Administrator Guide

• INI parameter is TapToLock=0/1/2.
• Lock warning enabled and type—The three types that are supported are None, Notification balloon, and Screensaver.
• None—No warning messages are displayed.
• Notification balloon—ThinOS displays a notification window.
• Screensaver—Hide the display contents before the workstation locks.
• Warning message—The message can be customized.
• Lock Screen type—Only obscure type is supported.
• Hot key to lock workstation or log off user—ThinOS can support following keys:
“F1 ~ F12”, "BKSP", “DEL”, “DOWN”, “END”, “ENTER”, “ESC”, “HOME”, “INS”, “LALT”, “LEFT”, “LCONTROL”, “NUMLOCK”,
“PGDN”, “PGUP”, “RCONTROL”, “RIGHT”, RTALT”, “SPACE”, “TAB”, “UP”, “a~z”, “A~Z”, “0~9” and modifier “+”, “%”, “^”
(Shift, Alt, and Control)
• Suspend action—The server configuration controls this feature on ThinOS. Therefore a new INI is added—
SuspendAction=0/1; 0 means lock, 1 means signoff.
3. Configuring the SSPR Configuration Object
The SSPR configuration object controls the Self-Service Password Reset behavior for a user. The enabled attribute specifies whether
the user is allowed to reset their password as part of emergency access. The mandatory attribute specifies whether the user must
reset their password as part of emergency access.
4. Configuring the RFIDeas configuration object
The RFIDeas configuration object controls the behavior of the RFIDeas readers. The configuration can be configured by two ways, the
computer policy of OneSign server and ThinOS INI.
5. Configuring the Custom background configuration object
On the Imprivata server, click Computer policy, and then click the Customization tab.
6. Configuring the Co-Branding configuration object
On the Imprivata server, click Computer policy, and then click Customization.
Logo image impacts all the dialog boxes in ThinOS with raw logo.
7. Configuring the SSPR Customization configuration object
• The text displayed in sign-on UI and lock window can be customized.
• The largest size supported by ThinOS is 17 characters.
8. Password Self-Services force enrollment feature
Selecting this check box allows you to reset the primary authentication password.
INI configuration for Imprivata OneSign Server
An INI parameter AutoAccess=command is added. The new value is AutoAccess=Local. When AutoAccessis set to local, the
ThinOS ignores the brokers that are set on the Imprivata OneSign Appliance and starts the broker/connections which are defined in
wnos.ini or local defined on the client. You can start the vWorkspace, Microsoft, and other ThinOS connections while supporting Imprivata
user authentication.
Imprivata Bio-metric Single Sign-On
Fingerprint identification feature is highly reliable, and cannot be easily replicated, altered, or misappropriated.
The prerequisites of OneSign server are:
• Imprivata v4.9 or later appliance version is needed that supports the WebAPI v5 and later versions.
• Fingerprint identification license is required.
NOTE:
• Supported protocols are Microsoft RDP, Citrix ICA, PCoIP, and VMware Blast.
• Required fingerprint reader devices are:
• ET710 (PID 147e VID 2016)
• ET700 (PID 147e VID 3001)
Supported scenarios
1. Signing in or unlocking the ThinOS devices using fingerprint authentication.
• Configure the OneSign server on ThinOS, and then plug-in the fingerprint reader device. The ThinOS fingerprint window is
displayed automatically after OneSign server is initialized.
• Fingerprint authentication also works in the ThinOS unlock window.
Configuring connectivity
51