Dell Wyse ThinOS Version 9.1 Administrator’s Guide April 2021 Rev.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2021 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents Chapter 1: Introduction................................................................................................................10 Supported platforms......................................................................................................................................................... 10 What's new in ThinOS 9.1.2101.......................................................................................................................................
Configure ThinOS using Admin Policy Tool.................................................................................................................36 Configure the Admin Policy Tool............................................................................................................................. 36 Admin Policy Tool feature list...................................................................................................................................36 Locking the thin client.........
Configure the Citrix session properties..................................................................................................................83 Using multiple displays in a Citrix session..............................................................................................................83 USB Printer Redirection.............................................................................................................................................
Change Optimized mode to Fallback mode..........................................................................................................116 Cisco Jabber Softphone for VDI................................................................................................................................... 117 Install the JVDI package on ThinOS.......................................................................................................................
Use a proximity card to tap-over another user session with Identity Automation on ThinOS................ 141 Chapter 9: Configuring the thin client local settings.................................................................. 142 Configuring the system preferences...........................................................................................................................142 Configure the general system preferences..............................................................................
Managing devices............................................................................................................................................................ 174 Search a device using filters on the Devices page............................................................................................ 175 View the display parameters...................................................................................................................................
Is USB Imaging Tool method a possible option for upgrading to ThinOS 9.1?........................................... 198 Can ThinOS 9.1 be installed on a PCoIP device?............................................................................................... 198 Does ThinOS 9.1 support zero desktop?..............................................................................................................198 Does ThinOS 9.1 support ThinOS configurations using INI files?................................
1 Introduction Thin clients running Dell Wyse ThinOS firmware are designed solely for optimal thin client security and performance. These efficient purpose-built thin clients offer ultrafast access to applications, files, and network resources within Virtual Desktop Infrastructure (VDI) environments. With zero attack surface, unpublished API, and encrypted data Wyse ThinOS is virus and malware resistant.
● Added cursor pattern settings to configure the cursor behavior in a Citrix session. For more information, see Cursor pattern in ICA session. ● Added the support to export citrix logs. For more information, see Export Citrix Workspace App logs. Windows Virtual Desktop and Remote Desktop Protocol updates ● Supports logging in to Windows Virtual Desktop using Active Directory Federation Services. For more information, see Log in to Windows Virtual Desktop using Active Directory Federation Services.
2 Upgrading the ThinOS firmware It is recommended to use the Wyse Management Suite version 3.1 or later to upgrade your ThinOS firmware to 9.1. You can also use the USB Imaging Tool version 3.4.0 to install the ThinOS 9.1 Merlin image on your thin client. If you are using ThinOS v8.5 or earlier versions, you must first upgrade your device to ThinOS v8.6 before installing ThinOS 9.1. ThinOS 9.1 displays a change group notification message on the device after you change the group in Wyse Management Suite.
Table 1. Firmware images (continued) Platform ThinOS firmware image for upgrading from 8.6 to 9.1 ThinOS PCoIP image for upgrading from 8.6 to 9.1 ThinOS firmware image for upgrading from 9.x to later versions Wyse 5470 All-in-One Thin Client X10_wnos PX10_wnos DTOS_version.pkg Table 2. Package information Name Description Package installation Citrix_Workspace_App The package supports Citrix Workspace app with RTME client integrated.
Register ThinOS devices to Wyse Management Suite NOTE: DHCP and DNS configurations for Wyse Management Suite work only after you reset the device to factory default settings. Register ThinOS devices using Wyse Device Agent Steps 1. From the desktop menu of the thin client, go to System Setup > Central Configuration. The Central Configuration window is displayed. 2. Enter the Group Registration Key as configured by your administrator for the wanted group. 3.
Table 3. Registering device by using DHCP option tags (continued) Option Tag Description Description—Certificate Authority Validation Enter True, if you have imported the SSL certificates from a well-known authority for https communication between the client and Wyse Management Suite server. Enter False, if you have not imported the SSL certificates from a well-known authority for https communication between the client and Wyse Management Suite server.
Table 5. ThinOS 9.1.1131 image (continued) Scenario ThinOS image title ThinOS 8.6 to ThinOS 9.1.1131 Base Image file for Dell Wyse 3040 Thin Clients. ThinOS 8.6 to ThinOS 9.1.1131 Base Image file for Dell Wyse 3040 Thin Clients with PCoIP. Upgrade your ThinOS 9.0 to 9.1.1131 ThinOS 9 to ThinOS 9.1.1131 Base Image file for Dell Wyse 3040, 5070, 5470 and 5470 All-in-One Thin Clients. Install the ThinOS 9.1.1131 Merlin ThinOS 9.1.1131 Merlin Image file for Dell Wyse 5070 Thin Clients.
NOTE: For more information about BIOS installation, see BIOS Installation. Add ThinOS 9.x firmware to the repository Steps 1. Log in to Wyse Management Suite. 2. In the Apps & Data tab, under OS Image Repository, click ThinOS 9.x. 3. Click Add Firmware file. The Add File screen is displayed. 4. To select a file, click Browse and go to the location where your file is located. 5. Enter the description for your file. 6. Select the check box if you want to override an existing file. 7. Click Upload.
Upgrade ThinOS 9.x to later versions using Wyse Management Suite Prerequisites ● Ensure that you have created a group in Wyse Management Suite with a group token. Use this group token to register the ThinOS 9.x devices. ● Ensure that the thin client is registered to Wyse Management Suite. Steps 1. Go to the Groups & Configs page, and select a group. 2. From the Edit Policies drop-down menu, click ThinOS 9.x. The Configuration Control | ThinOS window is displayed. 3. Click Advanced. 4.
can select the Do not show this again if you do not want to see the EULA details of the same vendor again. You must accept the license agreement of the packages individually. The package is not uploaded if you click Decline. ● If the EULA is not embedded in the package, go to step 5. 5. Click Upload. NOTE: The operator can upload the package from operator account and is visible to all the tenants. Tenants cannot delete or modify these files. Upload and push ThinOS 9.
Firmware installation using Dell Wyse USB Imaging Tool Use the Dell Wyse USB Imaging Tool version 3.4.0 to install the ThinOS 9.1 Merlin image on your thin client. For information about installation instructions, see the Dell Wyse USB Imaging Tool version 3.4.0 User's Guide. Upgrade BIOS Prerequisites ● Ensure that you have downloaded the BIOS file from Dell.com/support to your device.
7. In the Power Management section, modify the power-saving options. 8. In the POST Behavior section, enable or disable the MAC Address Pass-Through feature. This option is applicable only to the Wyse 5470 Thin Client. 9. Click Save & Publish NOTE: If the thin client does not have a BIOS admin password, you can set the password using Admin Policy Tool or Wyse Management Suite.
3 Getting started with ThinOS 9.1 This chapter helps you to quickly learn the basics and get started with your ThinOS 9.1-based thin client. End User License Agreement End User License Agreement (EULA) is added to ThinOS. EULAs must be read and accepted to continue using ThinOS. By default, Dell EULA and HID EULA are added to ThinOS. The third-party EULAs are displayed on the EULA screen depending on the ThinOS application packages that you install on the thin client.
Figure 1. Welcome screen 3. Click Dell EULA or HID EULA from the right pane to read the respective EULAs. If you have installed the ThinOS application packages, ensure that you read the respective EULAs of the third-party applications. NOTE: The EULA screen may different depending on the client installed pkgs. Figure 2. EULA screen 4. Select the Click here to accept all EULAs check box and click Accept. 5.
Figure 3. Select Your Language 6. Click . 7. On the Select Your Keyboard screen, select a keyboard layout from the list. Figure 4. Select Your Keyboard 8. Click . 9. On the Select Your Time Zone screen, select a time zone from the list to set the time zone for your thin client. The time server with IP addresses or host names is also displayed. 24 Getting started with ThinOS 9.
Figure 5. Select Your Time Zone 10. Click . 11. On the How do You Connect? screen, do either of the following: ● Local network (Ethernet)—Click this option if you have connected the thin client to an Ethernet using a wired connection. ● Wi-Fi Network—Click this option if you want to select a wireless network. From the list, select a wireless network, and click Connect. NOTE: The option to define a wireless connection is not available on thin clients without a WLAN module.
● From Wyse Management Suite—Click this option if you want to use Wyse Management Suite to manage your thin clients. To register your thin client to Wyse Management Suite, enter the group registration key and the Wyse Management Suite server URL. Select the CA validation check box if you want to enable the CA validation feature. The CA validation is required when you import certificates into your Wyse Management Suite server.
Figure 8. Connect to VDI broker . 16. Click The Done screen is displayed. Figure 9. Done The device exists from the First Boot Wizard mode, and the ThinOS desktop is displayed. Configure account privileges for ThinOS Account privilege is used to control the user permission to access Admin Policy Tool and System Menu options. You can change a user privilege to High, Customize, or None from the Admin Policy Tool or the Wyse Management Suite console.
Configure account privileges using Admin Policy Tool About this task This section describes how to configure account privileges using Admin Policy Tool. Steps 1. From the desktop menu, click System Setup > Admin Policy Tool. The Configuration Control || ThinOS window is displayed. 2. Click the Standard tab or the Advanced tab. 3. Expand Privacy & Security. 4. Click Account Privileges. 5. Click the Enable Admin Mode slider switch if you want to enable the Administrator mode.
After the thin client restarts, the Login dialog box is displayed. 4. Enter the username, password, and domain. After authentication is successful, your desktop is presented with your assigned connection that is defined by the broker server. Connecting a display Depending on your thin client model, connections to displays can be made using VGA (analog) port, DisplayPort (digital), Mini DisplayPort, USB Type-C port, HDMI, and the proper Dell monitor cables/splitters/adapters.
Modern interactive desktop features The modern desktop mode (formerly zero desktop) has a Dell default background with the floating toolbar or floatbar on the screen. NOTE: Citrix Workspace mode is not supported on the modern desktop. Table 7.
Table 8. Toolbar icons (continued) Icon Description Shutdown Click the Shutdown Terminal con to use the Shutdown options available on the thin client. Wireless network Displays the wireless connection mode. Clicking the wireless icon displays the SSID scan list. You can directly connect to your preferred WiFi. Wired network Displays the wired connected mode. Volume or Sound Click this icon to increase or decrease the speaker volume or mute the speaker.
Figure 11. Classic desktop Use the following guidelines: ● Icons representing available server connections and published applications are displayed on the desktop. If you pause the mouse pointer over an icon, the information about the connection is displayed. Right-click an icon to open the Connection Settings dialog box that displays additional information about the connection. The number of icons that can be displayed on the desktop depends on the desktop resolution and administrator configuration.
Figure 12. Taskbar 1. 2. 3. 4. 5. 6. 7. 8. 9. System Information Volume or Sound Battery Wireless network Wired network Smart card self-service Citrix PNA menu Date and time Show desktop The following table lists the taskbar elements: Table 10. Taskbar - System tray elements Element Description Date and time Displays the date and time. Battery Displays the battery percentage. This option is applicable for Wyse 5470 Thin Client. Show desktop Click this icon to hide or restore VDI sessions.
Taskbar icons are added for all ThinOS windows except the login window and the Admin Policy Tool window. You can use the taskbar icons to minimize and restore the windows. Table 11.
Using the desktop menu About this task This section describes how to use the desktop menu on your thin client. Steps 1. Click or click anywhere on your desktop. The desktop menu is displayed. 2. On the desktop menu, use the following options to configure the thin client: ● System Setup—Provides access to the following local system setup dialog boxes: ○ Network Setup—Allows selection of DHCP or manual entry of network settings, and server locations.
● Click Delete to remove the created connection from the list. Configuring thin client settings and connection broker settings You can either use the ThinOS local UI or the Wyse Management Suite to do the following: ● Set up your thin client hardware, look and feel, and system settings ○ For configuring these settings using ThinOS local UI, see Configuring connectivity and Configure the thin client local settings. ○ For configuring these settings using Wyse Management Suite, see Edit the ThinOS 9.
Table 12.
Table 12. Admin Policy Tool (continued) Feature Subfeature Restart required Peripheral Management Device Headset Settings Yes, you must restart the client for all changes to take effect. Peripheral Management CCID Yes, you must restart the client for all changes to take effect.
Locking the thin client ThinOS enables you to lock your thin client so that credentials are required to unlock and use the thin client again. Shut down and restart About this task This section describes how to use the Shutdown dialog box to either shut down the system or restart the system. Steps 1. From the desktop menu, click Shutdown. The shutdown dialog box is displayed. 2. Click any of the following options: ● Shutdown the system—Enables you to shut down the system.
NOTE: Ctrl+Alt+Delete is disabled by default and you can enable it from the Wyse Management Suite server. If enabled, Ctrl+Alt+Delete locks terminal and triggers the lock window. View the system information Use the System Information dialog box to view the system information. You can either click System Information from the desktop menu or the System Information icon on the taskbar.
Sleep mode The sleep mode enables the power-saving state and quickly resumes full power operations without loss of data. The sleep mode feature is supported on the following platforms: ● Wyse 5070 Thin Client ● Wyse 5470 Thin Client ● Wyse 5470 All-in-One Thin Client The USB interface is closed in sleep mode. All USB devices such as USB drives, Bluetooth, audio devices, video devices, and camera are reinitialized after resuming from sleep mode.
123.123.123.022, ACC&Right($FIP,3) results in a value of ACC022. Using system variables makes it easier to manage groups of devices that require a unique terminal name or default user. The following are the ThinOS system variables: Table 14. ThinOS system variables Variable Description $IP IP address $IPOCT4 The fourth octet of IP Address. For example, if IP is 10.151.120.15, the value is 15.
4 Configuring the global connection settings About this task This section describes how to use the Global Connection Settings dialog box to configure the connection settings for ICA, Horizon, RDP and PCoIP. Steps 1. Configure the Broker agent connection on ThinOS. See, Configure the Broker Setup. 2. On the desktop taskbar, click (Connection Manager) and then click Global Connection Settings. The Global Connection Settings dialog box is displayed. 3.
● Allow H.264 decoding—Select the check box if you want to enable the H.264 decoding in Horizon Client. Enabling this option improves the performance of high-end applications. H.264 is disabled by default. ● Allow High Color Accuracy—Select the check box if you want to allow Horizon Client to use a superior color fidelity when H.264 decoding is enabled. ● Allow Blast to use the system proxy settings—Select the check box if you want Blast connections to use a proxy server. 6.
5 Configuring connectivity This chapter helps you understand various configuration settings for a secure connection. To configure the settings on the classic desktop, click System Setup from the desktop menu, and use the configuration tabs. Configuring the network settings Use the network options to configure the network connection based on your requirement. Configure the general settings About this task This section describes how to configure the general network settings on your thin client. Steps 1.
NOTE: The limitation of the dual network is that the device cannot automatically determine which connection to use among the two. b. Use Static Name Servers—By default, this check box is not selected, and the thin client fetches the server IP address from DHCP. To manually assign the static IP addresses, select the Use Static Name Servers check box and do the following: NOTE: If name servers are changed, the details are displayed in event logs.
Figure 14. Options tab a. Interpret DHCP Option IDs—Enter the supported DHCP options. Each value can only be used one time. Table 15. DHCP option tags Option Description Additional information 165 Wyse Management Suite server Optional string. Specifies the IP address of the Wyse Management Suite server. 166 Wyse Management Suite MQTT server Optional string. Specifies the IP address of the MQTT server. 167 Wyse Management Suite CA Validation Optional string. Specifies the CA validation.
Table 15. DHCP option tags (continued) Option Description Additional information server or the MQTT server is null, the Wyse Management Suite agent sets the values to the default server values. b. Interpret DHCP Vendor-Specific Info—Select this check box for automatic interpretation of the vendor information. c. DHCP Vendor ID—Displays the DHCP vendor ID when the Dynamically allocated over DHCP/BOOTP option is selected. d.
NOTE: For Wyse 5070 Thin Client without SFP or RJ45 module, the ENET0 option is selected by default. For Wyse 5070 thin client with SFP or RJ45 module and Wyse 5470 Thin Client that is connected to Dell WD19 docking station, select either ENET0 or ENET1 based on your network preference. b. From the Ethernet Speed drop-down list, select a value for the Ethernet speed. The default value is Auto-Detect.
○ From the Authenticate drop-down list, select either user authentication or machine authentication that is based on your choice. The following kinds of server names are supported—all examples are based on Cert Common name company.dell.com: ￭ ￭ ￭ *.dell.com *dell.com *.com NOTE: Using only the FQDN, that is, company.dell.com does not work. Use one of the options, for example servername.dell.com (*.dell.com is the most common option as multiple authentication servers may exist).
Figure 16. WLAN tab ● Add—Use this option to add and configure a new SSID connection. You can configure the SSID connection from the available security type options. After you configure the SSID connection, the added SSID connection is listed on the WLAN tab. ● Remove—Use this option to remove an SSID connection from the list. ● Scan—Use this option to allow your thin client to scan and identify a wireless network connection. ● Connect—Use this option to join a wireless network from the list.
Enable captive portal detection for wireless When you attempt to connect to WiFi, a web page is displayed to verify authenticated users before Internet access is granted. Steps 1. Open the Admin Policy Tool on ThinOS or go to the ThinOS 9.x policy settings on Wyse Management Suite. 2. Click the Advanced tab and expand Network Configuration. 3. Click Wireless. 4. On the Global Wireless Settings page, click the Enable Captive Portal Detection toggle switch.
Figure 17. Proxy tab Use the following guidelines: a. Configure the proxy servers based on your requirement. ● Enter the HTTP proxy port number or HTTPS proxy port number, username, and password in the respective fields. However, credential pass through ($UN/$PW) is not recommended because it starts before user sign on. Wyse Management Suite uses both HTTP/HTTPS and MQTT protocols to communicate with the WMS/MQTT server.
Table 17.
Steps 1. From the desktop menu, click System Setup > Remote Connections. The Remote Connections dialog box is displayed. 2. On the Broker Setup tab, select a VDI broker from the Broker type drop-down list, and configure the broker settings. 3. Click OK to save your settings. Configure the General Options About this task This section describes how to configure the general options on your thin client. Steps 1. From the desktop menu, click System Setup > Remote Connections.
Configuring the central configurations Use the Central Configuration dialog box to configure the Wyse Management Suite server settings. Configure the Wyse Management Suite settings About this task This section describes how to configure the Wyse Management Suite settings on your thin client. Steps 1. From the desktop menu, click System Setup > Central Configuration. The Central Configuration dialog box is displayed. 2. On the WMS tab, do the following: Figure 19. Wyse Management Suite a.
d. Select the Enable WMS Advanced Settings check box to enter the Wyse Management Suite server details and to enable the CA validation. By default, the MQTT server option is disabled. The MQTT server value is populated after the ThinOS device is checked in to the Wyse Management Suite. NOTE: If you enable the external secure MQTT option on the Wyse Management Suite server, the thin client automatically fetches the MQTT server .
Figure 20. VPN Manager a. Enter the name of the session in the Name field. This option is mandatory. The maximum character limit is 21 characters. b. Enter the IP address of the VPN server in the Server field. This option is mandatory and is defined as either an IP address or a hostname. The maximum character limit is 63 characters. c. Enter the login username in the Username field. This option is mandatory. The maximum character limit is 31 characters. d. Enter the password in the Password field.
● Select Timeout Type—Select the action to be performed after the VNC shadowing request times out. You can select Accept or Reject. ● Timeout—Specify a time between 0 to 600 seconds for the VNC shadowing request to timeout, if there is no user interaction. d. e. f. g. Click the Enable View Only button to activate the view only mode. Click the Active Visible button to notify the user that the device is being shadowed.
6 Configuring connection brokers In a Virtual Desktop Infrastructure (VDI) environment, a connection broker is a software entity that enables you to connect to an available desktop. The connection broker facilitates the VDI environment to securely and efficiently manage the centrally hosted desktop environments. Configuring Citrix Citrix offers a complete virtualization solution, where all applications and resources are deployed on a centralized server, and published to remote devices. In ThinOS 9.
Figure 21. Broker Setup a. Select the Workspace Mode check box if you want to enable the Citrix Workspace based layout of published applications and desktops. b. In the Broker Server field, enter the IP address or hostname or FQDN of the Citrix server. You can enter the Citrix NetScaler Gateway URL, StoreFront URL, or the web interface URL. c. In the Auto Connect List field, enter the name of the connection that is displayed in Connection Manager to automatically connect after you log in the Citrix broker.
Classic mode vs Workspace mode This section summarizes the differences between classic mode and workspace mode. Figure 22. Classic mode Figure 23.
Table 19. Classic mode vs Workspace mode Item Classic mode Workspace mode How to enable By default, the ThinOS loads the classic mode if you do not select the Workspace mode check box during Citrix broker setup. Select the Workspace mode check box during Citrix broker setup. Desktop elements Displays the ThinOS full taskbar and the classic desktop. Displays the ThinOS full taskbar and the workspace desktop.
Citrix ADC ThinOS supports Citrix Application Delivery Controller (ADC), formerly known as Citrix NetScaler.
Configuring Citrix ADC using DUO About this task To configure the Citrix ADC (formerly NetScaler) using DUO authentication, do the following: Steps 1. Go to NetScaler > NetScaler Gateway > Virtual Servers, and click Edit. 2. Ensure that the primary authentication is RADIUS that is configured with the DUO authentication RADIUS. 3. Ensure that the secondary authentication is none. 4. Enter the broker address in the ThinOS user interface.
Figure 24. Unable to lock account For more information about Native OTP support for authentication, see the NetScaler Gateway12.0 documentation at docs.citrix.com. Log in to Citrix ADC using the passcode Prerequisites ● Ensure that you are using Citrix ADC (formerly NetScaler) 12.0 build 51.24 and later versions. ● Ensure that you have registered your device with Citrix ADC.
Figure 25. Unable to lock account Enable Azure Multiple Factor Authentication for Citrix ADC Single Sign-on with SAML Authentication Prerequisites ● ● ● ● ● Create an Azure AD user in Azure Active Directory. Enable the Multiple Factor Authentication (MFA) for the user. Add the user to Azure AD Citrix ADC (formerly NetScaler) Enterprise application users and groups. Ensure that the shadow account of the user exists in local domain users group. Ensure that the SAML authentication policy is enabled.
2. Add the user to Azure AD Citrix ADC (formerly NetScaler) Enterprise application users and groups. 3. Ensure that the shadow account of the user exists in local domain users group. 4. Ensure that Self-Service Password Reset Enabled option is selected in Azure AD for the user. About this task This section describes how to enable Azure AD Self-Service Password Reset function for Citrix ADC Single Sign-on with SAML authentication. Steps 1.
Getting started with Citrix Cloud About this task This section describes how to log in to the Citrix Cloud server on your thin client. Steps 1. From the desktop menu, click System Setup > Remote Connections. The Remote Connections dialog box is displayed. 2. On the Broker Setup tab, select Citrix Virtual Apps and Desktops from the Broker Type drop-down list, and do the following: a.
i. In the Host offering this service field, enter the FQDN and the port for the StoreFront/AppController server or Access Gateway appliance. NOTE: You cannot use the same FQDN for both StoreFront and the Access Gateway virtual servers. 2. On ThinOS, go to System Setup > Remote Connections. The Remote Connections dialog box is displayed. 3. On the Broker Setup dialog box, select Citrix Virtual Apps and Desktops from the Broker Type drop-down list. 4.
HDX adaptive display V2 is used for video decoding on the ThinOS client. Thinwire uses JPEG (lossy) for complex or photographic imagery and RLE (lossless) for text imagery. The rest of the screen is decomposed by Thinwire. For more information about the Use video codec for compression policy, see the Graphics Policy Settings article at docs.citrix.com.
Windows Media Redirection Windows Media Redirection enables the audio and video to be rendered on the user device instead of running on the server side. Using the Windows Media Redirection feature, you can optimize the performance of Windows Media player on virtual Windows desktops. For more information about Windows Media Redirection, see the Citrix documentation at docs.citrix.com.
Steps 1. On the ThinOS desktop, click Connection Manager. 2. Click Global Connection Settings. 3. Select the Enable HDX/MMR check box for the ICA connection. 4. Go to System Setup > Remote Connections, select Citrix Virtual Apps and Desktops from the Broker type drop-down list. 5. On the Broker Setup tab, enter the Citrix server in the Broker Server field, and click OK. 6. Launch an ICA desktop. 7. Download and install the QUMU Media Player on the remote desktop.
Unlock an account After you register the security questions, do the following to unlock your account: 1. Choose a task (Unlock account) in the Account Self-Service window. 2. Enter the username. The Unlock Account dialog box is displayed. 3. Enter the registered answers to the security questions. If the provided answers match the registered answers, then the Unlock Account dialog box is displayed. 4. Click OK to successfully unlock your account.
Enable UDP audio in a Citrix session Citrix recommends that you use audio over User Datagram Protocol (UDP) in low-bandwidth network connections for better audio quality. ThinOS does not support UDP audio over Citrix ADC (formerly NetScaler) due to Linux Citrix Workspace app limitation. Steps 1. Start the Admin Policy Tool on your ThinOS 9.0-based device or open the ThinOS 9.x Policy settings in Wyse Management Suite.
Table 20. Citrix Workspace app keyboard layout configuration for VDA users on ThinOS VDA user scenario Wyse Management Suite settings VDA settings Summary The client keyboard is synchronized to VDA, and the keyboard layout is not switched in the VDA desktop or application. Configure the Set the VDA required keyboard policy for Dynamic layout for local client synchronization. users and remote VDA users. Keyboard output follows the client Linux keyboard layout and not the Windows layout.
Table 21. Language keyboard layout settings (continued) ThinOS keyboard layout Windows layout Wyse Management Suite settings Citrix Recommended settings Workspace app Linux dynamic synchronization French (France) Keyboard layout partially matches with the Windows layout. Supported Enabled French (Microsoft) Keyboard layout fully matches with the Windows layout. Not supported; will be supported in future release. Enabled Belgian Keyboard layout does not match with the Windows layout.
Table 22. Citrix Workspace app Linux keyboard layout settings—Client and VDA (continued) Mode Client-side settings Server or VDA-side settings Additional information and Windows 10 operating system. The setting is disabled by default on Windows Server 2016 and Windows Server 2019. To enable Unicode Keyboard Layout Mapping for Windows VDA, add the following registry keys: ● HKEY_LOCAL_MACHINE\SOFTWA RE\Citrix\CtxKlMap\Enable KlMap value= DWORD 1 ● HKEY_LOCAL_MACHINE\SOFTWA RE\Citrix\CtxKlMap\Disabl eWind
Table 22. Citrix Workspace app Linux keyboard layout settings—Client and VDA (continued) Mode Client-side settings Server or VDA-side settings Additional information [WFClient] keyboardlayout=(User Profile) Table 23.
Table 23. ThinOS dynamic synchronization support (continued) Keyboard Synchronization French (Canadian Legacy) Supported French (Canadian) Not supported French (France) Supported French (France Microsoft) Not supported French (Switzerland) Supported German (Switzerland) Supported German Supported Greek Supported Hungarian Supported Icelandic Supported Italian (Switzerland) Not supported Italian Supported Japanese (OADG109A) Supported Japanese (KWD) Supported.
Enable keyboard layout mode Steps 1. On the ThinOS client, open Admin Policy Tool or go to the ThinOS 9.x policy settings on Wyse Management Suite. 2. On the Advanced tab, expand Session Settings, and click Citrix Session Settings. 3. In the Basic Settings section, select one of the following options from the Keyboard Layout Mode drop-down list. ● Server Default—ThinOS allows VDA users to use the VDA-side default keyboard when logging in or reconnecting to VDA. This is the default setting in ThinOS.
Table 24.
Configure the Citrix session properties About this task This section describes how to configure the Citrix HDX connections on your thin client. Steps 1. On the taskbar, click Connection Manager. The Connection Manager dialog box is displayed. 2. Select a Citrix connection from the list, and click Properties. 3.
Table 25.
Steps 1. Connect a printer to the ThinOS client. 2. On the ThinOS desktop menu, do the following: a. b. c. d. Open the Connection Manager window. Click Global Connection Settings. Go to the Session tab and select the Exclude printer devices check box. Click OK. 3. From the desktop menu, click System Setup > Printer Setup. The Printer Setup dialog box is displayed. 4. Enter the name of the printer in the Printer Name box. 5. Enter any string of the Printer identification in the Printer Identification box.
2. Click the Packages tab. Figure 26. Packages tab 3. Select Citrix Workspace App, and click Advanced.
Figure 27. Package Advanced window The Package Advanced window is displayed. 4. Click Configure Log. The Citrix Log Preferences window is displayed.
Figure 28. Citrix Log Preferences window 5. Right-click the classes that you require, and select Verbose. 6. Select the check boxes to select specific log items. Click Set All Enabled to select all the check boxes. 7. Enter the file name and the output file pat in the Log Output Path field. The default path is var/log/ICAClient.log. Dell Technologies recommends using the default log output path. 8. Click Apply Changes and close the Citrix Log Preferences window. 9.
Figure 29. Packages tab 12. Select Citrix Workspace App, and click Advanced.
Figure 30. Package Advanced window The Package Advanced window is displayed. 13. Connect a USB drive that is formatted with the FAT32 file allocation. 14. Enter a log password of your choice in the Set zip file password field. 15. Click Export Log. The logs are now exported successfully to the USB drive. Next steps 1. Reopen the Citrix Log Preferences window by performing the following steps: a. From the desktop menu, click System Tools. b. Click the Packages tab. c.
Configure multifarm In ThinOS 9.1, multifarm works with only a Citrix Broker agent. You cannot use multifarm with other connection brokers. Steps 1. Log in to the Wyse Management Suite server. 2. Go to the Groups & Configs page, and select your preferred group. 3. Click Edit Policies > ThinOS 9.x. 4. Click the Advanced tab. 5. Expand Broker Settings, and click Global Broker Settings. 6. Enable MultiFarm. 7. Click Save & Publish. 8. Check in the thin client to WMS group, and restart the thin client. 9.
Configure the VMware broker connection About this task This section describes how to configure the VMware broker setup on your thin client. Steps 1. From the desktop menu, click System Setup, and then click Remote Connections. The Remote Connections dialog box is displayed. 2. In the Broker Setup tab, select VMware Horizon from the Select Broker Type drop-down list, and do the following: ● Broker Server—Enter the IP address/Hostname/FQDN of the broker server.
To validate the VMware Real Time Audio-Video, do the following: Steps 1. Connect to the VMware PCoIP or Blast desktop with the audio and video devices. NOTE: USB redirection must be disabled for the audio and video devices. 2. Verify the audio playback of the system using the VMware virtual audio. 3. Verify the system audio recording using the VMware virtual microphone. 4. Verify the audio settings in VoIP application. 5. Verify the video settings in VoIP application using the VMware virtual webcam. 6.
Enable Session Collaboration Session Collaboration redirection feature enables you to invite other users to join your remote desktop session. The session collaboration feature is applicable only for Blast sessions. NOTE: You cannot accept the invitation and join the remote desktop session of other users. This is a limitation on ThinOS 9.1. By default, the session collaboration feature is enabled in the VMware session. To invite a user to join your desktop session, do the following: 1.
Configure Workspace ONE Mode VMware Workspace ONE mode enables you to connect to remote desktops and applications through the Workspace ONE Web Portal. As a Horizon administrator, you can enable the Workspace ONE mode on a Connection Server instance. Horizon Client users are redirected to a Workspace ONE server to launch their remote desktops and applications. Steps 1. Open the VMware Connection Server console. 2. Go to Settings > Servers > Connection Server and click the Authentication tab. 3.
5. Click OK. Configure Microsoft Azure Multifactor authentication with VMware Unified Access Gateway Prerequisites Configure the Unified Access Gateway (UAG) settings and Azure Multifactor authentication settings on the server side. For more information about configuring the server-side settings, see the Microsoft Azure MFA with VMware UAG documentation at docs.vmware.com. Steps 1. Start the ThinOS client. 2. From the desktop menu, click System Setup > Remote Connections.
b. Click OK to save the configuration. 8. Connect to a VMware Blast session and go to Control Panel > Devices and Printers. The printer that is configured locally in ThinOS is mapped to the session. The mapped printer’s driver is VMWARE POSTSCRIPT Driver and the port is VMWPORT. The VMware Integrated Printing feature allows the ThinOS local printer to be mapped to the VMware Blast session without installing the printer driver in the session.
Table 27. Tablet Orientation settings User scenario ThinOS settings Recommended PCoIP session settings Right-handed tablet orientation. ● Click the PCoIP icon and select the PCoIP a. In a PCoIP session, open the Wacom tablet properties window. session. b. Click the Mapping tab. ● Clear the Tablet Orientation LeftHanded selection. c. From the Orientation drop-down list, select ExpressKeys Left. Left-handed tablet orientation. ● Click the PCoIP icon and select the PCoIP a.
NOTE: The SDK in ThinOS does not function similar to Teradici zero client firmware. For example, the SDK in ThinOS does not support USB redirection and Relative Mouse features with the host card connection. This feature is mainly for workstation users working on the server remotely. Steps 1. On ThinOS desktop, go to Connect Manager. 2. Click New, and then click PCoIP. 3. In the Connection Settings (PCoIP) dialog box, do the following: a. Enter the description for the PCoIP connection. b.
3. In the Remote Connections dialog box, click the General Options tab, and specify the Azure cloud user credentials. 4. Click OK to save your changes. 5. Restart the thin client. 6. In the login window, click Enter. 7. Enter the Azure cloud user password. 8. Click Sign in. The desktops and applications on Azure cloud are displayed.
Figure 31. Windows Virtual Desktop drop-down 3. Select the Enable Windows Virtual Desktop check box. 4. Click OK and restart the thin client. 5. Enter the username of the on-premises Active Directory, and click Next on the Windows Virtual Desktop login window. 6. Enter the credentials of the on-premises Active Directory, and click OK on the ADFS window. 7. Launch the Windows Virtual Desktop session.
Configuring Microsoft Remote Desktop Services Microsoft Remote Desktop application allows you to access and manage the data and resources of a remote device using an internet connection. ThinOS supports RC4_HMAC_MD5 for RDP connections to compliment with AES128_HMAC_SHA1 or AES256_HMAC_SHA1. About this task This section describes how to configure the Microsoft Remote Desktop Services on your thin client. Steps 1. From the desktop menu, click System Setup, and then click Remote Connections.
2. In the Advanced tab, expand Broker Settings, and click Microsoft Remote Desktop Settings. 3. In the RDSH collections field, specify the collections that are configured on the RDS Broker agent. Only the applications and desktops within the specified collections are displayed. If the field is empty, all the applications and desktops are displayed. 4. Click Save & Publish. Add a Remote Desktop Protocol connection Steps 1. On the ThinOS client, open Admin Policy Tool or go to the ThinOS 9.
Figure 32.
NOTE: For the auto connect feature to function, the Save local connections option in Advanced > Session Settings > Global Session Settings must be enabled. 5. Click Save & Publish. Log in to RDP session using Remote Desktop Gateway Steps 1. Go to Add Connection > Add RDP connection > Logon from the VDI menu.
Figure 33.
2. Select the Use RD Gateway check box. 3. Specify the credentials for Remote Desktop Gateway. 4. Click OK to save the settings. Configuring the Amazon WorkSpaces broker connection Amazon WorkSpace (AWS) is a cloud-based virtual desktop that allows you to access remote applications with ease. Amazon WorkSpaces connection is applicable only for PCoIP clients. Steps 1. From the desktop menu, click System Setup, and then click Remote Connections. The Remote Connections dialog box is displayed. 2.
Configure the Teradici Cloud Access broker connection Teradici technology enables you to securely access the remote applications using Teradici Cloud Access. You can manage and optimize your ThinOS PCoIP-enabled clients. Steps 1. From the desktop menu, click System Setup, and then click Remote Connections. The Remote Connections dialog box is displayed. 2. On the Broker Setup tab, from the Select Broker Type drop-down list, select Teradici Cloud Access, and configure the following options: Figure 34.
● Auto Connect List—Enter the name of desktops that you want to start automatically after logging in to the respective Broker agent. Use a semicolon to separate each desktop name. NOTE: Field values are case-sensitive. 3. Select Security Mode. ● Full—Fails to connect to servers with unverified TLS/SSL certificates. ● Warning—A warning message is displayed when you try to connect to servers with unverified certificates. ● Low—Allows the connection without any verification. 4. Click OK to save your settings.
○ For Bloomberg keyboard that is connected with a single USB cable, add one row and enter the device ID. For example, enter 0x11889545010100. This configuration means that the interface 010100 is redirected into session and other interfaces are not redirected. ○ For Bloomberg keyboard that is connected with dual USB cables, add one row and enter the device ID. For example, enter 0x11889545030001.
Bloomberg keyboard limitations ● The Bloomberg keyboard is only supported under redirection. ● Hot plugging the Bloomberg keyboard is not supported. Configure the keyboard before logging in to the Broker agent and launching the session. ● Disconnecting the Bloomberg keyboard cables when it is redirected into session may cause the session to close or the system to randomly reboot. Configure the Select Group feature to log in to different brokers Steps 1. Log in to the Wyse Management Suite server. 2.
7 Unified Communications optimization with ThinOS Unified Communications and Collaboration solution allows real-time video conferencing, instant messaging, and team collaboration that enables you to work together more effectively. ThinOS supports the following Unified Communications optimization in a VDI environment: ● ● ● ● ● ● Skype for Business Cisco Jabber Cisco Webex Teams Cisco Webex Meetings—Only Citrix VDI is supported. Microsoft Teams—Only Citrix VDI is supported.
Table 30. Supported environment (continued) Component Supported platform/supported versions ● Skype for Business Online—Microsoft Office 365 hosted Skype for Business Server ● Lync 2013 Server Client component at the endpoint Citrix package for RTME Install the Citrix Workspace app package on ThinOS You must install the Citrix Workspace app package to use Skype for Business application on ThinOS. To install the Citrix Workspace app package using Wyse Management Suite, see Upload and push ThinOS 9.
● ● ● ● ● ● ● ● ○ Use the headset button to answer the call. Transfer call, mute, or hold call. Control the video—Pause, end, or Picture-in-Picture (PiP). Set the volume levels. Use the dial pad. Make a conference call. Help and Hang up. Minimize, maximize, or close the call video window. Perform a network health check.
VMware Horizon Virtualization Pack for Skype for Business The VMware Horizon Virtualization Pack for Skype for Business enables you to use Skype for Business in a VMware Horizon desktop. Microsoft Skype for Business is a unified communications platform that delivers an optimized user experience for online messaging, audio, and video calling and so on. ThinOS supports VMware Horizon Virtualization Pack for Skype for Business in a Blast session only. PCoIP and RDP protocols do not support this feature.
Optimized mode and Fallback mode In Optimized mode, the Skype for Business delivers an optimal performance. In Fallback mode, the Skype For Business calls are not optimized. On the lower right of the virtual desktop, the tooltip of the Virtualization Pack icon indicates the VMware Horizon Virtualization Pack for Skype for Business mode. The following screenshot displays the Virtualization pack for Skype for Business in Optimized mode: Figure 35.
Cisco Jabber Softphone for VDI Cisco Jabber Softphone for VDI (JVDI) is the Unified Communications solution offered by Cisco for virtual deployments. It supports audio conferencing, and instant messaging on the Hosted Virtual Desktops (HVD). The Cisco Jabber Softphone for VDI software offloads the audio processing from the virtual desktop servers to the thin client. All audio and video signals are routed directly between the endpoints without entering the HVD.
DNS server and domain value to the DHCP server by providing the IP address information to the ThinOS client. For issues related to Cisco Unified Communications, contact Cisco support. 5. Log in to the Citrix virtual desktop, and sign in to Cisco Jabber using your user credentials. When you log in for the first time, do the following: a. On the Cisco Jabber interface, click Advanced Settings. b. Select your account type as Cisco Communications Manager 9 or later. c. Enter the login server address.
The available devices are listed. 2. Click a device to make it active. Verify the Cisco Jabber connection status About this task This section describes how to verify the Cisco Jabber connection status on your thin client. Steps 1. Install the correct connector on the remote desktop. 2. Install the correct package on the ThinOS device. 3. Connect any audio or video devices. 4. Connect to a VDI desktop, and start the Cisco Jabber application. 5.
Table 34. Supported environment (continued) Component Supported platforms/supported versions Cisco Webex Teams Plugin on the thin client WebexTeams.pkg Install the Cisco Webex Teams package on ThinOS You must install the Webex Teams package on ThinOS to use Cisco Webex Teams for VDI. To install the Webex Teams package using Wyse Management Suite or Admin Policy Tool, see Upload and push ThinOS 9.1 application packages.
Table 35. Cisco Webex Teams optimization on Citrix Workspace app feature matrix (continued) Scenarios ThinOS 9.
Table 36. Cisco Webex Teams optimization on VMware feature matrix (continued) Scenarios ThinOS 9.1 Camera—Preview camera Supported—The camera does not display any image during a video call. This is a known issue.
Table 37. Supported environment (continued) Component Supported environment ● Wyse 5070 Thin Client ● Wyse 3040 Thin Client Connection Broker agent for the hosted virtual desktops Citrix Virtual Desktops Cisco Webex Meetings Virtual Desktop app on the hosted virtual desktop 41.
Table 38. Cisco Webex Meetings optimization feature matrix (continued) Scenarios ThinOS 9.
Steps 1. Connect to a virtual desktop session on ThinOS. 2. Start the Cisco Webex Meetings virtual desktop application. 3. In the Cisco Webex Meetings window, check if Cisco Webex Meetings - VDI is displayed on the upper-left corner of the screen.
2. On the virtual desktop, install the Zoom VDI Client. Double-click the file and follow the installation wizard steps. 3. Install the following ThinOS packages on the ThinOS client: ● If you want to use Zoom with Citrix virtual desktops, install the following packages: ○ Citrix Workspace app package ○ Zoom_Citrix package ● If you want to use Zoom with VMware Horizon published desktops, install the following packages: ○ VMware Horizon package ○ Zoom_VMware package 4.
Table 40. Zoom optimization feature matrix (continued) Scenario ThinOS 9.
Table 41.
● Video call and share screen features are recommended on Wyse 5070 Thin Clients, 5470 Thin Clients, and Wyse 5470 All-in-One Thin Clients with known issues. ○ The audio gets distorted during a meeting when you share screen from thin client to a laptop or desktop that uses native Microsoft Teams. There is no workaround right now and the issue is being worked on.
8 Configuring third-party authentication settings ThinOS supports the following third-party authentication types: ● Imprivata—ThinOS supports Imprivata on Citrix, VMware, and Microsoft VDI solutions in both Imprivata ProveID Embedded and ProveID Webapi modes.
● ● ● ● ● ● ● ● ● ● ● ● ● ● ● Proximity card reader redirection Guided Question and Answer login Authenticate w/Password Authenticate w/Password + Password Change Authenticate w/Password + Password Change | New Password is Invalid Authenticate w/Proximity Card + Password Authenticate w/Proximity Card + Pin Authenticate w/Proximity Card + Pin | Pin not enrolled Authenticate w/Proximity Card Alone | Retrieve Password Retrieve User Identity Password Reset User Identity Password Update User Identity Password E
Steps 1. To configure the general configuration object, do the following: a. On the Imprivata server, click Computer policy, and then click General tab. b. Select the check box to enable users to shut down and restart the device from the lock screen. ● Shutdown Allow ○ Select the check box to enable the feature. If enabled, the shutdown and restart icons are displayed in the ThinOS login and locked windows. ○ Clear the check box to disable the feature.
The SSPR configuration object controls the Self-Service Password Reset behavior for a user. The enabled attribute specifies whether the user is allowed to reset their password as part of emergency access. The mandatory attribute specifies whether the user must reset their password as part of emergency access. 4. To configure the RFIDeas configuration object, select the appropriate options on the screen. The RFIDeas configuration object controls the behavior of the RFIDeas readers. 5.
● Imprivata v4.9 or later appliance version is needed that supports the WebAPI v5 and later versions. ● Fingerprint identification license is required. ● Fingerprint reader device is required. ET710 (PID 147e VID 2016) and ET700 (PID 147e VID 3001) are the supported devices. Supported user scenarios ● Signing in or unlocking the ThinOS devices using the Fingerprint authentication. ○ Configure the OneSign server on ThinOS, and then connect the Fingerprint reader device.
Table 42. Supported environment (continued) Component Supported environment ● PIN (as a secondary factor) ● Fingerprint biometrics Table 43.
Table 43. Imprivata ProveID Embedded feature matrix (continued) Feature Authentication/ Re-Authentication Modalities using Virtual Channel Description ThinOS PIE ThinOS PIW Question and Answer Supported Supported Proximity card Supported Supported Smart card Not applicable Not applicable Fingerprint biometrics Supported Supported Imprivata Hands Free Authentication Supported Not applicable The overall PIE configuration on ThinOS includes the following tasks: 1.
4. From the Select Authentication Type drop-down list, select Imprivata. 5. In the OneSign Server field, enter the list of host names or IP addresses with optional TCP port number, or URLs of Imprivata OneSign servers. 6. Click the Enable ProveID Embedded Mode slider switch to enable the ProveID Embedded mode on ThinOS. NOTE: VDI silent mode is added from ThinOS 9.1.2101 onwards. You can click the VDI silent mode switch to enable or disable the option.
Configure Fast User Switching on ThinOS Fast User Switching (FUS) is a feature of the Imprivata ProveID Embedded (PIE) agent that enables multiple users to securely access the shared environment. You can deploy a virtual desktop with FUS to eliminate the need for generic user log-ins. Prerequisites ● Ensure that you have configured your virtual desktop. ● Ensure that you have configured the policies on the OneSign server.
4. Click Save & Publish. Configure the Identity Automation Identity Automation authentication is an enhanced sign-on solution which uses proximity card technology to quickly and securely access a remote session. You can tap the proximity card (the same card that is used for building access or identification purposes) to log in and log out of your session. Using Identity Automation authentication, you do not need to enter the username and password each time you want access the session. Steps 1.
Enroll a proximity card with Identity Automation on ThinOS You can enroll the proximity card with Identity Automation on ThinOS. This enrollment is a one-time event for the user. After the proximity card is enrolled on one ThinOS client, you do not need to enroll your proximity card on other ThinOS clients. About this task Configure the Identity Automation authentication on ThinOS. Steps 1. Connect a proximity card reader to the ThinOS client. 2. Tap the proximity card on the reader.
If you do not return within the configurable timeout period, the remote session is disconnected from the thin client but left running on the server. You can access the session again on the same thin client or another thin client where Identity Automation authentication is enabled by tapping the proximity card.
9 Configuring the thin client local settings You can configure the local settings on the device using the System Preferences, Display, Peripherals, and Printer Setup dialog boxes. Depending on user privilege level, some dialog boxes and options may not be available for use. Configuring the system preferences Use the System Preference dialog box to select the system preferences such as screen saver, time/date, and custom information settings.
a. From the Screen Saver drop-down list, select a screensaver for your device. The default value is set to Turn Off Screen. b. In the Timer box, select the idle time after which you want the screensaver to be activated on the thin client. When the thin client is left idle for the specified idle time, the screensaver is initiated. The default value is set to 10 minutes. c. From the Locale drop-down list, select a language to be activated for the user login-experience. The default language is set to English.
Set the custom information About this task This section describes how to set the custom information on your thin client. Steps 1. From the desktop menu, click System Setup > System Preferences. The System Preferences dialog box is displayed. Figure 38. Custom information 2. Click the Custom Info tab to enter configuration strings used by the Wyse Management Suite software. The configuration strings can contain information about the location, user, administrator, and so on. 3.
Figure 39. Power And Sleep 3. To set the power and sleep options when the thin client is on battery, change the following options in When on battery: a. From the Power And Sleep drop-down list, select Power off or Sleep. b. From the Timer drop-down list, select the duration for the thin client to be idle to enter sleep mode or power off. c.
4. To set the power and sleep options when the thin client is plugged in, change the following options in Power And Sleep > When plugged in: a. From the Power And Sleep drop-down list, select Power off or Sleep. b. From the Timer drop-down list, select the duration for the thin client to be idle to enter sleep mode or power off. c.
If you clear the Mirror check box, the Span mode is enabled. Blocks that are displayed on the screen represent the number of displays connected to the thin client. Each block represents a single display screen. Figure 41. Dual display setup Every display contains a unique display order number and display configuration. You can move the blocks horizontally or vertically and construct the multidisplay layout in mixed directions.
Using the On-Screen Display (OSD) This section is applicable to Wyse 5470 All-in-One thin client. Use the On-Screen Display (OSD) buttons on the right of the device to adjust the luminance of the backlight. Minimum is 1 and maximum is 100. ● Press and hold the first button from the top to increase brightness. ● Press and hold the second button from the top to decrease brightness. ● Press the third button from the top to turn off or turn on the screen.
However, it can work after you configure the Bind Touch and Monitor settings either using Admin Policy Tool or Wyse Management Suite. Configuring the external touch screen settings for VDI sessions When you connect a touch monitor to the ThinOS client using a USB port, you must configure the settings in the Global Connection Settings window. ● Citrix session—To use a touch monitor in a Citrix session, do the following: 1. On the ThinOS client, from the desktop menu, click Connect Manager. 2.
3. Click OK to save your settings. Function key combinations The Wyse 5470 Thin Client supports the following Function (Fn) key combinations: Table 44.
3. Click OK to save your settings. Configure the touchpad settings About this task This section describes how to configure the touchpad settings on the Wyse 5470 Thin Client. Steps 1. From the desktop menu, click System Setup > Peripherals. The Peripherals dialog box is displayed. 2. Click the Touchpad tab, and do the following: a. To increase or decrease the mouse speed, move the Touchpad Speed slider either to the right or left. b.
Steps 1. From the desktop menu, click System Setup > Peripherals. The Peripherals dialog box is displayed. 2. Click the Audio tab, and do the following: a. From the Playback Devices drop-down list, select the type of the audio device. NOTE: From ThinOS 9.1.2101 onwards, HDMI/DP audio options are displayed only if a monitor that supports audio is connected. This change can be observed on Wyse 5070 Thin Client, Wyse 5470 Thin Client, and Wyse 5470 All-in-One Thin Client.
Steps 1. From the desktop menu, click System Setup > Peripherals. The Peripherals dialog box is displayed. 2. Click the Camera tab. 3. From the Device drop-down list, select a camera device that is connected to your thin client. 4. Click Preview. The camera is turned on and you can see yourself or whatever the camera is pointed at. 5. Click Stop to stop the camera preview. 6. Click OK to save your settings.
The following are the user scenarios and corresponding Bluetooth statuses that are displayed on the Bluetooth page: Table 47. User scenarios User scenario Status Device turned off Disconnected | Paired Device turned on Connected | Paired Device disconnected from ThinOS Disconnected | Not Paired 3. Select a Bluetooth device that is not connected, and click Connect. If the Bluetooth device is connected successfully, the status is displayed as Connected in the Bluetooth window.
For more information about the usage of commands, see the User's Guide at jabraxpress.jabra.com. 2. Open the Admin Policy Tool on ThinOS or go to the ThinOS 9.x policy settings on Wyse Management Suite. 3. In the Advanced tab, expand Peripheral Management, and click Device Headset Settings. 4. Click the Enable Jabra Xpress toggle switch to enable the option. 5. Browse and upload the configuration file. 6. From the drop-down list, select the uploaded configuration file. 7. Click Save & Publish. 8.
3. In the Advanced tab, expand Peripheral Management, and click Device Headset Settings. 4. Click the Enable EPOS Connect toggle switch to enable the option. 5. Browse and upload the configuration file. 6. From the drop-down list, select the uploaded configuration file. 7. Click Save & Publish. 8. Restart the thin client for changes to take effect. Next steps 1. Start the ThinOS client. 2. Connect the EPOS headset to your thin client.
● Citrix Universal Print Driver support—This method allows Citrix hosts to automatically create printer queues based on the peripheral management printers settings of the ThinOS client. The following details are used by the host print manager to automatically create the printer queues: ○ Name—Printer queue name. ○ Class—Printer class that is associated by the Citrix host registry to a printer-specific driver name. NOTE: ThinOS 8.6 supports the association of PS, PCL5, and PCL4 classes. However, ThinOS 9.
3. Click OK to save your settings. Configure the LPDs settings About this task This section describes how to configure the LPD settings on your thin client. Steps 1. From the desktop menu, click System Setup > Printer. The Printer Setup dialog box is displayed. 2. Click the LPDs tab, and do the following when printing to a non-Windows network printer: Figure 43. LPD NOTE: Be sure to check with your vendor that the printer can accept Line Printer Request print requests. a.
Configure the SMBs settings About this task This section describes how to configure the SMB settings on your thin client. Steps 1. From the desktop menu, click System Setup > Printer. The Printer Setup dialog box is displayed. 2. Click the SMBs tab, and do the following when printing to a Windows network printer: Figure 44. SMB a. Select SMB—Select the SMB port from the drop-down list. b. Printer Name—Enter the name of the printer.
Using the printer setup options About this task This section describes how to configure the printer setup options. Steps 1. From the desktop menu, click System Setup > Printer. The Printer Setup dialog box is displayed. 2. Click the Options tab, and select a printer from the Default Printer drop-down list. Figure 45. Options 3. Click OK to save your settings. Using the Help When you click the Help tab, the following message is displayed in the text box.
10 Using the system tools Use the System Tools option to view all the connected devices, installed packages, and imported certificates into the ThinOS client. About this task This section describes how to access the system tools on your thin client. Steps 1. From the desktop menu, click System Tools. The System Tools dialog box is displayed. 2. Click the Devices tab to view all the locally attached devices, including USB, on applicable platforms.
Figure 47. Certificates ● Use the Enable/Disable FIPS slide switch to enable or disable the Federal Information Processing Standard (FIPS) Publication 140-2 authentication compliance. ● From the Import From drop-down list, select USB Storage, and click Import. Browse and select the appropriate certificate that is stored in the USB drive. ● Select a certificate from the list, and click View Certificate to details such as version, validity, and serial number.
Request the certificate manually About this task To request the certificate manually, do the following: Steps 1. Go to System Tools > Certificates > Request Certificate. The Request Certificate dialog box is displayed.
Figure 48. Request Certificate 2. Enter the appropriate values in the Request Certificate dialog box, and then click the Request Certificate button. The certificate request is sent to the server, and the client receives the response from server and installs both CA certificate and client certificate. 3. Click Ok to save your changes. The CA Certificate Hash type supports MD5, SHA1, and SHA256. The request server URL can be an HTTP or HTTPS link. You can add the protocol prefix before the URL.
Request the certificate automatically using Wyse Management Suite Steps 1. Log in to Wyse Management Suite. 2. Go to Groups & Configs and select your preferred group. 3. Expand Edit Policies and click ThinOS 9.x. The Configuration Control | ThinOS window is displayed. 4. In the Advanced tab, click Privacy & Settings. 5. Click SCEP. 6. Click the Enable Auto Enrollment slider switch to enable automatic certificate enrollment using the SCEP server. 7.
11 Using Wyse Management Suite Functional areas of Wyse Management Suite console The Wyse Management Suite console is organized into the following functional areas: About this task ● The Dashboard page provides information about the current status on each functional area of the system. ● The Groups & Configs page employs a hierarchical group policy management for device configuration. Optionally, subgroups of the global group policy can be created to categorize devices according to corporate standards.
4. Select the This is a ThinOS Select group parent option to create a parent select group for ThinOS devices. This step is optional. For more information, see Create a ThinOS Select group. 5. In the Registration tab, select the Enabled check box under Group Token. 6. Enter the group token. 7. In the Administration tab, you can select the name of group administrators who are tasked with managing this group.
2. In the Editing Default Device Policy Group dialog box, edit the required group information. 3. Click Save. Create a user policy group You can create groups for the global user group policies and categorize users and devices based on their user groups. Steps 1. On the Groups & Configs page, click the Default User Policy Group option. 2. Click . 3.
Figure 49. Add a new group NOTE: If the AD group is inside an OU group in the domain, then you must select the OU group as the AD Attribute. 4. Select the name of the group administrators who are tasked with managing this group. 5. From the Available Group Admins box, select the particular group and click the right arrow to move it to the Assigned Group Admins box. To move one group from the Assigned Group Admins to Available Group Admins, do the reverse. 6. Click Save.
7. Select the Device Group Mapping option to import user groups with device mapping to control the configurations that are applied to all device groups by default. AD User groups which are imported into Wyse Management Suite can be mapped to the respective device group. By mapping the devices, they do not receive unwanted user group policies. NOTE: By default, user groups are not mapped to a device group. If you select the Default device group policy, all sub-device groups are selected.
Create and import bulk device exception file From Wyse Management Suite 3.1, you can deploy device exception configurations to multiple ThinOS 9.x devices. Steps 1. Create a bulk device exception file. To create a file, do any of the following: ● Create a group policy for a test group and then export that policy to a file. If the configuration contains passwords, they are replaced with * in the exported file. For example: { } "WMSVersion": "4.6.
}, "": { "value": } }, configurations: [] } } "configurations": { : { "": { "value": }, "": { "value": } } } } For example, { 172 "devices": { "9EPDL900051": { "parameters": { "TerminalName": { "value" : "Cubical 5 - Floor 3" }, "TerminalNameCapital": { "value": "no" } }, configurations: ["westWingExceptions"] }, "5LGDO600108": { "parameters": { "TerminalName": { "value" : "Cubical 15 - Floor 2" },
} } } }, "TimeServer": { "value": "10.10.10.10" }, "TerminalNameCapital": { "value": "yes" }, "AdminMode": { "value": "yes" }, "AdminModeUsername": { "value": "admin" }, "AdminModePassword": { "value": "password" } 2. Compress and encrypt the file. NOTE: You can use 7-zip software to compress and encrypt the file. NOTE: File size should not be more than 1 MB. 3. Go to Groups & Configs and click Import Policies. The Import Policies Wizard screen is displayed. 4. Select Bulk Device Exceptions. 5.
Steps 1. Go to the Groups & Configs page, and select a group. 2. From the Edit Policies drop-down menu, click ThinOS 9.x. The Configuration Control | ThinOS window is displayed. Figure 50. Configuration Control | ThinOS 3. Click the Advanced or Standard option. 4. Select the options that you want to configure. 5. In the respective fields, click the option that you want to configure. You can use the Global search option to find the relevant settings or parameters that are available in the Policy Settings.
To view the Device Details page of a particular device, click the device entry that is listed on the page. All the configuration parameters of the device and the group level at which each parameter is applied are displayed on the Device Details page. You can set the configuration parameter that is specific to the device. NOTE: Parameters that are configured in this section override any parameters that were configured at the groups and/or at the global level.
2. Apply the filters to find the preferred device. The preferred device list is displayed. 3. Click any of the displayed devices. The Device Details page is displayed. 4. Go to System Info > Peripherals. You can view the display setup details. Figure 51. Display parameters View the virtual NIC details From Wyse Management Suite 3.1, you can view the network adapter details of the devices running a Windows Embedded and ThinLinux operating system.
The preferred device list is displayed. 3. Click any of the displayed devices. The Device Details page is displayed. You can view the BIOS details in the BIOS settings section of the SystemInfo tab. Managing Jobs The Jobs page enables you to schedule and manage jobs in the management console. In this page you can see jobs based on the following filtering options: ● Configuration Groups—From the drop-down menu, select the configuration group type.
b. c. d. e. f. g. The device command is a recurring job. On selected days of the week and at a specific time the commands are sent to the selected devices. From the OS Type drop-down list, select the type of operating system. In the Name field, Enter the name of the job. From the Group drop-down list, select a group name. Enter the job description. From the Run drop-down list, select the date or time. Enter or select the following details: ● Effective—Enter the starting and ending date.
Steps 1. Click the Rules tab. 2. Select the Unmanaged Device Auto Assignment option. 3. Click the Add Rules tab. 4. Enter the Name, and select the Destination group. 5. Click the Add Condition option, and select the conditions for assigned rules. 6. Click Save. The rule is displayed in the unmanaged group list. This rule is applied automatically, and the device is listed in the destination group.
Steps 1. Click the Rules tab. 2. Select the Alert Notification option. 3. Click Add Rule. An Add Rule window is displayed. 4. From the Rule drop-down list, select a rule. 5. Enter the Description. 6. From the Group drop-down list, select the preferred option. 7. From the drop-down menu, select a target device to apply Notification Target and the time duration to apply Notification Frequency. 8. Click Save. Edit an alert notification rule Steps 1. Click the Rules tab. 2.
● Custom 5. From the Event Type drop-down menu, select the operating system. All ● ● ● ● ● ● the events are classified under particular groups. The available options in the drop-down menu are: Access Registration Configuration Remote Commands Management Compliance Managing users The Users page enables you to perform a routine user management task in the management console.
○ Mobile phone number ● If you click the Roles tab, enter the following details: a. In the Roles section, from the Role drop-down list, select the Administrator role. ○ Global Administrator ○ Group Administrator ○ Viewer NOTE: If you select the Administrator role as Viewer, the following administrative tasks are displayed: ￭ Query Device ￭ Unregister Device ￭ Restart/Shutdown Device ￭ Change Group Assignment ￭ Remote Shadow ￭ Lock Device ￭ Wipe Device ￭ Send Message ￭ WOL Device b.
Table 49. Permissions for a custom role (continued) Supported Not supported Reports Uploading Config UI Others Custom Branding Active Directory on Portal Admin Page Create auto assignment rules for unmanaged devices Steps 1. Click the Rules tab. 2. Select the Unmanaged Device Auto Assignment option. 3. Click the Add Rules tab. 4. Enter the Name and select the Destination group. 5. Click the Add Condition option and select the conditions for assigned rules. 6. Click Save.
3. Select a user. The End User Details page is displayed. 4. Click the Edit Policies drop-down menu and select the operating system. 5. Configure the required policies and click Save and Publish. NOTE: There is no limit on the number of users in an on-premise environment. You can add 10,000 users in a public cloud environment. Portal administration The Portal administration page enables the system administration to perform tasks that are required to set up and maintain your system.
3. Enter the domain user credentials, and click Sign In. To log in to the Wyse Management Suite portal using child domain credentials, do the following: 1. Start the Wyse Management Suite management portal. 2. On the login screen, click the Sign in with your domain credentials link. 3. Click Change user domain. 4. Enter the user credentials and the complete domain name. 5. Click Sign In.
the public cloud , remote repository must be installed. For more information about the ADFS documentation, go to Technet.microsoft.com. Results After the ADFS test connection is successful, import the users using AD connector present in the remote repository. Wyse Management suite Active Directory group feature matrix Table 50.
Table 50.
Table 50.
The Image Pull templates are not replicated automatically to other repositories. You must copy these files manually. File Replication feature is supported only on repositories from Wyse Management Suite 2.0 and later versions. You cannot import self-signed certificate of the remote repository to the Wyse Management Suite server. If the CA Validation is enabled for remote repository, then the replication of files from the remote repository to the local repository fails.
Figure 53. File repository 2. Select a file repository. 3. Click the Subnet Mapping option. 4. Enter subnets or ranges, one value per line. You must use hyphen for range separation. 5. Optionally, clear the Allow devices from subnets not mapped to this file repository to download files from this repository as a fallback method using subnet proximity check box if you want the file repository to be accessed only through the configured subnets or ranges.
12 Troubleshooting your thin client About this task You can use the troubleshooting options on the ThinOS desktop to troubleshoot your device. Steps 1. From the desktop menu, click Troubleshooting. The Troubleshooting dialog box is displayed. 2. Click the General tab, and use the following guidelines: ● Click the Extract CMOS option to extract the CMOS settings and certain BIOS settings to the USB drive or file server based on your target device selection.
a. b. c. d. Connect a USB drive to the thin client. To start logging the unexpected error messages, enable the Capture User Coredump option, and click OK. To stop logging the unexpected error messages, disable the Capture User Coredump option, and click OK. Open the Troubleshooting window, and click Export Logs on the General tab. The log file is stored in the root folder of the USB drive—system_log_201910107_125610.tgz. e. Extract the tgz file. The log files are available at ./compat/linux/var/usbdump/.
a. Open the Troubleshooting window from the left menu on the ThinOS desktop. b. Connect the USB drive to the thin client, and click Export logs. All trace files including the event logs are exported to the USB drive. The log file is saved in the root folder of the USB drive—system_log_20191107_125610.tgz. c. Extract the tgz file, and verify if the http.log file is available. System crashes, freezes or restarts abruptly If the system crashes, freezes, or restarts abruptly, coredump is generated.
Steps 1. Reboot the thin client. 2. Export relevant logs using one of the following methods: ● Use the Export logs option on the General tab in the Troubleshooting window on the ThinOS client. ● Use the Wyse Management Suite console. 3. Analyze the detailed error log report. Request a log file using Wyse Management Suite Prerequisites The device must be enabled to pull the log file. Steps 1. Go to the Devices page, and click a particular device. The device details are displayed. 2.
How to enable and collect logs? Table 52.
How to verify whether the image installation is completed successfully? ● After the last auto reboot, the thin client boots up to the Wyse Management Suite configuration from group 9.x policy. ● Verify the success info and system info in the unit system information or package information. How to recover during a failure? ● If there is a failure message stating Upgrade break cannot boot up, use USB recovery. ● If there is a wrong image or PKG, and the device shows wrong screen or info, use USB recovery.
Common log files and locations The file is named in the pattern system_log_yyyymmdd_hhmmss.tgz. The following table contains the locations where the log files are saved. Table 53. Common log file locations Type Location Device log …\compat\linux\home\tmp\wlogd\wlogd.log Citrix … \compat\linux\var\volatile\log\citrix.log Smart card AuthManager …\compat\linux\home\warthog\.ICAClient\logs RTME … \compat\linux\var\volatile\log\RTMediaEngineSRV\MediaEn gineSRVDebugLogs JVDI …\compat\linux\var\volatil
13 Frequently Asked Questions ThinOS-related questions This section contains frequently asked questions related to Wyse ThinOS. How do I upgrade from ThinOS 8.6 to 9.1? You must use the Wyse Management Suite version 3.1 to upgrade from ThinOS 8.6 to 9.1. For the firmware upgrade procedure, see Firmware upgrade and package deployment or the Dell Wyse ThinOS 9.1 Migration Guide.
iPhone cannot be redirected to the Citrix Desktop session Steps 1. Open Global Connection Settings. 2. Uncheck Exclude disk devices and Exclude audio devices. Android smartphone is not displayed in the session when redirected or mapped You must select the option to transfer images on your smartphone when you connect the USB cable. Does Citrix Workspace app replace Citrix Receiver on ThinOS? In ThinOS 9.x, Citrix Receiver is replaced by Citrix Workspace app.
Steps 1. Launch a Citrix session on your thin client. 2. Open a web browser and play a video. 3. Move the browser on the screen or scroll the browser. 4. Notice a delay or jump in the video window. This noticeable lag in the video window indicates that the video is being redirected. How do I check if QUMU Multimedia URL Redirection is working? Prerequisites Ensure that you have installed the QUMU on the remote desktop. Steps 1. Launch a Citrix session on your thin client. 2.
Wyse Management Suite-related questions This section contains frequently asked questions related to Wyse Management Suite. What takes precedence between Wyse Management Suite and ThinOS UI when conflicting settings are enforced? Any settings that are configured using Wyse Management Suite take precedence over the settings that were configured locally on the ThinOS client or published using the Admin Policy Tool.
● When CA Validation from Wyse Management Suite server is disabled, then the communication from server and client happens in a secure channel without Certificate Signature validation. e. Add a note in the provided box. f. Click Save Settings . How do I check the version of Wyse Management Suite Steps 1. Log in to Wyse Management Suite. 2. Go to Portal Administration > Subscription. The Wyse Management Suite version is displayed in the Server Information field.
