AWS workspaces-thin-client documentation change
Summary
Added two new sections: 'Server error code 1001 during setup' with reset instructions, and 'FIDO2 pre-session details' documenting limitations of the prerelease FIDO2 authentication feature
Security assessment
The FIDO2 section documents security-related authentication capabilities (security key support) but does not address vulnerabilities. The server error 1001 workaround is a general troubleshooting item. While FIDO2 is a security feature, the changes describe implementation limitations rather than patching vulnerabilities.
Diff
diff --git a/workspaces-thin-client/latest/ug/known-issues.md b/workspaces-thin-client/latest/ug/known-issues.md index b16f2df0e..5a60dae0f 100644 --- a/workspaces-thin-client/latest/ug/known-issues.md +++ b/workspaces-thin-client/latest/ug/known-issues.md @@ -5 +5 @@ -If you select any link on the VDI login screen, you must return to the login screen.Using keyboard shortcuts may cause unexpected behavior.Some peripherals may not be recognized when the device is running.You cannot view the IP address of the Ethernet network from settings.Some menu options in the VDI toolbar are displayed but not working.You cannot find a supported keyboard layout in the OOBE or settings.You can select a supported keyboard layout in device settings, but you cannot enter the specific keys within the virtual session.Toolbar does not expand or collapse when you select it for the first time.On waking up from sleep, WorkSpaces Thin Client device shows the keyboard and mouse setup screen for a few seconds before launching the session.On the restart of a WorkSpaces Thin Client device, end users will see repeated Getting Ready and Checking for updates transition screens before launching the session.Updates for the WorkSpaces Thin Client device are not taking effect.The webcam is not enabled in WorkSpaces and its icon in the top toolbar remains gray.4K monitor not at full resolutionWorkSpaces Thin Client Packet Loss notification.Keyboard power operation is not correct in device settingsHeadset volume change not reflected in device settingsScreen shows multiple updating screen fragments after resetNetwork icon opening Accessibility settings +If you select any link on the VDI login screen, you must return to the login screen.Using keyboard shortcuts may cause unexpected behavior.Some peripherals may not be recognized when the device is running.You cannot view the IP address of the Ethernet network from settings.Some menu options in the VDI toolbar are displayed but not working.You cannot find a supported keyboard layout in the OOBE or settings.You can select a supported keyboard layout in device settings, but you cannot enter the specific keys within the virtual session.Toolbar does not expand or collapse when you select it for the first time.On waking up from sleep, WorkSpaces Thin Client device shows the keyboard and mouse setup screen for a few seconds before launching the session.On the restart of a WorkSpaces Thin Client device, end users will see repeated Getting Ready and Checking for updates transition screens before launching the session.Updates for the WorkSpaces Thin Client device are not taking effect.The webcam is not enabled in WorkSpaces and its icon in the top toolbar remains gray.4K monitor not at full resolutionWorkSpaces Thin Client Packet Loss notification.Keyboard power operation is not correct in device settingsHeadset volume change not reflected in device settingsScreen shows multiple updating screen fragments after resetNetwork icon opening Accessibility settingsServer error code 1001 during setupFIDO2 pre-session details @@ -115,0 +116,44 @@ Enter your activation code to complete setup. The issue will resolve after the d +## Server error code 1001 during setup + +Device encounters server error (code 1001) at the end of setup. + +**Workaround:** + +The device needs to be reset and set up again. + + 1. Select the network icon to open **Settings**. + + 2. Select **About**. + + 3. Select **Reset device**. + + 4. Set up your device. See [Setting up your Amazon WorkSpaces Thin Client service](./setting-up.html). + + + + +## FIDO2 pre-session details + +The FIDO2 feature is in a prerelease state and has some limitations to its use. + +**Limitations:** + + * Only Yubi 5 series with USB security key is supported with FIDO2/WebAuthn supported. + + * Yubi bio-metric keys are not supported. + + * Registration flow with UserVerification=Required that requires PIN creation is not supported. However if a PIN is already set on the USB security key then it is supported. + + * Cross-Origin webauthn credential creation is not supported. + + * Related Origin Requests are not supported. + + * Origin must use https scheme. Origin with ports are not supported (E.g: https//example.com:8443). + + * Recommend using only one USB security key connected to WorkSpaces Thin Client. Multiple USB security connected simultaneously is not supported. + + * Translations for non-english languages on the UI dialogs is not present in this initial release. + + + +