Setup Guide

of the three modes. The option SecurityMode species these
security modes.
SecurityMode — Species the security level for the le server
during client verication of the server certicate. This option is only
valid when connecting to an https le server.
When conguring the https le server, the Username and
Password options of the FileServer parameter can be omitted. Use
the following guidelines:
• Set SecurityMode=Full to have the client verify the server
certicate in highest security mode; if any error occurs during
verication, the client will not connect to the server and a pop-
up message is displayed.
• Set SecurityMode=Warning to have the client provide a
warning when the client cannot verify the server certicate, but
still allow the user to select to continue client connection to the
server.
• Set SecurityMode=Low to indicate that the client allows
connection without any certicate verication.
• Set SecurityMode=Default to indicate that the client follows
SecurityPolicy settings to check certicate.
• Default value of the setting is Default. If the settings are factory
default or if you are upgrading to ThinOS 8.3 for the rst time,
the value is temporarily set to None. After loading any INI, it
goes to default.
• If the security mode value in WNOS.INI is not the same as the
one saved in Client NVRAM, client shows a reboot dialog box.
NOTE
: Security process includes:
1 Verication that certicate has a valid date
2 Verication that Issuer is valid and correct
3 Certicate verication passes
4 CN and SAN on the certicate matches the DNS
naming
For Example: FileServer=https://10.151.122.66:444
SecurityMode=warning.
FormURL=URL to a
le
Species the URL to the name of a bitmap le (.ico, .bmp, .jpg,
or .gif), to be displayed in the sign-on window, residing under the
thin client home directory. The length of the path, including the
home directory and the le, is limited to 128 characters. If auto dial-
up is enabled, this statement is invalid.
HealthCastServer=vip list
[LogLevel={0, 1, 2 ,3}]
[SecurityMode={default, full, warning, low}]
[ClientCerticate=certicate le name]
Species a list of VIP addresses with optional TCP port number of
HealthCast servers.
LogLevel—The option LogLevel is for debug purpose; 0 means no
log.
SecurityMode —Species the SSL certication validation policy. If
set to default, it will apply SecurityPolicy setting. If set to full, the
SSL connection needs to verify server certicate. If it is untrusted,
then drop the connection. If set to warning, the SSL connection
needs to verify server certicate. If it is untrusted, you may still
continue or drop the connection. If set to low, the server certicate
will not be checked. The value will be persistent, and the default
value of the setting is default.
ClientCerticate —The option species the client certicate le
name during SSL connection between Healthcast server and client.
Parameters for wnos INI les only 27