Dell Wyse ThinOS Lite Release 2.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2017 - 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents 1 Introduction....................................................................................................................................................6 About this Guide.................................................................................................................................................................6 Technical Support...............................................................................................................................................
Citrix HDX RealTime Multimedia Engine—RTME................................................................................................. 67 Citrix Icon refresh.......................................................................................................................................................73 Using multiple audio in Citrix session.......................................................................................................................
TimeZone Parameter—Values................................................................................................................................ 221 C Examples of Common Printing Configurations...........................................................................................226 Local USB for Printing...................................................................................................................................................
1 Introduction The Dell Wyse ThinOS Lite family of products are zero clients built for Citrix XenApp and XenDesktop environments. These products represent an entirely new approach in delivering virtual desktops. ThinOS Lite zero clients deliver a Citrix HDX experience with zero delays, zero management, zero security risks, and almost zero energy use.
Added a desktop wallpaper. Dell Wyse ThinOS v8.5 Release Notes. Added the About tab in System Information. See, Accessing system information. Added option to capture, and export screenshots. See, Using the troubleshooting options. Added option to export the INI file. See, Using the troubleshooting options. Citrix-based updates: Added support for multiple audio in a Citrix session. See, Using multiple audio in Citrix session. Added support for SMS PASSCODE authentication on a Citrix NetScaler Gateway.
2 Getting started Use the following information to quickly learn the basics and get started using your zero client: • Connecting to a Remote Server • Using Your Desktop • Configuring Zero Client Settings and Connection Settings • Connecting to a Monitor • Connecting to a Printer • Locking the Zero Client • Signing Off and Shutting Down • Additional Getting Started Details NOTE: ThinOS Lite is centrally managed and configured using INI files to automatically push updates and any desired defaul
Figure 1.
Figure 2.
1 Connect a new zero client or existing zero client to the Ethernet using a wired connection. The existing zero client must be reset to factory default settings to enter First Boot Wizard. 2 Turn on your zero client. The zero client checks for a wired network connection. If the network connection is successful, a welcome screen with the model name of your zero client is displayed. The zero client validates the IP address from DHCP.
Figure 4. System preferences configuration • Locale—Select a language to start ThinOS Lite in the regional specific language. • Keyboard Layout—Select a keyboard layout to set the keyboard layout in the regional specific language. Time Zone—Select a time zone to set the time zone for your zero client. • Time Server—Displays the IP addresses or host names with optional port number of time servers.
NOTE: – The option to define a wireless connection is not available on zero clients without a WLAN module. – To exit the Attach the Ethernet cable screen, and load the ThinOS Lite system desktop, click Exit. Figure 5. Ethernet cable After the connection is established, the zero client validates the IP address from DHCP. If the DHCP contains the file server or Wyse Device Manager or Wyse Management Suite configurations, then the ThinOS Lite system desktop is loaded.
Figure 6. Management configuration • File Server—Enter the file server details to apply configurations including INI files from a file server. • WMS—Enter the group registration key and the Wyse Management Suite server URL to register the zero client to the Wyse Management Suite. • WDM—Enter the IP addresses or host names. • Disable SSL warning—Select this check box to disable the SSL (Secure Sockets Layer) connection warnings.
Connecting to a remote server On your initial connection to central configuration, we recommended that you connect using a wired connection plug in the networkconnected Ethernet cable to your zero client before starting the zero client to obtain the configurations desired by the administrator. This wired connection will also provide any wireless configurations provided by the administrator through INI files.
Configuring zero client settings and connection settings While the use of INI files is recommended to configure zero client settings and connection settings available to users . For more information, refer How to Set Up Automatic Updates and Configurations. You can use the dialog box on a zero client to: • Set up your zero client hardware, look and feel, and system settings, see Configuring Zero Client Settings Locally. • Configure connection settings, see Configuring Zero Client Settings Locally.
Additional getting started details This section includes additional details, such as Zero desktop features, Login dialog box features, System setting menu, and System information. Zero desktop features This section includes information on: • Zero Interactive Desktop Guidelines • Zero Toolbar • List of Connections Zero interactive desktop guidelines The Zero Desktop has a default background with the Zero Toolbar at the left of the screen.
Zero toolbar The Zero Toolbar usually appears at the left corner of the Zero Desktop. However, depending on administrator configurations, the toolbar can be removed or hidden. It is shown only when a user moves the mouse pointer over the left edge of the desktop screen. Table 2. Toolbar icons Icon What It Does Home Opens the list of available connections, see List of Connections. System Information Displays zero client system information, see Accessing System Information.
NOTE: It is useful when a connection is not functioning properly or you need to reboot the connection. Close icon Closes the connection. NOTE: The Close icon is grayed out for connections that are not open. Edit icon Opens the Connection Settings dialog box, see Advanced Details on Configuring ICA Connections to change the connection options. NOTE: Depending on user privilege level, editing options may not be available for use.
• Shutdown — Press CTRL+ALT+DELETE to open and use the Shutdown dialog box to sign off, shut down, restart, reset the system setting to factory defaults, and so on. For information, see Signing Off and Shutting Down. • Account Self-Service — Click the Account Self-Service icon shown when configured using the AccountSelfService option of the PasswordServer INI parameter to open and use the Account Self-Service dialog box to change or reset your own password and unlock your account.
• Event Log tab — Displays the zero client start-up steps normally beginning from System Version to Checking Firmware or error Messages that are helpful for debugging problems. The details about the monitors connected to the zero client are also displayed. • Status tab — Displays status information about TCP performance related parameters, UDP performance related parameters, CPU Busy, System Up Time, CCM status, Free Memory, Active sessions, and WDM status.
3 Global connection settings If you do not use INI files to provide central configuration (global connection settings) to users, you can use the Global Connection Settings dialog box to configure settings that affect all of the connections in your list of connections: To Configure the Global Connection Settings: 1 From the floating bar menu, click the Home icon, and then click Global Connection Settings. The Global Connection Settings dialog box is displayed.
NOTE: ICA sessions always have automatic connection to attached smart card readers. NOTE: USB devices redirection— By default, audio, video and printer devices will not use HDX USB for redirection. You can make selections for USB device redirection on the Session tab of the Global Connection Settings dialog box. 3 Click ICA tab to select the check boxes you want for the options that are available to all ICA sessions. Select the audio quality optimized for your connection.
4 Configuring the connectivity This chapter helps you to understand various configuration settings for a secure connection. Connectivity menu includes: • Configuring the Network Settings. • Configuring the Remote Connections. • Configuring the Central Configurations. • Configuring the Caradigm Vault Server. • Configuring objects on Imprivata Server. • Configuring the VPN Manager.
Figure 7. Network setup 2 Click the General tab and use the following guidelines: a To set the default gateway, select the type of network interface from the available options. 1 Single Network support— Either wireless or wired network is connected. • • • • 2 b c ENET — Click this option, if you want set up the Ethernet Wired Network Connection. WLAN — Click this option, if you want set up the Wireless Network Connection.
is used to make the connection. These entries can be supplied through DHCP, if DHCP is used. DNS and WINS provide essentially the same function, name resolution. If both DNS and WINS are available, the zero client attempts to resolve the name using DNS first and then WINS. e 3 You can enter two WINS Server addresses (primary and secondary), separated by a semicolon, comma, or space. Enter the digit multiplier of 30 seconds in the TCP Timeout box to set the timeout value of a TCP connection.
b c d 3 Interpret DHCP Vendor-Specific Info — Select this check box for automatic interpretation of the vendor information. DHCP Vendor ID — Shows the DHCP Vendor ID when the dynamically allocated over DHCP/ BOOTP option is selected. DHCP UserClass ID — Shows the DHCP UserClass ID when the dynamically allocated over DHCP/BOOTP option is selected. Click OK to save the settings.
• Dynamically allocated over DHCP/BOOTP — Selecting this option enables your thin client to automatically receive information from the DHCP server. The network administrator must configure the DHCP server using DHCP options to provide information. Any value provided by the DHCP server replaces any value entered locally on the Options tab, however, locally entered values are used if the DHCP server fails to provide replacement values.
EAP Type — If you have enabled the Enable IEEEE 802.1x authentication check box, select the EAP Type option you want (TLS, LEAP, PEAP or FAST). • TLS — If you select the TLS option, click Properties to open and configure the Authentication Properties dialog box. – Select the Validate Server Certificate check box because it is mandatory to validate your server certificate. NOTE: The CA certificate must be installed on the thin client.
When EAP-MSCHAPV2 is selected as EAP type in the Authentication Properties dialog box for PEAP or FAST authentication, a check box to enable Single Sign-On feature is available for selection. 3 Click OK to save the settings. Configuring the WLAN settings 1 From the floating bar menu, click System Setup, and then click Network Setup. The Network Setup dialog box is displayed. 2 Click the WLAN tab, and use the following guidelines: Figure 10.
b After you configure the SSID connection, the added SSID connection is listed on the page of the WLAN tab. • Remove — Use this option, if you want to remove a SSID connection by selecting the SSID connection from the list. • Properties — Use this option to view and configure the authentication properties of a SSID connection that is displayed in the list. From the ThinOS Lite 2.3 release, a new EAP type named EAP-Fast is added in the EAP type drop-down list.
If you select EAP type as EAP-Fast, then EAP-MSCHAPV2 and EAP-GTC options are listed in the EAP type drop-down list in the Authentication Properties dialog box (2nd authentication method supports MSCHAPv2/GTC only for EAP-FAST). c 3 Select the Disable Wireless Device check box, if you want to disable a wireless device. • Always: Click this radio button if you want to disable the wireless device at all times.
Figure 11. Network Setup Supported Protocols • For HDX FR, HTTP and HTTPS protocols are supported. – If both are configured, the HDX FR works with HTTPS proxy. – User credential pass through is possible with $UN/$PW. • For WMS, HTTP, HTTPS and Socks5 (recommended) protocols are supported. • For RTME, HTTP and HTTPS protocols are supported. 1 From the desktop menu, click System Setup, and then click Network Setup. The Network Setup dialog box is displayed.
3 b Select the Use the first proxy server for all protocols check box to allow all the protocols to use the same server in HTTP Proxy fields. Both HTTP and HTTPS proxy use the same host and port, and Socks5 proxy agent uses HTTP host with default Socks 5 port (1080). c If SOCKS5 proxy is configured, then Wyse Management Suite proxy uses the SOCKS5 only. If SOCKS5 is not configured, then Wyse Management Suite proxy searches for alternative protocols, for example, HTTP in the configuration.
Figure 12. Broker setup 2 Select the StoreFront Style check box to enable the StoreFront style. 3 Broker Server— Enter the IP address / Hostname / FQDN of the broker server. 4 Select the Enable automatic reconnection at logon check box to enable automatic re-connection at logon. NOTE: If you enable the automatic re-connection, you are able to select from the re-connection options. Click either of the options where you can connect to disconnected sessions only or both active and disconnected sessions.
NOTE: The Visual Experience tab is grayed out, if the StoreFront Style check box is selected for a Citrix Broker Server entered in the Broker Setup tab. a Select the check box to enable Zero Toolbar activation in left pane. • b c d 3 Select the button if you want to enable Zero Toolbar activation in left pane when you pause a mouse on the screen. • Select the button if you want to enable Zero Toolbar activation in left pane only after clicking. Select the check box to disable hotkey to show toolbar.
Figure 13. General options 2 Click General Options and use the following guidelines: a b c d Click the available options to select the action after you exit all open desktops. The available options are None, Sign-off automatically, Shut down the system automatically and Restart the system automatically. NOTE: By default, None is selected and the zero client automatically returns to the terminal desktop. Default Sign-on Username— Enter the Default user name.
Configuring the authentication settings To configure the authentication settings: 1 From the floating bar menu, click the System Setup , and then click Remote Connections. The Remote Connections dialog box is displayed. Figure 14. Authentication settings 2 Click the Authentication tab, and use the following guidelines: a Authentication type— Click the button to select the Authentication type.
To configure the OneSign Server, enter either https://ip or https://FQDN values, reboot the client to display the logon dialog box, and then enter credentials to open the VDI broker dialog box for logon use. You can also set this feature in your INI file, seeParameters for a xen.ini File in this guide. For details on Deployment in an Imprivata OneSign ProveID Environment, see Knowledge Base Solution #23254. Go to www.dell.com/wyse/knowledgebase and search for 23254.
on the ThinOS Lite devices. Typically, you must type in your password only one time each day and use your proximity cards to streamline workflow and save time as they move between shared computers securely. Also, proximity cards can be secured with a PIN, if configured by the organization. The HealthCast SSO solution also supports user self-service password reset so that you can reset your own passwords without the need to call the help desk. • 3 OneSign Server— Enter the IP Address of the OneSign Server.
Figure 15. Imprivata – If you clear the check box, the shutdown and restart icon is grayed out. • FailedOneSignAuth Allow— Only yes or no options are supported. Non-OneSign user can log in to the Broker by clicking No radio button. • Logging Allow – OneSign logs could output on ThinOS Lite with this feature. An INI configuration is needed correspondingly. – Loglevel=0/1/2/3. The default value is 0. If set to 0, logs are not displayed.
◦ Screensaver— Hide the display contents before the workstation locks. • Warning message— The message can be customized. • Lock Screen type —Only obscure type is supported.
Figure 17. Login screen appearance Logo image impacts all the dialog boxes in ThinOS Lite with raw logo. 7 Configuring the SSPR Customization Configuration object • The text displayed in sign-on UI and lock window can be customized. • The largest size supported by ThinOS Lite is 17 characters. ThinOS Lite UI: Figure 18.
Selecting this check box allows you to reset the primary authentication password. Figure 19. Security question INI configuration for Imprivata OneSign Server A new INI parameter is added to the OneSignServer=AutoAccess=command. The new value is AutoAccess=Local. When AutoAccessis set to local, the ThinOS Lite ignores the brokers that are set on the Imprivata OneSign Appliance and starts the broker/ connections which are defined in xen.ini or local defined on the client.
Figure 21. Confirm identity Proximity card is enrolled successfully. Figure 22. Proximity card success message Imprivata bio-metric single sign-on Imprivata WebAPI is updated to version 5. The key feature of this version is the Fingerprint identification feature. This feature is highly reliable, and cannot be easily replicated, altered, or misappropriated. The prerequisites of OneSign server are: • Imprivata v4.9 or later appliance version is needed that supports the WebAPI v5 and later versions.
Figure 23. Licensed options • Figure 24. Desktop access authentication Fingerprint authentication must be enabled in OneSign user policy Following are the features of Imprivata Bio-metric Single Sign-On: 1 Supported protocol is ICA. 2 Required Fingerprint reader devices are: a b ET710 (PID 147e VID 2016) ET700 (PID 147e VID 3001) 3 Fingerprint authentication to sign-on/unlock for ThinOS Lite devices.
Primary Factors Secondary Factors Imprivata PIN Proximity Card Fingerprint Fingerprint or Password Fingerprint or Imprivata PIN Signing in or unlocking ThinOS Lite devices using fingerprint authentication To sign-on/unlock the ThinOS Lite devices using fingerprint authentication, do the following: 1 Configure the OneSign server on ThinOS Lite, and then plug-in the fingerprint reader device. The ThinOS Lite Fingerprint window is displayed automatically after OneSign server is initialized. Figure 25.
Figure 26. Verifying administrator Unlocking virtual desktop using fingerprint authentication To unlock the virtual desktop using fingerprint authentication, do the following: 1 Enable the Imprivata Virtual Channel.
Figure 27.
Figure 28. Verifying administrator 3 You can manage Fingerprints on virtual desktop. This requires OneSign agent v4.9. To manage Fingerprints, do the following: a b 50 Right-click the OneSign agent icon in System tray. Click Manage Fingerprints, and enter the correct credentials in the displayed window to manage your Fingerprints.
Figure 29. Manage fingerprints Configuring the Caradigm Vault server To configure the Caradigm Vault server on ThinOS Lite, do the following: 1 From the floating bar menu, click the System Setup , and then click Remote Connections. The Remote Connections dialog box is displayed. 2 Click the Authentication tab, enter the IP address of the SSO & CM Server and then click OK.
Figure 30. Remote Connections 3 On the Caradigm Vault Server, use the following guidelines: • Ensure that the Enroll unenrolled badges option is checked. • Make sure that all Badge ID mapping entries are deleted.
Figure 31. Tap server 4 Click SSO&CM > Advanced Configurations , and use the following guidelines: Figure 32. Enable proximity server a b 5 Ensure that the Enable Proximity Support check box is selected. Ensure that the Enable way2care check box is selected. To prepare a certificate to the Caradigm Vault Server, use the following guidelines: The Caradigm Vault Server uses the certificate to validate the connection between the Tap Server and the zero client.
Figure 33. Thin client certificates Use the zero client Certificates page to add certificates for the zero client devices. The certificate must be a text in PEM format, that is, a text-based Base64-encoded DER file. • Open the DER cert file on Notepad. • Log in to the Vault Server Admin Console, and then click Appliance > zero client Certificates.
The Remote Connections dialog box is displayed. b Click the Authentication tab, and then click HealthCast. Figure 34. Remote connections c Enter the HealthCast server details in the box provided. d To import the client certificate, click Browse, and select the appropriate certificate you want to use.
Figure 35. Certificates browser e Click OK to save the settings. INI configuration To configure using INI parameters, add the following INI parameters to your wnos.ini file: • HealthCastServer— The server address and options needed for the client to connect to the HealthCast Web API Server. HealthCastServer= SecurityMode= ClientCertificate= For example: HealthCastServer=https://server1.example.
Figure 36. Proximity card enrollment • Manual login and lock/unlock terminal – If you do not have a card, or choose not to use your card, then you can manually log in using your user name and password. Administrators can disable manual login, if they wish, so that users can sign on with their proximity cards. You can also lock or unlock the terminal, if you have signed on with a manual login. Figure 37.
Figure 38. Login You can lock the session to secure it, but leave the remote session connected for fast access when you return. To do this, tap the proximity card and the session is locked. Figure 39. Lock terminal To resume the session, tap the card again.
• Walk away – Terminals can be configured to lock or log off sessions that have been left open. The time that will elapse before automatic lock or log off can be set by an administrator using the convenient web administration application. • Tap-Over – If a session is locked or left open, a second user can tap their own proximity card and this will disconnect the first session and log the second user into their own unique session.
Configuring the general central configurations To configure the General Central Configurations: 1 From the floating bar menu, click the System Setup , and then click Central Configuration. The Central Configuration dialog box is displayed. Figure 41. Central configuration 2 Click General tab and use the following guidelines: File Servers/Path, Username and Password — IP address or host name of the file server that provides the system software and update images.
Configuring the Wyse Device Agent settings Use this tab to configure the Wyse Device Manager (WDA) and Wyse Management Suite settings. ThinOS Lite supports all the Wyse Management Suite Group Policy settings. To configure the Wyse Management Suite settings, do the following: 1 From the desktop menu, click System Setup, and then click Central Configuration. The Central Configuration dialog box is displayed. 2 Click WDA > WMS, and use the following guidelines: Figure 42.
Record Name: _WMS_MGMT._TCP. Value Returned: WDMNG Server URL Example: _WMS_MGMT._TCP.WDADEV.com # MQTT Server URL DNS Record Type: DNS SRV Record Name: _WMS_MQTT._TCP. Value Returned: WMS Server URL Example: _WMS_MQTT._TCP.WDADEV.com # Group Token DNS Record Type: DNS Text Record Name: _WMS_GROUPTOKEN. Value Returned: Group Token (as String) Example: _WMS_GROUPTOKEN .WDADEV.com # CA Validation DNS Record Type: DNS Text Record Name: _WMS_CAVALIDATION.
Figure 43. General central configuration 1 Click WDM, and use the following guidelines: 2 WDM Servers—Enter the IP addresses or host names, if WDM is used. Locations can also be supplied through user profiles, if user INI profiles are used. 3 DNS Name Record—(Dynamic Discovery) Allows devices to use the DNS host name lookup method to discover a WDM Server. 4 DHCP Inform—(Dynamic Discovery) Allows devices to use DHCP Inform to discover a WDM Server.
Figure 44. VPN manager 2 Click New tab to Create a new Connection. The OpenConnect Property page is displayed. • Session Name — Enter the name of the Session Name. • VPN Server — Enter the IP address of the VPN Server. • Login Username— Enter the Login Username. • Password— Enter the password of the user. • Select the check box to Auto-connect on system startup. • Select the check box to Show progress in detail.
Figure 45. OpenConnect property 3 Click Connect to connect to the VPN Manager. 4 Click Edit to edit the to the VPN Manager connections. 5 Click Delete to delete the VPN Manager. Figure 46.
5 Configuring the connection broker In a Virtual Desktop Infrastructure (VDI) environment, a connection broker is a software entity that allows you to connect to an available desktop. The connection broker facilitates the VDI environment to securely and efficiently manage the centrally hosted desktop environments. NOTE: • Linux hosted desktop in the Citrix brokers is supported. • Windows 10 desktop in multiple brokers is supported. – Windows 10 desktop is supported in the Citrix brokers.
Figure 47. Broker setup 2 Select the StoreFront Style check box to enable the StoreFront style. 3 Broker Server— Enter the IP address / Hostname / FQDN of the broker server. 4 Select the Enable automatic reconnection at logon check box to enable automatic re-connection at logon. NOTE: If you enable the automatic re-connection, you are able to select from the re-connection options. Click either of the options where you can connect to disconnected sessions only or both active and disconnected sessions.
2016. This section provides information about supported platforms for RTME, installation of RTME package, Citrix remote Server/Desktop host preparation, configuration on ThinOS Lite, and RTME status check and troubleshooting. • Installing the RTME package on ThinOS Lite. • Setting Up the RTME Connector. • Verifying the RTME 1.8 Status. • Verifying the RTME 2.2 Status. Introduction The Citrix HDX RealTime Optimization pack offers high-definition audio and video calls on Lync.
Figure 48. System tools Setting up the RealTime Multimedia Engine connector This section describes how to install and use Lync on a Citrix desktop. 1 Install Citrix HDX RealTime Connector version 1.8 or 2.2 on Citrix desktop VDA/Server. . NOTE: • HDX RealTime Multimedia Engine is the package installed on ThinOS Lite ; it is HDX RealTime Connector for Lync that needs to be installed or upgraded on the remote server and VDA. • The upgrade option from 1.7 to 1.8 is discussed at docs.citrix.
IMPORTANT: Since ThinOS Lite 2.3 RTME, 1.8 and 2.0 co-exist in the release package, supporting both versions of RTME connectors. In every ThinOS Lite release, RTME version may be updated to newer version and the latest RTME version coexists with RTME 1.8 version in the corresponding release packages. 3 (This step is for RTME 1.8 only) Configure the Domain Name Server (DNS) settings on ThinOS Lite for Lync Server.
Figure 49. Citrix HDX RealTime Connector for Microsoft Lync 2013 2 Click the About tab in the Citrix HDX RealTime Connector for Microsoft Lync 2013 dialog box. The RTMS status is displayed in the upper-right pane of the dialog box. If the RealTime Multimedia Engine is successfully initiated between the ThinOS Lite client and Citrix Desktop, the RTME status is displayed as follows: Table 5.
Known Issues with RTME 1.8 feature • RTME operation system on ThinOS Lite is displayed as Linux. • The RTME 1.8 feature on ThinOS Lite does not work with other versions of HDX RealTime connector due to known Citrix limitation. • If you change the audio device during an RTME call, the audio input or output might stop responding. • Using similar hardwares, such as Dx0D, ThinOS Lite, Linux, and Windows (D90D7) produce similar video frame rate (20-30) and video resolution (320-400).
• RTME status dialog displays operation system as Linux. • Only single device is supported in ThinOS Lite. • Changing the video/audio device during RTME call results in issue with audio input or output. • Volume: Dell recommends you to adjust the speaker volume in SFB 2015 call window to high, and the system local playback/record audio volume for better voice input/output. The default volume is a bit low.
The following log is displayed in the Event Log window: ICA: refresh store “xxx”…” or “ICA: refresh PNAgent”xxx”… 3 For MultiFarm (StoreFront or PNAgent servers) or Multilogon (StoreFront or PNAgent servers), select a single server to refresh or click Refresh All to refresh all servers. Figure 52. Refresh all NOTE: Warning message is displayed when you open or edit or remove applications when you refresh the applications. Figure 53.
Limitations of Citrix icon refresh Following are the limitations of Citrix icon refresh: • Citrix icon refresh is supported in classic mode and storefront mode only. • Virtual Desktop Infrastructure (VDI) mode is not supported. Using multiple audio in Citrix session ThinOS Lite supports multiple audio device utilizations in the XenDesktop or XenApp version 7.6 and later. You can connect or disconnect the audio devices anytime during the session, but the behavior is similar to a local desktop.
Prerequisites • NetScaler v12.0 and later is installed on your client. • SMS PASSCODE v9.0 SP1 is installed and configured in your network. You can download the SMS PASSCODE v9.0 file from download.smspasscode.com/public/6260/SmsPasscode-900sp1. • Remote Authentication Dial-In User Service (RADIUS) authentication policy is configured and bind to the NetScaler gateway server. • CensorNet app is installed and configured on your mobile device.
Figure 56. PASSCODE If the authentication is successful, then you are logged into the Citrix session. Configuring ICA connections To configure the ICA Connections, use the following guidelines: NOTE: You must set the INI “EnableLocal=yes” to show the “*Default ICA” icon in connect manager. 1 Go to Home icon > Connect Manager > *Default ICA > Edit.
Figure 57. Default ICA a b c d Server or Published Application — Select the type of connection to which the settings apply. Connection Description — Enter the descriptive name that is to appear in the connection list (38 characters maximum). Browser Servers — Enter a delimited (comma or semicolon) list of IP addresses or DNS-registered names of ICA servers that contains the master browsers list, or that could refer to another server that contains the list.
e NOTE: The Host Name may be resolved using one of three mechanisms: ICA master browser, DNS or WINS. Master browser is the only mechanism that can resolve a published application unless manual entry is made in DNS for the application. DNS uses the default domain name in the network control panel to attempt to construct an FQDN but will also try to resolve the name without using the default.
Figure 58. ICA Logon a Logging on area — Enter Login Username, Password, Domain name, and logon Mode. If the Login Username, Password, and Domain name boxes are not enabled, you can enter the information manually in the ICA server login screen when the connection is made. b • Login Username — 31 characters maximum. • Password — 19 characters maximum. • Domain Name — 31 characters maximum. • Logon Mode — Select User-specified credentials, Smart Card, or Local User.
Figure 59. ICA options a b c d Autoconnect to local devices —Select any options (Printers, Serials, USB, Smart Cards, and Disks) to have the thin client automatically connect to the devices. An ICA session does not automatically connect to a device through a serial port. Allow font smoothing — When selected, enables font smoothing (smooth type).
• Low-privileged user — The settings for the selected connection can be viewed but cannot be edited, and new connections cannot be defined. Connection definitions are controlled by a network administrator and are accessed by the zero client from the user profiles on a remote server. • Stand-alone user — The Connect Manager is available to Stand alone users because connection definitions cannot be accessed from remote user profiles.
2 Enter the appropriate answers to the question set. Figure 61. Security questions Figure 62. Security questions 3 Click OK to register the security questions.
Figure 63. Account self-service Using Account Self-Service After the security questions enrollment is complete, when ThinOS Lite is connected to a StoreFront server with Self-Service Password Reset enabled, the Account Self-Service icon is displayed in the sign-on window. NOTE: If you enter wrong password more than four times in the Sign-on window, the client automatically enters the unlock account process. 1 Click the Account Self-Service icon to unlock your account or reset your password. Figure 64.
Figure 65. Account self-service icon Unlocking account After you register the security questions, do the following to unlock the account: 1 Choose a task (Unlock account) in Account Self-Service window. 2 Enter the user name. The Unlock Account dialog box is displayed. Figure 66. Unlock account 3 Enter the registered answers to the security questions.
Figure 67. Unlock account Figure 68. Unlock account If the provided answers match the registered answers, then the Unlock Account dialog box is displayed. 4 Click OK to successfully unlock your account. Figure 69.
NOTE: • If the provided answers are incorrect, the following error message is displayed. Figure 70. Error message • If you provide the wrong answers more than three times, you can not unlock the account or reset the password, and the following error messages are displayed. Figure 71. Attempts exceeded Figure 72. Account locked out Resetting password After you register the security questions, do the following to reset the password: 1 Choose a task (Reset password) in Account Self-Service window.
2 Enter the user name. The Reset Password dialog box is displayed. Figure 73. Reset password 3 Enter the registered answers to the security questions. Figure 74.
Figure 75. Security questions If the provided answers match the registered answers, then the Reset Password dialog box is displayed. 4 Enter and confirm the new password. Figure 76. Set password 5 Click OK to successfully change the password. Figure 77. Password change successful NOTE: If you provide the wrong answers, you can not reset the password, and an error message is displayed.
QUMU or ICA Multimedia URL Redirection QUMU utilizes ICA Multimedia URL Redirection. You are required to install a browser plug-in for this feature to work. In earlier ThinOS Lite releases, ICA Multimedia URL Redirection was partially supported. In ThinOS Lite 2.4 release, a few enhancements are made to ICA Multimedia URL Redirection for better performance.
Wyse 5010 zero client for Citrix (D00DX) (ThinOS Lite Pro 2) Wyse 3010 zero client for Citrix (T00X) (ThinOS Lite 2) Wyse 3020 zero client for Citrix (T00DX) (ThinOS Lite 3) Verifying the working status of the ICA connections • For Wyse 3010 zero client for Citrix (T00X) (ThinOS Lite 2) and Wyse 3020 zero client for Citrix (T00DX) (ThinOS Lite 3) ICA SuperCodec is enabled by default when ThinOS Lite resolution is lesser than or equal to 1920 x 1080.
Figure 79. HDX Monitor 3.3 Figure 80.
Figure 81. Event log Click HDX Monitor > Graphics > Thinwire Advanced > Encoder > CompatibilityEncoder; CompatibilityEncoder. From XenDesktop/XenApp 7.11, the encoder is changed to Deprecated Figure 82. Status • For Wyse 5010 zero client for Citrix (D00DX) (ThinOS Lite Pro 2) – ICA SuperCodec is always enabled without any limitation. – ThinOS Lite event log displays ICA: SuperCodec enabled. NOTE: For ICA connections, there is no INI parameter.
Anonymous logon Anonymous logon—This feature enables the users to log in to the Storefront server configured with unauthenticated store without Active Directory (AD) user credentials. It allows unauthenticated users to access the applications instead of AD accounts.
Citrix UPD Configuration on Server Use the following guidelines for Citrix UPD configuration on Server: 1 To enable the printer policy in XenApp 6.5: a b c d 2 Go to the DDC Server. Click Start > Citrix AppCenter. Click Citrix Resources > XenApp > Policies > User > Settings > Printing > Client Printers and enable the Auto-create generic universal printer. Click Printing > Drivers, and set the Universal print driver usage to use universal printing only from the drop-down menu available.
Set INI AutoLoad=1 AddPkg=FR in wnos.ini or xen.ini. 3 Restart the client to read File Server and wait till the auto installation of packages is complete. 4 User can view the installed packages in the Packages tab in the System Tools dialog box. 5 Server configuration for Flash redirection To ignore the differences in flash player versions, user must add the FlashPlayerVersionComparisonMaskregistry key on the desktop. If it is XenApp 6.
f In some scenario the video shows no content initially; when user resizes browser the video appears normally; it is likely to happen with x86 desktops and is a known issue for Citrix HDX FR Linux client. g Playback with videos that can work with HDX FR on Linux or Windows client: There are a number of videos/websites known as not working with Citrix HDX FR solution such as msn.com, espn.com, movies.yahoo.com, and dell.com. Flash videos simply cannot load with these websites using HDX FR solution.
– Add the entry named FlashPlayerVersionComparisonMask with a DWORD value = 00000000 • For a 64 – bit operating system – HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\HdxMediaStreamForFlash\Server\PseudoServer – Add the entry named FlashPlayerVersionComparisonMask with a DWORD value = 00000000 2 – After making the modification you must restart IE on VDA/XenApp.
Figure 87. Policies 4 To view the list of Flash policies: a Go to Setting tab, and select Flash Redirection category. All the Flash Redirection policies will be listed as shown in the following screenshot. Figure 88. Edit Policy 5 To activate a policy: a After modifying any Citrix policy, run the CMD command ‘gpupdate /force’ in the XenApp/VDA machine, and then reconnect the session. The policy will be updated immediately.
Figure 89. User policy update 6 7 To verify if Flash is getting client rendered OR HDX Flash redirection is working: a Right-click on the Flash Region to view the Flash context menu. If the Flash context menu is same as native Linux menu, the ThinOS Lite built-in Adobe Flash Player version is 11.1. The following screenshot shows that the Flash is getting client rendered. b When flash is client rendered, the event log will display “FR”.
Figure 91. FlashDesktop Citrix HDX Flash Redirection Policies Configurations Policy - Flash default behavior 1 Remove all other active flash related policies in XenApp/XenDesktop server side. Figure 92. Enable Flash acceleration 2 Set Enable Flash acceleration for policy 'Flash default behavior' in XenApp/XenDesktop server side. Then run a web Flash video in ICA session for the client to render the flash video.
Figure 93. Disable Flash acceleration Figure 94. Event viewer 3 Set Block Flashacceleration for the policy Flash default behavior in the XenApp/XenDesktop server side, and then run a web Flash video in ICA session, the flash video will be server rendered and event 55 generates in event viewer > ApplicationsAndServicesLogs > Citrix > Multimedia > Flash > Admin.
4 Set Block flashplayer for policy 'Flash default behavior' in XenApp/XenDesktop server side, and then run a web Flash video in ICA session, the flash instances are blocked and event 63 generates in event viewer > ApplicationsAndServicesLogs > Citrix > Multimedia > Flash > Admin. Figure 95. Block Flash player Figure 96.
Policy - Flash URL compatibility list 1 Edit XenApp/XenDesktop policy 'Flash URL compatibility list', such as new item {Render On Client, *youku.com*, Any}, and then access the website (For example, www.youku.com). All flash instances on the website are client rendered. Figure 97.
Figure 98. Event viewer 2 Edit XenApp/XenDesktop policy 'Flash URL compatibility list', such as new item {Render On Server,*youku.com*, Any}. And then access the website (For example, www.youku.com). All flash instances on the website are server rendered, and Event 59 generates in event viewer. 3 Edit XenApp/XenDesktop policy 'Flash URL compatibility list', such as new item {Block, *youku.com*, Any}. And then access the website (For example, www.youku.com).
Figure 99. Flash background color list 1 Edit the Flash background color list in XenApp/XenDesktoppolicy, such as new item {*FF0000}. 2 Access any web site, for example . www.youku.com to play a flash video through HDX FR, when the flash background color is red. Policy - Flash intelligent fallback 1 Enable the policy 'Flash intelligent fallback' in XenApp/XenDesktop server side. Run some flash websites in ICA session.
Figure 100. Flash intelligent fallback—Enabled Figure 101. Event viewer 2 Disable the policy Flash intelligent fallback in XenApp/XenDesktop server side. Run some flash websites in ICA session. there will be no new event 61 in event viewer > Applications And ServicesLogs > Citrix > Multimedia > Flash > Admin.
Figure 102.
Figure 103. Flash server-side content fetching URL list 2 Set the ThinOS Lite INI using the {SessionConfig=ICA HDXFlashEnableServerSideContentFetching=Enabled} 3 Make sure that the client cannot access your testing Flash website, set an unreal DNS server to break client internet connection. You can try to ping your website domain name for example www.youku.com that request will be timed out. 4 Access any website for example www.youku.com to play a flash video through HDX FR.
Figure 104.
6 Configuring Zero Client Settings You can configure available zero client settings on the zero client using the following. Depending on user privilege level, some dialog boxes and options may not be available for use.
Figure 105. System preference 2 Click the General tab, and use the following guidelines: a b c Screen Saver — Allows you to select the type of screen saver you want. The default is to Turn Off Screen. Other available selections are Flying Bubbles, Moving Image ,Showing Pictures and Playing Video which are screen savers with the monitor remaining on.
• d Lock Terminal, Unlock Password • Terminal is locked, Invalid unlock password Terminal Name — Allows entry of a name for the zero client. The default is a 14-character string composed of the letters WT followed by the zero client Ethernet MAC address. Some DHCP servers use this value to identify the IP address lease in the DHCP Manager display. 3 Click OK to save the settings.
f Each entry with optional port number is specified as Name-or-IP: port, where: port is optional. If not specified, port 80 is used. Locations can be supplied through user profiles if user profiles are used. The Time Servers provide the zero client time based on the settings of time zone and daylight saving information. If DHCP is used, locations can be supplied through DHCP. Change Date and Time — Allows you to change date and time for secure environments requiring a solution to outside server access.
• Configuring the Dual Head Display Settings Configuring the General Display Settings To configure the general display settings. 1 From the floating bar menu, click the System Setup , and then click Display. The Display dialog box is displayed. Figure 108.
1280 x 768 (not on Wyse 3010 zero client for Citrix-T00X) 1280 x 1024 1360 x 768 (not on Wyse 3010 zero client for Citrix (T00X)/ Wyse 3020 zero client for Citrix (T00DX) class) 1366 x 768 1368 x 768 (not on Wyse 3010 zero client for Citrix (T00X)/ Wyse 3020 zero client for Citrix (T00DX)T00X) class) 1400 x 1050 1440 x 900 1600 x 900 1600 x 1200 1680 x 1050 1920 x 1080 1920 x 1200 1920 x 1440 (R00LX (ThinOS Lite Pro) class only) 2560 x 1080 (Single monitor only; R00LX (ThinOS Lite Pro) class and Wyse 5010 Z
Figure 109. Display—Dual Head 2 Click Dual Head tab and use the following guidelines: Supported Dual Monitor Capable Zero Clients Only. a b Dual Head—Select Mirror Mode to have the two monitors work in a matching state, or Span Mode to have the two monitors work separately second is extended from first. Main Screen—Select which of the two monitors you want to be the main screen (Screen1 or Screen2). The other screen is extended from the main screen. c The other screen is extended from the main screen.
Figure 110. Display—Dual Head e Swap dual screens—When you set Main Screen to Screen2, an additional check box is displayed at the bottom of the tab offering to swap dual screens; If the check box is cleared, the Screen1 is usually the left one or the top one in dual display.
When the display settings are changed, the modified settings are applied to the active sessions dynamically. But some of the active sessions disconnect and then reconnect. Dual head user scenario Go to System Setup > Display > Dual Head and change the settings. Go to System Setup > Display > General and do the following: 1 Change resolution from DDC table or User defined display settings. 2 Change rotation setting from User defined display settings.
Figure 111. Peripherals—Keyboard 2 Click the Keyboard tab and set the Character Set, Keyboard Layout, Delay Before Repeat and Repeat Rate parameters. The following table explains the parameters present on the Peripherals page. Table 6. Parameters on the Peripheral page Parameter 3 Description Character Set Specifies the character set. Each character is represented by a number.
Configuring the Mouse Settings To configure the Mouse Settings: 1 From the floating bar Menu, click the System Setup , and then click Peripherals. The Peripherals dialog box is displayed. Figure 112. Peripherals—Mouse 2 Click the Mouse tab to select the mouse speed and mouse orientation. 3 Select the Swap left and right mouse buttons check box to swap mouse buttons for left-handed operations. 4 Click OK.
Figure 113. Peripherals—Audio 2 Click the Audio tab to select the volume settings for connected devices. a Click the Playback Devices tab to select the type of the audio from the drop-down menu. • b • Select the check box to mute. Click the Recorded Devices tab to select the type of the record from the drop-down menu. • c d e Use slider to control the volume settings for the playback devices. Use slider to control the volume settings for the record devices. • Select the check box to mute.
Figure 114. Peripherals—Camera NOTE: You can optimize performance and modify the frame rate per second, if the Optimize for CPU check box is NOT selected—supported values include 1/1, 1/2, 1/3, 1/4, 1/5, and 1/6 – directly from the zero client (if the webcam supports Universal Video Driver). This feature is CPU intensive and is recommended for high performance products such as Wyse 5010 zero client for Citrix (D00DX).
Configuring the Bluetooth Settings The Bluetooth feature helps you to connect your zero client with Bluetooth enabled devices such as headsets and mouses. ThinOS supports both Intel wireless chipset 7260 and 7265. For mouse, headset, and keyboard, ThinOS supports both Bluetooth 3.0 and 4.0 Bluetooth 4.0 supports Classic and Bluetooth Low Energy (BLE). However, Bluetooth Alternate MAC/PHY (AMP) is not supported.
◦ Bluetooth Headset is supported in this release. ◦ The maximum number of Bluetooth headsets that can be connected is one. IMPORTANT: Other types of Bluetooth devices are not scanned and supported. Call level audio quality on Headsets is supported. However, multimedia is still not supported. • Status — The Bluetooth page has two columns, namely, Status and Paired. Table 7. Bluetooth—Status and Paired Status Paired • Connected The Bluetooth device is connected to the ThinOS Lite device.
Figure 116. Bluetooth devices b 126 Remove— Select a particular Bluetooth device from ThinOS Lite and click Remove to disconnect and remove the device from the list.
Figure 117. Peripherals—Bluetooth c Scan— All Bluetooth devices enter into Page Scan mode. Different Bluetooth devices enter into the Page Scan mode at different instances such as when a specific button is pressed three times or a specific button is pressed and held until the LED turns blue. NOTE: Auto Connect function—The Auto Connect function is designed for HID devices. Prerequisites: • ThinOS Lite has no HID devices connected such as USB or Bluetooth HIDs.
2 The Bluetooth device name displays N/A sometimes. Workaround: Remove this device from the list and rescan. 3 The Bluetooth device status is not refreshed sometimes when wireless chipset 7260 is shut down. Workaround: Close the ThinOS Lite Bluetooth window and re-open it. The status is updated. 4 Only supports volume button and mute button on Bluetooth headset. 5 The performance of Bluetooth feature is low during wireless connection.
Figure 118. Printer setup—Ports 2 Click the Ports tab and use the following guidelines: a Select Port—Select the port you want from the list. LPT1 or LPT2 selects the connection to a direct-connected USB printer. b Printer Name — (Required) Enter name you want displayed in your list of printers. most USB direct-connected printers report/fill in their printer name automatically.
NOTE: If the zero client is to be used as an LPD printer server, DHCP must not be used and a static IP address must be assigned to the client. 3 Click OK. Configuring the LPDs Settings To configure the LPDs Settings: 1 From the floating bar Menu, click the System Setup , and then click Printer. The Printer Setup dialog box is displayed. Figure 119.
e If the printer is attached to another zero client on your network, the entry in the LPD Hosts box is the name or address of that zero client. LPD Queue Name — An LPD host maintains a named queue for each supported printer. Enter the name of the queue associated with the printer to be used. This name can be different for each vendor. This field is required and must be correct so that the network printer accepts incoming print jobs properly.
d e f g This name must be either the device driver name for the printer under the Microsoft Windows system, or a key to map to the device driver. If not specified, the name will be defaulted to the printer-supplied identification for standard direct-connected USB printers or Generic / Text for non-USB connected printers upon connection to Windows hosts. The driver name mapping takes place either through a printer-mapping file read by the system as part of the global profile (wnos.
Printer Identification is supplied by printer device. Change it to a Window’s printer driver name or setup a driver mapping file.
7 Performing Diagnostics Diagnostics include: • System Tools • Using the Trouble Shooting Options System Tools Use the System Tools dialog box to view device details, import certificates, view package details, and Global INI/User INI information. 1 From the floating bar menu, click System Tools. The System Tools dialog box is displayed. 2 Click the Devices tab to display all the locally attached devices, including USB, Serial, and Parallel on applicable platforms.
Figure 122. Peripherals—Audio NOTE: The Mirror File Server tab has been removed from the System Tools dialog box as it can now be viewed in the Devices tab.
Figure 123. System tools—Certificates a b c Import the certificates by selecting either USB Storage or File Server from the drop-down list, and then click Import to import the required certificate. Click Delete to delete the imported certificate. Click View Certificate to view the imported certificate information such as Version, Validity, and Serial number. You can also view the certificate path and certificate status. For more information about certificate details, see About Default Certificates.
Figure 124. System tools—Packages a b Click the Delete button to delete the selected package. Click the Delete all button to delete all the packages. The following packages are available in the package tab: • base.i386.pkg • FR.i386.pkg • RTME.i386.pkg package For information about updating the packages, see Firmware upgrade. IMPORTANT: You cannot delete the base package separately. If u clickDelete All, all packages are deleted including the base package. NOTE: From 2.2 release, base.i386.
Figure 125. System tools—Global INI 6 Click the WDM INI to view the received WCM configurations.
Figure 126. System tools—WDM INI WCM function is supported from WDM for comprehensive client configuration. Without configuration from server, the client loads the cached settings (wdm.ini), if available. Limitation To upgrade or downgrade firmware/image through WCM, you are required to enable WDM file server function by selecting the WTOS INI path upon checkin (FTP/HTTPS/HTTP/CIFS) check box in the WTOS preferences in the WDM configuration manager.
Figure 127. ThinOS or Linux configuration b Select the target devices, and publish configuration settings through the Package Distribution Wizard. Figure 128.
Figure 129.
Figure 130. Package Distribution Wizard For more information about WDM Package Manager and Profile Manager, refer to the WDM Admin Guide. 7 Click OK to save the settings. Simplified Certificate Enrollment Protocol—SCEP Simplified Certificate Enrollment Protocol (SCEP) was designed to be used in a closed network where all end-points are trusted. The goal of SCEP is to support the secure issuance of certificates to network devices in a scalable manner.
Figure 131. Request Certificate 2 Enter the appropriate values in the Request Certificate dialog box, and then click the Request Certificate button. The certificate request is sent to the server and the client receives the response from server and installs both CA certificate and client certificate. 3 Click Ok to save the changes. NOTE: • If the SCEP server is on Windows Server, the CA certificate HASH provided by MS Windows server is always a MD5 hash type. • The Request server URL must be HTTP link.
About Default Certificates Default certificates embedded in the ThinOS are displayed in the Certificate dialog box. To view the default certificate, set ThinOS to factory default, and on the desktop click System Settings > System Tools > Certificates. The following default certificates are displayed in the cacerts folder, in an expandable tree structure format: • BTCTRoot.crt • Class3PA_G2_v2.crt • Class4PA_G2_v2.crt • Entrust_G2.crt • EquafaxCA1.crt • gd-class2–root.crt • GTECTGlobalRoot.
Certificate field Default value/format C=IE Valid from 2000–05–12 18:46:00 Valid to 2025–05–12 23:59:00 Subject Baltimore CyberTrust Root CN=Baltimore CyberTrust Root OU=CyberTrust O=Baltimore C=IE Public key RSA (2048 bits). Key bits are displayed in the lower pane of the window.
Certificate field Default value/format C=US Public key RSA (1024 bits). Key bits are displayed in the lower pane of the window. Thumbprint algorithm sha1 Thumbprint 85 37 1c a6 e5 50 14 3d ce 28 03 47 1b de 3a 09 e8 f8 77 0f Certificate name—Class4PCA_G2_v2.crt Table 11. Class4PCA_G2_v2.
Table 12. Entrust_G2.crt Certificate details Certificate field Default value/format Version V3 Serial number 4a 53 8c 28 Signature algorithm sha256RSA Issuer Entrust Root Certification Authority CN=Entrust Root Certification Authority—G2 OU=(c) 2009 Entrust, Inc. – For authorized use only OU=See www.entrust.net/legal-terms. O=Entrust, Inc.
Certificate field Default value/format C=US Valid from 1999–06–21 04:00:00 Valid to 2020–06–21 04:00:00 Subject Equifax Secure eBusiness CN=Equifax Secure eBusiness CA-1 0=Equifax Secure Inc. C=US Public key RSA (1024 bits). Key bits are displayed in the lower pane of the window.
Certificate field Default value/format Key usage Digital Signature, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign, Encipher Only, Decipher Only Subject key ID d2 c4 b0 d2 91 d4 4c 11 71 b3 61 cb 3d a1 fe dd a8 6a d4 e3 Authority Key ID Key bits are displayed in the lower pane of the window.
Certificate field Default value/format Issuer Class 3 Public Primary Certification Authority OU=Class 3 Public Primary Certification Authority O=VeriSign, Inc. C=US Valid from 1996–01–29 00:00:00 Valid to 2028–08–01 23:59:59 Subject Class 3 Public Primary Certification Authority OU=Class 3 Public Primary Certification Authority O=VeriSign, Inc. C=US Public key RSA (1024 bits). Key bits are displayed in the lower pane of the window.
Certificate field Default value/format Public key RSA (2048 bits). Key bits are displayed in the lower pane of the window.
e f g h 3 Force Coredump — Use this option to forcibly generate the debug information for technical investigation when your system is not responding. Export Shadow Tmp— Use this option to export temporary logs for debugging purpose. The log files can be exported to USB or File Server depending on the target configuration. Export Screenshot— Use this option to export screenshots to the file server or a USB drive. The exported file name is added with build information for a better troubleshooting.
Figure 134. Capture If you want to enable the error messages, use the following guidelines: • Click either One-time or Persistent option to enable logging the unexpected error message. • If you want to check the error messages, under Troubleshooting, turnoff the logging before checking.
Figure 135. Event log • Be sure to enable the EnableTrace option of the Privilege parameter in a xen.ini file. For more information, see Dell Wyse ThinOS Lite INI Guide. • Use the Network capture to USB option to enable the capture of network information, that is, a network trace of all traffic coming in and out of the zero client to a USB drive that is inserted into the zero client. After you login and use the XenDesktop server or network, you will see a /wnos/troubleshoot/[Terminal Name]_[ENET or WS].
Figure 136. Ping a Enter Hostname or IP — Enter the IP address, DNS-registered host name, or WINS-registered host name of the target to be pinged. Data area — Displays ping response messages. The ping command sends one echo request per second, calculates round trip times and packet loss statistics, and displays a brief summary upon completing the calculation. Start — Executes the ping command. If the host is operational and on the network, it responds to the echo request.
IMPORTANT: Not all network equipment will respond to ping packets, as this is a common mechanism used in denial-of-service attacks. Lack of response does not necessarily indicate that the target of the ping is unusable for other purposes. 6 Click the Trace Route tab to execute the tracert diagnostic utility and display response messages. Use the following guidelines: Figure 137.
8 BIOS Management The BIOS management information is used with the following supported versions: • Wyse 5010 Zero Client for Citrix - D00DX (ThinOS Lite pro) BIOS version 3.0D or later For BIOS configuration, if a password is configured, the password is required to update any settings. For example, the INI parameter to update settings must be same as CurrentPassword={}. This is mandatory for Dell BIOS, and will be implemented as mandatory for Wyse BIOS post this release.
CMOS Central Management—Extracting CMOS Settings to the File Server for Distribution CMOS Central Management allows ThinOS Lite administrators to easily manage CMOS settings for large deployments of zero client devices using central configuration methodologies. The following are the steps for extracting CMOS Settings to the File Server for Distribution for C00 BIOS version 1.0B_SPC001–0407: 1 To prepare a Reference Drive containing BIOS version 1.
The following are the steps for extracting CMOS Settings to a USB Key for Distribution for C00 BIOS version 1.0B_SPC001–0407: 1 To prepare a Reference Drive containing BIOS version 1.0B_SPC001-0407 or later: a b c 2 To extract the CMOS Settings to a USB Key: a b 3 The Reference Device is a golden image you use to distribute to other zero client devices. To access Reference Drive, enter the BIOS Setup Utility. Press the Delete key, enter the Password — Fireport (case sensitive) and press Enter.
9 Security Changes A new global security policy has been defined for ThinOS Lite and this policy is applied to all secure connections (https/SSL connections) with a few exceptions. Purpose – To improve the security level by default and add the global configuration. This security policy integrates security setting for each application.
automatically installs the required certificates. From the second boot up, without these configurations, the warning message is displayed with OK button for you to continue. NOTE: For file server, the continue button is displayed with its own GUI.
Figure 140. File Server The server address does not convert to http, if WDM server is set as https. • In the previous scenario, If WDM server is configured without HTTPS, and local WDM server address is specified in HTTPS, then the system converts it to HTTP address. • In the current scenario, the system does not convert the WDM server address to HTTP. Manual discovery is removed from WDM. In the WDA tab, the Manual discovery method option is removed.
Figure 141. Central Configuration By default, the SNMP is set to disabled. You can enable it by setting the INI parameterCommunity= Security Enhancements—Firmware Signature In ThinOS Lite 2.4 release, firmware signature verification is added to enhance firmware security. By default, signature verification is required on firmware downgrade/upgrade Salient features • By default, signature verification is required on firmware downgrade/upgrade. • Provision to downgrade from 2.4 firmware to 2.
– Upgrade or Downgrade between 2.3 and/or earlier firmware. – Upgrade or Downgrade between 2.4 and later firmware. Transport Layer Security—TLS Transport Layer Security (TLS) is a protocol that provides communication security between the client and server applications. Upgrade to Transport Layer Security (TLS)— In the ThinOS 8.2 release, the TLS is upgraded from version 1.0 to version 1.2. By default, the ThinOS client uses TLS 1.
A Central Configuration—Automating Updates and Configurations This appendix describes how to set up your environment to provide your zero clients running ThinOS Lite with automatic updates and configurations in the following procedures. NOTE: Dell Wyse zero clients do not require device management software. They are configured to obtain their IP address, as well as the location of firmware and configuration instructions, from a DHCP server.
53 DHCP Message Type Recommended. 54 DHCP Server IP Address Recommended. 55 Parameter Request List Sent by zero client. 57 Maximum DHCP Optional (always sent by zero client). Message Size 58 T1 (renew) Time Optional, but recommended. 59 T2 (rebind) Time Optional, but recommended. 61 Client identifier Always sent. 161 File server (ftp/http/https) Optional string. Can be either the name or the IP address of the file server.
166 WMS MQTT Server Optional string 167 WMS CA Validation Optional string 181 PNAgent/PNLite server list Optional string. The zero client uses the server to authenticate the Windows credentials of the user and to obtain a list of ICA published applications valid for the validated credentials. The user supplies those credentials when logging in to the zero client. 182 NT domain list for PNAgent/PNLite Optional string.
190 WDM secure port Optional number, word or two-bytes array. Specifies to use HTTPS to communicate with WDM instead of HTTP. 192 WDM server port Optional number, word or two- bytes array. NOTE: The value of this option tag represents the same information as option tag 187. The difference is thatThinOS Lite interprets the value of this option tag in correctorder (for example, the value of 0x0050 is interpreted as0x0050).
B Creating and Using xen.ini Files In this chapter you will learn how to construct and use a xen.ini file. The xen.ini file you create will provide your zero client with automatic updates and configurations. Downloading and Using Sample INI Files ThinOS Lite Sample INI files are available from Dell and can be modified to suit the individual connection profile needs for your users.
In addition, starting all parameters at the left margin and placing at least one leading space (or tab) at the beginning of all (and only) continuation lines makes an INI file easier to read. NOTE: In circumstances where you require string concatenation, you can use a backslash without a space before or after it to concatenate with the first set of characters from the previous line; for example the strings snow and ball may be concatenated to give snowball.
Table 20. Parameters for a xen.ini File Parameter Description AddCertificate= Specifies a certificate file residing in the subfolder cacerts under the xen folder to load on the nand flash device on platforms with nand flash, or on the memory. password= Password-enc= The length of the filename, including the trailing period and the file extension, is limited to 64 characters.
Parameter Description 102 — Enable upgrade only, but have a popup message that identifies the firmware version, and then prompts with OK and Cancel buttons appearing before the process; completion message appears after process. 201 — Enable a forced firmware upgrade/downgrade process, but have a popup message with OK button appearing before process although process will begin in 20 seconds in any case; completion message appears after process.
Parameter Description For some environments, BOOTP requests will delay obtaining the IP from the DHCP server. Set BootpDisable=yes will only perform a DHCP request. This setting is only valid after the next reboot. BootOrder={PXE, HardDisk, USB} Not supported on ThinOS Lite 2. BootOrder — Sets the boot order for the BIOS. [Intro build 1.5.0_02] The boot order must follow these rules: 1 The boot order is a list of these three options separated by a semicolon (;)or a comma (,).
Parameter Description [CAValidation=(yes, no)] MQTTServer — Specifies a IP address or URL address for the MQTT server and MQTT port after the : (colon). Once specified, it is saved in the non-volatile memory. Default MQTT port is 1883. [Discover=(yes, no)] [IgnoreMqtt=(yes, no)] AdvancedConfig — Default is no. Yes/no option to enable the Cloud Client Manager server and MQTT server fields in the GUI.
Parameter Description CustomInfo={yes, no} Yes no option to configure/store custom information. If CustomInfo=yes, the custom information configured by the following options will be stored into NVRAM. If CustomInfo=no, the custom information in NVRAM will be cleared.
Parameter Description Device=audio Specifies the local thin client audio volume. volume={low, middle, high} or {0 to 25} volume — Default is middle. Specifies the volume level. mute={0, 1, 2, 3} high — maximum volume [mic_vol={high, middle, low} or {0-25}] middle — medium volume [mic_mute={yes, no}] low — minimum volume [mic_boost={yes, no, 1, 2, 3, 4}] Values of 0-25 provide more exact volume level [min_cache={1-50}] mute — Default is 0. Option to enable/disable mute.
Parameter Description mic_gain—Enhances the mic gain by number of times the specified value. The default value is 1. Device=camera Specify the ThinOS Lite local camera settings. [format=raw] format — Support only for raw video type; format=raw is fixed. [width={camera supported width}] width — The width of the resolution that the local camera supports. [height={camera supported height}] height — The height of the resolution that the local camera supports.
Parameter Description [USBController={yes, no}] IMPORTANT: [COMController={yes, no}] • [PopupMenu={yes, no}] • [OnboardAudio={yes, no}] [Bluetooth={yes, no}] [CurrentPassword= password NewPassword = password] [AutoPowerDate={yes,no}] [AutoPowerTime={hh:mm:ss} [AutoPowerDays={Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday}] $PF — denotes the name of the platform such as C10LE, C00X, R10L, R00LX, and VL10 $VER — denotes the version of BIOS such as 1.0B_SPC001(1.0B_SPC001-0407), 1.
Parameter Description AutoPowerDays—This option specifies the day to turn on the system automatically. For example, Device=Cmos AutoPowerDate=yes AutoPowerTime=2:30:30 AutoPowerDays=Sunday;Friday;Saturday DEVICE=UsbTrace Specify the ThinOS Lite to trace USB device data to ftp or USB disk. vid_pid={device vid/pin hex format} For "vid_pid", that is, device Vendor ID and Product ID hex value, the VID is high 16 bit while Product ID is low 16 bit. This allows to trace maximum of 8 devices at one time.
Parameter [WDMSecurePort={128-254}] [WDMFQDN={128-254}] Description NOTE: WDMSecurePort is the specified HTTPS port of the WDM server. [CCMGroupKey={128-254}] [CCMServer={128-254}] [CCMMQTTServer={128-254}] [CCMCAValidation={128-254}] WDMSecurePort—Specifies the HTTPS port of WDM server. WDMFQDN — Specifies the Fully Qualified Domain Name (FQDN) of the WDM server. NOTE: The CCMGroupKey, CCMServer and CCMMQTTServer options are specified to remap the tags for CCM configuration.
Parameter Description [Type={TCX, HDX}] The DeviceID can be found in the event log. For example, if you find “TCX USB: Local Device(0x04f2,0x0112,0x03,0x01,0x01)”, set the parameter as: Device=vusb ForceRedirect=0x04f2,0x0112,0x03,0x01,0x01 [InterfaceRedirect={no, yes}] Type — (Citrix Environments Only) In Citrix environments, allows you to force the usage of HDX for USB virtualization instead of TCX.
Parameter Description Device=Wireless Mode=Infrastructure SSID=ThinOS Lite_95 roamsensitive=highIEEE8021X=yes network=wireless profile=ThinOS Lite_95 access=WPA2-ENT eap=yes eaptype=EAP-PEAP peapeap=EAPMSCHAPV2 Device=Wireless Mode=Infrastructure SSID=ThinOS Lite_11nIEEE8021X=yes network=wireless profile=ThinOS Lite_11n access=WPA2-PSK wpa2pskpwd=2wsx3edc Device=Wireless Priority="ThinOS Lite_11n,ThinOS Lite_95,ThinIsIn" DEVICE_SECURITY=white_list/black_list • When DEVICE_SECURITY=white_list is set, the
Parameter Description NOTE: Be sure to enclose in quotation marks if spaces are included. For example: DomainList=”North_America, SQA, test-domain” disable— If the value is set to yes, the domain field in sign-on window is disabled. Dualhead={no, yes} [ManualOverride={yes, no}] Default is no. Dualhead — Yes/no option to support a dual-monitor display. CAUTION: If Dualhead is changed to yes, your zero client will require a reboot to change the monitor display.
Parameter Description – Certificate verification should pass. – CN and SAN on cert match DNS naming. • Set SecurityMode=Full to indicate that the client verifies the server’s certificate in highest security mode. If any error is detected, client prompts a pop-up box. • Set SecurityMode=Warning to indicate that the client allows continuation if any error is detected. follows SecurityPolicy setting to check the certificate.
Parameter Description [tlsclntcert=] Server certificate validation is mandatory in EAP-TLS authentication. If the eaptype entry is set to EAP-TLS, the servercheck entry must be set to yes. [tlsclntprikeypwd=] [tlsclntprikeypwdEnc=] Server list must be included in double quotation marks.
Parameter Description [fastmschappwdEnc={password encrypted for EAP-FAST/ EAP-MSCHAPV2}] [fastmschapdm={domain for EAP-FAST/EAP-MSCHAPV2}] [fastmschaphidedm={yes,no}] [fastsinglesignon={yes, no}] [fastgtcun={username for EAP-FAST/EAP-GTC}] [fastgtcpwd={password for EAP-FAST/EAP-GTC}] [fastgtcpwdEnc={password for encrypted for EAP-FAST/ EAP-GTC}] INACTIVE = minutes [NoSessionTimer=minutes] [LockTimer=seconds] Default is 0. There is no Idle timeout. The range is 0 minutes to 480 minutes.
Parameter Description the user is logged in without a password, this key sequence does not work. Ctrl+Alt+Right —Default is yes. Yes/no option to enable Ctrl+Alt+Right Arrow to lock the zero client if the user is logged in with a password, if the user is logged in without a password, this key sequence does not work. [Win+L key={no,yes}] —Default is no. Yes/no option to enable use of Win+L key to lock the client. Alt+Tab—Default is yes. This option is used for task selection. Language=code Default is Us.
Parameter Description Arabic (Bahrain) — Ar_bah Arabic (Qatar) — Ar_qat Brazilian — Br Canadian Multilingual — ca_ml Chinese (Simplified) — Gb Chinese (Traditional) — b5 Croatian — Croat Czech — Cz Danish — Dk Dutch — Nl Dutch (Belgian) — Nl_be Dutch (Belgian Comma) — Nl_be_c English (Australian) — Au English (3270 Australian) — au3270 English (New Zealand) — Nz English (United Kingdom) — Uk English (United States) (default) — Us Estonian (Estonia)-Et_ee Finnish — Fi French (Belgian) — fr_be French (Belgia
Parameter Description Japanese — Jp Japanese — Jp_109a Korean — Ko Korean (MS-IME2002) — ko_ime Latvian (Latvia)-lv_lv Latvian (Qwerty)-lv_lv_q Lithuanian (Standard)-lt_lt Lithuanian (IBM)-lt_lt_i Lithuanian (MS)-lt_lt_m Norwegian — No Polish (214) — Pl Polish Programmers — pl_prog Portuguese — Pt Portuguese (Brazil) — Pt2 Romanian — Ro Slovakian — Slovak Slovakian (Qwerty) — sk_q Slovenian — Sloven Spanish — Es Spanish (Mexican) English — La(us) Spanish (Mexican) Localized — La Swedish — Se Turkish — Turk
Parameter Description Spanish Mexican — la By default, with the above keyboard languages, the system will update the standard image according to the suffixes with the language code. With other keyboard languages, the system will update the standard image without the suffix specified. For example, if you set Language=jp on a ThinOS Lite, the system will update the image named C10_xen.jp which is the Japanese localization build.
Parameter Description IMPORTANT: For Chinese Simplified, Chinese Traditional, Japanese, and Korean localization, a font file must also be placed under the folder xen/font in the file server. For example, if you want to specify the system language to be Japanese, you must place a file named Japanese.msg under the folder xen/locale in the file server, place a file named Japanese.fnt under the folder xen/font in the file server, and then add Locale=Japanese load=yes in the INI file.
Parameter Description [DisablePromptToEnroll={yes,no}] If AutoAccess is defined, then auto launch the corresponding type of broker. Otherwise, get the broker type from the Imprivata Server setting of computer and user policy. If none of them is defined, then launch the first available broker server from the Imprivata server. If AutoAccess=LOCAL is set, then launch the broker from the zero client setting; the broker getting from the Imprivata Server is ignored.
Parameter Description username.ini in the group directory is not found, the system will try to load \xen\ini\username.ini as before. If SelectGroup=yes, the Select Server List statement is invalid because the group list may define different brokers. SelectServerList= {PNA, VDI} User can choose one PNA or VDI server from sign-on window to log in. [Default=default_desc] This format must be used in newer build. For server’s format: description = host = [].
Parameter Description NOTE: For ThinOS Lite 2, use the depreicated EnableCacheIni parameter to locally cache the xen.ini ONLY. EnableCacheIni={no, yes}. Default is no. MultiLogon={no, yes} Default is no. Yes/no option to support multiple log ons. If MultiLogon=yes, the PNAgent/PNLite sign-on authenticating window can input a different username, password, and domain while signing on to different PNAgent/PNLite servers.
Parameter Description Title and ButtonCaption — Specifies the notification window title and button that can be customized.
Parameter Description [AccountSelfService={no, yes}] server (AccountSelfService=yes) or a direct connection (connect=) - if no option is specified, it will connect with the ICA protocol). [connect=] [encryption={Basic, 40, 56, 128, Login-128, None}] AccountSelfService — Default is no. Yes/no option to define the password server as an Account Self Service server. AccountSelfService=yes also displays the Account Self-Service icon on the Log on dialog box.
Parameter Description ReconnectFromButton — Specifies the reconnection function from the reconnect command button. Default is 0 — disables the option. 1 — reconnects to disconnected sessions only. 2 — reconnects to active and disconnected sessions. AutoConnectList — Specifies the PNA applications that will be automatically started when using PNA to sign on. If AutoConnectList=*, then all the PNA applications will be automatically connected.
Parameter Description 10 Disabled by default: USB, Printers, Smart Cards Xen Desktop Default Settings: 1 2 SignOn=Yes sysmode=vdi toolbarclick=yes toolbardelay=3 3 sessionconfig=ica progressivedisplay=yes 4 PnliteServer= 5 AutoSignoff=yes 6 Enable by default: Printers, Serials, USB, Sound 7 Disabled by default: Disk, Smart Cards SmartcardPassthrough — Default is yes. Yes/no option to enable/ disable the smartcard pass through mode. StoreFront — Default is no.
Parameter Description NOTE: The parameters must be specified in the order shown. Printer={LPD1, LPD2, LPD3, LPD4} Default is LPD1. [LocalName=name] Printer — Specifies the LPD printer to configure. [Host= host] LocalName — Specifies the name of the printer. If LocalName is not specified, the Queue name is used. [Queue=queue] [PrinterID=window_driver] [Class=classname] [Enabled={no, yes}] Host — Specifies the host name of the printer. Queue — Specifies the queue name of the printer.
Parameter Description ** PRIVILEGE=[None, Low, High] Default is high. [LockDown= {no, yes}] Privilege controls operator privileges and access to zero client resources. See also CCMEnable={yes, no}.
Parameter Description HidePN — Default is no. Yes/no option to hide the PNAgent or PNLite icon from view on the taskbar. HideConnectionManager — Default is no. Yes/no option to hide the Connect Manager window from view. NOTE: As stated earlier, although the Connect Manager is disabled by default if Privilege=none, the Connect Manager can be enabled by using HideConnectionManager=no; however, the user cannot create a new connection or edit an existing connection. EnableNetworkTest — Default is no.
Parameter Description DisableChangeDateTime—If the option DisableChangeDateTime is set, the function of changing the date and time locally is disabled. For example, when you right-click the time label in taskbar, nothing is displayed. The Change Date and Time button in System Prefernce is invisible. NOTE: If the optional EnableNetworkSetup=yes is set with Privilege={none, low}, the network setup will be enabled.
Parameter Description Type=http Server=server1:1234 user=$UN password=$PW (OR) Proxy=yes AppList=ccm \ Type=http Server=server1:1234 user=abc password=xyz \ Type=socks5 Server=server2:4321 user=abc password=1234 (OR) Proxy=yes AppList=ccm;fr \ Type=Global Server=server_global user=user_global password=password_global_encrypted Encrypt=yes RapportDisable={yes, no} If this option is set to yes, the Rapport agent will be disabled.
Parameter Description Reboot={no, yes} Time=hh:mm Default is no. [-hh:mm] Reboot — Yes/no option to enable automatic daily reboot of all ThinOS Lite devices. [Wday={Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday}] [Idle=minutes] Time — Specifies the time to reboot and must be in a 24-hour format. For example: Reboot=Yes Time=17:30 will reboot all ThinOS Lite devices at 5:30 P.M. daily. The option Wday specifies the weekday of scheduled reboot Idle—Specifies the idle minutes.
Parameter Description NOTE: If the Resolution or Refresh parameter values are changed, the zero client will reboot without notice to the user. rotate — Rotate allows you to rotate monitors for viewing in Portrait mode. For example: screen=1 resolution=1280x1024 refresh=60 rotate=none NOTE: Due to processing power requirements, rotate is not recommended and supported on the C class platforms at this time. IMPORTANT: The Screen parameter must be placed before the Resolution parameter.
Parameter Description prompted with an unlock dialog box to enter the sign-on password to unlock the thin client. 3— Puts the thin client in a LOCK state when the screen saver is activated, and the username and password are needed to unlock the terminal. The wallpaper is not shown and the Password field in the Unlocking window is invisible until you have entered the username. When you click OK or press the Return key, a message box pops up to input the username and password to unlock the terminal.
Parameter Description PictureCheck — Specifies whether to check for picture files servers or not. NOTE: If set to always, the picture files in file servers are checked when the screen saver starts every time. By default, the system checks for picture files only when the screen saver starts for the first time to decrease network traffic. PictureLayout— The optional parameter is used to specify the arrangement on the desktop when pictures are displayed.
Parameter Description SessionConfig=ALL Set ALL to establish default settings for all sessions. If connection parameters are set to yes, the default settings will be changed accordingly.
Parameter Description Set DisableResetVM=yes to disable the Reset VM function. By default, this function is controlled by server side including Citrix PNA. Set FontSmoothing=no to disable font smoothing option. By default, font smoothing is allowed. Set AutoConnect=no to disable auto connection function. Set MultiMonitor=no to disable multiple monitor layout function. The session has the same desktop width and height with local virtual desktop size, spanning across multiple monitors, if necessary.
Parameter Description [AudioQuality={default, high, medium, low}] NOTE: A sequence of characters can be used by DiskMapTo, with each letter mapped to one disk in order. For example, if RTNM is the sequence, R is mapped to the first disk (in ThinOS, it will be D:/), T is mapped to the second disk (in ThinOS, it will be E:/), and so on.
Parameter Description ZLMouseMode — Specifies to accelerate the visual feedback for mouseclicks on the client device over a high latency connection. 0=off, 1=on, 2=auto SucConnTimeout— This option will enhance the seamless session share. During the first session logon, immediately start second or later sessions, which will wait for the time set with SucConnTimeout (or the logon success) to make sure new applications share with the first logon session.
Parameter Description If set to turnoff, the system is turned off. When the unit starts up, it first starts the BIOS then ThinOS Lite. SignOn={yes,no, NTLM} [MaxConnect=max] [ConnectionManager={maximize, minimize, hide}] [EnableOK={no, yes}] Yes/no option to enable the sign-on process. Default is yes. If set to NTLM, user can be authenticated with NTLM protocol. The user must be a domain user and the same sign-on user credentials must be available in the ftp://~/xen/ini/ directory.
Parameter Description 0 — System logs off. 1 — System locks and can be unlocked only when the same certificate is used with the smart card. The optional keyword DefaultINI configures a file name which is in default folder of username ini files. If the {username}.ini is not found, this file will be loaded by default. (CIR51869) The optional keyword IconGroupStyle configures the icon group style on the desktop. PNAgent published applications can be configured with client folder in PNA server.
Parameter Description The optional keyword DisableEditDomain is set to yes to stop typing in the domain box manually. Typing the character @ or \ as the format domain \user and user@domain in username box are not allowed. The option AdGroupPreFix is only valid, when you configure SignOn=NTLM.
Parameter Description RequestURL = scep_request_url KeyUsage —This option is to specify key usage of the client certificate and should be set to a digitalSignature, keyEncipherment or both using a ';' concatenating these two as digitalSignature;keyEncipherment.
Parameter Description [ToolbarEnableOneSession={no, yes}] Citrix mode makes the client turn to Xenith. Xen.ini is preferred in the next reboot. [ToolbarAutoQuit={yes, no}] [ToolbarStay=] [EnableLogonMainMenu={no, yes}} [LightGray=”r g b” ] [MediumGray=”r g b” ] [DarkGray=”r g b”] [DisableAddConnection={yes, no}] toolbardisablemouse — Default is no. By default, the toolbar is hidden until a user hovers their mouse over the left side of the screen.
Parameter Description TimeServer= TimeServer — Specifies the SNTP time servers to use for time retrieval. If a time server is not defined, the client CMOS/BIOS internal clock will be used as a reference. [TimeFormat=24-hour format, 12-hour format}] [DateFormat={yyyy/mm/dd, mm/dd/yyyy, dd/mm/yyyy}] [GetBiosDT={no, yes}] TimeFormat — Default is 24-hour format. Specifies the time format to use. DateFormat — Default is yyyy/mm/dd. Specifies the date format to use. GetBiosDT — Default is no.
Parameter Description NOTE: For the 2013 year, DST dates are Sunday, March 10, 2:00am and ends Sunday, November 3, 2:00am. TimeZoneName — Display name sent to the ICA session such as Eastern Standard Time. DayLightName — Display name for daylight saving time. If daylight saving time is enabled, DayLightName should be named something similar to Eastern Daylight Time, otherwise it should be the same as TimeZoneName. Overall Example: TimeZone="GMT – 08:00" \ ManualOverride=Yes Daylight=Yes Start=030107 End=11
Parameter Description [Password-enc=encrypted_password_string] Autoconnect specifies the option to enable or disable auto-connect on system startup. Folder=[folder] Username-enc— Specifies AES encrypted Login Username Password-enc— Specifies AES encrypted Login Password Folder— Specifies the grouping of connections. Displays the folder on ThinOS Lite desktop only if the mode is classic mode and the parameter signon is set as signon=yes icongroupstyle=folder. The folder can include sub folders.
Parameter [Discover={yes, no}] [SecurityMode={default, full, warning, low}] Description 3 DNS host name lookup "wdmserver"If WDMService=yes, set DHCPinform=yes will do #1, set DNSLookup=yes will do #2 and #3. If QuickMode is set to yes, the rapport agent will not block any other process during ThinOS Lite boot up and increases the boot time of ThinOS Lite. If Discover=yes is specified, rapport discovers WDM server information from the DHCP option tag, DNS service location record, and DNS host name.
NOTE: The Start and End options are in the MMWWDD format, where: MM = Month of the year. Values are 01 to 12 for the months of the year from January to December. For example, 01 = January, 12 = December WW = Week of the Month. Values are 01 to 05 for the week of the month, 05 is the last week. For example, 01 = 1st week, 05 = the last week of the month. DD = Day of the week. Values are 01 to 07 for the day in the week from Monday to Sunday. For example, 01 = Monday, 07 = Sunday U.S.
Geographic time zones Time zones name (GMT-05:00) Bogota, Lima, Quito, Rio Branco SA Pacific (GMT-05:00) Chetumal Eastern (Mexico) (GMT-05:00) Eastern Time (US & Canada) Eastern (GMT-05:00) Indiana (East) US Eastern (GMT-04:30) Caracas Venezuela (GMT-04:00) Asuncion Paraguay (GMT-04:00) Atlantic Time (Canada) Atlantic (GMT-04:00) Cuiaba Central Brazilian (GMT-04:00) Georgetown, La Paz, Manaus, San Juan SA Western (GMT-03:30) Newfoundland Newfoundland (GMT-03:00) Brasilia E.
Geographic time zones Time zones name (GMT+01:00) Sarajevo, Skopje, Warsaw, Zagreb Central European (GMT+01:00) West Central Africa W. Central Africa (GMT+01:00) Windhoek Namibia (GMT+02:00) Amman Jordan (GMT+02:00) Athens, Bucharest GTB (GMT+02:00) Beirut Middle East (GMT+02:00) Cairo Egypt (GMT+02:00) Damascus Syria (GMT+02:00) E. Europe E.
Geographic time zones Time zones name (GMT+04:30) Kabul Afghanistan (GMT+05:00) Ashgabat, Tashkent West Asia (GMT+05:00) Ekaterinburg (RTZ 4) Russia TZ 4 (GMT+05:00) Islamabad Karachi Pakistan (GMT+05:30) Chennai, Kolkata, Mumbai, New Delhi India (GMT+05:30) Sri Jayawardenepura Sri Lanka (GMT+05:45) Kathmandu Nepal (GMT+06:00) Astana Central Asia (GMT+06:00) Dhaka Bangladesh (GMT+06:00) Novosibirsk (RTZ 5) Russia TZ 5 (GMT+06:30) Yangon Rangoon Myanmar (GMT+07:00) Bangkok, Hanoi, Jak
Geographic time zones Time zones name (GMT+10:00) Guam, Port Moresby West Pacific (GMT+10:00) Hobart Tasmania (GMT+10:00) Magadan Magadan (GMT+10:00) Vladivostok, Magadan (RTZ 9) Russia TZ 9 (GMT+11:00) Chokurdakh (RTZ 10) Russia TZ 10 (GMT+11:00) Solomon Is.
C Examples of Common Printing Configurations This section provides examples on using the Printer Setup dialog box and ThinOS Lite INI parameters for common printing situations. Use the following guidelines mentioned below in addition to the information provided in Connecting to a Printer. IMPORTANT: Host-based printers are not supported.
c d e 3 Printer Identification — Enter the type or model of the printer in the exact text of the Windows printer driver name — including capitalizations and spaces most USB direct-connected printers display their printer identification automatically. In the above mentioned scenario, enter HP LaserJet 4000 Series PCL. Printer Class — You can leave this as default. Enable the printer device — Enable this option, as it enables the printer device to display on the remote host. Click OK to save the settings.
f g NOTE: If the printer is attached to another zero client on your network, the LPD Queue Name must match the content of the Printer Name box on the zero client with the printer attached. Printer Class — (Optional) You can leave this as default. Enable the printer device — Enable this option, as it enables the printer device to display on the remote host. Using INI Parameters for Non-Windows Network Printers— LPD The INI parameters for Non- Windows Network Printers (LPD) : Printer=LPD1 \ LocalName="HP La
It enables the device so it displays on the remote host. Click Test Print and you will be prompted to enter your Windows credentials, these credentials will be used to access the printer share. This is also the same dialog box that will display for a user when they attempt to print to this printer.
Using Your Zero Client as a Print Server—LPD A ThinOS Lite zero client can be configured as a basic network print server, to share local printers with other zero clients. Using the Printer Setup Dialog Box for Configuring LPD Services A zero client can be configured to provide LPD (Line Printer Daemon) services making the zero client a printer server on the network.
PrinterID="HP LaserJet 4000 Series PCL" \ Enabled=yes \ EnableLPD=yes NOTE: The PrinterID is the exact text of the Windows printer driver name, so if a printer driver is named HP LaserJet 4000 Series PCL in Windows, then it must be exactly the same in the PrinterID field in the INI parameters including capitalizations and spaces. Configuring ThinPrint No ThinPrint specific configuration is available on the zero clients.
D Important Notes VNC RFB version upgrade—Since ThinOS Lite 2.0, the VNC RFB version has been upgraded to 3.8. This version upgrade provides support for applications like DameWare. Thus, an administrator can now remote into a ThinOS Lite device using either DameWare or VNC Viewer. Prior to 2.0, you could only use VNC Viewer.
E Troubleshooting • ThinOS Lite devices allow secure SSL connections—SecurityMode=Full—only after verifying the certificates. In the present scenario, the devices enforce the warning policy after you define a server using a valid IP address. The resolution for the issue will be delivered in the next ThinOS Lite release. The following are the workarounds to avoid the SSL connection issue: – Ensure that the device has a valid certificate and the correct time is selected on the device.
F Firmware upgrade Firmware upgrade is the process of updating your existing ThinOS Lite firmware version to the latest version. To upgrade the ThinOS Lite firmware, use any of the following: • File Transfer Protocol (FTP) Windows server • HTTP/HTTPS Windows server • Wyse Management Suite version 1.
The option Autoload=2, ensures that the thin client uses the firmware installed on the server to upgrade, only if the firmware on the thin client is older than the version on the server. The option LoadPkg specifies how to update the external packages. If LoadPkg is not in the statement, it will inherit the value of AutoLoad. Base package is integrated into the ThinOS Lite firmware image.
Autoload=2 loadpkg=1 Addpkg=FR The option Autoload=2, ensures that the thin client uses the firmware installed on the server to upgrade, only if the firmware on the thin client is older than the version on the server. The option LoadPkg specifies how to update the external packages. If LoadPkg is not in the statement, it will inherit the value of AutoLoad. Base package is integrated into the ThinOS Lite firmware image.
