Reflection Desktop 16.2 Release Notes

1.0 Introduction

Reflection Desktop products are full-featured desktop applications that allow you to run host applications, transfer files, and integrate host data into the latest Windows and Office software applications.

  • Reflection Desktop for IBM provides access to applications running on IBM mainframe and AS400 systems.

  • Reflection Desktop for UNIX and OpenVMS provides access to applications running on UNIX and OpenVMS systems.

  • Reflection Desktop provides access to applications running on IBM, UNIX, and OpenVMS systems.

  • Reflection Desktop for X provides access to applications running on UNIX and OpenVMS systems. It also includes Reflection X Advantage, an X server that allows you to view your UNIX desktop and work with X client applications from a remote workstation.

  • Reflection Desktop Pro includes Reflection Desktop along with Reflection X Advantage, and provides access to applications running on IBM, UNIX, and OpenVMS systems, as well as X clients.

  • The Reflection Desktop for NonStop Add-On is a separately licensed product for connecting to HP NonStop hosts (Tandem 6530).

The Reflection Desktop 16.2 Release includes a number of new security improvements, new features, and resolved issues.

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs.

NOTE:If you are an X user, see the Reflection X Advantage Release Notes.

2.0 What’s New

Reflection 16.2 includes several security improvements and new features.

2.1 Security Improvements

Added support to encrypt TLS connections with Elliptic Curve Cryptography (ECC) with 3270, 5250, VT, and FTP sessions. Currently, only prime curves are supported for Elliptic Curve Cryptography.

Minimized access to the SSL 3.0 encryption standard, which is no longer secure. The new Permissions Manager Security.access settings allow you to lock down the SSL/TLS version setting. (You can also set access for this setting with Group Policy.)

Added support to send a complete certificate chain when the client identity is in the SystemStore. Added support to send intermediate CAs along with the user certificate (RFC6187). This feature allows the client to send a complete Certificate chain (if available) when the client identity is in the SystemStore and the algorithms from RFC6187 are being attempted. The two supported algorithms are x509v3-ssh-rsa and x509v3-rsa2048-sha256.

Added a new setting to the Reflection SSH config file that allows an administrator to configure public key algorithms used by the client. This feature adds a new setting to the SSH config file that allows you to configure the actual Public Key Algorithms used during PubKey authentication. See Configuration File Keyword Reference - Secure Shell Settings.

Enhanced the usability of logging to include the Negotiated Host Key Algorithm and the Key Exchange method name.

Added capability to lock down Transport Layer Security (TLS) and Public Key Infrastructure (PKI) security settings for IBM and VT Terminals in Group Policy and Permissions Manager. See Control Access to Settings and Controls .

Improved support for ActivClient 7.1 when configured for Public Key Cryptography Standards (PKCS)#11.

The latest ActivClient 7.X driver, which uses a new file location, has been added to the .pki search path.

Improved support for using Public Key Infrastructure challenge (PKIc) for automated sign-on with SSH sessions that are managed in Management and Security Server (MSS). Using PKIc for automated sign-on previously failed when Reflection sessions were managed by MSS.

Made improvements to the PKI search abilities to differentiate similar certificates with the same certificate name (CN) and expiration (EXP) date. An SSL error occurred on the first connection attempt when two Intermediate certificates had the same CN and EXP Date. Added the certificate chain to a PKI search in order to better utilize PKI's abilities to determine the correct certificate path to validate the given certificate.

Fixed timing issues on IBM (3270 and 5250) connections configured with end-to-end encryption. Timing issues and Reflection IBM’s use of asynchronous connections (i.e. multiple threads), caused it to incorrectly set a Winsock error during tracing.

Improved the ability for SFTP logging to write large file listings when the connection is closed. Previously, the SFTP command line wrote only the end of a large file listing when the connection was closed.

Added support for “ “ when using the FTP command client around a target directory. SFTP commands failed when using quotes around a target directory.

Modified the SFTP command line so that SFTP batch jobs can run in Windows Task Scheduler. Previously, users were unable to run SFTP batch jobs in Windows Task Scheduler as "SYSTEM" user because the client displayed a message box. It now writes the statement that was in the message box to the log.

Improved functionality of the multiple delete (mdel) command in the SFTP command line. SFTP 'ls' and 'mdel' commands access the home directory when used with an asterisk and a filter (such as .txt). Adjusted the wildcard functionality in SFTP to include the current directory and then remove the path from the file listing (the server side file list view). These changes affect the "filter" functionality in SFTP and Reflection FTP Client.

Added support for using PKIc for automated sign-on with multiple card readers. Using PKIc for automated sign-on failed when multiple card readers were present.

Improved support for multiple PKCS#11 providers. Added a list to enable notification to as many providers as configured. Previously, when multiple PKCS#11 Providers were specified in Reflection's pki config, removal of the card failed to disconnect.

Improved support for the Reflection FTP Client running in an App-V 5.1 environment. Reflection FTP Clients running in App-V 5.1 were unable to connect to a host.

Enhanced the user experience for messages related to password changes. Messages from the host related to a password change were not displayed in the terminal window.

Changed registry key versioning to improve the startup experience of the Reflection FTP client. Previously, the Reflection FTP client application crashed on load if the "Migrated" registry key used by older versions of the FTP client was missing.

2.2 Enhancements for IT Administrators

This release supports the latest Windows 10 “Windows as a Service” update and includes a number of new features designed for IT administrators.

Added the ability to use Automated Sign-On with the Micro Focus Host Access Management and Security Server (MSS) to authenticate Reflection Desktop sessions even when they are not centrally managed and controlled. In previous releases of Reflection Desktop, this feature was available only for sessions that were centrally controlled and managed with MSS. Automated Sign-On allows users to log on to IBM z/OS mainframe applications using a modern authentication method instead of using traditional, less secure methods typically required for those applications. See Set up Automated Sign-On for Mainframe Sessions.

Added two different approaches to centrally control and manage Reflection Desktop IBM and VT VBA macros. You can use two new ways to centrally control macros:

  • Save VBA macros in special SharedMacros files. When a session opens, it automatically loads the macros from the file (SharedMacros.rd3x, SharedMacros.rd5x, or SharedMacros.rdox) that corresponds to its file type.

  • Reference remote macros: Save VBA macros in session document files that reside on a network share or other location and then configure local session documents to reference these shared documents. When the local session documents open, they load the macros from the documents that they reference.

For more, see Centrally Manage VBA Macros.

Added the ability to change and deploy specific workspace settings without changing other settings on users’ desktops. This allows you to change a global setting after you deploy Reflection without the risk of overwriting other settings that users have configured. See Update Only Specific Workspace Settings.

Added detailed information about the cause of the failure when the "Could not read file…" error message is displayed. The message now has more information and instructions for taking a Workspace Log.

Added support for X.509 certificates on smart cards when using MSS and Micro Focus Advanced Authentication.

Added new capabilities to configure actions. These actions include:

  • A new Theme Mapper Action

  • A Repeat Button on the Action Sequence Editor

  • The ability to provide file parameters within actions to specify Theme, Ribbon, and Toolbar files

2.3 User Experience Enhancements

End users will benefit from a number of improvements.

Improved startup performance. Startup performance was significantly improved by modifying the installation process to pre-compile native images when Reflection Desktop is installed instead of compiling them at runtime.

Added a Multiple Print Screens utility that can be used to capture a list of host screens and then specify how many screens to print on a page. See Print More Than One Screen Per Page.

Added custom templates that you can use to print from an IBM host screen or from an IBM printer emulation session to a form.

Added a new look and feel that is similar to Microsoft Office 2016.

Added a status bar indicator that indicates progress when starting sessions and importing legacy session files.

Added several enhancements in the Classic mode UI, including the ability to save session layouts, and search the active session document.

Added the ability to use Windows credentials to authenticate to IBM i Systems (AS/400) with FTP.

Improved IBM green screen modernization with the Micro Focus Plus drag and drop development tool. The complete Plus tool is now included with the Reflection Desktop product.

Added support for Spanish, Italian, and Portuguese languages in the workspace in Reflection Desktop editions that include Reflection X Advantage.

Added several copy and paste enhancements. These enhancements allow users to:

  • Copy host-formatted text without the autowrap-generated CR/LF's line endings.

  • Use a Paste Range feature similar to the Paste Range feature in Reflection 14.0. See Using a Paste Range

  • Use a block-oriented paste option similar to the one in EXTRA!. The Ignore field type setting is described in Configure Clipboard Settings Dialog Box (3270 and 5250). This setting applies only to IBM 5250 sessions.

Added support for a new Japanese host code page, CCSID 1399, Japanese Latin Extended (Unicode).

Added the ability to select multiple QuickPads from the QuickPads dialog.

Added an action that can be used to show or hide the status bar.

2.4 Reflection Desktop for NonStop Add-On

A number of enhancements were added to Reflection Desktop for NonStop Add-On to improve look and feel, navigation, security, printing, cutting and pasting, macros, and other functionality.

NOTE:Reflection Desktop for NonStop Add-On is a separately licensed product for connecting to HP NonStop hosts (Tandem 6530).

Added look and feel and navigation options.

  • Added a section on the default ribbon bar in the 6530 help system.

  • Added support and settings for different colors for VT emulation. Reflection automatically changes to these colors when entering OSS mode.

  • Added support for searching screen memory (the Find dialog).

  • Significantly increased scrolling speed. Long listings take about 1/4 of the time compared to the previous version.

Added security features.

  • Updated the SSL/TLS module to a more current version of OpenSSL.

  • Added support for a subset of ECC curves.

Added printing capability.

  • Provided the ability to change the font attributes when doing a print screen.

  • Added more details to the printing error dialog that appears if a print job fails.

  • Added a page setup dialog for printing.

Added cutting and pasting capability.

  • Added “Copy Append” to the ribbon bar, so users can append selected screen data to the clipboard.

  • Added “Copy Input” to the ribbon bar, allowing users to copy any input fields in a selection to the clipboard. (This applies only to Block mode.)

  • Added “Cut” and “Cut and Append” items to the ribbon bar. (This applies only to Block mode.) It will clear any unprotected fields within the selection area

  • Added support for fast pasting. (This works only with certain programs, and only in Conversational mode.)

  • Changed Backspace so that if there is a selection in effect while in Block mode, backspace clears any unprotected fields in the selected area.

Added functionality for Macros.

  • Added “Run a macro before the initial connection” and a macro file selection button to “Advanced Connection Settings”

  • Added “Run a macro after the initial connection” and a macro file selection button to “Advanced Connection Settings”, plus a check box to do the same for re-connections

  • Significantly improved the speed of the search of incoming data for a string (for instance, in a macro).

  • Added a section on the recorded macro file format to the 6530 help system

  • Improved the help content for recording 6530 macros.

Added metering and improved logging.

  • Added the ability to meter the Reflection Desktop for NonStop Add-On instances using the Management & Security Server Metering Server.

  • Added a support and configuration item so that session logging does not wrap at the last column of the display.

3.0 Known Issues

You may encounter the following issues when installing or upgrading.

3.1 The following issues may occur on Windows 7 SP1 and Windows 8.1 systems that do not have recent Microsoft Windows updates installed.

The installation fails with an error message that indicates “Windows updates from Microsoft required to install this product are not available on this computer “

To resolve this issue, download and install the Update for Universal C Runtime in Windows from Microsoft.

The installation fails due to problems with installing Windows .Net 4.7.1

To resolve this issue, download and install the December 12, 2017—KB4054518 (Monthly Rollup) from Microsoft.

When you try to open a session in Reflection, an error message indicates “api-ms-win-crt runtime is missing from the computer”

To resolve this issue, download and install the Update for Universal C Runtime in Windows from Microsoft.

3.2 You may experience longer installation times due to optimization of product performance.

When installing the product with an MSI directly, the installation will require more time at the end of the process than with previous versions.

This additional time at the end of the process is used to optimize product performance.

When installing an update (msp patch file) directly, the MSI interface may incorrectly indicate that time is required at the end of the process.

This additional time at the end of the process is used to optimize product performance.

When applying an MSI patch with the Setup tool, the tool may revert to Repair mode.

This is due to recent features added to the tool to improve product performance.

4.0 Installing Reflection Desktop

Maintained customers are now eligible to download the latest product releases at You will be prompted to login and accept the Software License Agreement before you can download a file.

For information about installing, see the Reflection Help and the Reflection Deployment Guide.

5.0 Previous Releases

For information about the Reflection Desktop 16.1 SP1 release, see the Reflection Desktop 16.1 SP1 Release Notes and the Reflection Desktop 16.1 SP1 Update 1 Release Notes.

6.0 Contacting Micro Focus

For specific product issues, contact Micro Focus Support at

Additional technical information or advice is available from several sources: