Parallels RAS (Remote Application Server) version 22: Updates Summary

[Noowanjay Seeballack]

Parallels RAS Core
Parallels RAS Core v22.0-28160 (29 October 2026)

• Security Fix: Upgraded OpenSSL to version 3.5.9.
• Security Fix: Upgraded .NET to version 10.0.114.
• Security Fix: Enhanced security hardening during Device Manager shadowing when using tunneled connections.

• New: Support for Azure Virtual Desktop (AVD) hybrid deployments, enabling the management of on-premises session hosts through the AVD control plane across all hypervisors.
• New: Add support for VMware vSphere 9 as a VDI provider.
• New: Introduce File Access with native SMB 2.x/3.x connectivity to link Windows file shares directly into Parallels RAS, enabling users to access and list network files directly in RAS User Portal without the need to publish Windows Explorer.
• New: Introduce Device Posture checks to enforce security and compliance policies by validating client devices before allowing a session connection. Administrators can now define requirements for antivirus status, OS patch levels, specific processes, registry keys, and disk encryption.
• New: Introduce experimental support for user session recording, allowing administrators to record user activity for auditing, compliance, and troubleshooting. This includes a built-in session player, configurable storage and retention policies, automated archiving, and granular administrative alerts to monitor recording health and storage capacity.
• New: Support for SAML as a Multi-Factor Authentication (MFA) provider. This allows administrators to enforce SAML authentication as a mandatory secondary factor after initial Active Directory validation.
• New: Support for public IP address filtering when managing published resources, policy enforcements, and multi-factor authentication (MFA) restrictions. The public IP address information is now also available in session overview, client details, and device management.
• New: Update FSLogix supported versions to include v26.08, and remove v25.09.
• New: Add support for passing command-line parameters to published resources from (MSIX) application packages. This enhances flexibility by allowing a single published resource to be used in multiple contexts with different configurations.
• New: Ability to configure active connection limits for Secure Gateway and Connection Broker API by type and automatically block abusive IP addresses using Windows Firewall rules to prevent resource exhaustion and enhance security.
• New: Ability to update the RAS Agents on RD Session Hosts while preserving their drain state throughout the upgrade. This supports rolling farm-wide agent updates with minimal user disruption and no manual state management.
• New: Ability to import custom certificates and configure a custom Service Provider (SP) Entity ID for SAML communication. This allows administrators to use certificates from managed sources and enables the use of a single Identity Provider (IdP) instance across multiple themes and farms.
• New: Display the current host pool workload as a percentage when autoscaling is enabled. This provides administrators with better visibility into resource utilization, making it easier to fine-tune thresholds and optimize capacity.
• New: Display the OS Uptime for RD Session Hosts, VDI and Azure Virtual Desktop (AVD) hosts, Remote PCs, Secure Gateways, Connection Brokers, and Enrollment Servers in RAS Console to help identify unintentional reboots and monitor maintenance schedules.
• New: Ability to configure write-behind caching for redirected drives directly in the RAS Console to improve file saving performance.
• New: Ability to configure custom Grafana dashboard URL and InfluxDB authentication credentials to enhance monitoring security and flexibility.
• New: Add experimental support for VM hibernation in Microsoft Azure and Azure Virtual Desktop to reduce cloud costs, to be used in combination with Azure Virtual Desktop AVD Scaling plans configured outside of RAS. This property is configured during template creation and cannot be modified afterward.
• New: Add support for window previews on taskbar hover for published applications in Parallels Client for Windows and introduce a corresponding policy to manage this functionality.
• New: Add a new "Allow WebSockets with missing origin" option in the Secure Gateway settings under the Web property page. This allows administrators to support proxies (such as Microsoft Entra Application Proxy) that strip the origin header from WebSocket connections, preventing unnecessary User Portal connection rejections.
• New: Ability to export RAS-managed certificates to PFX format with password protection, simplifying certificate management for various RAS roles.
• New: Drop support for Windows Server 2012 R2 on RD Session Host agent.
• New: Drop support for Windows 10 (32-bit) on PC and Guest Session Host agents.

• Improved: Support for SAML web authentication while keeping Windows LSA protection (RunAsPPL) enabled, maintaining stronger security on supported Windows client and server platforms.
• Improved: Keyboard layout synchronization between the client and server is now enabled by default, ensuring a seamless transition and consistent input settings when switching focus between local and remote applications.
• Improved: Add a "Check for Updates" option to the Help menu for easier access.
• Improved: A warning is now displayed when publishing new Microsoft App-V applications to inform administrators that Microsoft App-V server components have reached end-of-support.
• Improved: Automatically remove RD Session Hosts from the database that no longer exist on the provider and have an unknown template or missing settings.
• Improved: Optimize logging by preventing redundant error messages when a templated host pool has no template assigned.
• Improved: Provide a clear error message when host provisioning fails due to a missing or deleted Organizational Unit (OU) in Active Directory.
• Improved: Enhanced URL validation in various URL fields in the RAS Console, providing detailed error messages for invalid hostnames, ports, or paths.
• Improved: Remove unsupported web file transfer settings for Azure Virtual Desktop host pools to prevent configuration confusion.
• Improved: Ability to copy only selected VDI host entries to the clipboard using the Ctrl+Shift+C shortcut, facilitating easier sharing of specific host data.
• Improved: Enhance keyboard accessibility in the RAS Console by allowing users to navigate list controls using arrow keys, toggle checkboxes with the space bar, and edit cell values using the F2, Enter, and Esc keys.
• Improved: Enhance keyboard navigation and accessibility in the macOS Keyboard Mapping policy settings by ensuring an item is selected by default and adding a Tasks menu for editing and resetting values.
• Improved: Update the PC keyboard policy controls in the RAS Console to use radio buttons, allowing administrators to clearly choose between the Universal keyboard and the PC keyboard.
• Improved: Visibility of template IP addresses in the RAS Console when templates are in maintenance mode, supporting RD Session Host, VDI, and Azure Virtual Desktop templates.
• Improved: Enhance the usability of the "Details" button for VDI hosts by enabling single-click access and providing a visual hover indicator.
• Improved: Add a new "Enable application monitoring" setting for VDI host pools in the management console.
• Improved: Display SQL Server and SQL Server Reporting Services (SSRS) version information in the RAS Reporting Test Connection window to assist with configuration and troubleshooting.
• Improved: Streamline the deletion of multiple notification scripts in the RAS Console by displaying a single confirmation prompt instead of individual prompts for each item.
• Improved: Ability to disable concurrent cloning on Hyper-V Clusters to restore legacy behavior and reduce resource contention during provisioning (requires Windows Registry setting NonBlockingClone set to 0).
• Improved: Enhance reliability of Hyper-V provider management with automatic retries for WMI calls that intermittently fail with access denied errors.
• Improved: Add Azure Stack HCI Core Edition and Azure Datacenter Core Edition as approved Windows Server editions for Hyper-V provider.
• Improved: Add settings validation for forwarding gateways to prevent invalid configurations that could cause the Secure Gateway to appear as "Not Verified" in the RAS Console.
• Improved: Escape user passwords containing $$ in published RDP connections to ensure successful authentication on Wyse ThinOS 10 devices.
• Improved: Add support for Microsoft Cluster Networks with multiple IP addresses when connecting to Hyper-V Failover Cluster providers.
• Improved: Enhanced clipboard redirection logic to preserve image transparency when copying images from a remote session using the Parallels Client for Mac or the User Portal.
• Improved: Ability to disable AppBar support (requires Windows Registry setting EnableAppBarSupport set to 0).
• Improved: Updated the RAS Provider Service description from "VDIManager Application" to "Parallels RAS Provider Agent".
• Improved: Allow configuring the RDP file system cache mode via the registry for RD Session Host agents that are not connected to a Connection Broker.
• Improved: Ability to control the visibility of the legacy language bar during input locale redirection (requires Windows Registry setting LangBarMode set to 1 to always show for CJK languages and hide otherwise).
• Improved: Performance when saving files to redirected drives by adding support for random write operations and write-behind caching for files already open for reading.

• Critical Fix: The Enrollment Server service may crash during shutdown or restart.
• Critical Fix: Potential crash in the Connection Broker (Redundancy service) when stopping the service while an Azure Virtual Desktop host removal process is still in progress.
• Critical Fix: The Connection Broker could fail to release system resources after processing logging API requests.
• Critical Fix: High memory consumption in the Connection Broker service caused by excessive application monitoring data processing in large VDI environments.
• Critical Fix: The RAS Connection Broker may experience a memory leak and increased resource usage when processing a high volume of requests to the Connection Broker API endpoints.
• Critical Fix: The Provider Agent service may crash when the number of monitored virtual machines exceeds the configured limit.

• Fixed: Taskbar icons or window artifacts may momentarily appear in Parallels Clients when an application updates a window's location or name immediately after it has been hidden.
• Fixed: Azure Virtual Desktop (AVD) published applications may fail to launch with an insufficient rights error after updating the provider's app registration password.
• Fixed: VDI host pool file cache settings are overridden by global agent settings during user sessions, causing the system to default to read-ahead only.
• Fixed: Let's Encrypt certificates automatically renew even when the renewal setting is set to "Never."
• Fixed: Administrators receive excessive false-positive "session in state down" email notifications during normal session logoffs. A new grace period ensures transient session states during termination do not trigger unnecessary alerts.
• Fixed: The Target Verifier window fails to open when attempting to verify the application path for published resources.
• Fixed: License expiration date incorrectly displays as "Expired" or shows inconsistent information for Power and Custom administrators across various license types.
• Fixed: Search functionality in the Customization tab of Custom Provider settings does not return results.
• Fixed: The variables table in Custom Provider settings fails to update immediately after a variable is renamed.
• Fixed: Credential verification for Custom Providers incorrectly uses original settings instead of updated values when saving changes, leading to validation errors.
• Fixed: The "Download" and "Update" buttons in RAS Console remain disabled when a new version is detected, preventing administrators from initiating in-console upgrades.
• Fixed: The Version ID column in the Template Versions dialog does not resize correctly, causing text such as "(Current)" to be cut off when using the "Size all columns to fit" option.
• Fixed: The cloning failure details dialog displays an empty "Reason" field when a VDI clone fails to be created.
• Fixed: User profile details in the Session Information tab may incorrectly display as "Other" instead of "FSLogix" due to a mismatch in username formats during profile path detection.
• Fixed: Inconsistent character limits for the VDI provider description field prevent saving settings when the description reaches the maximum allowed length.
• Fixed: The RD Session Host template wizard incorrectly displays Guest agent status as “OK" when the Guest Agent is not connected to the Provider Agent.
• Fixed: Manual proxy detection fails to retrieve the correct address and port when using Web Proxy Auto-Discovery (WPAD) configurations.
• Fixed: The Install and Done buttons may remain disabled after a remote agent installation or update completes.
• Fixed: Connection Broker API settings pages appear for Tenant Brokers in the RAS Console where only global API settings should be available.
• Fixed: The "Show hosts in host pool..." option in the RD Session Host pools task menu remains active during multi-selection but fails to execute.
• Fixed: Device shadowing fails when the "Only allow Let's Encrypt verification" option is enabled in the Secure Gateway network properties.
• Fixed: Forwarding gateway settings fail to refresh when port 80 is disabled, causing the gateway to remain in an unverified state until the service is manually restarted.
• Fixed: Enrollment Server agents installed on non-system drives (e.g., D:/) are not detected correctly during upgrades by the RAS Installer, and registration certificates fail to load from the installation path.
• Fixed: The Provider Agent could miss VMware host notifications, such as power state and IP updates, which prevents the cloning process from completing.
• Fixed: The provider agent may lose connectivity with the Scale Computing Provider if the logon session is invalidated, such as after a cluster reboot.
• Fixed: Remote PC hosts and their settings, including persistent user assignments, could be unexpectedly removed from the database if the Provider Agent fails to query Active Directory.
• Fixed: The Windows Command Prompt type command fails to display the content of files on redirected drives when drive caching is enabled.
• Fixed: Files located on network shares may fail to open when drive redirection cache is enabled.
• Fixed: Remote PC hardware and operating system details are missing in the RAS Console when a secondary Connection Broker is configured as the preferred broker.
• Fixed: Scheduled reboot tasks for RD Session Hosts and VDI hosts fail to trigger when the agent is already in a "reboot pending" state, such as after a Windows Update.
• Fixed: Custom Provider guests may fail to update their status and log disconnection errors when provider settings are modified during an active polling cycle.
• Fixed: Custom provider logs do not inherit the farm-wide verbose logging level when the provider is created or enabled.
• Fixed: Taskbar icons for published applications may fail to flash when new notifications or messages are received.
• Fixed: Printing fails when using the "Print Portable Document Format (PDF)" format if the destination printer name contains spaces.
• Fixed: Adding a secondary Connection Broker to a Tenant Broker site via PowerShell may return a permission error even after a successful installation.
• Fixed: Azure Virtual Desktop (AVD) hosts fail to resize on the first attempt when applying a VM size override at the host pool level.

RAS REST API
RAS REST API v22.0-28160 (29 October 2026)

• Security Fix: Upgraded OpenSSL to version 3.5.9.
• Security Fix: Upgraded .NET to version 10.0.114.

• New: Add support for generating the Web API secret for Secure Gateway and Site default settings.
• New: Add new endpoints to retrieve Nutanix clusters and subnets.

• Improved: Update the AWS subnets endpoint to use ProviderId as a path parameter and remove the deprecated TemplateType parameter.
• Improved: Add support for configuring application monitoring settings on VDI host pools.
• Improved: Streamline session data by removing the deprecated ServerID field from RDPSession objects in favor of SessionHostId.
• Improved: Clean up legacy configuration by removing the deprecated EnableOverlayIcons setting from Client and System settings.

RAS PowerShell
RAS PowerShell v22.0-28160 (29 October 2026)

• Security Fix: Upgraded OpenSSL to version 3.5.9.
• Security Fix: Upgraded .NET to version 10.0.114.

• New: Add support for exporting URL redirection settings to XML, matching the functionality available in the RAS Console.
• New: Add support for generating the Web API secret for Secure Gateway and Site default settings.
• New: Add Get-RASNutanixClusters and Get-RASNutanixSubnets commands to manage Nutanix resources.

• Improved: Update Get-RASAWSSubnets by replacing the TemplateType parameter with ProviderId for better resource targeting.
• Improved: Add support for configuring application monitoring settings on VDI host pools.
• Improved: Streamline session data by removing the deprecated ServerID field from RDPSession objects in favor of SessionHostId.
• Improved: Clean up legacy configuration by removing the deprecated EnableOverlayIcons setting from Client and System settings.

• Fixed: The -Duration parameter in the Set-RASVDIHostPool command does not correctly validate or apply time values, leading to inconsistencies between PowerShell and the RAS Console.
• Fixed: VDI host pool and template override settings for clusters, subnets, and organizational units do not apply correctly.
• Fixed: License details do not match the RAS Console, failing to redact sensitive information for Power and Custom administrators.

Management Portal
Management Portal (29 October 2026)

• Security Fix: Upgraded .NET to version 10.0.114.

• New: Add an OS Uptime column to the RD Session Host, Secure Gateway, and Connection Broker listing and overview pages.
• New: Add support for viewing Nutanix Prism Central VDI providers, including their associated host pools and hosts.

• Improved: The "Custom URL" field in Authentication settings now provides specific error messages for different validation violations, such as invalid formats or exceeding character limits, instead of a generic error.

• Fixed: Licensing page displays incomplete data and incorrect labels compared to the RAS Console.
• Fixed: The publishing page becomes blank when selecting a custom desktop size in the Publishing Desktop session settings.
• Fixed: A blank screen is displayed instead of redirecting to the login page after a user signs out.
• Fixed: Provider information page appears empty when viewing a provider created using the Custom Provider Framework.
• Fixed: Entering an incorrect password during certificate upload results in an infinite loading animation without displaying an error message.

User Portal (Web client)
User Portal (Web client) (29 October 2026)

• Security Fix: Node.js upgraded to v24.22.1.
• Security Fix: Strengthened security headers by implementing Cross-Origin-Embedder-Policy (COEP), Cross-Origin-Opener-Policy (COOP), and Cross-Origin-Resource-Policy (CORP), added the "frame-ancestors" directive and a Referrer Policy.
• Security Fix: Improved overall security posture by hardening SAML authentication and implementing additional protections against Cross-Site Scripting (XSS) and cache poisoning.

• New: Add support for SAML as a Multi-Factor Authentication (MFA) provider.
• New: Support for executing device posture assessments on Windows platform via the Parallels Client prior to session establishment to enforce security and compliance policies. This includes checks for antivirus status, OS patch levels, specific processes, registry keys, and disk encryption.
• New: Introduce a dedicated Files section to browse, upload, and download files from published network shares, with the ability to launch files directly into published applications using existing file-type associations.
• New: Remove the requirement for cookie-based session persistence, allowing User Portal requests within a single browser session to be handled by any available RAS Secure Gateway.

• Improved: Enhanced multi-monitor support by enabling seamless application window dragging across browser windows without needing to release the mouse button.
• Improved: Automatically redirect HTTP requests to HTTPS and enable HTTP Strict Transport Security (HSTS) by default to enhance connection security.
• Improved: Redesigned the Settings interface using a side drawer to provide a cleaner and more consistent navigation experience.
• Improved: Redesigned the folder redirection management interface to improve usability, particularly on mobile devices, and ensure unique folder naming.
• Improved: Enhanced detection accuracy for Japanese keyboard layouts on Windows devices.
• Improved: Update password expiration alerts to provide clearer information regarding the remaining days before expiration.
• Improved: Added support for default printer policy and settings, ensuring the 2X Universal Printer is no longer forced as the default and allowing login scripts or user preferences to correctly define the preferred printer.
• Improved: Refined the automatic keyboard detection on macOS to accurately distinguish between similar layouts, such as British English and US English.
• Improved: Add support for extended scancodes to ensure the Pause, Break, and Num Lock keys function correctly in both Universal and PC Keyboard modes.
• Improved: Add support for automatic line-ending conversion when copying text from non-Windows devices to published resources. This ensures that multi-line data copied from any platform preserves its original row structure when pasted into remote sessions.

• Fixed: Universal keyboard layout settings do not apply at runtime.
• Fixed: Published desktops fail to launch and prompt for credentials when using multiple displays with a non-default theme.
• Fixed: Auto-detected keyboard layout changes on the local device are not automatically redirected to the remote desktop session.
• Fixed: Vertical display alignment settings for multi-display support fail to save in the user options.
• Fixed: Active Directory password complexity requirements are not displayed in the Change Password dialog.
• Fixed: Certain applications may fail to save files when using redirected drives due to specific file handling and delete-on-close logic requirements.
• Fixed: Users may receive a false network disconnection error message while a session remains active and functional after a period of inactivity.
• Fixed: The browser print dialog intermittently fails to open in Chromium-based browsers when using the Parallels Universal Printer. This occurred if a focus event was dispatched while waiting for the dialog to appear, particularly during consecutive print jobs.
• Fixed: Launching a second published application could cause it to be minimized automatically while the first application remained in focus.
• Fixed: Navigating back to a parent folder in the app launcher may cause the menu to close unexpectedly.
• Fixed: Drag-and-drop functionality incorrectly triggers a "Save As" dialog when file transfers are disabled, despite the upload being blocked.
• Fixed: The application footer could be partially hidden by the RAS menu bar when running in full-screen mode.
• Fixed: Right-side modifier keys, such as the right Shift key, are incorrectly sent as their left-side variants when using the User Portal on macOS.
• Fixed: Intermittent "OTP Error" message appears after submitting a one-time password (OTP) via RADIUS MFA, even when authentication is successful. This is due to multiple identical authentication requests being sent, which caused MFA providers with replay protection to reject duplicate attempts.
• Fixed: Users are incorrectly logged out and forced to sign in again after completing a required password change at logon.
• Fixed: External connections via Microsoft Entra Application Proxy may fail with a network error during the login process. This occurred because the newly introduced security hardening rejected WebSocket connections when the origin header was missing or stripped by the proxy. A new option is now available in the RAS Console to control this behavior.
• Fixed: Keyboard layout defaults to Universal layout when an unrecognized layout is pushed via policy.
• Fixed: The system incorrectly displays a network error message when a session opened via Connection Broker API is closed gracefully without a configured end session URL.
• Fixed: Certain modals may appear empty due to incorrect HTML sanitization.
• Fixed: Parallels Client for Mac, iOS, and Android are incorrectly prompted for standard credentials when launching applications via Web Authentication from the User Portal.
• Fixed: Session reconnection fails for sessions established via the Connection Broker API if the network is interrupted or if reconnection is attempted after the initial connection token expires.
• Fixed: Static resources fail to load when the User Portal is embedded in an iframe, even when the "Allow embedding" setting is enabled.
• Fixed: Sessions are unexpectedly disconnected when the "Automatically log out idle client connection" timeout is reached, even if the session is not idle.

Parallels Client (Windows)
Parallels Client (Windows) v22.0-28160

• Security Fix: Upgraded OpenSSL to version 3.5.9.
• Security Fix: Upgraded .NET to version 10.0.114.
• Security Fix: Improved authentication and encryption enforcement within the shadowing feature to prevent unauthorized RDP access to client machines.

• New: Support for executing device posture assessments on the client prior to session establishment to enforce security and compliance policies. This includes checks for antivirus status, OS version, specific processes, registry keys, UAC, and Windows Defender Firewall profile.
• New: Add support for SAML as a Multi-Factor Authentication (MFA) provider.
• New: Add support for window previews when hovering over taskbar icons.
• New: Drop support for Windows 10 (32-bit).

• Improved: Updated trusted.pem root certificates (used if the Windows Certificate Store is inaccessible).
• Improved: Enhance performance when dragging emails from Outlook (Classic) to the local machine by optimizing how data is handled during the transfer.
• Improved: Enhanced password expiration reminders by using native Windows toast notifications that remain in the Action Center and include a direct option to change the password.
• Improved: Visual clarity of the username field in connection properties when using Web+Credential authentication, clearly indicating it is read-only.
• Improved: Enhanced reliability of Azure Virtual Desktop connections by prompting for re-authentication if a cached token is rejected.
• Improved: Strengthen security for farm connections by introducing a local verification layer that validates connections against a trust list before establishing a session.

• Critical Fix: Parallels Client may crash if the connection splash screen is moved or dragged during the login process.
• Critical Fix: Parallels Client may hang or crash on startup when using the Modern UI, particularly in environments with high-resolution displays and/or limited memory.

• Fixed: Windows "Do not disturb" mode triggers automatically when focusing a published application that has seamless z-order disabled.
• Fixed: The "Force default printer" settings field incorrectly accepts invalid or negative values, which could lead to unexpected printing behavior.
• Fixed: Disabling the "Close error messages automatically" setting requires a client restart to take effect.
• Fixed: Local IME candidate windows remain visible and conflict with server-side input when using input locale redirection and seamless z-order.
• Fixed: Microsoft Windows App update fails repeatedly due to signature verification errors, causing the update prompt to reappear every time the client is launched.
• Fixed: Published applications may fail to stay in the foreground when selected from the Windows taskbar if a child window is open and seamless z-order is enabled.
• Fixed: Incorrect processing of taskbar position messages could cause some application windows to be invisible or appear at the wrong screen location.
• Fixed: Enabling drive and camera redirection in Azure Virtual Desktop (AVD) sessions automatically forces dynamic redirection for new devices, ignoring the specific user configuration for plugging in devices later.
• Fixed: Custom branding, including logos and client names, is lost when upgrading the portable Parallels Client to a newer version.
• Fixed: Printers fail to redirect when launching Azure Virtual Desktop (AVD) resources on Windows ARM64 devices.

Parallels Client (Mac)
Parallels Client (Mac) v22.0-28153 (29 October 2026)

• Security Fix: Upgraded OpenSSL to version 3.5.9.

• New: Add support for macOS 27.
• New: Drop support for macOS 13.
• New: Add support for SAML as a Multi-Factor Authentication (MFA) provider.
• New: Support for time zone redirection for session hosts without the Remote Desktop Services (RDS) role, ensuring the remote session shows the user's local time zone.
• New: Add support for HTML format during drag-and-drop operations, enabling users to move formatted content from native macOS applications to remote sessions.
• New: Enhanced runtime input locale propagation by adding support for default Input Method Editor (IME) handling for IME-only languages on the server, including automatic showing/hiding of the legacy language bar for CJK (Chinese, Japanese, and Korean) IMEs.
• New: Support for DVORAK keyboard layouts.

• Improved: Support dynamic desktop resizing for published applications, allowing windows to adjust resolution without session reconnection. A new option is available in Display settings.

• Critical Fix: The client may crash when copying and pasting content containing both images and formatted text (RTF) from remote to local applications.

• Fixed: Subsequent drag-and-drop operations from local to remote applications incorrectly transfer data from the first operation when Drive Redirection "File Caching" is enabled.

Parallels Client (Linux)
Parallels Client (Linux) v22.0-28160 (29 October 2026)

• Security Fix: Upgraded OpenSSL to version 3.5.9.

• New: Upgrade to the Qt 6 framework to enhance client performance and ensure compatibility with the latest Linux distributions.
• New: Add support for launching sessions through the Connection Broker API.
• New: Add support for SAML as a Multi-Factor Authentication (MFA) provider.
• New: Support for time zone redirection for session hosts without the Remote Desktop Services (RDS) role, ensuring the remote session shows the user's local time zone.
• New: Add support for Ubuntu 26.04.
• New: Drop support for Debian 11 and Fedora 40 and 41.
• New: Add support for keyboard layout synchronization on initial connection.
• New: Enhanced runtime input locale propagation by adding support for default Input Method Editor (IME) handling for IME-only languages on the server, including automatic showing/hiding of the legacy language bar for CJK (Chinese, Japanese, and Korean) IMEs.

• Improved: Updated trusted.pem root certificates.
• Improved: Enhanced security for Public IP detection by enforcing strict SSL certificate validation.

• Fixed: Credentials are not saved when selecting the "Save password" checkbox within the login dialog for connections using the "Web + Credentials" authentication type.
• Fixed: Remote applications fail to launch via the Command Line Interface (CLI) with a "Public IP recovery failed" error when Public IP filtering is enabled.
• Fixed: A duplicate or offset mouse cursor may appear when using specific applications, such as AutoCAD or Autodesk DWG TrueView, in remote sessions.
• Fixed: The Connection’s advanced settings dialog may experience significant delays when loading due to a failure while registering an internal browser scheme.
• Fixed: Published desktops and RDP connections may fail to connect when using a custom display size on Linux distributions with the XFCE desktop environment.
• Fixed: Published desktops fail to launch when using a specific window size or the "available area" option on certain window managers, such as IceWM and XFCE.

IGEL
IGEL v22.0-28160

• Security Fix: Mask passwords configured within IGEL Universal Management Suite (UMS) profiles to prevent them from appearing in cleartext within the UMS registry view.

• New: Drop support for IGEL OS 11.

• Fixed: Redundant login prompts and invalid credentials errors appear when connecting to a farm or launching published resources.
• Fixed: UMS connection policy settings might not be applied to the RAS client.
• Fixed: Authentication fails when passwords containing specific special characters are deployed via IGEL Universal Management Suite (UMS) policies.

Parallels Client (iOS)
Parallels Client (iOS) v22.0-28112 (29 October 2026)

• Security Fix: Upgraded OpenSSL to version 3.5.9.

[*]New: Add support for iOS and iPadOS 27.
[*]New: Drop support for iOS and iPadOS 17.
[*]New: Add support for SAML as a Multi-Factor Authentication (MFA) provider.
[*]New: Add support for launching sessions through the Connection Broker API.
[*]New: Support for time zone redirection for session hosts without the Remote Desktop Services (RDS) role, ensuring the remote session shows the user's local time zone.
[*]New: Add support for PC keyboard layout synchronization on initial connection.
[/list]

• Improved: Pickers now only display the selected value when disabled by policy.

• Fixed: RAS User Portal’s client detection and application launching may fail for connections using Web Authentication.

Parallels Client (Android)
Parallels Client (Android) v22.0-28111 (29 October 2026)

• Security Fix: Upgraded OpenSSL to version 3.5.9.

• New: Add support for SAML as a Multi-Factor Authentication (MFA) provider.
• New: Support for time zone redirection for session hosts without the Remote Desktop Services (RDS) role, ensuring the remote session shows the user's local time zone.
• New: Add support for Android 17.
• New: Drop support for Android 10 and 11.

• Fixed: Embedded browser stays open and displays an error during the first connection via Web Authentication even if the login is successful.
• Fixed: Web authentication prompts for credentials twice and fails to redirect to the client when using an invitation to configure a connection with Web+Credentials authentication type.
• Fixed: RAS User Portal’s client detection and application launching may fail for connections using Web Authentication.
• Fixed: Session settings option in the sidebar become unresponsive after applying changes to desktop resolution during an active session.

RAS Reporting
RAS Reporting v22.0-28160 (29 October 2026)

• New: The Session Activity report now includes public IP address information for improved historical tracking and security monitoring.
• New: Drop support for SQL Server and SSRS 2016.

• Improved: Enhanced RAS Reporting upgrade reliability by adding automatic snapshot creation, rollback capabilities, and post-upgrade validation checks. These enhancements provide safer upgrades, faster recovery from failures, and automated verification of Reporting environment integrity after version upgrades.
• Improved: Enhance SSRS report deployment reliability by introducing a verification-first flow that handles service unresponsiveness, missing folders, and partial deployment failures with automated retries.
• Improved: Retrieves and sends SQL Server and SSRS version information to the RAS Console for display during connection tests.

• Fixed: Reports may fail to be displayed or the installer may fail to complete after an upgrade when using SQL Server Reporting Services (SSRS) 2017 or 2019 due to duplicate HTTP response headers causing a connection failure.
• Fixed: The RAS Reporting database on a custom SQL instance may not be deleted during uninstallation when initiating the removal via the "Change" option in the Windows Control Panel.

RAS Performance Monitor
RAS Performance Monitor v22.0-28160 (29 October 2026)

• New: Enhanced security by introducing a new installer wizard step to configure InfluxDB credentials, preventing unauthorized external access to the monitoring database.

• Critical Fix: Performance Monitor dashboard may fail to load due to connection issues between the installer and the local Grafana service.

HALB
HALB v22.0-28160 (29 October 2026)

• Security Fix: Upgraded OpenSSL to version 3.5.9.

• Improved: Added new logging options to enable, disable, and create log archives directly from the HALB Appliance Advanced Menu.
• Improved: The HALB status screen now displays the current state of shell access and logging services.
• Improved: Display a confirmation message with instructions on how to retrieve log archives via SSH after successful creation.
• Improved: Provide detailed error messages when static IP address configuration fails to assist with troubleshooting network connectivity.

• Fixed: SSL certificates fail to update on the HALB appliance when using SSL offloading mode unless a manual change is applied to the HALB properties in the RAS Console.