Dell Wyse Management Suite Version 3.1 Administrator's Guide December 2020 Rev.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2020 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents Chapter 1: Introduction to Wyse Management Suite...................................................................... 9 What is new in Wyse Management Suite version 3.1................................................................................................. 9 Editions of Wyse Management Suite..............................................................................................................................9 Wyse Management Suite Feature Matrix.....................................
Edit a user policy group..............................................................................................................................................34 Configure a global level policy........................................................................................................................................ 34 Import a user policy group...............................................................................................................................................
Validate the enrollment of a device........................................................................................................................ 62 Reset the device to factory default settings..............................................................................................................62 Change a group assignment on the Devices page ................................................................................................... 62 Send messages to a device......................
Edit a registration rule......................................................................................................................................................85 Create auto assignment rules for unmanaged devices............................................................................................ 86 Edit an unmanaged device auto assignment rule......................................................................................................
Enable Two-Factor authentication.............................................................................................................................. 107 Enabling multi-tenant accounts....................................................................................................................................107 Generate reports.............................................................................................................................................................
Chapter 21: Frequently asked questions..................................................................................... 136 What takes precedence between Wyse Management Suite and ThinOS UI when conflicting settings are enforced?............................................................................................................................................................... 136 How do I use Wyse Management Suite file repository?................................................................
1 Introduction to Wyse Management Suite Wyse Management Suite is the next generation management solution that enables you to centrally configure, monitor, manage, and optimize your Dell Hybrid Client powered endpoints and Dell thin clients. It also offers advanced feature options such as cloud and on-premises deployment, manage-from-anywhere option by using a mobile application, enhanced security such as BIOS configuration and port lockdown.
○ Enhanced security through two-factor identification and Active Directory authentication for role-based administration ○ Advanced app policy and reporting NOTE: Cloud services are hosted in the U.S. and Germany. Customers in countries with data residency restrictions may not be able to take advantage of the cloud-based service. The Wyse Management Suite web console supports internationalization.
The following table provides information about the Dell Hybrid Client management features supported for each subscription type. Table 2.
Table 2.
Table 3.
2 Getting started with Wyse Management Suite This section provides information about the general features to get you started as an administrator and manage thin clients using Wyse Management Suite.
Logging out To log out from the management console, do the following: 1. Click the account link at the upper-right corner of the management console. 2. Click Sign out. Prerequisites to deploy Wyse Management Suite on the private cloud Table 4. Prerequisites Description 10,000 devices or less 50,000 devices or less 120,000 devices or less Wyse Management Suite – Software repository Operating system Windows Server 2012 R2, Windows Server 2016, or Windows Server 2019 Standard.
repository and local repository. The software can be installed on a physical or a virtual machine. Also, it is not necessary that the software repository and the Wyse Management Suite server have the same operating system. Functional areas of management console The Wyse Management Suite console is organized into the following functional areas: ● The Dashboard page provides information about the current status on each functional area of the system.
Configuration policies are published immediately, and cannot be scheduled for a later time. A few policy changes, for example, display settings, may force a reboot. ● Application and operating system image deployment—Applications and operating system image updates can be deployed from the Apps & Data tab. Applications are deployed based on the policy groups. NOTE: Advanced application policy allows you to deploy an application to the current and all subgroups based on your requirement.
does not have the certificate before registration. This certificate is preserved even after you reimage or restart the device to mitigate the risk against rouge DHCP or DNS server. ● Normal environments—The device obtains the Wyse Management Suite server URL from the DHCP/DNS records for Wyse Management Suite private cloud that is configured with CA-signed or self-signed certificate.
3 Installing or upgrading Wyse Device Agent This section provides information about how to install or upgrade Wyse Device Agent on your thin clients, such as Windows Embedded Standard, Linux, and ThinLinux devices by using Wyse Management Suite. ● Windows Embedded Standard devices—Wyse Device Agent version 1.4.x can be downloaded from support.dell.com.
in the local repository. If you are using a public cloud, or a remote repository on a private cloud, copy the WDA.exe file to the thinClientApps folder in the repository. Steps 1. After the WDA.exe file is copied to the repository, go to Apps and Data, and create a standard application policy with this package—see Create and deploy standard application policy to thin clients. NOTE: Advanced application policy is supported only from Wyse Device Agent 14.x onwards.
4 Registering and configuring a new device using Wyse Management Suite Topics: • • • • • • Register Register Register Register Register Register and and and and and and configure configure configure configure configure configure a new Windows Embedded Standard device using Wyse Management Suite a new ThinOS 8.x device using Wyse Management Suite a new ThinOS 9.
5. Enable or disable CA validation based on your license type. For public cloud, select the Enable CA Validation check box. For private cloud, select the Enable CA Validation check box if you have imported certificates from a well-known certificate authority into your Wyse Management Suite server. To enable the CA validation option in the private cloud, you must install the same self-signed certificate on the ThinOS device as well.
NOTE: When the Enrollment Validation option is enabled, the manual or auto-discovered devices are in Enrollment Validation Pending state in the Devices page. The tenant can select a single device or multiple devices in the Devices page and validate the enrollment. The devices are moved to the intended group after they are validated. For more information about how to validate the devices, see Enrollment validation. The device is registered to Wyse Management Suite. 9. Log in to Wyse Management Suite. 10.
3. Add the device to your desired group (optional)—see Managing groups and configs. 4. Configure the thin client using any of the following options: ● Using the Groups and Configs page—see Edit the Wyse Software Thin Client policy settings. ● Using the Devices page—see Managing Devices. Register and configure Dell Hybrid Client using Wyse Management Suite Prerequisites Before registering the device, ensure that your device has network connectivity to contact the Wyse Management Suite server.
Figure 2. Dell Client Agent 10. Log in to Wyse Management Suite. 11. Add the device to your wanted group (optional)—see Managing Groups and Configs. 12. Configure the thin client using any of the following options: ● Using the Groups and Configs page—see Edit the Dell Hybrid Client policy settings. ● Using the Devices page—see Managing Devices.
5 Wyse Management Suite dashboard The Dashboard page enables you to view the status of a system, and the recent tasks that are performed within the system. To view a particular alert, click the link in the Alerts section. The Dashboard page also enables you to view the device summary. Figure 3.
2. Click View All Alerts. The following attributes are displayed in the Events page: ● Devices Not Checked In ● App Compliance ● Other Device Alerts View the list of events The Events section displays the summary of events that have occurred in the last few days. Steps 1. Click Dashboard. The events summary is displayed. 2. Click View All Events. The Events page is displayed with list of all the events. View the device status The Display section provides the summary of device status. Steps 1.
The User Preferences window is displayed. 3. Click Alerts, and select the appropriate check boxes to assign an alert type—Critical, Warning or Info—for notifications from your emails and mobile applications. 4. Click Policies, and select the Ask me if I want to use the ThinOS Wizard mode check box to display the Select ThinOS Configuration Mode window every time you configure the ThinOS policy settings. 5. Click Page size, and enter a number from 10 to 100 in the Number Of Items Per Page text box.
6 Managing groups and configurations The Groups & Configs page enables you to define policies that are required to configure your devices. You can create sub groups of the global group policies and categorize devices based on your requirements. For example, devices may be grouped based on job functions, device type, and so on. For each group, you can define policies for the following operating systems: ● ThinOS ● ● ● ● ● ● ○ ThinOS ○ ThinOS 9.
• • • • • • • • • • • Export group policies Importing group policies Edit the ThinOS policy settings Edit the ThinOS 9.
NOTE: The devices can be registered to a group by entering the group token which is available in the Groups and Configs page for the respective group. Create a ThinOS Select group Steps 1. On the Groups & Configs page, click the Default Device Policy Group option. 2. Click . 3. In the Add New Group dialog box, enter the Group Name and Description. 4. Select the This is a ThinOS Select group parent option. 5. Select the name of the group administrators who are tasked with managing this group.
2. Click . A warning message indicating that this action removes one or more groups from the group tree hierarchy is displayed. 3. From the groups drop-down list, select a new target group for users and devices in the current group. 4. Click Remove Group. NOTE: When you remove a group from the group hierarchy, all users and devices that belong to the deleted group are moved to the custom, default, or unmanaged group.
Figure 4. Add a new group NOTE: If the AD group is inside an OU group in the domain, then you must select the OU group as the AD Attribute. 4. Select the name of the group administrators who are tasked with managing this group. 5. From the Available Group Admins box, select the particular group and click the right arrow to move it to the Assigned Group Admins box. To move one group from the Assigned Group Admins to Available Group Admins, do the reverse. 6. Click Save.
7. Select the Device Group Mapping option to import user groups with device mapping to control the configurations that are applied to all device groups by default. AD User groups which are imported into Wyse Management Suite can be mapped to the respective device group. By mapping the devices, they do not receive unwanted user group policies. NOTE: By default, user groups are not mapped to a device group. If you select the Default device group policy, all sub-device groups are selected.
Remove a group As an administrator, you can remove a group from the group hierarchy. Steps 1. In the Groups & Configs page, select the group that you want to delete. . 2. Click A warning message indicating that this action removes one or more groups from the group tree hierarchy is displayed. 3. From the drop-down list, select a new group to move the users and devices in the current group. 4. Click Remove Group.
Importing group policies The Import Policies option enables you to import the policies. This option is available for Wyse Management Suite PRO license users. You can import the group policies from the Groups & Configs page or from the Edit Policies page. Import group policies from Groups and Configs page Steps 1. On the Groups & Configs page, select your preferred group. If the destination group contains policies of the same device type as the imported ones, they are removed and new ones are added. 2.
● From an existing group—Select a group from the drop-down list. Policies from that group are copied to the current group. ● From an exported file—Click Browse and select the .JSON file. Policies from that file are copied to the current group. 5. Click Next. A preview of the policies in the selected group is displayed. 6. Click Next.The summary of the import process is displayed.
● LPT port bind ThinOS—Wizard mode Use this page to configure the most frequently used parameters for the ThinOS devices. Steps 1. Select Wizard as the mode of configuration. 2. Configure the options are required. 3. Click Next to go to the next policy setting. 4. Click Save & Publish after you configure the options. NOTE: To go to ThinOS advanced configuration mode, click Continue. ThinOS—Advanced mode Use this page to configure the advanced policy settings for the ThinOS devices. Steps 1.
Figure 5. Configuration Control | ThinOS 3. Click the Advanced or Standard option. 4. Select the options that you want to configure. 5. In the respective fields, click the option that you want to configure. You can use the Global search option to find the relevant settings or parameters that are available in the Policy Settings. The search result displays the settings in the following order: ● ● ● ● Setting Parameter Group Parameter sub group Parameter 6. Configure the options as required. 7.
Upgrade ThinOS 9.x to later versions using Wyse Management Suite Prerequisites ● Ensure that you have created a group with a group token. Use this group token to register the ThinOS 9.x devices. ● Ensure that the thin client is registered to Wyse Management Suite. Steps 1. Go to the Groups & Configs page, and select a group. 2. From the Edit Policies drop-down menu, click ThinOS 9.x. The Configuration Control | ThinOS window is displayed. 3. Click Advanced. 4.
b. Click on OS Image Repository and select ThinOS 9.x. c. Click Add BIOS file to browse and add the file you want to add to the repository. NOTE: This feature is available only on Wyse Management Suite Pro license. Upload and push ThinOS 9.x application packages using Groups and Configs Prerequisites ● Ensure that you have created a group with a group token. Use this group token to register the ThinOS 9.x devices. ● Register the thin client to Wyse Management Suite. Steps 1.
5. Configure the following options: ● Enable/Disable All Notifications—If you disable this option, all the options and notifications are disabled. ● Configure Update Notification—If you disable this option, the configuration update dialog box is not displayed on the device. ● Application Update Notification—If you disable this option, the user notification is not displayed when you deploy an application policy.
● Image Update Notification—If you disable this option, the user notification is not displayed when you deploy an image policy. ● Logoff Notification—If you disable this option, the user notification is not displayed for a user to log off from the device. ● Reboot Notification—If you disable this option, the user notification is not displayed when the device reboot configuration is deployed.
Table 5.
Table 5. Hybrid Client policy settings (continued) Feature Sub feature—User policy group Sub feature—Device policy group Application Security VLC Media Player VLC Media Player Image Viewer Image Viewer Libre Office Libre Office Network Drives Network Drives list Network Drives list BIOS Not applicable Select your platform: ● DHC 5070 ● DHC 7070 NOTE: Do not use special characters or add spaces in the resource file name such as wallpaper, certificate, ad logo files.
● When no user has logged on to the device for a period of time—If you select this option, the configuration are applied when no user has logged in to the device for defined time. You can specify the idle time after which the configurations are applied to the device. NOTE: You can also configure these settings for a particular device from the Devices page. For more information, see Configure a device level policy. Configure deployment settings for Dell Hybrid Client devices From Wyse Management Suite 3.
} ] } } } "updatedAt": "1581466506234" }, "AdminModePassword": { "value": "********", "updatedAt": "1581466506234" }, "TerminalName": { "value": "outpatient", "updatedAt": "1581466506234" }, "TimeServer": { "value": "10.10.10.
}, "": { "value": } } } } For example, { } "devices": { "9EPDL900051": { "parameters": { "TerminalName": { "value" : "Cubical 5 - Floor 3" }, "TerminalNameCapital": { "value": "no" } }, configurations: ["westWingExceptions"] }, "5LGDO600108": { "parameters": { "TerminalName": { "value" : "Cubical 15 - Floor 2" }, "TerminalNameCapital": { "value": "no" } }, configurations: ["westWingExceptions"] } }, "configurations": { "westWingExceptions": { "DeviceNICDefault": { "value": "Wlan" },
NOTE: File size should not be more than 1 MB. 3. Go to Groups & Configs and click Import Policies. The Import Policies Wizard screen is displayed. 4. Select Bulk Device Exceptions. 5. Click Browse and select the password encrypted .zip file. 6. Click Next. Select the device type configurations to import page is displayed. 7. Click Next. NOTE: Since you can bulk import a device exception file for ThinOS 9.x devices, you cannot configure the options in the page. 8. Enter the .
7 Managing devices This section describes how to perform a routine device management task by using the management console. To locate the inventory of the devices, click the Devices tab. You can view a subset of the devices by using various filter criteria, such as groups or subgroups, device type, operating system type, status, subnet, platform, or time zone.
• • • • • • • • • • • • • • • • • • • • • Wake On LAN command View the device details View the display parameters View the virtual NIC details View the BIOS details Manage the device summary View the system information View device events View the installed applications Rename the thin client Enable remote shadow connection Configure remote shadow connection for Dell Hybrid Client devices Shutting down devices Tag a device Device compliance status Pulling Windows Embedded Standard or ThinLinux image Request
Figure 7. Dell Client Agent icon 3. Click Dell Client Agent. The Dell Client Agent window is displayed. 4. Click Registration. The default status is displayed as Discovery In Progress. 5. To register manually, click the Cancel button. 6. In the WMS Server field, enter the URL of the Wyse Management Suite server. 7. In the Group Token field, enter your group registration key. The group token is a unique key for registering your devices to groups directly.
Figure 8. Dell Client Agent Register Dell Hybrid Client by using manual discovery method You can use the manual discovery method to register OptiPlex 7070 Ultra devices running Ubuntu version 18.04 LTS 64-bit to Wyse Management Suite using the Dell Client Agent Enabler agent. Steps 1. Create a reg.json file using the following template: {"ccm": {"ccmserver":"WMSServerURL.Domain.com","ccmport":"443","usessl":"true","mqttserver":" WMSServerURL.Domain.
5. Select the Enable WMS Advanced Settings option, and enter the WMS server or MQTT server details. 6. Enable or disable CA validation based on your license type. For public cloud, select the Enable CA Validation check box, and for private cloud, select the Enable CA Validation check box if you have imported certificates from a well-known certificate authority into your Wyse Management Suite server.
Steps 1. Open the Wyse Device Agent application. The Wyse Device Agent window is displayed. 2. Enter the device registration details. 3. From the Management Server drop-down list, select Wyse Management Suite. 4. Enter the server address and the port number in the respective fields. NOTE: If the server address contains http, a warning message is displayed. Click Ok to confirm. 5. Enter the group token. For a single tenant, the group token is an optional step. 6.
In the Wyse Device Agent tab, observe that the Wyse Management Server details are available in the respective field and the client entry can be seen in Wyse Management Server>Devices page. Register ThinLinux version 2.0 devices by using FTP INI method Prerequisites Create a group to register in Wyse Management Suite. Steps 1. Create a wlx.ini file. Enter the following parameter: WMSEnable=yes\no WMSServer=https://FQDN of the WMS Server:Port GroupRegistrationKey=GroupToken present i
CAValidation=True 2. Place the wlx ini file in the wyse\wlx folder. 3. Go to Settings and switch to admin on the ThinLinux thin client. 4. Go to Management > INI. 5. Enter the FTP server URL. 6. Click Save, and then restart the thin client. 7. Go to Management > Wyse Device Agent. In the Wyse Device Agent tab, observe that the Wyse Management Server details are available in the respective field and the client entry can be seen in Wyse Management Server>Devices page.
Table 6. Registering device by using DHCP option tags (continued) Option Tag Description Description—Group Token available, then the devices are automatically registered to the unmanaged group during on-premise installation. NOTE: For detailed instructions on how to add DHCP option tags on the Windows server, see How do I create and configure DHCP option tags.
Table 7. Configuring device by using DNS SRV record (continued) URL/Tag Description Record Name—_WMS_GROUPTOKEN This record is required to register the ThinOS devices with Wyse Management Suite on public or private cloud. Record FQDN—_WMS_GROUPTOKEN._tcp. Record Type— TEXT This record is optional to register the Windows Embedded Standard or ThinLinux devices with Wyse Management Suite on private cloud.
○ ThinOS ○ WES ○ Teradici (Private cloud) ○ Wyse Software Thin Client ● Hybrid Client ○ Hybrid Client 4. From the OS Subtype drop-down list, select a subtype for your operating system. 5. From the Platform drop-down list, select a platform. 6. From the OS Version drop-down list, select an operating system version. 7. From the Agent Version drop-down list, select an agent version. 8. From the Subnet/prefix drop-down list, select a subnet. 9. From the Timezone drop-down list, select the time zone. 10.
The Device page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. Click Lock. An Alert window is displayed. 5. Click Send Command to send the lock command. Restart the devices You can send a command to restart a registered device. Steps 1. Click Devices. The Device page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. Click Restart. An Alert window is displayed. 5.
Validate the enrollment of a device You can enable Enrollment Validation to enable administrators to control the manual and auto registration of thin clients to a group. You can filter the devices in Pending Validation state by clicking the Pending count in the Dashboard page or by selecting the Enrollment Validation Pending in the Status drop-down list in the Devices page.
Send messages to a device You can send a message to a registered device using the Devices page. Steps 1. Click Devices. The Devices page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. From the More Actions drop-down menu, click Send Message. The Send Message window is displayed. 5. Enter the message. 6. Click Send. Wake On LAN command You can send a command to activate a device if it is turned off or in the Sleep mode. Steps 1. Click Devices.
4. Go to System Info > Peripherals. You can view the display setup details. Figure 9. Display parameters View the virtual NIC details From Wyse Management Suite 3.1, you can view the network adapter details of the devices running a Windows Embedded and ThinLinux operating system. You can view the adapter name, MAC address, IP address, Gateway IP address, and DNS server details of the Network Adaptor. Steps 1. Go to the Devices page. 2. Apply the filters to find the preferred device.
Manage the device summary You can view and manage information about the Notes, Group Assignment, Alerts, and Device Configuration using the Devices page. Steps 1. Click Devices. 2. On the Device Details page, click Summary tab. The device summary is displayed. 3. In the right pane, click Add note. An Add Note window is displayed. 4. Type the message in the provided field and click Save. 5. In the right pane, click Change Group Assignment. The Change Group Assignment window is displayed. 6.
2. Apply the filters to find the preferred device. The preferred device list is displayed. 3. Click any of the displayed devices. The Device Details page is displayed. 4. Click Installed Apps tab. The list of installed applications on the device is displayed. This option is available for Windows Embedded Standard, Linux, and ThinLinux devices.
Configure remote shadow connection for Dell Hybrid Client devices Use this page to enable global and group administrators to access the Dell Hybrid Client devices sessions remotely. This feature is applicable to only to private cloud and is available for both Standard and Pro licenses. Steps 1. Deploy the VNC add-on package from Wyse Management Suite using Standard or advanced application policy—see Application Policy. The add-on is installed and the device reboots. 2.
Device compliance status By default, the following colors are displayed as the device status: ● Red—when the registered device has not been checked in for more than seven days. ● Gray—When you apply any configuration policy to the device. ● Green—When you apply all the configuration policies to the device. The default value can be changed from 1 day to 99 days. The Online Status option is located next to the device name.
● Pull after Sysprep—The device restarts, and logs in to the operating system in a disabled state. Run the custom Sysprep. After the custom sysprep is complete, the device boots to Merlin operating system and the image pull operation is performed. NOTE: This option is applicable for Windows Embedded Standard devices. ● Pull now—The device boots to the Merlin operating system and the image pull operation is performed.
3. Select the check box of the device. 4. From the More Actions drop-down menu, click ReImage. An Alert window is displayed. 5. Click Send Command. This action performs recovery image function for the device. Pull configuration user interface package for Dell Hybrid Client When a Dell Hybrid Client has a higher version of the configuration schema than the version present in the Wyse Management Suite server, you can pull the latest configuration user interface package. Steps 1. Click Devices.
8 Apps and data This section describes how to perform routine device application tasks, operating system imaging, inventory management, and set policies by using the Wyse management console. The repository names are color coded to indicate the status. You can configure the following type of policies using the Apps and Data page: ● Standard application policy—This policy enables you to install a single application package.
Configure thin client application inventory Steps 1. Click the Apps and Data tab. 2. In the left pane, go to App Inventory > Thin Client. Application details are displayed in the Thin Client Inventory window. 3. To add an application to the inventory, place the thin client application files in the \repository \thinClientApps folder. Wyse Management Suite Repository sends metadata for all the files to the Wyse Management Suite server periodically. 4. To edit the application, do the following: a.
12. From the Apply Policy Automatically drop-down list, select any of the following options: ● Do not apply automatically—This option does not apply a policy automatically to the devices. ● Apply the policy to new devices—This option automatically applies the policy to a registered device which belongs to a selected group or to the device that is moved to a selected group. When this option is selected, the policy is applied to all the new devices that are registered to the group.
● Apply the policy to new devices—This option automatically applies the policy to a registered device which belongs to a selected group or to the device that is moved to a selected group. When this option is selected, the policy is applied to all the new devices that are registered to the group. To run the job on the existing devices present in the group, you must schedule the policy. After you schedule the policy, the job status displays the count of devices that are already present in the group.
4. Go to Apps & Data > App Policies > Thin Client. 5. Click Add Advanced Policy. Add Advanced App Policy page is displayed. 6. Enter the Policy Name. 7. From the Group drop-down list, select the group. 8. Select the Sub Groups check box to apply the policy to sub groups. 9. From the Task drop-down list, select the task. 10. From the OS Type drop-down list, select the operating system. 11. Select the Filter files based on extensions checkbox to filter the applications. 12.
● Immediately—Server runs the job immediately. ● On device time zone—Server creates one job for each device time zone and schedules the job to the selected date or time of the device time zone. ● On selected time zone—Server creates one job to run at the date or time of the designated time zone. 24. To create the job, click Preview and schedules are displayed on the next page. 25. You can check the status of the job by going to the Jobs page.
NOTE: For Windows-based devices, specify the silent installation parameters for .exe files to run the application in the silent mode. For example, VMware-Horizon-Client-4.6.1-6748947.exe /silent /install /norestart. 19. Select the Skip write filter check check box to skip the write filter cycles. This option is applicable for Windows Embedded Standard operating system devices and Wyse Software thin client devices. 20.
NOTE: The job status of the newly added device count that is checked in to Wyse Management Suite is not displayed. 13. Specify the number of minutes the message dialog box should be displayed on the client in the Timeout (1-999 min) box. Timeout displays a message on the client which gives you time to save your work before the installation begins. 14. To stop the installation process after a defined value, specify the number of minutes in the Application Installation Timeout field.
18. From the Apply Policy Automatically drop-down list, select one of the following options: ● Do not apply automatically—This option does not apply a policy automatically to the devices. ● Apply the policy to new devices—This option automatically applies the policy to a registered device which belongs to a selected group or to the device that is moved to a selected group. When this option is selected, the policy is applied to all the new devices that are registered to the group.
Wyse Management Suite extracts the files from the zipped folder and uploads the files in the \repository\osImages\valid location. The image extraction may take several minutes depending upon the image size. NOTE: For ThinLinux operating system, download the merlin image, for example, 1.0.7_3030LT_merlin.exe, and copy in the \Repository\osImages\zipped folder. The image is added to the repository. 2.
NOTE: If the application exists in the public repository, the application reference is added to the inventory. Else, the application is uploaded to the public repository and the reference is added to the inventory. Also, ThinOS firmware and BIOS packages that are uploaded by the operator cannot be deleted by tenant administrators. Create Windows Embedded Standard and ThinLinux image policies Steps 1. In the Apps & Data tab, under OS Image policies, click WES / ThinLinux. 2. Click Add Policy.
Add ThinOS application packages to the repository Steps 1. Log in to Wyse Management Suite using your tenant credentials. 2. In the Apps & Data tab, under OS Image Repository, click ThinOS 9.x. 3. Click Add Package file. The Add Package screen is displayed. 4. To select a file, click Browse and go to the location where your file is located. ● If the EULA is embedded in the package, the EULA details of the package and the name of the vendors are displayed.
Manage file repository This section enables you to view and manage the file repository inventories, such as wallpaper, logo, EULA text file, Windows wireless profile, and certificate files. Steps 1. In the Apps & Data tab, under File Repository, click Inventory. 2. Click Add File. The Add File screen is displayed. 3. To select a file, click Browse and go to the location where your file is located. 4.
Click Jobs to check the status of configuration policy. You can click the number next to the status flag in the Details column to check devices with their status.
9 Managing rules This section describes how to add and manage the rules in the Wyse Management Suite console. The following filtering options are provided: ● Registration ● Unmanaged Device Auto Assignment ● Alert Notification Figure 11.
NOTE: The notification frequency can be configured for every 4 hours, every 12 hours, daily, or weekly basis to the target device. 5. Enter the number of days until you want to apply the rule in the Apply rule after (1–30 days) box. NOTE: By default, registration of an unmanaged device are unregistered after 30 days. 6. Click Save. Create auto assignment rules for unmanaged devices Steps 1. Click the Rules tab. 2. Select the Unmanaged Device Auto Assignment option. 3. Click the Add Rules tab. 4.
Steps 1. Click the Rules tab. 2. Select the Unmanaged Device Auto Assignment option. 3. Select the rule which you want to move and then move it to the top order. 4. Click Save Rule Order. NOTE: You cannot change the IPV6 Prefix rule order. Add a rule for alert notification Steps 1. Click the Rules tab. 2. Select the Alert Notification option. 3. Click Add Rule. An Add Rule window is displayed. 4. From the Rule drop-down list, select a rule. 5. Enter the Description. 6.
10 Managing Jobs This section describes how to schedule and manage jobs in the management console. In this page you can see jobs based on the following filtering options: ● Configuration Groups—From the drop-down menu, select the configuration group type. ● Scheduled by—From the drop-down menu, select a scheduler who performs the scheduling activity.
Figure 12. Jobs page Topics: • • • • • Sync BIOS admin password Search a scheduled job by using filters Schedule a device command job Schedule the image policy Schedule an application policy Sync BIOS admin password Steps 1. Click Jobs. The Jobs page is displayed. 2. From the More Actions drop-down menu, select the Sync BIOS Admin Password option. The Sync BIOS Admin Password Job window is displayed. 3. Enter the password. The password must be a minimum of 4 and a maximum of 32 characters. 4.
○ Image Policy ○ Device Commands ● System ○ Publish Group Configuration ○ Others 4. From the OS Type drop-down menu, select the operating system. The available options are: ● ● ● ● ● ● ● ThinOS WES Linux Thin Linux Wyse Software Thin Client Teradici-Private cloud Dell Hybrid Client 5. From the Status drop-down menu, select the status of the job. The available options are: ● ● ● ● ● Scheduled Running/In Progress Completed Canceled Failed 6.
8. Enter/select the following details: ● Effective— Enter the starting and ending date. ● Start between—Enter the starting and ending time. ● On day(s)—Select the days of the week. 9. Click the Preview option to view the details of the scheduled job. 10. On the next page, click the Schedule option to initiate the job. Schedule the image policy Image policy is not a recurring job. Each command is specific to a device. Steps 1. On the Jobs page, click the Schedule Image Policy option.
11 Managing Events In the Events page, you can view all events and alerts in the management system using the management console. It also provides instructions on viewing an audit of events and alerts for system auditing purposes. A summary of events and alerts is used to obtain an easy-to-read daily summary of what has happened in the system. The Audit window arranges the information into a typical audit log-view.
All the events are classified under particular groups. The available options in the drop-down menu are: ● ● ● ● ● ● Access Registration Configuration Remote Commands Management Compliance View the summary of events The Events and Alerts window displays all the events and alerts that have taken place in the system. Go to Events > Summary. View the audit log The Audit window arranges the information into a typical audit log-view.
12 Managing users This section describes how to perform a routine user management task in the management console. The following are the three types of users: ● Administrators—Wyse Management Suite administrator can be assigned the role of a global administrator, group administrator, or viewer. ○ A Global Administrator has access to all the Wyse Management Suite functions. ○ A Group Administrator has access to all assets and functions for specific groups that are assigned to them.
• • • • • • • • • • • • • • • • Add a new admin profile Create a WMS custom role in Wyse Management Suite Bulk import unassigned administrators or cloud connect users Edit an administrator profile Activate an administrator profile Deactivate an administrator profile Delete an administrator profile Unlock an administrator profile Deactivate an administrator profile Create auto assignment rules for unmanaged devices Add end user Edit an end user Configure end user policy Bulk import end users Deleting end us
Create a WMS custom role in Wyse Management Suite Using Wyse Management Suite 3.1 or later versions, a global administrator can create a new administrator role and provide granular permissions for different functionalities of Wyse Management Suite. You can create multiple users using the Custom Global Administrator role. Steps 1. Go to the Users tab. 2. Click Administrator(s). 3. Click Add Admin. The New Admin User window is displayed. 4. Enter the email ID and username in the respective fields. 5.
Edit an administrator profile Steps 1. Click Users. 2. Click Administrator(s). 3. Click Edit Admin. The Edit Admin User window is displayed. 4. Enter your email ID and user name in the respective fields. NOTE: When you update the login name, you are forced to log out from the console. Log in to the console using the updated account login name. 5.
Steps 1. Click Users. 2. Click Administrator(s). 3. Select the check box of a particular admin or admins which you want to delete. 4. Click Delete Admin(s). An Alert window is displayed. 5. Enter a reason for the deletion to enable the Delete link. 6. Click Delete. Unlock an administrator profile Steps 1. Click Users. 2. Click Administrator(s). 3. Select the administrators that you want to unlock. 4. Click Unlock Admin(s). Deactivate an administrator profile Steps 1. Click Users. 2.
Edit an end user Steps 1. Click the Users tab. 2. Click End Users. 3. Click Edit End Users. 4. Enter your email ID and user name in the respective fields. 5. Click Save. Configure end user policy You can configure and deploy settings to an individual user. The settings are applied to the user account and are applied to the thin client when the user logs in. This option is applicable only to thin clients running the ThinOS 9.x operating system and Dell Hybrid Clients. Steps 1. Click the Users tab. 2.
3. Click Delete. Edit a user profile Steps 1. Click Users. 2. Click Unassigned Admins. 3. Click Edit User. The Edit Admin User window is displayed. 4. Enter your email ID and user name in the respective fields. NOTE: When you update the login name, you are forced to log out from the console. Log in to the console using the updated account login name. 5.
13 Portal administration This section contains a brief overview of your system administration tasks that are required to set up and maintain your system. Figure 15.
2. Register the repository to public cloud. Once registered, follow the steps mentioned on the UI to import the users to Wyse Management Suite public cloud. You can edit the roles of the AD user after importing to Wyse Management Suite public cloud. 3. Set up ADFS on public cloud. Adding the Active Directory server information You can import Active Directory users and user groups to the Wyse Management Suite private cloud. Steps 1. Log in to the Wyse Management Suite private cloud. 2.
5. Click Sign In. The imported Active Directory users can be activated or deactivated on the Users page by using the global administrator login. If your account is deactivated, you cannot log in to the Wyse Management Suite Management portal. NOTE: To import the users using LDAPS protocol, complete the following steps: 1. Import the AD Domain Server Root Certificate into Java Key Store Manually using the keytool. For example, keytool.
Alert classifications The Alert page categorizes the alerts as Critical, Warning, or Info. NOTE: To receive alerts through e-mail, select the Alert Preferences option from the username menu displayed on the upper-right corner.
1. Download the Wyse Management Suite repository from the public cloud console. 2. After the installation process, start the application. 3. On the Wyse Management Suite Repository page, enter the credentials to register the Wyse Management Suite repository to Wyse Management Suite server. 4. If you enable the Register to Public WMS Management Portal option, you can register the repository to Wyse Management Suite public cloud. 5. Click the Sync Files option to send the sync file command. 6.
Figure 16. File repository 2. Select a file repository. 3. Click the Subnet Mapping option. 4. Enter subnets or ranges, one value per line. You must use hyphen for range separation. 5. Optionally, clear the Allow devices from subnets not mapped to this file repository to download files from this repository as a fallback method using subnet proximity check box if you want the file repository to be accessed only through the configured subnets or ranges.
Managing Teradici configurations To add a Teradici server, do the following: Steps 1. In the Portal Administration tab, under Console Settings, click Teradici. 2. Click Add Server. The Add Server screen is displayed. 3. Enter the Server Name. The port number is automatically populated. 4. Select the CA Validation check box to enable CA validation. 5. Click Test. Enable Two-Factor authentication You must have at least two active global administrator users in the system.
Generate reports You can download reports of the jobs, devices, groups, events, alerts, and policies. The reports can be shared with the administrator if you want to troubleshoot the end points. Steps 1. Go to Portal Admin > Reports. 2. Click the Generate Report option. The Generate Report window is displayed. 3. From the Type drop-down list, select the type of the report. 4. From the Groups drop-down list, select the group. 5. Select the delimiter. 6. Click Save.
● ● ● ● Send from address Username Password Test address Current Certificate—Select the Certificate Validation check box to enable the CA validation for private cloud. All the communication from the server and the client including file download, operating system image download from Local Repo uses the certificate. NOTE: When CA Validation from Wyse Management Suite server is enabled, the certificate should be present in the client. All the operations such as, Apps and Data, Image Pull/Push is successful.
14 Convert Dell Wyse 5070 devices and Dell OptiPlex 7070 Ultra to Dell Hybrid Client You can convert the Dell Wyse 5070 devices running Windows 10 IoT Enterprise LTSB, Windows 10 IoT Enterprise LTSC, ThinLinux 2.x, and ThinOS 8.6 to Dell Hybrid Client using Wyse Management Suite Pro 3.1 or later versions. You can also convert the Dell OptiPlex 7070 Ultra systems running Ubuntu 18.04 and Windows 10 to Dell Hybrid Client using Wyse Management Suite Pro 3.1 or later versions.
● Wyse Management Suite manages the device as a Dell Hybrid Client device. Adding Dell Hybrid Client images to repository Steps 1. Copy the Dell Hybrid Client conversion image to the repository location or the operating system images folder using Wyse Management Suite. NOTE: Dell Technologies recommends to copy the image file to the local system and then copy the file to Wyse Management Suite repository location.
● Do not apply automatically—The image policy is not applied automatically to a device registered with Wyse Management Suite. ● Apply the policy to new devices—The image policy is applied to a new device registered with Wyse Management Suite. 9. Click Save. Figure 18. Creating Hybrid Client image policies Scheduling the image policy Steps 1. Go to Jobs and click the Schedule Image Policy tab. The Image Update Job tab is displayed. 2. Select a policy from the drop down menu of the Policy tab. 3.
Dell OptiPlex 7070 Ultra Conversion Prerequisites ● DCA Enabler version 1.1 or 1.0 is required to convert Ubuntu 18.04 on Dell OptiPlex 7070 Ultra device to Dell Hybrid Client. ● If DCA Enabler version 1.0 is installed on your device, you must upgrade it to 1.1. To upgrade DCA Enabler, you must register the device to Wyse Management Suite 3.1 and push the DCA_Enabler_ Package 1.1.0-17 to the device using Wyse Management Suite and then deploy DCA-Enabler 1.1.0-17. Steps 1.
15 Security configurations This section describes the key security features of Wyse Management Suite and provides the procedures that are required to ensure data protection and appropriate access control.
13. Click Close. The created relay trust is listed in the Relay Party Trust console. 14. Log in to the Wyse Management Suite public cloud server. 15. Go to Portal Administration > Active Directory and click Show WMS rules. 16. Copy the content displayed in the WMS Rules window. 17. Go to the ADFS console, right-click the relay trust, and select Edit Clam Issuance Policy. 18. Click Add Rule in the Issuance Transform Rules tab. 19. Click Ok. The Select Rule Template window is displayed. 20.
13. Import the AD domain server certificate into Wyse Management Suite java key store manually to the Wyse Management Suite server setup. To import the certificate, do the following: a. Go to the server where Wyse Management Suite is installed. b. Open Command Prompt and run the command keytool.exe> -importcert -alias -keystore "" -storepass changeit file "C:\. 14.
16 Teradici device management The Teradici device management section provides the information about managing and discovering the teradici divices. The teradici management console uses SDK’s to support management, configuration for tera devices. This is applicable only for Wyse Management Suite private cloud with pro license type.
Manual discovery from the client 1. Go to, https://. 2. Accept the certificate warning message. 3. Enter the administrator password (default password is Administrator) and login. 4. Go to, upload > certificate. Select the Cert.pemfile from the default path and click Upload. 5. Go to Configuration > Management. Click the clear management state button to register the device to the new Management Server. 6. Set the manager discovery mode to manual 7.
14. Click the Advanced tab, and then select the PCoIP Endpoint vendor class. 15. Select the 011 EBM X.509 SHA-256 fingerprint check box, and paste the SHA-256 fingerprint. 16. Click OK to save the settings. 17. Go to the client web browser. 18. Go to Configuration > Management, and set the manager discovery mode to Automatic 19. The client is connected to the server which is mentioned in the DHCP server. Creating the DNS SRV record 1. Log in to the DNS server. 2.
CIFS use case scenarios The following use cases are supported in Wyse Management Suite: ● When you select Wyse Management Suite as Setup Type while installing Wyse Management Suite private cloud. ○ CIFS configuration page is displayed. This page is required as we need to configure the shared folder. NOTE: The Configure CIFS User Credentials option is disabled by default. ● When you select Teradici EMSDK as Setup Type while installing Wyse Management Suite private cloud.
17 Managing license subscription This section enables you to view and manage the management console license subscription and its usage. On the Portal Admin page, you can view the Subscription option.
2. Go to Portal Administration > Accounts > Subscription. 3. Enter the number of thin client seats that must be exported to Wyse Management Suite Private Cloud. 4. Click Export. 5. Copy the generated license key. 6. Log in to Wyse Management Suite Private Cloud console. 7. Go to Portal Administration > Accounts > Subscription. 8. Enter the generated license key in the box. 9. Click Import.
18 Firmware upgrade You can use Wyse Management Suite to upgrade your firmware. Topics: • • Upgrading ThinLinux 1.x to 2.1 and later versions Upgrading ThinOS 8.x to 9.0 Upgrading ThinLinux 1.x to 2.1 and later versions If you want to pull a customized image from TL 2.x before you upgrade, you must prepare the ThinLinux 2,x and then upgrade the ThinLinux 1.x image. Prepare the ThinLinux 2.x image Prerequisites Use Wyse Management Suite version 1.
Results NOTE: ● If you are using Wyse Management Suite 1.3 remote repository, then the xml file is not available in the repository. You must upgrade Wyse Management Suite to 1.4 or later versions to access the file. ● Recovery Pull operation does not preserve the user settings. Upgrade ThinLinux 1.x to 2.x Steps 1. Go to www.dell.com/support. 2. Click Product Support, enter the Service Tag of your thin client, and then press Enter.
Table 10. Firmware images Platform ThinOS firmware image Wyse 3040 Thin Client A10Q_wnos Wyse 5070 Thin Client—Celeron processor X10_wnos Wyse 5070 Thin Client—Pentium processor X10_wnos Wyse 5070 Extended Thin Client—Pentium processor X10_wnos Wyse 5470 Thin Client X10_wnos Wyse 5470 All-in-One Thin Client X10_wnos Add ThinOS firmware to the repository Steps 1. Log in to Wyse Management Suite using your tenant credentials. 2. In the Apps & Data tab, under OS Image Repository, click ThinOS. 3.
NOTE: After you upgrade the firmware, the device is automatically registered to Wyse Management Suite. The configurations of 8.6 build are not inherited after you upgrade the firmware. Upgrade ThinOS 9.x to later versions using Wyse Management Suite Prerequisites ● Ensure that you have installed the ThinOS v9.1.1036 image on the thin client. ● Ensure that you have created a group in Wyse Management Suite with a group token. Use this group token to register the ThinOS 9.x devices.
19 Remote repository Wyse Management Suite allows you to have local and remote repositories for applications, operating system images and so on. If the user accounts are distributed across geographies, it would be efficient to have a separate local repository for each of the distributed user account so the devices can download images from its local repository. This flexibility is provided with WMS_Repo.exe software. The WMS_Repo.
Figure 20. Register on a public cloud 5. Enter the following details: a. Wyse Management Suite server URL NOTE: Unless you register with Wyse Management Suite version 1.0, you cannot use MQTT Server URL. b. c. d. e. WMS Repository URL (update the URL with the domain name) Wyse Management Suite administrator login username information Wyse Management Suite administrator login password information Repository path information 6. Click Register. 7.
Figure 21. Registration successful 8. The following screen on the Wyse Management Suite portal confirms the successful registration of the remote repository: Figure 22.
9. HTTPS is by default enabled with WMS_Repo.exe, and is installed with the self-signed certificate. To install your own domain-specific certificate, scroll down the registration page to upload the SSL certificates. Figure 23. Certificate upload 10. The server restarts, and the uploaded certificate is displayed.
Figure 24. SSL certificate enabled 11. If the Wyse Management Suite is enabled with self-signed or a private domain certificate, you can upload the certificate on the Wyse Management Suite repository server to validate the Wyse Management Suite CA credentials. Figure 25. Trust store certificates 12. Navigate to the C:\wmsrepo location that you entered during registration, and you can view the folders where all the repository files are saved and managed.
Manage Wyse Management Suite repository service Wyse Management Suite repository is displayed as Dell WMS Repository: Tomcat Service in the Windows Local Services window and is configured to start automatically when the server restarts. Proxy support for Wyse Management Suite remote repositories From Wyse Management Suite 3.1, remote repositories support SOCKS5 proxy for all HTTPS and MQTT communications to Wyse Management Suite.
20 Troubleshooting your device You can view and manage the troubleshooting information using the Devices page. Steps 1. On the Device Details page, click Troubleshooting tab. 2. Click Request Screen Shot. You can capture the screenshot of the thin client with or without the client permission. If you select the Require User Acceptance check box, then a message is displayed on the client. This option is applicable only for Windows Embedded Standard, Linux, and ThinLinux devices. 3.
The Audit window arranges the information into a typical audit log-view. You can view the timestamp, event type, source, and description of each event in the order of time. Device fails to register to Wyse Management Suite when WinHTTP proxy is configured WDA is a WinHTTP Client and fetches WinHTTP proxy information from the local system.
3. Browse to the destination path to save the profile as an xml file and click Save. 4. Click the Export WiFi Profiles button in the Wireless Profile Password Editor window. 5. From the Profiles drop-down list, select the profile to deploy the configuration. 6. Clear the Password field, and enter the password again. 7. Click Change Password. NOTE: Do not click the Export WiFi Profiles button again. 8. Close the Wireless Profile Password Editor window. 9. Log in to Wyse Management Suite. 10.
21 Frequently asked questions Topics: • • • • • • • • What takes precedence between Wyse Management Suite and ThinOS UI when conflicting settings are enforced? How do I use Wyse Management Suite file repository? How do I import users from a .
in the client, the Wyse Management Suite server provides one generic audit event message Failed to Validate Certificate Authority under Events page. All the operations, such as, Apps and Data, Image Pull/Push is not successful. ● When CA Validation from Wyse Management Suite server is disabled, then the communication from server and client happens in a secure channel without Certificate Signature validation. e. Add a note in the provided box. f. Click Save Settings . How do I import users from a .
String—WMS FQDN ● To create the 166 MQTT server URL option tag, do the following: a. Enter the following values, and click OK. ○ Name—MQTT ○ Data type—String ○ Code—166 ○ Description—MQTT Server b. Enter the following value, and click OK. String—MQTT FQDN For example, WMSServerName.YourDomain.Com:1883 ● To create the 167 Wyse Management Suite CA Validation server URL option tag, do the following: a. Enter the following values, and click OK.
● Service—_WMS_MQTT ● Protocol—_tcp ● Port number—1883 ● Host offering this service—FQDN of MQTT server 6. Go to DNS > DNS Server Host Name > Forward Lookup Zones > Domain , and right-click the domain. 7. Click Other New Records. 8. Select Text (TXT), click Create Record, and do the following: a. To create Wyse Management Suite Group Token record, enter the following values, and click OK. ● Record name—_WMS_GROUPTOKEN ● Text—WMS Group token b.
How do I image the device using self-signed remote repository You can perform imaging of Windows Embedded Standard and ThinLinux devices from the local repository of private cloud or from the remote repository of public cloud.
