Administrator Guide
• The INI le must have the congurations for 802.1x EAP-TLS with AuthMode set for Machine Authentication and SCEP.
• After the INI is downloaded to the thin client, SCEP client enrolls the client certicate with Machine hostname and Domain congured
in the INI.
• 802.1x EAP-TLS machine authentication will then begin and the thin client will move to an Authorized VLAN
NOTE:
You can view the network progress icon on the taskbar.
• If 802.1x authentication fails due to any wrong 802.1x conguration, the thin client will automatically fall back to the Guest VLAN, with a
notication message Failed to connect to trusted network. Please contact your system administrator, in the right pane of the
GNOME panel. The user receives the same notication in the case of an expired CA certicate.
• When a user restarts the device, the thin client will again move to the Guest VLAN by sending an EAPOL logo to switch and disable
the 802.1x conguration at the Network Connections applet.
This is an example of the INI conguration for 802.1x TLS Machine authentication.
Enable802=yes Authentication=TLS PromptPassword=no CACertificate=scep UserCertificate=scep
PrivateKey=scep PrivateKeyPassword=ZG90MXg= AuthMode=Machine
EAP TLS User authentication
To authenticate 802.1x:
1 Turn on your thin client device.
When the thin client restarts, the thin client remains in the Guest VLAN and downloads the ini conguration from the INI server.
2 After the INI is downloaded to the thin client, you can access the domain that is congured in the INI from the domain drop-down list
on the GDM Login screen.
3 On the GDM login screen, select the domain, and then enter the user domain credentials.
Domain User authentication is performed against the AD server mentioned in the INI conguration.
4 Click Log in.
• If domain user login is successful, then the user certicate will be enrolled via SCEP, and 802.1x authentication will begin and you
can see the network progress icon on the taskbar and the thin client will move to Authorized VLAN.
• If 802.1x authentication fails due to any wrong 802.1x conguration or if the CA certicate has expired, the thin client will
automatically fall back to Guest VLAN, and a notication message Failed to connect to trusted network. Please contact your
system administrator is displayed in the right corner of GNOME panel.
• When you log out or restart the thin client, the thin client as suggested above to Guest VLAN by sending an EAPOL logo to
switch and disabling the 802.1x conguration at the Network Connections applet.
This is an example of the INI conguration for 802.1x TLS User authentication.
Enable802=yes Authentication=TLS PromptPassword=no CACertificate=scep UserCertificate=scep
PrivateKey=scep PrivateKeyPassword=ZG90MXg= AuthMode=User
Personalization
You can customize your desktop settings such as color, background in addition to enable various option that helps to improve the look and
feel of the screen. Some of the important parameters such as display settings, audio settings, typing settings and pointer settings can be
personalized.
On the System Settings page, click Personalization icon. The following tabs are listed on the left pane of the System Settings page.
• Desktop Wallpaper
• Universal Access
• OEM Branding
40
Conguring thin client settings locally