Reference Guide

Parameter Description
[Username-Enc={encrypted_password_string}]
[Password-Enc={encrypted_password_string}]
NOTE:
The target le server must support access using the same
user credentials used in the INI les.
The optional keyword Username and Password specify the
username/password of the le server. When the client fetches the
WNOS.INI le from a HTTPS server, ThinOS supports dierent
security modes. The default follows SecurityPolicy and may be one
of the three modes. The option SecurityMode species these
security modes.
SecurityMode — Species the security level for the le server
during client verication of the server certicate. This option is only
valid when connecting to an https le server.
When conguring the https le server, the Username and
Password options of the FileServer parameter can be omitted. Use
the following guidelines:
• Set SecurityMode=Full to have the client verify the server
certicate in highest security mode; if any error occurs during
verication, the client will not connect to the server and a pop-
up message is displayed.
• Set SecurityMode=Warning to have the client provide a
warning when the client cannot verify the server certicate, but
still allow the user to select to continue client connection to the
server.
• Set SecurityMode=Low to indicate that the client allows
connection without any certicate verication.
• Set SecurityMode=Default to indicate that the client follows
SecurityPolicy settings to check certicate.
• Default value of the setting is Default. If the settings are factory
default or if you are upgrading to ThinOS 8.3 for the rst time,
the value is temporarily set to None. After loading any INI, it
goes to default.
• If the security mode value in WNOS.INI is not the same as the
one saved in Client NVRAM, client shows a reboot dialog box.
NOTE
: Security process includes:
1 Verication that certicate has a valid date
2 Verication that Issuer is valid and correct
3 Certicate verication passes
4 CN and SAN on the certicate matches the DNS
naming
For Example: FileServer=https://10.151.122.66:444
SecurityMode=warning.
The option Username-Enc species AES encrypted username of
the le server.
The option Password-Enc species AES encrypted password of
the le server.
Use Windows Password_Gen tool to generate the encrypted string.
FormURL=URL to a
le
Species the URL to the name of a bitmap le (.ico, .bmp, .jpg,
or .gif), to be displayed in the sign-on window, residing under the
thin client home directory. The length of the path, including the
Parameters for wnos INI les only 25