This page contains information on the following topics:

Note: From version 3.8 we do not support other browsers than:

  • Google Chrome (recommended): 45+ (tested with 91)

  • Microsoft Edge (96+)

Safari with Authentication Enabled on Windows

Safari on Windows cannot be used for cluster configurations with authentication enabled on Windows. This is because Safari since version 5.1.7 does not support the Access-Control-Expose-Header, which is required for the Web Interface to access the Authentication header. Authentication is solely handled by the GUI itself, without the browser being involved.

As development of Safari on Windows has been discontinued by Apple, a newer version will not be available anytime soon.

Internet Explorer Issues with Default Security Settings

The Web Interface has issues with cross-origin HTTP requests (CORS) to multiple hosts when using the default security settings.

Known issues:

  • GH Terminal does not show information of the partner server of a cluster configuration, because the Web UI is not able to retrieve the status of the partner server and therefore reporting it as ‘not reachable’ or 'Unable to connect to Graphic Hub Terminal on host XXX:19399'.

  • GH REST reports the GH status as ‘not reachable’ or 'Unable to connect to Graphic Hub Terminal on host XXX:19399'.

    • This is no issue and can be ignored, as it is just a status display in the Web UI.

  • GH ImEx Agent is unable to show proper status of configured GH RESTs.

    • This is no issue and can be ignored, as it is just a status display in the Web UI.

For most cases, enabling Access data sources across domains should resolve the issue:

  1. In Internet Explorer, click Tools and then click Internet Options.

  2. In the Internet Options dialog box, on the Security tab, click Custom Level.

  3. In the Security Settings dialog box, do the following:

    1. Select Enable for Miscellaneous > Access data sources across domains.

    2. Click OK.

  4. In the Confirmation dialog box, click Yes.

This needs to be done for both the Internet and Local intranet zone. Internet Explorer always uses the settings of the Internet zone if a site is opened using an IP address no matter if the site is actually a local one or not!

Internet Explorer IP Issues with Default Security Settings

If the Web-UI is opened using the IP address and the requests are based on hostnames, then this violates Zone Policies.

The reason is the Cross-Domain and Zone Policy (see https://msdn.microsoft.com/en-us/library/ms537505(v=vs.85).aspx#xdomain ), which blocks cross-origin HTTP requests (CORS) requests to a different host using a hostname, while the Web-UI is opened with an IP address as these requests violate the Zone Policy settings.

Known issues:

  • In GH Terminal when the Web-UI is opened with IP, but the loaded cluster configuration is based on hostnames, then the status is ‘not reachable’ or 'Unable to connect to Graphic Hub Terminal on host XXX:19399'.

A workaround for this issue is to add the Web-UI URL to the Trusted Sites:

  1. In the Internet Options dialog box, on the Security tab, select Trusted sites.

  2. Click Sites.

  3. Disable Require server verification (https:) for all sites in this zone and click Add.

  4. Click Close.

Make sure Miscellaneous > Access data sources across domains is also set to Enabled for the Trusted Sites zone.

Windows 11 (Intune-enrolled) Installation Issues and Web-UI access

Affected Components

  • Graphic Hub and GH Terminal

  • GH REST

  • GH ImEx Agent and Image Library Extension

Environment

  • Windows 11 Enterprise, version 24H2 or newer enrolled in corporate Intune/Endpoint Security

  • Local administrator privileges granted

Symptoms

  • GH Terminal, GH REST and GH ImEx shortcuts (Start menu and desktop) do not launch the browser with the Web-UI unless Run as administrator is used.

  • After initial elevated launch, subsequent non-elevated launches may succeed only intermittently. Behavior seems to stabilize after a few administrative runs.

  • The Image Library Web-UI will no longer accept drag-and-drop from the desktop in the default (non-elevated) session.

  • Third-party browsers may reset themselves as default and may block opening the Web-UIs.

Workarounds

  • Uninstall or disable any non-essential browsers that override the system default.

  • Explicitly set your preferred browser (Chrome or Edge) as default via Windows Settings > Apps > Default apps.

  • Right-click on the GH terminal, GH REST, GH ImEx Agent shortcut and choose Run as administrator.

  • If the Web-UI still won’t respond to drag-and-drop, perform an elevated launch and then retry in a normal session.