Dell Wyse 3040 Thin Client ThinOS 8.3.2 INI Reference Guide User Manual OS En Us

User Manual: Dell wyse-3040-thin-client - Dell Wyse ThinOS 8.3.2 INI Reference Guide

Open the PDF directly: View PDF PDF.
Page Count: 104 [warning: Documents this large are best viewed by clicking the View PDF Link!]

Reference Guide
Dell Wyse ThinOS Release 8.3.2 – INI Files
Notes, cautions, and warnings
NOTE: A NOTE indicates important information that helps you make better use of your product.
CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the
problem.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
Copyright © 2017 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its
subsidiaries. Other trademarks may be trademarks of their respective owners.
2017 - 01
Rev. A04
Contents
Summary of Revisions........................................................................................................4
1 Introduction.....................................................................................................................5
About this Guide.................................................................................................................................................................5
Supported platforms...........................................................................................................................................................5
2 Getting Started: Learning INI File Basics......................................................................... 6
Downloading and Using Sample INI Files.............................................................................................................................6
Supported INI les you can construct...........................................................................................................................6
Rules and recommendations for constructing the INI les.................................................................................................. 7
System variables...........................................................................................................................................................9
Placing the INI les into the folder structure on the server............................................................................................... 10
3 Parameters for WNOS INI les only............................................................................... 12
General Settings for WNOS.INI Files Only......................................................................................................................... 12
Peripheral settings for wnos.ini les only........................................................................................................................... 18
Connection settings for wnos.ini les only.........................................................................................................................19
4 Parameters for WNOS INI, {username} INI, and $MAC INI les.................................... 40
General settings for wnos.ini les, {username} INI, and $MAC INI les..............................................................................41
Peripheral settings for wnos.ini les, {username} INI, and $MAC INI les.........................................................................55
Connection Settings for wnos.ini les, {username} INI, and $MAC INI les...................................................................... 62
A Connect Parameter: Options........................................................................................ 85
ICA connect options.........................................................................................................................................................85
ICA connect: options..................................................................................................................................................85
RDP connect options....................................................................................................................................................... 90
RDP connect options.................................................................................................................................................. 91
B TimeZone Parameter: Values.........................................................................................97
TimeZone Parameter: Values............................................................................................................................................ 97
C Best Practices: Troubleshooting and Deployment Examples........................................ 103
Troubleshooting INI Files................................................................................................................................................. 103
Examples: Basic deployments......................................................................................................................................... 103
3
Summary of Revisions
The following changes and enhancements have been made to this document since Dell Wyse ThinOS release 8.3.1:
Table 1. Newly added INI parameters
Reference Description
PRIVILEGE=[None, Low, High]
[EnableSystemPreferences={yes, no, TerminalNameOnly}]
New parameter added in General settings for wnos.ini les,
{username} INI, and $MAC INI les.
SignOn={yes, no, NTLM}
[DisableSigno={yes, no}]
[SFZeroButtons={yes, no}]
[ClearUser={yes, no}]
New parameters added in Connection settings for wnos.ini les
only.
Proxy={yes, no}
AppList={ccm; fr ; rtme}
New parameter added in Connection settings for wnos.ini les
only.
HealthCastServer=vip list
[LogLevel={0, 1, 2 ,3}]
[SecurityMode={default, full, warning, low}]
[ClientCerticate=certicate le name]
New parameters added in Connection settings for wnos.ini les
only.
CCMEnable={yes, no}
[CAValidation=(yes, no)]
[Discover=(yes, no)]
New parameters added in General settings for wnos.ini les only.
DHCPOptionsRemap={yes, no}
[CCMCAValidation]={128-254}]
New parameters added in Connection settings for wnos.ini les
only.
ConnectionBroker={default, VMware, Microsoft, Quest, AWS}
[EnableVDMCredSSP]={yes, no}
New parameter added in Connection settings for wnos.ini les
only.
PnliteServer=List of {IP address, DNS names or URLs}
[HttpUserAgent={UserAgent}]
New parameters added in Connection settings for wnos.ini les,
{username} INI, and $MAC INI les.
System Variables
$IPOCT4
$DHCP(extra_dhcp_option)
$SUBNET
New system variables added in System variables.
4
1
Introduction
Thin clients running Dell Wyse ThinOS rmware are designed solely for optimal thin client security and performance. These extremely
ecient purpose-built thin clients are virus and malware-resistant and oer ultra-fast access to applications, les, and network
resources within Citrix, Microsoft, VMware and Dell vWorkspace environments, and other leading infrastructures. ThinOS-based thin
clients are self-managed, go from power-on to fully productive in seconds, and with no published API, locally accessible le system or
browser, require no local antivirus software or rewall to protect against viruses or malware.
About this Guide
This guide is intended for administrators of Dell Wyse thin clients running ThinOS. It provides the detailed information you need to
help you understand and use the ThinOS INI les. It contains information on the dierent INI les you can use and the rules for
constructing the les. It also provides the parameter details your INI les with working examples.
Finding the Information You Need in this Guide
You can use either the Search window or Find toolbar to locate a word, series of words, or partial word in an active PDF document.
For detailed information on using these features, refer to the Help in your PDF reader.
Supported platforms
This guide is intended for the following Dell Wyse ThinOS products:
• C10LE
• R10L
• Wyse 3010 Thin Client with ThinOS (T10)
• Wyse 3020 thin client with ThinOS (T10D)
• Wyse 3030 LT thin client with ThinOS
• Wyse 3030 LT thin client with PCoIP
• Wyse 3040 thin client with ThinOS
• Wyse 3040 thin client with PCoIP
• Wyse 5010 thin client with ThinOS (D10D)
• Wyse 5010 thin client with PCoIP (D10DP)
• Wyse 5040 AIO thin client (5212)
• Wyse 5040 AIO thin client with PCoIP (5213)
• Wyse 5060 thin client with ThinOS
• Wyse 5060 thin client with PCoIP
• Wyse 7010 thin client with ThinOS (Z10D)
5
2
Getting Started: Learning INI File Basics
In this chapter you will learn how to construct and use the supported INI les.
It includes:
•Downloading and Using Sample INI Files
•Supported INI Files You can Construct
•Rules and Recommendations for Constructing the INI Files
•Placing the INI Files into the Folder Structure on the Server
After you become familiar with the INI le basics, you can refer to the parameter details you need in the other chapters and
appendixes of this guide.
Downloading and Using Sample INI Files
ThinOS Sample INI les are available from Dell and can be modied to suit the individual connection prole needs for your users.
These sample les are annotated to allow you to use them as a starter set that you can modify to get your le server up and running.
To download and use the les:
1. From the le server machine on which you want to load the INI les for use, go to the Knowledge Base at www.dell.com/wyse/
knowledgebase.
2. On the Knowledge Base page, type sample.ini in the search text box, and then click Go.
3. In the resulting solutions Title list, click the reference guide link for the ThinOS version you are using.
4. In the resulting attachments Name list, click the Sample User INI link for the zip le you want to open, for example,
Sample_User_INI_August2011.zip, and use the File Download dialog box.
After downloading the self-extracting sample INI le to the le server you want, double-click the Sample_ini.exe le, and then
modify the le using an ASCII text editor as needed for your use.
Supported INI les you can construct
The INI les contain the parameters and its associated options and values necessary for the various functionality you want.
NOTE: For examples of parameters commonly used for basic deployments, see Examples: Basic Deployments.
You can construct the following INI les:
• wnos.ini le, see Working with wnos.ini Files.
• {username}.ini le, see Working with {username}.ini Files.
• $MAC.ini le, see Working with $MAC.ini Files.
Important: The INI le processing hierarchy is as follows:
•Scenario 1 — WNOS.ini exists. The WNOS.ini le is processed and if the Include=$MAC.ini (or Include={username}.ini)
statement is included, then the relative MAC.ini (or {username}.ini) le is processed.
•Scenario 2 — WNOS.ini exists and {username}.ini exists. The WNOS.ini le is processed and if the Include=$MAC.ini statement
is included, then the MAC.ini le is processed. Once the credentials are provided, the {username}.ini le is processed.
6
•Scenario 3 — WNOS.ini exists and MAC.ini exists. The WNOS.ini le is processed and if the Include={username}.ini statement is
included, then the {username}.ini le is processed. Once the credentials are provided, the MAC.ini le is processed.
•Scenario 4 — No ini les exist. Local conguration is applied.
Working with wnos.ini les
A wnos.ini le contains the global parameters you want that will aect all thin clients accessing the server. Parameters in both Table
4: Connection Settings: wnos.ini les only, and Table 7: Connection Settings: wnos.ini les, {username} INI, and $MAC INI Files can
be used in a wnos.ini le.
NOTE: Parameters in Table 4 can only be used in a wnos.ini le; they cannot be used in a {username}.ini le.
Working with $MAC.ini Files
A $MAC.ini le can be used for device-specic congurations. If the thin client locates a wnos.ini le, then the wnos.ini le is
processed and if the Include=$MAC.ini statement is included, then the $MAC.ini le is processed. The $MAC.ini le is stored in the
same directory as a wnos.ini le if you are not using a WNOS.INI le, otherwise the les should be stored in the INC directory.
NOTE: The placement of the include=$MAC.ini parameter within the wnos.ini le will dictate which value will take priority
for a same specic parameter that is contained in both the wnos.ini le and the $MAC.ini le but is dened dierently,
that is dierent values for the same parameter.
For example, if the wnos.ini le has parameterA=valueRED, and the $MAC.ini le has the same parameterA=valueBLUE, then:
• If the include=$MAC.ini parameter is included in the wnos.ini le before the parameterA=valueBLUE statement, then the
$MAC.ini parameterA=valueRED is discarded and parameterA=valueBLUE from the wnos.ini le is the nal value used.
• If the include=$MAC.ini parameter is included in the wnos.ini le after the parameterA=valueBLUE statement, then the $MAC.ini
parameterA=valueBLUE is discarded and parameterA=valueRED from the wnos.ini le is the nal value used.
Working with {username}. ini les
A {username}.ini le contains the user-specic or user prole parameters you want that will comprise the connection prole for an
individual user. These parameters will aect only the user you specify. Parameters in Table 5: General Settings for wnos.ini Files,
{username} INI, and $MAC INI Files.
NOTE:
User prole parameters found in the {username}.ini le, generally override the identically named global parameters found in
the wnos.ini le, however, some global parameters do not allow this. For hierarchical precedence of one variable over another,
refer to the parameter descriptions in Table 7: Connection Settings: wnos.ini les, {username} INI, and $MAC INI Files can be
used in a {username}.ini le.
If both PNAgent/PNLite and a user prole are being used in the environment, the username must be dened in the Windows
domain, and the password used must be the same for both the Windows domain and the user.
Rules and recommendations for constructing the INI les
In general, ThinOS INI les follow currently accepted standard INI le formatting conventions. The INI les consist of Wyse
parameters. If you are using an INI le, the only parameter you must use is the Connect parameter, see Connect in Table 5: General
Settings for wnos.ini Files, {username} INI, and $MAC INI Files. Any of the rest of the parameters can be used if you desire, but are
not necessary unless you want changes from client and other defaults, for example, other can be the default resolution of your
monitor.
Every parameter (and their options) has a name and a value, with the name appearing to the left of the equals sign (name=value). All
parameters with the same name in the various INI les have the same meaning that is, a parameter named WyseXYZ in a wnos.ini le
and named WyseXYZ in a {username}.ini le will have the same meaning.
Number signs (#) indicate the start of a comment. Comments can begin anywhere on a line. Everything between the # and the End
of Line is ignored. Along with these general formatting conventions, use the following guidelines when constructing the INI les:
7
1. Global Connect Parameters First
Global connect parameters should be listed before other connect parameters in a wnos.ini le.
2. Connect is the Only Required Parameter
As stated earlier, if you are using an INI le, the only parameter you must use is the Connect parameter. Any of the rest of the
parameters can be used if you desire, but are not necessary unless you want changes from client and other defaults.
3. Continue Lines by using a Space and Backslash
Placing a space and backslash ( \) at the end of a line indicates line continuation; that is, the backslash means that the line and
the following line are, for the purposes of reading code, the same line. No white space can appear after the backslash; the
requirement of white space between parameter entries is maintained by the use of the space before the backslash. In addition,
starting all parameters at the left margin and placing at least one leading space or tab at the beginning of all (and only)
continuation lines makes an INI le easier to read.
NOTE:
When you require string concatenation, you can use a backslash without a space before or after it to concatenate with
the rst set of characters from the previous line; for example the strings snow and ball may be concatenated to give
snowball.
4. Blank Lines Make Files Easy to Read
Using blank lines is recommended for making code easier to read.
5. Comment by using a # Sign
Number signs (#) indicate the start of a comment. Comments can begin anywhere on a line. Everything between the # and the
End of Line is ignored.
6. Values with White Spaces Require Quotation Marks
Values of parameters containing white spaces must be placed inside quotation marks. We recommend you use common-
practice nesting rules.
7. Separate Lists by using Semicolons or Commas
Use semicolons or commas for list separators.
8. {username}.ini Files must be Write-Enabled
All {username}.ini les must be write-enabled to allow the thin client to place the encrypted user passwords in the les.
9. Use the wnos.ini File to Set the Maximum Number of Connection Entries Allowed
The combined number of connection entries dened in a {username}.ini le and a wnos.ini cannot exceed a dened total
maximum number of connections. The maximum number of connections has a default limit of 216, but can be set from 100 to
1000 using the wnos.ini le.
10. Use of the {username}.ini and {mac}.ini Parameters
The {username}.ini and {mac}.ini parameters can appear in the wnos.ini le. However, these parameters must be below the
include=$un.ini parameter or the include=<$mac.ini or {username}> parameter in the wnos.ini le. Although not required, We
recommend that these parameters end with the parameter Exit=all.
NOTE:
No parameter should ever be executed twice. Some ThinOS hardware conguration parameters require a reboot to
become active, and if the same parameters are dened more than once, the thin client may then go into an innite reboot
cycle.
8
Important:
We recommend you place the include=<$mac.ini or {username}> statement on the last line of the wnos.ini le to verify
that all parameters are processed properly for terminal-specic settings.
11. Use of System Variables with Some Options of the Connect Parameter
Some options of the Connect parameter can use the system variables shown in Table 1: System Variables to map the string. All
combinations of the variables are supported. For options that support use of system variables, see Connect Parameters
Options.
System variables
Table 1 contains the system variables you can use with some options of the connect parameter:
Table 2. System variables
Option Value
$SN Serial number used.
$MAC MAC address used.
$IP IP Address used.
$IPOCT4 The fourth octet of IP Address, for example, if IP is 10.151.120.15,
then the fourth octet is 15.
$TN Terminal name.
$PF Platform name—The rst part of image name xxx_wnos, for
example, R10L.
$UN Sign-on name used.
$PW Sign-on password used.
$DN Sign-on domain name used.
$FIP IP address used in xed format with 3 digits between
separators, for example, 010.020.030.040.ini. Using it in
conjunction with the left/right modier helps to dene policy for
subnet.
For example, include=&Left($FIP,11).ini is specied to include le
010.020.030.ini for subnet 010.020.030.xxx.
$WPUN PEAP/MSCHAPv2 username used (802.1x dependent).
$WPPW PEAP/MSCHAPv2 password used (802.1x dependent).
$WPDN PEAP/MSCHAPv2 domain used (802.1x dependent).
$DHCP (extra_dhcp_option) Extra DHCP options for Windows CE unit, including 169, 140,
141, 166, 167. For example, set a string test169 for option tag 169
in DHCP server, and set TerminalName=$DHCP(169) in
wnos.ini. Check terminal name in GUI, and the terminal name will
be test169. 166 and 167 is default for CCM MQTT Server and
CCM CA Validation in ThinOS. So you need to remap the
options from GUI or INI if you want to use $DHCP(166) and/or
$DHCP(167).
$SUBNET Species Subnet notation. The format is
{network_address}_{network_mask_bits}. For example, if the
IP address is 10.151.120.15, and the network mask is
255.255.255.0, then 10.151.120.0_24 is used.
9
Option Value
&Right($xx, i) or &Left($xx, i) Species whether the variable is to be read from left or right.
The $xx is any of the above parameters. The parameter i
species left or right oset digits.
The combinations of all the above variables, such as
CTX&Right($IP,4)@&Left($UN,3) are supported. A
replacement $SYS_VAR is used if the statements or parameters
support.
Placing the INI les into the folder structure on the server
If you have set up your environment to provide your thin clients running ThinOS with automatic updates and congurations as
described in ThinOS Administrator’s Guide, you can use the following folder structure on your server under the C:/inetpub/ftproot
folder, for FTP or C:/inetpub/wwwroot folder, for HTTP or HTTPS and place your INI les and other necessary les inside the
structure as noted. This list describes the folder structure, starting with the root directory.
Table 3. Folder structure
/wyse/ (Required) The root directory. It stores the wnos folder.
/wyse/wnos (Required) The main INI conguration folder. It stores the
wnos.ini le, {username}.ini le, $MAC.ini le, rmware, and the
following optional folders:
• bitmap folder
• cacerts folder
• font folder
• inc folder
• ini folder
• locale folder
• trace folder
/wyse/wnos/bitmap (Optional) The folder where you can place custom images you
plan to use.
/wyse/wnos/cacerts (Optional) The folder where you can place the CA certicates
that can be imported to a thin client.
NOTE: Use the AddCerticate INI parameter in the
wnos.ini le to import the certicates to thin clients.
/wyse/wnos/font (Optional) The folder where you can place font les for
languages such as Chinese Simplied, Chinese Traditional,
Japanese, and Korean that require the le.
/wyse/wnos/inc (Optional) The folder where you can place the mac.ini les.
NOTE: The use of parameter Include=$mac.ini will load /
wnos/inc/mac-address.ini so that you can use inc in the
folder structure and use $MAC.ini.
/wyse/wnos/ini (Optional) The folder where you can place the {username}.ini
les and {group} folder.
/wyse/wnos/trace (Optional) The folder where you can place the trace les that
you can capture and play back.
10
Important: Be sure to enable the parameter,
EnableTrace=yes.
11
3
Parameters for WNOS INI les only
This chapter provides the supported parameters that you can use in a wnos.ini le.
NOTE:
For information to help you construct and use the supported INI les, see Getting Started Learning INI File Basics.
Parameters in Table 4 can only be used in a wnos.ini le; they cannot be used in a {username}.ini le.
To increase usability such as relation to thin client dialog box equivalents, the supported parameters are separated into the
following categories:
•General Settings for wnos.ini Files Only
•Peripheral Settings for wnos.ini Files Only
•Connection Settings for wnos.ini Files Only
Important:
The underlined value for a parameter is the default value. Some parameters also have options shown within brackets [ ]. If an
option has an underlined default value, that option and default value will automatically be used with the parameter; options
without underlined values can also be used if you want to, but are not automatically used with the parameter.
In addition, when using parameters and options, you can leave the default value or change it to another value shown. For
example, in the following case where:
ParameterX={yes, no}
[Option1={0, 1}]
[Option2={1, 2, 3, 4}]
If you use ParameterX, then Option1 and its default value 0 will automatically be used as Option1 has an underlined default
value of 0. You can still use Option2 if you want to, however, Option2 is not automatically used with the parameter as Option2
does not have an underlined default value.
General Settings for WNOS.INI Files Only
Table 2 contains the parameters used for conguring general settings. The underlined values are default values.
Table 4. General Settings: wnos.ini les only
Parameter Description
AutoLoad={0, 1, 2, 101, 102, 201, 202}
[LoadPkg={0, 1, 2}]
[AddPkg={pkg1_name, pkg2_name, …}]
[DelPkg={pkg1_name, pkg2_name, …}]
AutoLoad — Default is 1. Species the rmware update mode.
The following are the values and associated actions:
0 — Disables checking for image.
1— Enables forced rmware upgrade/downgrade process. This
is the default value.
12
2 — Enables comparison/non-forced upgrade process only.
101 — Enables rmware upgrade/downgrade process, but
displays a window with OK or Cancel button before the process
with a note of the version to downgrade or upgrade; displays a
status complete window.
102 — Enables rmware upgrade, but displays a window with
OK or Cancel button before the process with a note of the
version to upgrade; displays a status complete window.
201 — Enables rmware upgrade or downgrade process, but
displays a window with OK button before the process; displays a
status complete window.
202 — Enables rmware upgrade only, but displays a window
with OK button before the process; displays a status complete
window.
The option LoadPkg species how to update the external
packages.
If set to 0, this disables checking for packages. If set to 1 it
enable packages upgrade/downgrade process, and if set to 2, it
enables upgrade only.
If LoadPkg is not in the statement, it will inherit the value of
AutoLoad. For example, if the value is 0, and if AutoLoad=0, 1,
and if AutoLoad=1, 101 or 201, and 2 if AutoLoad=2, 102 or 202.
For example, if you set AutoLoad=1 LoadPkg=0, the rmware is
checked, but the packages are not checked. From ThinOS 8.3,
the external packages update mechanism is changed.
Some packages are default, and loaded according to value
of LoadPkg. For example RTME.
Some packages need additional parameter AddPkg to add. For
example, FR and TCX.The option AddPkg is for adding
packages. It depends on the value of LoadPkg.
The packages check comes after rmware check. The option
DelPkg is for deleting packages. It does not depend on the value
of LoadPkg. The packages specied in DelPkg are always
deleted when loading the ini le.
The value of AddPkg and DelPkg is one package name or a
package name list. For example, AutoLoad=1 AddPkg="FR, TCX"
DelPkg=RTME
NOTE: The AddPkg and DelPkg options depend on
platforms which supports external packages. So far only
Z/D and U class support it. The other legacy platforms
does not support it.
AutoPower={yes, no}
or
Device=cmos AutoPower=(yes, no)
Default is no.
Yes/no option on how the system starts when the power is rst
applied to the thin client.
If set to yes, then the system starts itself without waiting for
users to press the power button. In cases where power was lost
unexpectedly and if the thin client was shut down properly
before power was lost unexpectedly, when the power is
13
restored, the thin client will be powered. This setting is useful in
a kiosk environment.
Once an AutoPower statement is processed, it alters the
behavior of the thin client until a countermanding statement is
processed. The eect of an AutoPower=yes statement
continues even if the statement is removed from the INI le in
which it was found.
Use of the AutoPower option does not interfere with performing
a user directed shutdown.
CCMEnable={yes, no}
[CCMServer=<server_address>]
[GroupPrex=<prex>]
[GroupKey=<hashkey>]
[MQTTServer=<mqtt_address>[:<mqtt_port>]]
[AdvancedCong={no, yes}]
[CCMDefault={no, yes}]
[Override={no, yes}]
[CAValidation=(yes, no)]
[Discover=(yes, no)]
Default is no.
CCMEnable — Yes/no option to enable the Cloud Client
Manager Agent.
CCMServer — Species a IP address or URL address for the
Cloud Client Manager server. Once specied, it is saved in the
non-volatile memory.
GroupPrex and GroupKey — The options GroupPrex and
GroupKey compose the Group Registration Key of the Cloud
Client Manager server. Once specied, it is saved in the non-
volatile memory.
NOTE:
The numbers before the dash on the Group Registration
key is the GroupPrex value and the characters to the right
of the Group Registration Key is the GroupKey value.
MQTTServer — Species a IP address or URL address for the
MQTT server and MQTT port after the : (colon). Once
specied, it is saved in the non-volatile memory.
AdvancedCong — Default is no. Yes/no option to enable the
Cloud Client Manager server and MQTT server elds in the GUI.
If AdvancedCong=yes is specied, the Cloud Client Manager
server and MQTT server elds in the Cloud Client Manager UI
will be enabled. See also PRIVILEGE parameters in General
Settings for wnos.ini Files, {username} INI, and $MAC INI Files.
CCMDefault — Default is no. Yes/no option to enable the
Congure Cloud management dialog will display during boot up.
If CCMDefault=yes is specied and both the CCMServer and
GroupKey are NULL, the Congure Cloud management dialog
will display during boot up. Input group code to connect to the
default Cloud Client Manager server and default MQTT server.
The default CCM server is https://us1.cloudclientmanager.com
and default MQTT server is us1-pns.cloudclientmanager.com.
Override — Default is no. Yes/no option to allow a groupkey
from the INI le to override the previous groupkey. If
Override=yes is specied, the groupkey from the INI le will
override the previous groupkey. The Groupkey can technically be
applied in many places. You can congure the group key in order
of priority, that is, if #1 is dened it will override #2. Groupkey
priority policy is listed below:
1. Local GUI conguration or groupkey received from CCM in
a Group Change command
2. Dened in INI le "ccmenable=yes groupkey=xxxx"
3. DHCP Option Tag #199
14
NOTE:
The Groupkey assigned in DCHP option #199 and INI
parameter are only used for rst time deployment, that is,
they only take eect if CCM is currently disabled or if CCM
is enabled but group-key is NULL.
If DCHP is dened and CCM is enabled or not NULL: The
CCM Group key in the DHCP is ignored since it is
congured manually in local UI or from CCM group change.
If INI is dened and CCM is enabled or not NULL: The
CCM Group key in the INI is ignored since it is congured
manually in local UI or from CCM group change.
Important:
There is an exception in the logic above when the
'override=yes' option is used in INI le. This will make #2
take priority over #1.
For example,
CCMEnable=yes CCMServer=xxx:8080
GroupPrefix=wlab GroupKey=TC-TEST-ENG
MQTTServer=xxx:1883 AdvancedConfig=yes
Override=yes
NOTE:
For detailed instructions on how to congure CCM in a
wnos.ini le to enable the CCM Agent on supported
ThinOS clients, refer to Knowledge Base Solution #23875,
go to the Knowledge Base at www.dell.com/wyse/
knowledgebase and search for 23875.
CAValidation—If the option is set to yes, then the CCM agent
will check the certicate when connected to https server.
Default value is yes.
Discover— If the option is set to yes, then the CCM agent will
discover the CCM server, MQTT server and CA validation from
DNS Record. Default value is yes.
DefaultUser={username, $SYS_VAR} Species the default sign-on user. See Table 1: System Variables
for a list of system variables for $SYS_VAR.
DisableButton={no, yes}
[DisableRestart={yes, no}]
Default is no.
Yes/no option to disable the power button.
If you set the option DisableRestart=yes, the radio button
Restart the system in shutdown window is disabled. These
settings are saved permanently and the default value is no.
EnableCacheIni Important: Supported on Wyse 3010 thin client with
ThinOS (T10) and Wyse 3020 thin client with ThinOS
(T10D) only.
EnableCacheIni is no longer supported and cannot be used on
platforms other than the Wyse 3010 thin client with ThinOS
(T10). On platforms other than the Wyse 3010 thin client with
ThinOS (T10), EnableCacheIni is replaced by the
MirrorFileServer parameter, see MirrorFileServer parameter in
Table 2: General Settings for wnos.ini Files Only. Use
EnableCacheIni on Wyse 3010 thin client with ThinOS platform
(T10) only. This is because there is no local ash on Wyse 3010
15
thin client with ThinOS (T10) platform, and the MirrorFileServer
parameter is not supported on it.
EnableGKey={yes, no} Default is yes.
Yes/no option to enable G key reset. G key reset is supported
for Privilege=High in the NVRAM.
Exit={yes, no, all} Default is yes.
Species the INI le processing.
yes — Processing returns to the prior INI le on the next line
after $include.
no — There is no operation.
all — All INI le processing is exited.
Include=<$mac.ini le or {username}.ini le> <$MAC.ini> Loads /wnos/inc/mac-address.ini.
NOTE:
The le name does not include the symbol : in the mac
address. See also the Exit parameter for information on
how to terminate Include. <{username}.ini> Loads /
wnos/inc/{username}-address.ini.
The le name does not include the symbol : in the
{username} address. See also the Exit parameter for
information on how to terminate Include.
MirrorFileServer={no, yes} Default is no.
Yes/no option to enable the cache all server les functionality.
This enables the cache all server les such as INI les, wallpaper,
bitmap, font, local messages and so on to the local ash when
les are changed in the le server. ThinOS would use the
cached les when les on the le server are unavailable.
Important: S10 is not supported
RootPath=<le server root path> This le server root path is entered into thin client local setup
(non-volatile memory). The thin client immediately uses this
path to access les. The directory name \wnos will be appended
to the le server root path entry before use.
TerminalName=<name>
[reboot={no, yes}]
TerminalName — Name of the client comprising a 15-character
string. It can also be congured with system variables. Basically
all the variables can be used except $TN (recursive), $UN,
$PW, $DN. However, these are not yet available when parsing
wnos.ini. Additionally combinations like xy$mac, sz$tnxyz etc
are supported.
reboot — Default is no. Yes/no option to reboot the thin client
if the terminal name is changed.
TimeZone=<zone value>
[ManualOverride={no, yes}]
[daylight={no, yes}]
TimeZone — Species the time zone if the zone is unspecied
on the thin client or is used with ManualOverride. Supported
zone values s are listed in the System Preference dialog box on
the thin client and in TimeZone Parameter: Values.
16
[start=MMWWDD end=MMWWDD]
[TimeZoneName=<timezonename>]
[DayLightName=<daylightname>]
NOTE:
The TimeZone parameter is dependent on the
TimeServer=parameter. If a time server is not dened, the
client CMOS/BIOS internal clock will be used as a
reference.
ManualOverride — Default is no. Yes/no option to override the
thin client System Preference Menu setting with this TimeZone
setting. TimeZone settings in the wnos.ini le will be saved into
NVRAM if EnableLocal=yes is set in the wnos.ini le.
Daylight — Default is no. Yes/no option to enable daylight
saving time; MMWWDD is a 6 digit number to specify the start
and the end of daylight saving time.
Important: The Start and End options are in the
MMWWDD format, where:
MM = Month of the year. Values are 01 to 12 for the
months of the year from January to December. For
example, 01 = January, 12 = December
WW = Week of the Month. Values are 01 to 05 for the
week of the month, 05 is the last week. For example, 01 =
1st week, 05 = the last week of the month.
DD = Day of the week. Values are 01 to 07 for the day in
the week from Monday to Sunday. For example, 01 =
Monday, 07 = Sunday.
NOTE:
For the 2013 year, DST dates are Sunday, March 10,
2:00am and ends Sunday, November 3, 2:00am.
TimeZoneName — Display name sent to the ICA/RDP
session such as Eastern Standard Time.
DayLightName — Display name for daylight saving time. If
daylight saving time is enabled, DayLightName should be
named something similar to Eastern Daylight Time,
otherwise it should be the same as TimeZoneName.
NOTE:
To congure daylight saving time for an RDP session, you
must enable the Allow Time Zone Redirection function. Use
the following guidelines:
1. Run gpedit.msc to open the Group Policy dialog box.
2. Click Computer Conguration in the Local Computer
Policy tree, and expand the Administrative Templates
folder.
3. Expand the Windows Components folder, and then
expand the Terminal Services folder.
4. Click Client/Server data redirection to open the
Setting list.
5. Right-click Allow Time Zone Redirection and select
Properties to open the Allow Time Zone Redirection
Properties dialog box.
6. Select the Enabled option, and then click OK.
7. Close the Group Policy dialog box.
17
Overall example:
TimeZone="GMT – 08:00"
ManualOverride=yes Daylight=Yes
Start=030107 End=110107
TimeZoneName="Pacific Standard Time"
DayLightName="Pacific Daylight Time"
Peripheral settings for wnos.ini les only
Table 3 contains the parameters used for conguring peripheral settings such as keyboard, monitor, mouse, and printer. The defaults
values are underlined.
Table 5. Peripheral Settings: wnos.ini les only
Parameter Description
DEVICE_SECURITY=white_list/black_list
vid_pid=[vvvv,pppp]
class=name/[cc,ss,pp]
1. When DEVICE_SECURITY=white_list is set, the security is
in high level, and you need to add all the devices (on board
devices including Wyse 3020 thin client with ThinOS
(T10D)'s netcard, and internal hub) to the list that you
want to use, and all other devices are denied when the
device is plugged-in.
2. When DEVICE_SECURITY=black_list is set, the security is
mid-level, and customer can add the device which is not
present in the list.
3. About key value: all the value are hex, and vid_pid =
0xvvvvpppp, class value is =0xccsspp; where,
• vvvv=device vendor id
• pppp=device product id
• cc= device interface class
• ss=device interface subclass
• pp=device interface protocol
4. Class name is abbreviation for the dened class. Valid
names are listed here:{Audio, CDC_control, HID,
Pysical, Image, MASS_STORAGE, Hub, CDC_Data,
Smart_Card, Content_Security, Video,
Personal_Healthcare, AudioVideo, Billboard,
Diagnostic_Device, Wireless, Miscellaneous, Application,
VendorSpecic}. For detailed information, refer:
www.usb.org/developers/dened_class.
5. The max number of devices/class table is 16.
For Example:
DEVICE_SECURITY=white_list class=HID class=Audio
class=Video
DEVICE_SECURITY=black_list vid_pid=0x0B0E2000
class=0x030101.
PrinterMap=a text le name or possibly URL. A text le to be included to dene printer mappings. Each line in
the le is of format Printer Identication=Printer Driver Name.
For example: HL-1240 Series=HP LaserJet.
ThinPrintEnable={no, yes}
[Port=port number]
Default is yes.
ThinPrintEnable — Yes/no option to enable the thinprint client.
18
port—The TCP port of the thinprint client. The default port
number value is 4000. The port number value must be less than
65535.
Connection settings for wnos.ini les only
Table 4 contains the parameters used for conguring the connection settings. The default values are underlined.
Table 6. Connection Settings: wnos.ini les only
Parameter Description
AddCerticate=lename
password={plain text password}
Password-enc={encrypted password}
AddCerticate — Species a certicate le residing in the
subfolder cacerts under the wnos folder to load on platforms
with nand ash, or on the memory. The length of the lename,
including the trailing period and the le extension, is limited to 64
characters.
AddCerticate must be used when conguring the Citrix Secure
Gateway PNAgent Interface (PNAgent/Lite servers) in the
Network Setup dialog box.
Adding certicates are required if the user CSG environments
use certicate agents that are not covered by the built-in
certicates. The certicates are used to validate server
identities by the thin client. Supported les include .crt le on
ICA CSG; .cer and .pfx in 802.1x. Password and Password-Enc
are specially used with PFX les.
CaradigmServer=vip list
[EGPGroup=group name]
[EnableLogO={yes,no}]
[SecurityMode={default, full, warning, low}]
CaradigmServer=vip list contains a list of VIP addresses with
optional TCP port number of Caradigm servers. EGPGroup
denes the user group name. If EnableLogO=yes is specied,
the user is logged o from the session before system signs o.
Otherwise the session is disconnected. The logged o user has
a timeout value which can be set using SessionCong
parameter SessionLogOTimeout.
The default timeout value is 1, if no SessionLogOTimeout is
specied.
SecurityMode species the SSL certication validation policy.
If set to default, it applies the SecurityPolicy setting.
If set to full, the SSL connection needs to verify server
certicate. If it is untrusted, drop the connection.
If set to warning, the SSL connection needs to verify server
certicate.
If it is untrusted, it is up to you to continue or drop the
connection.
If set to low, the server certicate is not checked. The value is
persistent, the default value of the setting is default.
Community=community
[Encrypt={yes, no}]
Species the SNMP community name. A string up to 31
characters are allowed. After the value is specied, it is saved in
the non-volatile memory.
19
If encrypt=yes, an encrypted string is used as a community
name.
The default value is set to no.
NOTE: Use our Windows Password_Gen tool or built-in
tool to generate the encrypted string.
ConnectionBroker={default, VMware, Microsoft, Quest, AWS}
[IgnoreProle={yes, no,}]
[SecurityMode={Default,Low,Warning,Full}]
[EnableVWGateway]={yes, no}
[VWGateway]=url
[ConnectionType]={Default, All, RDP, PCoIP}
[EnableVDMCredSSP]={yes, no}
Default value is default. Species the type of VDI broker to use.
Default is a 3rd party VDI broker.
AWS is Amazon Workspace broker. It is only available with
PCoIP build.
IgnoreProle — Default value is no.
Set IgnoreProle=yes to disable parsing the global setting from
the VDI broker. It is only valid in the case of
ConnectionBroker=default.
SecurityMode — SecurityMode species the security mode for
the VMware broker and Amazon Workspace (AWS) broker. It is
only valid in case of ConnectionBroker=VMware or
ConnectionBroker=AWS. The details is as follows:
• Set SecurityMode=Full to have the Client verify the server's
certicate in highest security mode; if any relevant checks
error, it will fail to connect to the server.
• Set SecurityMode=Warning to have the Client allow
connection continuation in the following two specic
exceptions where full verication would fail:
a. Certicate is self-signed.
b. Certicate has an invalid time.
• Set SecurityMode=Low to indicate that Client allows
connection without any certicate verication.
• Set SecurityMode=Default to indicate that Client follows the
SecurityPolicy setting to verify the certicate.
NOTE:
For Dell vWorkspace broker, ConnectionBroker=Quest is
recommended.
EnableVWGateway and VWGateway are used to set the
vWorkspace gateway.
For VMware broker, ConnectionBroker=VMware is
recommended. ConnectionBroker=VDM is still supported
but deprecated.
The option ConnectionType species the display protocol that
you want to use when launching a session in VMware broker. If
this parameter is set, then the desktops that meet the specied
protocol are listed after broker sign on.
This setting is only valid in case of PCoIP feature is supported.
• Set ConnectionType=Default, only the desktops with the
default protocol congured in broker server are listed (this is
the default value for this setting).
• If you set ConnectionType=All, both PCoIP and RDP
desktops are listed.
• If you set ConnectionType=RDP, only RDP desktops are
listed.
20
• If you set ConnectionType=PCoIP, only PCoIP desktops are
listed.
EnableVDMCredSSP=yes—The option is set to yes to enable
RDP NLA mode connection when the VMware View broker
session is launched. The default value is no.
EnableVDMCredSSP=yes works only after you disable view
security tunnel in server side.
DelCerticate={lename, all, builtin} lename — Removes the named le from the nand ash or
from the memory.
all — Removes all certicates except built-in certicates
included by default.
builtin — Removes all certicates including the public
certicates included by default.
DesktopColorDepth={16, 32}
[RGB565={no, yes}]
DesktopColorDepth — Sets the desktop color to 16 or 32 bits.
If DesktopColorDepth=16, the default color is 15 bits.
RGB565 — Default isno. Applies only if the desktop color is
using 16 bits.
Important:
If the RBG565 parameter value is changed to yes, the thin
client will require a reboot.
DHCPExpire={reboot, shutdown} Default is reboot.
When a DHCP lease expires, a message noties the user as
follows: DHCP Expired, you must reboot.
reboot — After 5 seconds, the system reboots.
shutdown — After 5 seconds, the system shuts down.
DHCPOptionsRemap={no, yes}
[DisableOption12={no, yes}]
[FileServer={128 to 254}]
[RootPath={128 to 254}]
[FtpUserName={128 to 254}]
[FtpPassWord={128 to 254}]
[RapportServer={128-254}]
[RapportPort={128-254}]
[WDMServer={128 to 254}]
[WDMPort={128 to 254}]
[PnliteServer={128 to 254}]
[DomainList={128 to 254}]
[VDIBroker-{248 to 254}]
Default is no.
DHCPOptionsRemap — Species whether or not the following
options can be set.
The value for each option must be from 128 to 254. Values for
the options must be dierent for each option. These options are
used to congure DHCP server tags for thin client booting.
The option DisableOption12 sets if the option tag 12 in DHCP is
accepted or not. As default, DHCP option 12 sets the hostname
and domain name of the terminal. For example, the information
of option 12 is terminal name.wyse.com, the terminal name will
be set as terminalname and the domain name will be set as
wyse.com.
If you set dierent value for DisableOption12 from the value in
NVRAM, the system will automatically reboot to make the value
valid. (CIR36891)
RapportSecurePort— Species the HTTPS port of WDM
server. It is in 6.3 to support WDM4.7.
Discover—If Discover=yes, the device fetches Wyse DHCP
options from DHCP server, otherwise, it prevents the device
from fetching those information. Default value is yes. If the
21
[RapportSecurePort={128-254}]
[Discover={yes, no}]
[WDMSecurePort={128 to 254}]
[WDMFQDN={128-254}]
[CCMGroupKey={128-254}]
[CCMServer={128-254}]
[CCMMQTTServer={128-254}]
[CCMCAValidation={128-254}]
device receives FileServer/WDMServer information through the
DHCP server, then the associate User interface is protected.
NOTE:
WDMSecurePort is the specied HTTPS port of the WDM
server.
WDMSecurePort—Species the HTTPS port of WDM server.
WDMFQDN — Species the Fully Qualied Domain Name
(FQDN) of the WDM server.
NOTE: The CCMGroupKey, CCMServer,
CCMMQTTServer and CCMCAValidation options are
specied to remap the tags for CCM conguration.
DHCPUserClassID=class_id
[ParseVendorInfo={no, yes}]
DHCPUserClassID — Species the UserClassID used for
DHCP.
ParseVendorInfo — Default is yes. Yes/no option to specify
whether or not ThinOS will interpret DHCP option 43.
This is a vendor-specic information. If ParseVendorInfo is set to
no and the DHCPVendorID is also used with this parameter, you
must set ParseVendorInfo=yes and then reboot the thin client
twice. Maximum of 26 characters are allowed in a string.
DHCPVendorID=vendor
[ParseVendorInfo={no, yes}]
DHCPVendorID — Species the VendorID used for DHCP.
ParseVendorInfo — Default is yes. Yes/no option to specify
whether or not ThinOS will interpret DHCP option 43.
This is a vendor-specic information. If ParseVendorInfo is set to
no and the DHCPVendorID is also used with this parameter, you
must set ParseVendorInfo=yes and then reboot the thin client
twice.
Maximum of 26 characters are allowed in a string.
DisableDomain={no, yes} Default is no.
Yes/no option to disable the drop-down domain list in the
PNAgent/PNLite Sign-on dialog box.
DNSIPVersion={ipv4, ipv6}
[DNSServer=server_list]
[DNSDomain=dns_domain_url]
Species the DNS server and domain. Default IP version is ipv4.
The DNS Server is an IP list separated by ; or ,. The maximum
size of this list is 16. For example:
10.200.5.53;192.168.100.1;192.168.200.8
Important: There is no space after the ;.
DNSTTL={0-3600} Species the Time to Live (TTL) of DNS name caching; the
default is from DNS server settings.
NOTE:
If DNSTTL=0, the DNS hostname in a connection always
queries the DNS server to get the IP.
DomainList=List of NT domain names A list of domain names that will appear in the thin client Sign-on
dialog box as options to help users in selecting the domain to
22
sign-on to PNAgent/PNLite servers. Once specied, it is saved
in non-volatile memory.
NOTE:
Be sure to enclose in quotation marks if spaces are
included. For example: DomainList=North_America, SQA,
test-domain.
Dualhead={no, yes}
[ManualOverride={no, yes}]
[Mainscreen={1, 2}]
[Orientation={hort, vert}]
[Align={Top|Left, Center, Bottom|Right}]
[Taskbar={wholescreen, mainscreen}]
[MonitorAutoDetect={yes,no}]
[Swap={no, yes}]
Default is no.
Dualhead — Yes/no option to support a dual-monitor display.
Default no sets monitors to mirror mode; yes sets monitors to
span mode.
ManualOverride — Default is no. Yes/no option to allow the
local client to override display dualhead settings received from
central conguration.
If reset to factory defaults, it will once again take server settings
for dualhead. This is helpful for scenarios where you have a
mixture of dual head and single head deployments.
For example:
Dualhead=yes
ManualOverride=yes Mainscreen=1 \
Orientation=hort
Taskbar=mainscreen
NOTE:
If using, be sure the ManualOverride option is the rst
option used after the Dualhead parameter position in the
statement.
Mainscreen — Sets which screen is used as the main screen.
When using a DVI to DVI and VGA cable, the DVI connected
monitor will be the default mainscreen=1.
Orientation — Default is hort. Sets which style is used for
display. Hort means horizontal and vert means vertical.
Align — Sets how screens are aligned: Top means screens are
top aligned in hort orientation. Left means screens are left
aligned in vert orientation.
Center means screens are center aligned. Bottom means
screens are bottom aligned in hort orientation. Right means
screen are right aligned in vert orientation.
Taskbar — Default is wholescreen. Sets which style is used for
the taskbar: wholescreen places the taskbar at the bottom of
the entire screen; mainscreen places it at the bottom of the
main screen. This is only when SysMode=Classic and has no
eect on VDI mode.
MonitorAutoDetect — Determines whether or not the system
will detect how many monitors are connected. If only one
monitor is connected, Span mode will be transferred to Mirror
mode.
Swap — Default is no. Yes/no option to use with older ThinOS
7.x builds to swap dual monitors when Mainscreen=2 is set.
Swap=yes puts monitor 2 on the left or top of monitor 1
according to the orientation.
23
For example, if you want a standard dual screen layout you
would use:
DualHead=Yes \
Mainscreen=1 \
Orientation=Hort \
Taskbar=Mainscreen \
Align=Center
Screen=1 Resolution=DDC Refresh=60
Rotate=None
Screen=2 Resolution=DDC Refresh=60
Rotate=None
EnableRAVE={yes, no} Default is yes.
Yes/no option to enable the client to use Citrix Multimedia
Acceleration (RAVE) to play supported media les residing on an
ICA server. This is a global parameter for all ICA connections.
EnableRAVE=yes is default.
NOTE:
If EnableRAVE=no or this parameter is not present, the
TCX Multimedia will be used for all media les. If
EnableRAVE=yes, RAVE will be used only for media les it
supports.
EnableRAVE=yes is ignored unless a valid TCX Multimedia
license is used.
FileServer=List of {IP address, DNS name}
[Username=username]
[Password=password]
[SecurityMode={Low, Warning, Full, default}]
FileServer — Species the FTP or Web (http://) server IP
address or DNS name that is entered into thin client local setup
(non-volatile memory); the thin client immediately uses this
server to access les.
Username — Species the username of the le server.
Password — Species the password of the le server.
NOTE:
The target le server must support access using the same
user credentials used in the INI les.
The optional keyword Username and Password specify the
username/password of the le server. When the client fetches
the WNOS.INI le from a HTTPS server, ThinOS supports
dierent security modes. The default follows SecurityPolicy and
may be one of the three modes. The option SecurityMode
species these security modes.
SecurityMode — Species the security level for the le server
during client verication of the server certicate. This option is
only valid when connecting to an https le server.
When conguring the https le server, the Username and
Password options of the FileServer parameter can be omitted.
Use the following guidelines:
• Set SecurityMode=Full to have the client verify the server
certicate in highest security mode; if any error occurs
during verication, the client will not connect to the server
and a pop-up message is displayed.
• Set SecurityMode=Warning to have the client provide a
warning when the client cannot verify the server certicate,
but still allow the user to select to continue client connection
to the server.
24
• Set SecurityMode=Low to indicate that the client allows
connection without any certicate verication.
• Set SecurityMode=Default to indicate that the client follows
SecurityPolicy settings to check certicate.
• Default value of the setting is Default. If the settings are
factory default or if you are upgrading to ThinOS 8.3 for the
rst time, the value is temporarily set to None. After loading
any INI, it goes to default.
• If the security mode value in WNOS.INI is not the same as
the one saved in Client NVRAM, client shows a reboot dialog
box.
NOTE: Security process includes:
1. Verication that certicate has a valid date
2. Verication that Issuer is valid and correct
3. Certicate verication passes
4. CN and SAN on the certicate matches the DNS
naming
For Example: FileServer=https://10.151.122.66:444
SecurityMode=warning.
FormURL=URL to a le Species the URL to the name of a bitmap le (.ico, .bmp, .jpg,
or .gif), to be displayed in the sign-on window, residing under
the thin client home directory. The length of the path, including
the home directory and the le, is limited to 128 characters. If
auto dial-up is enabled, this statement is invalid.
HealthCastServer=vip list
[LogLevel={0, 1, 2 ,3}]
[SecurityMode={default, full, warning, low}]
[ClientCerticate=certicate le name]
Species a list of VIP addresses with optional TCP port number
of HealthCast servers.
LogLevel—The option LogLevel is for debug purpose; 0 means
no log.
SecurityMode —Species the SSL certication validation
policy. If set to default, it will apply SecurityPolicy setting. If set
to full, the SSL connection needs to verify server certicate. If it
is untrusted, then drop the connection. If set to warning, the
SSL connection needs to verify server certicate. If it is
untrusted, you may still continue or drop the connection. If set
to low, the server certicate will not be checked. The value will
be persistent, and the default value of the setting is default.
ClientCerticate —The option species the client certicate
le name during SSL connection between Healthcast server and
client.
INACTIVE=minutes
[NoSessionTimer=minutes]
Default is 0. There is no Idle timeout. The range is 0 minutes to
480 minutes.If the value given is bigger than 480, 480 is set
instead. If the value given is smaller than 0, 0 is set instead.
When the system idle is time out in the congured minutes, the
system will automatically sign o, reboot or shutdown which are
based on the setting of AutoSigno.
The parameter NoSessionTimer has the same range as
INACTIVE and it is valid only if INACTIVE value is not 0. If there
is a session use the value of Inactive, otherwise use the value of
NoSessionTimer, if NoSessionTimer is congured.
25
If AutoSigno=yes Shutdown=yes is congured, then this
statement can work before signon.
If AutoSigno=yes Reboot=yes is congured, this statement
can work before signon.
LongApplicationName={no, yes} Default is no.
Yes/no option to display all 38 characters in a desktop icon
name. If LongApplicationName=no, then icons will display up to
19 characters; any over 19 characters and the last three
characters will be “…”.
MaxVNCD={0, 1}
[VNCD_8bits={yes,no}]
[VNCD_Zlib={yes, no}]
Default is 0.
Option to enable VNC shadowing. Default value is 0 means VNC
shadowing is disabled. Set to 1 to enable shadowing.
NOTE:
Only one VNC client session is allowed and a password is
required.
See also VNCPrompt in Table 7: Connection Settings: wnos.ini
les, {username} INI, and $MAC INI Files to enable a VNC
shadowing prompt to a user.
See also VncPassword in Table 4: Connection Settings: wnos.ini
les only to specify a string of up to 8 characters as the
password used for shadowing.
VNCD_8bits — Default is yes. Yes/no option to force the VNC
server to send out images with 8-bits-per-pixel; if set to no, the
VNC server will send out images with the current system color
depth.
VNCD_Zlib — Default is no. Yes/no option to allow the VNC
server to send data with Zlib compression.
MMRCong={VIDEO}
[ashingHW={0, 1}]
This parameter species whether to show the “HW” label at the
top left corner of video or not when HDX is hardware decoded.
The default value is 0. Set ashingHW to 0, if you want to hide
HW. Set ashingHW to 1, if you want to show HW.
Multifarm={no, yes} Default is no.
Yes/no option to support Citrix multifarm functionality for the
wnos.ini les. If Multifarm=yes, PNAgent/PNLite users are able
to authenticate to more than one Citrix farm.
MultiLogon={no, yes}
[SequentialDomain={yes, no}]
Default is no.
Yes/no option to support multiple log ons. If MultiLogon=yes,
the PNAgent/PNLite sign-on authenticating window can input a
dierent username, password, and domain while signing on to
dierent PNAgent/PNLite servers.
For backward compatibility, the following format is supported:
MultiLogon=yes
PNAgentServer=10.1.1.30;10.2.2.60
The SelectServerList statement is also supported:
26
MultiLogon=yes
SelectServerList=pna \
description=store host=http://proper-storefront-url.ctx.com
description="Floor 3" host=10.1.1.30 \
description=""Floor 1" host=10.2.2.60 \
description="All Users" host=10.3.3.90
NOTE:
The SelectServerList takes precedence over
PNAgentServer. The PNA server description or name can
be displayed on the signon window so that the user knows
which and what server is logging on. See also
SelectServerList={PNA, VDI} in Table 4: Connection
Settings for wnos.ini Files Only.
If SequentialDomain=yes is specied, the domain congured in
DomainList statement is selected in order.
For example, set the following ini:
DomainList="xen;wyse" multilogon=yes sequentialdomain=yes
pnagentserver=10.151.134.23; https://csg-cn.wyse.com.
When you logon to the rst server 10.151.134.23, the domain xen
is selected. Then logon to the second server https://csg-
cn.wyse.com and the domain wyse is selected.
NoticeFile=lename
[Resizable={no, yes}]
[Timeout={0, 10 to 600}]
[Title="notice_title"]
[ButtonCaption="button_caption"]
NoticeFile — Species a legal notication le residing in the
home directory folder. The le is displayed in a dialog box and
the user is prompted to accept it before the sign-on process
continues.
Resizable — Default is no. Yes/no option to resize the dialog
box to t the text size.
Timeout — Default is 0. After the notice is accepted, if Timeout
is specied in seconds, and if no mouse or keyboard is used,
then the dialog box will display again after the seconds set. 0
means no timeout.
Title and ButtonCaption — Species the notication window
title and button that can be customized. For example,
NoticeFile=filename Title=Problem
ButtonCaption=Ok
OneSignServer=onesign_server
[DisableBeep={yes,no}]
[KioskMode=yes,no}]
[TapToLock={0,1,2}]
[EnableWindowAuthentication={yes,no}]
[AutoAccess={VMW,XD,XA,LOCAL}]
[NetBIOSDomainName={yes,no}]
A list of host names or IP addresses with optional TCP port
number or URLs of Imprivata OneSign servers. It should use
https protocol. If OneSignServer="" is dened, then only
imprivata virtual channel can work.If DisableBeep is set to yes,
then Rdeas reader can be set to mute when a card is tapped.
Default is no.
If KisokMode is set to yes, then dierent OneSign user can
unlock the client desktop. Default is no. Optional keyword
TaptoLock is only active when KioskMode=yes.
• If TapToLock=0, then tap a card to lock terminal is disabled.
• If TapToLock=1(Tap to lock), then use the proximity card to
lock the terminal.
27
[SuspendAction={0, 1}]
[DisableHotKey={yes,no}]
Loglevel=0/1/2/3
[DisablePromptToEnroll={yes,no}]
[SecurityMode={default, full, warning, low}]
• If TapToLock=2(Tap over), then lock the terminal and log in
as a dierent user. Default is 2.
If EnableWindowAuthentication is set to yes and OneSign
signon fails, then continue to sign-on with windows credential to
pre-dene broker. Default is yes.
If AutoAccess is dened, then auto launch the corresponding
type of broker. Otherwise, get the broker type from the
Imprivata Server setting of computer and user policy. If none of
them is dened, then launch the rst available broker server
from the Imprivata server.
If AutoAccess=LOCAL is set, then launch the broker from the
ThinClient setting; the broker getting from the Imprivata Server
is ignored.
NOTE: AutoAccess can be set in [username].ini and
wnos.ini. The wnos.ini has priority over [username].ini.
If NetBIOSDomainName is set to yes, then Imprivata domain list
will show NetBIOS domain name and card user will authenticate
to the broker server using NetBIOS domain name. Default is no.
If SuspendAction is set to 0, then lock the terminal when you
tap the card or press the hotkey. If set to 1, then signo the
terminal. If ‘no’ is dened, then lock the terminal in KioskMode
and sign-o the terminal in none KioskMode.
If DisableHotKey is set to yes, then no action when you press
the hotkey dened in Imprivata Server. Only WebAPI 4 and later
versions support the hotkey function.
Loglevel—While conguring the Imprivata server, user can view
the OneSign logs on ThinOS by enabling the Agent Logging
feature. An ini conguration is needed correspondingly. Default
value is 0. If set to 0, logs are not displayed.
If DisablePromptToEnroll is set to yes, then ThinOS does not
prompt you to enroll their security answers after OneSign sign-
on. Default value is yes.
SecurityMode species the SSL certication validation policy. If
set to default, it applies SecurityPolicy setting. If set to full, the
SSL connection needs to verify server certicate. If it is
untrusted, drop the connection. If set to warning, the SSL
connection needs to verify server certicate. If it is untrusted, it
is up to you to continue or drop the connection. If set to low, the
server certicate is not checked. The value is persistent, and
the default value of the setting is default.
PasswordServer=password_server
[AccountSelfService={yes, no}]
[connect={ica, rdp}]
[encryption={Basic, 40, 56, 128,
Login-128, None}]
Specify an ica/rdp server that can be used to log on to modify
password when you sign-on with password timeout.
The PasswordServer statement can specify the connection
parameters as described in the Connect statement. If no
parameter is specied, it connects with ICA protocol.
AccountSelfService — Yes/no option to dene the password
server as an Account Self Service server.
If AccountSelfService=yes follows PasswordServer, click the
icon on the signon window to do account self-service.
28
If Connect parameters do not follow AccountSelfService=yes,
this password server will be the account self-service server of
Citrix and clicking the icon will use Citrix protocol to unlock or
change password for an account.
If Connect parameters follow AccountSelfService=yes, clicking
the icon launches a session to change password for an account.
PCoIP_Logging={yes, no}
[Broker_Logging_Level={0,1,2,3,4}]
[Session_Logging_Level={0,1,2,3,4}]
The option PCoIP_Logging can enable and disable the PCoIP
client logs output in Trouble Shooting. If you set the value to
yes, then it is same as selecting the Trouble Shooting Capture
Export PCoIP Log radio button to persistent and no to none.
The option Broker_Logging_level and Session_Logging_Level
accord to PCoIP broker log level and PCoIP session log
level. The default value is 0 which means critical log, 1 means log
severity error, 2 means log severity info, 3 means log severity
debug, and 4 means log severity unrestrained.
PlatformCong=all
[EncryptFS=yes]
Encrypts local ash, specically cached INI les and credentials
that are stored, if using signon=yes.
NOTE:
Event log will display new statements stating that
FileSystem encryption has been enabled.
PlatformCong=”C/V/S/R/T Class”
[Firmware={Firmware lename}]
[BIOS={BIOS lename}]
[ECFirmware={EC lename}]
If a specic platform is specied by the PlatformCong
parameter, then ThinOS will attempt to load the Firmware and
BIOS whose lenames are specied by the Firmware and BIOS
parameters.
If the written Firmware and BIOS are valid on le server, they
will be loaded by default; if the written Firmware and BIOS are
invalid on le server, ThinOS will load the platform default
Firmware and BIOS instead.
For example: If you re-name the Wyse 3010 thin client with
ThinOS (T10) rmware le from DOVE_boot to
DOVE_boot_8.0_037., then you must use platformcong-="T
Class", then add Firmware=DOVE_boot_8.0_037.
ThinOS will look on the le server for this exact rmware name.
If that dened rmware name is not found, then ThinOS will fall
back to the default logic and look for the DOVE_boot rmware.
ECFirmware is only used for Wyse 3010 thin client with ThinOS
(T10)/X10J/X10CJ to update EC rmware, it is not supported
on other platforms.
C: C10LE V: VL10
S: S10 R: R10L
Wyse 3010 thin client with ThinOS (T10)
If the ECFirmware le name is not specied, device will look for
EC with default name: T10: T10_EC.bin
Proxy={yes, no}
AppList={ccm;fr;rtme}
[Type={Global, http, https, socks5}]
Species the proxy settings which are saved in non-volatile
memory. If Proxy=no, all proxy settings are cleared and all
the followed options are ignored.
29
[Server=_host_port_]
[User=_user_name]
[Password=_password_]
[Encrypt={yes, no}]
If Proxy=yes, the option AppList must be followed. It species
which applications are applied to connect via proxy. CCM, FR
and RTME are supported. The application name is separated
with semicolon.
The following options are used to congure one or several proxy
server setting. The option Type species the proxy protocol
including http, https and socks5. The option Server species the
url of the proxy server. The option User and Password specify
the credentials of this proxy server. The option Encrypt species
if the password is encrypted or not.
The option User and Password can support system variables.
Because CCM runs before sign on, it is not appropriate to use
$UN and $PW.
If Type=Global, the proxy settings are saved into http proxy
setting, and the https and socks5 proxy settings use the same
setting as http proxy. And the followed proxy settings will be
ignored.
For example,
Proxy=yes AppList=fr \
Type=http Server=server1:1234 user=$UN password=$PW
(OR)
Proxy=yes AppList=ccm \
Type=http Server=server1:1234 user=abc password=xyz \
Type=socks5 Server=server2:4321 user=abc password=1234
(OR)
Proxy=yes AppList=ccm;fr;rtme \
Type=Global Server=server_global user=user_global
password=password_global_encrypted Encrypt=yes
RapportDisable={yes, no}
[DHCPinform={yes, no}]
[DNSLookup={yes, no}]
[QuickMode={yes, no}]
[Discover={yes, no}]
[SecurityMode={default, full, warning, low}]
Set to yes to disable the Rapport agent.
If RapportDisable=no, the Rapport agent is enabled and you can
discover the WDM server by the following ways:
1. The DHCP option tag values received from standard or
WDM proxy DHCP service for vendor class RTIAgent
2. DNS service location record "_wdmserver._tcp"
3. DNS host name lookup "wdmserver"
If RapportDisable=no, set DHCPinform=yes to perform the
WDM server discovery as mentioned in number 1; set
DNSLookup=yes to perform the WDM server discovery as
mentiomned in number 2 and 3.
If QuickMode=yes is specied, rapport agent will not block any
other process during ThinOS boot up, and boot time of ThinOS
will speed up.
NOTE: If le server is changed by WDM server, device
will reboot automatically to make sure all settings from
WDM server take eect. Default is yes.
30
Discover— If Discover=yes is specied, rapport discovers the
WDM server information from DHCP option tag, DNS service
location record and DNS host name. If the WDM server is
discovered, the WDM server User Interface (UI) is protected on
the device. The default value is yes.
SecurityMode species the SSL certication validation policy. If
set to default, SecurityPolicy setting is applied.
If set to full, the SSL connection needs to verify server
certicate. If it is untrusted, drop the connection.
If set to warning, the SSL connection needs to verify server
certicate. If it is untrusted, it is up to you to continue or drop
the connection.
If set to low, the server certicate is not checked. The value is
persistent, and the default value of the setting is default.
If the settings are factory default or if you are upgrading to
ThinOS 8.3 for the rst time, the value is temporarily set to low.
After loading any INI, it goes to Default value.
RapportServer=server_list
[Retry=]
Important:
DISCONTINUED. DO NOT USE. Use WDMServer
parameter, see WDMServer=<server_list> in Table 4:
Connection Settings for wnos.ini Files Only.
Reboot | shutdown={no, yes} Time=hh:mm
[-hh:mm]
[Wday={Sunday, Monday, Tuesday, Wednesday, Thursday,
Friday, Saturday}]
[Idle=minutes]
Reboot — Yes/no option to enable automatic daily reboot of all
ThinOS devices.
Time — Species the time to reboot and must be in a 24-hour
format. For example: Reboot=Yes Time=17:30 will reboot all
ThinOS devices at 5:30 P.M. daily.
If you set time as hh:mm-hh:mm, a random time during the
congured time period is selected.
Wday— The option Wday species the week day of scheduled
reboot.
Idle— The option Idle species the idle minutes. After the
scheduled reboot time is reached, the unit reboots, if there is no
session or the terminal is idle for specied idle minutes. If the
session is still active, the reboot is delayed till the idle time is
reached or log o the sessions.
For example,
If you set Reboot=yes time=20:30, the unit reboots on local time
20:30. If you set Reboot=yes time=20:30-4:30, the unit reboots
on random time through 20:30 to 4:30.
If you set Reboot=yes time=23:00 Wday=Friday,Monday, the
unit reboots on local time 23:00 of Friday and Monday.
If you set Reboot=yes time=1:00 Idle=10, the unit reboots on
1:00, if there are no sessions. If there is any active session, the
reboot happens only if the unit is idle for 10 minutes or the
system logs out from the session.
Since 8.3_012 or later, scheduling a shutdown at a given time is
supported. The options are same as schedule a reboot as above.
31
For example, Set Shutdown=yes time=20:30, the unit shuts
down at local time 20:30.
RegisterWINS=yes Forces the thin client to register itself with a Microsoft WINS
server.
SelectServerList={PNA, VDI}
[Default=default_desc]
list of servers {Server1; Server2; ...ServerN}
Allows users to select one PNA or VDI server during logon. For
server use the format:
description = <server’s description> host = <server’s
url> [ <options>]
NOTE: There must be “description” and “host” key
words on each server.
For PNA server options, use the options of the PnliteServer
parameter in Table 7 Connection Settings: wnos.ini les,
{username} INI, and $MAC INI Files.
PNA example:
SelectServerList=PNA; Default=test3;
description = test1; host =
192.168.0.10; autoconnectlist
=*; reconnectfrombutton=0; description =
test2; host = HostName2.wyse.com;
TimeOut=200; descriprion = test3 host =
https://server3.wyse.com
For a VDI server: If you want to use a VDI broker, specify
ConnectionBroker in wnos.ini. Otherwise the VDI broker’s type
is default.
VDI example:
ConnectionBroker=VDM
SelectServerList=VDI; Default=test5
description = test4; host = 192.168.0.11;
description = test5; host = host2.wyse.com
The Default option following "SelectServerList={PNA, VDI}" can
specify the default server. The value is one of server description
dened after that. After one selects another server and sign o,
this default server is selected. If default option is not specied,
the last selected server is selected in the next sign on.
Service={snmpd, thinprint, vncd, wdm,
vda <port number>} disable={no, yes}
Service — Species the services you can enable or disable;
there are dierent syntaxes for the dierent services.
disable — Default is no. Yes/no option to disable the services.
Disable must follow the Service parameter.
Service=snmpd disable={no, yes}
[community=<snmp_community> [encrypt={yes, no}]]
[communityReadOnly=<snmp_community_read_only>
[encrypt={yes, no}]]
[servers=server_list]
Default is no.
Service=snmpd disable — Yes/no option to disable the snmpd
service.
community — The option community is same as the statement
Community. encrypt option is same as that in the statement
community.
communityReadOnly— This option is to set community only
has snmp get and get_next privileges.
32
The following encrypt option is only for indicating, if value of
communityReadOnly is encrypted.
Servers option, if set, limits the valid snmp management site to
the IP addresses in the server_list parameter, which contains 1
to 4 IPv4 IP addresses currently. If not, all the set IP addresses
seen as valid.
Service=thinprint disable={no, yes}
[port=<port number>]
[PkSize={0-64000}]
Default is no.
Service=thinprint disable — Yes/no option to disable the
thinprint service.
port — Same as the statement ThinPrintEnable={no, yes}
port=portnumber.
PkSize — Species the default packet size that will be sent to
the server when negotiating with the thinprint server. The value
0 will rely on the server default setting, 64000 in ThinPrint 7.6
and 32000 in previous ThinPrint versions.
ThinOS only allocates a buer of 64K, so if the default packet
size of the server is above 64000, this setting must be set or
printing will fail.
Service=vncd disable={no, yes} Default is no.
Yes/no option to disable the vncd service, same as
MaxVncd={0, 1}.
Service=wdm disable={no, yes} Default is no.
Yes/no option to disable the WDM service, same as
RapportDisable={no, yes}.
Service=<port number> disable={no, yes} Default is no.
Yes/no option to disable the service with this port number. The
80 port is an exception because the WDM is always started
before loading the global prole (wnos.ini le).
SecurityPolicy={full, warning, low}
[SecuredNetworkProtocol={yes, no}]
[TLSMinVersion]={1,2,3}]
[TLSMaxVesion={1,2,3}]
[DNSFileServerDiscover={yes, no}]
Species the global security mode for SSL connection. If
application SecurityMode is default, application applies the
setting.
If set to full, the SSL connection needs to verify server
certicate. If it is untrusted, connection is dropped.If set to
warning, the SSL connection needs to verify server certicate.
If it is untrusted, it is up to you to continue or drop the
connection. If set to low, the server certicate is not checked.
The value is persistent, and the default value is warning. For
those SSL connections with their own security policy, this does
not impact.
For example,
File server, VMware View and AWS broker follows the global
SecurityPolicy. Citrix broker, RDS broker and SECUREMATRIX
are forced to high security mode.
33
If the optional SecuredNetworkProtocol=yes is set, the
unsecure protocols including ftp, http and tftp are disabled. The
value is persistent, and the default value is no.
Option TLSMinVersion and TLSMaxVersion allows you to
congure the SSL connection. ThinOS supports SSLs from
TLSMinVersion onwards. TLSMaxversion is the latest version of
SSL supported by ThinOS.
If no value is set then TLSMinVersion then the default value is
set to TLS1.0 and TLSMaxVersion to TLS1.2. The value 1, 2, 3
corresponds to TLS1.0, TLS1.1, TLS1.2 respectively.
In classic mode, a DNS name wyseftpfbc4tc is resolved to
discover the le server, if the global INI le in remote le server
and local cache cannot be loaded. If the optional
DNSFileServerDiscover=no is set, the function is disabled. The
value is persistent, and the default value is yes.
SignOn={yes, no, NTLM}
[MaxConnect=max]
[ConnectionManager={maximize, minimize, hide}]
[EnableOK={no, yes}]
[DisableGuest={no, yes}]
[DisablePassword={no, yes}]
[LastUserName={no, yes}]
[RequireSmartCard={no, yes}]
[SCRemovalBehavior= {-1, 0, 1}]
[SaveLastDomainUser={yes, no, user, domain}]
[DefaultINI=lename]
[IconGroupStyle={default, folder}]
[IconGroupLayout={Vertical, Horizontal}]
[PasswordVariables={yes, no}
[LockTerminal={yes, no}]
[ExpireTime={0, 1 - 480}]
[UnlockRefresh={yes, no}]
[SCShowCNName={yes,no}]
[SCSecurePINEntry={no, yes}]
[AutoConnectTimeout={10–300}]
[DisableEditDomain={yes, no}]
[AdGroupPrex=adgrpnameprex]
[ClearUser={yes, no}]
SignOn — Default is yes. Yes/no/NTLM option to enable the
sign-on process. If set to NTLM, a user can be authenticated
with an NTLM protocol.
The user must be a domain user and the same sign-on user
credentials must be available in the ftp://~/wnos/ini/ directory.
MaxConnect — Default is 216. Maximum number of
connections allowed to be specied in the wnos.ini le and
{username}.ini le added together. The range allowed for
MaxConnect is 100 to 1000. The default maximum is 216 entries.
ConnectionManager — Default is minimize. State of the
Connect Manager during sign-on.
EnableOK — Default is no. Yes/no option to show the OK and
Cancel the command buttons in the Sign-on dialog box.
DisableGuest — Default is no. Yes/no option to disable the
guest sign-on.
DisablePassword — Default is no. Yes/no option to disable the
password text box and password check box in the Sign-on
dialog box.
LastUserName — Default is no. Yes/no option to display the
last sign-on username after the user logs o.
RequireSmartCard — Default is no. Yes/no option to force
logon with smartcard.
SCRemovalBehavior — Default is 0. Species what happens
after a smart card is removed.
-1 — If smartcard is removed then client has no action. Whether
the session can be used or not totally depend on the server
policVNCD
0 — System logs o.
1 — System locks and can be unlocked only when the same
certicate is used with the smart card.
SaveLastDomainUser — Yes/no option to save the username
and domain into NVRAM once signon is successful. On next
34
[DisableSigno={yes, no}]
[SFZeroButtons={yes, no}]
reboot, the username and domain saved in the NVRAM will be
displayed in signon server as the default username and domain if
no DefaultUser is set in the wnos.ini le.
The size of username/domain is limited to 32 characters, and if
larger than 32, it will rst be truncated and then saved into
NVRAM.
DefaultINI — The optional DefaultINI congures a le name
which is in the default folder of the username ini les. If the
{username}.ini is not found, this le will be loaded as default.
IconGroupStyle — The optional IconGroupStyle congures the
icon group style on the desktop. PNAgent published applications
can be congured with the client folder in the PNA server.
If set IconGroupStyle=folder, the PNAgent published
applications which are specied to display on the desktop will
display with the folder.
After clicking the folder icon, the subfolder or applications in this
folder will display on the desktop. In this case, there is an Up to 1
Level icon on top. Clicking the icon will display the up one level
folder contents.
IconGroupLayout — Default is vertical. Congures the
direction of the icongroup on the desktop.
PasswordVariables — Default is no. Yes/no option to support
variable mapping ($TN, $UN etc) for a password.
LockTerminal — Default is yes. Yes/no option to lock the
terminal. If set LockTerminal=no, the function of locking terminal
is disabled. It disables the Lock Terminal from a Right Click on
the desktop or from clicking the Shutdown option → Lock
Terminal. It also disables lock terminal even if set
ScreenSaver=minutes; LockTerminal=yes.
ExpireTime — Species the signon expiration time. The range is
0 to 480 minutes. The default is 0 which means no expiration.
If the value is larger than 480, then 480 is set instead. If the
value is smaller than 0, then 0 is set instead.
After system signon or starting a connection, the expiration time
starts counting. Once the expiration time is reached, starting a
connection by clicking the icon, menu or connection manager,
will bring up a pop up message box to enter the password. Only
if the password is same as the original signon password, the
session starts.
If the terminal is locked and unlocked with the password, the
signon expiration time starts counting again.
UnlockRefresh — Default is yes. Yes/no option to species the
refresh action after unlocking the system in classic mode.
Yes — While unlocking, the system will refresh the PNA list to
verify the password.
No — Disables refresh.
SCShowCNName — Default is yes. Yes/no option to force the
use of the CN name of the certicate as the user name when
35
using smartcard signon. The default uses the UPN name as the
user name.
SCSecurePINEntry — Default is no. Yes/no option to enable
Secure PIN entry function for pkcs15 smart card with Cherry
keyboard.
AutoConnectTimeout— Default is 30 seconds.
This option sets the timeout for auto connect published
application. The range is 10 seconds to 300 seconds.
DisableEditDomain— The optional keyword DisableEditDomain,
is set to yes to stop typing in the domain box manually. Typing
the character @ or \ as in the format domain\user and
user@domain in the username box are not allowed.
AdGroupPreFix— The option AdGroupPreFix is only valid, when
you congure SignOn=NTLM. If the option is congured, then
the thin client veries the names of all AD groups to which a
sign-on user belongs, to get the rst group name so that its
prex matches adgrpnameprex, and load
adgroup/"the_whole_ad_group_name".ini, if the conguration
le exists, before loading the user specic INI.
For example, if the sign on user is user_111 in a domain, and the
user_111 belongs to group domain user and group tc_grp1_ad,
the option is congured as AdGroupPrex=tc_grp1. If the
conguration le adgroup/tc_grp1_ad.ini is available, it will be
loaded.
ClearUser—The option keyword ClearUser, if set to yes, clears
the username when login fails, and if set to no, retains username
entered after login failure. The default value is no.
DisableSigno—The option keyword DisableSigno, if set to
yes, disables signo button from shutdown and connection
manager window. Also this parameter disables the logo button
on StoreFront desktop.
SFZeroButtons—The option keyword SFZeroButtons. if set to
yes, displays the buttons (shutdown, login and so on) at the
bottom of signon window, such as Zero mode when set
StoreFront style.
Speedbrowser={on, o} Default is on.
On/o option to enable the ICA Speedscreen Browser
Acceleration Function.
SwitchApplication Important: DISCONTINUED. DO NOT USE.
SysMode={classic, vdi}
[toolbardisable={no, yes}]
[toolbardisablemouse={no, yes}]
[toolbarclick={no, yes}]
[toolbardelay={0-4}]
[toolbar_no_conmgr={no, yes}]
SysMode — Species the Zero interface optimized for VDI or
the Classic interface. This value will be remembered across
reboots until changed. If not dened and an INI is present,
Classic mode is the default. If no INI is present, VDI mode is the
default.
Classic mode has full taskbar, desktop and connection manager
and is recommended for a terminal server environment and for
backward compatibility with WTOS 6.x.
36
[toolbar_no_minimizeall={no, yes}]
[toolbardisablehotkey={no, yes}]
[ToolbarEnableOneSession={no, yes}]
[ToolbarAutoQuit={yes, no}]
[ToolbarStay={1~20}]
[EnableLogonMainMenu={no, yes}}
VDI mode (Zero interface) has a new launchpad-style interface
optimized for full-screen sessions that is Desktops. Everything
you need is accessed through an always available overlay
interface. The following options allow you to congure if and
when the Zero toolbar will display under VDI mode:
Toolbardisable — Default is no. Yes/no option to disable the
Zero toolbar from displaying; if set to yes, this option overrules
other toolbar display options.
Toolbardisablemouse — Default is no. Yes/no option to disable
the Zero toolbar from automatically displaying once you pause
the mouse pointer on the left side of the screen for a specied
amount of time.
toolbarclick — Default is no. Yes/no option to pop up the
toolbar only if clicking on the left-most side of the screen.
toolbardelay — Species the seconds to delay before displaying
the toolbar after pausing the mouse pointer on the left-most
side of the screen. The value 0 will have no delay. The other
values 1, 2, 3,4 will delay 0.5, 1, 1.5 and 2 seconds respectively.
toolbar_no_conmgr — Default is no. Yes/no option to hide the
Home button.
toolbar_no_minimizeall — Default is no. Yes/no option to hide
the Home button thus aecting the ability to minimize displayed
list of connections.
toolbardisablehotkey — Default is no. Yes/no option to disable
the CTR+ALT+UP ARROW keyboard shortcut that allows the
toolbar to instantly display without a timer.
ToolbarEnableOneSession — Default is no. Yes/no option to
enable the toolbar when only one session is available.
ToolbarAutoQuit — Default is yes. ToolbarAutoQuit=no
prevents the sub-window from being closed. The toolbar will
auto-hide after a certain amount of time after user pause the
mouse pointer away from the toolbar.
ToolbarStay — ToolbarStay={1~20} controls the auto-hide
duration, 0.5s per value. Thus if ToolbarStay=1, the Toolbar will
auto-hide after 0.5 second; If ToolbarStay=10, the Toolbar will
auto-hide after 5 seconds.
EnableLogonMainMenu — Default is no. Yes/no option to
enable the main menu if you click the mouse button on the
desktop prior to logon in Zero mode.
SysName Important: DISCONTINUED. DO NOT USE.
TcpTimeOut={1 , 2} Default is 1.
Species the timeout value of a TCP connection. The number of
30 seconds for the timeout value of a TCP connection. The
value must be 1 or 2 which means the connection timeout value
is from 1x30= 30 seconds to 2x30= 60 seconds.
Values of 3-255 are recognized only for backwards compatibility
that is >2 = 60 seconds, however, these values should not be
used and the value should be set to 2.
37
TCXLicense Important: DISCONTINUED. DO NOT USE.
VncPassword=<password>
[encrypt={no, yes}]
VncPassword — Species a string of up to 8 characters as the
password used for shadowing.
encrypt — Default is no. Yes/no option to set according to
whether or not the vncpassword you are using is encrypted.
Important: To use VNC Shadow, you must set
MaxVNCD=1 and dene a password; The MaxVNCD
default is 0 and this disables VNC. If you are using an
encrypted password, you must set encrypt to yes. For
example:
VncPassword=<encoded password>
encrypt=yes
If you are using a plain text password, you must set
encrypt to no. For example:
VncPassword=<plain text> encrypt=no
See also MaxVNCD in Table 4: Connection Settings:
wnos.ini les only to enable VNC shadowing.
See also VNCPrompt in Table 7: Connection Settings:
wnos.ini les, {username} INI, and $MAC INI Files to enable
a VNC shadowing prompt to a user.
WarnUnlinkDisabled={yes, no} Default is no.
Yes/no option to disable the pop-up warning message when a
network has no link for an ICA/ RDP session.
WDAService=yes
[Priority ={WDM, CCM, “WDM;CCM”, “CCM;WDM”}]
WDA Service always runs in the background.If priority is
available, WDA discovers the protocol according to it.
There are only two protocols available now - WDM, and CCM.
For example, if priority=WDM; CCM, WDA tries to discover
WDM server and tries to check-in, and if it fails to check-in to
WDM server, it tries to check-in the device to CCM server.
WDMFlash=ash_size The specied value will be saved into NVRAM, and then reports
to the WDM server. This statement ensures that all the units
would function with DDC regardless of ash size.
This statement is valid for all platforms and replaces the
previous S10 WDM Flash statement.
WDMService={yes, no}
[DHCPinform={no, yes}]
[DNSLookup={no, yes}]
[QuickMode={yes, no}]
[Discover={yes, no}]
[SecurityMode={default, full, warning, low}]
Default is yes.
WDMService — Yes/no option to disable the WDM agent.
Discovering the WDM server is supported by the following:
1. DNS host name lookup wdmserver
2. DNS service location record _wdmserver._tcp
3. DHCP option tag values received from standard or WDM
proxy DHCP service for vendor class RTIAgent
DHCPinform — Default is no. Yes/no option to use DHCP
information.
38
DNSLookup — Default is no. Yes/no option to use DNSLookup.
For Example: If WDMService=yes, setting DHCPinform=yes will
do number 3, setting DNSLookup=yes will do numbers 1 and 2.
If QuickMode=yes is specied, rapport agent will not block any
other process during ThinOS boot up, and boot time of ThinOS
will speed up.
NOTE: If le server is changed by WDM server, device
will reboot automatically to make sure all settings from
WDM server take eect. Default is yes.
Discover— If Discover=yes is specied, rapport discovers the
WDM server information from the DHCP option tag, DNS
service location record and DNS host name. If the WDM server
is discovered, the WDM server User Interface (UI) is protected
on device. The default value is yes.
SecurityMode species the SSL certication validation policy.
If set to default, it will apply SecurityPolicy setting.
If set to full, the SSL connection needs to verify server
certicate. If it is untrusted, then drop the connection.
If set to warning, the SSL connection needs to verify server
certicate. If it is untrusted, it's up to you to continue or drop
the connection.
If set to low, the server certicate is not checked. The value is
persistent, and the default value of the setting is default. If the
settings are factory default, or if you are upgrading to ThinOS
8.3 for the rst time, the value is temporarily set to low. After
loading any INI, it goes to default value.
WDMServer=<server_list>
[Retry=<retry number value>]
WDMServer — Species a list of IP addresses or DNS names
separated by using a comma for the WDM servers. Once
specied, it is saved in non-volatile memory.
Retry — Determines the number of attempts to retry a contact
to WDM servers.
WINSServer=server_list Species the WINS server address. The WINSserver is an IP list
separated by ";" or ",", with a maximum list size of 2.
39
4
Parameters for WNOS INI, {username} INI, and
$MAC INI les
This chapter provides the supported parameters that you can use in a wnos.ini le, a {username}.ini le, and in a $MAC.ini le. For
information to help you construct and use the supported INI les, see Getting Started: Learning INI File Basics
To increase usability such as relation to thin client dialog box equivalents, the supported parameters are separated into the following
categories:
•General Settings for wnos.ini Files, {username} INI, and $MAC INI Files
•Peripheral Settings for wnos.ini Files, {username} INI, and $MAC INI Files
•Connection Settings for wnos.ini Files username INI and MAC INI Files
Important:
The underlined value for a parameter is the default value. Some parameters also have options shown within brackets [ ]. If an
option has an underlined value (default), that option and default value will automatically be used with the parameter. The
options without underlined values can also be used if you want to, but are not automatically used with the parameter. In
addition, when using parameters and options, you can leave the default value or change it to another value shown.
For example, in the following case where:
ParameterX={yes, no}
[Option1={0, 1}]
[Option2={1, 2, 3, 4}]
If you use ParameterX, then Option1 and its default value 0 will automatically be used as Option1 has an underlined value
(default of 0). You can still use Option2 if you want to, however, Option2 is not automatically used with the parameter as
Option2 does not have a default (underlined) value.
NOTE:
User prole parameters found in the {username}.ini le generally override the identically named global parameters found in the
wnos.ini le, however, some global parameters in Tables 5, 6, and 7 noted with * do not allow this. Thus, if the parameters in
Tables 5, 6, and 7 noted with * are used in both a {username}.ini le and in a wnos.ini le, the noted parameters in the wnos.ini
le will override the same noted parameters in the {username}.ini le.
For example, if the parameter Resolution=1024x768 is used in the {username}.ini le and the same parameter
Resolution=1280x1024 is used in the wnos.ini le, the Resolution=1280x1024 in the wnos.ini le will override the Resolution
parameter in the {username}.ini le. Therefore, if you want the parameter Resolution=1024x768 in the {username}.ini le to be
used, you must not use the Resolution parameter in the wnos.ini le.
NOTE:
Parameters in Tables 5, 6, and 7 noted with ** that are used in a {username}.ini le or $MAC.ini le will return to the values set
for those parameters in the wnos.ini le after a user sign-o.
For example, if your {username}.ini le contains the parameter MouseSwap=1—so that the mouse buttons are swapped for
your left-hand use and you log o the thin client, then the MouseSwap value will return to the original default value of 0
(MouseSwap=0) contained in the wnos.ini le—so that others who log in can use their own user prole; assuming the
administrator has not changed the default values in the wnos.ini le.
40
General settings for wnos.ini les, {username} INI, and $MAC INI les
Table 5 contains the parameters used for conguring general settings. The underlined values are defaults.
Table 7. General Settings: wnos.ini les, {username} INI, and $MAC INI Files
Parameter
* Global overrides identically-named user prole
** After sign o, user prole returns to global value
Description
AdminMode={no, yes}
[admin-username=<encrypted_ username>]
[admin-password=<encrypted_ password>]
[Username=<username>]
[Password=<password>]
[Enc-username=encrypted_username]
[Enc-password=encrypted_password]
AdminMode — Default is no. Yes/no option to use the
username and the password to obtain a high thin client
conguration when the privilege parameter level is set to high
(Privilege=high).
admin-username — Species if admin-
username=encrypted_username, then encrypted strings are
used for admin-username; no minimum length; maximum length
is 30 characters—15 characters convert to 30 characters
encrypted.
admin-password — Species if admin-
password=encrypted_password, then encrypted strings are
used for admin-password; no minimum length; maximum length
is 30 characters—15 characters convert to 30 characters
encrypted.
Enc-username — Species if the username is encrypted, and
encrypted strings are used for the Enc-username.
Enc-password — Species if the password is encrypted, and
encrypted strings are used for the Enc-password.
NOTE:
The AdminMode items are on the right-click menu.
username — Species the username; no minimum length;
maximum length is 15 characters.
password — Species the password; no minimum length;
maximum length is 15 characters.
BootOrder={PXE, HardDisk, USB} BootOrder — Sets the boot order for the BIOS. The boot order
must follow these rules:
1. The boot order is a list of these three options separated by
a semi-colon (;) or a comma (,).
2. Every option must be used.
3. The options must be dierent.
For example, the following settings are valid:
BootOrder=PXE;HardDisk;USB
BootOrder=HardDisk;PXE;USB
BootOrder=USB;PXE;HardDisk
However, the following settings are invalid:
BootOrder=PXE;HardDisk
BootOrder=PXE;PXE;USB
BootOrder=PXE;HardDisk;USB;PXE
41
If the rst boot order is not HardDisk, the system restart will
boot from the BIOS setting.
BootpDisable={no, yes} Default is no.
BootpDisable — Yes/no option to disable BOOTP requests.
ThinOS supports both DHCP and BOOTP to obtain the network
congurations. In the rst two attempts, only DHCP is
requested. Then, both DHCP and BOOTP are requested.
For some environments, BOOTP requests will delay obtaining
the IP from the DHCP server. Set BootpDisable=yes will only
perform a DHCP request. This setting is only valid after the next
reboot.
CmosPassword=<password>
[encrypt={no, yes}]
CmosPassword — Species the BIOS password on supported
platforms; string up to 8 characters.
encrypt — Default is yes. If encrypt=yes, an encrypted string is
used as a password and the password is encoded by Dell Wyse
encrypt tool.
CustomInfo={yes, no}
[Custom1=custom1_str]
[Custom2=custom2_str]
[Custom3=custom3_str]
[Location=location_str]
[Contact=contact_str]
Yes/no option to congure or store custom information. If
CustomInfo=yes, the custom information congured by the
following options will be stored into NVRAM. If CustomInfo=no,
the custom information in NVRAM will be cleared.
For example:
CustomInfo=yes custom1=11 custom2=2
custom3=3 location=wyse contact=peter
NOTE: Maximum length is 32 characters.
**DeskColor=”rrr ggg bbb” Default is “16 100 36”; where DeskColor =“16 100 36” (green)
is the default.
Species the desktop background color in RGB string format
that must be enclosed in quotes, where rrr, ggg, and bbb are
decimal numbers in the rage of 0 to 255. When using this
parameter in a wnos.ini le, it will be saved to NVRAM if
EnableLocal is set to yes in the wnos.ini le.
NOTE:
The MirrorFileServer parameter also supports the
DeskColor parameter.
**Desktop=bitmap le
[Layout={center, tile, stretch}]
[IconTextColor="rrr ggg bbb"]
Desktop — Species a bitmap le to be used as wallpaper for
the local desktop. This le could be a 4-bit, 8-bit, or 24-bit BMP
le or a standard GIF le or a standard JPEG le. The le must
be located in the FTP server wnos\bitmap directory. Default is
Wyse wallpaper. To disable the parameter, leave value blank
(Desktop=wysedefault).
Layout — Default is stretch. Species the arrangement on the
desktop background of the bitmap le specied by the Desktop
parameter, if auto dial-up is set, Layout is invalid.
For center, the image is placed in the center of the desktop
without image size change. For tile, the image is replicated
across the desktop. For stretch, the image is modied to ll the
desktop.
42
NOTE:
The MirrorFileServer parameter also supports the
DeskColor parameter.
IconTextColor — Species the icon text color in RGB string
format that must be enclosed in quotes, where rrr, ggg and bbb
are decimal numbers in the range of 0 to 255.
Device=cmos
[Action={extract, restore}]
[Password=password]
[encrypt={no, yes}]
[BootOrder={PXE, HardDisk, USB}]
[WakeOnLan={yes, no}]
[AutoPower={yes, no}]
[BootFromUSB={yes, no}]
[USBController={yes, no}]
[COMController={yes, no}]
[PopupMenu={yes, no}]
[OnboardAudio={yes, no}]
[Bluetooth={yes, no}]
CMOS management (extract and restore cmos settings).
Extract — For extract action, CMOS content is saved to the
le: $PF_cmos.$VER .
NOTE:
$PF - Is the name of the platform, including C10, C00, R10,
R00, and VL10.
$VER - Is the version of the BIOS, such as
1.0B_SPC001(1.0B_SPC001-0407), 1.0B-0407(Zilch),
1.0H_SPC-0T51(R10, R00), 1.19R(VL10).
Wyse ThinOS log: "CMOS: extract to $PF_cmos.$VER"
Restore — For restore action, CMOS content is updated from
the le:
$PF_cmos.$VER
Wyse ThinOS log: "CMOS: restore from $PF_cmos.$VER"
When using this feature, there should be a special INI user name
such as cmos. The associated ini/cmos.ini should include one
line as Device=cmos Action=extract.
NOTE: Do not include Device=cmos Action=extract in a
global INI le such as wnos.ini, as it will take no eect if
it is included in the global INI le.
After the administrator congures the CMOS on a template unit,
the administrator should sign on to the cmos account on
ThinOS to have the CMOS content saved to the cmos le on a
writable File Server wnos directory.
Then, the wnos.ini should be congured with Device=CMOS
action=restore, so that all target units will be updated with the
same CMOS setting as the template unit after reboot.
Once the restore action is nished, both the Device=cmos
Action=extract and Device=CMOS action=restore should be
removed from the related INI les.
The usage of other settings is self-explanatory. The only
condition to use the settings is the BIOS GUI should have such
settings.
DEVICE=UsbTrace
vid_pid={device vid/pin hex format}
[max_len=500]
Specify the WTOS to trace USB device data to ftp or USB disk.
For "vid_pid", device Vendor ID and Product ID hex value, and
VID is high 16 bit while Product ID is low 16 bit.
Allows to trace maximum of eight devices at one time. For
"max_len", set a max len for capturing each USB transfer data.
Default value is 128. After you set this, you need to set option in
Trouble shooting to start tracing the USB device data.
43
FactoryDefault={no, yes} Default is no.
Yes/no option to reset the system settings to factory default.
This parameter, when set to yes, is only initialized once for each
rmware change; however, you can set to no and then reboot
so the option will be initialized again.
NOTE:
If the FactoryDefault parameter value is changed to yes,
the thin client will reboot without notice to the user.
*Include=path/lename For {username}.ini le only. Species to include another INI le
at the position of this parameter. Only one level of including is
allowed (no nesting) and only for a {username}.ini le.
KeySequence={no, yes}
[Ctrl+Alt+Del={no, yes}]
[Ctrl+Alt+Up={no, yes}]
[Ctrl+Alt+Down={no, yes}]
[Ctrl+Alt+Left={no, yes}]
[Ctrl+Alt+Right={no, yes}]
[Win+L={no,yes}]
KeySequence — Yes/no option to enable the following
supported combined keys options.
KeySequence=yes enables all of these options, each having a
default of yes or no as noted that you can change individually to
the setting desired.
KeySequence=no disables all of these options regardless of the
individual settings.
Ctrl+Alt+Del — Default is no. Yes/no option to enable Ctrl+Alt
+Del to lock the thin client if the user is logged in with a
password. If the user is logged in without a password, this key
sequence does not work.
Ctrl+Alt+Up — Default is yes. Yes/no option to enable Ctrl+Alt
+Up to toggle a session between fullscreen and window mode.
Ctrl+Alt+Down — Default is yes. Yes/no option to enable Ctrl
+Alt+Down to toggle between task selections.
Ctrl+Alt+Left — Default is yes. Yes/no option to enable Ctrl
+Alt+Left Arrow to lock the thin client if the user is logged in
with a password. If the user is logged in without a password,
this key sequence does not work.
Ctrl+Alt+Right — Default is yes. Yes/no option to enable Ctrl
+Alt+Right Arrow to lock the thin client if the user is logged in
with a password. If the user is logged in without a password,
this key sequence does not work.
Win+L — Default is no. Yes/no option to enable use of Win+L
key to lock the client.
**Language=code
[ManualOverride={yes,no}]
[Charset={ISO-8859-1, ISO-8859-2, ISO-8859-5, ISO-8859-7}]
[ImageSux={us, fr, de, gb, b5, jp, ko, la, default]
Language — Species the keyboard language to use. Once
specied in a wnos.ini le, it is saved in non-volatile memory. The
code used must be exactly the same as the character string
shown in the keyboard language list below.
ManualOverride— If you set ManualOverride=yes, all the
parameters are only valid in factory default. It is helpful to
congure keyboard setting manually in case of multiple
nationalities within a company. This option must be following
Language=code statement.
Charset — Species which ISO option to use:
44
ISO-8859-1— This is Default. Supports part 1 of the standard
character encoding of the Latin alphabet.
ISO-8859-2 — Supports the Czech, Hungarian, Polish,
Romanian, and Slovenian languages on the desktop display.
ISO-8859-5 — Supports Cyrillic characters on the desktop
display.
ISO-8859-7 — Supports the Greek language on the desktop
display.
Keyboard Language List — Description and Code
Arabic (Saudi Arabia) — Ar_sau
Arabic (Iraq) — Ar_ira
Arabic (Egypt) — Ar_egy
Arabic (Libya) — Ar_lib
Arabic (Algeria) — Ar_alg
Arabic (Morocco) — Ar_mor
Arabic (Tunisia) — Ar_tun
Arabic (Oman) — Ar_oma
Arabic (Yemen) — Ar_yem
Arabic (Syria) — Ar_syr
Arabic (Jordan) — Ar_jor
Arabic (Lebanon) — Ar_leb
Arabic (Kuwait) — Ar_kuw
Arabic (U.A.E.) — Ar_uae
Arabic (Bahrain) — Ar_bah
Arabic (Qatar) — Ar_qat
Brazilian — Br
Canadian Multilingual — ca_ml
Chinese (Simplied) — Gb
Chinese (Traditional) — b5
Croatian — Croat
Czech — Cz
Czech (Qwerty) — Cz_q
Danish — Dk
Dutch — Nl
45
Dutch (Belgian) — Nl_be
Dutch (Belgian Comma) — Nl_be_c
English (3270 Australian) — au3270
English (Australian) — Au
English (New Zealand) — Nz
English (United Kingdom) — Uk
English (United States) (default) — Us
Estonian (Estonia) — Et_ee
Finnish — Fi
French (Belgian) — fr_be
French (Belgian Comma) — fr_be_c
French (Canadian) — fr_ca
French (France) — Fr
French (Swiss) — fr_sf
German — De
German (IBM) — de_ibm
German (Swiss) — de_sg
Greek — el
Hungarian — Hu
Icelandic — Is
Italian — It
Italian (Swiss) — it142
Latvian (Latvia) — lv_lv
Latvian (Qwerty) — lv_lv_q
Lithuanian (Standard) — lt_lt
Lithuanian (IBM) — lt_lt_i
Lithuanian (MS) — lt_lt_m
Japanese — Jp
Japanese_109a — Jp_109a
Korean — Ko
Korean (MS-IME2002) — ko_ime
Norwegian — No
46
Polish (214) — Pl
Polish Programmers — pl_prog
Portuguese — Pt
Portuguese (Brazil) — Pt2
Romanian — Ro
Russian — Ru
Slovakian — Slovak
Slovakian (Qwerty) — sk_q
Slovenian — Sloven
Spanish — Es
Spanish (Mexican) English — La(us)
Spanish (Mexican) Localized — La
Swedish — Se
Turkish — Turk
Turkish (QWERTY) — turk_q
U.S. International — us_int
NOTE:
Japanese refers to Japanese Input system (MS-IME2000),
not JP. Russian keyboard is supported for server input; it is
not supported to input locally.
ImageSux — Localization builds have dierent suxes
according to the keyboard language as follows:
jp (Japanese)
gb (Simplied Chinese)
b5 (Traditional Chinese)
ko (Korean)
la (Spanish Mexican)
By default, with the above keyboard languages, the system will
update the standard image according to the suxes with the
language code. With other keyboard languages, the system will
update the standard image without the sux specied.
For example, if you set Language=jp, the system will update the
image named C10_wnos.jp which is the Japanese localization
build. If you set Language=us, the system will update the image
named C10_wnos. The option ImageSux can specify the sux
of the image name when you do not want the default behavior.
Locale=<value>
[load={yes | no}]
Locale — Species the system language. Locale changes the
language for the user logon-experience screens only displayed
47
during boot-up and logon and not the conguration or
administrator screens.
Values include: English, us, French, fr, German, de, Chinese
Simplied, gb, Chinese Traditional, b5, Japanese, jp, Korean, ko,
Latin, la.
load=yes/no species whether or not to load the language le.
The language le must end with the locale name and be placed
under the folder wnos/locale in the le server.
NOTE:
For example, if you want to specify French and load the
localized messages, you must place a le named
French.msg under the folder wnos/locale in the le server,
and then add Locale=French load=yes in the INI le. You
can use Local=fr instead of Locale=French.
NOTE:
For Chinese Simplied, Chinese Traditional, Japanese, and
Korean localization, a font le must also be placed under
the folder wnos/font in the le server.
For example, if you want to specify the system language to
be Japanese, you must place a le named Japanese.msg
under the folder wnos/locale in the le server, place a le
named Japanese.fnt under the folder wnos/font in the le
server, and then add Locale=Japanese load=yes in the INI
le.
If you are under a Wyse maintenance contract, you can
download .fnt and .msg les from your My Downloads page
in the Self-Service Center.
If you are not under maintenance and wish to gain access
to these les, you must complete a product registration.
LocaleList=<value> LocaleList — Species a list of locale, so that a user can switch
the system language as needed.
Values include: English, us, French, fr, German, de, Chinese
Simplied, gb, Chinese Traditional, b5, Japanese, jp, Korean, ko,
Latin, la.
All the values will be displayed in the GUI. To view the GUI, click
System Preference → General → Locale. Be sure to place the
necessary les, for example German.msg, Japanese.msg,
Japanese.fnt, and so on under the correct folders as described
in the Locale parameter description.
**Password=<sign-on password>
[encrypt={no, yes}]
Species the password as the sign-on password; no minimum
length; maximum length is 64 characters.
In a wnos.ini le — If set to the default password, the system
will sign on automatically and not wait for username, password,
and domain entries.
In a [username].ini le — Be sure it is the encrypted password
of the user or the system will fail to sign on. This can be
changed by a user, if allowed, in the Sign-on dialog box.
encrypt — Default is no. Yes/no option to use an encrypted
string for a password in the INI le instead of clear text. If
48
encrypt=yes, the password in the INI is an ecrypted string
instead of cleartext . For example:
Password=wyseatc@123
or
Password=NCAONIBINMANMLCOLKCNLL \
encrypt=yes
** PRIVILEGE=[None, Low, High]
[LockDown= {no, yes}]
[HideSysInfo={no, yes}]
[HidePPP={no, yes}]
[HidePN={no, yes}]
[HideConnectionManager={no, yes}]
[EnableNetworkTest={no, yes}]
[EnableTrace={no, yes}]
[ShowDisplaySettings={no, yes}]
[EnableKeyboardMouseSettings={no, yes}]
[KeepDHCPRequestIP={no, yes}]
[SuppressTaskBar={no, yes, auto}]
[EnablePrinterSettings={no, yes}]
[CoreDump={ide, disabled]
[EnableNetworkSetup={yes, no}]
[DisableNetworkOptions={yes, no}]
[EnableSystemPreferences={yes, no, TerminalNameOnly}]
[DisableTerminalName={yes, no}]
[DisableSerial={yes, no}]
[DisableRotate={yes, no}]
[DisableChangeDateTime={yes, no}]
[EnableVPNManager={yes, no}]
[TrapReboot={yes, no}]
[EnableCancel={yes, no}]
Default is high.
Privilege controls operator privileges and access to thin client
resources. See also CCMEnable={yes, no}.
None — This level of access is typical for kiosk or other
restricted-use deployment. The System Setup selection on the
desktop menu is disabled and the Setup submenu is not
displayed. The Connect Manager is disabled by default.
The Connect Manager can be enabled by using the
HideConnectionManager=no option, however, the user cannot
create a new connection or edit an existing connection. The
user cannot reset the thin client to factory defaults.
Low — This access level is assigned to a typical user. The
Network selection on the Setup submenu is disabled and the
Network Setup dialog box cannot be opened. The user cannot
reset the thin client to factory defaults.
High — Administrator access level allows all thin client
resources to be available with no restrictions. A user can reset to
factory defaults.
NOTE:
If None or Low is used, the Network Setup dialog box is
disabled. If it is necessary to access this dialog box and the
setting None or Low is not saved into NVRAM, remove the
network connector and reboot.
LockDown — Default isno. Yes/no option to allow lockdown of
the thin client. If yes is specied, the system saves the privilege
level in ash. If no is specied, the system clears the privilege
level from ash to the default unlocked state.
49
NOTE:
If the thin client is set to LockDown without a High
privilege level, it will disable the G key reset on power-up.
LockDown can be used to set the default privilege of the
thin client. For example
• If LockDown=yes, then the privilege is saved in
permanent registry.
• if LockDown=no, then the privilege level is set to the
default high in the permanent registry.
That is, the system has a default high privilege level,
which is stored in the permanent registry.
• If you do not specify a privilege in either the wnos.ini
le or the {username}.ini le or the network is
unavailable, the setting of LockDown will take eect. It
can be modied by a clause.
For example, privilege=<none|low|high>lockdown=yes
in a wnos.ini le or a {username}.ini le sets the default
privilege to the specied level.
HideSysInfo — Default is no. Yes/no option to hide the System
Information from view.
HidePPP — Default is no. Yes/no option to hide the Dialup
Manager, PPPoE Manager, and PPTP Manager from view.
HidePN — Default is no. Yes/no option to hide the PNAgent or
PNLite icon from view on the taskbar.
HideConnectionManager — Default is no. Yes/no option to
hide the Connect Manager window from view.
NOTE:
As stated earlier, although the Connect Manager is
disabled by default if Privilege=none, the Connect Manager
can be enabled by using HideConnectionManager=no;
however, the user cannot create a new connection or edit
an existing connection.
EnableNetworkTest — Default is no. Yes/no option to enable
the Network Test.
EnableTrace — Default is no. Yes/no option to enable trace
functionality. The active items are added to the desktop right-
click menu in Privilege=Highlevel.
ShowDisplaySettings — Default is no. Yes/no option to enable
the Display Settings in a popup menu.
EnableKeyboardMouseSettings. Yes/no option to enable the
keyboard and mouse conguration preferences.
KeepDHCPREquest — Default is no. Yes/no option to keep the
same IP address that is requested from the DHCP server after a
request fails and does not invoke the Network Setup dialog box.
SuppressTaskBar — Default is no. Yes/no/auto option to hide
the taskbar. If set to auto the taskbar will automatically hide/
display the taskbar.
50
When using this parameter in a wnos.ini le, it will be saved to
NVRAM if EnableLocal is set to yes in the wnos.ini le.
EnablePrinterSettings — Default isno. Yes/no option to enable
printer congurations when a user Privilege=None.
CoreDump — The option CoreDump=disabled will disable the
core dump function.
EnableNetworkSetup — This option is used to enable and
disable the network setup.
DisableNetworkOptions — This option is used to enable and
disable the network options.
EnableSystemPreferences — This option is used to enable and
disable the system preferences. If the optional parameter,
EnableSystemPreferences=TerminalNameOnly is set with
Privilege=none, then the System Preferences menu is enabled,
and only Terminal Name eld can be accessed.
DisableTerminalName— This option is used to enable and
disable the terminal name.
DisableSerial — This option is used to enable and disable the
serial table in peripherals.
DisableRotate — If the optional DisableRotate=yes is set, the
rotate setting in the display setup will be disabled. This is only
valid for C class clients because the rotation performance in C
class may not be desirable.
NOTE:
If the optional EnableNetworkSetup=yes is set with
Privilege={none, low}, the network setup will be enabled.
If the optional DisableNetworkOptions=yes is set at the
same time, the Options table will be disabled.
If the optional EnableSystemPreferences=yes is set with
Privilege={none, low}, the system preferences setup will be
enabled.
If the optional DisableTerminalName=yes is set at the same
time, the terminal name eld will be disabled.
If the optional DisableSerial=yes is set with
Privilege={none, low}, the serial table in peripherals setup
will be enabled.
DisableChangeDateTime— If the optional
DisableChangeDateTime is set, the function of changing date
and time locally will be disabled. For example, if you right-click
the time label in taskbar, nothing is displayed. The Change Date
and Time button in System Preference will be invisible.
EnableVPNManager—If the optional EnableVPNManager=yes
is set with Privilege={none, low}, the VPN Manager setup is
enabled.
TrapReboot— If the optional TrapReboot=yes is set, client
reboots after the execution of the trap.
51
EnableCancel— If the optional EnableCancel=yes is set with
Privilege={none, low}, the counter down window for reboot or
shutdown can be cancelled. The default value is no.
For example, set the following ini,
Inactive=1
AutoSigno=yes Shutdown=yes
ShutdownCounter=30
Privilege=none EnableCancel=yes.
After no mouse and keyboard input in 1 minute, the system will
pop up a counter down window to shut down in 30 seconds.
You can cancel it.
**ScreenSaver=value{0, 1, 5, 10, 15, 30}
[LockTerminal={0, 1, 2, 3}]
[Type={0, 1, 2, 3}]
[Image=imagele]
[PictureTimer={2-60}]
[PictureOrder=random]
[PictureCheck=always]
[PictureLayout={stretch, tile, center}]
[Sleep={0-180}]
Screensaver— Species to put the thin client in a screensaver
state when the time limit for inactivity is reached, that is delay
before starting is reached.
Default value is 10. Value and delay before starting the
screensaver:
0 — Disabled
1 — 1 Minute
5 — 5 Minutes
10 — 10 Minutes
15 — 15 Minutes
30 — 30 Minutes
The default screen saver value is 10 minutes and the
maximization value is 30 minutes.
LockTerminal— This is an optional parameter and species to
put the thin client in LOCK state when the screen saver is
activated. Default is 0.
0 — Disabled.
1 — Puts the thin client in a LOCK state when the screen saver
is activated. The user is prompted with an unlock dialog box to
enter the sign-on password to unlock the thin client.
LockTerminal settings are saved into NVRAM if LockTerminal=1
and EnableLocal=yes is set in the wnos.ini le.
2— Puts the thin client in a LOCK state when the screen saver
is activated, however, the unlock dialog box cannot be viewed
and the desktop uses Blank the Screen as the screensaver.
3— Puts the thin client in a LOCK state when the screen saver
is activated, and the username and password are needed to
unlock the terminal. The Password eld in the Unlocking window
is invisible.
When you click OK or press the Return key, a message box pops
up to input the username and password to unlock the terminal.
52
NOTE:
The user must be signed on with a password for a Lock
action to take eect. If set in KeySequence, users can lock
the thin client at any time by pressing Ctrl+Alt+Left Arrow
or Ctrl+Alt+Right Arrow.
Type — Species which type of screensaver to use.
0 — Blank the Screen
1 — Flying Bubbles
2 — Moving Image
3 — Showing Pictures
Imagele — This is an optional parameter and species an
image le residing in the bitmap sub-folder under the home
folder to be used as a Moving Image screensaver.
If Type is set to 2 and no image le is present then the default
Dell Wyse logo is used.
If Type is set to 3, pictures residing in picture subfolder under
the home folder are displayed.
If SelectGroup=yes, then the pictures residing in the picture
subfolder under the group folder are displayed. For example,
/wnos/ini/{group_dir}/picture
If group pictures do not exist, global pictures are used.
Supported formats include JPG, GIF, PNG and BMP.
PictureTimer — Species the interval to wait in seconds to
display another picture. Default value is 6 seconds.
PictureOrder — Species the order of picture les to display.
The default is to use the order of sort from A to Z. If set to
random, pictures are displayed randomly.
PictureCheck — Species whether to check for picture les
servers or not.
NOTE:
If set to always, the picture les in le servers are checked
when the screen saver starts every time. By default, the
system checks for picture les only when the screen saver
starts for the rst time to decrease network trac.
PictureLayout— The optional parameteris used to specify the
arrangement on the desktop when pictures are displayed. For
the tile selection, the image is replicated across the desktop. For
the center selection, the image is placed at the center of the
desktop without any image size change. For the stretch
selection, the image is either expanded or shrinked to ll the
desktop. The default value is stretch.
Sleep—The optional parameter is used to specify the interval
minutes to stop soft screen saver and turn o monitor. After the
specied minutes, since software screen saver starts up, the
software screen saver is stopped and turns o the monitor until
screen saver is o. The value range is 0 to 180. The value 0 is
default which disables this function.
53
Shutdown={standby, turno} Default is standby.
Species the system state when shutting down the unit. If set
to standby, the ThinOS system is suspended. When the unit
starts up, it is resumed. It does not go to the BIOS and thus
turns on quickly.
If set to turno, the system is turned o. When the unit starts
up, it rst starts the BIOS then ThinOS.
**ShutdownCount={0 to 60} (seconds)
or
**ShutdownCounter={0 to 60} (seconds)
ShutdownCount or ShutdownCounter — Species the
number of seconds to count down before the shutdown
sequence starts upon using the thin client power button when
there are active sessions.
The default value is 10, however, to commence shutdown
immediately and prevent the display of the countdown dialog
box, set the value to 0.
ShutdownInfo={no, yes} Yes/no option to display various information such as System
Version, Terminal Name, IP Address, and MAC Address in
shutdown window.
S10WDMFlash=ash size Species the ash size. This value will be saved into NVRAM
and then eported to the WDM server.
NOTE:
This statement guarantees that all S10 thin clients function
with DDC regardless of ash size.
TimeServer=server_list
[TimeFormat={24-hour format, 12-hour format}]
[DateFormat={yyyy/mm/dd, mm/dd/yyyy, dd/mm/yyyy}]
[GetBiosDT={no, yes}]
TimeServer — Species the SNTP time servers to use for time
retrieval. If a time server is not dened, the client CMOS/ BIOS
internal clock will be used as a reference.
TimeFormat — Default is 24-hour format. Species the time
format to use.
DateFormat — Default is yyyy/mm/dd. Species the date
format to use.
NOTE:
The TimeFormat and DateFormat settings in a wnos.ini le
will be saved into NVRAM if EnableLocal=yes is set in the
wnos.ini le.
GetBiosDT — Default is no. Yes/no option to obtain time from
BIOS/CMOS when the timeserver is not available or cannot be
contacted.
For Example:
TimeServer=time.nist.com\TimeFormat=24-hour
formatDateFormat=mm/dd/yyyy
or
TimeServer=time.nist.gov\
TimeFormat=24-hour format\
DateFormat=mm/dd/yyyy
WakeOnLAN={yes, no} Default is yes.
54
Wake-on-LAN allows a thin client to be turned on or woken up
by a network message.
If WakeOnLAN=yes, ThinOS will respond for the Wake-On-LAN
packet for a remote wake up.
If WakeOnLAN=no, ThinOS will not respond for the Wake-On-
LAN packet.
NOTE:
To use the WakeOnLAN parameter with a C10LE, the
C10LE must use BIOS version 1.0B_SPC001 or later.
Peripheral settings for wnos.ini les, {username} INI, and $MAC INI
les
Table 6 contains the parameters used for conguring peripheral settings such as keyboard, monitor, mouse, printers and bluetooth
devices. The underlined values are default values.
Table 8. Peripheral Settings for wnos.ini Files, {username} INI, and $MAC INI les
Parameter
* Global overrides identically-named user prole
** After sign o, user prole returns to global value
Description
DefaultPrinter={LPD1, LPD2, LPD3, LPD4, COM1, COM2, LPT1,
LPT2, SMB1, SMB2, SMB3, SMB4}
Species the default printer. Be sure the printer set as default
is enabled or the setting will be invalid.
Device=audio
volume={low, middle, high} or {0 to 25}
mute={0, 1, 2, 3}
[mic_vol={high, middle, low} or {0-25}]
[mic_mute={0, 1}]
[min_cache={1-50}]
[EnableSpeaker={yes, no}][
Species the local thin client audio volume.
volume — Default is middle. Species the volume level.
high — maximum volume
middle — medium volume
low — minimum volume
Values of 0-25 provide more exact volume level
mute — Default is 0. Option to enable/disable mute.
0 — no mute
1 — mutes audio
2 — mutes audio and system beep
3 — mutes system beep
mic_vol — Default is medium. Option to set volume levels to
high, middle or low.
high — maximum volume
middle — medium volume
low — minimum volume
55
Values of 0-25 provide more exact volume level.
mic_mute — Default is 0.
0 — no mute
1 — mutes audio
min_cache — Default is 1. This option is for conguring ThinOS
audio playback minimum buering amount in ten millisecond
units. This can be used when network bandwidth is not large
enough to play audio smoothly.
In such cases, set min_cache higher, so that ThinOS will buer
more audio data before playing the audio.
1 – ThinOS will buer at least 10 ms of audio data when playing
audio.
...
50 – ThinOS will buer at least 500 ms (0.5s) of audio data
when playing audio.
EnableSpeaker — Default is yes. Yes/no option to enable the
internal loud speaker.
Device=bluetooth
[Disable={yes, no}]
Set the parameter to disable bluetooth devices. The default
value is no. The value is stored into NVRAM. If you set
Disable=yes, the bluetooth devices are not initialized.
Device=camera
[format=raw]
[width={camera supported width}]
[height={camera supported height}]
[fps={camera supported fps}]
[samplerate={0, 1, 2, 3, 4, 5}]
[optimize={no, yes}]
[Disable={yes, no}]
Specify the ThinOS local camera settings.
format — Support only for raw video type; format=raw is xed.
width — The width of the resolution that the local camera
supports.
height — The height of the resolution that the local camera
supports.
fps — The frame per second (fps) of the resolution that the
local camera supports.
samplerate — The software level sample rate based on fps to
optimize the performance, where the frame per second for the
camera is actually equal to the fps value multiplied by the
samplerate value. Samplerate values mean the following sample
rates:
0 — 1/1
1 — 1/2
2 — 1/3
3 — 1/4
4 — 1/5
5 — 1/6
optimize — Default is no. Yes/ no option to optimize the width,
height, and fps at 320 x 240 at 10 fps. That is, if optimize=yes,
56
then 320 x 240 at 10 fps will be used for the local camera
settings regardless of the individual settings in width, height,
and fps; as long as the camera supports the 320 x 240 at 10 fps.
If optimize=yes and the camera does not support the 320 x 240
at 10 fps settings, an error will be present in the Event Log of
ThinOS.
If optimize=no then the individual settings in width, height, and
fps will be used as long as the camera supports them.
Disable— When you specify Disable=yes, the device is disabled.
For example, the Camera tab in peripherals setting is disabled,
the Exclude video devices option in Global Connection Settings
is disabled. The device cannot be accessed at local and remote
sessions.
**Device=keyboard
[numlocko={no, yes}]
[repeatrate={0, 1, 2}]
[repeatdelay={0, 1, 2, 3, 4, 5, 6, 7}]
Device — Species the local keyboard.
numlocko — Default is no. Yes/no option to turn o the
NumLock of the keyboard.
repeatrate — Default is 1. Species the keyboard repeat rate.
0 — Slow
1 — Medium
2 — Fast
repeatdelay — Default is 2. Species the keyboard delay in
seconds, before repeat.
0 — 1/5
1 — 1/4
2 — 1/3
3 — 1/2
4 — 3/4
5 — 1
6 — 2
7 — No Repeat
NOTE:
These settings in a wnos.ini le will be saved into NVRAM if
EnableLocal=yes is set in the wnos.ini le.
Device=Rdeas
[DisableBeep={yes, no}]
[DisableKeystroke={yes, no}]
[SetCardType={yes, no} Conguration1={*}
Conguration2={*} ]
[DisableInitialization={yes, no}]
Device=Rdeas — Species the local Rdeas readers.
DisableBeep — Default is yes. Option disables the beep sound
when the card is read.
DisableKeyStroke — Default is yes. Option disables the
keyboard movements and key strokes.
57
[DisableLed={yes, no} SetCardType — Default is no. Used only for pcProx Plug
readers.
• If set to yes, then the Conguration #1 initializes to HID Prox
608x compatibility and Conguration #2 initializes to
RDR-758x Equivalent.
• If set to no, then the card type remains unchanged.
DisableInitialization — Default is no. Option disables
congurations to the card reader.
DisableLed—If set to yes, then LED is turned o. If set to no,
then LED is controlled by Reader. The default value is not set.
Device=UsbSerial
[start=com{1~4}]
[com{1~4}=com{5~8}]
Species the rst COM port number that can be used by USB-
serial port.
For example, the rst USB-Serial port on a VL10 thin client is
COM2 by default, but it can be changed to COM3 with the INI
le Device=UsbSerial Start=COM3.
1. Without any ini setting: The COM number registered is
related with USB port number. Since USB port number is
hardware property, it is always mounted in the same order,
and there is no relation with the plug sequence.
2. If Device=UsbSerial start=COMx is set, then rule 1
does not work, the COM number is set by "x", and "x"
range is 1-4, since ThinOS only supports maximum of four
COM.
3. If COMx=COMy is set, the range for x is 1 - 4, and the real
name in ThinOS is considered. The range for "y" is 5 - 8,
since ICA running on ThinOS only supports maximum of
eight COM.
NOTE: The INI [com{1~4}=com{5~8}] is applicable
for ICA connections only.
**DisableMouse={no, yes}
or
MouseDisable={no, yes}
DisableMouse — Default is no. Yes/no option to disabled
mouse pointer so that it is shown on the screen. The pointer is
enabled if any mouse activity occurs.
or
MouseDisable — Default is no. Yes/no option to disabled
mouse pointer so that it is shown on the screen. The pointer is
enabled if any mouse activity occurs.
LpdSpool={0-50} Species the size of spool to buer all the data before sending
them to the LPD printer. The range of value is 0 to 10, that is, 0
MB to 10 MB. If the specied value is above the range, then the
value is set to 5.
The range of value is extended to 50.
In build 8.2_001 or later builds, the LPD data is spooled to a le
in a ram disk instead of a buer. So the value of the parameter
will not be related to the spool size as before.
If LpdSpool=0, the function is disabled, otherwise the function is
enabled.
58
LPTPortBind={yes, no} LPTPortBind — Default is Yes. Species the LPT bind to the
USB Port Policy.
If set to Yes, then the registered port follows the following
binding policy: LPT1 from USB ports 1/3/5/7 and LPT2 from
USB posts 2/4/6.
If set to No, then the LPT port plugged in rst is LPT1 followed
by LPT2, and so on.
MicBoost={no, yes} Default is no.
Yes/no option to enable on-board microphone boost.
**MouseNewSpeed={1-9} Default is 6.
Value species the mouse speed within a range of 1 through 9,
where 1 is slowest and 9 is fastest. This parameter is the
replacement of MouseSpeed from build 7.0.1_07.
**MouseSwap={0, 1} 0/1 option to swap the mouse buttons. For example, for left-
handed use.
0 — No
1 — Yes
NetworkPrinter=host/queue
[PrinterID=Window driver name]
[Enabled={no, yes}]
NetworkPrinter — Species the conguration for the network
(LPD) printer in the same way as described for the Printer
Setup dialog box in the Dell Wyse ThinOS Administrator’s Guide.
The host and queue parameters dene the IP address and
queue name of the printer.
PrinterID — Species the Windows printer driver name.
Enabled — Default is yes. Yes/no option to enable the network
(LPD) printer.
Printer={COM1, COM2, LPT1, LPT2}
[Name=<name>]
[PrinterID=window_driver]
[Class=classname]
[Enabled={no, yes}]
[EnableLPD={no, yes}]
Default is COM1.
Printer — Species the local printer to congure.
Name — Species the name of the printer. This option must
be used.
PrinterID — If not specied, the default Generic/Text Only is
used.
Class — Used in ThinPrint print for TPAutoconnect; the
ThinPrint technology of mapping the printer from the client side.
It can group printers to use the same template on the ThinPrint
server side. The strings PCL5, PS, and TXT are pre-dened
classes. Class can be a string with 7 characters.
Enabled — Default is yes. Yes/no option to enable the printer.
EnableLPD — Default is no. Yes/no option to enable the LPD
service.
NOTE: The parameters must be specied in the order
shown.
59
Printer={LPD1, LPD2, LPD3, LPD4, LPD5-LPD36}
[LocalName=name]
[Host= host]
[Queue=queue]
[PrinterID=window_driver]
[Class=classname]
[Enabled={no, yes}]
Default is LPD1.
Printer — Species the LPD printer to congure.
LocalName — Species the name of the printer. If LocalName
is not specied, the Queue name is used.
Host — Species the host name of the printer.
Queue — Species the queue name of the printer.
PrinterID — Species the windows driver to use for the printer.
If not specied, the default Generic/Text Only is used.
Class — Used in ThinPrint print for TPAutoconnect; the
ThinPrint technology of mapping the printer from the client side.
It can group printers to use the same template on the ThinPrint
server side. The strings PCL5, PS, and TXT are pre-dened
classes. Class can be a string with 7 characters.
Enabled — Default is yes. Yes/no option to enable the printer.
These settings in a wnos.ini le will be saved into NVRAM if
EnableLocal=yes is set in the wnos.ini le.
NOTE:
The parameters must be specied in the order shown. For
backward compatibility, LPD is accepted as LPD1.
LPD2 – LPD4 are new in the 5.1. For WT1200 platform where
Local ash is absent, locally congured LPD2-LPD4 and SMB1
to SMB4 disappear on power cycle.
Printer={SMB1, SMB2, SMB3, SMB4}
[LocalName=name]
[Host=\[domain]\host]
[Name=share_name]
[PrinterID=window_driver]
[Class=classname]
[Enabled={no, yes}]
[EnableLPD={no, yes}]
[Username=username]
[Password=password]
[Domain=domain name]
Default is SMB1.
Printer — Species the shared Microsoft network printer to
congure.
LocalName — Species the name of the shared printer.
Host — Species the host name of the shared printer specied
as \domain\host when the host is congured within a Microsoft
domain, otherwise, host can be specied as \\host.
Name — Species the shared name of the shared printer.
PrinterID — Species the windows driver to use for the printer.
If not specied, the default Generic/Text Only is used.
Class — Used in ThinPrint print for TPAutoconnect; the
ThinPrint technology of mapping the printer from the client side.
It can group printers to use the same template on the ThinPrint
server side. The strings PCL5, PS, and TXT are pre-dened
classes. Class can be a string with 7 characters.
Enabled — Default is yes . Yes/no option to enable the printer.
EnableLPD — Default is no. Yes/no option to enable the LPD
printer.
Username — Species the username of a user who can use
the SMB printer.
Password — Species the password of a user who can use the
SMB printer.
60
Domain — Species the domain name of the SMB printer.
**RepeatDelay={0, 1, 2, 3, 4, 5, 6, 7} Default is 2. Species the keyboard delay before repeat in
seconds.
0 — 1/5
1 — 1/4
2 — 1/3
3 — 1/2
4 — 3/4
5 — 1
6 — 2
7 — No Repeat
**RepeatRate={0, 1, 2} Default is 1. Species the keyboard repeat rate.
0 — Slow
1 — Medium
2 — Fast
*Resolution=[DDC, 640X480, 800X600,
1024X768, 1152X864, 1280X720,
1280X768, 1280X1024, 1360X768,
1366X768, 1368X768, 1400X1050,
1440X900, 1600X900, 1600X1200,
1680X1050, 1920X1080, 1920X1200]
[Refresh=60, 75, 85}
[rotate={right}]
Default is DDC.
Resolution — Species the local display resolution. Option DDC
can be specied to select default display resolution.
NOTE:
When using the Wyse Y Cable, DDC will properly work on
both monitors by default. However, if connected to R10L/
R00x clients and you are using Dual DVI, then you must
add the following DualHead INI parameter and DualHead
option for DDC to properly work on both monitors:
Parameter: DualHead=yes
Option: ManualOverride=yes
Refresh — Species the local display refresh rate.
NOTE:
If the Resolution or Refresh parameter values are changed,
the thin client will reboot without notice to the user.
rotate — Rotate allows you to rotate monitors for viewing in
Portrait mode. For example:
screen=1 resolution=1280x1024 refresh=60
rotate=none
NOTE:
Due to processing power requirements, rotate is not
recommended and supported on the C class platforms at
this time.
61
Important:
The Screen parameter must be placed before the
Resolution parameter. For example:
screen=1 resolution=1280x1024 refresh=60
rotate=none
*Screen={1, 2} Default is 1.
Screen — Species the monitor for the Resolution parameter.
You can congure each monitor with its own resolution; the
specic monitor is set with the Screen= option.
NOTE:
The Screen parameter must be placed before the
Resolution parameter. For example:
screen=1 resolution=1280x1024 refresh=60
rotate=none
Connection Settings for wnos.ini les, {username} INI, and $MAC INI
les
Table 7 contains the parameters (and their options) used for conguring connection settings.
Table 9. Connection Settings: wnos.ini les, {username} INI, and $MAC INI les
Parameter
* Global overrides identically-named user prole
** After sign o, user prole returns to global value
Description
**AltCacheDisable={no, yes} Default is no.
Yes/no option to disable the new cache mechanism allowing
more memory to be available to a user. This is developed with
Citrix Presentation Server 4.0 and Windows Server. If set to no,
the new cache mechanism is enabled.
**Alternate={no, yes} Default is no.
Yes/no option to use an alternate IP address returned from an
ICA master browser to get through rewalls. This setting in a
wnos.ini le will be saved into NVRAM if EnableLocal=yes is set
in the wnos.ini le.
AutoDetectNetwork={yes, no} RDP Only.
Default is yes.
Yes/no option to enable RDP auto detect network feature.
When this option is set to yes the Optimize for low speed link
and the Desktop Experience options are disable by default.
**AutoSigno={no, yes}
[Shutdown={no, yes}]
[Reboot={no, yes}]
Default is no.
AutoSigno —Yes/no option to automatically sign-o a user
when the last opened session is closed.
62
Shutdown — Default is no. Yes/no option to shut down the thin
client. If shutdown is set to yes, the ShutdownCounter value is
used to control the count-down before the system is turned o.
Reboot — Default is no. Yes/no option to reboot the thin client.
If Reboot is set to yes, the ShutdownCounter value is used to
control the count down before the system is rebooted.
ClearLicense={no, yes} Default is no.
Yes/no option to clear the TSCAL license stored in the non-
volatile memory. It can be replaced by FixLicense=clean.
Connect={ICA, RDP} Connect — Connection protocol. Follow the ICA option list, see
Table 8: ICA Connect Options or RDP option list, see Table 9:
RDP Connect Options. Any options you use for your connection
must be on the same logical line; \can be used for line
continuation, see Rules and Recommendations for Constructing
the INI Files.
ConnectionBroker={default, Microsoft, Quest, VMware} Default is default.
Species the Connection Broker type. Select VMware to enable
VDM XML support. If you enter VMware, the VMware logo
appears on the login screen.
For Dell vWorkspace broker, ConnectionBroker=Quest is
recommended.
*Device=Ethernet
[Speed={Auto, 10M HD, 10M FD, 100M HD,
100M FD, or 1000M}
[MTU=mtu]
[KeepAlive={1-600}]
[Warning={no, yes}]
[StaticIPWaitFileServer={0-255}]
Device — Species to use an Ethernet.
Speed — Default is auto. Species the ethernet speed to either
Auto, 10 MHD, 10 M FD, 100 M HD, 100 M FD, or 1000 M. If
Speed is set in a wnos.ini le, the Speed statement in the
{username}.ini le will be disabled.
NOTE:
Device and Speed parameters can be replaced by the
EthernetSpeed parameter.
MTU — A maximum transmission unit value between 500 to
1500.
KeepAlive — Species a time value in seconds between 1 and
600 to keep an idle connection alive.
Warning — Default is no. Yes/no option to warn about an idle
connection. In the seconds of the specied KeepAlive, if the tcp
connection is idle and Warning=yes, one log will be printed for
the session. For example:
device=ethernet keepalive=20 warning=yes
StaticIPWaitFileServer — Default is 0. Species the timeout
threshold in seconds for cases of static IP.
NOTE: The default 0 turns o this parameter and allows
the system to wait the system default 120 seconds.
If the Speed parameter value is changed, the thin client
requires a reboot.
63
Device=vusb
[ForceRedirect=DeviceID]
[ForceLocal=DeviceID]
[Type={TCX, HDX}]
[InterfaceRedirect={no, yes}]
Device — Species the ID of a local USB device that is not
redirected by default.
ForceRedirect — Species a forced redirect of the local USB
device to the server. This parameter has priority over
ForceLocal.
ForceLocal — Species that the local USB device should not
be redirected to the server. The DeviceID can be found in the
event log. For example, if you nd TCX USB: Local Device
(0x04f2,0x0112,0x03,0x01,0x01), set the parameter as:
Device=vusb
ForceRedirect=0x04f2,0x0112,0x03,0x01,0x01
Type —For Citrix Environments Only. This option allows you to
force the usage of HDX for USB virtualization instead of TCX.
For example:
Device=vusb Type=HDX
NOTE:
To use the TCX option, TCX Suite must be install on the
target server.
InterfaceRedirect — Default is no. Yes/no option to enable part
of a composite device to run locally and part of the device to
run on a remote session.
Device=Wireless
[Mode={Infrastructure, AdHoc}]
[SSID=ssid Channel={1-14}]
[WepKey={None, 1-4}]
[Key1=k1]
[Key2=k2]
[Key3=k3]
[Key4=k4]
[Key1Enc=key1 encrypted]
[Key2Enc=key2 encrypted]
[Key3Enc=key3 encrypted]
[Key4Enc=key4 encrypted]
[RoamSensitive={high, medium, low}]
[Algorithm={Open, SharedKey}]
[DisableBand={None, 2.4G, 5G}]
[PreferBand={None, 2.4G, 5G}]
[Priority=ssid_list]
[DisableN={no, yes}]
Device — Denes the wireless Ethernet device remotely and
saves to the local NVRAM. Not all options are needed. For
example, you can dene Key 1 to have a key of k1 and leave out
Key 2 through Key 4.
NOTE: See also IEEE8021X={yes, no}.
General example:
device=wireless SSID=THINOS
RoamSensitive=low
k1 to k4 are any real values of 5 to 13 characters or 10 to 26 Hex
digits. Encrypted keys will overwrite unencrypted keys. Thus, if
both Key1 and Key1 Encare are congured, then Key1Enc will
overwrite Key1.
RoamSensitive — Denes the sensitivity level of wireless
roaming with respect to launching the Roaming daemon:
high - signal lower than -60 dBm
medium - signal lower than -70 dBm
low - signal lower than -80dBm
The RoamSensitive parameter is also used to enable wireless
roaming. If it is not congured in the INI le, roaming will never
be launched even if the signal is lower than -80dbm, unless it
totally loses a wireless signal.
Algorithm — Species the authentication method of WEP
between ThinOS and the access point. If set to Open, open
authentication will be selected. If set to ShareKey, shared key
authentication will be selected.
DisableBand — Default is None. Use to disable 2.4G or 5G
802.11 band.
64
[DisableWlan={yes, no, EnetUp}] PreferBand —This parameter is used to set the priority of
wireless connection band, and select the 2.4G or 5G access
point to connect. Default is None.
Priority — sets the priority of wireless proles. The ssid list is
separated by a semicolon or comma and the priority is from high
to low.
DisableN — Default is no. Yes/no option to disable 802.11n Wi-
Fi wireless networking.
DisableWlan— Used to disable the wireless connection. If
DisableWlan=EnetUp, and the Ethernet is on while booting, the
wireless connection is disabled.
Device=Wireless Mode=Infrastructure
SSID=ThinIsIn
IEEE8021X=yes network=wireless
profile=ThinIsIn access=WPA2-ENT
eap=yes eaptype=EAP-PEAP peapeap=EAP-
MSCHAPV2
Device=Wireless Mode=Infrastructure
SSID=wtos_95 roamsensitive=high
IEEE8021X=yes network=wireless
profile=wtos_95 access=WPA2-ENT
eap=yes eaptype=EAP-PEAP peapeap=EAP-
MSCHAPV2
Device=Wireless Mode=Infrastructure
SSID=wtos_11n
IEEE8021X=yes network=wireless
profile=wtos_11n access=WPA2-PSK
wpa2pskpwd=2wsx3edc
Device=Wireless
Priority="wtos_11n,wtos_95,ThinIsIn"
DISABLETSGW Important: DISCONTINUED. DO NOT USE. See
TSGWENABLE
**EnableLocal={no, yes}
[HideDefault={no, yes}]
Default is no.
Yes/no option to enable locally congured entries to show in the
Connect Manager list. When connections dened in local NV-
RAM are displayed in the Connect Manager, they are marked
with an asterisk.
If EnableLocal=yes is in a wnos.ini le, then the global
information will be saved into NVRAM.
NOTE: The global information includes: SEAMLESS,
ALTERNATE, Reconnect, icaBrowsing, LowBand,
NoReducer, Time settings, and Printer settings in a
wnos.ini le.
HideDefault — Default is no. Yes/no option to hide the default
ICA and RDP connections that are present on the devices.
ENABLETSGWSAMEINFO Important: DISCONTINUED. DO NOT USE.
*EthernetSpeed={Auto, 10M HD, 10M FD, 100M HD, 100M FD,
1000M}
Default is auto.
EthernetSpeed — Species the Ethernet Speed to either Auto,
10M HD, 10M FD, 100M HD, or 100M FD. Once specied, it is
65
saved in the non-volatile memory. This parameter can be
replaced by the Device and Speed parameters.
NOTE:
If the EthernetSpeed parameter value is changed, the thin
client will require a reboot.
Fastconnect={yes, no}
[Key={F1, F2, F3, F4, F5, F6, F7, F8, F9, F10, F11, F12, Pause/
Break}]
[Ctrl={yes, no}]
[Alt={yes, no}]
[Connect={ICA, RDP, PCoIP}]
[List={*|app1|server1;app2}]
[Title={*_seamless_window_title*]
If you set the parameter to yes, press the special key to launch
specied desktop or published application. If the desktop or
published application is available, pressing the key brings it to
the foreground.
If you set to no, the followed options are ignored and disables
fast connect functions. The followed options need to be
congured to one or several fast connect setting.
The option Key species the fast connect key.
The option Ctrl species whether the Control key is combined
or not, for fast connect key.
The option Alt species whether the Alt key is combined or not,
for fast connect. The option Connect species the protocol of
fast connecting session.
The option List species the connecting list of the desktop or
published application. It supports wildcards * to match the
session host/application or description. Also it supports a list
separated by ; or ,.
The option Title species the seamless window name. It
supports wildcards * to match the window name. For a
seamless window, it is needed because seamless windows share
session. It uses List option to match session and uses the option
Title to match the seamless window.
For example,
fastconnect=yes \
key=F1 ctrl=no alt=no connect=ica list="Excel 2013"
title="*Excel*" \
key=F2 ctrl=yes alt=no connect=ica list="XA76-2008R2*".
When you press F1, the application Excel 2013 is launched. If
there is a seamless window which matches the title *Excel* in
this session, the seamless window is brought to the foreground,
else it is launched.
When you press Ctrl+F2, the desktop XA76-2008R2* is
launched. If the desktop is available, it is brought to the
foreground.
FastDisconnect={yes, no, Signo}
[CtrlKey={yes, no}]
[AltKey={yes, no}]
[PowerButton=signo]
Default value is no.
If the value is set to yes, pressing the F12 (default) key or the
key dened in FastDiconnectKey= statement will close the
active window of the session. If the active window is a seamless
window, the action will only close the window. If the window is
not a seamless window, then the session will be disconnected.
If the option Ctrl Key and/or Alt Key is set to yes, then the
function key should be combined with Ctrl key and/or Alt key.
66
For PCoIP session, press Ctrl+Alt+F12 key combination to
disconnect the session unless FastDisconnect=no is congured.
This combined disconnect key is compatible with other
platforms such as P25 and Linux.
If the value is set to Signo, pressing the F12 (default) or the
key dened in FastDisconnectKey= statement will disconnect all
sessions and return to the signon window.
If PowerButton is set to signo, pressing the power button of
the unit after you sign on will disconnect all sessions and return
to the logon window. Otherwise, the unit will shutdown normally.
FastDisconnectKey={F1, F2, F3, F4, F5, F6, F7, F8, F9, F10, F11,
F12, Pause\Break}
Species the disconnect key that will close the active window
from the session.
FixLicense={Factory, clean, yes, no, OldFormat} Default is no.
Species the option to replace the TSCAL license stored in the
non-volatile memory.
NOTE:
The OldFormat value species to keep the same license
format as version 5.2.x.
HideIP={no, yes} Default is no.
Yes/no option to hide the information of the connection host or
IP. Some examples include:
- When moving a mouse cursor over the connection icons on
the desktop, a balloon help pop-up displays ‘…’ instead of the
host name.
- When a Reconnect to a connection message or an ICA error
message window displays, the connection description displays
instead of host name.
- When moving a mouse cursor over the PN icon, the
connected PN servers do not display.
Hosts=<hosts le name> Species the le name of the hosts. This le is a simple text le
that associates IP addresses with hostnames, one line per IP
address. The length of the le name is limited to 63 characters.
The le must be placed in le server and can be cached if set
MirrorFileServer=yes in the wnos.ini.
When resolving a host name, the system will initially look in the
le and if not found, will search DNS, WINS, and so on. The
following is an example of format in the hosts le:
10.151.122.1 gateway.ctx.com
10.151.122.123 myvm.ctx.com
**icaBrowsing={udp, http}Default is http.
Establishes the default browsing protocol. This setting can be
overridden by the parameter HttpBrowsing in each connection
property. The method of browsing selected must match the
method provided by the server(s) being accessed.
67
This setting in a wnos.ini le will be saved into NVRAM, if
EnableLocal=yes is set in the wnos.ini le.
IEEE8021X={yes, no}
network={wired, wireless}
[Prole=ssid]
[access={WPA-PSK, WPA2-PSK, WPA-ENT, WPA2-ENT}]
[eap={yes, no}]
[servervalidate={yes, no}]
[servercheck={yes, no}]
[servername={"servername for EAP-TLS, EAP-PEAP, EAP-
FAST"}]
[eaptype={None, EAP-LEAP, EAP-TLS, EAP-PEAP, EAP-FAST}]
[leapun={username for EAP-LEAP}]
[leappwd={password for EAP-LEAP}]
[leappwdEnc={password encrypted for EAP-LEAP}]
[tlsauthtype={user, machine}]
[tlsclntcert={client certicate lename for EAP-TLS}]
[tlsclntprikey={lename of certicate with private key for EAP-
TLS}]
[tlsclntprikeypwd={password for private key}]
[tlsclntprikeypwdEnc={password encrypted for private key}]
[peapeap={EAP-MSCHAPV2, EAP-GTC}]
[peapidentity={identity/username for PEAP}]
[peapmschapun={username for EAP-PEAP/ EAP-MSCHAPV2}]
[peapmschappwd={password for EAP-PEAP/EAP-
MSCHAPV2}]
[peapmschappwdEnc={password encrypted for EAP-PEAP/
EAP-MSCHAPV2}]
[peapmschapdm={domain for EAP-PEAP/ EAP-MSCHAPV2}]
[peapmschaphidedm={yes,no}]
[peapsinglesignon={yes, no}]
[peapgtcun={username for EAP-PEAP/ EAP-GTC}]
[peapgtcpwd={password for EAP-PEAP/ EAP-GTC}]
[peapgtcpwdEnc={password for encrypted for EAP-PEAP/
EAP-GTC}]
1. If IEEE8021X is set to no, then all parameters following it is
ignored.
2. If network is not congured, the conguration is ignored.
3. The key left of equal is case sensitive, and the value right
of equal case is not case sensitive except for credential
information; for example username, password or certicate
lename.
4. If two entries exist in an INI le, one each for wired and
wireless, both will take eect; for
example IEEE8021X=yes network=wired EAP=yes
… IEEE8021X=yes network=wireless access=WPA-ENT …
5. All EAP credential information is stored whatever the
eaptype setting.
6. The default values are underlined.
7. All passwords here should be encrypted.
8. The wildcard server include three entries in INI le. If both
the servervalidate entry and servercheck entry are set to
yes, the servername entry is valid.
9. Server certicate validation is mandatory in EAP-TLS
authentication. If the eaptype entry is set to EAP-TLS, the
servercheck entry must be set to yes.
10. Server list must be included in double quotation marks. For
example IEEE8021X=yes Network=wireless access=WPA2-
ENT eap=yes servervalidate=yes servercheck=yes
servername=";test.com;wireless98; test.com"
eaptype=eap-peap peapeap=eap-mschapv2
peapmschapun=administrator peapmschappwd=password
.
11. Additional option timeoutretry species the retry times
when 8021x authentication times out, which means that it
is only validated when the optional network type is
wired. For example, timeoutretry=3 allows you to retry
thrice after 8021x authentication times out.
12. Additional option Prole species the type of ssid
authentication to be congured. When we support multiple
ssid wireless settings, the statement ieee8021x must be
after the statement device=wireless, and one additional
prole parameter is needed to identify the type of ssid
authentication which is congured. For example,
#ThinIsIn
Device=Wireless Mode=Infrastructure
SSID=ThinIsInIEEE8021X=yes network=wireless
prole=ThinIsIn access=WPA2-ENT eap=yes
eaptype=EAP-PEAP peapeap=EAP-MSCHAPV2
peapmschapdm=wyse
#wtos_95
Device=Wireless Mode=Infrastructure
SSID=wtos_95IEEE8021X=yes network=wireless
prole=wtos_95 access=WPA2-ENT eap=yes
eaptype=EAP-PEAP peapeap=EAP-MSCHAPV2
68
[wpapskpwd={passphrase for WPA-PSK}]
[wpapskpwdEnc={passphrase encrypted for WPA-PSK}]
[wpa2pskpwd={passphrase for WPA2-PSK}]
[wpa2pskpwdEnc={passphrase encrypted for WPA2-PSK}]
[encryption={TKIP|CCMP}]
[fasteap={EAP-MSCHAPV2, EAP-GTC}]
[fastidentity={Identity for EAP_FAST}]
[fastmschapun={username for EAP-FAST/EAP-MSCHAPV2}]
[fastpmschappwd={password for EAP-FAST/EAP-
MSCHAPV2}]
[fastmschappwdEnc={password encrypted for EAP-FAST/EAP-
MSCHAPV2}]
[fastmschapdm={domain for EAP-FAST/EAP-MSCHAPV2}]
[fastmschaphidedm={yes,no}]
[fastsinglesignon={yes, no}]
[fastgtcun={username for EAP-FAST/EAP-GTC}]
[fastgtcpwd={password for EAP-FAST/EAP-GTC}]
[fastgtcpwdEnc={password for encrypted for EAP-FAST/EAP-
GTC}]
Example: IEEE8021X=yes network=wireless access=wpa-
ent eap=yes eaptype=eap-tls tlsclntcert=user.cer
tlsclntprikey=user.pfx tlsclntprikeypwd=12345678
OR
IEEE8021X=yes network=wireless access=wpa-ent
eap=yes eaptype=eap-tls tlsclntcert=user.cer
tlsclntprikey=user.pfx tlsclntprikeypwd=12345678
leapun=user1 password=1234 peapmschapun=user1
peapmschappwd=12345 peapmschapdm=wyse.com
IEEE8021X=yes network=wired eap=yes eaptype=eap-tls
tlsclntcert=user.cer tlsclntprikey=user.pfx
tlsclntprikeypwd=12345678
By default, peapidentity is same as peapmschapun.If
peapmschaphidedm is set to yes, the domain will use
saved peap MSCHAP domain name and the prompts
dialog will not include the domain eld when you perform
ieee8021x authentication.
The following example describes wildcard server validation:
IEEE8021X=yes network=WIRED access=WPA2-ENT
servervalidate=yes eap=yes eaptype=EAP-PEAP
servercheck=yes servername=w2k8-
ACS-64.sqawirelsess.com peapmschapdm=EAP-
MSCHAPV2 peapgtcun=sqawirless2
peapmschappwd=123!@#qwe
The username of ieee8021x (fastmschapun,
peapmschapun, peapgtcun, leapun) can be congured as
system variables like $mac, $sn etc. By default, fastidentity
is same as fastmschapun.
If fastmschaphidedm is set to yes, the domain uses saved
EAP_FAST MSCHAP domain name, and the prompts
dialog does not include the domain eld when you perform
ieee8021x authentication.
The following example describes wildcard server
validation:IEEE8021X=yes network=WIRED access=WPA2-
ENT servervalidate=yes eap=yes eaptype=EAP-FAST
servercheck=yes servername=w2k8-
ACS-64.sqawirelsess.com fastmschapdm=EAP-
MSCHAPV2 fastgtcun=sqawirless2 fastmschappwd=123!
@#qwe
**Inactive={0, to 480} (minutes)
[NoSessionTimer=0-480]
Default is 0.
Species that if there is no keyboard or mouse use in the
congured time in minutes, it will sign o or shutdown or reboot
depending on AutoSigno= …
If NoSessionTimer is set, then when there is an active sessions,
use this timer to replace the Inactive value.
The following controls whether to reboot or shutdown or sign
o.
AutoSignoff=yes [Shutdown=yes] [Reboot=yes]
IPProto=ICMP Congures the ICMP protocol.
69
[DisableTStamp={yes, no}]
[DisableEcho={yes, no}]
DisableTStamp — If DisableTStamp=yes, the system will not
reect the ICMP timestamp (13) request.
DisableEcho — If DisableEcho=yes, the system will not reect
the ICMP echo (8) request. In this case, the unit cannot be
pinged.
**LowBand={no, yes} Default is no.
Yes/no option to enable optimization for low speed connections,
such as reducing audio quality or decreasing protocol-specic
cache size or both.
This setting in a wnos.ini le will be saved into NVRAM, if
EnableLocal=yes is set in the wnos.ini le.
MMRCodecCong=AUDIO
[disableac3={no, yes}]
[disablempeg={no, yes}]
[disablewma1={no, yes}]
[disablewma2={no, yes}]
[disablewma3={no, yes}]
[disablemp3={no, yes}]
[disablepcm={no, yes}]
MMRCodecCong — Only for platforms with TCX
Multimedia. Species the audio to allow the disabling of the
various codec options when playing audio.
disableac3 — Default is no. Yes/no option to disable the ac3
codec when playing audio.
disablempeg — Default is no. Yes/no option to disable the
mpeg codec when playing audio.
disablewma1 — Default is no. Yes/no option to disable the
wma1 codec when playing audio.
disablewma2 — Default is no. Yes/no option to disable the
wma2 codec when playing audio.
disablewma3 — Default is no. Yes/no option to disable the
wma3 codec when playing audio.
disablemp3 — Default is no. Yes/no option to disable the mp3
codec when playing audio.
disablepcm — Default is no. Yes/no option to disable the pcm
codec when playing audio.
MMRCodecCong=VIDEO
[disablempeg1={no, yes}]
[disablempeg2={no, yes}] [disablejpeg={no, yes}]
[disablewmv1={no, yes}]
[disablewmv2={no, yes}]
[disablewmv3={no, yes}]
MMRCodecCong — Only for platforms with TCX
Multimedia. Species the video to allow the disabling of the
various codec options when playing video.
disablempeg1 — Default is no. Yes/no option to disable the
mpeg1 codec when playing video.
disablempeg2 — Default is yes. Yes/no option to disable the
mpeg2 codec when playing video.
disablejpeg — Default is no. Yes/no option to disable the jpeg
codec when playing video.
disablewmv1 — Default is no. Yes/no option to disable the
wmv1 codec when playing video.
disablewmv2 — Default is no. Yes/no option to disable the
wmv2 codec when playing video.
disablewmv3 — Default is no. Yes/no option to disable the
wmv3 codec when playing video.
70
**NoReducer={no, yes} Default is no — Enables compression.
Yes/no option to turn o compression. To turn o compression,
enter yes. Used here this parameter is a global statement for all
connections. It sets the default value of NoReducer.
NOTE:
By default both the ICA and RDP protocols compress their
data to minimize the amount of data that needs to traverse
the network.
This compression can be as much as 50 percent for text-
based applications such as Microsoft Word and 40 percent
less for graphics applications than the uncompressed data
streams.
OneSignServer=onesign_server
[DisableBeep={no, yes}
[KioskMode={no, yes}]
[EnableFUS={no, yes}]
[TapToLock={0, 1, 2}]
[EnableWindowAuthentication={yes,no}]
[AutoAccess={VMW,XD,XA}]
[NetBIOSDomainName={no, yes}]
Species a list of host names or IP addresses with optional TCP
port number or URLs of Imprivata OneSign servers.
Important: An https protocol must be used.
OneSign virtual desktop access oers a seamless authentication
experience and can be combined with single sign-on for no click
access to desktops and applications in a virtual desktop
environment.
The following inputs are acceptable values:
https://ip
or
https://FQDN
DisableBeep — Default is no. Yes/no option to set the Rdeas
reader to mute when a card is tapped.
KisokMode — Default is no. Yes/no option to allow the
OneSign user to share the client desktop.
EnableFUS — Default is no. Yes/no option to set the Citrix
client to remain running when switch users.
TaptoLock — Default is 2. Only active when KioskMode=yes.
Species tap to lock.
If TapToLock=0, then tap a card to lock terminal is disabled. If
TapToLock=1 (Tap to lock), then use the proximity card to lock
the terminal.
If TapToLock=2 (Tap over), then lock the terminal and log in a
dierent user.
EnableWindowAuthentication — Default is yes. Yes/no option
to sign-on with the user’s Windows credentials to pre-dened
broker if the OneSign sign-on fails.
AutoAccess — Species the corresponding type of broker to
automatically start. If not dened, the broker type is obtained
from the Imprivata Server setting of the computer and user
policy. If none of them is dened, then the rst available broker
server from the Imprivata server is started.
71
NOTE:
AutoAccess can be set in [username].ini and wnos.ini,
however, the wnos.ini, has priority over [username].ini.
NetBIOSDomainName — Default is no. Yes/no option to
enable the authentication to the broker server using the
NetBIOS domain name. If set to yes, the Imprivata domain list
will show NetBIOS domain name and the card user will
authenticate to the broker server using the NetBIOS domain.
PnliteServer=<List of {IP address, DNS names, or URLs} >
[ReconnectAtLogon={0, 1, 2}]
[ReconnectFromButton={0, 1, 2}]
[AutoConnectList={*/ appname1;appname2; appname3...}]
[timeout=5…300]
[CAGRSAAuthMethod={LDAP, RSA}]
[CAGAuthMethod={LDAP, RSA}]
[CAGAuthMethod={LDAP+RSA, RSA+LDAP}]
[RequestIconDataCount={0-65535}]
[DefaultSettings={XenApp, XenDesktop}]
[SmartcardPassthrough={yes, no}]
[StoreFront={no, yes}]
[HttpUserAgent={UserAgent}]
PnliteServer — Species the list of IP addresses or host names
with optional TCP port number or URLs of PNAgent/PNLite
servers. The list is empty by default.
Each entry with optional port is specied as Name-or-IP:port,
where port is optional; if not specied, port 80 is used as the
default.
If a port other than 80 is used, the port number must be
specied explicitly with the server location in the form IP:port or
name:port. Once specied, it is saved in the non-volatile
memory.
The statement PNAgentServer and Web interface for Citrix
MetaFrame Server is equal to this statement.
NOTE:
PnliteServer and the DomainList parameters can be used in
a {username}.ini le, but generally are used only in a
wnos.ini le.
The PNAgent/PNLite server list and associated domain list
optionally can be entered in DHCP server options 181 and
182, respectively. If entered in both places, the entries from
the Table 7: Connection Settings: wnos.ini les, {username}
INI, and $MAC INI Files will take precedence. However, the
{username}.ini le will override the wnos.ini le if the
identical parameters with dierent values exist in the
{username}.ini le.
NOTE:
When Multifarm=yes, use # to separate failover servers,
and use a comma (,) or a semicolon (;) to separate servers
that belong to dierent farms.
ReconnectAtLogon — Species the reconnection function at
log in.
Default is 0 — disables the option.
1 — reconnects to disconnected sessions only.
2 — reconnects to active and disconnected sessions.
ReconnectFromButton — Species the reconnection function
from the reconnect command button.
Default is 0 — disables the option.
1 — reconnects to disconnected sessions only.
2 — reconnects to active and disconnected sessions.
72
AutoConnectList — Species the PNA applications that will be
automatically started when using PNA to sign on. If
AutoConnectList=*, then all the PNA applications will be
automatically connected.
The autoconnectlist is the connection description of application
or host name which can use the wildcard * to match the string.
Important: Appname values are case sensitive.
Timeout — Species the time in seconds where a client will try
to establish a connection before reporting that it is unreachable.
CAGRSAAuthMethod or CAGAuthMethod —
CAGAuthMethod option is used for CAG authentication
conguration.
NOTE: This option replaces CAGRSAAuthMethod. If
CAGAuthMethod=RSA which is same as the prior
CAGRSAAuthMethod=RSASecurid, an extra passcode
eld needs to be input except username/password/
domain. If CAGAuthMethod=LDAP, no passcode eld is
needed.
• CAGAuthMethod={LDAP+RSA, RSA+LDAP} — Used for
CAG authentication conguration.
• If CAGAuthMethod = LDAP+RSA, an extra passcode eld
needs to be input except username/password/domain. If the
CAG server is congured for a double authentication policy,
this ini corresponds to the rst auth LDAP and second auth
RSA.
• If CAGAuthMethod = RSA+LDAP, it has the same result
with CAGAuthMethod = RSA, compared to LDAP+RSA. If
CAG server congure double authentication policy, this ini
correspond to First auth RSA and Second auth LDAP.
RequestIconDataCount — RequestIconDataCount is used for
requesting 32-bit color icons. It is a counter which means that
only the count of the icons will be requested. The default
number is 10.
For example, if set RequestIconDataCount=0, no icon data will
be requested. If set RequestIconDataCount=5, only 5 icons are
requested.
DefaultSettings — Species the default settings for XenApp or
XenDesktop.
Xen App Default Settings:
1. SignOn=Yes
2. PnliteServer= RequestIconDataCount=20
3. desktopcolordepth=32
4. LongApplicationName=yes
5. sessioncong=ica progressivedisplay=yes ondesktop=yes
6. device=audio volume=high
7. Seamless=yes FullscreenReserved=yes
8. sessioncong=all mapdisks=yes
9. Enabled by default: Disks, Serials, Sound
10. Disabled by default: USB, Printers, Smart Cards
73
Xen Desktop Default Settings:
1. SignOn=Yes
2. sysmode=vdi toolbarclick=yes toolbardelay=3
3. sessioncong=ica progressivedisplay=yes
4. PnliteServer=
5. AutoSigno=yes
6. Enable by default: Printers, Serials, USB, Sound
7. Disabled by default: Disk, Smart Cards
SmartcardPassthrough — Default is yes. Yes/no option to
enable/disable the smartcard pass through mode.
StoreFront — Default is no. Yes/no option to support Citrix
StoreFront Authentication. The value will be saved into NVRAM.
HttpUserAgent—The option will replace the default
CitrixReceiver WTOS/1.0 during Netscaler login. If you are using
WTOS/1.0 as Netscaler Session Policy, set this INI parameter to
retain your Netscaler policy conguration.
RTPTosDscp={Default/CS1/CS2/CS3/CS4/CS5/CS6/CS7/
AF11/AF12/AF13/AF22/AF23/AF31/AF32/AF33/AF42/AF43}
Sets RTP/UDP audio channel in the TOS elds.
SaveSysinfo={ftp, usb} Recommended for use under Customer Support direction for
troubleshooting purposes. Species where the ThinOS event
logs will be saved.
NOTE:
Be sure that the Privilege parameter level is set to high
(Privilege=high) and that the EnableTrace option for
Privilege is set to yes (EnableTrace=yes).
•FTP — If you specify SaveSysinfo=ftp, the ThinOS
event logs will be saved to an FTP server.
The FTP server must have read/write permissions, and
that event log les saved remotely are overwritten
each time the client is booted unless the append=yes
option is present.
The syntax for this command is as follows:
SaveSysInfo=ftp://<host>/wyse/wnos/
trace/$mac-log.txt
SaveSysInfo=ftp://<host>/wyse/wnos/
trace/$mac-log.txt append=yes
•USB — SaveSysinfo=usb species that the ThinOS
event logs will be saved.into the last mounted USB
disk. The le used for saving Event log information is
named WTOS_log.txt and is located at the root path of
the USB disk.
74
Important:
By default, smart card Context log (0x1), Handle log (0x2),
Status log (0x4), and Transfer log (0x8) data is not
displayed in the event log. However, there are occasions
where this information can be useful in debugging Smart
Card related issues.
The following INI le option (ScardLog) to the SaveSysInfo
command can be used to enable the logging of this data to
the event log.
SaveSysInfo=usb ScardLog=0xF
**Seamless={no, yes}
[HideTaskbar={0, 1, 2, 3}]
[FullscreenReserved={no, yes}]
Seamless — Default is no. Yes/no option to set the default
resolution for ICA published applications to Seamless for ICA
connection parameters.
HideTaskbar — Default is 0. Species the status of the taskbar
when maximizing the seamless window.
0 — Do not hide the taskbar.
1 — Taskbar will be hidden when maximizing the seamless
window to full screen. Moving the mouse over the lowest
bottom of the screen will display the taskbar. This setting
excluding the FullscreenReserved parameter in a wnos.ini le will
be saved into NVRAM if EnableLocal=yes is set in the wnos.ini
le.
NOTE:
• When set Seamless=yes HideTaskbar=2, it removes the
auto-hide taskbar function but it reports the full
resolution to the ICA server in a similar way to
HideTaskbar=1.
• When set Seamless=yes HideTaskbar=3, the maximized
size does not cover the taskbar, but the session size on
the server side is reported as the full-screen size.
• When set Seamless=yes FullscreenReserved and the
applications are congured for fullscreen mode, they
will be launched in fullscreen mode, not seamless mode.
SecureMatrixServer=<SecureMatrix Server
Host name or IP address/FQDN or URL>
[EnableSelectTable]
Species the Host name or IP address/FQDN or URL of the
Secure Matrix server. Http or https protocol usage is decided by
the server conguration. If SecureMatrixServer is dened, the
user must pass authentication with the Secure Matrix server
rst, and then there is a seamless log in to the brokers if the
server can provide the correct broker credentials, if not, the
user must enter broker credentials to log in.
For Example: SecureMatrixServer=https://gsb01.bjqa.com
NOTE:
Before using this parameter, use the Secure Matrix
documentation to set up the Matrix Server. Also, be sure
you import the relevant GSB Server Certicate le when
using https.
EnableSelectTable enables you to select the table type (3 or 4
tabs) when you change the password (SMXBridge server 3.9
start supports this feature). Default value is No.
SelectGroup={no, yes} Default is no.
75
[Default=default_desc]
description=group1
[groupname=name1]
[description=group2]
[groupname=name2]
SelectGroup — Yes/no option to allow a user to select from a
group list on the Log on dialog box during a log in. If yes, the
description will display in the group list box.
groupname — The group name is used to identify the group
including the directory and le name. If not dened, the
description will become the group name.
The Default option following "SelectGroup=yes" can specify the
default group. The value is one of group description dened
after that. After you select another group and sign o, this
default group will be selected.
If default option is not specied, the last selected group will be
selected in the next sign on.
For example:
SelectGroup=yes \
default="Sus team" \
description="Dev team" groupname=dev \
description="Sus team" \
description="SQA team" groupname=sqa \
description="guest"
Group 1: Description="Dev team" groupname=dev
The le \wnos\ini\dev\dev.ini must be created in the le server.
In the dev.ini, the broker, domain list, or connections can be
dened for the dev team.
Group 2: .Description="Sus team"
The le \wnos\ini\Sus team\Sus team.ini must be created in the
le server. In the Sus team.ini, the broker, broker list, or
connections can be dened for the Sus team.
Group3...4...n...and so on.
After a user selects a group, the system will load the group ini
le rst, and then load the \wnos\ini\{group_name}
\username.ini. If the username.ini in the group directory is not
found, it will attempt to load \wnos\ini\username.ini as before.
Because the group list may dene dierent brokers, the
SelectServerList statement will be invalid if set
SelectGroup=yes.
Serial={COM1, COM2, COM3, COM4}
[Baud={1200, 2400, 4800, 9600, 19200,
38400, 57600, 115200}]
[Parity={None, Even, Odd}]
[Stop={1, 1.5, 2}]
[Size={5, 6, 7, 8}]
[Flow={None, XON/XOFF, CTS/RTS, Both}]
[Touch={no, yes}]
Serial — Default is COM1. Species the local serial ports
conguration.
Baud — Species the local serial port baud rate.
Parity — Species the local serial port parity.
Stop — Species the local serial port stop.
Size — Species the local serial port size.
Flow — Species the local serial port ow.
Touch — Default is no. Yes/no option to denote that a serial
touch screen is attached.
76
[Touch_XYReverse={no, yes}]
[Touch_type={elo, microtouch, fastpoint}]
Touch_XYReverse — Default is no. Yes/no option to denote a
reversal of the X and Y coordinates which are needed for some
touch screens.
Touch_type — Default is elo. Species the type of touchscreen
being used.
NOTE: Options must be specied in the order shown.
9035366678
**SessionCong=ALL
[unmapprinters={no, yes}]
[unmapserials={no, yes}]
[smartcards={no, yes}]
[mapdisks={no, yes}]
[disablesound={no, yes}]
[unmapusb={no, yes}]
[DisksReadOnly={no, yes}]
[MouseQueueTimer={0–99}]
[WyseVDA={no, yes}]
[WyseVDA_PortRange=startPort, endPort]
[UnmapClipboard={no, yes}]
[DefaultColor={0,1,2}]
[VUSB_DISKS={yes, no}]
[VUSB_AUDIO={yes, no}]
[VUSB_VIDEO={yes, no}]
[VUSB_PRINTER={yes, no}]
[FullScreen={no, yes}]
[Resolution={default, vga_resolution}]
[DisableResetVM={no, yes}]
[WyseVDAServerPort=serverPort]
[FontSmoothing={yes, no}]
[AutoConnect={yes, no}]
[MultiMonitor={yes, no}]
[EnableImprivataVC={yes,no}]
[Locale=LocaleID]
[SessionLogoTimeout=seconds]
SessionCong — Species the default settings of the optional
connection parameters for all sessions.
unmapprinters — Default is no. Yes/no option to un-map
printers.
unmapserials — Default is no. Yes/no option to un-map serials.
smartcards — Default is no. Yes/no option to use smartcards.
mapdisks — Default is no. Yes/no option to map disks.
disablesound — Default is no. Yes/no option to disable sound.
unmapusb — Default is no. Yes/no option to un-map USBs.
DisksReadOnly — Default is no. Yes/no option to mount mass
storage disks as read-only.
MouseQueueTimer — Species the default queue timer of a
mouse event in an ICA or RDP session (in 1/100 of a second). It
can be used to adjust the bandwidth of a network.
WyseVDA — Default is no. Yes/no option to enable Virtual
Desktop Accelerator for all ICA and RDP sessions.
WyseVDA_PortRange — Sets the ThinOS VDA client port
range. The port range must follow these rules:
1. The port range is a list of start port and end port separated
by a semicolon (;) or a comma (,).
2. Both ports must be between 1 and 65535.
3. The end port must be greater than start port.
For example, WyseVDA_PortRange=3000,3010, the start port is
3000, the end port is 3010.
UnmapClipboard — Default is no. Yes/no option to disable
clipboard redirection for all sessions. For ICA and RDP, species
if redirecting the clipboard. This setting in wnos.ini will be saved
into nvram, if EnableLocal parameter is set to yes in wnos.ini.
DefaultColor — Species the default color depth to use for the
session 0=256, 1=High color, 2=True Color.
VUSB_DISKS, VUSB_AUDIO, VUSB_VIDEO, and
VUSB_PRINTER — Default no. Species if these USB devices
will be redirected to the server using TCX Virtual USB or ICA or
RDP USB redirection. By default, these devices are set as local
devices.
77
[GroupSession={yes,no}] NOTE: For example, if you want to use USB disks as a
network disk, you can set SessionCong=all
mapdisks=yes VUSB_DISKS=no.
If you want to use USB disks as server side device, you can
set SessionCong=all mapdisks=no VUSB_DISKS=yes.
The devices are displayed in device manager of the
session.
FullScreen — Default is no. Species the default screen mode.
When using FullScreen in a Dual Screen mode, the session will
be displayed in Span mode
Resolution — Default is default. Species the session
resolution. For example, 640 x 480 and other supported
resolutions.
Default will set the resolution to the native resolution of the
monitor. Setting the resolution to a value smaller than the native
resolution of the monitor, will allow the session in Windowed
mode. The resolution value cannot be higher than the native
resolution.
DisableResetVM — Default is no. Set DisableResetVM=yes to
disable Reset VM function. As default, this function is controlled
by the server side is enabled including VMware View or Citrix
PNA.
WyseVDAServerPort — Sets Wyse VDA Server Port for a
ThinOS VDA client. The default port is 3471. The port range
must be from 1029 to 40000. For example,
WyseVDAServerPort=3000, sets VDA server port to 3000 and
the client will connect to the VDA server using this port.
FontSmoothing — Default is yes. Set no to disable font
smoothing.
AutoConnect — Default is yes. Set no to disable auto connect
function.
MultiMonitor — Default is yes. Sets a multiple monitor layout.
Set MultiMonitor=no to disable multiple monitor layout function.
The session has the same desktop width and height with local
virtual desktop size, spanning across multiple monitors, if
necessary.
EnableImprivataVC— Default is yes. If set to no, the Imprivata
Virtual Channel is disabled. The user can use vusb redirect
instead of Imprivata Virtual Channel mode to use the Rdeas or
nger print device in session as server side remote device.
[Locale=LocaleID]— Set Locale=LocaleID to set Locale in
session for localization conguration to work. For information
about LocaleID, refer to link msdn.microsoft.com/en-us/library/
windows/desktop/dd318693(v=vs.85).aspx.
SessionLogoTimeout—Setting SessionLogoTimeout value
forces all sessions to logo when user signs o from the broker.
The default value is 0 which retains the same behavior as
before, and also disconnects the sessions. If you set a value, for
example 30 seconds, broker sign-o waits for 30 seconds for all
sessions to nish logo, then, automatically session logs o.
Broker sign-o will continue. During the waiting process, one
notice prompts for user to check whether the session stops
working if something is not saved. This feature currently
78
supports Citrix Xen broker sessions and View Broker sessions
only.
GroupSession=yes— Set to enable the function of grouping
sessions and the menu item of Group Sessions is checked when
you right click on the desktop. The default value is no and the
original state of Group Sessions is unchecked.
**SessionCong=ICA
[desktopmode={fullscreen, window}]
[mapdisksunderz] : DISCONTINUED. DO NOT USE.
[TosIpPrecedence={0–5}]
[TosDscp={Default/CS1/CS2/CS3/CS4/CS5/CS6/CS7/AF11/
AF12/AF13/AF22/AF23/AF31/AF32/AF33/AF42/AF43}]
[DiskMapTo=a character sequence]
[SysMenu={remote, local}]
[SessionReliability={no, yes}]
[WarnPopup={yes, no}]
[ondesktop={no, yes, all, none, desktops, applications}]
[AudioQuality={default, high, medium, low}]
[USBRedirection={TCX, ICA|HDX}]
[ZLKeyboardMode={0, 1, 2}]
[ZLMouseMode={0, 1, 2}]
[SucConnTimeout=seconds]
[HDXFlashUseFlashRemoting={Never,Always}]
[HDXFlashEnableServerSideContentFetching={Disabled,Enable
d}]
[EnableRTME={Yes, No}]
[FlipByTimer={0, 1}]
[RefreshTimeOut={dd:hh:mm}]
[Timeout={Yes, No}]
[PasswordExpireNotify={yes, no}]
[RefreshPopupNotice={yes, no}]
SessionCong — Species the ICA default settings of the
optional connection parameters for all ICA sessions.
desktopmode — Default is fullscreen. Species the display
mode of an ICA published desktop when using an ICA PNAgent
logon; the default is fullscreen mode for a PNA desktop
application.
mapdisksunderz — DISCONTINUED. DO NOT USE.
TosIpPrecedence — Allows you to set IP Precedence in the
TOS elds.
TosDscp — Sets IP DSCP in the TOS elds.
DiskMapTo — Species to map disks to a character sequence.
NOTE:
A sequence of characters can be used by DiskMapTo, with
each letter mapped to one disk in order. For example, if
RTNM is the sequence, R is mapped to the rst disk (in
ThinOS, it will be D:/), T is mapped to the second disk (in
ThinOS, it will be E:/), and so on. Only the letters “a”
through “y” and “A” through “Y” are accepted; All
lowercase letters are changed to uppercase, other
characters will be skipped, and duplicate characters will be
omitted.
For example, #GGefZzedAF1JaE will be mapped to
GEFDAJ. The number of disks mapped to the session
depends on the number of valid letters provided. If no
letter is provided, all disks will be mapped to the session
using default driver letters.
SysMenu — Default is local. Species the system menu mode
when right-clicking the taskbar button of a seamless window. If
it is remote, the system menu will come from the remote server;
otherwise, it will be the local menu.
SessionReliability — Default is no. Yes/no option to enable
session reliability.
WarnPopup— If WarnPopup=no, the option can disable the
warning message when session reliability happens in order to
decrease the administrative support calls.
ondesktop — Default is no. Species options for displaying
connection icons on the desktop:
1. If AutoConnectList is set in the PNLiteServer statement, all
connections congured in AutoConnectList parameter will
display on the desktop.
2. Default is no and means that the property of ondesktop
will be controlled by the server. However, the connections
are still always added to the Connect Manager list and
PNA menu list.
79
3. In cases other than no, the connection is controlled by the
local thin client. If set so that the connection icon does not
display on the desktop, the connection icon will not be
added to the Connect Manager list and the PNA menu list.
all — same as yes, display all connections on desktop.
none — do not display any connections.
desktops — only display connections on desktop.
applications — only display applications, the connections will be
handled as an ondesktop_list. For example, if you set
ondesktop=word; excel, then only the applications word and
excel will be displayed.
AudioQuality — Default is default. Species the audio quality of
ICA sessions.
NOTE: Medium quality is recommended for Speech
scenarios. For example: SessionCong=ICA
AudioQuality=high
USBRedirection — Default is ICA|HDX. Option to select the
channel of usb devices redirection. This option is recommended
to replace the older setting device=vusb type={TCX, HDX}.
ZLKeyboardMode — Species to accelerate the display of the
input text on the client device over a high latency connection.
0=o, 1=on, 2=auto
ZLMouseMode — Species to accelerate the visual feedback
for mouse-clicks on the client device over a high latency
connection. 0=o, 1=on, 2=auto
SucConnTimeout— This option will enhance the seamless
session share. During the rst session logon, immediately start
second or later sessions, which will wait for the time set with
SucConnTimeout (or the logon success) to make sure new
applications share with the rst logon session.
HDXFlashUseFlashRemoting— Default is Always, which
means the HDX is enabled always. The value Never is to disable
HDX.
HDXFlashEnableServerSideContentFetching— Default is
Disabled, which means the server side fetching content is not
enabled. The value enabled is to enable this function.
EnableRTME— This option controls the launch of RTME
service. The default value is enabled.
FlipByTimer— This option selects the screen refresh method.
For some old server, there is no EndOfFrame transferred to the
client. Then we can use this option to x such issues.
RefreshTimeOut—RefreshTimeOut triggers auto-refresh which
updates ICA applications automatically. The value format
dd:hh:mm, indicate days&&hours&&minutes as the auto-refresh
interval. The default value is 0, that disables auto-refresh.
Timeout– This option controls the credential prompt after ICA
broker logon was timeout. Session ticket is invalid now. If yes,
users have to enter their credential to re-login to launch session,
80
if no, ThinOS will use the default credential to do login in
background. The default is yes.
NOTE: Other Citrix INI parameters are not listed here.
However, these Citrix INI parameters are supported on
ICA connection by using INI SessionConfig=ICA.
PasswordExpireNotify —This option enables the password
expire notication, which should congure in storefront server
side, Authentication, password change set as At any time. Then
before the password expires, logon prompts a message
displaying the number of days after which the password will
expire and let you change the password. The option
WarnPopup=no can disable the warning message when session
reliability happens to decrease the administrative support calls.
RefreshPopupNotice — This option enables or disables the
popup notice during refresh in progress. The default value is yes.
SessionCong=PCoIP
[USBRedirection={PCoIP, TCX}]
[ShowDisconnectMessage={yes, no}]
[ShowReconnectMessageTime=seconds]
[ResumeTimeout=seconds]
SessionCong — Species the PCoIP default settings of the
optional connection parameters for all PCoIP sessions.
USBRedirection — Default is PCoIP. Species the channel of
USB devices redirection.
ShowDisconnectMessage — Default is yes. Yes/no option to
display a disconnect message when a session is disconnected. If
set to yes, the message is displayed; if set to no, the message
will only show in the Event Log.
ShowReconnectMessaageTime— This option species the
number of seconds to show the session reconnect message box
after the session detects the network congest. The default
value is 50 seconds.
ResumeTimeout—The option ResumeTimeout species the
number of seconds to wait after the reconnection dialog box
prompts, and before the session successfully reconnects. If
timeout value is reached then the session is closed. The default
value is 1200 seconds.
**SessionCong=RDP
[MaxBmpCache={128 to 1024}]
[DefaultColor={0,1,2}]
[EnableNLA]={no, yes}]
[ForceSpan={no, yes}]
[EnableTSMM={yes, no}]
[EnableGFX]={yes, no}]
[EnableVOR={yes, no}]
[EnableRdpH264]={yes, no}]
[EnableRecord={yes, no}]
[EnableRFX={yes, no}]
[USBRedirection={TCX, RDP}]
SessionCong — Species the RDP default settings of the
optional connection parameters for all RDP sessions.
MaxBmpCache — Species the maximum bitmap cache
number. This impacts the memory usage of an RDP session.
DefaultColor — Species auto (0), 16-bit (1), and 32-bit (2)
options.
EnableNLA — Default is yes. Yes/no option to utilize the
Network Level Authentication feature in RDP 7.
ForceSpan — Default is no. Yes/no option to disable RDP Multi
Monitor feature.
EnableTSMM — Default is yes . Yes/no option to enable RDP7
Multi-media redirect.
EnableGFX —The option when set to yes, enables RDP8
Pipelined Graphics feature. Default is yes for all platforms other
than Wyse 3010 thin client with ThinOS (T10). If this option is
congured as no, the option EnableVOR and option
EnableRdpH264 will be internally set to no despite of the
settings in INI.
81
[RDPScreenAlign4={yes,no}]
[WallPaper={yes, no}]
[Dragging={yes, no}]
[Animation={yes, no}]
[Theme={yes, no}]
[TosIpPrecedence={0-5}]
[TosDscp={Default/CS1/CS2/CS3/CS4/
CS5/CS6/CS7/AF11/AF12/AF13/AF22/AF23/
AF31/AF32/AF33/AF42/AF43}]
[AutoDetectNetwork={yes, no}]
[TSGWEnable={yes, no}]
EnableVOR — Default is yes. H.264. Yes/no option to enable
RDP8 Video Optimized Redirect.
NOTE: The EnableVOR parameter is not supported on C
or V class.
EnableRdpH264— Default is yes. This option enables RDP8.1 h.
264 graphics feature. This option is internally set to no if the
option EnableGFX is set to no manually or by default.
EnableRecord — Default is yes . Yes/no option to enable RDP
feature of recording from local.
EnableRFX — Default is yes. Yes/no option to enable Bitmap
Codec RemoteFX.
USBRedirection — Default is TCX . Option to select the
channel of USB devices redirection.
RDPScreenAlign4 — Default is no. RDPScreenAlign4=yes can
force RDP session width to 4 pixels aligned.
For example:
SessionConfig=RDP MaxBmpCache=1024
DefaultColor=1 EnableNLA=yes ForceSpan=yes
EnableTSMM=no EnableRecord=yes EnableRFX=no
RDPScreenAlign4=no
The options Wallpaper, Dragging, Animation and Theme can set
the RDP experience. Default is yes.
TosIpPrecedence — Allows you to set IP Precedance in the
TOS elds.
TosDscp — Sets IP DSCP in the TOS elds.
AutoDetectNetwork —Default is yes. Yes/no option to enable
an RDP session to adapt its data transfer to band width of
network.
TSGWEnable — Default is yes. Yes/no option to obtain/enable
TS gateway for the applications and desktops from Microsoft
RDS broker server. The default value is yes which means that
the TS Gateway setting is automatically obtained or enabled
from the Microsoft RDS broker server.
TcpMaxRetransmission={2~12} Congures the retransmission of a TCP connection. The default
value of this option is 5.
TerminalName=name
[reboot={yes, no}]
[Capital={yes, no}]
User can set a string up to 15 characters as terminal name. It
can be congured as system variable like $MAC, $SN or $IP
etc.
If reboot is set to yes and the terminal name is changed, the
terminal will reboot.If "TerminalName=$DNS" is set, the system
will do reverse DNS lookup to congure the terminal name. For
example, if the DNS server congures the terminal IP as reverse
dns name p12345.wysespt.com, the terminal name will be
congured as p12345. If you set Capital=yes, the terminal name
is capitalized.
**UniSession={no, yes} Yes/no option to launch the connection only once at a time.
82
VDIBroker=vdi_broker_url
[AutoConnectList={*|host1;host2;host3…}]
VDIBroker — Species the VDI broker server; supports both
http and https.
If the vdi_broker_url does not start with http or https, the
default protocol used is http. For an https connection, only one
URL is accepted.
NOTE:
If the VDIBroker parameter value is changed, the thin client
will reboot without notice to the user so it can reconnect
to the new server.
AutoConnectList — Species the VDI or VDM host which will
be automatically started when using VDI or VDM sign-on. If the
value is *, all of the VDI or VDM hosts will automatically be
connected. The autoconnectlist is the connection description
which can use the wildcard * to match the string.
VirtualCenter=virtual_center_url Species the Virtual Center Server that supports both http and
https. If the virtual_center_url does not start with http or https,
the default protocol used is http.
NOTE:
If a VirtualCenter in an INI le is dierent from the original
URL, the thin client will reboot for the new URL to take
eect.
Only this setting can enable the Virtual Center functions.
**VNCPrompt={no, yes}
[{Accept, Reject}={10 to 600} (seconds)]
[ViewOnly={no, yes}]
[ActiveVisible={no, yes}]
Default is yes.
VNCPrompt — Yes/no option to enable a VNC shadowing
prompt to a user. VNCPrompt set to yes means the user will
always be prompted before shadowing starts and the user will
then decline or accept VNC shadowing;
VNCPrompt set to no means the user will not be able to decline
or accept shadowing. See also MaxVNCD in Table 4 :
Connection Settings for wnos.ini les only to enable VNC
shadowing.
See also VncPassword in Table 4: Connection Settings for
wnos.ini Files Only to specify a string of up to 8 characters as
the password used for shadowing.
Accept, Reject — Default is 10. Species the amount of time
(in seconds) a user has to accept or reject the VNC shadowing
prompt before the client desktop is shadowed.
ViewOnly — Default is no. Yes/no option to specify that the
desktop being shadowed can only be viewed by the person who
is shadowing; no keyboard or mouse events are allowed to
interfere with the thin client being shadowed.
ActiveVisible — Default is no. Yes/no option to display a VNC
session-end notice after the VNC session ends.
VPN=openconnect
[Description=string_description]
[Server=server_ip_or_name]
The INI parameter openconnect enables you to connect to
Cisco AnyConnect VPN servers, that use standard TLS
protocols for data transport.
Description— Species the session name. The length of the
string is limited to 21 characters.
83
[Username=username_string]
[Password=password_string]
[Autoconnect={yes, no}]
Server— Species the VPN server IP or the VPN server name.
The length of the string is limited to 63 characters.
Username— Species the login username. The length of the
string is limited to 31 characters.
Password— Species the login password. The length of the
string is limited to 31 characters.
Autoconnect— Species the option to enable or disable auto-
connect on system startup.
84
A
Connect Parameter: Options
This appendix provides the supported options for the Connect parameter in the following supported connections:
• ICA Connect Options
• RDP Connect Options
ICA connect options
Table shown here contains the supported options used for ICA connections (after you use the Connect=ICA parameter/selection).
Important:
If an option has an underlined value (default), that option and default value will automatically be used with Connect=ICA;
options without underlined values can also be used if you want to, but are not automatically used with Connect=ICA. In
addition, when using options, you can leave the default value or change it to another value shown.
For example, in the following case where:
Connect=ICA
[Option1={0, 1}]
[Option2={1, 2, 3, 4}]
Since you are using Connect=ICA, then Option 1 and its default value 0 will automatically be used as Option 1 has an underlined
value (default of 0). You can still use Option 2 if you want to, however, Option 2 is not automatically used with the parameter
as Option 2 does not have a default value.
NOTE:
Any option in Table 8: ICA Connect Options that is used in a {username}.ini le will return to the default value set for that
option in the wnos.ini le after a user sign-o. For example, if your {username}.ini le contains the option Reconnect=yes so
that a lost connection will restart 20 seconds after disconnection; and you sign o the thin client, then the Reconnect value
will return to the original default value of no (Reconnect=no) contained in the wnos.ini le—so that others who sign in can use
their own user prole; assuming the administrator has not changed the default values in the wnos.ini.
ICA connect: options
Table 10. ICA connect: options
Option Description
Alternate=[no, yes] Default is no.
Yes/no option to use an alternate IP address returned from an
ICA master browser to get through rewalls.
AudioQualityMode={0, 1, 2, 3} Default is 0.
Species the audio quality of a session.
0 – Default
85
1 – High Quality
2 – Medium Quality
3 – Low Quality
Autoconnect={0 to 99} Default is 0.
Use for automatically starting a session after you sign in, if sign-
on is enabled.
The value of 0 – 99 is the delay in seconds before auto-starting
the session.
AppendUsername=1 This enhancement allows user names to display in the title bar of
an ICA session at the client side.
Browserip=list of browsers List of IP addresses or DNS registered names to specify ICA
browsers. List items must be separated by semicolons or
commas.
Colors={256, 32k, 64k or high, 16m, true} Default is high.
Session color mode. For faster display performance, use 256
colors for the session.
• 256 is 8-bits
• 32k is 15-bits
• 64k or high is 16-bits
• 16m is 24-bits
• true is 32-bits
NOTE:
• 64k is the same value as high.
• 16m — 24-bits over ICA is only supported by Windows
XP and Windows 2003 server. It is not supported by
Windows Server 2008 or newer.
• true — 32-bit remote connections are not supported
by Windows XP or Windows 2003 server. It requires
Windows Vista, Windows Server 2008, or newer with
ICA.
Command=start command A string of commands to be executed after logging on to the
server. This entry is limited to 127 characters.
Description=string description Connection description. Enclose the string description in
quotation marks if there are embedded blanks or single quotes.
For quotation marks, use common-practice nesting rules.
Maximum of 38 characters are allowed.
Directory=working directory A directory to be used as the working directory after logging on
to the server. Maximum of 63 characters are allowed.
Disablesound={no, yes, 2} or {0, 1, 2} Default is no.
Species whether or not to disable remote sound upon
connection start.
86
Domainname={domain name,$DN} Domain name to use in a Windows network. $DN species that
the thin client sign-on domain name is used. Maximum of 19
characters are allowed.
Encryption={None, Basic, 40, 56, 128, Login-128} Default is Basic.
Connection security encryption level. The highest level is 128-bit
security (Login-128 option is 128 bit encryption for login
only).The lowest is None.
NOTE:
The server must support the specied level of encryption
or the connection will fail.
Fullscreen={no, yes} Default is no.
Yes/no option to run the session in full screen. If Fullscreen=no
then the session runs in a windowed screen.
Host=[name, IP, $SYS VAR]
or
Application=published application
Host — A list of server hostnames or IP addresses to which the
thin client will attempt to connect. The next server on the list is
attempted if the previous one failed. List items must be
separated by semicolons or commas.
NOTE:
$UN (see Table 1) species that the sign-on user name is
used and should be set in a {username}.ini le. If set to
Host=$UN in a {username}.ini le, the hostname will
display as the sign-on user name. If set to Host=$UN in a
wnos.ini le, the hostname will display as the default start.
Application — Denes the published application to launch.
Application is required if no host is specied.
HttpBrowsing={no, yes} Default is no.
Yes/no option to select an http browsing protocol. Use
HttpBrowsing=no for User Datagram Protocol (UDP).
NOTE:
This option is used to override the default method of
browsing established in the ICABrowsing parameter. For
information, see Table 7: Connection Settings: wnos.ini
les, {username} INI, and $MAC INI Files.
Icon={default, bitmap le} Species an icon to appear on the thin client desktop for a
connection. Use Icon=default to display a system default icon
for a connection.
To use an icon other than the default icon, enter the name with
extension of the bitmap le; ensure that the le is located in the
FTP server wnos\bitmap directory. If Icon= is not specied and
the icon is not specied by a PNAgent/PNLite server, no icon is
displayed for a connection.
KeepAlive={0 to 127} Species the number of minutes to keep a session connected
after the session is inactive. During this period, one dummy
packet will be sent to the server if network trac is lost. Default
is 10.
LocalCopy={no, yes} Default is no.
87
Yes/no option to save the connection to the local NVRAM.
The connection description of the Description option is used as
the index key into the local connection table. If a match is found,
then the entry is updated. Otherwise, a new entry is created.
Maximum total of local entries is 16.
Logon_mode={local-user, smartcard, user-specied} Default is local-user.
Species how users authenticate to the selected application set
or ICA connection.
Lowband={no, yes} Default is no.
Yes/no option to enable optimization for low speed connections
such as reducing audio quality and/or decreasing protocol-
specic cache size.
Mapdisks={no, yes} Default is no.
Yes/no option to auto-connect and map any connected USB
ash drive upon connection start.
Mapdisksunderz Important: : DISCONTINUED. DO NOT USE
.
[NO_FontSmoothing={no, yes}] Default is no—font smoothing is enabled by default.
Yes/no option to disable font smoothing. If set to yes, the font
smoothing is disabled.
NoReducer={no, yes} Default is no.
Yes/no option to turn o compression. Default is no, which
enables compression. To turn o compression, enter yes.
Used here is an option of the Connect statement. It sets the
value of NoReducer only for this specied connection.
NOTE:
By default the ICA protocol compresses the data to
minimize the amount of data that needs to traverse the
network. This compression can be as much as 50 percent
for text-based applications such as Microsoft Word and 40
percent less for graphics applications than the data
streams that are not compressed.
Password={password, $SYS_VAR} Password to log-in to the application server. Either a
conventional login password or a variable can be used. Maximum
of 19 characters are allowed.
The value of password is a conventional login password.
The value of $SYS_VAR is a system variable found in Table:
System variables.
88
Important:
The application server password is not encrypted; it is
strongly recommended not to specify it. The user will be
prompted to enter the password when the connection is
made. This application server password directive never
starts a line, so it can be distinguished from the thin client
user sign-on password which does starts a line.
NOTE:
The Password option is not written into a {username}.ini
le by a user. When the New Password check box is
selected, the system writes the new, changed password
into the {username}.ini le with encryption. This password
is then checked against the sign-on password with
encryption to determine whether sign-on is successful.
Password-enc=an encrypted password Species an encrypted string as a password for a connection.
Reconnect={no, yes, 1 to 3600 (seconds)} Default is no.
Controls automatic reconnection to an application after a server
disconnection.
yes — Use to restart the connection; the default delay time for
yes reconnect is 20 seconds.
no — Use to prevent reconnection after a disconnect.
1 to 3600 — Use an integer value of 1 to 3600 seconds to
restart the connection after the delay you want. For example,
use 50 and the automatic reconnection to an application will
occur after 50 seconds.
Resolution=[default, Seamless, <monitor resolution>] Default is default.
Species the connection display resolution.
default — Starts the connection using the current desktop
display setting with no window frame and border.
Seamless — Available for use if the connection is to a published
application. For Seamless connections, the MetaFrame hosts
select the best-t connection window for applications.
<monitor resolution> — Resolution values you can use in the
form X x Y depending on your client. Example for monitor
resolution: 1024 x 768. See the Release Notes of your client.
SessionReliability={no, yes} Default is no.
Yes/no option to enable session reliability.
NOTE:
ThinOS thin clients do not support UDP browsing to obtain
a new conguration about session reliability on the server.
The thin client always connects to the default port.
UniSession={no, yes} Default is no.
Yes/no option to use a unisession. The connection will launch
only once at a time.
89
UnmapClipboard={no, yes} Default is no.
Yes/no option to disable clipboard redirection for an ICA session
if redirecting the clipboard.
UnmapPrinters={no, yes} Default is no.
Yes/no option to not auto-connect to local printers when the
connection starts.
UnmapSerials={no, yes} Default is no.
Yes/no option to not auto-connect to local serials when the
connection starts.
UnmapUSB={no, yes} Default is no.
Yes/no option to not auto-connect to local USB devices (Virtual
USB) when the connection starts.
Username=[username, $SYS_VAR] Username to log-in to the application server. Either a
conventional login username or a variable can be used.
Maximum of 31 characters are allowed.
The value of username is a conventional login username.
The value of $SYS_VAR is a system variable found in Table 1:
System variables.
NOTE:
The combination of all the variables such as $IP@$DN are
also supported.
Username-enc=an encrypted username Species an encrypted string as a username for a connection.
[WyseVDA={no, yes}] Default is no.
Yes/no option to enable Wyse Virtual Desktop Accelerator for all
ICA sessions.
RDP connect options
Table shown here contains the supported options used for RDP connections after you use the Connect=RDP parameter/selection.
Important:
If an option has an underlined value (default), that option and default value will automatically be used with Connect=RDP;
options without underlined values can also be used if you want to, but are not automatically used with Connect=RDP. In
addition, when using options, you can leave the default value or change it to another value shown.
For example, in the following case where:
Connect=RDP
[Option1={0, 1}]
[Option2={1, 2, 3, 4}]
90
Since you are using Connect=RDP, then Option 1 and its default value 0 will automatically be used as Option1 has an underlined value
(default of 0). You can still use Option 2 if you want to, however, Option 2 is not automatically used with the parameter as Option 2
does not have a default (underlined) value.
NOTE:
Any option in Table 9: RDP Connect Options that is used in a {username}.ini le will return to the default value set for that
option in the wnos.ini le after a user sign-o.
For example, if your {username}.ini le contains the option Reconnect=yes (so that a lost connection will restart 20 seconds
after disconnection) and you sign o of the thin client, then the Reconnect value will return to the original default value of no
(Reconnect=no) contained in the wnos.ini le—so that others who sign in can use their own user prole assuming the
administrator has not changed the default values in the wnos.ini le.
RDP connect options
Table 11. RDP connect options
Option Description
Autoconnect={0 to 99} Default is 0.
Use for automatically starting a session after sign-on, if sign-on
is enabled.
The value of 0-99 is the delay in seconds before auto-starting
the session.
Colors={256, 32k, 64k or high, 16m, true} Default is high.
Session color mode. For faster display performance, use 256
colors for the session.
• 256 is 8-bits
• 32k is 15-bits
• 64k or high is 16-bits
• 16m is 24-bits
• true is 32-bits
NOTE:
• 64k is the same value as high.
• 16m — 24-bits over RDP is only supported by
Windows XP and Windows 2003 server. It is not
supported by Windows Server 2008 or newer.
• true — 32-bit remote connections are not supported
by Windows XP or Windows 2003 server. It requires
Windows Vista, Windows Server 2008, or newer with
RDP.
Command=start command A string of commands to be executed after logging on to the
server. This entry is limited to 127 characters.
Console={no, yes} Default is no.
Yes/no option to login to a session in Console mode.
NOTE:
If Console=yes is set behind the RDP connection, the
TimeZone redirection feature will be disabled.
91
Description=string description Connection description. Enclose the string description in
quotation marks if there are embedded blanks or single quotes.
For quotation marks, use common-practice nesting rules.
Maximum of 38 characters are allowed.
Directory=working directory A directory to be used as the working directory after logging on
to the server. Maximum of 63 characters are allowed.
Disablesound={no, yes, 2} or {0, 1, 2} Default is no or Default is 0.
Species whether or not to disable remote sound upon
connection start.
NOTE:
Disablesound=2 only works in RDP sessions and indicates
that the remote computer sound should be disabled at the
remote computer.
Domainname={domain name,$DN} Domain name to use in a Windows network. $DN species that
the thin client sign-on domain name is used. Maximum of 19
characters are allowed.
Fullscreen={no, yes} Default is no.
Yes/no option to run the session in full screen. If Fullscreen=no
then the session runs in a windowed screen.
NOTE:
Fullscreen=Yes and DualHead=Yes will result in Span Mode
when connecting to a Windows server 2003 or a Windows
XP Pro Client.
Fullscreen=Yes and DualHead=Yes will result in Extended
mode when connecting to a Windows Server 2008 (any
version) and to a Windows 8 or above desktop.
Host=[name, IP, $SYS VAR] Host — A list of server host names or IP addresses to which
the thin client will attempt to connect; the next server on the
list is attempted if the previous one failed. List items must be
separated by semicolons or commas.
NOTE:
$UN species that the sign-on user name is used and
should be set in a {username}.ini le. , see Table 1: System
Variables. If set to Host=$UN in a {username}.ini le, the
hostname will display as the sign-on user name. If set to
Host=$UN in a wnos.ini le, the hostname will display as
the default Start.
Icon={default, bitmap le} Species an icon to appear on the thin client desktop for a
connection. Use Icon=default to display a system default icon
for a connection.
To use an icon other than the default icon, enter the name with
extension of the bitmap le; ensure that the le is located in the
FTP server wnos\bitmap directory. If Icon= is not specied and
the icon is not specied by a PNAgent/PNLite server, no icon is
displayed for a connection.
KeepAlive={0 to 127} Default is 10.
92
Species the number of minutes to keep a session connected
after the session is inactive. During this period, one dummy
packet will be sent to the server if network trac is lost.
LocalCopy={no, yes} Default is no.
Yes/no option to save the connection to the local NVRAM.
The connection description of the Description option is used as
the index key into the local connection table. If a match is found,
then the entry is updated. Otherwise, a new entry is created.
Maximum total of local entries is 16.
Logon_mode=prompt Species one dialog box will pop up to allow a user to enter
username, password, and domain before connecting to the RDP
session. This can prevent the need to input credentials twice in
some cases of server redirection (load balancing).
Lowband={no, yes} Default is no.
Yes/no option to enable optimization for low speed connections
such as reducing audio quality and/or decreasing protocol-
specic cache size.
Mapdisks={no, yes} Default is no.
Yes/no option to auto-connect and map any connected USB
ash drive upon connection start.
NoReducer={no, yes} Default is no — Enables compression.
Yes/no option to turn o compression. To turn o compression,
enter yes. Used here is an option of the Connect statement. It
sets the value of NoReducer only for this specied connection.
NOTE:
By default the RDP protocol compresses the data to
minimize the amount of data that needs to traverse the
network. This compression can be as much as 50 percent
for text-based applications such as Microsoft Word and 40
percent less for graphics applications than the
uncompressed data streams.
Password={password, $SYS_VAR} Password to log-in to the application server. Either a
conventional login password or a variable can be used. Maximum
of 19 characters are allowed.
The value of password is a conventional login password.
The value of $SYS_VAR is a system variable found in Table 1:
System Variables.
Important:
The application server password is not encrypted; we
strongly recommend not to specify it. The user will be
prompted to enter the password when the connection is
made. This application server password directive never
starts a line, so it can be distinguished from the thin client
user sign-on password which does starts a line.
93
NOTE:
The Password option is not written into a {username}.ini
le by a user. When the New Password check box is
selected, the system writes the new password into the
{username}.ini le with encryption.
This password is then checked against the sign-on
password with encryption to determine whether sign-on is
successful.
Password-enc=an encrypted password Species an encrypted string as a password for a connection.
RDPAudioQualityMode NOTE: DISCONTINUED. DO NOT USE.
RDPAudioRecord={no, yes} Default is no.
Yes/no option to specify whether users can record audio to the
server. This requires a Windows 7 Server.
Rdp_No_Animation={no, yes} Default is no.
Yes/no option to disable the Menu and Window animation
feature; use yes to disable the feature.
Rdp_No_Dragging={no, yes} Default is no.
Yes/no option to disable the Show content when dragging a
window feature; use yes to disable the feature.
Rdp_No_Fontsmoothing={no, yes} Default is no.
Yes/no option to disable the Font smoothing feature; use yes to
disable the feature.
Rdp_No_Theme={no, yes} Default is no.
Yes/no option to disable the Theme feature; use yes to disable
the feature.
Rdp_No_Wallpaper={no, yes} Default is no.
Yes/no option to disable the Wallpaper feature; use yes to
disable the feature.
Reconnect={no, yes, 1 to 3600 (seconds)} Default is no.
Controls automatic reconnection to an application after a server
disconnection.
yes — Use to restart the connection; the default delay time for
yes reconnect is 20 seconds.
no — Use to prevent reconnection after a disconnect.
1 to 3600 — Use an integer value of 1 to 3600 seconds to
restart the connection after the delay you want. For example,
use 50 and the automatic reconnection to an application will
occur after 50 seconds.
Resolution=[default, <monitor resolution>] Default is default.
94
Species the connection display resolution.
default — Starts the connection using the current desktop
display setting with no window frame and border.
<monitor resolution> — Resolution values you can use in the
form XxY. For example: 1024 x 768 depend on your client. See
the Release Notes for your client.
NOTE:
If Using DualHead=Yes and setting this resolution value to
Default will start the RDP session in Span Mode. If you
want to use only the fullscreen of one monitor use
Resolution=DDC. This option is ignored if Fullscreen=Yes
Smartcards={no, yes} Default is no.
Yes/no option to use a smart card login server when the
connection starts.
TSGWDomainName=[domain] Species the TS Gateway Domain for RDP session.
TSGWENABLE={no, yes} Default is no.
Yes/no option to enable TS gateway.
TSGWNAME=[hostname] Species the TS Gateway host address.
TSGWPassword=[password] Species the TS Gateway Password for the RDP session.
TSGWPassword-enc=[encrypted-password] Species the encrypted TS Gateway Password for RDP session.
TSGWSERVER=[hostname] Species the TS Gateway host address.
TSGWUsername=[username] Species the TS Gateway Username for RDP session.
TSGWUsername-enc=[encrypted-username] Species the encrypted TS Gateway Username for RDP
session.
TSGWUSESAMEINFO={no, yes} Default is no.
Yes/no option to apply RDP connection credential to Gateway
credential.
UniSession={no, yes} Default is no.
Yes/no option to use a unisession—a connection will launch only
once at a time.
UnmapClipboard={no, yes} Default is no.
Yes/no option to disable clipboard redirection for an RDP session
if redirecting the clipboard.
UnmapPrinters={no, yes} Default is no.
Yes/no option to not auto-connect to local printers when the
connection.
UnmapSerials={no, yes} Default is no.
Yes/no option to not auto-connect to local serials when the
connection.
95
UnmapUSB={no, yes} Default is no.
Yes/no option to not auto-connect to local USB devices (Virtual
USB) when the connection starts.
Username=[username, $SYS_VAR] Username to log-in to the application server. Either a
conventional login username or a variable can be used.
Maximum of 31 characters are allowed.
The value of username is a conventional log-on username.
The value of $SYS_VAR is a system variable found in Table:
System variables.
NOTE:
The combination of all the variables such as $IP@$DN are
also supported.
Username-enc=an encrypted username Species an encrypted string as a username for a connection.
[WyseVDA={no, yes}] Default is no.
Yes/no option to enable Wyse Virtual Desktop Accelerator for all
RDP sessions.
96
B
TimeZone Parameter: Values
Using the TimeZone parameter, Table “TimeZone Parameter: Values” contains the zone value options that can be used.
For Example:
TimeZone="GMT - 08:00" ManualOverride=Yes Daylight=Yes \
Start=030207 End=110107 TimeZoneName=Pacific \
DaylightName=Pacific
Remember to use quotation marks (" ") since the option includes spaces. The example above uses the " \" to break a single
continuous line into multiple likes for easier reading with no" \" on the last line of the parameter.
NOTE:
The Start and End options are in the MMWWDD format, where:
MM = Month of the year. Values are 01 to 12 for the months of the year from January to December.
For example, 01 = January, 12 = December
WW = Week of the Month. Values are 01 to 05 for the week of the month, 05 is the last week.
For example, 01 = 1st week, 05 = the last week of the month.
DD = Day of the week. Values are 01 to 07 for the day in the week from Monday to Sunday.
For example, 01 = Monday, 07 = Sunday
U.S. Only:
For the 2013 year, DST dates are Sunday, March 10, 2:00am and ends Sunday, November 3, 2:00am.
Start=030207 End=110107
For the 2014 year, DST dates are Sunday, March 9, 2:00am and ends Sunday, November 2, 2:00am.
Start=030207 End=110107
TimeZone Parameter: Values
Table 12. TimeZone Parameter: Values
Geographic Time Zones Time Zones Name
(GMT-12:00) International Date Line West Dateline
(GMT-11:00) Coordinated Universal Time-11 UTC-11
(GMT-10:00) Hawaii Hawaiian
97
Geographic Time Zones Time Zones Name
(GMT-09:00) Alaska Alaskan
(GMT-08:00) Pacic Time (US & Canada) Pacic
(GMT-07:00) Arizona" US Mountain
(GMT-07:00) Chihuahua, La Paz, Mazatlan Mountain (Mexico)
(GMT-07:00) Mountain Time (US & Canada) Mountain
(GMT-06:00) Central America" Central America
(GMT-06:00) Central Time (US & Canada) Central
(GMT-06:00) Guadalajara, Mexico City, Monterrey Central (Mexico)
Geographic time zones Time zones name
(GMT-06:00) Saskatchewan Canada Central
(GMT-05:00) Bogota, Lima, Quito, Rio Branco SA Pacic
(GMT-05:00) Chetumal Eastern (Mexico)
(GMT-05:00) Eastern Time (US & Canada) Eastern
(GMT-05:00) Indiana (East) US Eastern
(GMT-04:30) Caracas Venezuela
(GMT-04:00) Asuncion Paraguay
(GMT-04:00) Atlantic Time (Canada) Atlantic
(GMT-04:00) Cuiaba Central Brazilian
(GMT-04:00) Georgetown, La Paz, Manaus, San Juan SA Western
(GMT-03:30) Newfoundland Newfoundland
(GMT-03:00) Brasilia E. South America
(GMT-03:00) Cayenne, Fortaleza SA Eastern
(GMT-03:00) City of Buenos Aires Argentina
(GMT-03:00) Greenland Greenland
(GMT-03:00) Montevideo Montevideo
(GMT-03:00) Salvador Bahia
98
Geographic Time Zones Time Zones Name
(GMT-03:00) Santiago Pacic SA
(GMT-02:00) Coordinated Universal Time-02 UTC-02
(GMT-01:00) Azores Azores
(GMT-01:00) Cape Verde Is. Cape Verde
(GMT) Casablanca Morocco
(GMT) Coordinated Universal T+A35:A98ime UTC
Geographic time zones Time zones name
(GMT) Dublin, Edinburgh, Lisbon, London GMT
(GMT) Monrovia, Reykjavik Greenwich
(GMT+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm,
Vienna
W. Europe
(GMT+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague Central Europe
(GMT+01:00) Brussels, Copenhagen, Madrid, Paris Romance
(GMT+01:00) Sarajevo, Skopje, Warsaw, Zagreb Central European
(GMT+01:00) West Central Africa W. Central Africa
(GMT+01:00) Windhoek Namibia
(GMT+02:00) Amman Jordan
(GMT+02:00) Athens, Bucharest GTB
(GMT+02:00) Beirut Middle East
(GMT+02:00) Cairo Egypt
(GMT+02:00) Damascus Syria
(GMT+02:00) E. Europe E. Europe
(GMT+02:00) Harare, Pretoria South Africa
(GMT+02:00) Helsinki, Kyiv, Riga, Soa, Tallinn, Vilnius FLE
(GMT+02:00) Istanbul Turkey
(GMT+02:00) Jerusalem Israel
(GMT+02:00) Kaliningrad (RTZ 1) Russia TZ 1
99
Geographic Time Zones Time Zones Name
(GMT+02:00) Tripoli Libya
(GMT+03:00) Baghdad Arabic
(GMT+03:00) Kuwait, Riyadh Arab
(GMT+03:00) Minsk Belarus
(GMT+03:00) Moscow, St. Petersburg, Volgograd (RTZ 2) Russia TZ 2
(GMT+03:00) Nairobi E. Africa
(GMT+03:30) Tehran Iran
(GMT+04:00) Abu Dhabi, Muscat Arabian
(GMT+04:00) Baku Azerbaijian
(GMT+04:00) Izhevsk, Samara (RTZ 3) Russia TZ 3
(GMT+04:00) Port Louis Mauritius
(GMT+04:00) Tbilisi Georgian
(GMT+04:00) Yerevan Caucasus
(GMT+04:30) Kabul Afghanistan
(GMT+05:00) Ashgabat, Tashkent West Asia
(GMT+05:00) Ekaterinburg (RTZ 4) Russia TZ 4
(GMT+05:00) Islamabad Karachi Pakistan
(GMT+05:30) Chennai, Kolkata, Mumbai, New Delhi India
(GMT+05:30) Sri Jayawardenepura Sri Lanka
(GMT+05:45) Kathmandu Nepal
(GMT+06:00) Astana Central Asia
(GMT+06:00) Dhaka Bangladesh
(GMT+06:00) Novosibirsk (RTZ 5) Russia TZ 5
(GMT+06:30) Yangon Rangoon Myanmar
(GMT+07:00) Bangkok, Hanoi, Jakarta SE Asia
(GMT+07:00) Krasnoyarsk (RTZ 6) Russia TZ 6
100
Geographic Time Zones Time Zones Name
(GMT+08:00) Beijing, Chongqing, Hong Kong, Urumqi China
(GMT+08:00) Irkutsk (RTZ 7) Russia TZ 7
(GMT+08:00) Kuala Lumpur, Singapore Singapore
(GMT+08:00) Perth W. Australia
(GMT+08:00) Taipei Taipei
(GMT+08:00) Ulaanbaatar Ulaanbaatar
(GMT+08:30) Pyongyang North Korea
(GMT+09:00) Osaka, Sapporo, Tokyo Tokyo
(GMT+09:00) Seoul Korea
(GMT+09:00) Yakutsk (RTZ 8) Russia TZ 8
(GMT+09:30) Adelaide Cen. Australia
(GMT+09:30) Darwin AUS Central
(GMT+10:00) Brisbane E. Australia
(GMT+10:00) Canberra, Melbourne, Sydney AUS Eastern
(GMT+10:00) Guam, Port Moresby West Pacic
(GMT+10:00) Hobart Tasmania
(GMT+10:00) Magadan Magadan
(GMT+10:00) Vladivostok, Magadan (RTZ 9) Russia TZ 9
(GMT+11:00) Chokurdakh (RTZ 10) Russia TZ 10
(GMT+11:00) Solomon Is., New Caledonia Central Pacic
(GMT+12:00) Anadyr, Petropavlovsk-Kamchatsky (RTZ 11) Russia TZ 11
(GMT+12:00) Auckland, Wellington New Zealand
(GMT+12:00) Coordinated Universal Time+12 UTC+12
(GMT+12:00) Fiji Fiji
(GMT+13:00) Nuku'alofa Tonga
(GMT+13:00) Samoa Samoa
101
Geographic Time Zones Time Zones Name
(GMT+14:00) Kiritimati Island Line Islands
102
C
Best Practices: Troubleshooting and Deployment
Examples
This appendix contains the following best practices information:
• Troubleshooting INI Files
• Examples: Basic Deployments
Troubleshooting INI Files
General recommendations when encountering INI parameter usage problems and errors include:
• Check for spelling and format mistakes.
• Use the following process:
a. Restart the thin client.
b. Check thin client system information: for example, the Event log.
c. Search the Event log to see if there is an invalid statement.
Examples: Basic deployments
To help you get started, the following sections provide examples of parameters commonly used for basic deployments.
Citrix XenDesktop Broker Deployment
Autoload=1
Privilege=High
Timeserver=NTPserver.whatever.com timeformat="12-hour format" Dateformat=mm/dd/yyyy
TimeZone='GMT - 05:00' ManualOverride=no Daylight=yes Start=030207 End=110107
TimeZoneName=Eastern DayLightName=Eastern
SignOn=Yes
PNliteServer=https://XenDesktopDDC
Domainlist=yourdomain
Sysmode=VDI
Citrix Presentation Server/XenApp Deployment (with Optional Published Application)
Autoload=1
Signon=no
Seamless=yes
Connect=ICA \
BrowserIP=IPaddress \
Application="application" \
Description="name" \
Icon=default \
Domainname=Domain \
LocalCopy=no
Microsoft Broker Deployment
Autoload=1
Signon=yes
103
ConnectionBroker=Microsoft Host=ipadress
Domainlist=
Privilege=
VMware View Broker Deployment
Autoload=1
ConnectionBroker=VMware
VDIBroker=https://ViewServerAddress
TimeServer=IPAddress TimeFormat="12-hour format" DateFormat=mm/dd/yyyy
TimeZone='GMT - 05:00' ManualOverride=No Daylight=Yes Start=030207 End=110107
TimeZoneName=Eastern DaylightName=Eastern
Microsoft Terminal Services/Remote Desktop Service Deployment
Autoload=1
Signon=no
Seamless=yes
Connect=RDP \
Host=IP or Name of MS RDS server \
Description="Description" \
Username=Username \
Domainname=Domain \
Password=Password \
LocalCopy=no
Quest
ConnectionBroker=Quest
Signon=no
Domainlist=
104

Navigation menu