Setup Guide

Title and ButtonCaption — Species the notication window title
and button that can be customized. For example,
NoticeFile=filename Title=Problem
ButtonCaption=Ok
OneSignServer=onesign_server
[DisableBeep={yes,no}]
[KioskMode=yes,no}]
[TapToLock={0,1,2}]
[EnableWindowAuthentication={yes,no}]
[AutoAccess={VMW,XD,XA,LOCAL,RDSHD, RDSHA, RDSHPC}]
[NetBIOSDomainName={yes,no}]
[SuspendAction={0, 1}]
[DisableHotKey={yes,no}]
Loglevel=0/1/2/3
[DisablePromptToEnroll={yes,no}]
[SecurityMode={default, full, warning, low}]
A list of host names or IP addresses with optional TCP port number
or URLs of Imprivata OneSign servers. It should use https
protocol. If OneSignServer="" is dened, then only imprivata virtual
channel can work.If DisableBeep is set to yes, then Rdeas reader
can be set to mute when a card is tapped. Default is no.
If KioskMode is set to yes, then dierent OneSign user can unlock
the client desktop. Default is no. Optional keyword TaptoLock is
only active when KioskMode=yes.
• If TapToLock=0, then tap a card to lock terminal is disabled.
• If TapToLock=1(Tap to lock), then use the proximity card to lock
the terminal.
• If TapToLock=2(Tap over), then lock the terminal and log in as a
dierent user. Default is 2.
If EnableWindowAuthentication is set to yes and OneSign signon
fails, then continue to sign-on with windows credential to pre-
dene broker. Default is yes.
If AutoAccess is dened, then auto launch the corresponding type
of broker. Otherwise, get the broker type from the Imprivata Server
setting of computer and user policy. If none of them is dened,
then launch the rst available broker server from the Imprivata
server.
If AutoAccess=LOCAL is set, then launch the broker from the
ThinClient setting; the broker getting from the Imprivata Server is
ignored.
NOTE
: AutoAccess can be set in [username].ini and
wnos.ini. The wnos.ini has priority over [username].ini.
If NetBIOSDomainName is set to yes, then Imprivata domain list will
show NetBIOS domain name and card user will authenticate to the
broker server using NetBIOS domain name. Default is no.
If SuspendAction is set to 0, then lock the terminal when you tap
the card or press the hotkey. If set to 1, then signo the terminal. If
‘no’ is dened, then lock the terminal in KioskMode and sign-o the
terminal in none KioskMode.
If DisableHotKey is set to yes, then no action when you press the
hotkey dened in Imprivata Server. Only WebAPI 4 and later
versions support the hotkey function.
Loglevel—While conguring the Imprivata server, user can view the
OneSign logs on ThinOS by enabling the Agent Logging feature. An
ini conguration is needed correspondingly. Default value is 0. If set
to 0, logs are not displayed.
If DisablePromptToEnroll is set to yes, then ThinOS does not
prompt you to enroll their security answers after OneSign sign-on.
Default value is yes.
SecurityMode species the SSL certication validation policy. If set
to default, it applies SecurityPolicy setting. If set to full, the SSL
connection needs to verify server certicate. If it is untrusted, drop
the connection. If set to warning, the SSL connection needs to
verify server certicate. If it is untrusted, it is up to you to continue
or drop the connection. If set to low, the server certicate is not
30
Parameters for wnos INI les only