Deployment Guide

Table 9. Connection Settings: wnos.ini files, {username} INI, and $MAC INI files (continued)
Parameter
* Global overrides identically-named user profile
** After sign off, user profile returns to global value
Description
EnableWindowAuthentication — Default is yes. Yes/no
option to sign-on with the user’s Windows credentials to pre-
defined broker if the OneSign sign-on fails.
AutoAccess — Specifies the corresponding type of broker to
automatically start. If not defined, the broker type is obtained
from the Imprivata Server setting of the computer and user
policy. If none of them is defined, then the first available
broker server from the Imprivata server is started.
NOTE:
AutoAccess can be set in [username].ini and wnos.ini,
however, the wnos.ini, has priority over [username].ini.
NetBIOSDomainName — Default is no. Yes/no option to
enable the authentication to the broker server using the
NetBIOS domain name. If set to yes, the Imprivata domain
list will show NetBIOS domain name and the card user will
authenticate to the broker server using the NetBIOS domain.
ConnectTimeout specifies the timeout value for
OneSignServer connection. The value ranges from 0 to 65535
seconds. The value 0 specifies the default TCP timeout value.
PnliteServer=<List of {IP address, DNS names, or URLs} >
[ReconnectAtLogon={0, 1, 2}]
[ReconnectFromButton={
0, 1, 2}]
[AutoConnectList={*/ appname1;appname2; appname3...}]
[Timeout=5…300]
[CAGRSAAuthMethod={LDAP, RSA}]
[CAGAuthMethod={LDAP, RSA, LDAP+RSA, RSA+LDAP}]
[RequestIconDataCount={0-65535}]
[DefaultSettings={XenApp, XenDesktop}]
[SmartcardPassthrough={
yes, no}]
[StoreFront={no, yes}]
[HttpUserAgent={UserAgent}]
[CAGSendDomain= {yes, no}]
[SFIconSortMode={0, 1, 2, 3}]
[IgnoreDefaultGateway={yes, no}]
[CAGUserAsUPN={yes, no}]
[CAGExternal={yes, no}]
[DisableSFInit={yes, no}]
PnliteServer — Specifies the list of IP addresses or host
names with optional TCP port number or URLs of PNAgent/
PNLite servers. The list is empty by default.
Each entry with optional port is specified as Name-or-IP:port,
where port is optional; if not specified, port 80 is used as the
default.
If a port other than 80 is used, the port number must be
specified explicitly with the server location in the form IP:port
or name:port. Once specified, it is saved in the non-volatile
memory.
The statement PNAgentServer and Web interface for Citrix
MetaFrame Server is equal to this statement.
NOTE:
PnliteServer and the DomainList parameters can be used
in a {username}.ini file, but generally are used only in a
wnos.ini file.
The PNAgent/PNLite server list and associated domain
list optionally can be entered in DHCP server options 181
and 182, respectively. If entered in both places, the entries
from the Connection Settings: wnos.ini files, {username}
INI, and $MAC INI Files will take precedence. However,
the {username}.ini file will override the wnos.ini file if
the identical parameters with different values exist in the
{username}.ini file.
NOTE:
When Multifarm=yes, use # to separate failover servers,
and use a comma (,) or a semicolon (;) to separate servers
that belong to different farms.
78 Parameters for wnos INI, {username} INI, and $MAC INI files