Reference Guide Dell Wyse ThinOS Release 8.3.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2016 - 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents Summary of Revisions.................................................................................................................................. 0 1 Introduction....................................................................................................................................................6 About this Guide.................................................................................................................................................................
Summary of Revisions The following changes and enhancements have been made to this document since Dell Wyse ThinOS release 8.3. Reference Description Device=bluetooth New parameters added in Peripheral Settings for wnos.ini Files, username INI and MAC INI Files. [Disable={yes, no}] DisableButton={yes, no} [DisableRestart={yes, no}] Fastconnect={yes, no} [Key={F1, F2, F3, F4, F5, F6, F7, F8, F9, F10, F11, F12, Pause/ Break}] New parameters added in Connection Settings for wnos.ini Files Only.
Reference Description SessionConfig=ICA New parameters added in Connection Settings for wnos.ini Files, {username} INI, and $MAC INI Files. [PasswordExpireNotify={yes, no}] [RefreshPopupNotice={yes, no}] TerminalName=name [reboot={yes, no}] New parameters added in Connection Settings for wnos.ini Files Only.
1 Introduction Thin clients running Dell Wyse ThinOS firmware are designed solely for optimal thin client security and performance. These extremely efficient purpose-built thin clients are virus and malware-resistant and offer ultra-fast access to applications, files, and network resources within Citrix, Microsoft, VMware and Dell vWorkspace environments, and other leading infrastructures.
2 Getting Started: Learning INI File Basics In this chapter you will learn how to construct and use the supported INI files. It includes: • Downloading and Using Sample INI Files • Supported INI Files You can Construct • Rules and Recommendations for Constructing the INI Files • Placing the INI Files into the Folder Structure on the Server After you become familiar with the INI file basics, you can refer to the parameter details you need in the other chapters and appendixes of this guide.
IMPORTANT: The INI file processing hierarchy is as follows: • Scenario 1 — WNOS.ini exists. The WNOS.ini file is processed and if the Include=$MAC.ini (or Include={username}.ini) statement is included, then the relative MAC.ini (or {username}.ini) file is processed. • Scenario 2 — WNOS.ini exists and {username}.ini exists. The WNOS.ini file is processed and if the Include=$MAC.ini statement is included, then the MAC.ini file is processed. Once the credentials are provided, the {username}.
NOTE: User profile parameters found in the {username}.ini file, generally override the identically named global parameters found in the wnos.ini file, however, some global parameters do not allow this. For hierarchical precedence of one variable over another, refer to the parameter descriptions in Table 7: Connection Settings: wnos.ini files, {username} INI, and $MAC INI Files can be used in a {username}.ini file.
Values of parameters containing white spaces must be placed inside quotation marks. We recommend you use common-practice nesting rules. 7 Separate Lists by using Semicolons or Commas Use semicolons or commas for list separators. 8 {username}.ini Files must be Write-Enabled All {username}.ini files must be write-enabled to allow the thin client to place the encrypted user passwords in the files. 9 Use the wnos.
$FIP IP address used in fixed format with 3 digits between separators, for example, 010.020.030.040.ini. Using it in conjunction with the left/right modifier helps to define policy for subnet. For example, include=&Left($FIP,11).ini is specified to include file 010.020.030.ini for subnet 010.020.030.xxx. $WPUN PEAP/MSCHAPv2 username used (802.1x dependent). $WPPW PEAP/MSCHAPv2 password used (802.1x dependent). $WPDN PEAP/MSCHAPv2 domain used (802.1x dependent).
NOTE: The use of parameter Include=$mac.ini will load / wnos/inc/mac-address.ini so that you can use inc in the folder structure and use $MAC.ini. /wyse/wnos/ini (Optional) The folder where you can place the {username}.ini files and {group} folder. /wyse/wnos/trace (Optional) The folder where you can place the trace files that you can capture and play back. IMPORTANT: Be sure to enable the parameter, EnableTrace=yes.
3 Parameters for WNOS INI Files Only This chapter provides the supported parameters that you can use in a wnos.ini file. NOTE: For information to help you construct and use the supported INI files, see Getting Started Learning INI File Basics. Parameters in Table 4 can only be used in a wnos.ini file; they cannot be used in a {username}.ini file.
Table 2. General Settings: wnos.ini files only Parameter Description AutoLoad={0, 1, 2, 101, 102, 201, 202} [LoadPkg={0, 1, 2}] AutoLoad — Default is 1. Specifies the firmware update mode. The following are the values and associated actions: [AddPkg={pkg1_name, pkg2_name, …}] 0 — Disables checking for image. [DelPkg={pkg1_name, pkg2_name, …}] 1— Enables forced firmware upgrade/downgrade process. This is the default value. 2 — Enables comparison/non-forced upgrade process only.
or Device=cmos AutoPower=(yes, no) Yes/no option on how the system starts when the power is first applied to the thin client. If set to yes, then the system starts itself without waiting for users to press the power button. In cases where power was lost unexpectedly and if the thin client was shut down properly before power was lost unexpectedly, when the power is restored, the thin client will be powered. This setting is useful in a kiosk environment.
3 DHCP Option Tag #199 NOTE: The Groupkey assigned in DCHP option #199 and INI parameter are only used for first time deployment, that is, they only take effect if CCM is currently disabled or if CCM is enabled but group-key is NULL. If DCHP is defined and CCM is enabled or not NULL: The CCM Group key in the DHCP is ignored since it is configured manually in local UI or from CCM group change.
Yes/no option to enable G key reset. G key reset is supported for Privilege=High in the NVRAM. Exit={yes, no, all} Default is yes. Specifies the INI file processing. yes — Processing returns to the prior INI file on the next line after $include. no — There is no operation. all — All INI file processing is exited. Include=<$mac.ini file or {username}.ini file> <$MAC.ini> Loads /wnos/inc/mac-address.ini. NOTE: The file name does not include the symbol : in the mac address.
setting. TimeZone settings in the wnos.ini file will be saved into NVRAM if EnableLocal=yes is set in the wnos.ini file. Daylight — Default is no. Yes/no option to enable daylight saving time; MMWWDD is a 6 digit number to specify the start and the end of daylight saving time. IMPORTANT: The Start and End options are in the MMWWDD format, where: MM = Month of the year. Values are 01 to 12 for the months of the year from January to December. For example, 01 = January, 12 = December WW = Week of the Month.
Peripheral Settings for wnos.ini Files Only Table 3 contains the parameters used for configuring peripheral settings such as keyboard, monitor, mouse, and printer. The defaults values are underlined. Table 3. Peripheral Settings: wnos.
Table 4. Connection Settings: wnos.ini files only Parameter Description AddCertificate=filename AddCertificate — Specifies a certificate file residing in the subfolder cacerts under the wnos folder to load on platforms with nand flash, or on the memory. The length of the filename, including the trailing period and the file extension, is limited to 64 characters.
[VWGateway]=url [ConnectionType]={Default, All, RDP, PCoIP} Set IgnoreProfile=yes to disable parsing the global setting from the VDI broker. It is only valid in the case of ConnectionBroker=default. SecurityMode — SecurityMode specifies the security mode for the VMware broker and Amazon Workspace (AWS) broker. It is only valid in case of ConnectionBroker=VMware or ConnectionBroker=AWS.
RGB565 — Default isno. Applies only if the desktop color is using 16 bits. IMPORTANT: If the RBG565 parameter value is changed to yes, the thin client will require a reboot. DHCPExpire={reboot, shutdown} Default is reboot. When a DHCP lease expires, a message notifies the user as follows: DHCP Expired, you must reboot. reboot — After 5 seconds, the system reboots. shutdown — After 5 seconds, the system shuts down. DHCPOptionsRemap={no, yes} Default is no.
This is a vendor-specific information. If ParseVendorInfo is set to no and the DHCPVendorID is also used with this parameter, you must set ParseVendorInfo=yes and then reboot the thin client twice. Maximum of 26 characters are allowed in a string. DHCPVendorID=vendor DHCPVendorID — Specifies the VendorID used for DHCP. [ParseVendorInfo={no, yes}] ParseVendorInfo — Default is yes. Yes/no option to specify whether or not ThinOS will interpret DHCP option 43. This is a vendor-specific information.
For example: Dualhead=yes ManualOverride=yes Mainscreen=1 \ Orientation=hort Taskbar=mainscreen NOTE: If using, be sure the ManualOverride option is the first option used after the Dualhead parameter position in the statement. Mainscreen — Sets which screen is used as the main screen. When using a DVI to DVI and VGA cable, the DVI connected monitor will be the default mainscreen=1. Orientation — Default is hort. Sets which style is used for display. Hort means horizontal and vert means vertical.
NOTE: If EnableRAVE=no or this parameter is not present, the TCX Multimedia will be used for all media files. If EnableRAVE=yes, RAVE will be used only for media files it supports. EnableRAVE=yes is ignored unless a valid TCX Multimedia license is used.
NOTE: Security process includes: 1 Verification that certificate has a valid date 2 Verification that Issuer is valid and correct 3 Certificate verification passes 4 CN and SAN on the certificate matches the DNS naming For Example: FileServer=https://10.151.122.66:444 SecurityMode=warning FormURL=URL to a file Specifies the URL to the name of a bitmap file (.ico, .bmp, .jpg, or .gif), to be displayed in the sign-on window, residing under the thin client home directory.
VNC server will send out images with the current system color depth. VNCD_Zlib — Default is no. Yes/no option to allow the VNC server to send data with Zlib compression. MMRConfig={VIDEO} [flashingHW={0, 1}] This parameter specifies whether to show the “HW” label at the top left corner of video or not when HDX is hardware decoded. The default value is 0. Set flashingHW to 0, if you want to hide HW. Set flashingHW to 1, if you want to show HW. Multifarm={no, yes} Default is no.
NoticeFile=filename [Resizable={no, yes}] [Timeout={0, 10 to 600}] [Title="notice_title"] [ButtonCaption="button_caption"] NoticeFile — Specifies a legal notification file residing in the home directory folder. The file is displayed in a dialog box and the user is prompted to accept it before the sign-on process continues. Resizable — Default is no. Yes/no option to resize the dialog box to fit the text size. Timeout — Default is 0.
ini configuration is needed correspondingly. Default value is 0. If set to 0, logs are not displayed. If DisablePromptToEnroll is set to yes, then ThinOS does not prompt you to enroll their security answers after OneSign sign-on. Default value is yes. SecurityMode specifies the SSL certification validation policy. If set to default, it applies SecurityPolicy setting. If set to full, the SSL connection needs to verify server certificate. If it is untrusted, drop the connection.
For example: If you re-name the Wyse 3010 thin client with ThinOS (T10) firmware file from DOVE_boot to DOVE_boot_8.0_037., then you must use platformconfig-="T Class", then add Firmware=DOVE_boot_8.0_037. ThinOS will look on the file server for this exact firmware name. If that defined firmware name is not found, then ThinOS will fall back to the default logic and look for the DOVE_boot firmware.
RapportDisable={yes, no} [DHCPinform={yes, no}] [DNSLookup={yes, no}] Set to yes to disable the Rapport agent. If RapportDisable=no, the Rapport agent is enabled and you can discover the WDM server by the following ways: 1 2 The DHCP option tag values received from standard or WDM proxy DHCP service for vendor class RTIAgent DNS service location record "_wdmserver.
Idle— The option Idle specifies the idle minutes. After the scheduled reboot time is reached, the unit reboots, if there is no session or the terminal is idle for specified idle minutes. If the session is still active, the reboot is delayed till the idle time is reached or log off the sessions. For example, If you set Reboot=yes time=20:30, the unit reboots on local time 20:30. If you set Reboot=yes time=20:30-4:30, the unit reboots on random time through 20:30 to 4:30.
this default server is selected. If default option is not specified, the last selected server is selected in the next sign on. Service={snmpd, thinprint, vncd, wdm, vda } disable={no, yes} Service — Specifies the services you can enable or disable; there are different syntaxes for the different services. disable — Default is no. Yes/no option to disable the services. Disable must follow the Service parameter. Service=snmpd disable={no, yes} Default is no.
[SecuredNetworkProtocol={yes, no}] [TLSMinVersion]={1,2,3}] [TLSMaxVesion={1,2,3}] [DNSFileServerDiscover={yes, no}] If set to full, the SSL connection needs to verify server certificate. If it is untrusted, connection is dropped.If set to warning, the SSL connection needs to verify server certificate. If it is untrusted, it is up to you to continue or drop the connection. If set to low, the server certificate is not checked. The value is persistent, and the default value is warning.
[UnlockRefresh={yes, no}] [SCShowCNName={yes,no}] [SCSecurePINEntry={no, yes}] [AutoConnectTimeout={10–300}] [DisableEditDomain={yes, no}] [AdGroupPrefix=adgrpnameprefix] SCRemovalBehavior — Default is 0. Specifies what happens after a smart card is removed. -1 — If smartcard is removed then client has no action. Whether the session can be used or not totally depend on the server policVNCD 0 — System logs off. 1 — System locks and can be unlocked only when the same certificate is used with the smart card.
UnlockRefresh — Default is yes. Yes/no option to specifies the refresh action after unlocking the system in classic mode. Yes — While unlocking, the system will refresh the PNA list to verify the password. No — Disables refresh. SCShowCNName — Default is yes. Yes/no option to force the use of the CN name of the certificate as the user name when using smartcard signon. The default uses the UPN name as the user name. SCSecurePINEntry — Default is no.
[ToolbarAutoQuit={yes, no}] [ToolbarStay={1~20}] [EnableLogonMainMenu={no, yes}} Toolbardisablemouse — Default is no. Yes/no option to disable the Zero toolbar from automatically displaying once you pause the mouse pointer on the left side of the screen for a specified amount of time. toolbarclick — Default is no. Yes/no option to pop up the toolbar only if clicking on the left-most side of the screen.
IMPORTANT: To use VNC Shadow, you must set MaxVNCD=1 and define a password; The MaxVNCD default is 0 and this disables VNC. If you are using an encrypted password, you must set encrypt to yes. For example: VncPassword= encrypt=yes If you are using a plain text password, you must set encrypt to no. For example: VncPassword= encrypt=no See also MaxVNCD in Table 4: Connection Settings: wnos.ini files only to enable VNC shadowing.
NOTE: If file server is changed by WDM server, device will reboot automatically to make sure all settings from WDM server take effect. Default is yes Discover— If Discover=yes is specified, rapport discovers the WDM server information from the DHCP option tag, DNS service location record and DNS host name. If the WDM server is discovered, the WDM server User Interface (UI) is protected on device. The default value is yes. SecurityMode specifies the SSL certification validation policy.
4 Parameters for WNOS INI, {username} INI, and $MAC INI Files This chapter provides the supported parameters that you can use in a wnos.ini file, a {username}.ini file, and in a $MAC.ini file. For information to help you construct and use the supported INI files, see Getting Started: Learning INI File Basics To increase usability such as relation to thin client dialog box equivalents, the supported parameters are separated into the following categories: • General Settings for wnos.
Topics: • General Settings for wnos.ini Files, {username} INI, and $MAC INI Files • Peripheral Settings for wnos.ini Files, {username} INI, and $MAC INI Files • Connection Settings for wnos.ini Files, {username} INI, and $MAC INI Files General Settings for wnos.ini Files, {username} INI, and $MAC INI Files Table 5 contains the parameters used for configuring general settings. The underlined values are defaults. Table 5. General Settings: wnos.
For example, the following settings are valid: BootOrder=PXE;HardDisk;USB BootOrder=HardDisk;PXE;USB BootOrder=USB;PXE;HardDisk However, the following settings are invalid: BootOrder=PXE;HardDisk BootOrder=PXE;PXE;USB BootOrder=PXE;HardDisk;USB;PXE If the first boot order is not HardDisk, the system restart will boot from the BIOS setting. BootpDisable={no, yes} Default is no. BootpDisable — Yes/no option to disable BOOTP requests. ThinOS supports both DHCP and BOOTP to obtain the network configurations.
[IconTextColor="rrr ggg bbb"] the FTP server wnos\bitmap directory. Default is Wyse wallpaper. To disable the parameter, leave value blank (Desktop=wysedefault). Layout — Default is stretch. Specifies the arrangement on the desktop background of the bitmap file specified by the Desktop parameter, if auto dial-up is set, Layout is invalid. For center, the image is placed in the center of the desktop without image size change. For tile, the image is replicated across the desktop.
The usage of other settings is self-explanatory. The only condition to use the settings is the BIOS GUI should have such settings. DEVICE=UsbTrace vid_pid={device vid/pin hex format} [max_len=500] Specify the WTOS to trace USB device data to ftp or USB disk. For "vid_pid", device Vendor ID and Product ID hex value, and VID is high 16 bit while Product ID is low 16 bit. Allows to trace maximum of eight devices at one time. For "max_len", set a max len for capturing each USB transfer data.
[Charset={ISO-8859-1, ISO-8859-2, ISO-8859-5, ISO-8859-7}] [ImageSuffix={us, fr, de, gb, b5, jp, ko, la, default] ManualOverride— If you set ManualOverride=yes, all the parameters are only valid in factory default. It is helpful to configure keyboard setting manually in case of multiple nationalities within a company. This option must be following Language=code statement. Charset — Specifies which ISO option to use: ISO-8859-1— This is Default.
Dutch — Nl Dutch (Belgian) — Nl_be Dutch (Belgian Comma) — Nl_be_c English (3270 Australian) — au3270 English (Australian) — Au English (New Zealand) — Nz English (United Kingdom) — Uk English (United States) (default) — Us Estonian (Estonia) — Et_ee Finnish — Fi French (Belgian) — fr_be French (Belgian Comma) — fr_be_c French (Canadian) — fr_ca French (France) — Fr French (Swiss) — fr_sf German — De German (IBM) — de_ibm German (Swiss) — de_sg Greek — el Hungarian — Hu Icelandic — Is Italian — It Italian (
Polish Programmers — pl_prog Portuguese — Pt Portuguese (Brazil) — Pt2 Romanian — Ro Russian — Ru Slovakian — Slovak Slovakian (Qwerty) — sk_q Slovenian — Sloven Spanish — Es Spanish (Mexican) English — La(us) Spanish (Mexican) Localized — La Swedish — Se Turkish — Turk Turkish (QWERTY) — turk_q U.S. International — us_int NOTE: Japanese refers to Japanese Input system (MS-IME2000), not JP. Russian keyboard is supported for server input; it is not supported to input locally.
Values include: English, us, French, fr, German, de, Chinese Simplified, gb, Chinese Traditional, b5, Japanese, jp, Korean, ko, Latin, la. load=yes/no specifies whether or not to load the language file. The language file must end with the locale name and be placed under the folder wnos/locale in the file server. NOTE: For example, if you want to specify French and load the localized messages, you must place a file named French.
or Password=NCAONIBINMANMLCOLKCNLL \ encrypt=yes ** PRIVILEGE=[None, Low, High] Default is high. [LockDown= {no, yes}] Privilege controls operator privileges and access to thin client resources. See also CCMEnable={yes, no}.
HidePPP — Default is no. Yes/no option to hide the Dialup Manager, PPPoE Manager, and PPTP Manager from view. HidePN — Default is no. Yes/no option to hide the PNAgent or PNLite icon from view on the taskbar. HideConnectionManager — Default is no. Yes/no option to hide the Connect Manager window from view.
NOTE: If the optional EnableNetworkSetup=yes is set with Privilege={none, low}, the network setup will be enabled. If the optional DisableNetworkOptions=yes is set at the same time, the Options table will be disabled. If the optional EnableSystemPreferences=yes is set with Privilege={none, low}, the system preferences setup will be enabled. If the optional DisableTerminalName=yes is set at the same time, the terminal name field will be disabled.
The default screen saver value is 10 minutes and the maximization value is 30 minutes. LockTerminal— This is an optional parameter and specifies to put the thin client in LOCK state when the screen saver is activated. Default is 0. 0 — Disabled. 1 — Puts the thin client in a LOCK state when the screen saver is activated. The user is prompted with an unlock dialog box to enter the sign-on password to unlock the thin client.
PictureOrder — Specifies the order of picture files to display. The default is to use the order of sort from A to Z. If set to random, pictures are displayed randomly. PictureCheck — Specifies whether to check for picture files servers or not. NOTE: If set to always, the picture files in file servers are checked when the screen saver starts every time. By default, the system checks for picture files only when the screen saver starts for the first time to decrease network traffic.
[GetBiosDT={no, yes}] DateFormat — Default is yyyy/mm/dd. Specifies the date format to use. NOTE: The TimeFormat and DateFormat settings in a wnos.ini file will be saved into NVRAM if EnableLocal=yes is set in the wnos.ini file. GetBiosDT — Default isno. Yes/no option to obtain time from BIOS/CMOS when the timeserver is not available or cannot be contacted. For Example: TimeServer=time.nist.com\TimeFormat=24-hour formatDateFormat=mm/dd/yyyy or TimeServer=time.nist.gov\ TimeFormat=24-hour format\ DateFormat
mute={0, 1, 2, 3} middle — medium volume [mic_vol={high, middle, low} or {0-25}] low — minimum volume [mic_mute={0, 1}] Values of 0-25 provide more exact volume level [min_cache={1-50}] mute — Default is 0. Option to enable/disable mute. [EnableSpeaker={yes, no}][ 0 — no mute 1 — mutes audio 2 — mutes audio and system beep 3 — mutes system beep mic_vol — Default is medium. Option to set volume levels to high, middle or low.
[samplerate={0, 1, 2, 3, 4, 5}] [optimize={no, yes}] [Disable={yes, no}] fps — The frame per second (fps) of the resolution that the local camera supports. samplerate — The software level sample rate based on fps to optimize the performance, where the frame per second for the camera is actually equal to the fps value multiplied by the samplerate value. Samplerate values mean the following sample rates: 0 — 1/1 1 — 1/2 2 — 1/3 3 — 1/4 4 — 1/5 5 — 1/6 optimize — Default is no.
6—2 7 — No Repeat NOTE: These settings in a wnos.ini file will be saved into NVRAM if EnableLocal=yes is set in the wnos.ini file. Device=Rfideas Device=Rfideas — Specifies the local Rfideas readers. [DisableBeep={yes, no}] DisableBeep — Default is yes. Option disables the beep sound when the card is read. [DisableKeystroke={yes, no}] [SetCardType={yes, no} Configuration1={*} Configuration2={*} ] DisableKeyStroke — Default is yes. Option disables the keyboard movements and key strokes.
to 10 MB. If the specified value is above the range, then the value is set to 5. The range of value is extended to 50. In build 8.2_001 or later builds, the LPD data is spooled to a file in a ram disk instead of a buffer. So the value of the parameter will not be related to the spool size as before. If LpdSpool=0, the function is disabled, otherwise the function is enabled. LPTPortBind={yes, no} LPTPortBind — Default is Yes. Specifies the LPT bind to the USB Port Policy.
Enabled — Default is yes. Yes/no option to enable the printer. EnableLPD — Default is no. Yes/no option to enable the LPD service. NOTE: The parameters must be specified in the order shown. Printer={LPD1, LPD2, LPD3, LPD4, LPD5-LPD36} Default is LPD1. [LocalName=name] Printer — Specifies the LPD printer to configure. [Host= host] LocalName — Specifies the name of the printer. If LocalName is not specified, the Queue name is used.
EnableLPD — Default is no. Yes/no option to enable the LPD printer. Username — Specifies the username of a user who can use the SMB printer. Password — Specifies the password of a user who can use the SMB printer. Domain — Specifies the domain name of the SMB printer. **RepeatDelay={0, 1, 2, 3, 4, 5, 6, 7} Default is 2. Specifies the keyboard delay before repeat in seconds. 0 — 1/5 1 — 1/4 2 — 1/3 3 — 1/2 4 — 3/4 5—1 6—2 7 — No Repeat **RepeatRate={0, 1, 2} Default is 1.
rotate — Rotate allows you to rotate monitors for viewing in Portrait mode. For example: screen=1 resolution=1280x1024 refresh=60 rotate=none NOTE: Due to processing power requirements, rotate is not recommended and supported on the C class platforms at this time. IMPORTANT: The Screen parameter must be placed before the Resolution parameter. For example: screen=1 resolution=1280x1024 refresh=60 rotate=none *Screen={1,2} Default is 1. Screen — Specifies the monitor for the Resolution parameter.
Default is yes. Yes/no option to enable RDP auto detect network feature. When this option is set to yes the Optimize for low speed link and the Desktop Experience options are disable by default. **AutoSignoff={no, yes} Default is no. [Shutdown={no, yes}] AutoSignoff —Yes/no option to automatically sign-off a user when the last opened session is closed. [Reboot={no, yes}] Shutdown — Default is no. Yes/no option to shut down the thin client.
StaticIPWaitFileServer — Default is 0. Specifies the timeout threshold in seconds for cases of static IP. NOTE: The default 0 turns off this parameter and allows the system to wait the system default 120 seconds. If the Speed parameter value is changed, the thin client requires a reboot. Device=vusb [ForceRedirect=DeviceID] [ForceLocal=DeviceID] [Type={TCX, HDX}] [InterfaceRedirect={no, yes}] Device — Specifies the ID of a local USB device that is not redirected by default.
[DisableBand={None, 2.4G, 5G}] [PreferBand={None, 2.4G, 5G}] [Priority=ssid_list] [DisableN={no, yes}] [DisableWlan={yes, no, EnetUp}] Algorithm — Specifies the authentication method of WEP between ThinOS and the access point. If set to Open, open authentication will be selected. If set to ShareKey, shared key authentication will be selected. DisableBand — Default is None. Use to disable 2.4G or 5G 802.11 band.
*EthernetSpeed={Auto, 10M HD, 10M FD, 100M HD, 100M FD, 1000M} Default is auto. EthernetSpeed — Specifies the Ethernet Speed to either Auto, 10M HD, 10M FD, 100M HD, or 100M FD. Once specified, it is saved in the non-volatile memory. This parameter can be replaced by the Device and Speed parameters. NOTE: If the EthernetSpeed parameter value is changed, the thin client will require a reboot.
If the option CtrlKey and/or AltKey is set to yes, then the function key should be combined with Ctrl key and/or Alt key. For PCoIP session, press Ctrl+Alt+F12 key combination to disconnect the session unless FastDisconnect=no is configured. This combined disconnect key is compatible with other platforms such as P25 and Linux. If the value is set to Signoff, pressing the F12 (default) or the key defined in FastDisconnectKey= statement will disconnect all sessions and return to the signon window.
property. The method of browsing selected must match the method provided by the server(s) being accessed. This setting in a wnos.ini file will be saved into NVRAM, if EnableLocal=yes is set in the wnos.ini file. IEEE8021X={yes, no} network={wired, wireless} [Profile=ssid] 1 If IEEE8021X is set to no, then all parameters following it is ignored. 2 If network is not configured, the configuration is ignored.
[wpapskpwdEnc={passphrase encrypted for WPA-PSK}] Example: IEEE8021X=yes network=wireless access=wpa-ent eap=yes eaptype=eap-tls tlsclntcert=user.cer tlsclntprikey=user.pfx tlsclntprikeypwd=12345678 [wpa2pskpwd={passphrase for WPA2-PSK}] [wpa2pskpwdEnc={passphrase encrypted for WPA2-PSK}] OR [encryption={TKIP|CCMP}] IEEE8021X=yes network=wireless access=wpa-ent eap=yes eaptype=eap-tls tlsclntcert=user.cer tlsclntprikey=user.
DisableEcho — If DisableEcho=yes, the system will not reflect the ICMP echo (8) request. In this case, the unit cannot be pinged. **LowBand={no, yes} Default is no. Yes/no option to enable optimization for low speed connections, such as reducing audio quality or decreasing protocol-specific cache size or both. This setting in a wnos.ini file will be saved into NVRAM, if EnableLocal=yes is set in the wnos.ini file.
NOTE: By default both the ICA and RDP protocols compress their data to minimize the amount of data that needs to traverse the network. This compression can be as much as 50 percent for textbased applications such as Microsoft Word and 40 percent less for graphics applications than the uncompressed data streams. OneSignServer=onesign_server [DisableBeep={no, yes} [KioskMode={no, yes}] Specifies a list of host names or IP addresses with optional TCP port number or URLs of Imprivata OneSign servers.
name. If set to yes, the Imprivata domain list will show NetBIOS domain name and the card user will authenticate to the broker server using the NetBIOS domain. PnliteServer= [ReconnectAtLogon={0, 1, 2}] [ReconnectFromButton={0, 1, 2}] [AutoConnectList={*/ appname1;appname2; appname3...
IMPORTANT: Appname values are case sensitive. Timeout — Specifies the time in seconds where a client will try to establish a connection before reporting that it is unreachable. CAGRSAAuthMethod or CAGAuthMethod — CAGAuthMethod option is used for CAG authentication configuration. NOTE: This option replaces CAGRSAAuthMethod. If CAGAuthMethod=RSA which is same as the prior CAGRSAAuthMethod=RSASecurid, an extra passcode field needs to be input except username/password/ domain.
SmartcardPassthrough — Default is yes. Yes/no option to enable/ disable the smartcard pass through mode. StoreFront — Default is no. Yes/no option to support Citrix StoreFront Authentication. The value will be saved into NVRAM. RTPTosDscp={Default/CS1/CS2/CS3/CS4/CS5/CS6/CS7/AF11/ AF12/AF13/AF22/AF23/AF31/AF32/AF33/AF42/AF43} Sets RTP/UDP audio channel in the TOS fields. SaveSysinfo={ftp, usb} Recommended for use under Customer Support direction for troubleshooting purposes.
FullscreenReserved parameter in a wnos.ini file will be saved into NVRAM if EnableLocal=yes is set in the wnos.ini file. NOTE: • • • SecureMatrixServer= [EnableSelectTable] When set Seamless=yes HideTaskbar=2, it removes the auto-hide taskbar function but it reports the full resolution to the ICA server in a similar way to HideTaskbar=1.
Group 1: Description="Dev team" groupname=dev The file \wnos\ini\dev\dev.ini must be created in the file server. In the dev.ini, the broker, domain list, or connections can be defined for the dev team. Group 2: .Description="Sus team" The file \wnos\ini\Sus team\Sus team.ini must be created in the file server. In the Sus team.ini, the broker, broker list, or connections can be defined for the Sus team. Group3...4...n...and so on.
[WyseVDA={no, yes}] [WyseVDA_PortRange=startPort, endPort] [UnmapClipboard={no, yes}] [DefaultColor={0,1,2}] MouseQueueTimer — Specifies the default queue timer of a mouse event in an ICA or RDP session (in 1/100 of a second). It can be used to adjust the bandwidth of a network. WyseVDA — Default is no. Yes/no option to enable Virtual Desktop Accelerator for all ICA and RDP sessions. [VUSB_DISKS={yes, no}] WyseVDA_PortRange — Sets the ThinOS VDA client port range.
MultiMonitor — Default is yes. Sets a multiple monitor layout. Set MultiMonitor=no to disable multiple monitor layout function. The session has the same desktop width and height with local virtual desktop size, spanning across multiple monitors, if necessary. EnableImprivataVC— Default is yes. If set to no, the Imprivata Virtual Channel is disabled. The user can use vusb redirect instead of Imprivata Virtual Channel mode to use the Rfideas or finger print device in session as server side remote device.
[EnableRTME={Yes, No}] [FlipByTimer={0, 1}] [RefreshTimeOut={dd:hh:mm}] [Timeout={Yes, No}] [PasswordExpireNotify={yes, no}] [RefreshPopupNotice={yes, no}] SysMenu — Default is local. Specifies the system menu mode when right-clicking the taskbar button of a seamless window. If it is remote, the system menu will come from the remote server; otherwise, it will be the local menu. SessionReliability — Default is no. Yes/no option to enable session reliability.
EnableRTME— This option controls the launch of RTME service. The default value is enabled. FlipByTimer— This option selects the screen refresh method. For some old server, there is no EndOfFrame transferred to the client. Then we can use this option to fix such issues. RefreshTimeOut—RefreshTimeOut triggers auto-refresh which updates ICA applications automatically. The value format dd:hh:mm, indicate days&&hours&&minutes as the auto-refresh interval. The default value is 0, that disables auto-refresh.
[EnableTSMM={yes, no}] [EnableGFX]={yes, no}] [EnableVOR={yes, no}] [EnableRdpH264]={yes, no}] [EnableRecord={yes, no}] [EnableRFX={yes, no}] [USBRedirection={TCX, RDP}] [RDPScreenAlign4={yes,no}] [WallPaper={yes, no}] EnableNLA — Default is yes. Yes/no option to utilize the Network Level Authentication feature in RDP 7. ForceSpan — Default is no. Yes/no option to disable RDP Multi Monitor feature. EnableTSMM — Default is yes . Yes/no option to enable RDP7 Multi-media redirect.
Gateway setting is automatically obtained or enabled from the Microsoft RDS broker server. TcpMaxRetransmission={2~12} Configures the retransmission of a TCP connection. The default value of this option is 5. TerminalName=name [reboot={yes, no}] User can set a string up to 15 characters as terminal name. It can be configured as system variable like $MAC, $SN or $IP etc. [Capital={yes, no}] If reboot is set to yes and the terminal name is changed, the terminal will reboot.
Accept, Reject — Default is 10. Specifies the amount of time (in seconds) a user has to accept or reject the VNC shadowing prompt before the client desktop is shadowed. ViewOnly — Default is no. Yes/no option to specify that the desktop being shadowed can only be viewed by the person who is shadowing; no keyboard or mouse events are allowed to interfere with the thin client being shadowed. ActiveVisible — Default is no. Yes/no option to display a VNC session-end notice after the VNC session ends.
A Connect Parameter: Options This appendix provides the supported options for the Connect parameter in the following supported connections: • ICA Connect Options • RDP Connect Options Topics: • ICA Connect Options • RDP Connect Options ICA Connect Options Table shown here contains the supported options used for ICA connections (after you use the Connect=ICA parameter/selection).
ICA Connect: Options Table 8. ICA Connect: Options Option Description Alternate=[no, yes] Default is no. Yes/no option to use an alternate IP address returned from an ICA master browser to get through firewalls. AudioQualityMode={0, 1, 2, 3} Default is 0. Specifies the audio quality of a session. 0 – Default 1 – High Quality 2 – Medium Quality 3 – Low Quality Autoconnect={0 to 99} Default is 0. Use for automatically starting a session after you sign in, if sign-on is enabled.
Command=start command A string of commands to be executed after logging on to the server. This entry is limited to 127 characters. Description=string description Connection description. Enclose the string description in quotation marks if there are embedded blanks or single quotes. For quotation marks, use common-practice nesting rules. Maximum of 38 characters are allowed. Directory=working directory A directory to be used as the working directory after logging on to the server.
NOTE: This option is used to override the default method of browsing established in the ICABrowsing parameter. For information, see Table 7: Connection Settings: wnos.ini files, {username} INI, and $MAC INI Files. Icon={default, bitmap file} Specifies an icon to appear on the thin client desktop for a connection. Use Icon=default to display a system default icon for a connection.
Used here is an option of the Connect statement. It sets the value of NoReducer only for this specified connection. NOTE: By default the ICA protocol compresses the data to minimize the amount of data that needs to traverse the network. This compression can be as much as 50 percent for text-based applications such as Microsoft Word and 40 percent less for graphics applications than the data streams that are not compressed. Password={password, $SYS_VAR} Password to log-in to the application server.
Seamless — Available for use if the connection is to a published application. For Seamless connections, the MetaFrame hosts select the best-fit connection window for applications. — Resolution values you can use in the form X x Y depending on your client. Example for monitor resolution: 1024 x 768. See the Release Notes of your client. SessionReliability={no, yes} Default is no. Yes/no option to enable session reliability.
RDP Connect Options Table shown here contains the supported options used for RDP connections after you use the Connect=RDP parameter/selection. IMPORTANT: If an option has an underlined value (default), that option and default value will automatically be used with Connect=RDP; options without underlined values can also be used if you want to, but are not automatically used with Connect=RDP. In addition, when using options, you can leave the default value or change it to another value shown.
NOTE: • 64k is the same value as high. • 16m — 24-bits over RDP is only supported by Windows XP and Windows 2003 server. It is not supported by Windows Server 2008 or newer. • true — 32-bit remote connections are not supported by Windows XP or Windows 2003 server. It requires Windows Vista, Windows Server 2008, or newer with RDP. Command=start command A string of commands to be executed after logging on to the server. This entry is limited to 127 characters. Console={no, yes} Default is no.
Host=[name, IP, $SYS VAR] Host — A list of server host names or IP addresses to which the thin client will attempt to connect; the next server on the list is attempted if the previous one failed. List items must be separated by semicolons or commas. NOTE: $UN specifies that the sign-on user name is used and should be set in a {username}.ini file. , see Table 1: System Variables. If set to Host=$UN in a {username}.ini file, the hostname will display as the sign-on user name. If set to Host=$UN in a wnos.
NOTE: By default the RDP protocol compresses the data to minimize the amount of data that needs to traverse the network. This compression can be as much as 50 percent for text-based applications such as Microsoft Word and 40 percent less for graphics applications than the uncompressed data streams. Password={password, $SYS_VAR} Password to log-in to the application server. Either a conventional login password or a variable can be used. Maximum of 19 characters are allowed.
Yes/no option to disable the Theme feature; use yes to disable the feature. Rdp_No_Wallpaper={no, yes} Default is no. Yes/no option to disable the Wallpaper feature; use yes to disable the feature. Reconnect={no, yes, 1 to 3600 (seconds)} Default is no. Controls automatic reconnection to an application after a server disconnection. yes — Use to restart the connection; the default delay time for yes reconnect is 20 seconds. no — Use to prevent reconnection after a disconnect.
Yes/no option to apply RDP connection credential to Gateway credential. UniSession={no, yes} Default is no. Yes/no option to use a unisession—a connection will launch only once at a time. UnmapClipboard={no, yes} Default is no. Yes/no option to disable clipboard redirection for an RDP session if redirecting the clipboard. UnmapPrinters={no, yes} Default is no. Yes/no option to not auto-connect to local printers when the connection. UnmapSerials={no, yes} Default is no.
B TimeZone Parameter: Values Using the TimeZone parameter, Table “TimeZone Parameter: Values” contains the zone value options that can be used. For Example: TimeZone="GMT - 08:00" ManualOverride=Yes Daylight=Yes \ Start=030207 End=110107 TimeZoneName=Pacific \ DaylightName=Pacific Remember to use quotation marks (" ") since the option includes spaces. The example above uses the " \" to break a single continuous line into multiple likes for easier reading with no" \" on the last line of the parameter.
Geographic Time Zones Time Zones Name (GMT-10:00) Hawaii Hawaiian (GMT-09:00) Alaska Alaskan (GMT-08:00) Pacific Time (US & Canada) Pacific (GMT-07:00) Arizona" US Mountain (GMT-07:00) Chihuahua, La Paz, Mazatlan Mountain (Mexico) (GMT-07:00) Mountain Time (US & Canada) Mountain (GMT-06:00) Central America" Central America (GMT-06:00) Central Time (US & Canada) Central (GMT-06:00) Guadalajara, Mexico City, Monterrey Central (Mexico) Geographic time zones Time zones name (GMT-06:00) Sas
Geographic Time Zones Time Zones Name (GMT-03:00) Santiago Pacific SA (GMT-02:00) Coordinated Universal Time-02 UTC-02 (GMT-01:00) Azores Azores (GMT-01:00) Cape Verde Is. Cape Verde (GMT) Casablanca Morocco (GMT) Coordinated Universal T+A35:A98ime UTC Geographic time zones Time zones name (GMT) Dublin, Edinburgh, Lisbon, London GMT (GMT) Monrovia, Reykjavik Greenwich (GMT+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna W.
Geographic Time Zones Time Zones Name (GMT+03:00) Baghdad Arabic (GMT+03:00) Kuwait, Riyadh Arab (GMT+03:00) Minsk Belarus (GMT+03:00) Moscow, St. Petersburg, Volgograd (RTZ 2) Russia TZ 2 (GMT+03:00) Nairobi E.
Geographic Time Zones Time Zones Name (GMT+08:00) Kuala Lumpur, Singapore Singapore (GMT+08:00) Perth W. Australia (GMT+08:00) Taipei Taipei (GMT+08:00) Ulaanbaatar Ulaanbaatar (GMT+08:30) Pyongyang North Korea (GMT+09:00) Osaka, Sapporo, Tokyo Tokyo (GMT+09:00) Seoul Korea (GMT+09:00) Yakutsk (RTZ 8) Russia TZ 8 (GMT+09:30) Adelaide Cen. Australia (GMT+09:30) Darwin AUS Central (GMT+10:00) Brisbane E.
C Best Practices: Troubleshooting and Deployment Examples This appendix contains the following best practices information: • Troubleshooting INI Files • Examples: Basic Deployments Topics: • Troubleshooting INI Files • Examples: Basic Deployments Troubleshooting INI Files General recommendations when encountering INI parameter usage problems and errors include: • Check for spelling and format mistakes. • Use the following process: a Restart the thin client.
Icon=default \ Domainname=Domain \ LocalCopy=no Microsoft Broker Deployment Autoload=1 Signon=yes ConnectionBroker=Microsoft Host=ipadress Domainlist= Privilege= VMware View Broker Deployment Autoload=1 ConnectionBroker=VMware VDIBroker=https://ViewServerAddress TimeServer=IPAddress TimeFormat="12-hour format" DateFormat=mm/dd/yyyy TimeZone='GMT - 05:00' ManualOverride=No Daylight=Yes Start=030207 End=110107 TimeZoneName=Eastern DaylightName=Eastern Microsoft Terminal Services/Remote Desktop Service Deploym
