Administrator Guide

Use the Thin Client Certificates page to add certificates for the thin client devices. The certificate must be a text in
PEM format, that is, a text-based Base64-encoded DER file.
● Open the DER cert file on Notepad.
● Log in to the Vault Server Admin Console, and then click Appliance > Thin Client Certificates.
● Copy the Notepad text to the Vault server
Configuration on VDI server and desktops
Caradigm solution of ThinOS supports the multi-types of VDI server such as VMware View Horizon 6, Citrix Virtual Apps 6.5,
Citrix Virtual Apps and Desktops 5.6, and Citrix Virtual Apps and Desktops 7.6.
To configure the VDI server and desktop:
● Install the Caradigm desktop components in the servers and desktops.
● Indicate vault server IP, and then provide a valid security token.
● Add following lines to Service section of the \programdata\sentillion\vergence\Authenticator.ini
configuration file.
TapServerIdentification=True
RemotePromptForPassword=Badge
NOTE: At present, the following PCoIP enabled thin clients offer Caradigm SSO over PCoIP:
● Wyse 3030 LT with PCoIP
● Wyse 3040 with PCoIP
● Wyse 5010 with PCoIP (D10DP)
● Wyse 5040 AIO with PCoIP (5213)
● Wyse 5060 with PCoIP
SSO and CM client installed on your VDI server and desktops must be upgraded to latest version 6.2.5 in order to support this
feature.
Configuring SECUREMATRIX
SECUREMATRIX enhances the security of enterprise and cloud-based applications while providing seamless end user experience
for a one-time password (OTP) that can be used for authentication with desktops, Windows, VPNs, intranets, extranets, web
servers, e-commerce and other network resources.
To configure the SECUREMATRIX Server, enter either https://ip or https://FQDN values, reboot the client to display the log
on dialog box, and then enter credentials to open the VDI broker dialog box for logon use. You can also set this feature in your
INI file, see Dell Wyse ThinOS INI Guide. For details see SECUREMATRIX documentation.
Introduction to HealthCast
HealthCast Single Sign-On (SSO) solution is designed to improve user convenience, streamline workflow, and strengthen
security compliance in demanding environments. The same proximity cards used for physical access are used to tap-in and
tap-out of unique user sessions and to tap-over any sessions unintentionally left open on the ThinOS devices. Typically, you
must type in your password only one time each day and use your proximity cards to streamline workflow and save time as they
move between shared computers securely. Also, proximity cards can be secured with a PIN, if configured by the organization.
The HealthCast SSO solution also supports user self-service password reset so that you can reset your own passwords without
the need to call the help desk.
NOTE:
HealthCast SSO Solution on ThinOS is a client-server solution. ThinOS provides the client-side functionality, but
you must also install and configure the HealthCast Server components on a server system in order for the solution to work
properly. Contact HealthCast on HealthCast website for one or more server installation executables, server requirements,
and configuration information.
Configuring HealthCast on ThinOS
HealthCast Web API Server is integrated with ThinOS release to implement the HealthCast SSO solution. To use the HealthCast
SSO solution, ThinOS must be configured to use the HealthCast Web API Server. You can do this by using the INI file (wnos.ini),
or using the ThinOS UI. Dell recommends you to use the INI file for large deployments.
Configuring the connectivity
51