Dell Wyse Management Suite Version 3.0 Administrator's Guide September 2020 Rev.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2020 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents Chapter 1: Introduction to Wyse Management Suite...................................................................... 8 What is new in Wyse Management Suite version 3.0 ............................................................................................... 8 Editions of Wyse Management Suite..............................................................................................................................8 Wyse Management Suite Feature Matrix......................................
Edit a user policy group..............................................................................................................................................33 Configure a global level policy........................................................................................................................................ 33 Import a user policy group...............................................................................................................................................
Wake On LAN command..................................................................................................................................................57 View the device details.................................................................................................................................................... 57 Manage the device summary..........................................................................................................................................
Sync BIOS admin password............................................................................................................................................ 79 Search a scheduled job by using filters........................................................................................................................80 Schedule a device command job...................................................................................................................................
Chapter 15: Managing license subscription................................................................................ 105 Import licenses from Wyse Management Suite public cloud................................................................................ 105 Export licenses to Wyse Management Suite Private Cloud..................................................................................105 Thin client licenses allocation...........................................................................
1 Introduction to Wyse Management Suite Wyse Management Suite is the next generation management solution that enables you to centrally configure, monitor, manage, and optimize your Dell Hybrid Client powered endpoints and Dell thin clients. It also offers advanced feature options such as cloud and on-premises deployment, manage-from-anywhere option by using a mobile application, enhanced security such as BIOS configuration and port lockdown.
NOTE: Cloud services are hosted in the U.S. and Germany. Customers in countries with data residency restrictions may not be able to take advantage of the cloud-based service. The Wyse Management Suite web console supports internationalization.
Table 2.
Table 2.
Table 3.
2 Getting started with Wyse Management Suite This section provides information about the general features to get you started as an administrator and manage thin clients using Wyse Management Suite.
Logging out To log out from the management console, do the following: 1. Click the account link at the upper-right corner of the management console. 2. Click Sign out. Prerequisites to deploy Wyse Management Suite on the private cloud Table 4. Prerequisites Description 10,000 devices or less 50,000 devices or less 120,000 devices or less Wyse Management Suite – Software repository Operating system Windows Server 2012 R2, Windows Server 2016, or Windows Server 2019 Standard.
repository and local repository. The software can be installed on a physical or a virtual machine. Also, it is not necessary that the software repository and the Wyse Management Suite server have the same operating system. Functional areas of management console The Wyse Management Suite console is organized into the following functional areas: ● The Dashboard page provides information about the current status on each functional area of the system.
Configuration policies are published immediately, and cannot be scheduled for a later time. A few policy changes, for example, display settings, may force a reboot. ● Application and operating system image deployment—Applications and operating system image updates can be deployed from the Apps & Data tab. Applications are deployed based on the policy groups. NOTE: Advanced application policy allows you to deploy an application to the current and all subgroups based on your requirement.
does not have the certificate before registration. This certificate is preserved even after you reimage or restart the device to mitigate the risk against rouge DHCP or DNS server. ● Normal environments—The device obtains the Wyse Management Suite server URL from the DHCP/DNS records for Wyse Management Suite private cloud that is configured with CA-signed or self-signed certificate.
3 Installing or upgrading Wyse Device Agent This section provides information about how to install or upgrade Wyse Device Agent on your thin clients, such as Windows Embedded Standard, Linux, and ThinLinux devices by using Wyse Management Suite. ● Windows Embedded Standard devices—Wyse Device Agent version 1.4.x can be downloaded from support.dell.com.
in the local repository. If you are using a public cloud, or a remote repository on a private cloud, copy the WDA.exe file to the thinClientApps folder in the repository. Steps 1. After the WDA.exe file is copied to the repository, go to Apps and Data, and create a standard application policy with this package—see Create and deploy standard application policy to thin clients. NOTE: Advanced application policy is supported only from Wyse Device Agent 14.x onwards.
4 Registering and configuring a new device using Wyse Management Suite Topics: • • • • • • Register Register Register Register Register Register and and and and and and configure configure configure configure configure configure a new Windows Embedded Standard device using Wyse Management Suite a new ThinOS 8.x device using Wyse Management Suite a new ThinOS 9.
5. Enable or disable CA validation based on your license type. For public cloud, select the Enable CA Validation check box. For private cloud, select the Enable CA Validation check box if you have imported certificates from a well-known certificate authority into your Wyse Management Suite server. To enable the CA validation option in the private cloud, you must install the same self-signed certificate on the ThinOS device as well.
NOTE: When the Enrollment Validation option is enabled, the manual or auto-discovered devices are in Enrollment Validation Pending state in the Devices page. The tenant can select a single device or multiple devices in the Devices page and validate the enrollment. The devices are moved to the intended group after they are validated. For more information about how to validate the devices, see Enrollment validation. The device is registered to Wyse Management Suite. 9. Log in to Wyse Management Suite. 10.
3. Add the device to your desired group (optional)—see Managing groups and configs. 4. Configure the thin client using any of the following options: ● Using the Groups and Configs page—see Edit the Wyse Software Thin Client policy settings. ● Using the Devices page—see Managing Devices. Register and configure Dell Hybrid Client using Wyse Management Suite Prerequisites Before registering the device, ensure that your device has network connectivity to contact the Wyse Management Suite server.
Figure 2. Dell Client Agent 10. Log in to Wyse Management Suite. 11. Add the device to your wanted group (optional)—see Managing Groups and Configs. 12. Configure the thin client using any of the following options: ● Using the Groups and Configs page—see Edit the Dell Hybrid Client policy settings. ● Using the Devices page—see Managing Devices.
5 Wyse Management Suite dashboard The Dashboard page enables you to view the status of a system, and the recent tasks that are performed within the system. To view a particular alert, click the link in the Alerts section. The Dashboard page also enables you to view the device summary. Figure 3.
2. Click View All Alerts. The following attributes are displayed in the Events page: ● Devices Not Checked In ● App Compliance ● Other Device Alerts View the list of events The Events section displays the summary of events that have occurred in the last few days. Steps 1. Click Dashboard. The events summary is displayed. 2. Click View All Events. The Events page is displayed with list of all the events. View the device status The Display section provides the summary of device status. Steps 1.
The User Preferences window is displayed. 3. Click Alerts, and select the appropriate check boxes to assign an alert type—Critical, Warning or Info—for notifications from your emails and mobile applications. 4. Click Policies, and select the Ask me if I want to use the ThinOS Wizard mode check box to display the Select ThinOS Configuration Mode window every time you configure the ThinOS policy settings. 5. Click Page size, and enter a number from 10 to 100 in the Number Of Items Per Page text box.
6 Managing groups and configurations The Groups & Configs page enables you to define policies that are required to configure your devices. You can create sub groups of the global group policies and categorize devices based on your requirements. For example, devices may be grouped based on job functions, device type, and so on. For each group, you can define policies for the following operating systems: ● ThinOS ● ● ● ● ● ● ○ ThinOS ○ ThinOS 9.
• • • • • • • • • • Export group policies Importing group policies Edit the ThinOS policy settings Edit the ThinOS 9.
Create a ThinOS Select group Steps 1. On the Groups & Configs page, click the Default Device Policy Group option. 2. Click . 3. In the Add New Group dialog box, enter the Group Name and Description. 4. Select the This is a ThinOS Select group parent option. 5. Select the name of the group administrators who are tasked with managing this group. From the Available Group Admins box, select the particular group and click the right arrow to move it to the Assigned Group Admins box.
NOTE: When you remove a group from the group hierarchy, all users and devices that belong to the deleted group are moved to the custom, default, or unmanaged group. NOTE: When you delete the select group, the devices of removed group cannot be moved to another select group. Create a user policy group You can create groups for the global user group policies and categorize users and devices based on their user groups. Steps 1. On the Groups & Configs page, click the Default User Policy Group option. 2.
Figure 4. Add a new group NOTE: If the AD group is inside an OU group in the domain, then you must select the OU group as the AD Attribute. 4. Select the name of the group administrators who are tasked with managing this group. 5. From the Available Group Admins box, select the particular group and click the right arrow to move it to the Assigned Group Admins box. To move one group from the Assigned Group Admins to Available Group Admins, do the reverse. 6. Click Save.
7. Select the Device Group Mapping option to import user groups with device mapping to control the configurations that are applied to all device groups by default. AD User groups which are imported into Wyse Management Suite can be mapped to the respective device group. By mapping the devices, they do not receive unwanted user group policies. NOTE: By default, user groups are not mapped to a device group. If you select the Default device group policy, all sub-device groups are selected.
Remove a group As an administrator, you can remove a group from the group hierarchy. Steps 1. In the Groups & Configs page, select the group that you want to delete. . 2. Click A warning message indicating that this action removes one or more groups from the group tree hierarchy is displayed. 3. From the drop-down list, select a new group to move the users and devices in the current group. 4. Click Remove Group.
Importing group policies The Import Policies option enables you to import the policies. This option is available for Wyse Management Suite PRO license users. You can import the group policies from the Groups & Configs page or from the Edit Policies page. Import group policies from Groups and Configs page Steps 1. On the Groups & Configs page, select your preferred group. If the destination group contains policies of the same device type as the imported ones, they are removed and new ones are added. 2.
● From an existing group—Select a group from the drop-down list. Policies from that group are copied to the current group. ● From an exported file—Click Browse and select the .JSON file. Policies from that file are copied to the current group. 5. Click Next. A preview of the policies in the selected group is displayed. 6. Click Next.The summary of the import process is displayed.
● LPT port bind ThinOS—Wizard mode Use this page to configure the most frequently used parameters for the ThinOS devices. Steps 1. Select Wizard as the mode of configuration. 2. Configure the options are required. 3. Click Next to go to the next policy setting. 4. Click Save & Publish after you configure the options. NOTE: To go to ThinOS advanced configuration mode, click Continue. ThinOS—Advanced mode Use this page to configure the advanced policy settings for the ThinOS devices. Steps 1.
Figure 5. Advanced option 4. Select the options that you want to configure. NOTE: BIOS settings support has been added in Wyse Management Suite 2.1. 5. In the respective fields, click the option that you want to configure. 6. Configure the options as required. 7. Click Save & Publish. NOTE: After you click Save & Publish, the configured settings are also displayed in the Standard tab. BIOS configurations for ThinOS 9.x About this task BIOS configuration settings can be configured to ThinOS 9.
Steps 1. Go to the Groups & Configs page, and select a group. 2. From the Edit Policies drop-down menu, click ThinOS 9.x. The Configuration Control || ThinOS window is displayed. 3. Click Advanced. 4. In the Firmware field, select OS Firmware Updates. 5. Click Select the ThinOS Firmware to deploy drop-down menu, select, and upload the BIOS package. NOTE: You can upload and deploy multiple firmware packages from the remote repository, tenant cloud repository or operator cloud repository. 6.
5. From the Select the ThinOS Package(s) to deploy drop-down menu, select the package. NOTE: You can upload and deploy multiple firmware packages from the remote repository, tenant cloud repository or operator cloud repository. 6. Click Save & Publish. The thin client restarts and the application package is installed. Edit the Windows Embedded Standard policy settings Steps 1. Click Groups & Configs. The Groups & Configs page is displayed. 2. Click the Edit Policies drop-down menu. 3. Click WES.
Edit the Cloud Connect policy settings Steps 1. Click Groups & Configs. The Groups & Configs page is displayed. 2. Click the Edit Policies drop-down menu. 3. Click Cloud Connect. 4. After configuring the policy settings, click Save and Publish. Edit the Dell Hybrid Client policy settings Prerequisites ● Create a group with a group token for the devices you want to push the application package. ● Register Dell Hybrid Client to Wyse Management Suite. Steps 1.
Table 5.
5. To configure the business hours and business days for the device group, click Add Row in the Business Hour field and the days from the Business days drop-down menu. 6. To enable the agent to report user sessions, enable the Enable Session Reporting option and select the timing from the Report Session drop-down menu. The available options are: ● Send user session at run time—The Dell Client Agent sends the user session report every time a user logs off from the device.
7 Managing devices This section describes how to perform a routine device management task by using the management console. To locate the inventory of the devices, click the Devices tab. You can view a subset of the devices by using various filter criteria, such as groups or subgroups, device type, operating system type, status, subnet, platform, or time zone.
• • • • • • • • • • • • • • • • • Wake On LAN command View the device details Manage the device summary View the system information View device events View the installed applications Rename the thin client Configure remote shadow connection Shutting down devices Tag a device Device compliance status Pulling Windows Embedded Standard or ThinLinux image Request a log file Troubleshooting your device Reimage your Dell Hybrid Client Pull configuration user interface package for Dell Hybrid Client Reset your De
Figure 7. Dell Client Agent icon 3. Click Dell Client Agent. The Dell Client Agent window is displayed. 4. Click Registration. The default status is displayed as Discovery In Progress. 5. To register manually, click the Cancel button. 6. In the WMS Server field, enter the URL of the Wyse Management Suite server. 7. In the Group Token field, enter your group registration key. The group token is a unique key for registering your devices to groups directly.
Figure 8. Dell Client Agent Register Dell Hybrid Client by using manual discovery method You can use the manual discovery method to register OptiPlex 7070 Ultra devices running Ubuntu version 18.04 LTS 64-bit to Wyse Management Suite using the Dell Client Agent Enabler agent. Steps 1. Create a reg.json file using the following template: {"ccm": {"ccmserver":"WMSServerURL.Domain.com","ccmport":"443","usessl":"true","mqttserver":" WMSServerURL.Domain.
5. Select the Enable WMS Advanced Settings option, and enter the WMS server or MQTT server details. 6. Enable or disable CA validation based on your license type. For public cloud, select the Enable CA Validation check box, and for private cloud, select the Enable CA Validation check box if you have imported certificates from a well-known certificate authority into your Wyse Management Suite server.
Steps 1. Open the Wyse Device Agent application. The Wyse Device Agent window is displayed. 2. Enter the device registration details. 3. From the Management Server drop-down list, select Wyse Management Suite. 4. Enter the server address and the port number in the respective fields. NOTE: If the server address contains http, a warning message is displayed. Click Ok to confirm. 5. Enter the group token. For a single tenant, the group token is an optional step. 6.
In the Wyse Device Agent tab, observe that the Wyse Management Server details are available in the respective field and the client entry can be seen in Wyse Management Server>Devices page. Register ThinLinux version 2.0 devices by using FTP INI method Prerequisites Create a group to register in Wyse Management Suite. Steps 1. Create a wlx.ini file. Enter the following parameter: WMSEnable=yes\no WMSServer=https://FQDN of the WMS Server:Port GroupRegistrationKey=GroupToken present i
CAValidation=True 2. Place the wlx ini file in the wyse\wlx folder. 3. Go to Settings and switch to admin on the ThinLinux thin client. 4. Go to Management > INI. 5. Enter the FTP server URL. 6. Click Save, and then restart the thin client. 7. Go to Management > Wyse Device Agent. In the Wyse Device Agent tab, observe that the Wyse Management Server details are available in the respective field and the client entry can be seen in Wyse Management Server>Devices page.
Table 6. Registering device by using DHCP option tags (continued) Option Tag Description Description—Group Token available, then the devices are automatically registered to the unmanaged group during on-premise installation. NOTE: For detailed instructions on how to add DHCP option tags on the Windows server, see How do I create and configure DHCP option tags.
Table 7. Configuring device by using DNS SRV record (continued) URL/Tag Description Record Name—_WMS_GROUPTOKEN This record is required to register the ThinOS devices with Wyse Management Suite on public or private cloud. Record FQDN—_WMS_GROUPTOKEN._tcp. Record Type— TEXT This record is optional to register the Windows Embedded Standard or ThinLinux devices with Wyse Management Suite on private cloud.
○ ThinOS ○ WES ○ Teradici (Private cloud) ○ Wyse Software Thin Client ● Hybrid Client ○ Hybrid Client 4. From the OS Subtype drop-down list, select a subtype for your operating system. 5. From the Platform drop-down list, select a platform. 6. From the OS Version drop-down list, select an operating system version. 7. From the Agent Version drop-down list, select an agent version. 8. From the Subnet/prefix drop-down list, select a subnet. 9. From the Timezone drop-down list, select the time zone. 10.
The Device page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. Click Lock. An Alert window is displayed. 5. Click Send Command to send the lock command. Restart the devices You can send a command to restart a registered device. Steps 1. Click Devices. The Device page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. Click Restart. An Alert window is displayed. 5.
Validate the enrollment of a device You can enable Enrollment Validation to enable administrators to control the manual and auto registration of thin clients to a group. You can filter the devices in Pending Validation state by clicking the Pending count in the Dashboard page or by selecting the Enrollment Validation Pending in the Status drop-down list in the Devices page.
Send messages to a device You can send a message to a registered device using the Devices page. Steps 1. Click Devices. The Devices page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. From the More Actions drop-down menu, click Send Message. The Send Message window is displayed. 5. Enter the message. 6. Click Send. Wake On LAN command You can send a command to activate a device if it is turned off or in the Sleep mode. Steps 1. Click Devices.
The Change Group Assignment window is displayed. 6. From the drop-down menu, select a new group for the device. 7. Click Save. 8. Click Create/Edit exceptions to create or edit a device level exception, and configure a particular device policy on the Devices page. View the system information Steps 1. Click Devices. The Device page is displayed. 2. Apply the filters to find the preferred device. The preferred device list is displayed. 3. Click any of the displayed devices.
The installed applications count increases or decreases based on the installation or uninstallation of the applications. The list is updated when the device checks-in or is queried next. Rename the thin client You can use this page to change the hostname of thin clients that run on Windows Embedded Standard, ThinLinux, and ThinOS operating systems. Steps 1. On the Devices page, click the device. 2. From the More options drop-down list, select the Change Host Name option. 3.
Tag a device Wyse Management Suite enables you to identify a device or group of devices by using the Tag Device option. Steps 1. Click Devices. The Device page is displayed. 2. Apply the filters to locate the preferred device. The preferred device list is displayed. 3. Select one or more devices. From the More Options drop-down list, click Tag Device. The Set Device Tag window is displayed. 4. Enter the preferred tag name. 5. Click Set Tag.
○ When the Default pull type is selected, the following options are displayed: ￭ Compress ￭ OS ￭ BIOS ￭ Recovery–—For ThinLinux 2.x ○ When the Advanced pull type is selected, a drop-down list for selecting the templates is displayed. Select any template which is available by default. NOTE: You can use the custom templates that are created manually by editing the existing or default templates. 4. Click Prepare for Image Pull.
5. Click Start Monitoring, to access the performance metric console. On the Performance metric console, the following details are displayed: ● Average CPU last minute ● Average memory usage last minute Reimage your Dell Hybrid Client You can send a command to reimage your Dell Hybrid Client. Steps 1. Click Devices. The Device page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. From the More Actions drop-down menu, click ReImage.
8 Apps and data This section describes how to perform routine device application tasks, operating system imaging, inventory management, and set policies by using the Wyse management console. The repository names are color coded to indicate the status. You can configure the following type of policies using the Apps and Data page: ● Standard application policy—This policy enables you to install a single application package.
Configure thin client application inventory Steps 1. Click the Apps and Data tab. 2. In the left pane, go to App Inventory > Thin Client. Application details are displayed in the Thin Client Inventory window. 3. To add an application to the inventory, place the thin client application files in the \repository \thinClientApps folder. Wyse Management Suite Repository sends metadata for all the files to the Wyse Management Suite server periodically. 4. To edit the application, do the following: a.
● Apply the policy to new devices—This option automatically applies the policy to a registered device which belongs to a selected group or is moved to a selected group. ● Apply the policy to devices on check in—This option is automatically applied to the device at check-in. NOTE: For Windows based devices, specify the silent installation parameters for .exe files to run the application in the silent mode. For example, VMware-Horizon-Client-4.6.1-6748947.exe /silent /install /norestart. 13.
13. Click Save to create a policy. A message is displayed to enable the administrator to schedule this policy on devices based on group. 14. Select Yes to schedule a job on the same page. 15. Select any of the following options: ● Immediately—Server runs the job immediately. ● On device time zone—Server creates one job for each device time zone and schedules the job to the selected date or time of the device time zone.
16. Specify the number of minutes the message dialog box should be displayed on the client. A message on the client which gives you time to save your work before the installation begins. 17. To enable delay in implementation of the policy, select the Allow delay of policy execution checkbox. If this option is selected, the following drop-down menus are enabled: ● From the Max Hours per Delay drop-down list, select the maximum hours (1–24 hours) you can delay running the policy.
14. Click Add app and repeat the step to add multiple applications. NOTE: To stop the application policy at first failure, select Enable app dependency. If this option is not selected, failure of an application affects the policy implementation. If the application files are available on multiple repositories, then the number of repositories is displayed next to the file name. 15. To deploy this policy to a specific operating system or a platform, select either OS Subtype Filter or Platform Filter. 16.
6. From the Group drop-down list, select the group. 7. From the Task drop-down list, select the task. 8. From the OS Type drop-down list, select the operating system. 9. From the Application drop-down list, select the application. If the application files are available on multiple repositories, then the number of repositories is displayed next to the file name. 10. To deploy this policy to a specific operating system or a platform, select either OS Subtype Filter or Platform Filter. 11.
NOTE: To stop the application policy at first failure, select Enable app dependency. If this option is not selected, failure of an application affects the policy implementation. If the application files are available on multiple repositories, then the number of repositories is displayed next to the file name. 15. To deploy this policy to a specific operating system or a platform, select either OS Subtype Filter or Platform Filter. 16.
Steps 1. Copy the Windows Embedded Standard operating system images or ThinLinux images to the \repository\osImages\zipped folder. Wyse Management Suite extracts the files from the zipped folder and uploads the files in the \repository\osImages\valid location. The image extraction may take several minutes depending upon the image size. NOTE: For ThinLinux operating system, download the merlin image, for example, 1.0.7_3030LT_merlin.
NOTE: If the application exists in the public repository, the application reference is added to the inventory. Else, the application is uploaded to the public repository and the reference is added to the inventory. Also, ThinOS firmware and BIOS packages that are uploaded by the operator cannot be deleted by tenant administrators. Add ThinOS 9.x firmware to repository Steps 1. In the Apps & Data tab, under OS Image Repository, click ThinOS 9.x. 2. Click Add Firmware file. The Add File screen is displayed.
h. From the Apply Policy Automatically drop-down menu, select one of the following options: ● Do not apply automatically—The image policy is not applied automatically to a device registered with Wyse Management Suite. ● Apply the policy to new devices—The image policy is applied to a new device registered with Wyse Management Suite. ● Apply the policy to devices on check in—The image policy is applied to a new device on check in which is registered with Wyse Management Suite. 4. Click Save.
1. Go to the Groups & Configs page. 2. Select a policy group. 3. Click Edit Policies, and select WES. 4. Select Desktop Experience and click Configure this item. 5. Select Desktop Wallpaper. 6. From the drop-down list, select the wallpaper file. 7. Click Save and Publish. Click Jobs to check the status of configuration policy. You can click the number next to the status flag in the Details column to check devices with their status.
9 Managing rules This section describes how to add and manage the rules in the Wyse Management Suite console. The following filtering options are provided: ● Registration ● Unmanaged Device Auto Assignment ● Alert Notification Figure 9.
The Rules page is displayed. 2. Click Registration, and select the unmanaged devices option. 3. Click Edit Rule. The Edit Rule window is displayed. You can view the following details: ● ● ● ● Rule Description Device Target Group 4. From the drop-down menu, select a target client to apply the Notification Target option and the time duration to apply the Notification Frequency option.
2. Select the Unmanaged Device Auto Assignment option. 3. Select a rule, and click the Disable Rule option. The selected rule is disabled. 4. Select the disabled rule, and click the Delete Disabled Rule(s) option. The rule is deleted. Save the rule order Prerequisites If multiple rules are present, then you can change the order of a rule to be applied on the devices. Steps 1. Click the Rules tab. 2. Select the Unmanaged Device Auto Assignment option. 3.
10 Managing Jobs This section describes how to schedule and manage jobs in the management console. In this page you can see jobs based on the following filtering options: ● Configuration Groups—From the drop-down menu, select the configuration group type. ● Scheduled by—From the drop-down menu, select a scheduler who performs the scheduling activity.
Figure 10. Jobs page Topics: • • • • • Sync BIOS admin password Search a scheduled job by using filters Schedule a device command job Schedule the image policy Schedule an application policy Sync BIOS admin password Steps 1. Click Jobs. The Jobs page is displayed. 2. From the More Actions drop-down menu, select the Sync BIOS Admin Password option. The Sync BIOS Admin Password Job window is displayed. 3. Enter the password. The password must be a minimum of 4 and a maximum of 32 characters. 4.
Search a scheduled job by using filters This section describes how to search a scheduled job and manage the jobs in the management console. Steps 1. Click Jobs. The Jobs page is displayed. 2. From the Configuration Groups drop-down menu, select either the default policy group or the groups which are added by an administrator. 3. From the Scheduled by drop-down menu, select a scheduler who performs the scheduling activity.
The Device Command Job screen is displayed. 2. From the Command drop-down list, select a command. The available options are: ● ● ● ● Restart Wake on LAN Shutdown Query The device command is a recurring job. On selected days of the week and at a specific time the commands are sent to the selected devices. 3. From the drop-down list, select the type of operating system. 4. Enter the name of the job. 5. From the drop-down list, select a group name. 6. Enter the job description. 7.
● Start between—Enter the starting and ending time. ● On day(s)—Select the days of the week. 6. Click the Preview option to view the details of the scheduled job. 7. On the next page, click the Schedule option to initiate the job.
11 Managing Events In the Events page, you can view all events and alerts in the management system using the management console. It also provides instructions on viewing an audit of events and alerts for system auditing purposes. A summary of events and alerts is used to obtain an easy-to-read daily summary of what has happened in the system. The Audit window arranges the information into a typical audit log-view.
● Current Alerts ● Alert History 4. From the Timeframe drop-down menu, select any one of the following operating systems: This option enables you to view the events which occurred in a particular timeframe. The available options in the drop-down menu are: ● ● ● ● Today Yesterday This Week Custom 5. From the Event Type drop-down menu, select the operating system. All the events are classified under particular groups.
3. From the Timeframe drop-down menu, select an option to view the events.
12 Managing users This section describes how to perform a routine user management task in the management console. The following are the three types of users: ● Administrators—Wyse Management Suite administrator can be assigned the role of a global administrator, group administrator, or viewer. ○ A Global Administrator has access to all the Wyse Management Suite functions. ○ A Group Administrator has access to all assets and functions for specific groups that are assigned to them.
• • • • • • • • • • • • • • • Add a new admin profile Bulk import unassigned administrators or cloud connect users Edit an administrator profile Activate an administrator profile Deactivate an administrator profile Delete an administrator profile Unlock an administrator profile Deactivate an administrator profile Create auto assignment rules for unmanaged devices Add end user Edit an end user Configure end user policy Bulk import end users Deleting end user Edit a user profile Add a new admin profile Step
Bulk import unassigned administrators or cloud connect users Steps 1. Click Users. The Users page is displayed. 2. Select the Unassigned Admins option. 3. Click Bulk Import. The Bulk Import window is displayed. 4. Click Browse and select the CSV file. 5. Select the user group to which the imported users must be assigned. 6. Click Import. Edit an administrator profile Steps 1. Click Users. 2. Click Administrator(s). 3. Click Edit Admin. The Edit Admin User window is displayed. 4.
Deactivate an administrator profile Deactivating the admin profile prevents you from logging in to the console, and removes your account from the registered devices list. Steps 1. Click Users. 2. Click Administrator(s). 3. From the list, select a user and click Deactivate Admin(s). An alert window is displayed. 4. Click OK. Delete an administrator profile About this task Administrator must be deactivated before you delete them. To delete an administrator profile, do the following: Steps 1. Click Users. 2.
3. Click the Add Rules tab. 4. Enter the Name and select the Destination group. 5. Click the Add Condition option and select the conditions for assigned rules. 6. Click Save. The rule is displayed in the unmanaged group list. This rule is applied automatically and the device is listed in the destination group. Add end user Steps 1. Click the Users tab. 2. Click End Users. 3. Click Add User. 4. Enter the username, domain, first name, last name, email address, title, and phone number 5. Click Save.
4. Click Browse, and select the .csv file. 5. Select the CSV file has header line option if the .csv file contains a header. 6. From the Choose a user group drop-down list, select the user group to which you want to add the users. 7. Click Import. NOTE: You can add up to 100 users per file to Wyse Management Suite and the file size of the .csv file should not exceed 150 KB. NOTE: You can add a maximum of 10,000 users in public cloud.
13 Portal administration This section contains a brief overview of your system administration tasks that are required to set up and maintain your system. Figure 13.
2. Register the repository to public cloud. Once registered, follow the steps mentioned on the UI to import the users to Wyse Management Suite public cloud. You can edit the roles of the AD user after importing to Wyse Management Suite public cloud. 3. Set up ADFS on public cloud. Adding the Active Directory server information You can import Active Directory users and user groups to the Wyse Management Suite private cloud. Steps 1. Log in to the Wyse Management Suite private cloud. 2.
5. Click Sign In. The imported Active Directory users can be activated or deactivated on the Users page by using the global administrator login. If your account is deactivated, you cannot log in to the Wyse Management Suite Management portal. NOTE: To import the users using LDAPS protocol, complete the following steps: 1. Import the AD Domain Server Root Certificate into Java Key Store Manually using the keytool. For example, keytool.
Alert classifications The Alert page categorizes the alerts as Critical, Warning, or Info. NOTE: To receive alerts through e-mail, select the Alert Preferences option from the username menu displayed on the upper-right corner.
1. Download the Wyse Management Suite repository from the public cloud console. 2. After the installation process, start the application. 3. On the Wyse Management Suite Repository page, enter the credentials to register the Wyse Management Suite repository to Wyse Management Suite server. 4. If you enable the Register to Public WMS Management Portal option, you can register the repository to Wyse Management Suite public cloud. 5. Click the Sync Files option to send the sync file command. 6.
Figure 14. File repository 2. Select a file repository. 3. Click the Subnet Mapping option. 4. Enter subnets or ranges, one value per line. You must use hyphen for range separation. 5. Optionally, clear the Allow devices from subnets not mapped to this file repository to download files from this repository as a fallback method using subnet proximity check box if you want the file repository to be accessed only through the configured subnets or ranges.
Managing Teradici configurations To add a Teradici server, do the following: Steps 1. In the Portal Administration tab, under Console Settings, click Teradici. 2. Click Add Server. The Add Server screen is displayed. 3. Enter the Server Name. The port number is automatically populated. 4. Select the CA Validation check box to enable CA validation. 5. Click Test. Enable Two-Factor authentication You must have at least two active global administrator users in the system.
Generate reports You can download reports of the jobs, devices, groups, events, alerts, and policies. The reports can be shared with the administrator if you want to troubleshoot the end points. Steps 1. Go to Portal Admin > Reports. 2. Click the Generate Report option. The Generate Report window is displayed. 3. From the Type drop-down list, select the type of the report. 4. From the Groups drop-down list, select the group. 5. Select the delimiter. 6. Click Save.
● ● ● ● Send from address Username Password Test address Current Certificate—Select the Certificate Validation check box to enable the CA validation for private cloud. All the communication from the server and the client including file download, operating system image download from Local Repo uses the certificate. NOTE: When CA Validation from Wyse Management Suite server is enabled, the certificate should be present in the client. All the operations such as, Apps and Data, Image Pull/Push is successful.
14 Teradici device management The Teradici device management section provides the information about managing and discovering the teradici divices. The teradici management console uses SDK’s to support management, configuration for tera devices. This is applicable only for Wyse Management Suite private cloud with pro license type.
Manual discovery from the client 1. Go to, https://. 2. Accept the certificate warning message. 3. Enter the administrator password (default password is Administrator) and login. 4. Go to, upload > certificate. Select the Cert.pemfile from the default path and click Upload. 5. Go to Configuration > Management. Click the clear management state button to register the device to the new Management Server. 6. Set the manager discovery mode to manual 7.
14. Click the Advanced tab, and then select the PCoIP Endpoint vendor class. 15. Select the 011 EBM X.509 SHA-256 fingerprint check box, and paste the SHA-256 fingerprint. 16. Click OK to save the settings. 17. Go to the client web browser. 18. Go to Configuration > Management, and set the manager discovery mode to Automatic 19. The client is connected to the server which is mentioned in the DHCP server. Creating the DNS SRV record 1. Log in to the DNS server. 2.
CIFS use case scenarios The following use cases are supported in Wyse Management Suite: ● When you select Wyse Management Suite as Setup Type while installing Wyse Management Suite private cloud. ○ CIFS configuration page is displayed. This page is required as we need to configure the shared folder. NOTE: The Configure CIFS User Credentials option is disabled by default. ● When you select Teradici EMSDK as Setup Type while installing Wyse Management Suite private cloud.
15 Managing license subscription This section enables you to view and manage the management console license subscription and its usage. On the Portal Admin page, you can view the Subscription option.
2. Go to Portal Administration > Accounts > Subscription. 3. Enter the number of thin client seats that must be exported to Wyse Management Suite Private Cloud. 4. Click Export. 5. Copy the generated license key. 6. Log in to Wyse Management Suite Private Cloud console. 7. Go to Portal Administration > Accounts > Subscription. 8. Enter the generated license key in the box. 9. Click Import.
16 Firmware upgrade You can use Wyse Management Suite to upgrade your firmware. Topics: • • Upgrading ThinLinux 1.x to 2.1 and later versions Upgrading ThinOS 8.x to 9.0 Upgrading ThinLinux 1.x to 2.1 and later versions If you want to pull a customized image from TL 2.x before you upgrade, you must prepare the ThinLinux 2,x and then upgrade the ThinLinux 1.x image. Prepare the ThinLinux 2.x image Prerequisites Use Wyse Management Suite version 1.
Results NOTE: ● If you are using Wyse Management Suite 1.3 remote repository, then the xml file is not available in the repository. You must upgrade Wyse Management Suite to 1.4 or later versions to access the file. ● Recovery Pull operation does not preserve the user settings. Upgrade ThinLinux 1.x to 2.x Steps 1. Go to www.dell.com/support. 2. Click Product Support, enter the Service Tag of your thin client, and then press Enter.
Table 9. Firmware images Platform ThinOS firmware image Wyse 3040 Thin Client A10Q_wnos Wyse 5070 Thin Client—Celeron processor X10_wnos Wyse 5070 Thin Client—Pentium processor X10_wnos Wyse 5070 Extended Thin Client—Pentium processor X10_wnos Wyse 5470 Thin Client X10_wnos Wyse 5470 All-in-One Thin Client X10_wnos Add ThinOS firmware to the repository Steps 1. Log in to Wyse Management Suite using your tenant credentials. 2. In the Apps & Data tab, under OS Image Repository, click ThinOS. 3.
NOTE: After you upgrade the firmware, the device is automatically registered to Wyse Management Suite. The configurations of 8.6 build are not inherited after you upgrade the firmware. Upgrade ThinOS 9.x to later versions using Wyse Management Suite Prerequisites ● Ensure that you have installed the ThinOS v9.0.1136 image on the thin client. ● Ensure that you have created a group in Wyse Management Suite with a group token. Use this group token to register the ThinOS 9.x devices.
17 Remote repository Wyse Management Suite allows you to have local and remote repositories for applications, operating system images and so on. If the user accounts are distributed across geographies, it would be efficient to have a separate local repository for each of the distributed user account so the devices can download images from its local repository. This flexibility is provided with WMS_Repo.exe software. The WMS_Repo.
Figure 15. Register on a public cloud 5. Enter the following details: a. Wyse Management Suite server URL NOTE: Unless you register with Wyse Management Suite version 1.0, you cannot use MQTT Server URL. b. c. d. e. WMS Repository URL (update the URL with the domain name) Wyse Management Suite administrator login username information Wyse Management Suite administrator login password information Repository path information 6. Click Register. 7.
Figure 16. Registration successful 8. The following screen on the Wyse Management Suite portal confirms the successful registration of the remote repository: Figure 17.
9. HTTPS is by default enabled with WMS_Repo.exe, and is installed with the self-signed certificate. To install your own domain-specific certificate, scroll down the registration page to upload the SSL certificates. Figure 18. Certificate upload 10. The server restarts, and the uploaded certificate is displayed.
Figure 19. SSL certificate enabled 11. If the Wyse Management Suite is enabled with self-signed or a private domain certificate, you can upload the certificate on the Wyse Management Suite repository server to validate the Wyse Management Suite CA credentials. Figure 20. Trust store certificates 12. Navigate to the C:\wmsrepo location that you entered during registration, and you can view the folders where all the repository files are saved and managed.
Manage Wyse Management Suite repository service Wyse Management Suite repository is displayed as Dell WMS Repository: Tomcat Service in the Windows Local Services window and is configured to start automatically when the server restarts.
18 Troubleshooting your device You can view and manage the troubleshooting information using the Devices page. Steps 1. On the Device Details page, click Troubleshooting tab. 2. Click Request Screen Shot. You can capture the screenshot of the thin client with or without the client permission. If you select the Require User Acceptance check box, then a message is displayed on the client. This option is applicable only for Windows Embedded Standard, Linux, and ThinLinux devices. 3.
The Audit window arranges the information into a typical audit log-view. You can view the timestamp, event type, source, and description of each event in the order of time. Device fails to register to Wyse Management Suite when WinHTTP proxy is configured WDA is a WinHTTP Client and fetches WinHTTP proxy information from the local system.
3. Browse to the destination path to save the profile as an xml file and click Save. 4. Click the Export WiFi Profiles button in the Wireless Profile Password Editor window. 5. From the Profiles drop-down list, select the profile to deploy the configuration. 6. Clear the Password field, and enter the password again. 7. Click Change Password. NOTE: Do not click the Export WiFi Profiles button again. 8. Close the Wireless Profile Password Editor window. 9. Log in to Wyse Management Suite. 10.
19 Frequently asked questions Topics: • • • • • • • • What takes precedence between Wyse Management Suite and ThinOS UI when conflicting settings are enforced? How do I use Wyse Management Suite file repository? How do I import users from a .
in the client, the Wyse Management Suite server provides one generic audit event message Failed to Validate Certificate Authority under Events page. All the operations, such as, Apps and Data, Image Pull/Push is not successful. ● When CA Validation from Wyse Management Suite server is disabled, then the communication from server and client happens in a secure channel without Certificate Signature validation. e. Add a note in the provided box. f. Click Save Settings . How do I import users from a .
String—WMS FQDN ● To create the 166 MQTT server URL option tag, do the following: a. Enter the following values, and click OK. ○ Name—MQTT ○ Data type—String ○ Code—166 ○ Description—MQTT Server b. Enter the following value, and click OK. String—MQTT FQDN For example, WMSServerName.YourDomain.Com:1883 ● To create the 167 Wyse Management Suite CA Validation server URL option tag, do the following: a. Enter the following values, and click OK.
● Service—_WMS_MQTT ● Protocol—_tcp ● Port number—1883 ● Host offering this service—FQDN of MQTT server 6. Go to DNS > DNS Server Host Name > Forward Lookup Zones > Domain , and right-click the domain. 7. Click Other New Records. 8. Select Text (TXT), click Create Record, and do the following: a. To create Wyse Management Suite Group Token record, enter the following values, and click OK. ● Record name—_WMS_GROUPTOKEN ● Text—WMS Group token b.
How do I image the device using self-signed remote repository You can perform imaging of Windows Embedded Standard and ThinLinux devices from the local repository of private cloud or from the remote repository of public cloud.
