Symantec™ Workspace Virtualization 7.5 SP1 HF4 and Symantec

Symantec™ Workspace
Virtualization 7.5 SP1 HF4
and Symantec™ Workspace
Streaming 7.5 SP1 HF4
Release Notes
Symantec™ Workspace Virtualization 7.5 SP1 HF4
and Symantec™ Workspace Streaming 7.5 SP1 HF4
Release Notes
Legal Notice
Copyright © 2015 Symantec Corporation. All rights reserved.
Symantec, the Symantec Logo, the Checkmark Logo and are trademarks or registered
trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other
names may be trademarks of their respective owners.
The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Symantec
Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED
CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED
WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR
NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH
DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL
NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION
WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE
INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE
WITHOUT NOTICE.
Symantec Corporation
350 Ellis Street
Mountain View, CA 94043
http://www.symantec.com
Technical Support
Symantec Technical Support maintains support centers globally. Technical Support’s
primary role is to respond to specific queries about product features and functionality.
The Technical Support group also creates content for our online Knowledge Base.
The Technical Support group works collaboratively with the other functional areas
within Symantec to answer your questions in a timely fashion. For example, the
Technical Support group works with Product Engineering and Symantec Security
Response to provide alerting services and virus definition updates.
Symantec’s support offerings include the following:
■
A range of support options that give you the flexibility to select the right amount
of service for any size organization
■
Telephone and/or Web-based support that provides rapid response and
up-to-the-minute information
■
Upgrade assurance that delivers software upgrades
■
Global support purchased on a regional business hours or 24 hours a day, 7
days a week basis
■
Premium service offerings that include Account Management Services
For information about Symantec’s support offerings, you can visit our website at
the following URL:
www.symantec.com/business/support/
All support services will be delivered in accordance with your support agreement
and the then-current enterprise technical support policy.
Contacting Technical Support
Customers with a current support agreement may access Technical Support
information at the following URL:
www.symantec.com/business/support/
Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be at
the computer on which the problem occurred, in case it is necessary to replicate
the problem.
When you contact Technical Support, please have the following information
available:
■
Product release level
■
Hardware information
■
Available memory, disk space, and NIC information
■
Operating system
■
Version and patch level
■
Network topology
■
Router, gateway, and IP address information
■
Problem description:
■
Error messages and log files
■
Troubleshooting that was performed before contacting Symantec
■
Recent software configuration changes and network changes
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support Web page at the following URL:
www.symantec.com/business/support/
Customer service
Customer service information is available at the following URL:
www.symantec.com/business/support/
Customer Service is available to assist with non-technical questions, such as the
following types of issues:
■
Questions regarding product licensing or serialization
■
Product registration updates, such as address or name changes
■
General product information (features, language availability, local dealers)
■
Latest information about product updates and upgrades
■
Information about upgrade assurance and support contracts
■
Information about the Symantec Buying Programs
■
Advice about Symantec's technical support options
■
Nontechnical presales questions
■
Issues that are related to CD-ROMs, DVDs, or manuals
Support agreement resources
If you want to contact Symantec regarding an existing support agreement, please
contact the support agreement administration team for your region as follows:
Asia-Pacific and Japan
customercare_apj@symantec.com
Europe, Middle-East, and Africa
semea@symantec.com
North America and Latin America
supportsolutions@symantec.com
Workspace Virtualization
and Workspace Streaming
Release Notes
This document includes the following topics:
■
About Workspace Virtualization and Workspace Streaming
■
Supported platforms
■
System requirements
■
Installation and upgrade information
■
Fixed Issues
■
Documentation resources
■
Additional information
About Workspace Virtualization and Workspace
Streaming
This document contains release information about the following Workspace
Virtualization and Workspace Streaming products:
■
Symantec™ Workspace Virtualization 7.5 SP1 HF4 build number: 7.5.792
■
Symantec™ Virtual Composer 7.5 SP1 HF4 build number: 7.5.0.792
■
Symantec™ Workspace Streaming Server 7.5 SP1 HF4 build number: 7.5.0.792
Workspace Virtualization and Workspace Streaming Release Notes
Supported platforms
Supported platforms
Streaming endpoint operating systems
64-bit editions of the following operating systems:
■
Windows Server 2012 R2
■
Windows 8.1
■
Windows 8
■
Windows 7 and 7 SP1
■
Windows Server 2008 R2 SP1 when used as an endpoint
32-bit editions of the following operating systems:
■
Windows 8.1
■
Windows 8
■
Windows 7 and 7 SP1
■
Windows XP SP3 is recommended for English language versions and required
for non-English language versions of Windows XP
Windows XP is supported with the additional components of Windows Installer
3.1: http://support.microsoft.com/kb/893803 and the Filter manager roll-up hotfix:
http://support.microsoft.com/kb/914882
Virtualization endpoint operating systems
64-bit editions of the following operating systems:
■
Windows Server 2012 R2
■
Windows 8.1
■
Windows 8
■
Windows 7 and 7 SP1
■
Windows Server 2008 SP2
32-bit editions of the following operating systems:
■
Windows 8.1
■
Windows 8
■
Windows 7 and 7 SP1
■
Windows Server 2008 SP2
■
Windows Server 2003 SP2
7
Workspace Virtualization and Workspace Streaming Release Notes
Supported platforms
■
Windows XP SP3 is recommended for English language versions and required
for non-English language versions of Windows XP
Windows XP is supported with the additional components of Windows Installer
3.1: http://support.microsoft.com/kb/893803 and the Filter manager roll-up hotfix:
http://support.microsoft.com/kb/914882
Streaming Server operating systems
64-bit editions of the following operating systems:
■
Windows Server 2012 R2
■
Windows Server 2008 SP2 and Windows Server 2008 R2 SP1
32-bit editions of the following:
■
Windows Server 2008 SP2
■
Windows Server 2003 R2
■
Windows Server 2003 SP2 or later
Streaming Databases
Streaming supports the following databases:
■
Microsoft SQL Server 2008 R2 SP1, Microsoft SQL Server 2008 R2 Express,
Microsoft SQL 2012
■
Oracle 10g, 11g, RAC
Virtual Composer
64-bit versions of the following operating systems:
■
Windows 8.1
■
Windows 8
■
Windows 7 and 7 SP1
32-bit versions of the following operating systems:
■
Windows 8.1
■
Windows 8
■
Windows 7 and 7 SP1
■
Windows XP SP3
8
Workspace Virtualization and Workspace Streaming Release Notes
System requirements
System requirements
The following tables contain system requirements for the endpoints, Streaming
Server, and Virtual Composer:
Table 1-1
Endpoints
System component
Requirement
System Processor
Same as recommended by the operating system and installed applications.
System memory
Same as recommended by the operating system and installed applications.
Free disk space
50 MB of free disk space plus additional space as required by installed applications.
Table 1-2
Streaming Server
System component
Requirement
System Processor
Minimum 1 GHz of processor capability.
System memory
2-GB memory minimum.
Free disk space
2 GB of free disk space, plus three times the space that is required by the applications
to be uploaded on to the server.
Table 1-3
Virtual Composer
System component
Requirement
System Processor
Same as recommended by the operating system.
System memory
1-GB memory minimum. Additional as recommended by the applications you want to
package.
Free disk space
30 MB of free disk space, plus three times the size of the package.
Installation and upgrade information
Streaming, Virtualization, and Composer Installation instructions are included in
the User's and Administrator's guides.
The following table contains instructions to upgrade to this version:
9
Workspace Virtualization and Workspace Streaming Release Notes
Installation and upgrade information
Table 1-4
Upgrade instructions
Product
Upgrade instructions
Workspace Streaming
Upgrade instructions for Workspace Streaming are available at the following link:
http://www.symantec.com/docs/HOWTO95653
http://www.symantec.com/docs/DOC7391
Virtual Composer
There is no upgrade path for Symantec Virtual Composer.
Uninstall the previous version before you install the new version. You must back up
any changes that are made to the installation folder - C:\Program
Files\Symantec\Symantec Virtual Composer. The backup includes changes
to the packager.ini file, sample scripts, and default templates. After you install the
new version, copy the back-up files to the installation folder.
Symantec Workspace Streaming installer supports upgrade from Symantec
Workspace Streaming server or client 7.5 or above version to 7.5 SP1 HF4. In this
process, the installer updates all the files except for the configuration files and the
customized files. You can also upgrade the database if any changes have been
made to the database schema. Due to the upgraded Jboss version, STE service
running in named account must be set again after the server upgrade.
Following are the supported upgrade paths:
■
7.5 (7.5.0.493) to 7.5 SP1 HF4 (7.5.0.792)
■
7.5 HF4 (7.5.0.548) to 7.5 SP1 HF4 (7.5.0.792)
■
7.5 SP1 HF1 (7.5.0.760) to 7.5 SP1 HF4 (7.5.0.792)
Before the upgrade, ensure that you have taken a backup of all the configuration
files. To back up the files, you must copy the entire folder from the
%systemdrive%\symantec\workspace streaming\server to another location.
If you are using 6.x version then you cannot directly upgrade to the 7.5 SP1 HF4
version. In these scenarios, you must first upgrade your environment to the 7.5.0.493
version, and then upgrade to the 7.5 SP1 HF4 version. Backward compatibility
between 7.5 SP1 HF4 Parent STE and 7.5 Child STE is not supported. Therefore,
both the STEs must be in the 7.5 SP1 HF4 version for communication to work.
Backward compatibilities for FE components are supported between versions 7.5x
and 6.x.
Backward compatibility for STE and DA is supported only between 7.5x versions.
When you upgrade from Symantec Workspace Streaming 6.1 SP8 MP2, you must
configure the User Data Source to take advantage of the latest Active Directory
features. If you are performing this upgrade operation on a Windows 2003 R2
10
Workspace Virtualization and Workspace Streaming Release Notes
Fixed Issues
Enterprise Edition, you must copy the disk1 folder on your local computer, and then
start the upgrade.
Note: If you have stored all the packages on your local computer, you can ignore
all the .xpa files, and copy the remaining files. In this way, you can reduce the
amount of data that needs to be copied.
After you upgrade the Streamlet Engine (STE) from 6.x to 7.5, ensure that you do
not reconfigure the user data source. If you want to reconfigure the user data source,
you must first back up the provision.xml file, and then reconfigure your UDS so
that you can take advantage of the latest Active Directory features such as
multi-domain, cyclic group, nested group provisions, auto discovery etc.
You cannot upgrade SWS client in the terminal server mode. The SWS client
upgrade is completed through the silent mode only, in the terminal services
environment. The SWS agent upgrade fails if you initiate the upgrade process using
the Streaming Portal or the setup.exe file.
Before upgrading to the Parent STE in a Parent STE-Child STE setup, you must
complete the following procedure:
To upgrade the server when you have added a child STE in your network
1
Launch the Streaming Console.
2
Remove the associated Child STE from the Parent STE using the Parent STE's
console.
3
Upgrade the Parent STE and verify that the upgrade is successful.
4
Upgrade the Child STE, which was earlier removed from the Parent STE,
separately. Verify that the upgrade is successful.
5
Add the child STE back to the Parent STE using the parent STE's console.
Note: The Parent STE-Child STE backward compatibility works only when both
STEs have the same build version installed.
Fixed Issues
This section lists the fixed issues for the following releases:
■
Symantec Endpoint Virtualization 7.5 SP1 HF4
See “Fixed issues” on page 12.
■
Symantec Endpoint Virtualization 7.5 SP1 HF3
See “Fixed issues” on page 13.
11
Workspace Virtualization and Workspace Streaming Release Notes
Fixed Issues
■
Symantec Endpoint Virtualization 7.5 SP1 HF2
See “Fixed issues” on page 13.
■
Symantec Endpoint Virtualization 7.5 SP1 HF1
See “Fixed issues” on page 14.
Fixed issues
The following table lists the fixed issues in SEV 7.5 SP1 HF4:
Table 1-5
Fixed issues
Abstract of the Fixed Issue
Article ID
The Symantec Workspace Virtualization Admin tool becomes unresponsive while importing a
layer.
TECH229236
The Symantec Workspace Streaming provision migration feature fails to map the provisions of
users and groups to the correct format.
TECH229235
Symantec Workspace Streaming AppStreamService.exe crashes and logs Event ID 1000 to TECH229231
the Windows Application log with Exception code: 0x40000015
Symantec Workspace Streaming AppStreamService.exe crashes and logs Event ID 1000 to TECH229232
the Windows Application log with Exception code: 0xc0000005
Symantec Virtual Composer crashes when activating a layer and logs Event ID 1000 to the
Windows Application log with Exception code: 0xc0000005.
TECH229230
Symantec Workspace Virtualization fails to devariablize the registry values with a preceding "\" TECH229259
character in the path statement.
Symantec Security Advisory - Symantec Workspace Streaming Agent unquoted service path
causes local elevation of privilege.
CVE-2015-1484
Symantec Workspace Streaming fails to perform an automatic reset of an upgrade package that TECH229234
has a base version attribute specified.
Symantec Workspace Streaming fails to follow the order of priority of dependent layers set through TECH229233
the streaming console.
Symantec Workspace Virtualization logs Event ID 6001 to the Windows System log with the
following error message:
TECH229260
The driver failed to initialize and cannot be loaded.
Symantec Workspace Virtualization Browser Selection Object tool fails to redirect the web pages. TECH229237
Symantec Security Advisory - Symantec Workspace Streaming Server Third Party Vulnerability CVE-2015-0254
- Apache Standard Taglibs XXE attack
12
Workspace Virtualization and Workspace Streaming Release Notes
Fixed Issues
Fixed issues
The following table lists the fixed issues in SEV 7.5 SP1 HF3:
Table 1-6
Fixed issues
Abstract of the Fixed Issue
Article ID
Apache HttpComponents (before revision 4.3.5/4.0.2) might be susceptible to a Man in the Middle CVE-2014-3577
attack.
Server group configuration auto recovery tab allows invalid character input of greater than 128
character.
N/A
The example format in Settings > General Settings > External Repository is incorrect.
N/A
In the Streaming Console there is no option to check all users or clear all users while adding
users to a local group.
N/A
A network user cannot log in the Streaming Console when User Data Source is configured to
use ADSI.
N/A
The virtualization driver incorrectly holds a lock while calling the file system and causes a deadlock. N/A
When Microsoft’s System Preparation Tool (Sysprep) is used, SWV is unable to update the new TECH215448
VolumeGUID in the registry.
The VZRock shortcut appears and disappears on the desktop in certain situations.
N/A
SVSCMD.exe enum -v prints out the full registry path to the layer.
N/A
When Dell Data Protection Encryption is used with SWV 7.5 and the layers are configured to
activate on system startup, the icons do not show up on the desktop.
N/A
Fixed issues
Following is the list of Fixed issues in SEV 7.5 SP1 HF2:
Table 1-7
Fixed issues
Abstract of the Fixed Issue
Article ID
On the Streamlets page, the initialize process fails so the Collect button remains disabled.
NA
The Streamlet Engine (STE) or standalone Data Access Component (DA) crashes intermittently NA
with memory dump referencing memory heap corruption.
FSLX driver encounters an error during initialization, which causes a system crash.
NA
FSLX driver causes a system crash due to buffer overrun.
NA
13
Workspace Virtualization and Workspace Streaming Release Notes
Documentation resources
Table 1-7
Fixed issues (continued)
Abstract of the Fixed Issue
Article ID
Slow performance due to duplicate handles on a list.
NA
Access Control Lists (ACLs) are incorrectly propagated to subdirectories.
NA
SLAM is not deactivating layers with running processes at logoff.
NA
Unable to stream any applications in Windows 8.1 if using a Microsoft account.
NA
Fixed issues
Following is the list of Fixed issues in SEV 7.5 SP1 HF1:
Table 1-8
Fixed issues
Abstract of the Fixed Issue
Article ID
Buffer passed to function [NtQuerySystemInformation] is too small on systems with a large NA
number of running processes.
BSOD on adding an external drive to the Global Exclude list.
NA
Some applications are unable to write files into the User Account Control Data
Redirection directory whenever a layer is set for activate on system startup.
NA
Virtual IE7 for Windows7 created via LDF tool crashes at launch.
NA
Virtualized file apparently changes into a directory.
NA
AppData environment variable is resolved incorrectly.
NA
Documentation resources
Table 1-9
Product documentation
Document
Location
Symantec™ Workspace Virtualization 7.5 SP1 User's
Guide
http://www.symantec.com/docs/DOC7392
Symantec™ Workspace Streaming 7.5 SP1 Installation
and Implementation Guide
http://www.symantec.com/docs/DOC7391
Symantec™ Workspace Streaming 7.5 SP1 Administration http://www.symantec.com/docs/DOC7205
Guide
14
Workspace Virtualization and Workspace Streaming Release Notes
Additional information
Table 1-9
Product documentation (continued)
Document
Location
Symantec™ Workspace Streaming 7.5 SP1 Server
Upgrade Quick Start Guide
http://www.symantec.com/docs/HOWTO95653
Additional information
The following sections contain additional information about this release:
Workspace Streaming SDK
Symantec Workspace Streaming SDK is made up of several web services that are
accessed using Simple Object Access Protocol (SOAP). The interface is exposed
through a web services description language (WSDL) document. The WSDL
document provides details on the published methods and objects. Most programming
languages provide support for SOAP web services including C#, Visual Basic, C++,
Java, Python, and others. Most languages provide the ability to automatically
generate proxy classes using the WSDL document.
Third Party Legal Notices
This Symantec product may contain third party software for which Symantec is
required to provide attribution to the third party (“Third Party Programs”). Some of
the Third Party Programs are available under open source or free software licenses.
The License Agreement accompanying the Licensed Software does not alter any
rights or obligations you may have under those open source or free software
licenses. For more information on the Third Party Programs, please see the Third
Party Notice document for this Symantec product that may be available at
http://www.symantec.com/about/profile/policies/eulas/, the Third Party Legal Notice
Appendix that may be included with this Documentation and/or Third Party Legal
Notice readme File that may accompany this Symantec product.
15