Administrator Guide

Table 22. Parameters for a xen.ini File (continued)
Parameter Description
● Client checks the server certificate in the following phases
except in Low mode:
○ Certificate has to have a Valid Date.
○ Issuer is valid and correct.
○ Certificate verification should pass.
○ CN and SAN on cert match DNS naming.
● Set SecurityMode=Full to indicate that the client verifies the
server’s certificate in highest security mode. If any error is
detected, client prompts a pop-up box.
● Set SecurityMode=Warning to indicate that the client allows
continuation if any error is detected. follows SecurityPolicy
setting to check the certificate.
● Set SecurityMode=Low to indicate that the client allows
connection without any certificate verification.
● Set SecurityMode=Default to indicate that the client follows
SecurityPolicy setting to check certificate.
● Default value of the setting is Default. If the settings are factory
default or if you are upgrading to ThinOS Lite 2.3 for the first
time, the value is temporarily set to None. After loading any INI,
it goes to default.
● If the security mode value in xen.INI is not the same as the one
saved in Client NVRAM, client shows a reboot dialog box.
Example: FileServer=https://10.151.122.66:444
SecurityMode=warning
NOTE:
● The sub parameter SecurityMode of FileServer is only
validated when the FileServer is set to https:// as its prefix.
● When you configure the https file server, the sub
parameters Username and Password of FileServer can be
omitted.
The option Username-Enc specifies AES encrypted username of
the file server.
The option Password-Enc specifies AES encrypted password of
the file server.
Hosts=<hosts file name>
Specifies the file name of the hosts. This file is a simple text
file that associates IP addresses with hostnames, one line per IP
address. The length of the file name is limited to 63 characters.
The file must be placed in file server and can be cached if set
MirrorFileServer=yes in the xen.ini. When resolving a host name, the
system will initially look in the file and if not found, will search DNS,
WINS, and so on. The following is an example of format in the hosts
file:
10.151.122.1 gateway.ctx.com
10.151.122.123 myvm.ctx.com
IEEE8021X={yes, no}
network={wired, wireless}
If IEEE8021X is set to no, then all parameters following it is ignored.
If network is not configured, the configuration is ignored.
180 Creating and Using xen.ini Files