Skip to content

Cheatsheet IGEL Community

Common Boot Keys

Vendor Boot Key
Dell F12
Dynabook F2
HP F9
IGEL Del
LG F10
Lenovo Fn+F12
Microsoft Steps to setup

IGELOS Keybindings

keybinding OS 11 OS 12 description
Ctrl+Alt+Tab Switch active window
Tab+Tab Show commands
Ctrl+Alt+F10 Terminal log screen
Ctrl+Alt+F11 terminal 1
Ctrl+Alt+F12 terminal 2
Ctrl+Alt+F1 IGELOS UI
Ctrl+Alt+S Access IGEL setup

Cheat sheet for a UNIX/Linux command

Open the following link and type in command to get examples of usage - Cheat Sheet

Linux General

command OS 11 OS 12 description
cat display the content of a file
cd change folder
chmod change file attributes
comm compare two sorted files line by line
compgen list all the linux commands
conky a system monitor
cp copy files and folders
date date tool
dig DNS lookup utility
echo output strings
find search for files in a directory hierarchy
grep search for regular expression
kill kill a running task by process id
killall kill a running task by name
less less is more and allows backward movement in the file as well as forward movement
lpc Printer control tool
lpq Show current print jobs
lpr Print a file
lprm Delete a print job
lpstat Show finished print jobs
ls show directory content
lshw list hardware
mkdir create a folder
mkfs make file system on USB device
more display the content of a file page by page
mount mount a partition
openssl OpenSSL command line tool
pkexec start a program as root
ps show running tasks
pwd print working directory
rm delete a file
rmdir delete a folder
sleep wait
su change to root
systemctl service handler
tee read from standard input and write to standard output and files
top task monitor
touch create a file
tr translates, deletes, and squeezes characters
uname show linux details
upower upower tool
vi texteditor
watch repeat periodic a command
wget non-interactive network downloader
which locate command
wmctrl interact with X window manager
xdotool command-line X11 automation tool
xev xmodmap Find and Disable a key
xinput utility to configure and test X input devices
xset user preference utility for X
yad-icon-browser browse icons on system
zenity display dialog window, and return (either in the return code, or on standard output) the users input

IGELOS General

command OS 11 OS 12 description
apparmor_status Lists all services protected by apparmor
applauncher Starts the application launcher
chromium-browser Start Chromium Browser
curl Check for trusted certificate or download files
custompart Delete/Create a custom partition
delinstance Delete a session or instance
df -h Shows Partition usage
microsoft-edge-stable Start Edge Browser
florence OnScreen Keyboard
get Get Variable from registry
get_unit_id Get the Unit ID
getmyip show device IP
getsysvalue Read variable from registry
gpicview Starts an Picture Viewer
icaconncenter ICA Connection Center
igel_buddy_update_server_scan Search for Buddy Masters in network
igel_display_switcher Start the new Display Switcher
igel_firstboot_wizard Starts the First Boot Wizard
igel_gamma TOCHECK Should influence the brightness
journalctl -f Sys logs anzeigen und folgen.
killwait_postsetupd reset and applay setup changes set by "setparam"
kinit Active Directory login
klist Display kerberos tickets
list List a part of the registry
load_usbconfig Load config from USB Storage
newinstance Create a session or instance
nmcli radio wifi off Disables Wifi, On enables it
notify-send-message Display GUI Text Message
numinstances Show next available instance nr.
opensc-tool Lists opensc smartcard informations and tools
pkcs11getloginname Shows extracted smart card login name
reset_to_defaults Factory reset
resetvalue_tree Reset all settings under each of the registry classes back to default
setcryptparam Saves encrypted Data like Password to IGEL Registry
setparam Write variable to registry
soft_reboot Soft reboot
soft_shutdown Soft shutdown
setup Start IGEL Setup
setup-assistant Start IGEL Setup (start as user)
show_usbconfig List configs from USB Storage
start-wireless-manager Starts the Wireless cafe menu (start as user)
store_usbconfig Write config to USB Storage
superclasses List all available superclasses
systemd-resolve --flush-caches Flush DNS cache
update Start firmware update
user_reboot reboot the system
user_shutdown shutdown the system
vdm_client0 Start VMware Horizon client
vget Get specification for a variable
write_rmsettings Write local setup changes back to UMS.
xfconf-query Xfconf commandline utility
xrandr Controls the Screens from command line

IGELOS UMS & ICG Communication Commands

command OS 11 OS 12 description
get_icg_info Get ICG connection information
get_rmsettings Get UMS config (reboot to apply)
icg-config IGEL Cloud Gateway config; with url and mass deployment key
icg-setup Start the ICG GUI Setup or with parameters the CLI
rmagent_cli UMS Agent commandline
rmagent-devattrs-enum Lists all device attributes including the current value for this device. The enumeration is ordered according to the attribute's order id.
rmagent-devattrs-enum-range Enumerates entries of the given range. The enumeration is ordered according to the range item's order id.
rmagent-devattrs-get-type Prints the type of the given attribute
rmagent-devattrs-get Prints the current value of the given attribute
rmagent-devattrs-set Sets the given attribute to the specified value
rmagent-devattrs-reset Resets the given attribute to an empty value
rmagent-devattrs-sync Send Attributes to UMS If a Value Has Been Changed by Device
rmagent-write-device-attributes The complete set of attributes is sent to the UMS
rmagent-push-device-attributes The complete set of attributes is sent to the UMS
rmregister Start tool to register @ UMS
rmagent-check-reenroll Check the validity of the device’s certificate and reenroll a new one if the specified number of days are left before expiring date or the certificate is already expired
rmagent-connect Connects to the UMS where the device is registered
rmagent-disconnect Disconnect an established connection
rmagent-enroll Enroll
rmagent-jobs Jobs
rmagent-manage-apps Apps
rmagent-merge-settings Merge settings
rmagent-obs-enroll OBS enroll
rmagent-pull-appauthtoken Pull appauthtoken
rmagent-pull-file Pull file
rmagent-pull-settings Get the latest settings from UMS
rmagent-push-appstatus Push appstatus
rmagent-push-runtime Push the current runtime information to UMS
rmagent-push-settings Push the current settings to UMS
rmagent-push-sysinfo Push the current system information to UMS
rmagent-register Register
rmagent-register-app Registers a specific app from the device in UMS
rmagent-set-job-state Set job state
rmagent-set-structure-tag Set structure tag
rmagent-setupd-event Set event
rmagent-setupd-event-reset Reset event
rmagent-setupd-event-wait Wait event
rmagent-state Retrieve the current state of the rmagent
rmagent-trust-get-zero Trust get
rmagent-trust-put Trust put
rmagent-trust-reset Trust reset
rmagent-ums-enroll UMS enroll
rmagent-update-device-info Send the essential device’s information to the UMS and receive the latest settings and assigned objects
rmagent-ws-tunnel WS Tunnel
ums_available Check available UMS Server

IGELOS Networking

command OS 11 OS 12 description
/lib/systemd/system/NetworkManager.service manage network service
ethtool tool for ethernet configuration
ftp start the FTP client
getmyhwaddr show current MAC
getmyip show current IP address
hostname display current hostname
ifconfig show/manage ethernet configuration
iptables firewall configuration
iwconfig configure a wireless network interface
iwevent display wireless events
iwgetid report ESSID, NWID or AP/Cell Address of wireless network
iwlist display some additional information from a wireless network interface that is not displayed by iwconfig
iwspy get wireless statistics from specific nodes
nc arbitrary TCP and UDP connections and listens (OS 12 - debugtools app)
netstat display open connections
nmcli manage network connections via cli
ping test the reachability of a host
probeport test network port on a host
/proc/sys/net/ipv4/ip_local_port_range UDP high port range
route display/config network routes
ss ss is used to dump socket statistics. It allows showing information similar to netstat. It can display more TCP and state informations than other tools.
tcpdump tcpdump is a packet sniffer that shows you what traffic is happening

IGELOS Hardware

command OS 11 OS 12 description
/etc/init.d/pcscd Stop / Start Smart Card PCSC Daemon
amixer Audio configuration tool
aplay Audio device tool
dmidecode DMI (SMBIOS) table decoder
free Show memory details
get-edid Display DDC details
hardinfo Display Hardware Info's
lsblk list block devices (file systems)
lspci List PCI devices
lsusb list USB devices
opensc-explorer Show available Smart Cardeaders
opensc-tool Commandline Smart Card Tool
pcsclistreaders List Smart Card readers
rtcwake Automatic restart/supend
saned SANE Daemon
setserial Setup/Diagnostic for RS232
speaker-test Speaker test
x11config Show display config

IGELOS Folders

folder OS 11 OS 12 description
/license/dsa/licenses device licenses
/media Removable Storage
/services License related services
/userhome/.ICAClient/logs ICA Client logs
/usr/share/icons Contains Icons of Linux and Igel
/var/logs Various log files
/wfs Configurations / Certs

IGELOS Files

file OS 11 OS 12 description
/config/sessions Generated sessions
/etc/os-release Details on IGEL OS version
/tmp/wpa_debug.all Network debug log
/wfs/dhclient-*.lease dhcp client lease; DHCP Option 224 + 226
/wfs/group.ini Configuration from UMS
/wfs/server.crt UMS Server certificate
/wfs/setup.ini Local configuration

IGELOS Registry

Path OS 11 OS 12 description
network.interfaces.wirelesslan.device0.wpa.debug wifi debug

UMS-Files

IGELOS 12 Packages - igelpkgctl

igelpkgctl is the command line tool to control the igelpkgd. For applications, it allows for:

  • listing of installed
  • installing
  • updating
  • removing

The available APPs are fetched from the configured remote repositories.

command description
igelpkgctl --help Help on usage
igelpkgctl list installed List installed applications
igelpkgctl list available List available applications
igelpkgctl install app_name Install application from APP Portal
igelpkgctl install -f path_to_app.ipkg Install application from file
igelpkgctl uninstall app_name Uninstall application

IGELOS 12 Licensing

command description
journalctl -u igel-dsad The license status is reported in the journal
licensestatus Show current license status
licenseauthtoken Show auth token embedded in the license (usually in evaluation license)
install_igel_license license file Manually install a license file
delete_igel_licenses service id Manually remove a license of a type. For example, SUB_SERVICE_SET_WORKSPACE_EDITION
delete_igel_licenses ALL Delete all licenses

UMS Command Line

command description
umsadmin-cli List global options and the primary subcommands
umsadmin-cli fullhelp List complete online help with all commands
umsadmin-cli server restart Restart UMS
  • Fullhelp listing
1
sudo umsadmin-cli fullhelp

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
Usage: umsadmin-cli [-hV] [--machine-readable] [--no-header] [--quiet]
                    [--separator=<cliSeparator>] [COMMAND]

UMS Administrator CLI to configure UMS installation
  -h, --help               Show this help message and exit.
      --machine-readable   Prints output machine-readable with ';' as default
                             separator.
      --no-header          Do not print a header line.
      --quiet              Suppress all output to stdout/stderr.
      --separator=<cliSeparator>
                           Define custom column separator for CLI output.
  -V, --version            Print version information and exit.

Commands:
db                         Provides commands for database operations

  help                     Display help information about the specified command.

  activate                 Activate a database connection
      -i  --id             The database identifier
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.
      -P  --patch          Install lateste database patch

  backup                   Create a backup of the current embedded database
      -f  --full           Creates a full backup incl. transfer files and configuration.
      -o  --outfile        The target file for the backup.
      -p  --parent         Creates all directories for the specified path

  copy                     Create a copy of the current database
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.
      -t  --target         The target database ID

  create                   Create a new database connection
      -d  --domain         The database domain
      -H  --host           The database host
      -I  --instance       The database instance
          --jdbc-params    Additional JDBC parameter
      -n  --name           The database name
      -A  --no-activate    Skip activation of database (no password required)
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.
      -p  --port           The database port
      -S  --schema         The database schema
      -t  --type           The database type. Valid values:
                           null
      -u  --user           The database user name

  deactivate
                           Deactivate active database connection

  delete                   Delete a data source
      -i  --id             The database identifier

  edit                     Edit a data source
      -d  --domain         The database domain
      -H  --host           The database host
      -i  --id             The database id
      -I  --instance       The database instance
          --jdbc-params    Additional JDBC parameter
      -n  --name           The database name
      -p  --port           The database port
      -S  --schema         The database schema
      -t  --type           The database type. Valid values:
                           null
      -u  --user           The database user name

  list                     List all data sources

  optimize                 Optimize the active data source

  restore                  Restore a backup into the embedded database
      -f  --file           The path to the backup file.

  show                     Show details of a data source
      -i  --id             The database id

  test                     Test active database connection
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.

ports                      Configuration of ports

  help                     Display help information about the specified command.

  list                     List all ports and SSL flag

  set                      Set new port numbers or SSL-only flag
      -d  --dev-comm       Device communication port
      -e  --embedded       Database port (embedded)
      -j  --java-webstart  Java Webstart port
          --ssl-only       Allow only SSL connections
      -w  --web-server     Server port

cipher                     Manage cipher configuration.

  help                     Display help information about the specified command.

  disable                  Disable ciphers
          --all            Apply for all (ignores individual cipher names).

  enable                   Enable ciphers
          --all            Apply for all (ignores individual cipher names).

  list                     Print all ciphers, optionally filtered
      -d  --disabled       Filter disabled ciphers (works with --enabled)
      -e  --enabled        Filter enabled ciphers (works with --disabled)

licensing                  View and change UMS ID data

  help                     Display help information about the specified command.

  backup                   Backup the UMS ID
      -o  --outfile        Backup file path
      -p  --parent         Creates all directories for the specified path
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.

  create                   Create a new UMS ID

  export                   Export the UMS ID
      -f  --force          Overwrite existing File (true -> overwrite, false -> abort command) (default: false)
      -o  --outfile        Backup file path

  list                     Show the current UMS IDs

  restore                  Restore UMS ID from backup
      -f  --file           Backup file source
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.

token                      Install network token for UMS server or broker.
          --broker         Install token for UMS Broker
          --server         Install token for UMS Server
    -f    --token-file     The path to the token file

su                         Configuration of superuser

  help                     Display help information about the specified command.

  list                     Display superuser

  change                   Change superuser credentials
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.
      -u  --user           The name of the superuser

restart-server
                           Restart the UMS server (deprecated, use 'server restart')

  help                     Display help information about the specified command.

server                     Change the server run state

  help                     Display help information about the specified command.

  end-update-mode
                           End the update mode of the local UMS Server

  restart                  Restart the local UMS Server

  distributed
                           Set the distributed mode of the UMS installation
      -d  --disable        Disables Distributed UMS.
      -e  --enable         Enables Distributed UMS.
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.

  start                    Start the local UMS Server

  stop                     Stop the local UMS Server

reset-certs
                           Reset the web certificates
    -y    --yes            Only if provided as confirmation, reset will run.

  help                     Display help information about the specified command.

ums-cluster
                           Set UMS cluster FQDN

  help                     Display help information about the specified command.

  create                   Set UMS cluster FQDN
      -n  --name           The Fully Qualified Domain Name (FQDN)

  list                     Show the UMS cluster FQDN

  remove                   Delete the UMS cluster FQDN

web-certs                  Provides commands for web certificates configuration

  help                     Display help information about the specified command.

  assign-cert
                           Assign certificate to current or all server
      -f  --fingerprint-sha1
                           SHA1 fingerprint of certificate
      -s  --server         Server to which certificate is assigned, possible values: ALL_SERVER, CURRENT_SERVER (default: CURRENT_SERVER))

  create-root-cert
                           Create a root certificate
      -a  --algorithm      Key pair algorithm (rsa or ec (default: rsa)))
      -c  --country        Country code (two letters)
      -d  --expiration-date
                           Expiration date (YYYY-MM-DD) (current date plus 20 years if not specified)
          --key-size       Key size, valid values: 4k, 8k, 12k, 16k (default: 4k)(4096, 8192,... bits)
      -l  --locality       Locality (if not specified, the hash code of a random uuid is used)
      -n  --name           Certificate name (default: Root certificate)
          --named-curve    Named curve, valid values: nist-p-384, nist-p-256, nist-p-521 (default: nist-p-384)
      -o  --organization   Organization

  create-signed-cert
                           Create signed certificate
          --ca             Certificate type (true -> CA certificate, false -> End entity) (default: false)
          --cn             Common name
      -c  --country        Country code (two letters)
      -d  --expiration-date
                           Expiration date (YYYY-MM-DD) (current date plus 1 year if not specified)
      -f  --fingerprint-sha1
                           SHA1 fingerprint of parent CA certificate
      -h  --hostname       Hostname (hostname or one of these values: ALL_SERVER, CURRENT_SERVER (default: CURRENT_SERVER))
      -l  --locality       Locality (if not specified, the hash code of a random uuid is used)
      -n  --name           Certificate name (default: Certificate)
      -o  --organization   Organization

  delete                   Delete a certificate
      -f  --fingerprint-sha1
                           SHA1 fingerprint of certificate

  export-cert
                           Export certificate
      -c  --cert-file      Path to which the certificate should be exported (Name 'cert.cert' is used when only a directory is specified)
      -f  --fingerprint-sha1
                           SHA1 fingerprint of certificate

  export-cert-chain
                           Export certificate chain to keystore (JKS)
      -f  --fingerprint-sha1
                           SHA1 fingerprint of certificate
      -k  --keystore-file  Path to keystore to which certificate chain should be exported
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.

  import-cert-chain
                           Import certificate chain from keystore
      -k  --keystore-file  The keystore file
          --password:file  Path to a file containing the password.
          --password:in    Shows an interactive prompt to enter the password.

  import-private-key
                           Import decrypted private key
      -f  --fingerprint-sha1
                           SHA1 fingerprint of certificate
      -p  --private-key-file
                           The file containing the private key

  import-root-cert
                           Import root certificate
      -c  --cert-file      The root certificate (CERT, CER, CRT, PEM)

  import-signed-cert
                           Import signed certificate
      -c  --cert-file      The signed certificate (CERT, CER, CRT, PEM)
      -f  --fingerprint-sha1
                           SHA1 fingerprint of parent CA

  list-assigned-server
                           List assigned server of a certificate
      -f  --fingerprint-sha1
                           SHA1 fingerprint of certificate

  list                     List all web certificates or details of a certificate
      -f  --fingerprint-sha1
                           SHA1 fingerprint of certificate

  renew-cert
                           Renew certificate
          --cn             Common name
      -c  --country        Country code (two letters)
      -d  --expiration-date
                           Expiration date (YYYY-MM-DD) (current date plus 1 year if not specified)
      -f  --fingerprint-sha1
                           SHA1 fingerprint of certificate
      -h  --hostname       Hostname (hostname or one of these values: ALL_SERVER, CURRENT_SERVER)
      -l  --locality       Locality
      -n  --name           Certificate name
      -o  --organization   Organization

help                       Display help information about the specified command.

fullhelp                   Show full help with all commands

accept-expired-client-certs
                           Configuration to accept expired client certificates

  help                     Display help information about the specified command.

  disable                  Disable accept expired Client Certificate (UMS Server will be restarted!)

  enable                   Enable accept expired Client Certificate (UMS Server will be restarted!)

  state                    Show the state of accept expired Client Certificates

web-cert                   Provides commands for UMS ID operations

  help                     Display help information about the specified command.

  export-cert
                           export UMS ID
      -c  --cert-file      Path to which the certificate should be exported

ums-license
                           provides commands for handling UMS licenses

  help                     Display help information about the specified command.

  deleteall
                           delete all registered UMS licenses

  register                 register UMS license
      -f  --filename       Path of the license which should be registered

  state                    State of the UMS License

enc                        Provides commands for security encryptions

  help                     Display help information about the specified command.

  encode                   encode file
      -f  --plain-file     Plain file to be encoded

  encrypt                  encrypt text
      -p  --plain-text     Plain text to be encrypted

igelums@igelums12:~$
  • List all databases
1
sudo umsadmin-cli db list

1
2
ACTIVE DATABASE HOST      USER    DB-TYPE     ID
true   rmdb     localhost igelums Embedded DB  1
  • UMS License State
1
sudo umsadmin-cli ums-license state

1
2
3
"umsLicenseLevel": "SUB_SERVICE_SET_UMS_ENTERPRISE"
"expirationDateUTC": "2026-09-07T00:00:00"         
"unlimited": "false"
  • List Web Certs
1
sudo umsadmin-cli web-certs list

1
2
3
4
NAME             FINGERPRINT (SHA1)                       EXPIRATION DATE USED 
230623-ums12-ron 351B4DA62D5A304C5B86401FB2C49091490EA5AE      2026-04-25 true 
1264447657       B18CB74C0CA7A54CFCB7AA162E32F2380205D111      2043-03-23 true 
230623-ums12-ron BB8F25B169B38DEE641FB160C93A303946219F41      2025-05-25 false
  • List Assigned Server
1
sudo umsadmin-cli web-certs list-assigned-server -f 351B4DA62D5A304C5B86401FB2C49091490EA5AE

1
2
HOST      LAST KNOWN IP PROCECSS ID                          VERSION  
igelums12 10.0.0.35     13078f0d-2161-49da-a09a-2ff074439bfe 12.09.110
  • Export Cert Chain
1
2
mkdir yourkeystore.keystore
sudo umsadmin-cli web-certs export-cert-chain -f 351B4DA62D5A304C5B86401FB2C49091490EA5AE -k yourkeystore.keystore --password:in

1
2
Password: 
Confirm: