Administrator Guide

Table 22. Parameters for a xen.ini File (continued)
Parameter Description
screen saver is off. The value range is 0 to 180. The value 0 is
default which disables this function.
SecureMatrixServer=<SecureMatrix Server
Host name or IP address/FQDN or URL>
Specifies the Host name or IP address/FQDN or URL of the Secure
Matrix server. Http or https protocol usage is decided by the server
configuration. If SecureMatrixServer is defined, the user must pass
authentication with the Secure Matrix server first, and then there
is a seamless log in to the brokers if the server can provide
the correct broker credentials, if not, the user must enter broker
credentials to log in.
For Example: SecureMatrixServer=https://gsb01.bjqa.com
NOTE:
Before using this parameter, use the Secure Matrix
documentation to set up the Matrix Server. Also, be sure you
import the relevant GSB Server Certificate file when using
https.
SecurityPolicy={full, warning, low}
[SecuredNetworkProtocol={yes, no}]
[TLSMinVersion]={1,2,3}]
[TLSMaxVesion={1,2,3}]
[DNSFileServerDiscover={yes,no}]
Specifies the global security mode for SSL connection. If application
SecurityMode is default, application applies the setting.
If set to full, the SSL connection needs to verify server certificate.
If it is untrusted, connection is dropped.If set to warning, the SSL
connection needs to verify server certificate. If it is untrusted, it
is up to you to continue or drop the connection. If set to low, the
server certificate is not checked. The value is persistent, and the
default value is warning. For those SSL connections with their own
security policy, this does not impact.
For example, Fileserver follows global security policy. Citrix
broker, and SECUREMATRIX are forced to high security mode.
If the optional SecuredNetworkProtocol=yes is set, the unsecure
protocols including ftp, http and tftp are disabled. The value is
persistent, and the default value is no.
Option TLSMinVersion and TLSMaxVersion allows you to
configure the SSL connection.TLSMinVersion sets the
minFallbackMinorVersion. Server uses the version equal or above
to communicate with the client. TLSMaxVersion sets the
advertisedMinorVersion. Server uses this version equal or above to
communicate with the client. If no value is set for TLSMinVersion
then the default value is set to TLS1.0 and TLSMaxVersion is set
to TLS1.2. The value 1, 2, 3 corresponds to TLS1.0, TLS1.1, TLS1.2
respectively. These parameters are used by engineers for internal
tests.
In classic mode, a DNS name wyseftpfbc4tc is resolved to discover
the file server, if the global INI file in remote file server and local
cache cannot be loaded. If the optional DNSFileServerDiscover=no
is set, the function is disabled. The value is persistent, and the
default value is yes.
SessionConfig=ALL
[unmapprinters={no, yes}]
[unmapserials={
no, yes}]
[smartcards={no, yes}]
[mapdisks={no, yes}]
[disablesound={no, yes, 2}]
Set ALL to establish default settings for all sessions. If connection
parameters are set to yes, the default settings will be changed
accordingly.
The optional keyword DisksReadOnly specifies the mount mass
storage as read-only. (CIR38166)
The optional keyword MouseQueueTimer specifies the default
queue timer of mouse event in ICA session. The unit is 1/100
second. It can adjust the bandwidth of network (CIR40532).
204 Creating and Using xen.ini Files