Dell Wyse SUSE LINUX Enterprise Release 11 SP3 ... Wyse... · 1 Introduction Dell Wyse Enhanced...

Dell Wyse SUSE LINUX EnterpriseRelease 11 SP3 — Administrator’s Guide

Notes, cautions, and warningsNOTE: A NOTE indicates important information that helps you make better use of your computer.

CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

Copyright © 2015 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. Dell™ and the Dell logo are trademarks of Dell Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.

2015 - 11

Rev. A00

Contents

1 Introduction...........................................................................................................6About this Guide....................................................................................................................................6

What’s New............................................................................................................................................6

Supported Products.............................................................................................................................. 8

Limitations for Z50Qq Devices....................................................................................................... 8

Dell Wyse Technical Support................................................................................................................9

Related Documentation and Services............................................................................................ 9

Dell Wyse Online Community.........................................................................................................9

2 Getting Started: Basics...................................................................................... 10Logging in to your Thin Client Device................................................................................................10

Using Your Desktop............................................................................................................................. 11

Desktop Keyboard Shortcuts.........................................................................................................12

Configuring Thin Client Settings and Connections........................................................................... 13

Connecting to Network and Session Services................................................................................... 13

Connecting to a Printer.......................................................................................................................14

Connecting to a Monitor.....................................................................................................................14

Shutting Down and Restarting............................................................................................................ 14

Viewing System Information............................................................................................................... 15

Restoring Default Settings...................................................................................................................15

Accessing Thin Client Boot Menu Settings...................................................................................16

Restoring Default User Settings.................................................................................................... 16

Restoring All Factory Default Settings When Updating firmware................................................16

3 Configuring Thin Clients Settings Locally......................................................17Thin Clients Options for Local Configuration.................................................................................... 18

Setting the Monitor Display Preferences............................................................................................18

Setting the Keyboard Preferences......................................................................................................20

Setting the Mouse Preferences...........................................................................................................25

Configuring the Printer Settings......................................................................................................... 27

Installing a Network Printer.......................................................................................................... 28

Installing a Local Printer................................................................................................................29

Setting the Appearance Preferences.................................................................................................. 31

Selecting the Language.......................................................................................................................35

Configuring the Panel Settings...........................................................................................................36

Setting the Screensaver Preferences..................................................................................................37

Configuring the Add-on Manager......................................................................................................38

Configuring the Global Citrix Settings................................................................................................39

3

Configuring the Desktop Appliance...................................................................................................46

Configuring the Device Settings.........................................................................................................49

Using the Ericom PowerTerm TEC.....................................................................................................53

Managing the Import Certificates.......................................................................................................54

Configuring the INI and Upgrade Settings......................................................................................... 57

Configuring the Image Update Options.......................................................................................59

Configuring the Network Connections............................................................................................. 60

EAP-PEAP (MSCHAPv2) Authentication Workflow...................................................................... 63

EAP TLS Authentication Workflow................................................................................................65

Configuring the Power Management Preferences............................................................................67

Setting the SCEP Client Configuration...............................................................................................67

Configuring the TCX USB Virtualizer..................................................................................................69

Configuring the User Administration..................................................................................................70

Configuring the vWorkspace.............................................................................................................. 73

Configuring the Wyse Device Manager (WDM) Settings................................................................... 76

Configuring the Wyse Device Agent Settings.....................................................................................77

Directing the Thin Client to CCM Server......................................................................................79

4 Configuring Connections Locally....................................................................81Configuring the Browser Mozilla Firefox........................................................................................... 82

Configuring the Local Citrix Settings................................................................................................. 83

Configuring the Custom Connection Settings.................................................................................. 93

Configuring the Ericom PowerTerm TEC Settings............................................................................94

Configuring the Ericom PowerTerm Webconnect Settings............................................................. 98

Configuring the Imprivata Settings.................................................................................................... 98

Configuring the RDP Client Settings................................................................................................ 101

Configuring the SSH Connection.....................................................................................................108

Configuring the VMware View Client...............................................................................................109

Configuring the VNC Viewer.............................................................................................................116

Connecting to vWorkspace...............................................................................................................119

Connecting to the vWorkspace Server Using a Browser........................................................... 119

Creating the vWorkspace Server Connection Using Connection Manager............................. 120

Configuring the XDMCP Settings..................................................................................................... 125

5 Accessing Additional Features with the Application Browser................. 128Using the Diagnostic Tool................................................................................................................ 129

Using the Diagnostics Log Viewer....................................................................................................130

Configuring the Volume Control Settings........................................................................................ 131

Setting the Bluetooth Preferences....................................................................................................131

Taking Screenshots........................................................................................................................... 133

Setting the VNC Server Preferences.................................................................................................134

Viewing XTerm.................................................................................................................................. 136

4

A Central Configuration: Automating Updates and Configurations..........139How INI files Are Employed.............................................................................................................. 139

Setting Up the Automatic Configurations and Updates..................................................................140

Preparing the Root Directory and Folder Structure on the Server............................................ 141

Directing the Thin Client to the Server.......................................................................................143

B Mixed Environment Imaging – An Enhanced Method of Upgrading..... 147Support Details.................................................................................................................................. 147

Directories on the Server.................................................................................................................. 148

5

1IntroductionDell Wyse Enhanced SUSE Linux Enterprise (SLE) from Dell combines the security, flexibility, and market-leading usability of SUSE Linux Enterprise with Dell’s thin computing optimizations in management and user experience. It is ideal for organizations that want to run server-based, Web-based, or local applications including legacy applications without the deployment and security concerns of a non-standard Linux distribution.

Dell Wyse Enhanced SLE comes pre-installed with the software needed for most thin computing deployments, including an ICA client, RDP client, VMware View client, vWorkspace client, Firefox Web browser, and the PowerTerm Terminal Emulation client. You can extend this base functionality through easy-to-install add-ons qualified and available through Dell such as ThinPrint support or other packages that have been qualified for SUSE Linux Enterprise thin client. As with all Dell Wyse Enhanced platforms, Dell Wyse Enhanced SLE has built in support for Dell Wyse WDM software, and Dell Wyse Device Agent.

About this Guide

This guide is intended for administrators of thin clients running Dell Wyse Enhanced SUSE Linux Enterprise (SLE). It provides information and detailed system configurations to help you design and manage a Dell Wyse Enhanced SLE environment.

Finding the Information You Need in this Guide

You can use either the Search window or Find toolbar to locate a word, series of words, or partial word in an active PDF document. For detailed information on using these features, refer to the Help in your PDF reader.

What’s New

The current release includes the following new features:

• Unified Imaging

—The Unified Image feature allows D50D, Z50D thin clients to have SLED 11 SP3 image on them. The major idea of Unified Imaging is to make all the dual core/quad core thin clients which are currently running on SLED 11 SP2 image to run on SLED 11 SP3 image. From this release, we will have only SP3 image which supports all the dual core and quad core thin clients. This feature allows the users to have only one image, instead of two.

a. This release includes:

– Three Merlin Images for factory for both WSI/FI core [Z50D, D50D and SP3 image with Bios].

6

– One Merlin Image for customers without BIOS [OS only image].

– One SP3 Raw Image which supports all platforms.

b. No common BIOS is available across all the platforms and therefore no unified image for all platforms.

• Support for CCM

—The CCM supports following new features along with the existing features:

a. INI support for WDM/CCM registration.

b. Add-on deployement/Agent upgrade.

• WDM 5.5 WCM—This release will have Hagent support for WCM configuration management for WDM 5.5 release.

The configuration is pushed from WDM and the Hagent just passes it to the common backend used by the CCM for processing.

• Support for Citrix Receiver for Linux 13.2.1— The new Linux Receiver contains following new features:

– Storefront 3.0

– Double hop support for Linux receiver—This will support Use Cases associated with the deployment of Linux Virtual .(This is as claimed by Citrix).

– Russian – new localization (The Russian Timezone redirection issues are fixed as claimed by citrix)

• Support for VMWare Horizon View Client 3.5 —VMware View Horizon Client 3.5 is integrated as part of this release. This release has support for Linux remote desktops which requires View Agent 6.1.1 or later versions. With this version of View Client, you can perform Virtual printing.

The VMWare Horizon View Client 3.5 contains the following new features:

– Linux remote desktops .

– Smart cards for logging in to RDS desktops and hosted applications. You can now authenticate to RDS based desktops and RDS based applications using smart cards. This feature requires View Agent 6.1 or later versions.

– Support for Windows 10 desktop.

• Security and Firefox browser updates—This feature includes the list of packages that will be updated based on security updates published by Novell as part of SLED11SP3 security updates to fix some known critical vulnerabilities.

Security upgrade includes updates to the following packages:

– Linux Kernel – 3.0.101-0.47.55.1

– Firefox (MozillaFirefox-38.2.0esr)

– Flash Player- (flash-player-11.2.540)

– C Library (glibc) – (glibc-2.11.3)

– Openssl and libopenssl packages – (openssl-0.9.8j)

– Curl – (curl-7.19.7)

– Cups – (1.3.9)

– icu – (4.0)

– NTP –( ntp- 4.2.4p8)

7

Supported ProductsThis SP3 guide is intended for the following products: D50D, D50Q, X50M, Z50D, Z50S, Z50Q, and Z50Qq.

NOTE:

Table 1 shows the Dell Wyse Enhanced SUSE Linux 11 Service Pack support for all currently supported thin clients.

Table 1. Thin Client and Dell Wyse Enhanced SUSE Linux 11 Service Pack Support

Thin Client SP1 SP2 SP3

Z50Q No No Yes

Z50Qq* No No Yes

D50Q No No Yes

Z50D Yes Yes Yes

Z50S Yes Yes Yes

D50D Yes Yes yes

X50M Yes Yes No

C50 Yes No No

R50 Yes No No

* Z50Qq devices support Quad display for only Citrix clients and VMware protocols.

Limitations for Z50Qq Devices

• The Z50Qq devices do not support the following protocols and are removed when the device boots:

– RDP

– ERICOM_POWERTERM

– ERICOM_WEBCONNECT

– IMPRIVATA

– VNC Server (Remote Shadow)

– vWorkspace

• Although the Z50Qq devices support four monitors, the third and fourth monitors are not spanned when daisy-chained monitors are connected to the first Display Port of the Daughter Card.

• The Login screen is displayed on the second monitor when it is connected to the primary card.

• Screen rotation is not supported.

• The maximum resolution supported is 2560 x 1600 by display port, 1920 x 1200 by dvi port, and 1600 x 1200 by VGA converters.

• You need to attach at least one monitor to the on-board card and one to the daughter card. If the daughter card does not detect any monitor, then a resolution of 640 x 480 is applied. Dynamic

8

changes are not supported and the monitors that are attached or turned on after the system boots behave unpredictably.

• The primary displays are attached to the on-board card. During system boot and shutdown, the splash screen is displayed only on the primary display units in mirror mode. The daughter card or a VGA converter do not display anything during a system boot or shutdown.

Dell Wyse Technical Support

To access Dell Wyse technical resources, visit http://www.wyse.com/support. For more information, you can submit your questions by using the Dell Wyse Self-Service Center at http://support.wyse.com/selfservice.html or call Customer Support at 877-459-7304, Extension: 5137801. Hours of operation are from 6:00 A.M. to 5:00 P.M. Pacific Time, Monday through Friday.

To access international support, visit http://www.wyse.com/global.

Related Documentation and Services

Fact Sheets containing features of hardware products are available on the Dell Wyse website. Go to http://www.dell.com/wyse and select your hardware product to locate and download the Fact Sheet.

To get support for your Wyse product, check your product Service Tag or serial number.

• For Dell service tagged products, find knowledge base articles and drivers on the Dell Wyse product pages. Refer to Dell TechDirect for online case submission and self service dispatch or contact the support phone queue.

• For Non-Dell Service Tagged Products, find all the support needed by accessing the Wyse support domain

Dell Wyse Online Community

Dell Wyse maintains an online community where users of our products can seek and exchange information about user forums. Visit the Dell Wyse Online Community forums at: http://en.community.dell.com/techcenter/enterprise-client/wyse_general_forum/.

9

HTTP://WWW.WYSE.COM/SUPPORT

HTTP://SUPPORT.WYSE.COM/SELFSERVICE.HTML

HTTP://SUPPORT.WYSE.COM/SELFSERVICE.HTML

http://www.wyse.com/global

HTTP://WWW.DELL.COM/WYSE

HTTP://EN.COMMUNITY.DELL.COM/TECHCENTER/ENTERPRISE-CLIENT/WYSE_GENERAL_FORUM/

HTTP://EN.COMMUNITY.DELL.COM/TECHCENTER/ENTERPRISE-CLIENT/WYSE_GENERAL_FORUM/

2Getting Started: BasicsUse the following information to learn the basics and get started using your thin client:

• Logging in to your Thin Client Device

• Using your Desktop

• Configuring Thin Client Settings and Connections

• Connecting to Network and Session Services

• Connecting to a Printer

• Connecting to a Monitor

• Shutting Down and Restarting

• Viewing System Information

• Restoring Default Settings

NOTE:

While it can be used in environments without central configuration for basic connectivity needs, Dell thin clients are centrally managed and configured using INI files. In general, we recommend that you use central configuration to automatically push updates and any desired default configuration to all supported thin clients in your environment, see Configuring Thin Client Settings Locally.

NOTE: Some features noted in this guide are not supported in SP3.

Logging in to your Thin Client DeviceOn your initial connection to central configuration we recommend that you connect using a wired connection by plugging in the network-connected Ethernet cable to your thin client before starting the thin client to obtain the configurations such as connections, system settings and required certificates desired by the administrator. This wired connection will also provide any wireless configurations provided by the administrator through the INI files.

To initially connect to central configuration through wireless:

1. On the Computer menu, click Control Center → Network Connections → Wireless tab.

2. Click Add.

3. In the Edit Wireless Connection dialog box, enter the SSID and encryption configurations set up by the network administrator, see Configuring the Network Connections.

After your thin client starts and displays the login screen, you can log in to your desktop using the default user name admin and the default password admin. We recommend that you change the default

10

password by using the User Administration dialog box in the Control Center, see Configuring the User Administration

Using Your Desktop

The desktop provides various applications and tools.

Use the following guidelines to use your desktop:

• Computer button—Displays the Computer menu containing frequently used programs and common system areas. To add the application to your Favorite Applications area, right-click an icon in the Control Center.

– Connection Manager—Opens the Connection Manager. Use the Connection Manager to view, use, and locally configure connections on the thin client, see Configuring Connections Locally.

– Firefox—Opens the Firefox Web Browser.

– More Applications—Opens the Application Browser. Use the Application Browser to use and manage additional features on the thin client, see Accessing Additional Features with the Application Browser

11

– Control Center—Opens the Control Center. Use the Control Center to configure the hardware, look and feel, and system settings of your thin client, see Configuring Thin Client Settings Locally.

– Lock Screen—Locks your Desktop. Desktop displays blank after you click the icon. To restore your screen, move the mouse, enter your credentials, and then click Unlock.

– Logout—Opens the Log Out dialog box. Click Log Out to end your session but continue to run the thin client.

– Shutdown—Opens the Shutdown dialog box. Use this to shut down your thin client, restart your thin client, or put your thin client in Standby mode, see Shutting Down and Restarting.

• Power icon—Pause the pointer on this icon to see a pop-up message that shows you whether your mobile thin client is running on AC power or battery power. The message also shows you the battery status in percentage.

• Volume Control icon—Controls the audio volume. Use the slider for your volume adjustments. For the settings to take effect, sound must be supported and enabled on the server used for ICA or RDP connections, see Volume Control.

• System Information icon—Opens the System Information dialog box. Use this dialog box to view system information about the thin client, see Viewing System Information.

• Network Manager icon—Manages your network connections, see Connecting to Network and Session Services.

• Display Settings icon—Manages your monitor display settings, see Setting the monitor display preferences.

• Calendar—Lists the day of the week, date, and time. Use this to open the calendar window and reset the date.

Desktop Keyboard Shortcuts

Use shortcut keys to manage different types of application windows such as full screen, standard, and seamless.Table 2. Window-related Shortcut Keys

Window Action Press

Close window Alt+F4

Maximize window Alt+F10

Minimize window Alt+F9

Minimize or maximize all windows Alt+Ctrl+DownArrow

Mouse Modifier Alt

Move focus to next window Alt+Esc

Move focus to previous window Alt+Shift+Esc

Move window with arrow keys Alt+F7 and press an arrow key

Resize the window Alt+F8 and press an arrow key

Restore maximized window to previous size Alt+F5

12

Switch keyboard focus back to thin client. This is used by Citrix linux receiver to bring keyboard focus back to thin client locally.

Ctrl+F2

Switch windows using a dialog box Alt+DownArrow

Switch panel focus Alt+Ctrl+Shift+DownArrow

Show Computer Menu window Alt+F1

Show Lock screen Alt+Ctrl+L

Show Logout option Alt+Ctrl+Delete

Show main panel list when keyboard focus is shifted to the thin client

Windows Key

Show window menu Alt+Space. You can also right-click the window title bar or border, or click the window icon.

NOTE:

The shortcut keys Alt+DownArrow and Alt+Ctrl+DownArrow are useful for navigating multiple remote sessions without having to log out.

Configuring Thin Client Settings and Connections

We recommend that you use INI files to configure thin client settings and connections available to users, see Configuring Thin Client Settings Locally and Reference Guide: Dell Wyse Enhanced SUSE Linux Enterprise SP3 INI Guide. You can also use dialog boxes on a thin client to:

• Set up your thin client hardware, look and feel, and system settings, see Configuring Thin Client Settings Locally.

• Configure and add connections to your Desktop for use, see Configuring Connections Locally.

Connecting to Network and Session ServicesUse the Network Manager icon located on the right side of the Desktop to display information about your network connection and to connect or disconnect.To connect to network and session services:

1. Click the Network Manager icon to display the Wired Network and Wireless Network menus. For example you can click the Network Manager icon, and then select an available wired or wireless network to use.

2. Right-click the Network Manager icon to display the Enable Networking, Enable Wireless, Enable Notifications, and Connection Information options. For example, you can right-click the Network Manager icon, and then click Enable Wireless to remove the check and disable wireless.

3. Rest your mouse pointer on the icon to view a message displaying the different status such as Network Connection, Wired Network Connection Active, and Wireless Network Connection Active. It also displays the name of the network to which your thin client is connected. For example, connecting your thin client to a wired network by attaching the network cable to your thin client, displays the Wired Network Connection Active.

4. For 802.11b/g/n Wireless LAN connections, you can click the Wireless Network Connection icon or click Network Manager icon in the menu bar to see if a wireless network connection is available.

13

5. You can click available wireless network connection to open and use the Wireless Network Authentication dialog box. After authentication, the wireless network is available for use.

NOTE:

Currently, 802.1x configuration is supported only for Wired connections and Protected EAP (PEAP)/EAP-TLS (PEEP)/MSCHAPv2 password Authentication options using the Enable802 INI parameter, see Configuring the Network Connections.

For information on importing certificates that your network may require, see Managing the Import Certificates.

Connecting to a Printer

To connect a printer to your thin client through a USB port, you will need a USB-to-printer adapter cable. Before use, you may need to install the driver for the printer by following the printer driver installation instructions. For information on connecting to printers, see Configuring the Printer Settings.

Connecting to a Monitor

Depending on your thin client model, connections to monitors can be made using either a analog VGA monitor port, a digital DVI monitor port, or a digital DisplayPort and the proper Dell monitor cables/splitters/adapters. For information on configuring dual display settings, see Setting the monitor display preferences.

NOTE:

• For dual-monitor supported thin clients using a DVI to DVI/VGA splitter, the VGA monitor will be the primary monitor.

• For dual-monitor supported thin clients using a DisplayPort, the DisplayPort monitor will be the primary monitor.

Shutting Down and Restarting

After using your thin client, you can click Computer → Shutdown and select:

• Shutdown—Shuts down and turns off your thin client.

• Restart—Shuts down and restarts your thin client.

14

The Shut Down the Computer dialog box is shown here:

Viewing System InformationUse the System Information dialog box to view Identity, Network, Packages, System Log, and Copyright information.To view system information:

1. Click the System Information icon in the Control Center or in the system tray of the taskbar.

The System Information dialog box is displayed.

2. In the System Information dialog box, use the following details:

a. Identity tab—Displays identity information such as Current User, Terminal Name, Product Name, Platform, Build, SLETC, OS Version, Uptime, Processor, Processor Speed, Total Memory, Free Memory, Media Size, Serial Number, and BIOS Version.

b. Network tab—Displays network information such as Network Device, MAC Address, Network Speed, MTU, IP Address, IPv6 Address, Subnet Mask, Gateway, Domain, Primary DNS, Secondary DNS, DHCP Server, Lease, and Elapsed time.

c. Packages tab—Displays the Package information, including packages names, versions, and sizes that are installed on the thin client.

d. System Log tab—Displays the System Log information, including various messages generated during the operation of the thin client.

e. Copyright tab—Displays the software copyright and patent notices.

Restoring Default Settings

Depending on the default settings you want to restore on the thin client, you can use:

• Boot Menu to restore default values for all the items in the BIOS setup utility, see Accessing Thin Client Boot Menu Settings.

• Reset options to restore default users settings-that is, user customizations are deleted, however, add-on applications that you installed are retained, and applications that you removed are not restored, see Restoring Default User Settings.

• Force option to restore all original factory default settings, see Restoring All Factory Default Settings When Updating firmware.

15

Accessing Thin Client Boot Menu Settings

To access Thin Client Boot Menu Settings:

1. Turn off and turn on the thin client.

2. After starting your client, you see a logo for a short period. During this period, press and hold the Delete key.

3. Type Fireport as the password.

Restoring Default User Settings

When you use Restore default settings, user customizations are deleted, however, add-on applications that you installed are retained, and applications that you removed are not restored. You can restore default user settings by using the:

• Restore factory defaults when updating check box in the Thin Client Settings dialog box when updating firmware, see Configuring the INI and Upgrade Settings.

• Reset to Factory Defaults command button in the Advanced tab of the Device Settings dialog box, see Configuring the Device Settings.

• G-key Reset feature. When you see the splash screen during system boot and displays a progress bar, hold down the G key to restore the default user settings.

Restoring All Factory Default Settings When Updating firmware

Use the Thin Client Settings dialog box to restore all factory default settings when updating firmware.To restore all factory default settings:

1. Click Computer on the Desktop, and then, click Control Center to open the Control Center.

2. Click INI Settings to open the INI and Upgrade Settings dialog box.

3. If necessary, clear the Get INI and upgrade server details via DHCP check box.

4. Click Image upgrade settings to open the Thin Client Settings dialog box.

5. Select the Restore factory defaults when updating check box.

6. Select the Force base system update check box.

7. Click OK.

16

3Configuring Thin Clients Settings LocallyThis chapter contains information to help you set up your thin client hardware, look and feel, and system settings using the Control Center.

NOTE:

While we do not recommend using dialog boxes for configuring thin client system settings, they are available in case you want to temporarily override central default configurations or you do not have the option to set up central configuration for smaller environments. In general, we recommend that you use central configuration to automatically push updates and any desired default configuration to all supported thin clients in your environment, see Central Configuration Automating Updates and Configurations. In addition, the Dell Wyse USB Firmware Tool also provides a simple USB imaging solution for supported devices.

Click Control Center in the Computer menu, see Using your Desktop or in the Connection Manager, see Configuring Connections Locally, to open the Control Center.

You can right-click an icon in the Control Center to add the application to your Favorite Applications area or to your Startup Programs.

The Control Center window appears as shown here:

The Custom GNOME feature allows you to use INI parameter settings to customize the display and arrangement of the Control Center and Application Browser application icons for your users, see Reference Guide: Dell Wyse Enhanced SUSE Linux Enterprise SP3 INI Files.

17

Thin Clients Options for Local Configuration

The Control Center displays the following thin client options that you can configure locally on a thin client using dialog boxes. Depending on user privilege level, some dialog boxes and options may not be available for use.

• Setting the monitor display preferences

• Setting the Keyboard Preferences

• Setting the mouse preferences

• Configuring the Printer Settings

• Setting the Appearance Preferences

• Selecting the Language

• Configuring the Panel Settings

• Setting the Screensaver Preferences

• Configuring the Add-on Manager

• Configuring the Global Citrix Settings

• Setting the VDA Configuration

• Configuring the Desktop Appliance

• Configuring the Device Settings

• Managing the Import Certificates

• Configuring the INI and Upgrade Settings

• Configuring the Network Connections

• Configuring the Power Management Preferences

• Setting the SCEP Client Configuration

• Configuring the TCX USB Virtualizer

• Configuring the User Administration

• Configuring the vWorkspace Settings

• Configuring the WDM

• Configuring the Wyse Device Agent Settings

Important:

• For details on System Information, see Viewing System Information.

• Dell Wyse Virtual Desktop Accelerator (VDA)—to accelerate protocols such as Microsoft RDP and Citrix ICA. VDA feature is not supported in SP3. For Product Downloads, go to www.dell.com/wyse/support

Setting the Monitor Display Preferences

Use the Display Preferences dialog box to set the monitor display. For most monitors, resolution is obtained automatically from the monitor.

18

HTTP://WWW.DELL.COM/WYSE/SUPPORT


To set the display preferences:

1. Log in as Administrator.

2. On the Computer menu, click Control Center.

3. In the Control Center, click Display.

The Display Preferences dialog box is displayed.

4. Use Primary Display Output to set your preferred display.

5. From Resolution drop-down menu, select your preferred resolution.

6. From Refresh rate drop-down menu, select your preferred refresh rate.

The refresh rate is the number of times a display's image is repainted or refreshed per second. The refresh rate for each display depends on the video card used.

7. From Rotation drop-down menu, select your preferred screen rotation.

8. Select Mirror screens check box to mirror the screen on to another display screen.

When multiple monitors are identified, the default setting is Mirror to avoid the possibility of applications opening off-screen.

A mirrored setting is useful if you plan to use your mobile thin client to give a presentation on a projector or a fixed display in a conference room such as a wall-mounted plasma display or TV-type monitor.

9. Click Apply.

For Z50Qq devices, the Display applet in the Control Panel for devices is replaced with a new GUI and the shortcut is not available on the Panel bar.

The GUI appears as follows:

19

You can select the screen layout and the resolution from the respective drop-down menus. The Z50Qq devices are capable of supporting up to four monitors. It is recommended that you use four monitors of the same model.

NOTE: Restart the device whenever you change the display configuration.

Setting the Keyboard PreferencesUse the Keyboard Preferences dialog box to set the keyboard preferences.To set the keyboard preferences:



3. In the Control Center, click Keyboard.

The Keyboard Preferences dialog box is displayed.

4. Click the General tab and configure the general settings:

20

a. Key presses repeat when key is held down—Select this option and set the delay and speed.

b. Cursor blinks in text fields—Select this option and set the blinking speed.

5. Click the Layouts tab and use the following guidelines:

21

a. Select your keyboard model from the list.

b. Select the Separate layout for each window check box.

c. Click Add and choose your preferred keyboard layout.

6. Click the Accessibility tab and use the following guidelines:

22

a. Sticky Keys—Use this option to enable the simulate simultaneous keypress and disable the sticky keys if two keys are pressed together.

b. Slow Keys—Use this option to enable the long keypress and set the delay.

c. Bounce Keys—Use this option to ignore the fast duplicate keypress and set the delay.

7. Click the Mouse Keys tab and configure the keypad control of pointer by setting the acceleration, speed, and delay.

23

8. Click the Typing Break tab and use the following guidelines:

24

a. Select the Lock screen to enforce typing break check box.

b. Enter the work interval lasting time and break interval lasting time in minutes.

9. Click Close.

Setting the Mouse PreferencesUse the Mouse Preferences dialog box to set the mouse preferences.To set the mouse preferences:



3. In the Control Center, click Mouse.

The Mouse Preferences dialog box is displayed.

4. Click the General tab and use the following guidelines:

25

a. Mouse Orientation—Use this option to select either right-hand or left-hand mouse orientation.

b. Locate Pointer—Use this option to show the pointer position when the Control key is pressed.

c. Pointer Speed—Use this option to set the acceleration and sensitivity of the pointer speed.

d. Drag and Drop—Use this option to set the threshold slider.

e. Double-Click Timeout—Use this option to set the timeout slider.

5. Click the Accessibility tab to configure the simulated secondary click and Dwell click options.

26

6. Click Close.

Configuring the Printer SettingsTo configure the printer settings:



3. In the Control Center, click Printing.

The Printer configuration dialog box is displayed.

4. Click the New icon to open and use the New Printer wizard.

5. Select a printer from the list and click Printer → Set as to set a default printer.

Administrators can specify system-wide and personal default printers.

6. Right-click a printer in the list and select Properties.

27

• Click Settings to change the printer settings.

• Click Policies to change the printer policies.

• Click Access Control to change user access to the printer.

• Click Job Options to change the printer job options.

7. Right-click a printer in the list, select Delete, and click OK to delete a printer.

Installing a Network Printer

To install a Network Printer:

1. Click the New icon in the Printer Configuration dialog box to open the New Printer.

2. Select the printer option you want from the Devices list and follow the New Printer wizard using the following guidelines:

• AppSocket/HP JetDirect—Use this option for a printer connected directly to the network instead of through a computer.

• Forward print job data l ike a pipe to another command—Use this option to pipe the output of the printing command into another command or to redirect the output to a file.

• Internet Printing Protocol (IPP)—Use this option for a printer attached to a different Linux system on the same network running CUPS or a printer configured on another operating system to use IPP for http printing.

• LPD/LPR Host or Printer—Use this option for a printer attached to a different UNIX system that can be accessed over a TCP/IP network, for example, a printer attached to another Linux system on your network or a thin client used as an Line Printer Daemon (LPD) server for LPD printing requests from the network. You can enter the DNS or WINS name of the server for the network printer, or an IP address can also be entered.

NOTE: If the printer is attached to another thin client on your network, the entry in the Host box is the name or address of that thin client.

28

• Windows Printer via SAMBA—Use this option for a printer attached to a different system that is sharing a printer over an SMB network, for example, a printer attached to a Microsoft Windows machine.

• Other—Use this option for other device Uniform Resource Identifier (URI) needs.

Installing a Local Printer

Connect the printer cable to your thin client and use the following guidelines:To install a local Printer:

1. Click the New icon in the Printer Configuration dialog box to open the New Printer.

2. Select the USB printer that you are connected to your thin client.

3. Click Forward.

You can use the Serial Port # 1 and Serial Port # 2 options as needed for your local serial port printers.

4. Select the option with which you want to obtain your printer driver and click Forward.

29

5. Select the Model and Driver and then click Forward.

30

6. Enter the Printer Name, Description, Location, and then click Apply.

The printer is added to the Printer Configuration dialog box and is ready for use.

Setting the Appearance PreferencesUse the Appearance Preferences dialog box to set the desktop display settings.To set the appearance preferences:



3. In the Control Center, click Appearance.

The Appearance Preferences dialog box is displayed.

4. Click the Theme tab and select your preferred theme from the available themes.

31

5. Click the Background tab and select your preferred background for your desktop.

32

6. Click the Fonts tab and use the following guidelines:

33

a. Select your preferred font type for application, document, desktop, window title and fixed width.

b. Click your preferred font rendering from the available rendering options—Monochrome, Best shapes, Best contrast, and Subpixel smoothing.

7. Click the Interface tab and use it to configure the menus and toolbars.

34

8. Click Close.

NOTE:

We recommend to use default settings for best performance.

Selecting the LanguageUse the Select a Language dialog box to select the language of the User Interface (UI)To select the language of the UI :



3. In the Control Center, click Language.

The Select a Language dialog box is displayed.

35

4. In the Select a Language dialog box, select the language of the User Interface (UI) from the list of supported languages.

Additional language packs (rpms) can be found in the Optional Add-ons folder of the product files. For Product Downloads go to www.dell.com/wyse/support.

Configuring the Panel SettingsUse the Panel Settings dialog box to set whether or not to always display the taskbar on top of all other windows.To configure the Panel settings:



3. In the Control Center, click Panel Settings.

The Panel Settings dialog box is displayed.

4. In the Panel Settings dialog box, select Panel on top check box to display the taskbar on top of all other windows.

5. Enter the time in milliseconds to set the Unhide delay.

6. Click OK.

36


Setting the Screensaver PreferencesUse the Screensaver Preferences dialog box to select screen saver theme settings and power management settings.To set the Screensaver Preferences:



3. In the Control Center, click Screensaver.

The Screensaver dialog box is displayed.

4. On Screensaver theme menu, you can select your preferred theme from the available screen saver themes.

The available screen saver themes are Blank screen, Random and Floating Feet.

5. Select the Activate screensaver when computer is idle check box to set the screen saver when the computer remains idle.

6. Select the Lock screen when screensaver is active check box to lock your computer screen when the screen saver is active.

7. Click Power Management to open and use Power Management Preferences dialog box.

Use the Power Management Preferences dialog box to configure power management settings, see Configuring the Power Management Preferences.

37

Configuring the Add-on ManagerUse the Add-on Manager dialog box to view and manage the list of add-on packages available.To configure the Add-on Manager:



3. In the Control Center, click the Add-on Manager icon.

The Add-on Manager dialog box is displayed.

NOTE:

Add-ons that are selected in the list have been installed on your thin client.

4. Select the check box of the add-on and click Execute to install the add-on.

To install add-ons, your thin client must be connected to the correct update server and folder on that server.

5. Clear the check box of the add-on and click Execute to uninstall the add-on.

If you receive a failed to download available add-on list error message, click Server Settings in the Add-on Manager dialog box. The Thin Client Settings dialog box is displayed. To use this dialog box, see Configuring the Image Upgrade Options.

38

Important:

In the Update Server URL text box, be sure to enter the root path on the server followed by the path to the Addons folder.

The Add-On Manager populates the list with add-ons listed in the directory plain text file located in the addons folder. For more information, see Preparing the Root Directory and Folder Structure on the Server.

Configuring the Global Citrix SettingsThese settings are global settings and are applicable to the domain. When you logout and login, you are prompted for credentials to log in to a Citrix session for the selected domain.When you successfully login, all the applications and desktops on the remote session are listed on the local desktop.

Use Citrix Settings dialog box to configure the common settings you want for all Citrix connections. To view the Citrix Settings dialog box, click the Citrix Settings icon in the Control Center.

1. Click the Network tab to configure the servers and reconnection settings and then Specify the following details:

39

a. PN Agent Server—Enter the PN Agent Server you want to use.

This can be a list of servers with each server separated by a semi-colon.

b. Metaframe Server—Enter the Metaframe Server you want to use.

This can be a list of servers with each server separated by a semi-colon.

c. Browsing Protocol—Select TCP/IP + HTTP server location, TCP/IP, or SSL/TLS + HTTPS server location.

d. PN Logon Domains—Enter the PN logon domains.

e. Store Name—Enter the Store Name you want to use.

Multiple store names are not supported.

f. PN Desktop Setup—Select the Show All Applications check box to display all published applications on the desktop.

g. Window Size—Select your preferred window size from the available options in the drop-down list.

h. Application Reconnection—Select the Automatic reconnection at logon check box to enable reconnection, and then select the connect option you want.

2. Click the Drive Mapping tab to map drives on the server to devices on the thin client, and to view and manage the list of current drives including the drive information that are mapped on the thin client.

To add a drive:

40

a. Clear the Dynamic Mapping check box, and then click Add to open the Citrix Drive Map dialog box.

b. From the Drive Letter list, select a drive letter.

c. To enable or disable reading and writing for the drive, select or clear the Enable Read and Enable Write check boxes.

d. From the Drive Type list, Select a drive type such as USB Floppy, USB CDROM, USB Disk or Memory Stick, or Local or Mounted Disk.

e. Enter the directory on the USB device to access in the Base Directory text.

f. Click OK to add the drive to the list of available drives.

To edit a drive:

a. Select a drive from the list of available drives.

b. Click Edit and then configure the drive.

To delete a drive:

a. Select a drive from the list of available drives.

b. Click Delete to remove the drive.

3. Click the Hotkeys tab to map hotkeys on the thin client.

Select a Hotkey option using the Hotkey lists for each function you want.

41

4. Click the COM Ports tab to map COM ports on the server to devices on the thin client, and to view and manage the list of current COM ports including the device information that are mapped on the thin client.

42

To add a COM port:

a. Click Add to open the Add COM Port Mapping dialog box.

b. From the COM Port list, select a COM Port—1 to 4.

c. Select a device from the Device list.

d. Click OK to add the COM port and device to the list of available COM Ports.

To delete a COM port:

a. Select a COM Port from the list of available COM Ports.

b. click Delete.

5. Click the Display tab to set the Display settings.

43

Use the Display tab to set:

• Scroll Adjustment—If you encounter over-scrolling when using certain published applications, increase the adjustment by 100 until the display improves

NOTE:

The maximum scroll adjustment is 1000.

• PrintScreen—Select to use the Print Screen key to capture an image of the desktop to the Clipboard.

NOTE:

If the check box is selected, a warning message about the influence of this setting on other applications is displayed.

6. Click the Firewall tab to set the firewall options on the thin client.

44

Specify the following details:

a. Automatically detect proxy—Detects proxy servers automatically.

b. Use Alternate Address for Firewalls—Enables connections behind a firewall.

c. Proxy Type— Select a Proxy Type from the list and if necessary use Secure (HTTPS) or SOCKS and then enter the Proxy Address and Port.

7. Click the Trusted Server Configuration tab to set and enforce the trusted server configuration.

45

To enforce a trusted server configuration:

a. Select the Enabled option.

b. Select the Enforce trusted server configuration check box.

c. Enter the Address of the trusted server.

d. Click OK.

You can also use the Enabled or Disabled options to quickly enable or disable the enforcement configuration

Configuring the Desktop ApplianceUse the Desktop Appliance Configuration dialog box to configure your thin client to easily access your XenDesktop.

Important: Once the thin client is in Desktop Appliance Mode, a user can login to a XenDesktop with an Out-of-the-box HDX Plug-n-play experience.

To configure the Desktop Appliance:



3. In the Control Center, click the Desktop Appliance icon.

The Desktop Appliance Configuration dialog box is displayed.

46

4. Select the Desktop Appliance Mode check box.

5. Enter the XenDesktop URL.

This is the location of the XenDesktop server where you can log in and use your desktop.

NOTE:

Desktop Appliance Mode can also be enabled through the INI parameters EnableApplianceMode=Yes and Xendesktop URL=<URL> as described in Configuring Thin Client Settings Locally.

You can connect to your XenDesktop environment by using DCHP Option tag 191 on your DHCP server to specify the XenDesktop DDC URL, see Directing the Thin Client to the Server.

6. Click OK to open the confirmation message.

47

7. Click Yes to reboot the thin client.

8. Upon system reboot, the thin client will connect to your XenDesktop server where you need to enter your login credentials to access your desktop.

48

NOTE:

To exit Desktop Appliance Mode and allow normal log in after system start, administrators can use ALT+F4 to display the Desktop Appliance Admin Login dialog box, where you can enter your administrator login credentials and access the Control Center to use the Desktop Appliance icon and clear the Desktop Appliance Mode check box.

Configuring the Device SettingsUse the Device Settings dialog box to set the parameters of your device.

NOTE: The COM tab will not appear for mobile thin clients.

To configure the Device Settings:



3. In the Control Center, click the Device Settings icon.

The Device Settings dialog box is displayed.

4. On the Device Settings dialog box, click the Terminal Name tab to obtain the device name and then specify the following details:

49

• Contact DHCP server—Obtains the name from the DHCP server.

• DNS reverse lookup—Obtains the name from a DNS reverse lookup.

• Derive from MAC address—Generates the name from the device MAC address.

• Use the following name—Allows you to manually enter a name.

5. Click the Hosts tab to add mappings of IP addresses to hostnames that are not available through DNS.

50

NOTE: The names of mapped addresses appear on the Hosts tab.


a. Adding an IP address—Click Add to open the /etc hosts entry dialog box, enter an IP Address, Hostname and optionally, Aliases, and then click OK.

b. Editing a Host—Select a host from the list, click Edit, and configure the host.

c. Deleting a Host—Select a host from the list and click Delete.

6. Click the Ethernet Speed tab to select the Ethernet speed from the available source buttons.

7. Click the Serial Ports Configuration tab to select COM1 and COM2 Speed, Parity, Size, Flow control, and Stop bits.

51

Select the size of the stop bit with respect to the size of all the other signaling bits in a character.

Important:

The Serial Ports Configuration tab is not available for mobile thin clients or Z50S.

8. Click the NTP tab to enter the IP Address or hostname of the Network Time Protocol (NTP) server to synchronize the clock time and date of the thin client.

9. Click the Advanced tab to:

52

• Restore default user settings—When you use the Reset to Factory Defaults command button, user customization are deleted.

NOTE:

However, add-on applications that you have installed are retained, and applications that you have removed are not restored.

Using the Ericom PowerTerm TECUse the Ericom PowerTerm Terminal Emulation dialog box to view and manage the list of servers that are presented when an Ericom PowerTerm TEC connection is being configured for thin client access to network resources.

To configure the Ericom PowerTerm TEC connection:



3. In the Control Center, click the Ericom PowerTerm (R) icon.

The Ericom PowerTerm (R) Terminal Emulation dialog box is displayed.

53

4. Use the following guidelines:

a. Adding a hostname—Click Add to open the Add host dialog box, enter a Hostname, and then click OK.

The hostname is added to the Hostname list.

b. Deleting a hostname—Select a hostname and click Delete.

The hostname is removed from the Hostname list.

Managing the Import CertificatesUse the Import Certificates dialog box to import and manage the ICA Digital CertificatesTo manage the import certificates:



3. In the Control Center, click the Import Certificates icon.

The Import Certificates dialog box is displayed.

54

4. In the Import Certificates dialog box, use the following guidelines:

To Add Certificates from a Remote Server:

NOTE:

Certificate files you add from a remote server must end with the extension .crt, .cer, or .pem, and be DER-encoded or Base64-encoded.

a. Click Add to open the Add Certificate dialog box.

b. Select the Remote Server option, and then click Next to open the Certificate Import Server Settings dialog box.

55

c. Select the Remote Certificate Source server option that contains the certificate you want. If you select the Use the following Server option, enter the Import Server URL and the User name, and Password required for that server.

The Supported protocols are ftp, http, and https.

d. Select the certificate file from the Certificate file list.

If the Import Server URL, Username, and Password are entered correctly, this list automatically displays the names of available certificates on the server.

e. Click Add after configuring the Remote Certificate Source server option.

To add certificates from a local device:

a. Click Add to open the Add Certificate dialog box.

b. Select the Local Server option, and then click Next to open the Open File dialog box.

56

c. Use the folders and command buttons to find and select the certificate you want to use.

Configuring the INI and Upgrade SettingsUse the INI and Upgrade Settings dialog box to direct the thin client to the source or the server location of INI files and image updates.

NOTE:

We recommend you to obtain INI files through a DHCP server using DHCP options rather than through a static IP address. For information about how INI files and images are downloaded from the server, see Setting Up Automatic Configurations and Updates.

Dell devices also support INI updates through WDM’s DDC, see Configuring the WDM

To configure the INI Settings:



3. In the Control Center, click the INI Settings icon.

The INI and Upgrade Settings dialog box is displayed.

57

4. In the INI and Upgrade Settings dialog box, use the following details:

a. Do not use INI files — Use this option when you want to use only locally configured settings by using the thin client dialog boxes available and do not want to use available INI files on the network or local INI files.

b. Use INI files from server only — Use this option when you want to use INI files from the specified server only, for example, you do not want to use local INI files or do not want to allow INI use when disconnected from the server for security reasons. Use this option to direct the thin client to the server location through either of the following ways:

• DHCP Server — Select the Get INI and Upgrade server details via DHCP check box. The DHCP server directd the thin client to the server location where the INI files and image updates reside.

• Manually entered server address — Clear the Get INI and Upgrade server details via DHCP check box and enter the static INI Settings.

NOTE:

The INI Server URL, and optionally the Username and Password of the server, if selecting the Server requires authentication check box.

c. If server is available, use INI files from server only; otherwise use local INI files — Use this option when you want to use INI files from the specified server. However, local INI files can be used if that server is unavailable. When using this option you can direct the thin client to the server location through either of the following ways:

58

• DHCP Server — Select the Get INI and Upgrade server details via DHCP check box. The DHCP server directs the thin client, using the DHCP options, to the server location where the INI files and image updates reside.

• Manually entered server address — Clear the Get INI and Upgrade server details via DHCP check box and enter the INI Settings.

d. Use local INI files only — Use this option when you want to use only local INI files and do not want to use available INI files on the network.

NOTE:

INI files can be cached locally if using the EnableLocal and LocalCopy INI parameters; see the Reference Guide: Dell Wyse Enhanced SUSE Linux Enterprise SP3 INI Guide.

e. Image Upgrade Settings — You can click Image Upgrade Settings to configure the INI and upgrade settings, see Configuring the Image Upgrade Options.

Configuring the Image Update Options

Using the INI and Upgrade Settings dialog box, you can configure how the image on the thin client is updated if you manually configured the INI server URL.To configure the Image Update options:

1. In the INI and Upgrade Settings dialog box, click Image Upgrade Settings.

The Thin Client Settings dialog box is displayed.

2. In the Thin Client Settings dialog box, specify the following details:

a. Update Mode—Use this drop-down menu to select the following:

• No Update—Image updates are disabled.

• Base System & Add-ons—The base image and add-ons are updated at each.

• Base System Only—Only the base image is updated at each reboot.

• Add-ons Only—Only add-ons are updated at each reboot.

b. In the Update Server URL field, enter the update server URL.

59

NOTE:

If the server from which the thin client updates requires authentication, select the Server required authentication check box and then enter the Username and Password.

c. Restore factory defaults when updating Select this to remove all local-machine customizations when software is updated from the file server. This setting is enabled by default and is recommended.

NOTE: If you want to keep locally defined connections or custom changes to installed applications, you can clear the check box.

d. Force base system update—Select this check box to install the image and add-ons available on the file server regardless of whether or not they are the same as the currently installed image and add-ons on the thin client.

NOTE:

The Restore factory defaults when updating option and the Force base system update option are useful when you want to fully restore the unit to factory defaults. These options remove any customizations and install only the base image supplied.

3. Click OK to return to the INI and Upgrade Settings dialog box.

Configuring the Network ConnectionsUse the Network Connections dialog box to configure the settings you want for supported network connections.

NOTE:

Use the Wired, Wireless, Mobile Broadband, VPN, and DSL tabs to view and manage the list of network connections configured on the thin client. By default, your thin client obtains information from the DHCP server about network connections that is highly recommended, but you can manually enter connection information that is provided by your network administrator to connect to other networks.

To configure the network connections:



3. In the Control Center, click the Network Connections icon.

The Network Connections dialog box is displayed.

4. In the Network Connections dialog box, use the following guidelines:

60

a. Click the Wired tab to configure the wired connection settings.

b. Click the Wireless tab to configure the wireless connection settings.

c. Click the Mobile Broadband tab to configure the mobile broadband settings.

d. Click the VPN tab to configure the virtual private network (VPN) settings.

e. Click the DSL tab to set up a digital subscriber line (DSP) connection.

61

Important:

Currently, 802.1x configuration by using the Enable802 INI parameter is supported only for Wired connections and supported authentications are EAP-PEAP (MSCHAPv2) and EAP-TLS using SCEP.

• Supported seamless 802-1x authentication works with SuSE-based Linux thin clients by using Active Directory domain user credentials for EAP-MSCHAPv2 authentication, see EAP PEAP MSCHAPv2 Authentication Workflow.

• EAP-TLS is certificate-based authentication which uses SCEP for certificate enrollment, see EAP TLS Authentication Workflow. The following diagram depicts communication between the components in an 802.1x Linux thin client solution.

The following diagram depicts communication between the components in an 802.1x Linux thin client solution.

62

NOTE:

EAP-TLS security requires client side and server side certificates for mutual authentication. Every user and client, including the authentication server that participates in EAP-TLS, must have at least the following two certificates:

• Client certificate signed by the certificate authority (CA).

• Copy of the CA root certificate.

Important: We recommend you to set INI values for all the 802-1x parameters because these parameters are part of the persistent registry which will remain across the reboot and if any parameter is not set, it will take the previously set value, which may show inconsistent behaviors.

EAP-PEAP (MSCHAPv2) Authentication Workflow

When a Linux Thin client is initially connected to the network, the thin client obtains Guest VLAN resources by default, that is TC should be able to reach INI server to fetch the INI configurations required for 802-1x configuration.

Pre-requisites for EAP-PEAP (MSCHAPv2) 802-1x authentication:

• Make sure that the INI file has the configurations for 802-1x, Active Directory server, and Domain and Import certs. If you are pushing a CA certificate by using the Dell Wyse Device Manager (WDM), the Imports Certs INI is not required, but you must be sure that the CA certificate name is correct in the 802-1x INI parameter. For more information, see Reference Guide: Dell Wyse Enhanced SUSE Linux Enterprise SP3 INI Guide.

• If you are using CA certificate for 802-1x authentication, then use ImportCerts INI parameter to import CA certificates into the device. Ignoring CA certificate is considered as the default option, if the CA certificate name is not included as part of 802–1x INI configuration.

• Domain List INI parameter is required to display the available domains on the GDM login screen.

EAP-PEAP (MSCHAPv2) 802-1x authentication can be configured two different modes:

• User Authentication

• Machine Authentication

EAP-PEAP (MSCHAPv2) — User Authentication

To authenticate 802-1x using Active Directory username account:

1. Turn on your thin client device.

Once the INI is downloaded to the thin client, you can access the domain that is configured in the INI, from the domain drop-down list on the GDM Login screen.

2. On the GDM login screen, select the domain, and then enter the user domain credentials.

3. Click Log in.

The 802-1 authentication automatically starts as soon as you click Log in.

63

NOTE:

The GDM Authentication module performs the Network Manager configuration required for 802-1x PEAP (MSCHAPv2) authentication by using the credentials entered and 802-1x configurations from INI. Then, it reinitializes the network to do a direct 802-1x authentication with the switch.

• If log in is successful, then the thin client gets IP address from the protected VLAN and you can start the local thin client session (GNOME session). You can also start RDP, ICA, PCOIP sessions using the same domain credentials provided in the GDM login. These credentials will be preexisting in the connection manager, and you need not renter the same again.

Important:

– If you set Is802DirectEnabled=yes, the direct authentication is enabled which will trigger the 802-1x authentication from the GDM login screen. In this case the ActiveDirectoryServer parameter is not required.

– If you set Is802DirectEnabled=no, the 802-1x authentication is triggered after the user log in to the thin client. In this case the you need to include the ActiveDirectoryServer parameter in the INI.

• If log in is unsuccessful, the 802-1x authentication fails and the thin client will remain in the Guest VLAN.

4. When you log out or restart the device, thin client will again move to Guest VLAN by sending an EAPOL logoff to switch and disabling the 802-1x configuration at Network Connections applet.

Example of the INI configuration for EAP-PEAP (MSCHAPv2) 802-1x User authentication.

For AD and Domain settings

DomainList=npac.local DisableDomain=no

For Imports Certficates

ImportCerts=no For 802-1x Configuration

Enable802=yes Authentication=PEAP InnerAuthentication=MSCHAPv2 PromptPassword=no AuthMode=User Is802DirectEnabled=yes CACertificate=SCEP PeapVersion=Auto

EAP-PEAP (MSCHAPv2) Machine Authentication

To enable EAP-PEAP (MSCHAPv2) machine authentication:

• Your machine must have an account created in the Active Directory database with Hostname as the username field.

• Set the password same for all machine/host name account to be created.

• The INI parameter should contain a MachinePassword Field that will be used for authentication.

To authenticate 802-1x using Machine name (Host name):


Once the INI is downloaded to the thin client and all the 802-1x parameters for machine PEAP authentication are retrieved from the INI server, the authentication starts in the background.

The Authentication module performs the Network Manager configuration required for 802-1x PEAP MSCHAPv2 authentication by using the host name and password from INI and 802-1x configurations from INI.

64

• If 802-1x authentication is successful, then thin client gets IP Address from protected VLAN.

• If 802-1x authentication fails due to any wrong 802-1x configuration, then thin client remains in the Guest VLAN.

2. When you restart your thin client, the device will again move to Guest VLAN by sending an EAPOL logoff to switch and disabling the 802-1x configuration at Network Connections applet.

Example of the INI configuration for EAP-PEAP (MSCHAPv2) 802-1x machine authentication:

For AD and Domain settings

DomainList=npac.local DisableDomain=no

For Imports Certificates

ImportCerts=yes Certs=npac-ca-cert.pemFor 802-1x Configuration

Enable802=yes Authentication=PEAP InnerAuthentication=MSCHAPv2 PeapVersion=Auto PromptPassword=no CACertificate=npac-ca-cert.pem Authmode=Machine MachinePassword=tangocharlie

EAP TLS Authentication Workflow

When a Linux thin client is initially connected to the network, it should be able to obtain the Guest VLAN resources by default that is, it should be able to reach AD, DNS, SCEP and the INI server to fetch the INI configurations required for Active Directory Domain User Authentication, 802-1x, SCEP, and so on.

EAP-TLS 802-1x authentication can be configured in INI in two different modes:

• Machine Authentication.

• User Authentication.

EAP TLS – Machine Authentication

The following steps are involved with 802-1x authentication:

1. When the thin client restarts, it remains in the Guest VLAN and downloads the INI configuration from the INI server.

2. The INI file must have the configurations for 802-1x EAP-TLS with AuthMode set for Machine Authentication and SCEP.

3. Once the INI is downloaded to the thin client, SCEP client enrolls the client certificate with Machine hostname and Domain configured in the INI.

4. 802-1x EAP-TLS machine authentication will then begin and the thin client will move to an Authorized VLAN

NOTE:

You can view the network progress icon on the taskbar.

5. If 802-1x authentication fails due to any wrong 802-1x configuration, the thin client will automatically fall back to the Guest VLAN, with a notification message "Failed to connect to trusted network. Please contact your system administrator", in the right pane of the GNOME panel. The user receives the same notification in the case of an expired CA certificate.

65

6. When a user restarts the device, the thin client will again move to the Guest VLAN by sending an EAPOL logoff to switch and disable the 802-1x configuration at the Network Connections applet.

Example of the INI configuration for 802-1x TLS Machine authentication.

Enable802=yes Authentication=TLS PromptPassword=no CACertificate=scep UserCertificate=scep PrivateKey=scep PrivateKeyPassword=ZG90MXg= AuthMode=Machine

EAP TLS User Authentication

To authenticate 802-1x:


When the thin client restarts, it remains in the Guest VLAN and downloads the ini configuration from the INI server.

2. Once the INI is downloaded to the thin client, you can access the domain that is configured in the INI, from the domain drop-down list on the GDM Login screen.

3. On the GDM login screen, select the domain, and then enter the user domain credentials.

Domain User authentication is performed against the AD server mentioned in the INI configuration.

4. Click Log in.

• If domain user login is successful, then the user certificate will be enrolled via SCEP and 802-1x authentication will begin and you can see the network progress icon on the taskbar and the thin client will move to Authorized VLAN.

• If 802-1x authentication fails due to any wrong 802-1x configuration or if the CA certificate has expired, the thin client will automatically fall back to Guest VLAN, and a notification message "Failed to connect to trusted network. Please contact your system administrator" is displayed in the right corner of GNOME panel.

• When you log out or restart the thin client, the thin client will again move to Guest VLAN by sending an EAPOL logoff to switch and disabling the 802-1x configuration at the Network Connections applet.

NOTE:

A successful TLS authentication will display security connection information in the Connection Information dialog box as shown below.

66

Example of the INI configuration for 802-1x TLS User authentication.

Enable802=yes Authentication=TLS PromptPassword=no CACertificate=scep UserCertificate=scep PrivateKey=scep PrivateKeyPassword=ZG90MXg= AuthMode=User

Configuring the Power Management PreferencesUse the Power Management Preferences dialog box to configure and manage the power settings.Press the Power button to wake the thin client from standby.To configure the power management preferences:



3. In the Control Center, click the Power Management icon.

The Power Management Preferences dialog box is displayed.

4. In the On AC Power preference, move the Put display to sleep when inactive for slider to set the sleep time in minutes when the display is inactive.

5. Move the Set display brightness to slider to set the brightness of the display in percentage.

6. Select the Dim display when idle check box to dim the display when the device is idle.

7. Click Close.

Setting the SCEP Client ConfigurationSCEP (Simple Certificate Enrollment Protocol) is a PKI communication protocol which leverages existing technology by using PKCS#7 and PKCS#10. It includes several properties that allow it to do an automatic enrollment without manual interaction. The typical usage scenarios of SCEP are large network environments with many network devices that require automatic enrollment of certificates.To set the SCEP Client Configuration:



3. In the Control Center, click the SCEP Client Configuration icon.

The SCEP Client Configuration dialog box is displayed.

67

4. In the SCEP Client Configuration dialog box, use the following guidelines:

a. To Add a SCEP Client Configuration Certificate—Click Add to open the SCEP Certificate Enrollment Settings dialog box, enter an unique Certificate Name, SCEP Server URL, Enrollment challenge password, CA Distinguished Name, and then, click OK to create a SCEP certificate entry for a CA enrollment.

NOTE:

After adding a certificate, the newly added certificate entries will be displayed in the SCEP Client Configuration dialog box.

b. To Edit a SCEP Certificate—Select a certificate from the list, click Edit to configure the certificate settings.

c. To Delete a SCEP Certificate—Select a certificate from the list, click Delete, and then confirm.

d. To Enroll a SCEP Certificate Select a certificate from the list and click Enroll.

After successful certificate enrollment, the Status column will display as Enrolled and in case of failure, the Status column will display as Failed.

NOTE: Enrollment and usage of SCEP generally follows the following work flow:

1. Obtain a copy of the Certificate Authority (CA) certificate and validate it.

2. Generate a CSR and send it securely to the CA.

3. Poll the SCEP server in order to check whether the certificate was signed.

4. Enroll/re-enroll as necessary in order to obtain a new certificate prior to the expiration of the current certificate.

5. Retrieve the CRL as necessary.

68

Configuring the TCX USB VirtualizerUse the TCX USB Virtualizer Configuration Utility dialog box to view and manage the list of current device classes and to view the list USB devices enabled or denied for use on the thin client.

NOTE: You must install optional add-on such as tcx_aur, and tcx_usb to support TCX USB Virtualizer.

To configure the TCX USB Virtualizer:



3. In the Control Center, click the TCX USB Virtualizer icon.

The TCX USB Virtualizer Configuration Utility dialog box is displayed.

4. Click the Configuration tab.

Use the following guidelines:

a. Enabling USB devices—Select the Enabled check box.

b. Allowing or denying USB device classes—Select or clear the check box of a device class in the Devices list to allow or deny its use.

For example, select Smart Card Devices to permit USB smart card devices to be used to log into virtual machines.

c. Adding a USB device—Click Add to open the Add dialog box, enter a Device Name, select a class for the device from the Class list, enter the Sub Class, Vendor ID, Protocol, and Product ID, and then, click Add.

After you reboot your thin client, the name of the new device appears on the Configuration tab.

69

NOTE:

You can obtain device Class, Sub Class, Protocol, Vendor ID, and Product ID information by plugging the device into the USB port of your thin client and viewing the information displayed in the USB Devices tab.

d. Allowing or denying a USB device—Select or clear the USB device check box to allow or deny an added USB device.

NOTE:

Use caution when using TCX USB Virtualizer on a terminal server, as allowing use of a USB device is global and not session restricted.

5. Click the USB Devices tab to view the list USB devices enabled or denied for use on the thin client.

Configuring the User AdministrationUse the User Administration dialog box to view and edit both built-in defaults passwords and those defined through INI files for all users and to enable automatic login for a user. You can also manage SSH root User password and login.

While this dialog box allows you to edit the passwords and automatic login for users of the thin client, you must use central configuration (INI files) to add or delete users beyond the built-in default users provided. In general, We recommend that you use user.ini files to manage users for normal use cases. For example, a new user should be created through a user.ini file with the appropriate privilege level defined in the text file.

To configure the User Administration:



3. In the Control Center, click the User Configuration icon.

70

The User Administration dialog box is displayed.

4. Click the Users tab to configure the password management and auto login setup.

To configure, use the following guidelines:

a. Select the Change Admin Password check box to enter the new admin password and confirm it.

b. Select the Change Thinuser Password check box to enter the new thin client user password and confirm it.

c. Select the Change Guest Password check box to enter the new guest password and confirm it.

d. Select the Automatically login at startup check box to select the auto login user and enter the auto login delay time.

5. Click the SSH root User tab.

71

NOTE: The root user password can be used only for the SSH connections and the console connection is not allowed.

To edit a user password, select the change password check box you want, and then enter a new password in the New Password and Confirm Password boxes.

To configure, use the following guidelines:

a. Select the Change root Password check box to enter new root password and confirm it.

b. Select the Allow ssh ‘root’ login check box to allow ssh to remotely log in as root.

c. Select the Enable ssh check box to enable the SSH connection.

6. Click Apply.

NOTE:

The Users tab can be a convenient way to locally change the password and enable automatic login for a specific user.

72

Configuring the vWorkspaceThese settings are global settings and are applicable to the domain. Use this dialog box to configure the common settings you want for all vWorkspace connections.

When you log out and log in, you are prompted for credentials to log in to a vWorkspace session for the selected domain. When you successfully log in, all the applications and desktops on the remote session are listed on the local desktop

To configure the vWorkspace Settings:



3. In the Control Center, click the vWorkspace Settings icon.

The vWorkspace Settings dialog box is displayed.

4. Click the Network tab and specify the following details:

a. vWorkspace Server—The IP Address or the host name of the vWorkspace server.

b. Domain—The name of the domain that hosts the vWorkspace server.

c. Show All Applications—Select this to display all the published applications on the server when the user log in.

5. Click the Display tab and specify the following display details:

a. Window Size—Select the size of the window of the remote connection from the drop-down list. The default is Full Screen.

b. Window Colors—Select the color of the window from the drop-down list.

73

c. Seamless—Select this option if you want to start the application directly on the desktop of the device without the Windows background.

d. Display Connection Bar—Select this option if you want to display the connection bar on the remote connection.

e. Span Monitors—Select this option if you want the remote connection display to be spanned across multiple monitors.

6. Click the Redirection tab and specify the redirection details:

a. Com Ports—Select this option if you want the Com Ports of the local device to be redirected to the remote session.

b. Clipboard—Select this option if you want the clipboard contents of the local device to be available on the remote session.

c. Smart Cards—Select this option if you want the Smart Card devices attached to the local device to be redirected to the remote session.

d. Microphone—Select this option if you want the microphone on the local device to be available for applications being run on the remote session.

e. Printers—Select this option if you want the printers configured on the local device to be available on the remote session. This includes both physical and network printers configured on the device.

f. Audio Redirection Mode—Select the relevant option from the drop-down list. You can choose to redirect the audio on the remote session to the local device, not play the audio on the remote session on the local device, or leave the audio playing on the remote session.

7. Click the Keyboard Settings tab to configure the keyboard settings.

Specify the Keyboard Hook Mode by selecting from the drop-down list. You can choose from the following options:

74

• Local—To apply key combinations to the local device only.

• Remote—To apply key combinations to the remote session.

• Remote Only in Full Screen—To apply key combinations to the remote session only when the client is running in full screen mode.

8. Click the Drive Mapping tab to enable disk drive mapping for USB storage and CDROM devices.

Use the following guidelines:

a. Click Auto List to list all devices plugged in to the local.

You can see the USB devices that are connected to your thin client from the USB Device drop-down List.

b. Click Add to add a new entry of a device that is plugged in to the local.

c. Click Remove to remove the entry of a device that is plugged in to the local.

9. Click the EOP Features tab to configure the Experience Optimization Protocols.


a. Graphics Acceleration—Select this option to enhance the quality of graphics that you view on the remote session.

b. Flash Acceleration—Select this option to enhance the flash video quality that you view on the remote session.

c. Xtream—Select this option to accelerate EOP traffic on wide area networks (WANs). This delivers improved user experience by providing better performance of all EOP features.

10. Click the USB Redirection tab and use the following guidelines:

75

a. Select the USB Redirection check box to enable USB redirection for any particular USB storage or CDROM device.

b. Click Auto List to list all plugged in to the local.

c. Click Share All to share the USB devices with the remote session.

d. Click Unshare All to remove the sharing of devices with the remote session.

11. Click the Performance tab to configure the performance parameters with respect to speed levels of different network topologies.


a. Desktop Background—Select this to enable the desktop wallpaper over the remote session.

b. Font Smoothing—Select this to type and view clear and smooth fonts on any application on the remote session.

c. Show content of window while dragging—Select this to display the contents of the window on the remote session while dragging it.

d. Menu and Window Animation—Select this to enable the menu and window animation effects on the remote session.

12. Click OK to save the vWorkspace Global settings.

Configuring the Wyse Device Manager (WDM) SettingsUse the WDM Agent Configuration dialog box to configure the WDM server location and discovery settings.To configure the WDM server location:

1. Click the WDM icon on the Control Center.

76

The WDM dialog box is displayed.

2. Enter the WDM Server IP address.

3. Enter the Non-secure Port (HTTP) for client to server communication, default is set to 80.

4. Enter the Secure Port (HTTPS) for client to server communication, default is set to 443.

5. Select the Discovery Settings you want. For more information on WDM, see your WDM documentation.

6. Click Apply.

We recommend you reboot the thin client after configuring the settings.

Configuring the Wyse Device Agent SettingsThe Wyse Device Agent (WDA) on your thin client device supports only the features of Cloud Client Manager (CCM) device management solution. Use the Wyse Device Agent dialog box to configure the CCM server location and discovery settings.To configure the Wyse Device Agent:



3. In the Control Center, click the Wyse Device Agent icon.

The Wyse Device Agent dialog box is displayed.

4. Click the CCM tab to configure the CCM Agent settings:

77

a. In the CCM Server box, enter the URL Address of the CCM Server you want to connect to.

NOTE:

While configuring the CCM server from DHCP scope option or INI parameter, use the complete URL along with port number for CCM server value. We recommend you use complete URL when you register through Agent UI. Also, mention the MQTT server with port number.

b. In the MQTT Server box, enter the IP Address of the Message Queue Telemetry Transport (MQTT) Server.

c. In the Group Token box, enter your group registration key to manage your thin client device.

The Group registration key is a unique key for registering your thin client device. Thin clients can only register to Groups directly and must have a Group Registration Key enabled to do so.

d. Click Register to register your thin client on the CCM server.

When your thin client is successfully registered, the status is changed to Registered in green colored text next to the Registration status.

e. Click Unregister, if you want to remove your thin client from the CCM management system.

If Unregister fails, a dialog box for Force Unregister confirmation is displayed. Click Yes to forcefully unregister your device which is managed by CCM.

When you do Register or Unregister or Force Unregister from Agent UI, the applet should not be closed until Registration Status is changed accordingly.

78

5. Click the Diagnostics tab to view the WDA version, diagnostics-related information and link to support site of CCM.

After the successful registration, you can access the CCM management server user interface. Use this UI to view and manage Device Asset Details, Real-Time Commands, and Troubleshooting information of your registered thin client. For more information, see the Dell Management Console for Dell Enterprise Mobility Management and Dell Wyse Cloud Client Management Administrator’s Guide

Important:

• For add-on or image upgrade using the Firmware Server settings, the device has to be restarted twice.

• To obtain few policies such as Display Settings, Desktop Wallpaper and so on that are reflected on the device, you need to log out or restart the device. So we recommend you restart the device after publishing a policy from CCM server

.

Directing the Thin Client to CCM Server

To direct your thin client to CCM server, you must provide CCM/MQTT server details and Group registration Key. These details is discovered by Wyse Device Agent using any of the following ways:

• DHCP Scope options

• Using INI parameter

• Using the Wyse Device Agent GUI, see Configuring the Wyse Device Agent Settings

Directing the thin client to CCM Server using DHCP Scope options

The CCM/MQTT server details and Group Registration Key that are required for CCM registration can be obtained by querying the DHCP server with following option tags:

• 199 – Scope option for Group Token (type = String, value = CCM-group-key).

• 165 – Scope option for CCM server.

79

• 166 – Scope option for MQTT server.

NOTE: At the agent side, the protocol module does a DHCP discovery to get these option tags from DHCP server.

Directing the thin client to CCM Server using INI parameters

INI syntax for CCM configuration:

CCMEnable={yes,no} \CCMServer=<CCM Server URL> \GroupRegistrationKey=<tenant code-groupcode> \MQTTServer=<MQTT server>[:<MQTT port>]

NOTE: When INI discovery method is used for registering the device, if user wants to unregister the device, admin must delete the INI parameters and reboot the device first and then unregister should be done. Else admin has to do unregister twice.

For more information, see the Dell Wyse Enhanced SUSE Linux Enterprise SP3 INI Guide.

80

4Configuring Connections LocallyThis chapter provides instructions on configuring and adding connections to your Desktop for use to access the enterprise server environment available to the thin client.

NOTE:

We do not recommend using dialog boxes for configuring connections for thin client use. However, they are available in case you want to temporarily override central default configurations or unable to set up central configuation for smaller environments. In general, we recommend you use central configuration to enable you to automatically push updates and any desired default configuration to all supported thin clients in your environment. For more information, see Central Configuration Automating Updates and Configurations.

In addition, the Wyse USB Firmware Tool also provides a simple USB imaging solution for supported devices.

To open the Connection Manager:


2. to open the Connection Manager, Click Connection Manager on the Computer menu, see Using your Desktop or in the Application Browser, see Accessing Additional Features with the Application Browser.

The Connection Manager allows you to manage, connect to and add the following connections:

• Configuring the Browser Mozilla Firefox

• Configuring the Local Citrix Settings

81

• Configuring the Custom Connection Settings

• Configuring the Ericom PowerTerm TEC Settings

• Configuring the Ericom PowerTerm WebConnect Settings

• Configuring the Imprivata Settings

• Configuring the RDP Client Settings

• Configuring the SSH Connection

• Configuring the VMware View Client

• Configuring the VNC Viewer

• Connecting to vWorkspace

• Configuring the XDMCP Settings

Configuring the Browser Mozilla FirefoxUse the Web Browser Configuration dialog box to configure the browser settings.To configure the browser settings:

1. Click Add in the Connection Manager to open the Add Connection dialog box.

2. Select Browser from the list and click Next.

The Mozilla Firefox Browser Configuration dialog box is displayed.

3. Click the Network tab and specify the details:

a. Configure the description and URL, if you want the browser to open to a particular web page each time you connect.

b. Select the Auto Connect check box, if you want the browser to launch automatically after system startup.

4. Click the Window tab and use the following guidelines:

82

a. Select the Kiosk Mode check box, if you want the browser to appear without any menus or toolbars.

b. From the Windows Size list, select your preferred window size.

5. Click the Auto Reconnect tab and use the following guidelines to enable automatic reconnect after a disconnection:

a. Select the Enable Auto Reconnect check box.

b. Select the amount of time in seconds to delay the reconnection attempt after a disconnection occurs.

6. Click OK to save the settings.

Configuring the Local Citrix SettingsUse the Citrix Connection Settings dialog box to configure the citrix settings locally on your thin client.

NOTE:

When you use multiple ICA connections, you can use the ICA Connection Center to manage the open ICA connections. For more information on using multiple ICA connections, see the Knowledge Base available on the Dell Wyse Support Site.

83

HTTPS://SUPPORT.WYSE.COM/OA_HTML/IBUUNISRCH.JSP?JTFM0=_0_1_0_-1_F_NV_&JFN=ZGBDCB2AFF6FFF339A9F96AE9A03F707BD7111ADE39413D00965A586F5D24D0089F1F72539E485C3073A02009E16F37D4D28&OAS=ELJKGUCKNDAYDFCQ6JDSLG..

To configure the citrix settings;


2. Select Citrix from the list and click Next.

The Citrix Connection Settings dialog box is displayed.


a. Server—Select this option to connect to your Citrix desktop on the Citrix Server.

This option also supports Smart Card login feature. The Smart Card Login check box is available in the Login tab.

b. Published Application — Select this option to directly launch a published application on your Citrix Desktop when you connect to the Citrix Server.

84

If you select this option, then the Published Apps field is enabled in the Login tab, and you can specify a published application.

c. Storefront — This option is applicable only for Citrix XenDesktop 7.0 and above. Select this option to specify the name of a Store Front server to display the applications available in that sever.

85

This option also supports Smart Card login feature. The Smart Card Login check box is available in the Login tab.

d. Description—Enter a description for the connection.

e. Network Protocol—Select a network protocol.

f. Browser Server—Enter the Browser Server name that can be a list of server names with each name separated by a semi-colon.

NOTE:

Multiple store names is not supported.

You do not need to enter a browser server name if you do not want to connect to either a published application or a server by name. Generating an ICA connection to a server using a server name in the Server text box for the connection does not require a Browser Server address, as long as the DNS information is properly.

g. If you select the Server option in step a, the Server field is displayed. Click Refresh to refresh the server list and select a server from the drop-down list. If you select the Published Application, or Storefront options in step a, the Store Name field is displayed. Click Refresh to refresh the Store Name list and select a Store Name from the drop-down list

NOTE:

You can enter the IP address of the target server as long as there is no need to resolve a name. Storefront connections require HTTPS configuration.

4. Click the Connection tab and select the following check boxes to configure the connection settings:

86

a. Enable compression—Enables compression.

b. Low bandwidth–Enables low-bandwidth optimization.

c. Enable sound— Enables sound.

d. Ping before connect—Pings the connection to see if it is reachable before the connection is attempted.

e. Enable Middle Button Paste—Enables middle button paste for the mouse.

f. From the Encryption list, select an encryption type, the default is set to Basic.

5. Click the Window tab to select the Window Colors and the Window Size you want.

87

6. Click the Application tab and specify the details:

a. Command Line—Enter the command line for the program on the server.

b. Working Directory—Enter the working directory for the program.

88

Enter the command line and Working Directory of the application, if you select the Published Application option on the Network tab.

7. Click the Login tab and specify the following details to configure the credentials used to automatically log in to the server:

If the Server option is selected in the Network tab then Login tab appears as shown here:

If the Published Application option is selected in the Network tab then Login tab appears as shown here:

89

If the Storefront option is selected in the Network tab then Login tab appears as shown here:

90

NOTE:

The User Name, Password, Domain, and Serial Number fields are optional. If the User Name, Password, and Domain fields are blank, interactive login is required and the you must enter the information while logging in.

The User Name, Password, and Domain fields are disabled in the login tab when the Storefront option is selected in the Network tab.

a. Smart Card Login—Select this to enable smart card login to the thin client. The User Name, Password, and Domain are not required. The Smart Card Type field is enabled where you can select the type of smart card you are using.

• If you select Server option in the Network tab, the Smart Card Type field is disabled. You are prompted to enter the Smart card login credentials after you connect to the server.

• If you select Storefront option in the Network tab, the Smart Card Type field is enabled. Use this option to select the type of smart card you are using.

NOTE:

Smart Card Login is applicable only for Server and Storefront Connections.

b. User Name—Enter a user name for the connection. This field is disabled if you enable Smart Card Login.

c. Password—Enter the password. This field is disabled if you enable Smart Card Login.

d. Domain—Enter the domain name. This field is disabled if you enable Smart Card Login.

e. Smart Card Type — This field is enabled when you select Smart Card Login. Select the type of smart card you are using from the drop-down list.

NOTE: The Smart Card Type option is disabled, if you select the server option in the Network tab.

f. Click Refresh against Published Apps after you select the Smart Card Type.

You are prompted to enter the PIN for the Smart Card. Enter the PIN and click Logon. The Published Apps field displays the applications and desktops on the server.

g. Published Apps —This field is enabled only when you select the Published Applications , or Store Front options in the Network tab. The drop-down list displays the applications and desktops available on the Citrix or Storefront servers.

When you select an application or desktop on the Citrix or Storefront server, the application or desktop launches directly when you connect to the server.

h. Serial Number—Enter the serial number for Metaframe environments that require the thin client license serial number.

i. Connect automatically after login—Enables an automatic connection after successful login to the thin client.

NOTE: If you select the Storefront option in the Network tab, and do not enable Smart Card Login, then when you click Refresh against Published Apps, you are prompted to enter the domain user name and password. After you enter the domain user name and password, the Published Apps drop-down list displays the applications and desktops available on the Storefront server.

8. Click the Auto Reconnect tab and follow the guidelines:

91



9. Click the Firewall tab to configure an alternate address for firewalls:

92

a. Automatically detect proxy—Select to automatically detect the proxy type.

b. Use Alternate Address for Firewalls—Select Yes to use an alternate address for firewalls.

c. Proxy Type—Select a proxy type.

d. Proxy Address and Port—If you select Secure (HTTPS) or SOCKS as the Proxy Type, you must enter the Proxy Address and Port.


Configuring the Custom Connection SettingsUse Custom Connection Configuration dialog box to configure the Custom Connection settings.To configure the custom connection settings:

1. Click Add to open the Add Connection dialog box.

2. Select Custom from the list and click Next.

The Custom Connection Configuration dialog box is displayed.


a. Description — Enter the description.

b. Command Line — Enter the command line for the program on the server.

c. Run in terminal window — Select this check box to run the application in a terminal window. This option is used with applications that require a terminal window such as console program.

Run in terminal window is

d. Auto Connect — Select this option to start the connection automatically after system startup.


93




The connection appears in the Connection Manager and is ready to use.

Configuring the Ericom PowerTerm TEC SettingsUse the Terminal Emulator Configuration dialog box to configure the terminal emulator client settings.To configure the terminal emulator client settings:


2. Select Ericom_PowerTerm from the list and click Next.

The Terminal Emulator Configuration dialog box is displayed.

3. Click the Network tab and configure the network details:

94

a. Network Connection or Serial Connection—Select Network Connection for connections over TCP/IP, or Serial Connection for connections through a serial.

b. Description—Enter a description for the connection.c. Host Enter a host name or IP Address or select one from the list. Host can be populated from the

global Ericom — PowerTerm TEC connection application.d. Port—Enter the port of the host.e. Terminal Type—Select a terminal type.f. Terminal Name—Enter a name for the terminal.g. Save Configuration Locally—Saves the font, color, key-mapping and other settings of the Ericom

— PowerTerm TEC application locally.

4. Click the Window tab and select the Window Size you want.

95

5. Click the Connection tab and configure the connection settings:

a. Auto Connect—Starts the connection automatically after system startup.

b. Ping Before Connect—Pings the connection to see if it is reachable before the connection is attempted.

c. Auto Reconnect—Reconnects automatically after a disconnection occurs.

d. Delay before retrying—Select the amount of time in seconds to delay the reconnection attempt after a disconnection occurs.

6. Click the Settings tab and enter the script name and path to automatically run script during user login.

7. Click the Remote Configuration tab and specify the details:

96

a. Remote Configuration Filename—Enter the remote configuration filename for the connection.

b. Remote Configuration Path—Enter the remote configuration path for the connection.

8. Click the View tab and select the check boxes for items that will be displayed when using the connection.

The available check boxes are Show Menu, Show Toolbar, Show Status, and Show Buttons.


97

Configuring the Ericom PowerTerm Webconnect SettingsUse the Ericom - PowerTerm Webconnect dialog box dialog box to configure the settings.To configure the Ericom PowerTerm Webconnect settings:


2. Select Ericom _Wenconnect from the list and click Next.

The Ericom – PowerTerm WebConnect dialog box is displayed.

3. Enter the Description, Server name, Username, and Password.

NOTE: The Server can be a host name or IP Address.


Configuring the Imprivata SettingsImprivata provides Single Sign-on functionality using the Proximity Card where users log in to their application by a single tap of the card on the card reader. The Imprivata Client is configured with the URL of the OneSign server that contains user configurations. Imprivata Fast User Switching (FUS) and Imprivata Finger Print readers for authentication are also supported, see Imprivata documentation for full details.To configure the Imprivata Client Settings:


2. Select Imprivata_Conn from the list and click Next.

The Imprivata OneSign Configuration dialog box is displayed.


98

a. OneSign Server—Enter the server address (IP or FQDN).

b. Auto Connect—Select this to start the connection automatically after system startup.

4. Click the Citrix tab and configure the connection settings:

a. Enable Compression—Enables compression.

b. Enable Sound—Enables sound.

c. Enable Middle Button Paste—Enables middle button paste for the mouse.

5. Click the VMware View tab and configure the connection settings:

99

a. Enable Fips Mode (applies only to PCoIP)—Enables Fips Mode.

b. Enable All Monitors—Enables all monitors.

6. Click the Fast User Switching tab and to enter the credentials used to automatically log in to the connection:

a. User Name—Enter a user name for the connection.

b. Password—Enter the password.

c. Domain—Enter the domain name.

d. PNAgent URL—Enter the PNAgent URL.

e. Published Resource—Enter the location of the published resource.


100

Configuring the RDP Client SettingsUse the Remote Desktop (RDP) Configuration dialog box to configure the RDP client settings:To configure the RDP client settings:


2. Select RDP from the list and click Next.

The Remote Desktop (RDP) Configuration dialog box is displayed.

3. Click the Network tab and configure the network settings:

a. Description—Enter a description for the connection.

b. Server—Enter a server name or IP address.

c. Ping Before Connect—Pings the connection to see if it is reachable before the connection is attempted.

d. Notify When Disconnected—Notifies you when the connection is disconnected.

4. Click the Window tab to select the Window Colors and the Window Size you want.

101

5. Click the Login tab and configure the credentials used to automatically log in to the connection:

a. Use smart card—Enables the use of a smart card when connecting.

b. Network Level Authentication—Enables Network Level Authentication (NLA) and is required if NLA is enabled on your remote computer. Your remote computer requires NLA user authentication before you establish a full Remote Desktop connection and the login screen is displayed.

c. User Name—Enter a user name for the connection.

d. Password—Enter the password.

e. Domain—Enter the domain name.

f. Connect automatically after login— Enables an automatic connection after successful log in to the thin client.

102

NOTE:

The Username, Password, and Domain fields are optional. If you leave any of these fields blank, interactive login is required and users must enter the information at login.

g. Use RD Gateway Settings—Select to enable and configure an RD Gateway to connect to your remote computers, if required by your network administrator and then do one of the following:

• RD Server, and then Use Remote Desktop Credentials for RD Gateway—Enter the RD Server IP address or URL of the Remote Desktop Gateway server, and then select the Use Remote Desktop credentials for RD Gateway check box, if the server credentials are the same credentials as your RDP host remote computer credentials.

• RD Server, and then Manually enter RD User Name, RD Password, RD Domain—Enter the RD Server IP address or URL of the Remote Desktop Gateway server, clear the Use Remote Desktop credentials for RD Gateway check box and then manually enter the Username, Password, and Domain of the RD Gateway server, if required.

NOTE: An RD Gateway server is a type of gateway that enables authorized users to connect to remote computers on a corporate network from any computer with an Internet connection. An RD Gateway server enables Remote Desktop connections to a corporate network from the Internet without having to set up virtual private network (VPN) connections. Ask your network administrator whether you need to specify an RD Gateway server.


a. Compression—Enables compression.

b. NT4 compatible—Enables RDP protocol version 4.

c. Low bandwidth—Enables low-bandwidth optimization.

d. Sound—Select an audio source from the list for the connection, either Local or Remote.

e. Encryption Level —Select an encryption level, either Normal or None.

NOTE:

For servers with data encryption settings, you must select Normal for the encryption level.

7. Click the Experience tab to configure the experience settings for a user desktop.

103

NOTE:

Consider your network restrictions when you select options on the Experience tab. For example, be sure to configure the settings appropriately for your bandwidth level and so on.

To configure the experience settings, select the following check boxes:

a. Grab ALL keyboard events when window has focus—Enables all keyboard events within the connection window to always be sent to the connection’s applications.

b. Speed Level—Select a speed level to describe the network connection.

c. Desktop Background—Displays the desktop background.

d. Font Smoothing—Enables font smoothing.

e. Menu and window animation—Enables menu and window animation.

f. RemoteFX—Enables a a RemoteFX session.

NOTE: To use an RDP USB redirection type you must use a RemoteFX session. RDP USB is not supported using a standard RDP session.

g. Show contents of window while dragging—Shows the window content when the user drags the window on screen.

h. Subsampling—Enable color space conversion required for chroma subsampling.

Chroma Subsampling is the practice of encoding/compressing images for a higher transmission experience.


104

a. Select the Enable Auto Reconnect check box to enable automatic reconnect after a disconnection.


9. Click the Application tab enter the Remote Application name, Command Line, and Working Directory of the application that will run at the beginning of a session.


a. Remote Application—Enter the name of the remote application to seamlessly launch the application running on the remote session on your local desktop.

Remote Applications Integrated Locally (RAIL) is an RDP 6.0 feature that presents a remote application running remotely on the remote server as a local user application on the client system.

b. Command Line—Enter the command line for the program on the server.

105

c. Working Directory—Enter the working directory for the program.

10. Click the Drive Mapping tab and use it to map share names on the server to USB mass storage devices attached to the thin client, and to view and manage the list of current server share names including the drive information mapped on the thin client.

To add a share name:

a. Click Add to open the RDP Drive Map dialog box.

b. Enter a Share Name.

c. From the list, select the Drive type such as USB Floppy, USB CDROM, USB Disk or Memory Stick, or Local or Mounted Disk.

d. If required, enter the directory on the USB device to access in the Base Directory text.

e. Click OK to add the Share Name to the list of available Share Names.

To edit or delete a Share Name, select a Share Name from the list of available Share Names and do one of the following:

• Edit—Click Edit and configure the Share Name.

• Delete—Click Delete to remove the Share Name.

106

NOTE: If you select Redirect all USB drives to folders in Share named ‘WyseUSB’ check box, you can redirect all your USB drives such as USB Floppy, USB CDROM, USB Disk or Memory stick, and local or mounted disk to the folders in share named WyseUSB.

11. Click the Device Mapping tab to map devices to ports on the thin client, and to view and manage the list of current devices that are mapped on the thin client.

To add a device:

a. Click Add to open the Add Port Mapping dialog box.

b. Select a port from the Port list.

c. Select the directory of the device to access from the Device list.

d. Click OK to add the device to the list of available devices.

To delete a device, select a device from the list of available devices, and click Delete.

.


107

Configuring the SSH ConnectionUse the SSH Configuration dialog box to configure the SSH connections.To configure the SSH connection:


2. Select SSH from the list and click Next.

The SSH Connection Configuration dialog box is displayed.



b. Host—Enter a host name or IP address.

c. Remote Username—Enter an username.

d. Remote Command—Enter the command to run on the server.


108


b. Ping Before Connect—Pings the connection to see if it is reachable before the connection is attempted


d. Delay before retrying—Select the amount of time to delay the reconnection attempt after a disconnection occurs.


Configuring the VMware View ClientUse the VMware View Client Settings dialog box to configure the VMware View Client settings.To configure the VMware View Client settings:


2. Select VMware_ViewClient from the list and click Next.

The VMware View Client Settings dialog box is displayed.


a. Description — Enter a description for the connection.

b. Host — Enter the host name or IP address of the VMware View Server.

c. Port — Enter the port of the host.

d. Use Secure Connection (SSL) — Select to use an SSL connection.

e. Enable interactive mode — If you select this option, then after a successful connection to the server, the View Client displays all the published application and desktop icons. You can launch the applications or desktop sessions based on your choice.

109

If you do not select this option, then the Published Applications option is enabled in the Login tab, and selecting that option enables you to directly launch the application or desktop you specify.

f. Lock the Server URL/Host field — Select this option to lock the server URL.

4. Click the Secure Preferences tab and select any of the options that determine how the client should proceed when it cannot verify that your connection to the server is secure.

NOTE:

We recommend not to change this setting unless instructed to do so by your system administrator.

5. Click the Connection tab and specify the following details:

110

a. Protocol — Select PCOIP or RDP.

If you select RDP, then the Enable NLA option is enabled. Selecting this option enables Network Level Authentication. However, for this option to work, the same option should be enabled on the remote server as well.

When this option is enabled, you must provide the username and password in the Login tab while configuring.

b. Ping Before Connect — Select this option to ping the connection to see if it is reachable before the connection is attempted.

c. Connect automatically after login — Select this option to enable an automatic connection after successful login to the thin client.

d. Auto Reconnect — Select this option to reconnect automatically after a disconnection occurs.

e. Delay before retrying — Select the time period in seconds to delay the reconnection attempt after a disconnection occurs.

6. Click the Desktop tab and specify the following details:

111

a. Fullscreen Mode — Select this option to view the remote session in full screen mode in all the monitors.

b. Window Size — Select a window size if you do not want to use the full screen.

c. Disable Fullscreen drop down menu bar — Select this option to disable the drop-down menu bar in the full screen mode.

d. Disable Exit on disconnect or when an error occurs while connecting — Select this option if you do not want the Horizon Client to retry connecting if there is a connection error. You can typically select this option if you use kiosk mode.

7. Click the Login tab and specify the following details:

112

a. User Name — Enter a user name for the connection.

b. Password — Enter the password.

c. Domain Name — Enter the domain name.

d. Published Application — This option is enabled only if you disable the Enable Interactive Mode option in the Network tab. If you select this option, then the Desktop field changes to Application.

Selecting this option directly launches the application you specify on the remote session.

e. Desktop/Application — Enter the desktop or application name.

8. Click OK to save the connection settings.

The VMware View Connection icon is displayed on the Connection Manager and is ready to use.

To view the VMware Horizon Client Window:

1. Click the VMware View Connection icon on the Connection Manager, and click Connect. The VMware Horizon Client screen displays an icon with your server IP details.

113

2. Double-click the active server icon. You are prompted to enter the server login credentials.

114

3. Enter the login credentials. The published desktops and applications are displayed on the VMware Horizon Client Window.

115

Configuring the VNC ViewerUse the VNC Viewer Settings dialog box to configure the VNC Viewer settings.To configure the VNC Viewer settings:


2. Select VNC_Viewer from the list and click Next.

The VNC Viewer Settings dialog box is displayed.


116


b. Host—Enter a host name or IP address.

c. Connect to—Select a connection type of either Display number to enter the display number to connect to the server, or Port number to enter the port number to connect to the server.

d. Ping Before Connect—Pings the connection to see if it is reachable before the connection is attempted.


a. Compression Level—Select a compression level for encoding.

b. Shared—Enables or disables a shared connection.

c. View Only—Blocks mouse and keyboard events for a view-only connection.

5. Click the Window tab and configure the window settings:

117

a. Full Screen—Opens the connection in a full-screen window.

b. Color Depth—Controls how many colors to display with each on-screen pixel.

c. JPEG Quality—Specifies the image quality for encoding.

6. Click the Login tab and configure credentials used to automatically log in to the VNC:

a. Password—Enter the password to connect to the VNC server.

b. Connect automatically after login—Enables an automatic connection after successful log in to the thin client.


118

Connecting to vWorkspacevWorkspace simplifies the deployment & management of virtual desktops.

You can connect to the vWorkspace Servers in two ways:

• Using a browser

• Using Connection Manager

Connecting to the vWorkspace Server Using a Browser

To connect to the vWorkspace Server using a browser:

1. Open any internet browser on your local device and enter the URL of the vWorkspace server in the Address Bar.

The login screen is displayed.

2. Specify the user name, password, and domain and click Login.

The published applications and desktops are listed.

119

3. Double-click on a desired application or desktop to open it.

Creating the vWorkspace Server Connection Using Connection Manager

To configure the vWorkspace Connection parameters:


2. Select VWORKSPACE from the list and click Next.

The vWorkspace Configuration dialog box is displayed.


120

a. Description—A short description for your connection.

b. Server—The IP Address or the Host Name of the remote server.

NOTE:

Only these two options in the Network tab are mandatory for creating a vWorkspace connection. The rest of the options in the other tabs are optional.

4. Click the Window tab and specify the following details:

a. Window Colors—Select the color of the window from the drop-down list.

b. Window Size—Select the size of the window of the remote connection from the drop-down list. The default is Full Screen.

c. Seamless—Select this option if you want to start the application directly on the desktop of the device without the Windows background. This option is applicable only to the published application and not to the desktop.

d. Span Monitors—Select this option if you want the remote connection display to be spanned across multiple monitors

e. Display Connection Bar—Select this option if you want to display the connection bar on the remote connection. This option is enabled only when you select the Full Screen as the Window Size

5. Click the Login tab and specify the login details:

121

a. Username—The user name to log in to the remote session.

b. Password—The password to log in.

c. Domain—The name of the domain that hosts the remote server.

d. Published Apps—From the drop-down list, select the desktop or application that you want to start. When you click on Refresh, the drop-down list gets populated with the applications and desktops available on the remote server that you have specified in the Network tab.

This is one way of selecting an application. However, you need not specify the credentials in the screen. In such a case, when your connection to the remote server is successful, you are prompted to enter the credentials. After you log in, the list of published applications and desktops are displayed for you to choose an application or a desktop.

e. Connect automatically after login—Select this option to directly connect to the application or desktop after you log in

6. Click the Experience tab and specify the Experience Optimization Protocol options:

122

a. Graphics Acceleration—Select this option to enhance the quality of graphics that you view on the remote session.

b. Flash Acceleration—Select this option to enhance the flash video quality that you view on the remote session.

c. Xtream—Select this option to accelerate RDP and EOP traffic on wide area networks (WANs). This provides for an improved user experience by providing faster RDP screen responses and improved performance of all EOP features

7. Click the Local Resources tab to configure the locally connected devices and specify the following details:

a. Sound—Select the relevant option from the drop-down list. You can choose to redirect the audio on the remote session to the local device, not play the audio on the remote session on the local device, or leave the audio playing on the remote session.

b. Keyboard HookMode—Specify the Keyboard Hook Mode by selecting from the drop-down list. You can choose from the following options:

• Local—To apply key combinations to the local device only.

• Remote—To apply key combinations to the remote session.

• Remote Only in Full Screen—To apply key combinations to the remote session only when the client is running in full screen mode.

c. Smart Cards—Select this option if you want the Smart Card devices attached to the local device to be redirected to the remote session. This feature is supported only for the application with in a session and not for logging in to a vWorkspace session using this smart card.

d. Microphone—Select this option if you want the microphone on the local device to be available for applications being run on the remote session.

e. Disk drives—Select this option to enable disk drive mapping for USB storage and CDROM devices. You can also enable this feature using the vWorkspace global settings. You can list and map all USB storage devices currently plugged into the system and also add and remove devices. For more information, see step 8 of Configuring the vWorkspace.

If you select this option, and no devices are plugged in, all the default drives of the local client device are mapped to the remote session.

f. Printers—Select this option if you want the printers configured on the local device to be available on the remote session. This includes both physical and network printers configured on the device.

123

g. Com Ports—Select this option if you want the Com Ports of the local device to be redirected to the remote session.

h. Clipboard—Select this option if you want the clipboard contents of the local device to be available on the remote session.

i. USB—Select this option to enable USB redirection for any particular USB storage or CDROM device. You can also enable this feature using the vWorkspace global settings under the USB Redirection tab. You can list all the USB devices, and individually enable every device to perform redirection. You can also click the Share All and Unshare All buttons to enable or disable redirection.

8. Click the Performance tab and specify the following performance enhancement parameters:

a. Speed—Select the speed level of the network from the drop-down list. The default speed level is LAN. If you want a performance feature of your choice, set the speed level to Custom.

b. Desktop Background—Select this option to enable the desktop wallpaper over the remote session.

c. Font Smoothing—Select this option to type and view clear and smooth fonts on any application on the remote session

d. Show content of window while dragging—Select this option to display the contents of the window on the remote session while dragging it.

e. Menu and Window Animation—Select this option to enable the menu and window animation effects on the remote session.

9. Click the Auto Reconnect tab and enable automatic reconnection parameters:

124

a. Select Enable Auto Reconnect, if you want to automatically reconnect to the remote session.

b. Specify the retry timings in seconds.

10. Click OK to save the configuration settings.

Configuring the XDMCP SettingsUse the XDMCP Settings dialog box to configure the XDMCP client settings:

NOTE: This feature is supported, only when you install the optional xdmcp add-on.

To configure the XDMCP client settings:


2. Select XDMCP from the list and click Next.

The XDMCP Settings dialog box is displayed.


125


b. Host—Enter a host name or IP address of an XDMCP server.

c. Connect Mode—Select a connection style: Query, Chooser, or Broadcast.d. Connect Program—Select the program through which the connection is made: Xnest or Xserver.

4. Click the Window tab and use it to select the Window Colors and the Window Size you want.


126


b. Ping Before Connect—Pings the connection to see if it is reachable before the connection is attempted.


d. Delay before retrying—Select the amount of time to delay the reconnection attempt after a disconnection occurs.


7. Click the Help tab to view the information on XDMCP settings. For example, “Query mode directly connects remote server so IP is needed”.

127

5Accessing Additional Features with the Application BrowserThis chapter provides detailed information about using the Application Browser to access the applications, audio and video, and system features installed on the thin client.

NOTE:

For a list of supported addons you can install, contact Dell. For information on adding and managing addons, see Configuring Thin Client Settings Locally and Configuring the Add-on Manager.

Clicking More Applications in the Computer menu, opens the Application Browser, see Using your Desktop.

The following additional features can be accessed using the Connection Manager:

• Using the Diagnostic Tool

• Using the Diagnostics Log Viewer

• Configuring the Volume Control Settings

• Setting the Bluetooth Preferences

• Taking Screenshots

• Setting the VNC Server Preferences

• Viewing XTerm

NOTE:

To open the Connection Manager, click the Connection Manager icon in the Application Browser. You can configure and add connections to your Desktop using the Connection Manager, as described in Configuring Connections Locally.

128

Important:

• The Custom GNOME feature allows you to use INI parameter settings to customize the display and arrangement of the Control Center and Application Browser application icons for your users. For more information, see Reference Guide: Dell Wyse Enhanced SUSE Linux Enterprise SP3 INI Guide.

Using the Diagnostic ToolUse the Diagnostics dialog box to select and use a diagnostic tool.To select and use a diagnostic tool:

1. In the Application browser, click Diagnostics.

The Diagnostics dialog box is displayed.

2. In the Diagnostics dialog box, use the following guidelines:

a. Ping—Enter or select a destination from the Destination list and click Ping.

b. Trace Route - Enter or select a destination from the Destination list and click Trace Route.

The diagnostic information appears on the Trace Route tab.

c. Temporary Settings—View the temporary settings of the thin client.

d. Permanent Settings—View the permanent settings of the thin client.

e. wlx.ini/wnos.ini—View the wlx.ini or wnos.ini file as copied to the thin client.

f. user.ini—View the user.ini file as copied to the thin client.

129

Using the Diagnostics Log ViewerUse the Diagnostics Log Viewer dialog box to display and export log files to a USB key or remote server.To display and export log files:

1. In the Application browser, click Diagnostics Log Viewer.

The Diagnostics Log Viewer dialog box is displayed.

2. The Diagnostics Log Viewer displays the related messages of the log file name you have highlighted in the Log Name list when you click the name to highlight. To include debug messages for log files, select the More Logs check box, click OK, and then restart the device for the change to take effect. Now when you highlight the log file you want to display, debug messages will also display in the results pane.

3. You can export the log files you select by clicking all or any of the check boxes you want in the Log Name list to a:

• USB Key—Attach a USB key to the client, open the Diagnostics Log Viewer, select the check boxes you want in the Log Name list, select USB Key, and then click Next to use the Export Logs dialog box.

• Remote Server—Select the check boxes you want in the Log Name list, select Remote Server, and then click Next to use the Export Logs dialog box.

NOTE:

You can export the log files to a default server that is server from the default registry or to any server by specifying the URL path and server credentials.

Important: Permanent and temporary registry logs will be exported by default.

130

Configuring the Volume Control SettingsUse the Volume Control dialog box to configure the volume control settings.To configure the volume control:

1. In the Application browser, click Volume Control.

The Volume Control dialog box is displayed.

2. Use this dialog box to select Playback, application recording sounds, Output Devices-left and right sounds, Input Devices, and Configuration or profile volume preferences.

3. You can use the Show list on the Playback, Recording, Output Devices, and Input Devices tabs to select which items you want to be shown.

NOTE:

For these settings to take effect, sound must be supported and enabled on the server used for ICA connections, RDP connections, VMware connections or vWorkspace connections. Sound requires significant bandwidth that may not be available on some WAN and dial-up connections.

Setting the Bluetooth PreferencesUse the Bluetooth Preferences dialog box to view and select Bluetooth adapters that are plugged in to the thin client with Bluetooth module.

NOTE: This feature is supported ,only when you install the optional bluetooth add-on.

To configure the bluetooth preferences:

1. In the Application browser, click Bluetooth.

The Bluetooth Preferences dialog box is displayed.

131

2. Select the Show Bluetooth icon check box to display the Bluetooth icon on the thin client desktop.

3. Click the Receive Files button to open and use the Personal File Sharing Preferences dialog box. Use this to configure Bluetooth preferences for file sharing between your thin client and your Bluetooth connections.

Use the Personal File Sharing Preferences dialog box to configure Bluetooth settings to:

• Share Files over the Network.

• Share Files over Bluetooth.

• Receive Files over Bluetooth.

The Personal File Sharing Preferences dialog box is shown:

132

Taking ScreenshotsUse the Take Screenshot dialog box to configure the screenshot preferences and effects.To configure the Take screenshot preferences:

1. In the Application browser, click Take Screenshot.

The Take Screenshot dialog box is displayed.

133

2. Click Grab the whole desktop option to grab the entire desktop.

3. Click Grab the current window option to grab the window that is currently on display.

4. Click Select area to grab option to grab a selected area.

5. Select the Include pointer check box to include the pointer in the screenshot.

6. Select the Include the window border check box to include the window border in the screenshot.

7. After setting your preferences, click Take Screenshot to take the screenshot and open the Save Screenshot dialog box that allows you to name and save the file.

Setting the VNC Server PreferencesUse the VNC Server Preferences dialog box to set the VNC Server preferences. select Sharing, Security, and Notification VNC Server preferences for use with remote administration. For example, you can set the Security password that in this dialog box. Security password is the password an administrator must use when shadowing the thin client.To Set the VNC Server Preferences, use the following details:

134

1. Sharing—Use this option to select the Allow others users to view your desktop check box.

2. Security—Use this option to set the security options such as enabling the user to enter a security password.

3. Notification Area—Use this option to click either Always display an icon or Only display an icon when there is someone connected or Never display an icon buttons.

Administrators Only: Details on Using TightVNC Viewer for Remote Administration to Shadow/Monitor a Thin Client.

TightVNC Server is installed locally on the thin client. It allows a thin client to be shadowed/operated/monitored from a remote machine on which TightVNC Viewer is installed, TightVNC Viewer is available from the TightVNC Web site; it is also included as a component of WDM software and must be installed on the remote/shadowing machine before use.

TightVNC Server and Viewer allow a remote administrator to configure or reset a thin client from a remote location rather than making a personal appearance at the thin client site. VNC is intended primarily for support and troubleshooting purposes. TightVNC Server starts automatically as a service at thin client startup. The service can also be stopped and started by using the Services window.

The services window can be opened by clicking Start → Control Panel → Administrative tools → Services.

Before an administrator on a remote machine on which TightVNC Viewer is installed can access a thin client with TightVNC Server, the administrator must know the:

• IP Address or valid DNS name of the thin client that is to be shadowed/operated/ monitored, see Viewing System Information. To obtain the IP address of an administrator thin client, pause the pointer over the VNC icon in the system tray of the Administrator taskbar.

• Security Password of the thin client that is to be shadowed/operated/monitored.

To shadow a thin client from a remote machine:

a. Open the New Tight VNC Connection dialog box, for example, Click Start → All Programs → TightVNC → TightVNC Viewer.

135

b. Enter the IP address or valid DNS name of the thin client that is to be shadowed/operated/monitored. You can also set other options using the command buttons.

c. Click OK to open the VNC Authentication dialog box.

d. Enter the Security Password of the thin client that is to be shadowed and click OK. The thin client that is to be shadowed/operated/monitored will be displayed for the administrator in a separate window on the remote machine. Use the mouse and keyboard on the remote machine to operate the thin client just as you would if you were operating it locally.

Viewing XTermXTerm is the standard terminal emulator for the X Window System. Use the terminal emulator window for X to access a text terminal and all its applications such as command line interfaces (CLI) and text user interface applications.To use the Xterm option:

1. In the Application browser, click Xterm.

The terminal emulator window is displayed.

136

2. Type help and press Enter to display a verbose message describing XTerm options.

137

ACentral Configuration: Automating Updates and ConfigurationsThis appendix describes how to set up your environment to provide your thin clients running Dell Wyse Enhanced SLE with automatic updates and configurations.

It includes:

• How INI files Are Employed

• Setting Up Automatic Configurations and Updates

NOTE:

Dell thin clients do not require device management software. They are configured to obtain their IP address, as well as the location of firmware and configuration instructions, from a DHCP server. However, you can use WDM or the Dell Wyse USB Firmware Tool for a more hands-on management of client configurations and updates. For information about configuring thin clients to communicate with a WDM server, see Configuring the WDM and related INI parameters in Reference Guide: Dell Wyse Enhanced SUSE Linux Enterprise SP3 INI Guide.

Important:

If you have cloud clients running on different platforms, for example Z class, R class in the same network, see Mixed Environment Imaging-An Enhanced Method of Upgrading.

How INI files Are EmployedINI files that are created and maintained by the network administrator, determine how the thin client is configured and updated. The thin client accesses INI files from the server during the initialization process. Typically, INI files are accessed through FTP, HTTP, and HTTPS; if no protocol is specified, the default is anonymous FTP.

Important: The INI file processing hierarchy is as follows:

• Scenario 1 — MAC.ini exists. The MAC.ini file is processed and if the Include=WLX.ini statement is included, then the WLX.ini file is processed.

• Scenario 2 — MAC.ini exists and {username}.ini exists. The MAC.ini file is processed and if the Include=WLX.ini statement is included, then the WLX.ini file is processed. Once the credentials are provided, the {username}.ini file is processed.

• Scenario 3 — WLX.ini exists. The WLX.ini file is processed.

• Scenario 4 — WLX.ini exists and {username}.ini exists. The WLX.ini file is processed. Once the credentials are provided, the {username}.ini file is processed.

• Scenario 5 — No ini files exist. Local configuration is applied.

INI files are employed as follows:

139

• wlx.ini — This is the global INI file. One wlx.ini file is available to all users. It contains global parameters for all thin clients accessing the server. If the operating system cannot find wlx.ini, it defaults to wnos.ini.

• {username}.ini — This file is unique to each user. The {username}.ini file contains the connection profile for each user. Parameters in the user profile generally supersede the identically named global parameters.

• MAC.ini — This file can be used for device-specific configuration. If the thin client locates this INI file that is stored in the same directory as wlx.ini, wlx.ini is not accessed, unless you use the include=wlx.ini parameter.

NOTE:

The placement of the include=wlx.ini parameter within the MAC.ini file dictates which value takes priority for a same specific parameter that is contained in both the wlx.ini file and the MAC.ini file but is defined differently that is different values for the same parameter.

For example, if the wlx.ini file has parameterA=valueB, and the MAC.ini file has the same parameterA=valueC, then:

– If the include=wlx.ini parameter is included in the MAC.ini file before the parameterA=valueC statement, then the wlx.ini parameterA=valueB is discarded and parameterA=valueC from the MAC.ini file is the final value used.

– If the include=wlx.ini parameter is included in the MAC.ini file after the parameterA=valueC statement, then the MAC.ini parameterA=valueC is discarded and parameterA=valueB from the wlx.ini file is the final value used.

When a thin client is initialized, it accesses the global wlx.ini file. When a user logs in, the thin client access the user’s unique {username}.ini file. For detailed information on constructing and using INI files, see Reference Guide: Dell Wyse Enhanced SUSE Linux Enterprise SP3 INI Guide.

NOTE:

If both PNLite and a user profile are being used, the username must be defined in the Windows domain that is used. Also the password must be the same for the domain and the profile.

Setting Up the Automatic Configurations and Updates

For a Dell thin client running Dell Wyse Enhanced SLE to successfully access INI files and update itself from a server, you must set up the server with the correct folder structure where the INI files and other update files are located, direct the thin client to the server, and then reboot or start the thin client.

After DHCP and servers are configured and available, the thin client checks at each restart to see whether or not any updates are available on a predefined server. If updates are available, the updates are automatically installed.

NOTE: DCHP Option #161 specifies the server URL, DCHP Option #162 specifies the root path to the server.

This involves two tasks:

1. Preparing the Root Directory and Folder Structure on the Server

2. Directing the Thin Client to the Server

140

Preparing the Root Directory and Folder Structure on the Server

To prepare the root directory and folder structure on the server:

1. Set up the following folder structure on your server under the C:/inetpub/ftproot folder for FTP or C:/inetpub/wwwroot folder for HTTP or HTTPS and place your INI files and other necessary files inside the structure as noted.

2. This list describes the folder structure, starting with the root directory.

Option Description

/wyse/ The root directory. It stores the wlx folder and the addons folder.

It also stores the following files, which are used for imaging and updating devices:

• Latest-image.raw

• Latest-image.raw.info

/wyse/wlx The main INI configuration folder. It stores the following:

• wlx.ini file and MAC.ini file

• bitmap folder

• certs folder

• ini folder

/wyse/wlx/bitmap

The folder where you can place custom images you plan to use.

/wyse/wlx/certs

The folder where you can place the CA certificates that can be imported to a thin client.

NOTE:

Use the Certs and ImportCerts INI parameters in the wlx.ini file to import the certificates to thin clients.

/wyse/wlx/ini The folder where you can place the {username}.ini files.

/wyse/addons The folder where you can place the add-ons you want to use. It also stores the directory file and the *.rpm packages available to be installed on the thin client. The directory file should list all available add-ons. The directory file is required in the addons folder to guarantee that add-ons are properly located.

NOTE:

If you want to do an update with the Preserve changes option enabled, ensure that your addons folder includes a copy of your current add-ons. The system may require two reboots to fully update the firmware and add-ons while preserving local.

141

The following figure shows how to set up the folder structure on your file server and where to place INI files and other necessary files inside the structure.

Be sure to create/activate the two required MIME Types—.ini and .,under IIS on a per site basis to enable downloading. Also be sure your Web server can identify the file types used by Dell thin clients.

3. On your IIS server, use the File Types menu to add a New Type.

4. In the File Type dialog box, Use the following details :

a. To create/activate the .ini MIME Type—Enter the Associated extension .ini and Content type (MIME) text/plain.

b. Click OK to apply the settings.

c. To create/activate the . MIME Type—Enter the Associated extension . and Content type (MIME) text/plain.

142

d. Click OK to apply the settings.

For detailed instructions on adding the .ini and . MIME Types, see Knowledge Base Solution #21581 , go to www.dell.com/wyse/knowledgebase and search for 21581.

Directing the Thin Client to the Server

After you set up the folder structure and populate it with the correct files, direct the thin client to the location of the server by one of the following ways:

• DHCP

• Manual direction

Important: We recommend you use DHCP to direct the thin client to Server.

To direct the thin client to the server:

1. Using DHCP — When using DHCP to direct the thin client to the location of the server, information about the server and root directory is obtained from the following DHCP options:

a. 161 — The server.

b. 162 — Root path to the server-ftp/http/https.

• If no root path is defined, /wyse is assumed

• If a root path is defined, the additional path will be appended to the URL supplied by option 161.

c. 184 — Server username to the server specified in option 161. This is optional.

d. 185 — Server password to the server specified in option 161. This is optional.

Important:

Check-in for firmware updates is done early in the boot process. For that reason, changes in DHCP information may not be propagated to a unit until a full boot is completed. However, you can avoid this by forcing a renewing of the DHCP lease, which makes sure that the unit has the latest file-server location before the next firmware check.

Simply, right-click the Network Manager icon, click Enable Networking to disable it, right-click the Wireless Manager icon, and then click Enable Networking to enable it again and the DHCP lease is renewed.

For general instructions on adding DHCP Options #161 and #162, see Knowledge Base Solution #16132, go to www.dell.com/wyse/knowledgebase and search for 16132.

2. Manually Configuring the Server Location

NOTE: We do not recommend this option.

To manually configure the server location:

a. On the Computer menu, click Control Center.b. In the Control Center, click the INI Settings icon.

143

HTTP://WWW.DELL.COM/WYSE/KNOWLEDGEBASE

HTTP://WWW.DELL.COM/WYSE/KNOWLEDGEBASE

The INI and Upgrade Settings dialog box is displayed.

c. Clear the Get INI and Upgrade server details via DHCP check box.

d. In the INI Server URL box, enter the URL for the INI server.

NOTE:

You can enter the URL for HTTP or HTTPS; FTP URL is allowed for FTP. For more information, see Configuring the INI and Upgrade Settings.

NOTE:

You can also click Image Upgrade Settings to configure the INI and upgrade settings as described in Configuring the Image Upgrade Options.

After you start your thin client, the device will look in the defined root path for the latest available image and update if necessary. Additionally, it will check the directory file in the addons folder to see if any updates for installed add-ons are defined. Add-ons that exist in the addons folder but are not listed in the directory file, will be ignored during update check-in.

DHCP Options Tags

Use the guidelines shown in the Table when creating and adding the DHCP options.

144

Option Description Notes

1 Client identifier Always sent.

2 Time Offset Optional.

3 Router Optional but recommended. It is not required unless the thin client must interact with servers on a different subnet.

6 Domain Name Server (DNS) Optional but recommended.

12 Host Name/Terminal Name Optional string. The host name or terminal name to be set.

15 Domain Name Optional but recommended. See Option 6.

28 Broadcast Address Optional.

44 WINS servers IP Address Optional.

51 Lease Time Optional but recommended.

52 Option Overload Optional.

53 DHCP Message Type Recommended.

54 DHCP Server IP Address Recommended.

55 Parameter Request List Sent by appliance.

57 Maximum DHCP Message Size Optional — always sent by thin client.

58 T1 (renew) Time Optional but recommended.

59 T2 (rebind) Time Optional but recommended.

61 Client identifier Always sent.

161 Server (ftp/http/https) Optional string. If this is an IP address or resolvable host name, the protocol is assumed to be FTP; however, it may be the leading portion of a URL that specifies another protocol. If using the URL form, it should not include a trailing slash, for example, http://server.example.com or ftp://192.168.0.1.

162 Root path to the server (ftp/ http/https)

Optional string. The relative directory starting from the root directory must be given. For example, on an FTP server, the full directory may be C:/Inetpub/ftproot/wyse, where wyse is the directory that contains the

145

firmware. In this example, the correct string value for this DHCP option is /wyse.

On a Linux server, an FTP user-based directory might be /home/test/wyse. In this example, if the FTP user is test, then the FTP root path is /wyseand not the full path (/home/test/wyse). This value should use URL path notation.

NOTE: URL path notation-Start with a forward slash, /, and use a forward slash as folder separators.

165 CCM server Recommended.

166 MQTT server Recommended.

181 Wyse PN Server Optional string. IP address or FQDN of the PNLite.

182 Wyse Admin List Optional string. DHCP equivalent of the DomainList ini file parameter.

184 Server Username Optional string. Username to use when authenticating to the server specified in Option.

185 Server Password Optional string. Password to use when authenticating to the server specified in Option.

186 WDM IP Address Optional binary IP address of the WDM server. This option can specify up to one WDM server.

191 XenDesktop DDC URL Optional string. See also Configuring the Desktop Appliance.

194 WDM FQDN Optional FQDN of the WDM server. This option can specify up to one WDM server.

199 CCM Group Token Recommended.

146

BMixed Environment Imaging – An Enhanced Method of UpgradingThis appendix details the improved method of upgrading a mixed environment of cloud clients using the mixed_env_upgrade addon that is installed on the cloud client and the Upgrade.Image_RootPath=/…./$PLATFORM/…. key that is contained in the ini file. This new method improves the upgrade process so that there is control over limiting the upgrade to particular platforms of cloud clients in the network.

When cloud clients running on different platforms, for example different classes—Z class, D class and so on, are in the same network and are upgraded using a single upgrade image on the server, the cloud clients that are incompatible with the current image will not upgrade properly. The problem occurs because all the cloud clients are looking in the same path on the server for the upgrade image. The new method of upgrading, addresses this issue and provides a way of upgrading only cloud clients in the network for which the upgrade is intended. The mixed_env_upgrade addon will parse the ini setting and set the root path on the cloud client. This root path will be relative to the type of cloud client platform, and therefore after setting the root path, the cloud clients will be looking in different locations on the server for the upgrade image intended for their specific platform.

NOTE:

The new addon code will be added under the wyse/addons directory. The addon is an ini parser. If the $PLATFORM is found in the Upgrade.Image_RootPath then the parser will replace the $PLATFORM with the cloud clients platform type and set the root path to the value of Upgrade.Image_RootPath. For example, if the platform type is Z50D, then the RootPath will be set to /…./Z50D/…. The root path setting will be saved in the temporary registry. Platform types include D50D, D50Q, X50m, Z50D, Z50S, Z50Q, and Z50Qq.

For ini setting:

Upgrade.Image_RootPath=/xyz/$PLATFORM/dir1/dir2/

The Z50D cloud client will obtain the image from:

ftp://xx.xx.xx.xx/xyz/Z50D/dir1/dir2/

The Z50S cloud client will obtain the image from:

ftp://xx.xx.xx.xx/xyz/Z50S/dir1/dir2/

NOTE: The root path is case sensitive.

Support Details

The following is supported:

147

• INI upgrades using FTP, HTTP, or HTTPS on C50LE (SP1 only), D50D (SP3 only) D50Q (SP3 only), R50L/R50LE (SP1 only), Z50D/Z50S (SP1 and SP3), Z50Q (SP3 only), and Z50Qq (SP3 only) cloud client platforms in the same.

• Image, Image plus addons, and addons upgrades.

The following is NOT supported:

• upgrades on the T and PC Extender cloud client platforms.

• upgrades using WDM.

For example, the following is the directory structure of the image and addons under the root path:

The Z50D cloud client will upgrade from:

…./Z50D/.…/ latest-image.rawlatest-image.raw/addons/directory*.rpm

The Z50S will upgrade from:

…./Z50S/.…/ latest-image.rawlatest-image.raw/addons/directory*.rpm

The file directory lists the names of the all the addons which are to be updated.

NOTE: No image should be put in the wyse root directory when using this method.

Directories on the Server

Administrator must create the following directories on the FTP server.

For example:

ftp or http or https://ipaddress/

…./Z50Qq/.…/latest-image.rawlatest-image.raw.info/addons/directory*.rpm…./Z50Q/.…/latest-image.rawlatest-image.raw.info/addons/directory*.rpm…./Z50D/.…/latest-image.rawlatest-image.raw.info/addons/directory*.rpm…./R50/…/latest-image.rawlatest-image.raw.info/addons/directory*.rpm…./D50Q/.…/latest-image.rawlatest-image.raw.info/addons/directory*.rpm.…/D50/.…/

148

latest-image.rawlatest-image.raw.info/addons/directory*.rpm…./X50M/.…/latest-image.rawlatest-image.raw.info/addons/directory*.rpm

Important:

…. represents any level of directories. For example the above path can be set by the administrator as ftp://server_ip_address/xyz/Z50D/abc/qrt/.

The image for the Z50D will be in the directory ftp://server_ip_address/.../Z50D/.../ and for the X50m the image will be in the directory ftp://server_ip_address/.../X50M/.../.

In the case of cloud clients running SP1, the SP1 image will upgrade to the latest version after reboot and in the case of cloud clients running SP3 image, the Delayed Update will download the image upon network reset or reboot and prompt the user for the upgrade.

149

Dell Wyse SUSE LINUX Enterprise Release 11 SP3 ... Wyse... · 1 Introduction Dell Wyse Enhanced...

Documents

Transcript of Dell Wyse SUSE LINUX Enterprise Release 11 SP3 ... Wyse... · 1 Introduction Dell Wyse Enhanced...