 2312-8.12.0-23149323

    Parameter

    Lock user name

    Registry

    vmware.view.lock-user-name

    Range

    [on][off]

    Value

    off

    Parameter

    Lock user name

    Registry

    sessions.vdm_client%.options.lock-user-name

    Range

    [Global setting][on][off]

    Value

    Global setting

ThinLinc

  • Updated ThinLinc to version 4.16.0 to fix CVE-2023-3446, CVE-2023-3817, CVE-2023-4807, CVE-2023-5678.

deviceTRUST

  • Updated deviceTRUST Client Extension to version 23.1.200.

  • Added support for IGEL Remote Desktop (RDP3) sessions.

    Parameter

    deviceTRUST

    Registry

    sessions.msigelrdp.plugins.devicetrust

    Value

    disabled (default)/ enabled

Network

  • Added WWAN support on HP mt440 device with BIOS v1.08.00 and Intel XMM7560 module Firmware v1.16.48.

Smartcard

Base system

  • Added ready-made challenge password retrieval for Microsoft NDES

  • Set the following to NDES for enabling the feature:

    Parameter

    Ready-made Challenge Password Command

    Registry

    network.scepclient.cert%.use_ready_made_challenge_password_command

    Range

    [none][NDES]

    Value

    none

    Parameter

    User name

    Registry

    network.scepclient.cert%.ndes.challenge_password_retrieval.user

    Type

    string

    Value

    empty Default

    Parameter

    Password

    Registry

    network.scepclient.cert%.ndes.challenge_password_retrieval.crypt_password

    Type

    string

    Value

    empty Default

  • If the following is not 'none', https will be used. The default "getca" means the CA certificate received in the SCEP GetCA operation. The full path to a different CA certificate may also be specified

    Parameter

    CA certificate

    Registry

    network.scepclient.cert%.ndes.challenge_password_retrieval.cacert

    Range

    [none (not using https)][from getca operation]

    Value

    from getca operation

    Parameter

    Debug level

    Registry

    network.scepclient.cert%.ndes.challenge_password_retrieval.debuglevel

    Type

    integer

    Value

    0 Default

  • Added registry key to prevent terrapin attack (mitigation is not active as default) on the SSH server:

    Parameter

    Disable weak MACs and Chipers to prevent terrapin attack.

    Registry

    network.ssh_server.enable_terrapin_mitigation

    Type

    bool

    Value

    enabled / disabled (default)

  • Added registry key to prevent terrapin attack (mitigation is not active as default) on the SSH client:

    Parameter

    Disable weak MACs and Chipers to prevent terrapin attack.

    Registry

    network.ssh_client.enable_terrapin_mitigation

    Type

    bool

    Value

    enabled / disabled (default)

  • Added power saving settings for Intel and AMD devices.

  • Changed some powersave settings defaults to Auto so powersave is enabled as default on Lenovo laptops:

    Parameter

    Use powertop auto tune to reduce power usage

    Registry

    system.powersave.powertop_auto_tune

    Range

    [Auto][Enable][Disable]

    Value

    Auto

    Parameter

    Use laptop mode to reduce power usage

    Registry

    system.powersave.laptop_mode

    Range

    [Auto][Enable][Disable]

    Value

    Auto

    Parameter

    Clock down AMDGPU if system is idle (idle action time reached).

    Registry

    system.powersave.clock_down_amdgpu_on_idle

    Range

    [Auto][Enable][Disable]

    Value

    Auto

    Parameter

    Set Ryzen CPU to power save mode if system is idle (idle action time reached).

    Registry

    system.powersave.use_ryzenadj_on_idle

    Range

    [Auto][Enable][Disable]

    Value

    Auto

  • Set idle action default time to 50 seconds:

    Parameter

    Call idle actions on AC after this time of inactivity (greater 10 seconds, value 9 or lower is never)

    Registry

    system.powersave.idle_action_on_ac

    Type

    integer

    Value

    50 Default

    Parameter

    Call idle actions on battery after this time of inactivity (greater 10 seconds, value 9 or lower is never)

    Registry

    system.powersave.idle_action_on_battery

    Type

    integer

    Value

    50 Default

  • Added registry keys for Intel system specific power saving settings:

    Parameter

    Clock down Intel GPU if system is idle (idle action time reached).

    Registry

    system.powersave.clock_down_i915_on_idle

    Range

    [Auto][Enable][Disable]

    Value

    Auto

    Parameter

    Set Intel CPU to power save mode if system is idle (idle action time reached).

    Registry

    system.powersave.use_energy_policy_on_idle

    Range

    [Auto][Enable][Disable]

    Value

    Auto

  • Changed default of power saving settings for screen getting dimmed to 20% after 120 seconds inactivity.

    Setup page

    System > Power Options > Display > Brightness Reduction

    Parameter

    Reduce after

    Registry

    x.xserver%.brightness_on_ac

    Type

    integer

    Value

    120 Default

    Parameter

    Reduce after

    Registry

    x.xserver%.brightness_on_battery

    Type

    integer

    Value

    120 Default

    Parameter

    On inactivity reduce to

    Registry

    x.xserver%.brightness_level_ac

    Type

    integer

    Value

    20 Default

Driver

  • Updated Thales SafeNet Authentication Client to version 10.8.1050.

zoomvdi

  • Updated Zoom VDI plugin to version 5.17.5 (24500).

Hardware

  • Added support for Lenovo USB-C to Ethernet Adapter
  • Added hardware support for HP Elite t755.
  • Added BIOS configuration support for HP Elite t755. IGEL supports the BIOS update mechanism. The BIOS update itself is validated by the device manufacturer and performed at your own risk.