Administrator Guide

Table 22. Parameters for a xen.ini File (continued)
Parameter Description
[ScepUserPwd = scep_enrollment_user_password]
[ScepUserPwdEnc =
encrypted_scep_enrollment_user_password]
and every element is either a DNS name or an IP address. Use ';' as
delimiter between them.
RequestURL—The RequestURL option is to specify the SCEP
server service URL. This field must be set correctly. The default
protocol for SCEP services is HTTP, which also ensures data
security. You can also add the prefix https:// if SCEP service is
deployed on HTTPS in your environment.
CACertHashType—CACertHashType is the hash type used to
verify certificate authority's certificate, should be set to MD5, SHA1
or SHA256.
CACertHash—This is the hash value used to verify certificate
authority's certificate. Client will not issue a certificate request to
a SCEP server and cannot pass certificate chain checking through a
valid certificate authority.
EnrollPwd or EnrollPwdEnc—These keywords are used to set the
enrollment password from a SCEP administrator.
EnrollPwd is the plain-text enrollment password and
EnrollPwdEnc is the encrypted form of the same enrollment
password. Use only one of these two fields to set the used
enrollment password.
As a substitute of using EnrollPwd or EnrollPwdEnc to
directly specify an enrollment password, client allows using
a SCEP administrator's credential to automatically get an
enrollment password from a Windows SCEP server. In this
case, the ScepUser, ScepUserDomain, ScepUserPwd (or
ScepUserPwdEnc, in encrypted form instead of plan-text) are used
to specify the SCEP administrator's credential, and ScepAdminUrl
must be set correctly to specify the corresponding SCEP admin
web page's URL. If neither EnrollPwd nor EnrollPwdEnc is set,
client will try to use these set of settings to automatically get
an enrollment password and then use that password to request
a certificate. If communication security is necessary in your
environment during this phase, please add https:// as the prefix for
ScepAdminUrl to use HTTPS instead of the default HTTP protocol.
Use ScepAutoEnroll=no AutoRenew=yes to only enable SCEP auto
renew; all other parameters are not needed if ScepAutoEnroll is set
to no.
NOTE:
SCEP server’s URL must be an HTTP link. Do not add
protocol prefix to RequestURL and ScepAdminURL.
SysinfoOntop=[yes,no]
This parameter enables the System Information window to be
displayed at the top in the Z-Order and overlaps on the nonmode
switched full screen session window.
SysMode={classic, vdi, Citrix}
[toolbardisablemouse={yes, no}]
[toobarclick={yes,
no}]
[toolbardelay={0-4}]
[toolbar_no_conmgr={yes, no}]
[toolbardisablehotkey={yes, no}]
[ToolbarEnableOneSession={
no, yes}]
[ToolbarAutoQuit={yes, no}]
SysMode — Specifies the Zero interface optimized for VDI or the
Classic interface. This value will be remembered across reboots until
changed. If not defined and an INI is present, Classic mode is the
default. If no INI is present, VDI mode is the default.
Classic mode has full taskbar, desktop and connection manager
and is recommended for a terminal server environment and for
backward compatibility with WTOS 6.x.
VDI mode (Zero interface) has a new launchpad-style interface
optimized for full-screen sessions that is Desktops. Everything you
need is accessed through an always available overlay interface.
212 Creating and Using xen.ini Files