Summary
This feature update adds the App Signature Key functionality for server sessions, contains the new server-driven Browser Exam Key and brings a new configuration option for the file system dialog along with various accessibility improvements as well as important bug fixes.
Starting with release version 3.4.0, the Browser Exam Key of SEB for Windows is platform-specific, i.e. its value is different for the 32-bit (x86) and 64-bit (x64) build of the same version!
Changes
- Fixed NullReferenceException when accessing CanNavigate properties of browser control (#576).
- Fixed crash when using SEB without browser and pressing the Windows key (#589).
- Fixed crash when third-party application has no title.
- Changed wording in settings password dialog (#548).
- Implemented new configuration option to show or hide the path of file system elements (#431).
- Added Hyper-V to virtual machine detector.
- Added Chrome Remote Desktop to default list of prohibited applications (#575)
- Added basic user agent for network resource requests.
- Various accessibility improvements and bugfixes.
- Added VMware to PCI vendor blacklist.
- Fixed resizing issue with lockscreen on display resolution change.
- Fixed bug where ease of access configuration monitoring would trigger even though the service component is active.
- Fixed ease of access exploit.
- Fixed access to potentially uninitialized DOM in accessibility JavaScript code (#480, #499).
- Implemented session integrity verification.
- Implemented visual indication for active applications in taskbar.
- Fixed crash when using tabulator key (#490).
- Ensured setup bundle doesn't fail if a newer WebView2 runtime is already installed (#429).
- Fixed crash when attempting to download file originating from data URL.
- Fixed unit tests for client operation (#421).
- Fixed crash caused by non-ASCII characters (e.g. Hebrew) in client log file path (#421).
- When searching, enter now performs a forward search within a browser window.
- Updated browser engine to version 111.2.20 (Chromium version 111.0.5563.65).
The following optional features and changes are disabled by default and need to be configured individually:
- Fixed bug where network status log would be sent repeatedly when not connected and added threshold for value change.
- Fixed hacks to control Zoom user interface (#521).
- Implemented custom browser exam key defined by server.
- Only search for an LMS session identifier when a server session is active (#552).
- Updated Zoom WebSDK to version 2.10.1 and changed authentication to use SDK key and JWT token (#521).
- Refactored server proxy by extracting request implementations.
- Implemented basic mechanism for app signature key (ASK) exchange.
- Fixed race condition happening with OAuth2 token renewal.
- Added missing translation for server failure dialog.
- Ensured multiple lock screen instructions sent by the server don't cause multiple lock screens.
- Ensured open server connection gets closed when session start failed.
Known Issues
- Screen readers NVDA and JAWS are not compatible with kiosk mode Create New Desktop. If their usage is required, please use kiosk mode Disable Explorer Shell where they should work as expected.
- Live proctoring isn't compatible with kiosk mode Create New Desktop due to an issue in WebView2 (see MicrosoftEdge/WebView2Feedback#960). Thus, if live proctoring is active, the kiosk mode will always automatically be set to Disable Explorer Shell.
Requirements
SEB 3.5.0 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.
- .NET Framework 4.7.2 Runtime: https://dotnet.microsoft.com/download/dotnet-framework/net472
- Microsoft Edge WebView2 Runtime: https://go.microsoft.com/fwlink/p/?LinkId=2124703
- Visual C++ 2015-2019 Redistributable: https://support.microsoft.com/en-us/help/2977003/the-latest-supported-visual-c-downloads
Installation
Please use the setup bundle for installation! The setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.