Administrator Guide

Table 22. Parameters for a xen.ini File (continued)
Parameter Description
AutoAccess can be set in [username].ini and xen.ini, however,
the xen.ini, has priority over [username].ini.
NetBIOSDomainName — Default is no. Yes/no option to enable
the authentication to the broker server using the NetBIOS domain
name. If set to yes, the Imprivata domain list will show NetBIOS
domain name and the card user will authenticate to the broker
server using the NetBIOS domain.
PasswordServer=<password_server>
[AccountSelfService={no, yes}]
[connect=<ica sever>]
[encryption={Basic, 40, 56, 128,
Login-128, None}]
PasswordServer — (Citrix Environments Only) Specifies the
IP Address of the password server (which can be defined as an
Account Self Service server (AccountSelfService=yes) or a direct
connection (connect=) - if no option is specified, it will connect
with the ICA protocol).
AccountSelfService — Default is no. Yes/no option to
define the password server as an Account Self Service server.
AccountSelfService=yes also displays the Account Self-Service icon
on the Log on dialog box. If AccountSelfService=yes option follows
the PasswordServer parameter, the password server specified will
be defined as the account self-service server and the connect
option will be invalid.
connect — Defines the password server as a direct connection to
an ICA server that can be logged on to modify a password for a user
sign-on with a password timeout. An encryption option can also be
set for this direct connection.
PlatformConfig=all
[EncryptFS=yes]
Encrypts local flash, specifically cached INI files and credentials that
are stored, if using signon=yes.
NOTE:
Event log will display new statements stating that FileSystem
encryption has been enabled.
PnliteServer=<List of {IP address, DNS names, or URLs}
>
[ReconnectAtLogon={0, 1, 2}]
[ReconnectFromButton={
0, 1, 2}]
[AutoConnectList={*/ appname1;appname2;
appname3...}]
[Timeout=5…300]
[CAGRSAAuthMethod={LDAP, RSA}]
[CAGAuthMethod={LDAP, RSA, LDAP+RSA,
RSA+LDAP}]
[RequestIconDataCount={0-65535}]
[DefaultSettings={XenApp, XenDesktop}]
[SmartcardPassthrough={
yes, no}]
[StoreFront={
no, yes}]
[HttpUserAgent={UserAgent}]
[CAGSendDomain= {yes, no}]
[IgnoreDefaultGateway={yes, no}]
[CAGUserAsUPN={yes, no}]
[CAGExternal={yes, no}]
PnliteServer—Specifies the list of IP addresses or host names
with optional TCP port number or URLs of PNAgent/PNLite
servers. The list is empty by default.
Each entry with optional port is specified as Name-or-IP:port, where
port is optional; if not specified, port 80 is used as the default.
If a port other than 80 is used, the port number must be specified
explicitly with the server location in the form IP:port or name:port.
Once specified, it is saved in the non-volatile memory.
The statement PNAgentServer and Web interface for Citrix
MetaFrame Server is equal to this statement.
NOTE:
PnliteServer and the DomainList parameters can be used in a
{username}.ini file, but generally are used only in a xen.ini file.
The PNAgent/PNLite server list and associated domain list
optionally can be entered in DHCP server options 181 and 182,
respectively. If entered in both places, the entries from the
Connection Settings: xen.ini files, {username} INI, and
$MAC INI Files section will take precedence. However, the
{username}.ini file will override the xen.ini file if the identical
parameters with different values exist in the {username}.ini file.
NOTE:
192 Creating and Using xen.ini Files