AWS workspaces medium security documentation change
Summary
Updated client requirements to focus on supported Windows versions, added automatic update functionality documentation, revised installation instructions, and introduced USB redirection driver requirements
Security assessment
The change introduces documentation about automatic client updates that include security patches, which directly addresses potential vulnerabilities by ensuring users stay updated. The removal of support for outdated Windows versions (e.g., Windows 7) aligns with security best practices for supported operating systems. The USB redirection driver installation now explicitly requires administrator privileges, adding a security control.
Diff
diff --git a/workspaces/latest/userguide/amazon-workspaces-windows-client.md b/workspaces/latest/userguide/amazon-workspaces-windows-client.md index 1fd7e6aeb..c54e28ceb 100644 --- a//workspaces/latest/userguide/amazon-workspaces-windows-client.md +++ b//workspaces/latest/userguide/amazon-workspaces-windows-client.md @@ -5 +5 @@ -RequirementsSetup and installationDetermine your client versionConnect to your WorkSpaceManage your login information (3.0+ clients only)Client viewsClient languageDisplay supportProxy serversCommand shortcutsDisconnectClipboard supportManage hardware accelerationDiagnostic log uploadRelease notes +RequirementsSetup and installationDetermine your client versionClient application updatesConnect to your WorkSpaceManage your login information (3.0+ clients only)Client viewsClient languageDisplay supportProxy serversCommand shortcutsDisconnectClipboard supportManage hardware accelerationDiagnostic log uploadRelease notes @@ -18,0 +19,2 @@ The following information will help you get started with the WorkSpaces Windows + * Client application updates + @@ -48 +50 @@ The following information will help you get started with the WorkSpaces Windows - * The 4.x client and higher versions require 64-bit Microsoft Windows 8.1, Windows 10, or Windows 11. + * The Amazon WorkSpaces client for Windows requires a Microsoft supported version of Windows 11 or Windows 10. For more details, please see Microsoft’s guidance here: [Windows 11 release information](https://learn.microsoft.com/en-us/windows/release-health/windows11-release-information) or [Windows 10 release information](https://learn.microsoft.com/en-us/windows/release-health/release-information). @@ -50 +51,0 @@ The following information will help you get started with the WorkSpaces Windows - * The 3.x client requires 32-bit Microsoft Windows 7, Windows 8, or Windows 10. @@ -52 +52,0 @@ The following information will help you get started with the WorkSpaces Windows - * The client version 5.20.0 and higher versions require Windows 11 - Version 22000 or later or Windows 10 - Version 1607 or later. @@ -54,0 +55 @@ The following information will help you get started with the WorkSpaces Windows +## Setup and installation @@ -55,0 +57 @@ The following information will help you get started with the WorkSpaces Windows +Download and install the latest version of the Amazon WorkSpaces client application from [Amazon WorkSpaces Client Download](https://clients.amazonworkspaces.com/). @@ -57 +59 @@ The following information will help you get started with the WorkSpaces Windows -###### Note +You have two choices for how to install the Amazon WorkSpaces client application: @@ -59 +61 @@ The following information will help you get started with the WorkSpaces Windows -DCV WorkSpaces are only supported with Windows client version 5.1.0.329 or higher. + * **Install just for you**. If you choose this option and you share your local machine with other users, the WorkSpaces client application is available only to you. If other users on the machine also want to use the WorkSpaces client application, they must install the application for their own use. @@ -61 +63 @@ DCV WorkSpaces are only supported with Windows client version 5.1.0.329 or highe -## Setup and installation + * **Install for all users of this machine**. If you choose this option, the WorkSpaces client application is available to anyone who logs on to the local machine, including those with Guest accounts. @@ -63 +64,0 @@ DCV WorkSpaces are only supported with Windows client version 5.1.0.329 or highe -Download and install the version of the client that you need as follows: @@ -65,5 +65,0 @@ Download and install the version of the client that you need as follows: -To install... | Do this ----|--- -5.x client | Open [Amazon WorkSpaces Client Downloads](https://clients.amazonworkspaces.com/) and find the WorkSpaces Windows client. Under **Get the latest 64 bit client** , choose the **Download** button. -4.x client | Open [Previous Versions](https://clients.amazonworkspaces.com/Versions.html). Find the WorkSpaces Windows client version and choose the **Download** button. -3.x client | Open [Amazon WorkSpaces Client Downloads](https://clients.amazonworkspaces.com/) and find the WorkSpaces Windows client. Under **Get the latest 32-bit client** , choose the **Download** button. @@ -71 +66,0 @@ To install... | Do this -You have two choices for how to install the Amazon WorkSpaces Windows client application: @@ -73 +68 @@ You have two choices for how to install the Amazon WorkSpaces Windows client app - * **Install just for you**. If you choose this option and you share your local machine with other users, the WorkSpaces client application is available only to you. If other users on the machine also want to use the WorkSpaces client application, they must install the application for their own use. +Installing the WorkSpaces client application for all users requires you to have administrator privileges on your local machine. Depending on how your local machine is configured, you might not have such privileges. In that case, you can install the WorkSpaces client application just for yourself. If you have questions about which option to choose, ask your WorkSpaces administrator for guidance. @@ -75 +70 @@ You have two choices for how to install the Amazon WorkSpaces Windows client app - * **Install for all users of this machine**. If you choose this option, the WorkSpaces client application is available to anyone who logs on to the local machine, including those with Guest accounts. +### Installing the USB redirection driver @@ -76,0 +72 @@ You have two choices for how to install the Amazon WorkSpaces Windows client app +To use your local USB devices on the remote session, you will need to install the USB redirection driver. To install this driver, you will need to install the WorkSpaces application for all users, and then check the box to **Install driver for USB redirection**. @@ -77,0 +74 @@ You have two choices for how to install the Amazon WorkSpaces Windows client app +## Determine your client version @@ -78,0 +76 @@ You have two choices for how to install the Amazon WorkSpaces Windows client app +To see which version of the WorkSpaces client you have, choose **Amazon WorkSpaces** , **About Amazon WorkSpaces** , or click the gear icon in the upper-right corner and choose **About Amazon WorkSpaces**. @@ -80 +78 @@ You have two choices for how to install the Amazon WorkSpaces Windows client app -Installing the WorkSpaces client application for all users requires you to have administrator privileges on your local machine. Depending on how your local machine is configured, you might not have such privileges. In that case, you can install the WorkSpaces client application just for yourself. If you have questions about which option to choose, ask your WorkSpaces administrator for guidance. +## Client application updates @@ -82 +80 @@ Installing the WorkSpaces client application for all users requires you to have -When installing the client 4.0+ version, you will have an option to install the USB redirection driver for features like Yubikey U2F redirection support. Use the following procedure to install the USB redirection driver. +The Amazon WorkSpaces client application on Windows will automatically check for available updates, and when new versions become available, will install them in the background when you’re not using it. Once the installation is complete, you simply need to open the client to begin using the latest version. This will provide you with faster access to the latest features, enhancements, and bug fixes without interrupting your productivity. @@ -84 +82 @@ When installing the client 4.0+ version, you will have an option to install the -###### +Client updates will maintain the same installation context as the original installation. This means if the Amazon WorkSpaces client was originally installed for all users on the local machine, future automatic updates will apply to all users. Similarly, if the client was installed for a single user, future updates will only apply to that specific user. Should you need to change this behavior, you can uninstall the client application and reinstall it under your preferred installation context. @@ -86 +84 @@ When installing the client 4.0+ version, you will have an option to install the -To install the USB redirection driver +###### Note @@ -88 +86 @@ To install the USB redirection driver - 1. On the Amazon WorkSpaces Setup page, select **Install for all users of this machine**. Choose **Next**. +Automatic client updates are only applied when your client application is used to connect to WorkSpaces in the below regions. @@ -90 +88,23 @@ To install the USB redirection driver - +Region | Address +---|--- +US East (N. Virginia) | us-east-1 +US West (Oregon) | us-west-2 +Africa (Cape Town) | af-south-1 +Asia Pacific (Mumbai) | ap-south-1 +Asia Pacific (Seoul) | ap-northeast-2 +Asia Pacific (Singapore) | ap-southeast-1 +Asia Pacific (Sydney) | ap-southeast-2 +Asia Pacific (Tokyo) | ap-northeast-1 +Canada (Central) | ca-central-1 +Europe (Frankfurt) | eu-central-1 +Europe (Ireland) | eu-west-1 +Europe (London) | eu-west-2 +Europe (Paris) | eu-west-3 +Israel (Tel Aviv) | il-central-1 +South America (São Paulo) | sa-east-1 + +In any other regions not listed above, the Amazon WorkSpaces client application on Windows will not update automatically; you will instead see an message when a new version is available, and will have the option to install it. + +### Opting out from automatic updates (Windows client only) + +We encourage you to take advantage of the new automatic client update feature so you always have access to the latest features, security patches, and bug fixes. However, if you or your administrator want to manage client updates manually, you can opt out by following these steps for Windows clients. @@ -92 +112 @@ To install the USB redirection driver - 2. Select **Install driver for USB redirection** to enable the USB redirection features (the default setting is not selected). Choose **Install**. You must have administrator privileges to install the driver. +###### Note @@ -94 +114 @@ To install the USB redirection driver - +Administrator privileges are required on the local device. @@ -96 +116 @@ To install the USB redirection driver - 3. To install the client with PCoIP USB redirection, enter and run the following command in an elevated command prompt. +###### To disable automatic updates: @@ -98 +118 @@ To install the USB redirection driver - msiexec.exe /i "[path to msi]" /qn INSTALL_USB="1" ALLUSERS="1" + 1. Open the by Type "registry editor" in the Windows search box. @@ -100 +120 @@ To install the USB redirection driver -To install the client without PCoIP USB redirection, enter and run the following command in an elevated command prompt. + 2. Right-click on **Registry Editor** and select **Run as administrator**. @@ -102 +122 @@ To install the client without PCoIP USB redirection, enter and run the following - msiexec.exe /i "[path to msi]" /qn ALLUSERS="1" + 3. If prompted for permission, choose **Yes**. @@ -103,0 +124 @@ To install the client without PCoIP USB redirection, enter and run the following + 4. Open a command line. @@ -104,0 +126 @@ To install the client without PCoIP USB redirection, enter and run the following + 5. Navigate to: `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Amazon\`. @@ -105,0 +128 @@ To install the client without PCoIP USB redirection, enter and run the following + 6. If it does not already exist, create a new Key called "Amazon WorkSpaces Client". @@ -107 +130 @@ To install the client without PCoIP USB redirection, enter and run the following -If you're having trouble updating your WorkSpaces Windows client application to a newer version, use the following procedure to update your client application. + 7. Within this key, create a new String Value named "clientUpgradeDisabled" and set its value to 1. @@ -109 +132 @@ If you're having trouble updating your WorkSpaces Windows client application to -###### + 8. Either restart your computer or do the following to apply the changes: @@ -111 +134 @@ If you're having trouble updating your WorkSpaces Windows client application to -To update the WorkSpaces Windows client application to a newer version + 1. Open the **Task Manager**. @@ -113 +136 @@ To update the WorkSpaces Windows client application to a newer version - 1. On your local machine, open the Windows search box and enter `registry editor` to open the Registry Editor (**regedit.exe**). + 2. Go to the **Processes** tab. @@ -115 +138 @@ To update the WorkSpaces Windows client application to a newer version - 2. When asked "Do you want to allow this app to make changes to your device?", choose **Yes**. + 3. Search for one of the following: @@ -117 +140 @@ To update the WorkSpaces Windows client application to a newer version - 3. In the Registry Editor, navigate to the following registry entry: + * For an "all users" installation, search for `WorkSpacesService.exe`. @@ -119 +142 @@ To update the WorkSpaces Windows client application to a newer version -**Computer\HKEY_CURRENT_USER\Software\Amazon Web Services. LLC\Amazon WorkSpaces\WinSparkle** + * For a "single user" installation, search for `WorkSpacesHelper.exe`. @@ -121 +144 @@ To update the WorkSpaces Windows client application to a newer version - 4. Delete the **SkipThisVersion** registry key. When prompted to confirm the deletion, choose **Yes** , and then close the Registry Editor. + 4. Right-click and select **End process**. @@ -123 +145,0 @@ To update the WorkSpaces Windows client application to a newer version - 5. If you have not already entered a registration code in the WorkSpaces Windows client application, do so, and then choose **Amazon WorkSpaces** , **Quit Amazon WorkSpaces** to close the client application. @@ -125 +146,0 @@ To update the WorkSpaces Windows client application to a newer version - 6. Restart the WorkSpaces Windows client application. You should be prompted to update the client. Accept the update. @@ -127,0 +149 @@ To update the WorkSpaces Windows client application to a newer version +For organizations managing multiple Windows devices, this registry setting can be deployed using Group Policy: @@ -130 +152,3 @@ To update the WorkSpaces Windows client application to a newer version -## Determine your client version + HKEY_LOCAL_MACHINE\SOFTWARE\Amazon\Amazon WorkSpaces Client\clientUpgradeDisabled + Type: REG_SZ + Value: 1 @@ -132 +156,3 @@ To update the WorkSpaces Windows client application to a newer version -To see which version of the WorkSpaces client you have, choose **Amazon WorkSpaces** , **About Amazon WorkSpaces** , or click the gear icon in the upper-right corner and choose **About Amazon WorkSpaces**. +###### Note + +Opting out from automatic updates is supported for the Windows client application only. @@ -511,0 +538,6 @@ Release | Date | Changes +5.29.0 | July 31, 2025 | + + * Added a new automatic client update feature that will automatically check for available updates and install them when you're not using the client, helping you to get the latest features and bug fixes. + * Bug fixes and enhancements. + +