Administrator Guide

Parameter Description
PictureCheck — Species whether to check for picture les servers or
not.
NOTE:
If set to always, the picture les in le servers are checked when
the screen saver starts every time. By default, the system checks
for picture les only when the screen saver starts for the rst time
to decrease network trac.
PictureLayout— The optional parameter is used to specify the
arrangement on the desktop when pictures are displayed. For the tile
selection, the image is replicated across the desktop. For the center
selection, the image is placed at the center of the desktop without any
image size change. For the stretch selection, the image is either expanded
or shrinked to ll the desktop. The default value is stretch.
Sleep—The optional parameter is used to specify the interval minutes to
stop soft screen saver and turn o monitor. After the specied minutes,
since software screen saver starts up, the software screen saver is
stopped and turns o the monitor until screen saver is o. The value
range is 0 to 180. The value 0 is default which disables this function.
SecureMatrixServer=<SecureMatrix Server
Host name or IP address/FQDN or URL>
Species the Host name or IP address/FQDN or URL of the Secure
Matrix server. Http or https protocol usage is decided by the server
conguration. If SecureMatrixServer is dened, the user must pass
authentication with the Secure Matrix server rst, and then there is a
seamless log in to the brokers if the server can provide the correct broker
credentials, if not, the user must enter broker credentials to log in.
For Example: SecureMatrixServer=https://gsb01.bjqa.com
NOTE:
Before using this parameter, use the Secure Matrix documentation
to set up the Matrix Server. Also, be sure you import the relevant
GSB Server Certicate le when using https.
SecurityPolicy={full, warning, low}
[SecuredNetworkProtocol={yes, no}]
[TLSMinVersion]={1,2,3}]
[TLSMaxVesion={1,2,3}]
[DNSFileServerDiscover={yes,no}]
Species the global security mode for SSL connection. If application
SecurityMode is default, application applies the setting.
If set to full, the SSL connection needs to verify server certicate. If it is
untrusted, connection is dropped.If set to warning, the SSL connection
needs to verify server certicate. If it is untrusted, it is up to you to
continue or drop the connection. If set to low, the server certicate is not
checked. The value is persistent, and the default value is warning. For
those SSL connections with their own security policy, this does not
impact.
For example, Fileserver follows global security policy. Citrix broker, and
SECUREMATRIX are forced to high security mode. If the optional
SecuredNetworkProtocol=yes is set, the unsecure protocols including ftp,
http and tftp are disabled. The value is persistent, and the default value is
no. Option TLSMinVersion and TLSMaxVersion allows you to congure
the SSL connection. ThinOS Lite supports SSLs from TLSMinVersion
onwards. TLSMaxversion is the latest version of SSL supported by
ThinOS Lite. If no value is set then TLSMinVersion then the default value
is set to TLS1.0 and TLSMaxVersion to TLS1.2. The value 1, 2, 3
corresponds to TLS1.0, TLS1.1, TLS1.2 respectively. In classic mode, a DNS
name wyseftpfbc4tc is resolved to discover the le server, if the global
INI le in remote le server and local cache cannot be loaded. If the
optional DNSFileServerDiscover=no is set, the function is disabled. The
value is persistent, and the default value is yes.
Creating and Using xen.ini Files 207