Archive for December 8th, 2014

Firmware release: IGEL Universal Desktop LX/OS Version 5.05.100

Monday, December 8th, 2014

IGEL Universal Desktop OS 2
===========================
Version 5.05.100
Release date 2014-12-08
Last update of this document 2014-12-08
====================
Versions:
====================
Clients:
– 2X Client 10.1-1263
– Citrix Access Gateway Standard Plug-in 4.6.3.0800
– Citrix HDX Realtime Media Engine 1.5.0-115
– Citrix Receiver 12.1.8.250715
– Citrix Receiver 13.0.4.281908
– Client for RedHat Enterprise Virtualization Desktops 3
– Dell vWorkspace Connector for Linux 7.7.3
– Ericom PowerTerm 9.2.0.6.20091224.1-_rc_-25848
– Ericom Webconnect 5.6.0.4000-rel.20413
– FabulaTech USB for Remote Desktop 5.0.4
– Firefox 17.0.11
– IBM iSeriesAccess 7.1.0-1.0
– IGEL Legacy RDP Client 1.0
– IGEL RDP Client 2.1
– Imprivata OneSign ProveID Embedded
– Leostream Java Connect 3.0.57.0
– NCP Secure Client (Enterprise) 3.25-rev15580-i686
– NX Client 4.2.27
– Oracle JRE 1.7.0_71
– Systancia AppliDis 4.0.0.14
– Thinlinc Client 3.2.0
– ThinPrint Client 7.0.63
– Totem Media Player 2.30.2
– Virtual Bridges VERDE Client 7.1.1_rel.24005
– VMware Horizon client 3.1.0-2095124
– Voip Client Ekiga 3.2.7

Dictation:
– Driver for Grundig Business Systems dictation devices
– Driver for Olympus dictation devices
– Legacy Philips Speech Driver 5.0.10
– Philips Speech Driver 12.2.7

Smartcard:
– PKCS#11 Library A.E.T SafeSign 3.0.93
– PKCS#11 Library Athena IDProtect 623.07
– PKCS#11 Library Gemalto IDPrime 1.1.0
– PKCS#11 Library SecMaker NetID 6.1.1.21
– Reader Driver ACS CCID 1.0.5
– Reader Driver HID Global Omnikey CCID 4.0.5.4
– Reader Driver MUSCLE CCID 1.4.13
– Reader Driver Omnikey CCID legacy-3.6.0
– Reader Driver Omnikey RFID legacy-2.7.2
– Reader Driver REINER SCT cyberJack 3.99.5final.SP03
– Reader Driver Safenet / Aladdin eToken 8.1.0-4
– Reader Driver SCM Microsystems CCID 5.0.27
– Resource Manager PC/SC Lite 1.8.12

System Components:
– Graphics Driver ATI 7.3.0
– Graphics Driver NVIDIA 304.117
– Graphics Driver INTEL 2.99.910
– Graphics Driver VIA 5.76.52.92-151843
– Kernel 3.13.11.8 #38.65-udos-r1207
– Xorg X11 Server 1.15.1
====================
Information:
====================
IMPORTANT:
This releases integrates two Citrix Receiver versions 12 and 13.
You can only choose to run either of the versions.
The old 12 Citrix Receiver is still available for compatibility reasons and
activated by default. Version 13 of the Citrix Receiver can be activated at
the local setup of the device or through a UMS profile configuration.

IMPORTANT:
Dual monitor configuration for “unsupported hardware” works only if “native
driver support” works properly. It is a prerequisite to assure that the
native driver is really working, as the fallback VESA driver does not provide
any dual monitor configuration. Have a look at Application Launcher’s
“About tab->Hardware-Graphics Chipset”. If VESA is listed there the native
driver does not work and dual monitor configuration is not functional.
====================
Removed features:
====================

[Hardware]
– Removed support for i586 platforms. At least i686 is required now.

[Cisco VPN]
– Removed outdated Cisco VPN client from firmware.

[CUPS Printing]
– Removed deprecated IPP printer browsing, not supported in CUPS 1.7.2.
====================
Known issues:
====================
[Dell vWorkspace Connector]
– Seamless applications exported from Win8/8.1 desktops show display
errors when dragged to the outer edges of a screen.
– Dual view configuration: Flash redirected windows can appear on
wrong screen.
– At the start of a seamless session the window is initially maximized
before being resized to the correct size.
– Windows XP sessions might not work properly anymore.
– Only standard 105 keys PC keyboards are supported.
Not supported anymore: Trimodal, Sun Type 6 or IBM 122 keys.
– Mapping of drives to a dedicated drive letter is not possible anymore.
– If COM-Port Redirection is enabled all linux serial ports (/dev/ttySx) will
be mapped to session.
– If printer mapping is enabled all printers configured in CUPS are mapped.
– At Multimedia Redirection sound redirection with WMV/WMA streams
is not working.
– Sessions starts only if RDP Local Logon Window
(IGEL Setup->Sessions->RDP->RDP Global->Local Logon) is active.

[VMware Horizon]
– Remote Applications are not seamless integrated in the local desktop.
Rather they are displayed in an extra window decorated by the TC’s
window manager.
If you start more applications defined at the same session, all are displayed
inside this window.
The default size of this window can be defined in the Window section of the
Horizon session.

[RDP/IGEL RDP Client 2 only]
– If EGFX is in use, pressed mouse buttons will be released after at least 32
seconds.
– RD Web Access sessions with Passthrough authentication will only work if
IGEL registry parameter auth.login.krb5_enterprise is set to false.
– RemoteFX cannot be disabled in RD Web Access sessions.

[IGEL Setup]
– Labels are missing in color picker dialog, only in UDC2 firmware.

[Hardware]
– Instability with Intel Haswell based chipset graphics (e.g. HP t820):
Sometimes monitors remain black after boot.
– Dual monitor clone mode with Intel based graphics and different resolutions
of the monitors can lead to distortion.

====================
New features:
====================
[ICA]
– Updated Citrix HDX RealTime Optimization Pack LX to version 1.5.0.
– Updated Philips Speech drivers to version 12.2.7.
– Updated Grundig dictation driver.
– Added use of the built-in authentication management of the
Citrix Receiver 13 instead of the IGEL mechanism. This disables credential
related features like passthrough, auto-logon etc. To enable this mode,
turn on the IGEL registry parameter “ica.pnlogin.use_ctx_auth_mgmt”.

[RDP]
– Updated Philips Speech drivers to version 12.2.7.
– Updated Grundig dictation driver.

[VMware Horizon]
– Updated VMware Horizon Client to version 3.1.0-2095124.
– Added Remote Application support to start a specific application published
by a Horizon 6 server.
In the IGEL Setup go to “Sessions->Horizon Client->Horizon Client Sessions”
choose a session or create one and specify under Connection Settings
the application name to start and set the session type to “Application”.
(the checkbox “Autoconnect” should also be enabled).

In the IGEL setup registry the new keys can be found in each Horizon session:
sessions.vdm_client%.options.appname
sessions.vdm_client%.options.sessiontype (Default is “Desktop”)

– Changed the Ctrl+Alt+Delete behavior (for PCoIP sessions) to three options:
– show Horizon Client’s chooser dialog to either send the key combo to the
host/VM or disconnect from the session
– send Ctrl-Alt+Delete directly to the host/VM
– do nothing
The corrosponding key in the IGEL registry can be found in:
vmware.view.handle-ctrl-alt-del (default is “Show chooser”)
For sessions connected via Microsoft RDP the “Show chooser” dialog is the only option.
– RDP sessions are using the IGEL RDP Client 2.1 now instead of the
IGEL Legacy RDP Client 1.0.
– Added browser support for vmware-view. URL scheme: vmware-view://…

[Dell vWorkspace Connector]
– Updated Dell vWorkspace Connector for Linux to version 7.7.3.
– Added switch to enable bidirectional audio at IGEL setup “Sessions->
RDP->RDP Global->Sound->Audio capture” for global configuration
or session-specific at IGEL setup “Sessions->
vWorkspace Client Sessions->[session name]->Mapping->Enable Microphone mapping”
(registry keys:
– rdp.winconnect.rdpeai.enable, default: disabled
– sessions.qrdesktop<NR>.option.enable-microphone, default: disabled)
– Added switch for font-smoothing at IGEL setup “Sessions->
RDP->RDP Global->Performance->Enable Font smoothing” for global configuration
or session-specific at IGEL setup “Sessions->
vWorkspace Client Sessions->[session name]->Performance->Enable font smoothing”.
(registry keys:
– rdp.winconnect.enable-font-smoothing, default: disabled
– sessions.qrdesktop<NR>.option.enable-font-smoothing, default: disabled)
– Added switch for vWorkspace connection bar at IGEL setup “Sessions
->RDP->RDP Global->Enable Toolbar” for global configuration
or session-specific at IGEL setup “Sessions->vWorkspace Client Sessions->
[session name]->Window->Display the connection bar when in full screen mode”.
(registry keys:
– rdp.winconnect.enable-toolbar, default: disabled
– sessions.qrdesktop<NR>.option.conbar_fullscreen, default: enabled)

[Leostream]
– Updated Leostream Connect to version 3.0.57.0.

[Systancia AppliDis]
– Added AppliDis Client by Systancia with the following parameters:
“IGEL Setup->Sessions->AppliDis->AppliDis Session->[session name]->Connection”:
“Server URL” (sessions.applidis<NR>.url) default: Your Server
“HTTP/HTTPS server port” (sessions.applidis<NR>.port) range: http, https default: http
“Connect Type” (sessions.applidis<NR>.ctype)
range: AppliDis SLB Server, AppliDis Server (WINEXPLODIS) default: AppliDis SLB Server
“AppliDis SLB Connector Mode” (sessions.applidis<NR>.afilter) default: [empty]
“IGEL Setup->Sessions->AppliDis->AppliDis Session->[session name]->Options”:
“Language” (sessions.applidis<NR>.lang) range: English, French default: English
“Working Directory” (sessions.applidis<NR>.pathdem) default: [empty]
“Lock Connection Type” (sessions.applidis<NR>.ltype) default: true
“RDP Mode” (sessions.applidis<NR>.mode)
range: classic RDP, console mode RDP default: classic RDP
“Hide Close Panel” (sessions.applidis<NR>.hideclose) default: true
“Close AppliDis Client on closing session” (sessions.applidis<NR>.close) default: true
“Force Insecure mode” (sessions.applidis<NR>.insecure) default: false
“Debug Mode” (sessions.applidis<NR>.verbose) default: false
“Activate SSL Mode” (sessions.applidis<NR>.ssl) default: false
“Username” (sessions.applidis<NR>.user) default: [empty]
“Password” (sessions.applidis<NR>.crypt_password) default: [empty]
“Purge Credentials” (sessions.applidis<NR>.purge) default: true
“Full Path to Cert” (sessions.applidis<NR>.cert) default: [empty]
“Timeout” (sessions.applidis<NR>.timeout) default: 30
“AppliDisXML access path” (sessions.applidis<NR>.path) default: [empty]
“Hide Filter Panel” (sessions.applidis<NR>.hfilter) default: false
“Hide Service Panel” (sessions.applidis<NR>.stype) default: false
“Hide Server Panel” (sessions.applidis<NR>.hideserver) default: false

[NX-Client]
– Updated NX Client to version 4.2.27.
– Added new parameter to choose protocol at
IGEL setup “Sessions->NX->[session name]->Server->Connection Service”,
range: SSH, NX default: SSH.
– Added new parameter to choose logon method at IGEL setup “Sessions->NX->[session name]->Logon->Logon Method”,
range: Password, Private key default: Password.

[Firefox]
– Updated Flash Player download URL to version 11.2.202.418.
[Desktop]
– Updated the integrated screensaver to show user defined image slideshow and/or a digital clock.
By default the values are set to present the original behavior of the screensaver.

The traditional parameter sessions.xlock0.options.custom_logo may now refer
either to a single image file or to a directory that contains an multiple images.
Default value is still empty, this means that the IGEL logo will be displayed.
Supported image formats are PNG and JPEG. Files are only recognized as images if their filenames stick
to the following suffixes (.jpg, .png).

New parameters:
* sessions.xlock0.options.time_image_saver.image_enable (boolean)
Image display is enabled only if this is true.
Default: true
* sessions.xlock0.options.time_image_saver.image_display_mode (string)
Image display mode
Possible values:
-smallhopping
Like the traditional screensaver: A small image appears for some time at a
random position, the screen gets blank for some time, and the image
appears again at a random position.
-mediumhopping
Same as smallhopping, only the image is larger.
-centercutout
The image is scaled to at least fullscreen size and may be cropped on two
sides to match the screen’s dimension.
-letterbox
The image is scaled to at most fullscreen size and may leave stripes of the
background visible on two sides.
Default: smallhopping
* sessions.xlock0.options.time_image_saver.image_duration (integer)
Time in seconds before images change. This has no effect if
sessions.xlock0.options.custom_logo is not a directory, that contains
more than one image.
(In the hopping modes, images can only change while hopping. So this value
is not exact in these cases)
Default: 10
* sessions.xlock0.options.time_image_saver.image_per_monitor (boolean)
If true, there is one image per display.
If false, a single image is used for all displays. In the case of the
fullscreen modes the single image is extended across all displays.
Default: true
* sessions.xlock0.options.time_image_saver.time_monitor (integer)
The display number (starting from 1), selects where the clock is shown.
0 means all displays, -1 means none
Default: -1
* sessions.xlock0.options.time_image_saver.time_size (string)
Clock size (relative to the width of the display where the clock is shown)
Possible values: tiny, small, medium, large, huge
Default: medium
* sessions.xlock0.options.time_image_saver.time_pos_h (string)
Horizontal clock position
Possible values left, center, right
Default: left
* sessions.xlock0.options.time_image_saver.time_pos_v (string)
Vertical clock position
Possible values top, center, left
Default: top
* sessions.xlock0.options.time_image_saver.time_seconds (boolean)
Seconds are only shown, if this is true
Default: false
* sessions.xlock0.options.time_image_saver.time_background_shape (integer)
Shape of the clock background. Possible values: 0 means a rounded rectangle,
1 means an outline around the time string’s characters.
Default: 0
* sessions.xlock0.options.time_image_saver.time_background_color (editable)
The clock background color.
Default: #000000 (black)
* sessions.xlock0.options.time_image_saver.time_background_alpha (integer)
The opacity of the clock’s background, a percentage value.
Default: 75
* sessions.xlock0.options.time_image_saver.time_foreground_color (editable)
Color of the clock characters
Default: #fbc100 (~ yellow)
* sessions.xlock0.options.time_image_saver.screen_background_color (editable)
Screen background color
Default: #000000 (black)

Colors are specified as #RRGGBB where each R, G, and B are hexadecimal digits.
RR, GG, and BB, are the color’s red, green, and blue components respectively.

[Hardware]
– Added Base Support for new product UD5-LX 50 based on hardware IGEL-H830C.
– Added full support in UDC2 for the following third party devices:
– DELL/Wyse D10D
– DELL/Wyse Z50D
– Fujitsu Futro S720
– HP t620
– HP t820
– Added ELO Multitouch driver 2.0.0, which supports, among others, ELO Devices
1939L, 1717L and 1723L. For more details see ELO’s support web site.

[Desktop]
– The LVDS output is now enabled by default with ATI graphics chipsets to support
more laptop devices out of the box.
The LVDS can be disabled by registry key x.drivers.ati.ignore_lvds_output.

[Network/WiFi]
– Added Broadcom Wireless driver 802.11 Linux STA, version 6.30.223.248 which
supports Broadcom BCM4311-, BCM4312-, BCM4313-, BCM4321-, BCM4322-,
BCM43224-, BCM43225-, BCM43227- and BCM43228-based hardware.
Tested with Dell Latitude E5500 (Broadcom 4322).
– Added support for WIFI adapter Mediatek MT7630 PCI-E 802.11b/g/n built in
HP ProBook 470G1.

[CUPS Printing]
– Updated CUPS printing system to version 1.7.2.

[Remote Management]
– Improved Remotemanagment Configuration. Thin Client can get a UMS
structure tag from DHCP, IGEL Setup or UMS registration tool and send
the option to UMS.

[Java]
– Updated Java Runtime Environment to version 1.7.0 U71.

[Smartcard]
– Updated PC/SC smart card service pcsc-lite to version 1.8.12.
– Added new type of IGEL license smart card with
ATR 3B F9 13 00 00 81 31 FE 45 4A 43 4F 50 32 34 32 52 33 A2.

[base system]
– Updated Kernel to Ubuntu Trusty version 3.13-38.65.
– Updated base system to Ubuntu Trusty
– Updated Intel graphics driver to version 2.99.910.
List of supported graphics cards on
https://www.igel.com/en/service-support/linux-3rd-party-hardware-database.html
– Updated ATI/Radeon graphics driver to version 7.3.0.
List of supported graphics cards on
https://www.igel.com/en/service-support/linux-3rd-party-hardware-database.html
– Updated Nvidia graphics driver to version 304.117.
– Updated VIA graphics driver to version 5.76.52.92-151843.
– Updated Ethernet/WiFi drivers to Ubuntu Trusty.
List of supported network cards on
https://www.igel.com/en/service-support/linux-3rd-party-hardware-database.html
– Updated Realtek r8168 Vendor Ethernet driver to version 8.038.00.
– Updated VIA VT6656 WiFi driver to version 1.21.03.
– Updated Perle serial kernel driver.
– Updated ALSA sound system to Ubuntu Trusty version 1.0.27.2.
List of supported sound cards on
https://www.igel.com/en/service-support/linux-3rd-party-hardware-database.html
– Updated Pulseaudio to version 4.0.
– Updated Gstreamer multimedia framework to version 0.10.31.
– Updated OpenSSH daemon to version 6.6.1.
– Updated TC Setup to version 4.8.10.
– Added notification if a domain account password will expire soon.
In this case the user can change the password directly. The new feature can be
controlled with parameter auth.passwd.enable_passwd_expiry_notification
(default value is true).
– Added Accessory->Change Password in IGEL Setup to provide a password change
dialog for domain account passwords.
– Added “Total operating time” line on About page of Application Launcher.
– Added the possibility to produce strace log files for debugging purposes in
a more convenient way. Call the new script “igel_enable_strace programfile”
to create a wrapper for a program. After that, execute the program creates
a compressed strace log in “/tmp/programfile.strace.gz” and is ready to be
sent to the IGEL support. Disable the logging with
“igel_disable_strace programfile”. Caution: Please be aware that the log file
resides in the system’s RAM and can become very large, especially for
programs with GUI.
Known Issue: There are problems with programs which need command line
password authentication and/or try to perform user switching.
====================
Resolved issues:
====================
[ICA]
– Fixed window focus after closing a dialog. The focus will be set correctly.
– Added a workaround to deal with windows of a very low height, that show up
in the taskbar although they shouldn’t (e.g. some tooltip windows in seamless
Citrix sessions). To use this, adjust the parameter
“windowmanager.wm0.variables.tooltipsize” in the registry. A useful value for
single-lined tooltip windows would be 20.

[ICA/Citrix Receiver 13 only]
– Updated Citrix Receiver to version 13.0.4.281908.
This fixes amongst others the following issues:
– Receiver for Linux might fail if you enable PersistentCacheSize.
– The session might become unresponsive when transferring data over a
serial port with Receiver for Linux.
– Fixed autostart of applications. The visual feedback now only shows the
application name.

[RDP/IGEL RDP Client 2 only]
– Fixed RDP drive mapping issue when moving sub-directories on
Windows 2008r2 servers.
– Fixed published applications whose alias name is like “NAME (1)”.
– Fixed synchronization of lock keys (like num lock, caps lock and so on).
– Fixed login with user names which have a domain alias as a part of the name.
– Fixed error in device name handling for device based RD CAL license
management (device name has been shortened by mistake)
registry parameter to select in which way the fix should be used:
rdp.winconnect.cal-handling
IMPORTANT: Be careful while using this option. Read for this issue FAQ
“Identical IGEL device names in windows server CAL maanagement” at
http://edocs.igel.com
Range:
– Fixed mode:
RDP client starts immediately with fixed handling. Activate only if
the devices are new. Otherwise it can happen that more then one license
will be used.
– Legacy mode:
The same behavior as before. The error is going to persist.The assigned
licenses will be stored on the device.
– Migrate CALs:
Use this mode if you want to correct the names of IGEL devices which are
already in use.
default: Legacy mode.
– Added support for various multimedia keys within RDP sessions, e.g on
keyboard Logitech MK270.
– Improved handling of server redirection. There was a bug which randomly
crashed the client application once it got redirected by the server.

[VMware Horizon]
– Fixed Horizon sessions using protocol RDP to use global RDP settings
specified at IGEL Setup “Sessions->RDP->RDP Global”.

[Dell vWorkspace Connector]
– Fixed USB Redirection issues.
– Fixed hotkey handling.

[PowerTerm]
– Fixed parameter at IGEL setup
“Sessions->PowerTerm Terminal Emulation->[session name]->Preferences->User Interface Language”
to be linked to instance parameter instead of template parameter.

[IBM iSeriesAccess]
– Fixed system language detection in IBM iSeriesAccess sessions.

[Imprivata oneSign embedded]
– Fixed USB-Redirection of VMware Horizon when triggered by Imprivata.
– Fixed dual screen of VMware Horizon when it’s triggered by Imprivata.

[base system]
– Improved robustness of the TC settings storage against corruption on
power loss of the TC.
– Applied bash security patches for CVE-2014-6271, CVE-2014-6277 and
CVE-2014-6278 (ShellShock Bug).
– Fixed Active Directory domain logon with user principal names (UPN):
Before logon was only working if the first part of the UPN was the same
as the sAMAccountName of the user.

[TC Setup]
– Fixed French translation on IGEL Setup page
“Sessions->Citrix->ICA Global->Flash”: “Activ‚” and “D‚sactiv‚” were swapped.
– Improved color picker in setup to show only relevant channels (it was showing
transparency channel in OS version).
– Added license acceptance dialog when enabling SecMaker Net iD Software
in IGEL Setup.

[Desktop]
– Fixed display gamma correction setting on UD2 and UD3.
– Removed duplicate non working battery icon.
– Fixed after boot network notification “Successfully connected”
did not disappear automatically, if automatic update check via FTP
was configured.

[Network/WiFi]
– Introduced a new parameter to disable HT (High Throughput) capabilities
in driver for Ralink RT3572 WIFI adapter. The parameter is available in
the registry of the IGEL Setup
(network.interfaces.wirelesslan.device0.driver.disable_ht).

[CUPS Printing]
– Fixed printing to USB printer when the print job was queued before the
printer is online.

[Remote Management]
– Fixed automatic registration at UMS after a firmware update failed.