Release Notes
Zero Client Firmware 22.09
Management Requirements
- Zero Clients with firmware 17.05, 20.01 or newer are supported when managed by PCoIP Management Console 20.01 or newer.
- Supported browsers are Firefox, Chrome, and Microsoft Edge. Versions of the browsers tested are those that were available prior to release.
- Web browsers must support TLS 1.2 or higher to connect to an enabled administrative web interface (AWI).
- This release cannot be brokered using the CMI brokering protocol.
Upgrade Path Information
- If you are upgrading your Tera2 firmware:
- Use PCoIP Management Console 20.01 or newer to upgrade the Zero Client to firmware 20.01 or newer.
- Use PCoIP Management Console 1.10.3 through 1.10.8 to upgrade the Zero Client to firmware 5.0 or newer.
- The AWI can be used to upgrade a single Zero Client to any firmware version.
- See Knowledge Base article KB 1144 for upgrade prerequisites.
Download Contents
- This download includes an .all file for use by the Administrative Web Interface (AWI) and a .pcoip file for use by PCoIP Management Console version 2.0 and higher.
- The .pcoip file contains either the PCoIP Zero Client firmware or Remote Workstation Card firmware specific to the component firmware that was downloaded.
Related Product Resource Locations
Release Overview
This release maintains version parity with Remote Workstation Card firmware and includes new features, bug fixes, and security updates over release 22.07.
What's New in 22.09
-
Smart card PIN change now supported in pre-session for supported smart cards
-
Added support for Gemalto CT700 Smart Card Reader
-
Added supported Smart cards
-
PIVkey C990 / C910
-
G&D FIPS 201 SCE 7.0 PIV
-
G&D SmartCafe v7.0 DoD CAC NEATS
-
IDPrime/Thales MD 830 RevB FIPS 140-2 Level 3
-
IDPrime/Thales MD 930 FIPS 140-2 Level2
-
Compatibility
Management Console
This firmware is supported with Management Console 20.01 or newer.
Remote Workstation Card
Zero Client 22.09 has been tested with Remote Workstation Card 22.09 with Remote Workstation Card Software 22.09.
Zero Client 22.09 has been tested with Remote Workstation Card Agent 22.09.
Leostream Connection Broker
Zero Client 22.09 is compatible with Leostream Connection Broker version 8.2 with minimum TLS 1.2. It is not compatible with earlier versions of the Leostream Connection Broker.
Brokering of the Remote Workstation Card requires the installation of the Teradici Remote Workstation Card Agent.
VMware
- Horizon: Zero Client 22.09 has been tested with VMware Horizon 8.4 (2111) and 8.6-2206, and pre-certification is in progress. See pre-certified firmware releases here. It is also compatible with one major release of Horizon prior to this. Other versions of Horizon may also be compatible but will need to be verified in your specific deployment environment.
- Unified Access Gateway (UAG): UAG 2209 is not compatible with Zero Client firmware. It is recommended you upgrade to UAG 2212.
Imprivata OneSign
Zero Client 22.09 has been tested against Imprivata OneSign 7.8.3 with VMWare Horizon 8.6-2111.
Zero Client supports Teams optimization fallback with VMware Horizon View
Zero Client supports Teams optimization fallback in VMware Horizon.
The logon issue with SafeNet eToken that has more than one certificate has been fixed
The logon issue with SafeNet eToken that has more than one certificate has been fixed.
rf IDEAS USB reader HDW-IMP-80 Mini and HDW-IMP-82 Mini do not work on Zero Clients
rf IDEAS USB reader HDW-IMP-80 Mini and HDW-IMP-82 Mini do not work on zero clients
Some integrated smart card readers on keyboard may not work in firmware 22.09.0
Some smart card readers on smart card keyboards may not work properly in firmware 22.09.0
Artifacts present on rotated displays when connecting to Horizon 8.6-2206
Moving a window on a display with 90-degree rotation produces artifacts. The VMware SVGA driver in Horizon Agent versions 8.3 and older should not encounter this issue.
Horizon 8.6-2206 and newer users:
- Switch back to VMware SVGA driver to rectify the issue. If Horizon 8.4-2111 workaround was done, delete the registry value
HKEY_LOCAL_MACHINE\SOFTWARE\Teradici\PCoIP\pcoip_admin\pcoip.disable_svga_async_capture
For new Horizon installs the VMWare SVGA driver can be installed from VMWare Tools.
Horizon 8.4-2111 to Horizon 8.5-2203 users:
- Disable the VMware SVGA driver if it is in Device Manager Display Adapters.
- Create the registry value:
HKEY_LOCAL_MACHINE\SOFTWARE\Teradici\PCoIP\pcoip_admin\pcoip.disable_svga_async_capture=dword:00000001
- Connect to a session and test a 90-degree clockwise rotated display.
Language translation is missing for the smart pin change at the first logon
The following language translations are missing for the smart card pin change at the first logon:
- French
- German
- Greek
- Italian
- Japanese
- Korean
- Portuguese
- Spanish
- Simplified Chinese
- Traditional Chinese
4K resolution is not available when display overridden and preferred resolution overridden are enabled
The Zero Client's Preferred Resolution Override feature in the OSD does not show resolutions greater than 2048x1152 (including 4K UHD) if Enable Attached Display Override is active.
No workaround exists at this time.
Loading AWI pages may be slow
Occasionally, AWI pages are slow to load and appear with missing menu items, especially the home page.
Uploading the PCoIP certificate to the browser will improve the responsiveness significantly while refreshing the AWI page will display the missing menu items.
Incorrect OSD message is being displayed when connecting to a Horizon resource that is not available or in use
When connecting to a VMware Horizon resource that is in use or unavailable, the OSD message "Connecting to desktop" is being displayed instead of messages that indicate the desktop is being in use or is unavailable.
PCoIP endpoint fails 802.1X authentication when Root CA certificate is not in the certificate store
When the EAP TLS server has a CA signed certificate, the PCoIP endpoint 802.1X will fail authentication when the Root CA is not in the certificate store.
802.1X setups with a self-signed certificate in the EAP TLS server is not affected.
Firmware 21.07.0 and later does not store the Root CA certificate during a SCEP request.
Add the Root CA certificate in the PCoIP endpoint certificate store. This can be done via the Web UI or the Management Console.
Bridging Cintiq 22HDT (DTH-2200) with Linux RHEL/CentOS host may not work.
After launching a PCoIP session RHEL/CentOS host with Cintiq 22HDT bridged, the session may get disconnected and the system becomes unresponsive.
Do not bridge Cintiq 22HDT (DTH-2200 - Pen and Touch) with RHEL/CentOS host. Cintiq 22HD (DTK-2200 - Pen Only) may be locally terminated or bridged.
Zero Client with Wacom Cintiq Pro 24 resets when connecting to Remote Workstation Card
When establishing a PCoIP session with the Zero Client and Wacom Cintiq Pro 24, and connecting to the Remote Workstation Card, the Zero Client will reset.
Add the Vendor ID and Product ID of the Wacom Cintiq Pro 24 to the USB permissions, under 'Bridged Devices' and 'Devices Forced to USB 1.1.' Wacom Cintiq Pro 24: Vendor ID = 0x056A Wacom Cintiq Pro 24: Product ID = 0x037F
View Horizon brokered connection to Remote Workstation Card fails in Horizon 7.7.0 and newer
Starting with Horizon 7.7.0, PCoIP session can no longer be established to a View brokered Remote Workstation Card via PCoIP security gateway. Horizon 7.6.0 is fine.
Re-enable the legacy mode wherein the embedded self-signed certificate is used.
- Navigate to the HKEYLOCALMACHINE\SOFTWARE\Teradici\SecurityGateway registry key.
- Add a new String (REG_SZ) value, SSLCertPresentLegacyCertificate, to this registry key.
- Set the SSLCertPresentLegacyCertificate value to 1.
- Restart the VMware Horizon View PCoIP Security Gateway service.
OCSP revocation check skipped for certificates issued by root
If a Certificate Authority (CA) issued certificate has an OCSP responder, the PCoIP Zero Client checks if it is revoked. However, for certificates (with an OCSP responder) that are issued by a root CA, the PCoIP Zero Client would report that the OCSP responder is unreachable.
Use certificates that are issued by subordinate/intermediate Certificate Authority.
SafeNet SC650 Blade returns 'Alert! VCS Communication Error' when used to authenticate to Horizon
When connecting to VMWare Horizon using SafeNet SC650 Blade smart card, the Zero Client fails to authenticate with the View Connection Server and an Alert message is displayed in the OSD "Alert! View Connection Server communication error."
This issue affects firmware 5.5.0 and higher.
Use Zero Client firmware 5.4.1
Zero Client crashes after IDPrime .NET smart card PIN and username hint are submitted
Zero Client crashes after IDPrime .NET smart card PIN and username hint are submitted
Frequent webpage reloading shows different content in Chrome
When using Chrome, performing frequently or fast webpage reloading can result in portions of an AWI page that are not normally visible to become visible. This has not been observed on Firefox or Edge.
VMware pool names are blank if they are too long
The VMware pool names will be populated as blank if they exceed 65 characters.
Certificates with unreadable DNs are not logged
Certificates with unreadable Domain Names (DN) will not be logged if the firmware is unable to match any certificates against known CAs.
Stylus cannot wake up display.
If the display goes to sleep, the stylus on a Wacom tablet cannot be used to wake it up.
Use mouse or keyboard to wake up display.
CAC or PIV smart cards fail SSO
When connecting to a Windows 10 Horizon VM using CAC or PIV smart card, the session fails Single Sign-On (SSO) and the Windows password login screen is displayed. If the user clicks on Sign-in options, and selects the smart card icon, the login screen shows the smart card login with PIN field.
After the user is logged in and the session is disconnected without logging off from OS, then when the user reconnects, the user is logged into the OS. However, if the user logs out from the OS and connects the session or uses a different card, SSO will not work.
Modify the registry settings on the VM. The following settings were tested by Teradici.
HKLM\SOFTWARE\VMware, Inc.\VMware VDM\Agent\Configuration
SmartCardServiceWaitTime (DWORD): 10000 (10 sec) SmartCardSSOWaitTime (DWORD): 10000 (10 sec)
Zero client in Auto Detect crashes upon receipt of invalid certificate chain
The zero client may crash with the error: {quote}0d,00:00:00.00> LVL:1 RC: 0 MGMT_SYS :*** CRITICAL ERROR CONTEXT DUMP ***
0d,00:00:00.00> LVL:1 RC: 0 MGMT_SYS :Reset cause: SOFTWARE {quote} when it is is configured for either one of the VMware Horizon connection types, or Auto Detect, and is presented with an invalid certificate chain (such as one containing duplicate entries).
Verify and correct the certificate chain.
Mouse and keyboard briefly unresponsive after session launch with Wacom tablet connected
Mouse and keyboard devices may be unresponsive when launching a session from the Zero Client if a PTH-660 or PTH-860 Wacom tablet is connected. The mouse and keyboard will become responsive after a few seconds.
Internet Explorer 11 does not trust the Administrative Web Interface certificate
Internet Explorer 11 does not trust the Administrative Web Interface certificate if the AWI is accessed via IP address (it will trust the certificate when using the FQDN).
802.1x not disabled after all certificates removed
Removing the certificates set to be used for 802.1x will not disable 802.1x.
After removing the 802.1x certificates, manually disable 802.1x.
Certificates with long subject names populated using the Cyrillic alphabet cannot be parsed by the zero client.
Certificates with long subject names populated using the Cyrillic alphabet cannot be parsed by the zero client.
Use a shorter subject name in the certificate.
USB Isochronous devices need to be on a root port in order to work.
USB Isochronous devices (such as audio or video devices) need to be on a root port in order to work.
Availability of the root port varies from manufacturer to manufacturer, and they should be engaged to determine if they have a root port available on their zero client model. If available, use the root port for Isochronous device types.
Zero client attempts to resume session when Amazon WorkSpaces host initiates disconnect
Amazon WorkSpaces can support Ctrl+Alt+F12 as a means to cause the connection to disconnect. If the zero client is configured to have Enable Session Disconnect HotKey turned off, then when the user enters Ctrl+Alt+F12, the Amazon WorkSpace will catch the command and initiate a disconnect. When this disconnect occurs the zero client will attempt to resume the session.
Ensure Enable Session Disconnect Hotkey is set to on for the zero client so that the zero client manages the disconnect.
Incorrect error presented when certificate uploaded via AWI
When uploading a certificate via AWI, even though the certificate is uploaded into the certificate store the following error may be displayed: Error. The upload did not complete. Please try again.
Verify the certificate is in the certificate store. If it is, ignore the error.
Setting timezone to UTC in Management Console results in UTC+0 Europe/Dublin
If the Management Console is configured to push the timezone setting of (UTC+0:00) UTC to the zero client, the zero client will set itself to (UTC+0:00) Europe/Dublin or (UTC+0:00) Europe/London. This timezone makes use of daylight savings time. There is no option in the zero client for (UTC+0:00) UTC.
There is no option in the zero client for (UTC+0:00) UTC. However, if UTC+0:00 without daylight savings is required, then (UTC+0:00) Atlantic/Reykjavik can be used instead.
SIPR token authentication may fail with multiple certificates on card
The zero client will fail to complete SIPR token smart card authentication against VMware Horizon View when the smart card contains more than two certificates.
Ensure that the card has no more than two certificates.
Change in button timing for entering manual recovery
Beginning with firmware 5.2.1, the power button sequence to boot a zero client from powered down into the recovery image is:
- Press power button once to turn on the client
- Wait for one second
- Triple tap power button
- Zero client boots into the recovery image
From firmware 5.0.0 to 5.2.0, it was possible to triple tap the power button immediately after turning on the zero client. This is no longer supported.
Mouse cursor briefly unresponsive after zero client reboot
The On-Screen Display's mouse cursor may be unresponsive for a few seconds after a zero client reboot when a web browser is connected to the zero client's Administrative Web Interface.
Zero Client is unable to use IPv6 VMware Horizon View when DHCPv6 is not available
If the zero client is configured for IPv6, and it cannot connect a DHCPv6 server, it will be unable to connect to a desktop when brokered by an IPv6 VMware Horizon View Connection Server. The zero client displays the message 'CONFIGURATION_ERROR - IPv6 capability required: Your VMware Horizon View Client addressing configuration is not compatible with this View Server…'
Security scanners may report zero client to be susceptible to CVE-2004-0230
Security scanners may report that the zero client is susceptible to CVE-2004-0230. This CVE exists in TCP stacks in devices that implement the Border Gateway Protocol. While this is a significant issue for routers that implement the Border Gateway Protocol, it is not a significant issue for zero clients.
Mouse wheel problem occurs with Belkin Advanced Secure Keyboard/Mouse Switch
Mouse wheel scroll-down does not work while in a PCoIP session. This occurs when the mouse is connected to a zero client through a Belkin Advanced Secure Keyboard/Mouse (KM) Switch. This problem has been observed while using KM models F1DN102K, F1DN104K, and F1DN108K.
On Tera2 Zero Clients, bridge the KM and enable the Force Local Cursor Visible on the zero client Configuration > USB Administrative Web Interface.
Zero client fails to resolve FQDN with a label that starts or ends with an underscore
A zero client will not resolve an FQDN that begins or ends with the underscore character (for example, _myhost.teradici.local).
Restrict Proximity Card setting does not work with VMware Horizon RDSH
The Restrict Proximity Card setting does not work with VMware Horizon RDSH sessions when set to disabled.
Enumeration failures with Western Digital portable hard drives
Western Digital Passport external portable hard drives connected to a zero client internal hub may fail to enumerate.
Connect the drive to a zero client root hub port, or connect the drive to an external hub that is connected to the zero client, then restart the PCoIP session and disconnect/reconnect the drive.
Manual IPv6 gateway address is overwritten on reset
Although the IPv6 Gateway address is displayed as an editable field on the zero client Administrative Web Interface (AWI), changes to this field are not respected by the zero client firmware. Instead, the IPv6 gateway is determined using IPv6 Router Advertisement.
Zero client AWI cannot be accessed when IPv6 Link Local Address is entered in the IPv6 Manual address field
Configuring a zero client in IPv6 mode to manual addresses and setting the IPv6 Manual Address to the same value as the Link Local Address will make the zero client Administrative Web Interface (AWI) unreachable.
Use the On-Screen Display (OSD) to reconfigure the IPv6 address settings.
SLAAC address is not populated when IPv6 and SLAAC are enabled on Remote Workstation Card.
SLAAC address is not populated when IPv6 and SLAAC are enabled on Remote Workstation Card.
Evoluent VerticalMouse 4 does not work when connected behind a hub during active session
The Evoluent VerticalMouse 4 device does not work if the device is bridged and the user connects the device to a zero client behind a hub (external or built-in hub port) while a session is active.
Avoid plugging the device into a hub port while a session is active or connect the device to a zero client root port. Alternatively, disconnect and reconnect the session after plugging the mouse into a zero client behind a hub.
Elo Touch monitor may lose calibration in OSD after used in bridged mode with certain Elo Multi-Touch drivers
An Elo Touch monitor connected to a zero client may lose its calibration settings and be unstable in the On-Screen Display (OSD) when the zero client connects to a PCoIP host running certain versions of the Elo Multi-Touch driver, and when the monitor is calibrated using Elo Multi-Touch driver on the host.
Use version 5.5.3 of the Elo Multi-Touch driver. This issue has not been observed with this driver version.
View 6.x connection server ends zero client sessions after 20 hours
When View 6.x connection server is configured to 'never' time out clients, zero clients are disconnected by the host after 20 hours of session.
Set the View 6.x connection client time out from 'never' to a large number.
RDR-7L82AKU smart card reader does not work with OneSign 4.9 SP1 HF11 and newer
RFIDeas RDR-7L82AKU proximity card readers do not detect cards after logging in to a virtual desktop running Imprivata OneSign 4.9 SP1 HF11 or newer.
Revert Imprivata OneSign installation to a version older than 4.9 SP1 HF11.
Gemalto IDCore 3020 smart cards is missing correct driver in Windows 7
By default, Gemalto IDCore 3020 smart cards work in pre-session. However, the card does not work while in-session for Windows 7 virtual desktops.
Install the correct driver from a default Windows 7 installation:
- From the zero client administrative web interface, bridge the smart card reader.
- Without the smart card inserted, log in to the virtual desktop with username/password.
- Insert the smart card. Windows 7 should recognize the smart card and reader and automatically install the correct drivers.
- Log off Windows to disconnect the session.
- From the zero client administrative web interface, remove the bridge configuration for the smart card reader.
- Log in with the smart card. The smart card should be fully accessible.
OneSign cannot authenticate after changing Session Connection Type
After changing a zero client's Session Connection Type from View Connection Server + Kiosk to View Connection Server + OneSign, the Zero Client is unable to negotiate a PCoIP session with VMware View using OneSign authentication.
Restart the zero client.
After display is turned off, screen does not wake up by pushing zero client button
When the On-Screen Display (OSD) Screensaver timeout expires, it will turn off the display after the end of a PCoIP session brokered by a PCoIP Connection Manager. Clicking the zero client's physical button does not wake the display.
OSD cursor briefly stops responding to mouse input
The On-Screen Display (OSD) cursor stops responding to mouse input for a few seconds after pressing the Apply button on the AWI USB Permissions page, or while loading the AWI Attached Devices page. It will behave as expected shortly after.
Disconnecting a session with auto-reconnect enabled causes an alert dialog
With the auto-reconnect feature enabled, users may see an alert dialog briefly on screen before the PCoIP session is reconnected. The message shown is "Unable to connect (0x1001). Please contact your IT administrator." This message can be safely ignored.
Switching between DVI and DisplayPort connectors may cause screen to go blank on HP Z27i displays
HP Z27i displays connected to a zero client's DisplayPort connectors may not show the remote desktop content when the zero client starts a PCoIP session to a workstation access card, and the card's previous session was from a zero client with displays attached to its DVI ports.
Temporary IPv6 addressing causes failure when connecting zero clients to any soft host
Zero clients cannot establish a connection to any soft host that has temporary IPv6 addressing enabled.