271 Waverley Oaks Rd. Telephone: Suite 206 Waltham, MA USA

Transcription

1

2 Cntacting Lestream Lestream Crpratin Waverley Oaks Rd. Telephne: Suite 206 Waltham, MA USA T submit an enhancement request, features@lestream.cm. T request prduct infrmatin r inquire abut ur future directin, sales@lestream.cm. Cpyright Cpyright by Lestream Crpratin This sftware prgram and dcumentatin are cpyrighted by Lestream. The sftware described in this dcument is prvided under a license agreement and may be used r cpied nly under the terms f this agreement. N part f this manual may be cpied r reprduced in any frm withut prir written cnsent frm Lestream. Trademarks The fllwing are trademarks f Lestream Crpratin. Lestream The Lestream graphical lg The absence f a prduct name r lg frm this list des nt cnstitute a waiver f the trademark r ther intellectual prperty rights cncerning that prduct, name, r lg by Lestream. HP is a trademark f Hewlett-Packard Develpment Cmpany, L.P. in the U.S. and ther cuntries. HPE is a trademark f Hewlett-Packard Enterprise Develpment, L.P. in the U.S. and ther cuntries. Linux is the registered trademark f Linus Trvalds in the U.S. and ther cuntries. The OpenStack Wrd Mark and OpenStack Lg are either registered trademarks/service marks r trademarks/service marks f the OpenStack Fundatin, in the United States and ther cuntries and are used with the OpenStack Fundatin's permissin. Lestream is nt affiliated with, endrsed r spnsred by the OpenStack Fundatin, r the OpenStack cmmunity. Micrsft, Active Directry, SQL Server, ActiveX, Hyper-V, Windws, and the Windws lg are trademarks r registered trademarks f Micrsft Crpratin in the United States and/r ther cuntries. Other brand and prduct names are trademarks r registered trademarks f their respective hlders. Lestream claims n right t use f these marks. Patents Lestream sftware is prtected by U.S. Patent 8,417,796.

3 Cntents CONTENTS...3 CONNECTION BROKER UPDATE...4 Lestream Cmpnent Updates... 4 New Features... 4 Lestream Gateway Update... 6 Reslved Issues... 6 LEOSTREAM GATEWAY UPDATE...6 CONNECTION BROKER UPDATE...7 Features... 7 Reslved Issues... 7 LEOSTREAM COMPONENT UPDATES...8 CONNECTION BROKER 9.0 INITIAL RELEASE NOTES...9 Imprtant Ntes... 9 Unsupprted Cnnectin Brker 8.2 Functinality... 9 Lestream Cmpnent Updates Cnnectin Brker 9.0 Features Lestream Gateway APPENDIX A: VERSION COMPATIBILITY Lestream Agent Cmpatibility Matrix Lestream Cnnect Cmpatibility Matrix

4 Cnnectin Brker Update Cnnectin brker is an update Cnnectin Brker This update includes the fllwing features and issue reslutins. The Lestream Sftware License Agreement has been updated. Please see fr details. Lestream Cmpnent Updates Lestream Cnnect Windws The Refresh ffer list befre displaying t user ptin is nw hnred every time the Cnnect dialg is pened Lestream Agent Windws TGX sessins are nw prperly tracked fr remte Windws cnnectins Lestream Cnnect Linux/macOS Cntains usability enhancements when using n macos Lestream Agent Linux Intrduces new public key exchange t secure cmmunicatin with Cnnectin Brker 9.0. New Features Authenticatin Multi-factr authenticatin is nw supprted fr any SAML-based third-party identity prviders, such as Ping Identity and Micrsft Active Directry Federated Services Multi-factr authenticatin (MFA) with Du Security ntificatins can nw be enabled fr grups f Lestream users The default lcal Cnnectin Brker admin accunt can nw be disabled Centers Red Hat Virtualizatin can nw be added as a center in Lestream, with supprt fr inventrying, pwer cntrl, prvisining, and cnnecting users t resurces hsted in a Red Hat envirnment The Scale Cmputing HC3 virtualizatin platfrm can nw be added as a center in Lestream, with full supprt fr VDI envirnments n this hypercnverged platfrm, including inventrying, pwer cntrl, prvisining, and cnnecting users 4

5 Ggle Clud Platfrm can nw be added as a center in Lestream, with supprt fr inventrying, pwer cntrl, and cnnecting users t resurces hsted in GPC (prvisining will be available in an upcming release) Yu can nw specify a Regin when creating an OpenStack center, t supprt OpenStack deplyments with custm regins The usability f creating multi-user centers has been imprved Databases Yu can nw attach the Cnnectin Brker t an Azure SQL database The Cnnectin Brker nw allws yu t specify any secndary database as a failver database, instead f requiring yu t cnfigure SQL Server mirrring Prvisining: Prvisining limits in pls can nw be enfrced at certain times and days f the week Azure: The Cnnectin Brker nw frwards Azure API traffic thrugh the Lestream Gateway when Cnnectin Brker lgins are frwarded t the Lestream Gateway (requires Lestream Gateway ) PCIP Remte Wrkstatin Cards Release plan ptins based n discnnect events can nw be executed fr wrkstatins with an installed PCIP Remte Wrkstatin Cards running firmware versin 5.x Client binding is nw supprted fr PCIP Zer clients running firmware versin 5.x and later, prviding ctal mnitr supprt fr Amulet Htkey zer clients Yu can nw frce end users t accept a disclaimer as part f the authenticatin prcess n a PCIP client Lestream plicies can frce the user t enter a secnd set f credentials t use fr single sign-n t a PCIP remte resurce Clients: The > Clients page prvides a new clumn t display the installed display prtcl clients and their versin Backups: SFTP is nw available as a transfer prtcl when backing up the Cnnectin Brker internal database 5

6 Lestream Gateway Update Lestream Gateway is a patch update t versin It is cmpatible with Cnnectin Brker This versin f the Lestream Gateway supprts Azure API frwarding. Reslved Issues Wake-n-LAN packets are nw sent frm every brker in yur Lestream cluster, t imprve pwering n machines acrss subnets Apache has been updated t and the Apache cnfiguratin has been mdified t use mre restrictive cnditins Lestream Gateway Update Lestream Gateway is a patch update t versin It is cmpatible with Cnnectin Brker This versin f the Lestream Gateway reslves issues related t launching HTML5 RDP cnnectins t Windws 10 r Windws Server 2016 perating systems that have Netwrk Level Authenticatin enabled fr RDP. 6

7 Cnnectin Brker Update Cnnectin brker is a minr update t the initial release f Lestream 9. This update includes the fllwing features and issue reslutins. Features The new Cntrl actin fr multi-user centers allws yu t pwer cycle the server assciated with the center. The individual sessins fr a multi-user center n lnger ffer individual Cntrl actins. The Rle ptin t lg users int the remte desktp as either a lcal r dmain users can nw be specified per pl in a plicy. The default NX cnfiguratin file in prtcl plans nw supprts the NMachine Enterprise Client versin 6.2, and the default VMware View client cmmand line parameters nw supprt versin r higher. Pls f AWS T3 instances can nw be prvisined. Yu can nw create prtcl plans that d nt prvide any prtcl ptin fr specific client types. This allws yu t prhibit users frm launch desktp cnnectins frm certain clients, such as frm the Lestream Web client. Reslved Issues Cnnectin clsed events are nw interpreted as a discnnect, and the assciated Release Plan actins are taken, in cases where the user never lgged int their assigned desktp. Multi-user sessins assigned t users are nw evaluated when a Lestream Agent restart ccurs. If an active sessin is nt fund fr an assigned user, the Cnnectin Brker nw releases that sessin. Deallcated Azure instances are nw cnsidered as available t pwer n, t meet the pl s pwer management threshld. The Cnnectin Brker allws mre time fr Lestream Agents t respnd, t lwer the chances f agents being marked as Unreachable in high-latency envirnments. The favicn nw crrectly appears in the brwser tabs after lgging int the web client. The lgs nw cntain the full JSON respnse returned by the Azure APIs when an errr is returned t the Cnnectin Brker. 7

8 The Cnnectin Brker n lnger remves the images inventried frm an Azure center if Azure returns an errr r empty list. This ensures that, n a subsequent successful call t Azure, existing pls cntinue t prvisin with the previusly selected image. The Deply frm image drp-dwn menu in pls nw defaults t <Select> instead f the first image in the list. The lgs nw cntain the errrs utput frm the LDAP queries when a user bind fails. Reslves rendering issue f drp-dwn menus n Internet Explrer 11. Lestream Cmpnent Updates Lestream cmpnent upgrades are available t reslve the fllwing issues. Lestream Cnnect fr Micrsft Windws Operating Systems The installatin package can nw install Lestream Cnnect and the Lestream USB drivers n the latest updates f Windws 10 desktps that enable Secure Bt. The Lestream Cnnect system tray menu cntains a new Lgin using Windws credentials ptin when the client is installed with the client-side single sign-n, allwing users t lg back int Lestream after they exit their initial sectin. Reslves an issue pening the Cnfiguratin dialg fr prtcl parameters. Supprts launching the latest VMware Hrizn client. Lestream Agent fr Micrsft Windws Operating Systems The installatin package can nw install the Lestream Agent and Lestream USB drivers n the latest updates f Windws 10 desktps that enable Secure Bt. Lestream Agent fr Linux and macos Reslves an issue discnnecting RGS 7.4 sessins based n idle time settings in release plans. The new ss_desktp parameter allws yu t specify the windw manager used fr single sign n. The Lestream Agent nw reprts the prt assciated with the user s VNC sessin when yu click Status n the Cnnectin Brker > Resurces > Desktps page. If a user has an pen SSH sessin t a desktp, and establishes an RGS r VNC cnnectin t that desktp using Lestream, frcefully lgging the user ut f their RGS r VNC sessin n lnger clses their SSH sessin. 8

9 Cnnectin Brker 9.0 Initial Release Ntes Cnnectin Brker 9.0 is the next majr release f the Lestream Cnnectin Brker. It includes a new user interface and licensing scheme, as well as new Lestream Cnnect and Lestream Agent cmpnents and a new Lestream Gateway. Cnnectin Brker 9.0 includes all the issue reslutins and features available in the latest 8.2 versin. Fr a full list f recent changes in 8.2, see the Cnnectin brker 8.2 Release Ntes. Imprtant Ntes Yu cannt upgrade yur existing Cnnectin Brker 8.2 virtual appliance t versin 9.0. Yu must build a new Lestream Cnnectin Brker and btain a new license key frm sales@lestream.cm. After building yur 9.0 Cnnectin Brker and applying yur new license, yu can cpy ver yur existing 8.2 cnfiguratin, t simplify the upgrade prcess. Yu must be running Cnnectin Brker r higher t cpy yur existing Cnnectin Brker database t 9.0. Lestream Agent 7.0 fr Windws perating systems is nt cmpatible with Cnnectin Brker r earlier. Cnnectin Brker 9.0 supprts Mechdyne TGX versin T use lder versins f TGX, please remain n Cnnectin Brker 8.2. Unsupprted Cnnectin Brker 8.2 Functinality The fllwing Cnnectin Brker 8.2 features are n lnger supprted in Cnnectin Brker 9.0. Lestream will cntinue t supprt versin 8.2 fr ur existing custmers. See the Lestream Prduct Lifecycle page fr infrmatin n supprt dates fr previus Cnnectin Brker versins. Supprted hsted platfrms The fllwing platfrms are n lnger supprted r are in the prcess f being deprecated. Citrix XenApp and XenDesktp Citrix XenServer Open surce Xen Red Hat Enterprise Virtualizatin 3.x, including the SPICE display prtcl Micrsft Hyper-V 2012 Cnnectin Brker Skins n lnger set frm clrs in the Administratr Web interface. Cntact supprt@lestream.cm fr infrmatin n using custmized CSS-files t mdify the lk-and-feel f the Cnnectin Brke Web interface. The Plicy Reprt and User Cnnectin Histry reprt are n lnger available. Use the imprved User Assignment Reprt fr detailed infrmatin abut desktp usage per user. 9

10 The Plicy ptin t stre assignment and cnnectin infrmatin is n lnger available fr use with Lestream Cnnect fr Linux and macos. Display plans are n lnger available. Instead, use the multi-mnitr supprt natively prvided by yur chsen display prtcl. Failver plans and failver desktps are n lnger available. Use Backup Pls fr all desktp failver needs. The Java NX client is n lnger available in Prtcl Plans fr NX cnnectins launched frm a Web client lgin. Mechdyne TGX versin 1.9 r lder. Lestream Cmpnent Updates Lestream Cnnect fr Micrsft Windws Operating Systems Versin Prvides supprt fr USB redirectin thrugh the Lestream Gateway Reslves issue where user pressing Ctrl-Shift-X wasn t breaking ut f Shell mde Lestream Agent fr Micrsft Windws Operating Systems Versin Intrduces new public key exchange t secure cmmunicatin with Cnnectin Brker 9.0. Reslve issues identifying users in sub-dmains. Lestream Agent 7.0 is nt cmpatible with Cnnectin Brker r lder. The Java versins f Lestream Cnnect and the Lestream Agent were nt upgraded between the Cnnectin Brker 8.2 release and Cnnectin Brker 9.0. Cnnectin Brker 9.0 Features The Cnnectin Brker is packaged fr installatin n a CentOS, Red Hat Enterprise Linux, Ubuntu, and SUSE Linux Enterprise Server perating system. Manage updates fr the underlying perating system independently f yur Cnnectin Brker. Cnnectin Brker 9.0 intrduces a new design fr the Administratr and End User Web interfaces. The Administratr menu has been rerganized t imprve usability. Versin 9.0 als intrduces a new Lestream licensing scheme. Yu are issued a Lestream Serial number, which yu can use t generate yur Lestream license. Yur Lestream license cntrls the functinality available in the Administratr Web interface. 10

11 At any time, yu can cntact t discuss adding functinality t yur Lestream license. Additinal licensing fees may r may nt apply. The Cnnectin Brker and Lestream Agent fr Windws nw use a public/private key exchange t verify cmmunicatins. Cnnectin Brker 9.0 can be immediately attached t an external Micrsft SQL Server r PstgreSQL database after installatin, aviding the need t re-enter yur Lestream license in the cluster. Prtcl plans nw prvide Lestream Gateway supprt fr RGS and TGX cnnectins launched frm Lestream Cnnect, as well as RDP cnnectins launched frm a Dell Wyse ThinOS client. Users can nw send invitatins t cllabrate n their existing Mechdyne TGX cnnectins. A new > Resurces > Images page lists all images available fr prvisining in Lestream pls Yu can nw specify a dmain when creating an OpenStack centers. The prvisining lgic in Cnnectin Brker 9.0 nw allws many desktps t be simultaneusly prvisined, instead f running serially. Fr clud envirnments, yu can specify additinal prvisining parameters, including: OpenStack Set the security grups and availability zne Azure Use new image frmats and specify security grups AWS Prvisin T2 unlimited instances and set an IAM rle n the instance Rle enhancements separate rle fr dwnlading lgs and add rle fr permissin t remve users NIS authenticatin nw supprts SHA 512 fr NIS passwrds and allws plicies t be assigned based n the user s netgrup membership. The Cnnectin Brker nw lgs ut rgue when an already-assigned user requests a cnnectin t the desktp, nt just upn the initial assignment. The Cnnectin Brker n lnger stre Lestream Agent registratins if there is n Uncategrized Desktps center. T register desktps using the Lestream Agent, first create the uncategrized Desktps center and then install r restart yur Lestream Agents, ensuring that they are pinting at yur Cnnectin Brker. 11

12 Lestream Gateway The Lestream Gateway described in this dcument is fr use with Cnnectin Brker 9.0. Yu cannt upgrade the Lestream Gateway fr Cnnectin Brker 8.2 t the 9.0-cmpatible versin. The HTML5 viewer nw supprts SSH and VNC HTML5 cnnectins, as well as RDP. The Lestream Gateway can frward user lgin traffic t yur Cnnectin Brker, allwing yu t islate yur Cnnectin Brker in the same netwrk as yur desktps. The Lestream Gateway includes a new Cmmand Line Interface fr cnfiguring certain gateway functinality, such as limiting the prts used by the Lestream Gateway and installing SSL certificates. The Lestream Gateway nw enables UDP fr RDP cnnectins. Yu can use Cnnectin Brker prtcl plans t set additinal parameters fr HTML5 RDP cnnectins. 12

13 Appendix A: Versin Cmpatibility Lestream Agent Cmpatibility Matrix The fllwing table indicates the Lestream Agent versins that are cmpatible with the different Cnnectin Brker versins. Cnnectin Brkers cannt cmmunicatin with incmpatible Lestream Agents, resulting in a lss in Lestream functinality. Lestream Agent versins lder than 5.0 fr Windws and 3.0 fr Linux are nt cmpatible with any supprted Cnnectin Brker. 13

14 Lestream Cnnect Cmpatibility Matrix The fllwing table indicates the Lestream Cnnect versins that are cmpatible with the currently supprted Cnnectin Brker versins. Nt all features supprted by the latest Lestream Cnnect versin are available when using an lder Cnnectin Brker versin. 14