New Firmware Release: IGEL Universal Desktop LX/OS 4.12.100

Hello Folks,

yesterday IGEL Technology has released a big new major release:

IGEL Universal Desktop OS


Version 4.12.100

May 02 2013





Dual monitor configuration for “unsupported hardware” works only if “native

driver support” works properly. It is a prerequisite to assure that the

native driver is really working, as the fallback VESA driver does not provide

any dual monitor configuration. Have a look at Application Launcher’s

About tab->Hardware-Graphics Chipset. If VESA is listed there the native

driver does not work and dual monitor configuration is not functional.




– Citrix Receiver

– Citrix Access Gateway Standard Plug-in

– IGEL RDP Client 1.0

– FabulaTech USB for Remote Desktop 3.1.2

– VMware View client 2.0.0-1049726

– Quest vWorkspace Client 7.6

– Leostream Java Connect

– Ericom PowerTerm

– Ericom Webconnect

– IBM iSeriesAccess 7.1.0-1.0

– Firefox 17.0.5

– Totem Media Player 2.30.2

– Voip Client Ekiga 3.2.7

– Thinlinc Client 3.2.0

– NX Client 3.5.0-7

– Cisco VPN Client

– NCP Secure Client (Enterprise) 323_038.i686

– ThinPrint Client 7.0.54

– Xorg X11 Server 1.11.4

– Xorg Xephyr 1.7.6

– PC/SC Lite 1.8.1

– MUSCLE CCID Driver 1.4.5

– Omnikey CCID Driver 3.6.0

– Omnikey RFID Driver 2.7.2

– SCM Microsystems CCID Driver 5.0.21

– Safenet / Aladdin eToken Driver 8.0.5-0

– A.E.T SafeSign PKCS#11 Library 3.0.1785

– Gemalto .NET PKCS#11 Library 2.1.0

– SecMaker NetID PKCS#11 Library

– Client 0.8 for RedHat Enterprise Virtualization Desktops 3

– INTEL Graphics Driver 2.17.0

– ATI Graphics Driver 6.14.99_git20111219

– VIA Graphics Driver

– VIA Legacy Graphics Driver 4.1.83


If disk size is sufficient (> 512 MB):

– NVIDIA Graphics Driver 304.60

– SAP GUI java710rev6

– 2X Client 10.1-1263



Known issues:


[Client for RedHat Enterprise Virtualization for Desktops 3]

– USB Redirection is not supported in this firmware


[Quest vWorkspace]

– Multimedia Redirection:

Sound redirection is not working with WMV/WMA streams

– USB Redirection does not work reliable


[NVIDIA graphics support]

– In dual screen configurations DPMS monitor saving mode creates

display content corruptions on secondary VGA display after resume



New features:



– RDP RemoteApp: Improved icon handling

– A certificate verification error is shown now in the certificate dialog

during RDP session startup.



– Updated Citrix Receiver to version

– Updated Citrix HDX Realtime Media Engine to version 1.2.0-39,

used for webcam redirection in Microsoft Lync Client.

– New high color icons in XenApp/Program Neighborhood

– Citrix XenApp/Program Neighborhood enhancements:

– If a user is logged in, the icons to start a new login window are now hidden.

– If a disconnect session is configured on desktop, start menu, application launcher or

desktop context menu, the logoff session forces a logoff now. The “disconnect” session

can be configured by registry keys:





– It is now possible to use UPN notation (e.g. “”) in XenApp/PN login

windows. The following applies ONLY when using alternative domain suffixes (for example

if the domain is called “”, but a user should be able to login with

“user@othername.local”): Due to a bug in the Citrix Receiver it is currently not possible to

use alternative domain suffixes without providing the “real” domain name as well. I.e. the

user name entry field may contain an alterative domain suffix in UPN notation (like “”),

but the domain entry field may not be empty in this case. Instead it has to contain the real domain (“”).

To make this less confusing for the user, it is now possible to lock or even remove the domain entry field in

PN/XenApp login windows. If the domain field is hidden, the first entry in the domain list is used for login.

To use UPN notation with alternative domain suffixes, do the following:

1. In the setup or in UMS go to the page Sessions > ICA > Citrix XenApp/Program Neighborhood > Server

2. Add the real domain name to the “Domains” list. It should be the first entry.

3. (optional) Change the parameter “Handling of domain in login windows” from “normal” to either “locked” or “hidden”.

4. (optional) If you choose “locked”, it is probably useful to deactivate the parameter “Remember username and domain”

on the “Logon” page. This will avoid problems if the last login was done with a domain name that differs

from the real domain name.


[Fabulatech] Improved USB remoting mechanism using Fabulatech USB Remote:

– HID devices (Class 03), USB HUBs (Class 04), USB network and communication

controllers (Classes 02, 0a and e0) and VIA VNT-6656 WLAN controller

(VID=160a, PID=3184) are excluded by default, thus such devices

always require an explicit allowing rule.


[VMware View]

– New VMware Horizon View Client 2.0.0.

– New support for RDP Multimedia Redirection in Windows 7 RDP sessions.


[Quest vWorkspace]

– Updated Quest vWorkspace to version 7.6



– Updated JRE to version 1.6.0 update 43.



– Updated Firefox to version 17.0.5

For blocked plug-ins it is possible to add exceptions for certain hosts or domains:

In IGEL Setup Registry create new instances of the template

Hosts and/or domains on which execution of plug-ins is explicitly

allowed or forbidden can be specified there. For any other host the user can choose at




– ICA Local Login window can now handle custom PKCS#11 libraries for smart card logon,

see new setup page Sessions->ICA->ICA Global->Local Logon->Smartcard.

– Active Directory/Kerberos Logon with Smart Card: In IGEL Setup on page

Security->Logon->Active Directory/Kerberos now the new login method “Smart Card”

can be activated to enable Kerberos logon with smart card.

Only certain types of smart cards are supported. The type can be chosen on page

Security->Logon->Active Directory/Kerberos->Smartcard. With parameter

“Smart Card Removal Action” it can be controlled whether the user is logged off

or the thin client is locked if the smart card is removed.



– New parameter for mouse double click distance:

IGEL Setup -> User Interface -> Input -> Mouse

Registry key: windowmanager.wm0.variables.doubleclickdist.

Increase the value, if you have problems

– Enabled multi monitor setup with autodetection of monitor resolutions.

Limitation with VIA VX900 chipsets: display port resolutions

of 2560×1440/2560×1600 can not be detected correctly, if the resolution

of the 2nd monitor is 1920×1080/1920×1200.

– Replaced the clock plugin in the task bar with the datetime plugin,

which is able to show a calendar.


[Base System]

– New default USB access control rule to allow HID devices,

if USB access control is enabled. (IGEL Setup -> Devices -> USB access control).

– Added automatic logoff feature: Executes logoff after the main session is closed.

Configuration in IGEL Setup -> Security -> Logon -> Auto Logoff

Registry keys: auth.login.autologoff auth.login.autologoff_cmd .

– There are two new custom commands: The command configured with registry key

auth.login.custom_command_sclogin is executed at the time when a user logged in with

IGEL or Kerberos smart card, auth.login.custom_command_login is executed at the time

when a user logged in with user/password.

– Support for new UMS file transfer types:

– Common Certificate (all purpose)

– SSL Certificate

– Java Certificate

– New Remote Administration of the TC by DHCP tags: It is now possible to configure a FTP

server/path by DHCP tags, from where a “setup.ini” configuration is downloadable. This

feature is enabled by default and should be disabled, if it is not used. Following tags are


ID 161 server name or ip address of the FTP server

ID 162 custom subdirectory: with empty DHCP tag 162 the setup.ini file must be placed

under “igel/ud” directory, if specified the setup.ini file must be placed under

“subdirectory/igel/ud” directory

Authentication: ID 184 username and ID 185 password.

– Updated timezone data to version tzdata-2013b.



– New driver for Realtek 8168/8111 ethernet chips: Realtek vendor driver version 8.035.00

– New support for EAP-GTC wireless WPA/WPA2 Enterprise authentication.

– New driver support for D-Link Wireless-USB-Adapter DWA-131 HW-Version B1 based on

Realtek RTL8192CU chip.

– New driver support for Atheros ethernet chips.

– Wired 802.1X authentication can be canceled now

– Added ethernet link status monitoring: registry keys:



To hide messages the registry keys network.interfaces.ethernet.device0.hide_progress

and network.interfaces.ethernet.device1.hide_progress can be used.

– Wireless roaming: only messages are shown, instead of stopping and

starting the complete network interface.

Registry key: network.interfaces.wirelesslan.device0.reconnect_action

To hide messages at all use the registry key


– Added new setup parameters to specify a systemwide proxy. This proxy is used by the

ICA/HDX Flash-PluginContainer for Flash-Redirection.

IGEL Setup -> Network -> Proxy

Registry keys: network.proxy.settings.*

In case of Flash-Redirection set the parameter “sys_proxy_type” to manual.

Also fill in the server and port parameters for the specific protocols http, ssl (=https), ftp

and SOCKS type proxies.

Note that the parameter sys_proxy_autoconfig_url can only be used by the local browser

and is not applicable for ICA/Flash-redirected sessions.

Note that the local browser (Firefox) also has proxy settings either for all browser sessions

or specific to each session. If local browser rather use the systemwide proxy,

go to the Registry and set to systemwide.



– Updated ThinPrint Client to version 7.0.54.

– It is now possible to specify CUPS printer names which contain environment variables.

Set “Enable variable substitution in session” on IGEL Setup page

System->Firmware Customization->Environment Variables. These variables are evaluated

when the printer is created (at boot or reconfiguration time). As an example, to insert the

host name specify e.g. ${HOSTNAME}_PRT1.



– New eGalax touch screen support: Choose eGalax touch screen type in

IGEL Setup -> User Interface -> Input -> Touch Screen


Fixed bugs:



– Fixed sporadic RDP session redirection crashes.

– Fixed session redirection with enabled data compression.

– Fixed RDP Token Redirection.

– Improved implementation of the audio channel (MS-RDPEA).

Audio channel now works flawless with Windows 2008 server.

– Strong CA certificate digests are now supported.

– Do not show connection message anymore if the server isn’t available.



– Citrix Receiver 12.1.6 reconnects properly to sessions that have been started with a

different color depth. This should also fix some problems with the Citrix cshadow program,

when a session should be shadowed from another session running a different color depth.

– Citrix Receiver 12.1.6 fixed crashes when Com Port mapping is used.

– XenApp/Program Neighborhood with passthrough authentication:

Only use short domain name for logon instead of FQDN.



-.Fixed permanent storage of Firefox smart card certificate selections.

– Fixed permanent storage of Java-Applet configurations:

enable registry key java.deployment.save_certificates

– Fixed Firefox certificate installation, when certificate is assigned by UMS file transfer.

– Autohide function of the toolbars (menu/navigation) can now be controlled by registry keys:

Globally by registry key: or

Session-wise by registry key:

When hiding the tabs-bar (registry key tabs_bar_hidden)

Ctrl-Left clicks in the browser content window (which would open a new tab) are now

disabled, because displaying tabs without tabs-bar would cause display freezes.


[2X Client]

– Window Manager hotkeys can be used now with 2X sessions.


[Media Player]

– Totem media player: Fixed repeating mode.



– IGEL smartcard: characters & < > [ ] in settings on smartcard are now taken over correctly.

Previously e.g. & was modified to &amp.

– Password change of IGEL smartcards is working again.



– Fixed rotation bug with 1680×1050 and 1400×1050 resolution.

– Fixed non-native resolution scaling with SDVO outputs on INTEL graphics chips

– Fixed dual screen configuration with DVI outputs on INTEL graphics chips.


[Base System]

– Fixed hanging boot process if an administrator password is set and

appliance mode is active.

– Fixed hanging boot process, when a Kerberos logon configuration is rolled out

by an UMS profile

– Fixed hanging boot process, if an automatic firmware update check is rolled out

by an UMS profile.

– Eliminated sampling rate limit on the sound chip VIA VT8233.

Now the chip provides all supported sampling rates from 8kHz to 48kHz

– Fixed Kerberos logon and password change with UPN names.

– Fixed video player crash, if monitors are switched off by DPMS

during video playback on VIA graphics chips.

– New registry key “sessions.mixer0.grundig_config” to force alsa configuration

for grundig dictation devices.

– In IGEL Setup on page ICA->ICA Global->Keyboard the hotkey configuration now

is only active when “Keyboard Mapping File” is set to “linux”, which is needed

for the hotkeys to work.

– Client VNC application is not allowed anymore to darken the screen and

to forbid input of target VNC server.

– Custom bootsplash/wallpaper via SFTP fixed.

– Fixed right ALT key in English(US) keyboard layout.

– Fixed wake up from suspend by usb mouse activity.

– Fixed Hyper-V support.

– Fixed Synaptics Touch Pad support.



– Fixed wake on lan problems with Realtek RTL-8111D/8168D chip

– Improved stability of the driver for wireless USB adapter

D-Link DWA-131 HW-Version A1 based on Realtek RTL8192SU chip.

– Cisco VPN: prompt for certificate password is now configurable.

IGEL Setup -> Network -> VPN -> Cisco -> Cisco VPN connection -> Authentication

Registry key: sessions.ciscovpn<NR>.profile.nocertpwd.

– SCEP client: fix renewal of certificate (do not include challenge password

in certificate request for renewal).

– New registry key “network.interfaces.wirelesslan.device0.wpa.eapol_version”

to configure WPA supplicant IEEE 802.1X/EAPOL version



–  Fixed UDC hardware support for Fujitsu Futro S500.