1.1 New Features in Release 5.4

This section describes the features that are new in the SGD 5.4 release.

1.1.1 New Default Login Experience for SGD Users

This release introduces the following changes to the SGD login experience:

  • The default login experience has changed. When a user logs in, SGD now automatically starts an SGD Client that has been installed manually on the client device.

    In previous releases, the default behavior was to use Java software on the client device to download, install, and start the SGD Client automatically.

    Note

    For best results, users should download and install the SGD Client before logging in to SGD. See Installing the SGD Client Manually in the Oracle Secure Global Desktop User Guide.

    The changed login experience uses a new feature that enables the SGD Client to be started automatically by a browser, without requiring Java software on the client device. See Section 1.1.2, “Automatic Start Up of the SGD Client Without Using Java Software”.

  • User selection of client mode. When a user logs in, the start up method used for the SGD Client is called the client mode. For the default client mode, a manually installed SGD Client is started automatically.

    Users can select an alternative client mode, by clicking Client Options when they log in to SGD. See Client Options in the Oracle Secure Global Desktop User Guide.

    Administrators can configure the client modes feature. For example, if they want to disable the use of Java software on the client device. See Configuring the Supported Client Modes for the SGD Client in the Oracle Secure Global Desktop Administration Guide.

1.1.2 Automatic Start Up of the SGD Client Without Using Java Software

From this release, the SGD Client can be started automatically using just a supported browser. Java software is not required on the client device.

In previous releases, Java software was required on the client device in order to start the SGD Client automatically.

To use this feature, the SGD Client must be downloaded and installed manually on the client device.

1.1.3 User Authentication with a Client Certificate

Users can now authenticate to SGD through a Gateway, by using a security certificate installed on a browser or smart card on the client device. This is called client certificate authentication. With client certificate authentication, users do not need to enter a username or password when they log in to SGD.

To use client certificate authentication, the SGD array must be part of an SGD Gateway deployment.

A new command, gateway clientcert, has been introduced for managing client certificate entries in the client keystore on the Gateway.

See Using Client Certificates for SGD Authentication in the Oracle Secure Global Desktop Gateway Administration Guide.

1.1.4 Application Authentication Using SSH Keys

Users can now authenticate to a UNIX or Linux platform application server by using an SSH key installed on their client device. Using SSH keys enables closer integration with cloud services such as Oracle Cloud Infrastructure, where SSH key authentication is used for access control.

The Application Authentication dialog box has been modified, to allow users to specify the SSH key location on their client device.

SSH keys must be in RSA key format. Keys generated using OpenSSH or the PuTTY Windows application are supported.

Passphrase-protected keys can be used with this feature. A prompt to enter the passphrase is displayed when starting the application.

Note

Private keys never leave the client device and are not sent to the SGD server.

See Using SSH Keys for Application Authentication in the Oracle Secure Global Desktop Administration Guide.

1.1.5 Command for Reconfiguring a Single Host Gateway Deployment

This release includes the tarantella drop gateway command, for automatic reconfiguration of a single host Gateway deployment where the discovery feature has previously been used. The command undoes discovery and automatically reconfigures the Gateway and SGD server where the command is run.

See Discovering an SGD Gateway in the Oracle Secure Global Desktop Gateway Administration Guide.