Dell Wyse Management Suite Version 2.1 Administrator's Guide June 2020 Rev.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2020 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents Chapter 1: Introduction to Wyse Management Suite...........................................................................8 Editions of Wyse Management Suite.................................................................................................................................. 8 Wyse Management Suite Feature Matrix...........................................................................................................................
Import a user policy group from Active Directory........................................................................................................... 27 Remove a group...................................................................................................................................................................27 Configure a device level policy...........................................................................................................................................
Rename the thin client........................................................................................................................................................ 47 Configure remote shadow connection..............................................................................................................................47 Shutting down devices......................................................................................................................................................
Chapter 12: Managing users........................................................................................................... 70 Add a new admin profile...................................................................................................................................................... 71 Create auto assignment rules for unmanaged devices...................................................................................................72 Edit an administrator profile.................
Chapter 17: Remote repository....................................................................................................... 94 Manage Wyse Management Suite repository service.................................................................................................... 99 Chapter 18: Troubleshooting your device....................................................................................... 100 Request a log file using Wyse Management Suite................................................
1 Introduction to Wyse Management Suite Wyse Management Suite is the next generation management solution that enables you to centrally configure, monitor, manage, and optimize your Dell Wyse thin clients. It also offers advanced feature options such as cloud and on-premises deployment, manage-fromanywhere option by using a mobile application, enhanced security such as BIOS configuration and port lockdown.
Table 1.
Table 1.
2 Getting started with Wyse Management Suite This section provides information about the general features to get you started as an administrator and manage thin clients using Wyse Management Suite.
Prerequisites to deploy Wyse Management Suite on the private cloud Table 2.
• • • • • • • The Users page enables local users and users who are imported from the Active Directory to be assigned global administrator, group administrator, and viewer roles to log in to Wyse Management Suite. Users are given permissions to perform operations based on the roles that are assigned to them. The Devices page enables you to view and manage devices, device types, and device-specific configurations.
• Inventory of devices—This option can be located by clicking the Devices tab. By default, this option displays a paginated list of all the devices in the system. You can choose to view a subset of devices by using various filter criteria, such as groups or subgroups, device type, operating system type, status, subnet, and platform or time zone. To go to the Device Details page for that device, click the device entry that is listed on this page. All the details of the device are displayed.
3 Installing or upgrading Wyse Device Agent This section provides information about how to install or upgrade Wyse Device Agent on your thin clients, such as Windows Embedded Standard, Linux, and ThinLinux devices by using Wyse Management Suite. • Windows Embedded Standard devices—Wyse Device Agent version 1.4.x can be downloaded from support.dell.com.
Steps 1. After the WDA.exe file is copied to the repository, go to Apps and Data, and create a standard application policy with this package— see Create and deploy standard application policy to thin clients. NOTE: Advanced application policy is supported only from Wyse Device Agent 14.x onwards. It is recommended that you use the standard application policy when you upgrade Wyse Device Agent from 14.x. You can also use the advanced application policy for upgrading Wyse Device Agent from 14.
4 Registering and configuring a new device using Wyse Management Suite Topics: • • • • • Register and configure a new Windows Embedded Standard device using Wyse Management Suite Register and configure a new ThinOS 8.x device using Wyse Management Suite Register and configure a new ThinOS 9.
To enable the CA validation option in the private cloud, you must install the same self-signed certificate on the ThinOS device as well. If you have not installed the self-signed certificate in the ThinOS device, do not select the Enable CA Validation check box. You can install the certificate to the device by using Wyse Management Suite after registration, and then enable the CA validation option. 6. To verify the setup, click Validate Key.
11. Configure the thin client using any of the following options: • • Using the Groups and Configs page—see Edit the ThinOS 9.x policy settings. Using the Devices page—see Managing Devices. Register and configure a new Linux or ThinLinux device using Wyse Management Suite Steps 1. Install Wyse Device Agent on your thin client—see Installing or upgrading Wyse Device Agent. 2.
5 Wyse Management Suite dashboard The Dashboard page enables you to view the status of a system, and the recent tasks that are performed within the system. To view a particular alert, click the link in the Alerts section. The Dashboard page also enables you to view the device summary. Figure 1.
• • • Devices Not Checked In App Compliance Other Device Alerts View the list of events The Events section displays the summary of events that have occurred in the last few days. Steps 1. Click Dashboard. The events summary is displayed. 2. Click View All Events. The Events page is displayed with list of all the events. View the device status The Display section provides the summary of device status. Steps 1. Click Dashboard. The devices summary is displayed. 2. Click View All.
Access online help Steps 1. On the upper-right corner of the Dashboard page, click the login drop-down menu. 2. Click WMS Help. The Support for Wyse Management Suite page is displayed. Change your password Steps 1. On the upper-right corner of the Dashboard page, click the login drop-down menu. 2. Click Change Password. The Change Password window is displayed. 3. Enter the current password. 4. Enter the new password. 5. Reenter the new password for confirmation. 6. Click Change Password.
6 Managing groups and configurations The Groups & Configs page enables you to define policies that are required to configure your devices. You can create sub groups of the global group policies and categorize devices based on your requirements. For example, devices may be grouped based on job functions, device type, and so on. For each group, you can define policies for the following operating systems: • ThinOS • • • • • ○ ThinOS ○ ThinOS 9.
Figure 2. Groups and Configs Topics: • • • • • • • • • • • • • • • • • • • Edit an unmanaged group Create a default device policy group Remove a ThinOS select group Configure a global level policy Create a user policy group Edit a user policy group Import a user policy group Import a user policy group from Active Directory Remove a group Configure a device level policy Export group policies Importing group policies Edit the ThinOS policy settings Edit the ThinOS 9.
Create a default device policy group You can create groups for the global device group policies and categorize devices based on your requirements. Steps 1. On the Groups & Configs page, click the Default Device Policy Group option. 2. Click . 3. In the Add New Group dialog box, enter the Group Name, Description, Domain and AD Attribute Name. NOTE: Select the This is a ThinOS Select group parent option to create a parent select group for ThinOS devices. For more information, see Create a ThinOS Select group.
Edit a ThinOS select group Steps 1. Go to the Groups & Configs page and click the ThinOS select group that you want to edit. 2. Click . 3. In the Editing Default Policy group dialog box, edit the group information such as Group Name and Description. 4. In the Administration tab, you can select the name of group administrators who are tasked with managing this group. From the Available Group Admins box, select the particular group and click the right arrow to move it to the Assigned Group Admins box.
NOTE: A user policy group must be mapped to an AD group or an organizational unit, but not both. 7. Select the Device Group Mapping option to import user groups with device mapping to control the configurations that are applied to all device groups by default. NOTE: This feature is available only on Wyse Management Suite Pro license. You can import 100 user groups to Wyse Management Suite. Edit a user policy group Steps 1. Go to the Groups & Configs page and select the default user policy group. . 2.
2. Click . A warning message indicating that this action removes one or more groups from the group tree hierarchy is displayed. 3. From the drop-down list, select a new group for users and devices in the current group. 4. Click Remove Group. NOTE: When you remove a group from the group hierarchy, all users and devices that belong to the deleted group are moved to a selected group. Configure a device level policy Steps 1. In the Devices page, click the device you want to configure.
• From an exported file—Browse the .json file. Policies from that file are copied to the current group. 4. Click Next. 5. Select the device type configurations to import. The following options are available: • • All device type policies—All configured device type policies are imported to the current group. Specific device type policies—Select one or more device types from the dropdown list. Only the selected device type policies are imported to the current group. 6. Click Next.
Results If the destination group contains policies of the same device type as the imported ones, they are removed and new ones are added. NOTE: While you importing the group policies, the passwords are not imported. The administrator must re-enter the password in all password fields. Edit the ThinOS policy settings Steps 1. Click Groups & Configs. The Groups & Configs page is displayed. 2. Click the Edit Policies drop-down menu. 3. Click ThinOS. The Select ThinOS Configuration Mode window is displayed. 4.
NOTE: To go back to the ThinOS page, click Remove Policy. Edit the ThinOS 9.x policy settings Prerequisites • • Create a group with a group token for the devices you want to push the application package. Register the thin client to Wyse Management Suite. Steps 1. Go to the Groups & Configs page, and select a group. 2. From the Edit Policies drop-down menu, click ThinOS 9.x. The Configuration Control | ThinOS window is displayed. 3. Click the Advanced option. Figure 3. Advanced option 4.
Steps 1. Go to the Groups & Configs page, and select a group. The Configuration Control | ThinOS window is displayed. 2. From the Edit Policies drop-down menu, click ThinOS 9.x. 3. Click Advanced. 4. In the BIOS field, click select your platform to choose the platform where you want to configure the BIOS settings. Upload and push OS packages Prerequisites • • Create a group in Wyse Management Suite with a group token. Use this group token to register the ThinOS 9.x devices.
Upload and push ThinOS 9.x application packages using Wyse Management Suite Prerequisites • • Create a group in Wyse Management Suite with a group token. Use this group token to register the ThinOS 9.x devices. Register the thin client to Wyse Management Suite. Steps 1. Go to the Groups & Configs page, and select a group. 2. From the Edit Policies drop-down menu, click ThinOS 9.x. The Configuration Control | ThinOS window is displayed. 3. Click Advanced. 4.
Edit the Wyse Software Thin Client policy settings Steps 1. Click Groups & Configs. The Groups & Configs page is displayed. 2. Click the Edit Policies drop-down menu. 3. Click Wyse Software Thin Client. The Wyse Software Thin Client page is displayed. 4. After configuring the policy settings, click Save and Publish. Edit the Cloud Connect policy settings Steps 1. Click Groups & Configs. The Groups & Configs page is displayed. 2. Click the Edit Policies drop-down menu. 3. Click Cloud Connect. 4.
7 Managing devices This section describes how to perform a routine device management task by using the management console. To locate the inventory of the devices, click the Devices tab. You can view a subset of the devices by using various filter criteria, such as groups or subgroups, device type, operating system type, status, subnet, platform, or time zone.
• • • • • • • • • • • • • • • • • • • • • • • Save the filter in Devices page Query the device status Lock the devices Restart the devices Unregister the device Enrollment Validation Reset the device to factory default settings Change a group assignment on the Devices page Send messages to a device Activate the device View the device details Manage the device summary View the system information View device events View the installed applications Rename the thin client Configure remote shadow connection Shut
To enable the CA validation option in the private cloud, you must install the same self-signed certificate on the ThinOS device as well. If you have not installed the self-signed certificate in the ThinOS device, then, do not select the Enable CA Validation check box. You can install the certificate to the device by using Wyse Management Suite after registration, and then enable the CA validation option. NOTE: • A warning message is displayed if you disable CA validation. You must click Ok to confirm.
3. From the Management Server drop-down list, select Wyse Management Suite. 4. Enter the server address and the port number in the respective fields. NOTE: If the server address contains http, a warning message is displayed. Click Ok to confirm. 5. Enter the group token. For a single tenant, the group token is an optional step. 6. Enable or disable CA validation that is based on your license type. NOTE: If you disable CA validation, a warning message is displayed. Click Ok to confirm. 7. Click Register.
Register ThinLinux version 2.0 devices by using FTP INI method Prerequisites Create a group to register in Wyse Management Suite. Steps 1. Create a wlx.ini file. Enter the following parameter: WMSEnable=yes\no WMSServer=https://FQDN of the WMS Server:Port GroupRegistrationKey=GroupToken present in WMS Server CAValidation=True/False For example, to register the ThinLinux version 2.0 device to Wyse Management Suite (FQDN of the server is ServerFQDN.domain.
GroupRegistrationKey=defa-defadefa CAValidation=True 2. 3. 4. 5. 6. 7. Place the wlx ini file in the wyse\wlx folder. Go to Settings and switch to admin on the ThinLinux thin client. Go to Management > INI. Enter the FTP server URL. Click Save, and then restart the thin client. Go to Management > Wyse Device Agent. In the Wyse Device Agent tab, observe that the Wyse Management Server details are available in the respective field and the client entry can be seen in Wyse Management Server>Devices page.
• • • Windows Embedded Systems—13.0 or later versions Thin Linux—2.0.24 or later versions ThinOS—8.4 firmware or later versions You can register devices with the Wyse Management Suite server if DNS SRV record fields are set with valid values. NOTE: For detailed instructions on how to add DNS SRV records on the Windows server, see How do I create and configure DNS SRV record. The following table lists the valid values for the DNS SRV records: Table 4.
Search a device by using filters Steps 1. From the Configuration Groups drop-down list, select either the default policy group or the groups which are added by an administrator. 2. From the Status drop-down list, select any of the following options: • Registration • ○ Registered ○ Pre-registered ○ Not Registered ○ Compliant ○ Enrollment Validation Pending ○ Pending ○ Non-Compliant Online Status • ○ Online ○ Offline ○ Unknown Others ○ Recently Added 3.
Query the device status You can send a command to update the device information and status in the system. Steps 1. Click Devices. The Device page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. Click Query. An Alert window is displayed. 5. Click Send Command to send the query command. Lock the devices You can send a command to lock the registered device. Steps 1. Click Devices. The Device page is displayed. 2.
NOTE: Force unregister option can be used to remove the device when there is no communication between the server and client. The device is moved to unmanaged state and can be removed from the server entry. Unregister and Force unregister actions can be performed by WES WDA UI also. Enrollment Validation When you register a device manually or using DHCP/DNS auto discovery method, the device gets registered to a particular group if the group token is defined.
Change a group assignment on the Devices page You can change the group assignment of a device using the Devices page. Steps 1. Click Devices. The Device page is displayed. 2. Apply the filters to find the preferred device. 3. Select the check box of the device. 4. From the More Actions drop-down menu, click Change Group. The Change Group Assignment window is displayed. 5. From the drop-down menu, select a new group for the device. 6. Click Save.
Manage the device summary You can view and manage information about the Notes, Group Assignment, Alerts, and Device Configuration using the Devices page. Steps 1. Click Devices. 2. On the Device Details page, click Summary tab. The device summary is displayed. 3. In the right pane, click Add note. An Add Note window is displayed. 4. Type the message in the provided field and click Save. 5. In the right pane, click Change Group Assignment. The Change Group Assignment window is displayed. 6.
The list of installed applications on the device is displayed. This option is available for Windows Embedded Standard, Linux, and ThinLinux devices. The following are the attributes that are displayed on the page: • • • • Name Publisher Version Installed On NOTE: The installed applications count increases or decreases based on the installation or uninstallation of the applications. The list is updated when the device checks-in or is queried next.
The preferred device list is displayed. 3. From the More Options drop-down list, click Shutdown Now. The remote command to shut down the device is sent to the selected device. The device responds to the server, and the command is applied successfully. NOTE: The Shutdown Now option is not enabled for thin clients running on Linux operating system. Tag a device Wyse Management Suite enables you to identify a device or group of devices by using the Tag Device option. Steps 1. Click Devices.
• ○ Local repository ○ Remote Wyse Management Suite repository Pull Type—Select either Default or Advanced based on your pull type requirement. ○ When the Default pull type is selected, the following options are displayed: ▪ Compress ▪ OS ▪ BIOS ▪ Recovery–—For ThinLinux 2.x ○ When the Advanced pull type is selected, a drop-down list for selecting the templates is displayed. Select any template which is available by default.
5. Click Start Monitoring, to access the performance metric console.
8 Apps and data This section describes how to perform routine device application tasks, operating system imaging, inventory management, and set policies by using the Wyse management console. The repository names are color coded to indicate the status. You can configure the following type of policies using the Apps and Data page: • • • Standard application policy—This policy enables you to install a single application package.
• • • • • Configure Wyse Software thin client application inventory Create and deploy standard application policy to thin clients Create and deploy advanced application policy to thin clients Create and deploy standard application policy to Wyse Software Thin Clients Create and deploy advanced application policy to Wyse Software Thin Clients Important notes for Windows-based devices: • • • • • • • • Supports installation for Windows-based applications with extension .msi, .exe, .msu, .msp.
3. To add an application to the inventory, place the thin client application files in the \repository\softwareTcApps folder. Wyse Management Suite Repository sends metadata for all the files to the Wyse Management Suite server periodically. Create and deploy standard application policy to thin clients Steps 1. In the local repository, go to thinClientApps, and copy the application to the folder. 2.
2. Go to Apps & Data > App Inventory > Wyse Software thin client and verify that the application is registered to Wyse Management Suite. NOTE: The App Inventory interface takes approximately two minutes to populate any recently added programs. 3. Click Add Policy. Add Standard App Policy window is displayed. 4. Enter the Policy Name. 5. From the Group drop-down list, select the group. 6. From the Task drop-down list, select the task. 7. From the OS Type drop-down list, select the operating system. 8.
Create and deploy advanced application policy to thin clients Steps 1. Copy the application and the pre/post install scripts (if necessary) to deploy to the thin clients. 2. Save the application and the pre/post install scripts in the thinClientApps folder of the local repository or the Wyse Management Suite repository. 3. Go to Apps & Data > App Inventory > Thin Client and verify that the application is registered. 4. Go to Apps & Data > App Policies > Thin Client. 5. Click Add Advanced Policy.
24. To create the job, click Preview and schedules are displayed on the next page. 25. You can check the status of the job by going to the Jobs page. Create and deploy advanced application policy to Wyse Software Thin Clients Steps 1. Copy the application and the pre/post install scripts (if necessary) to deploy to the thin clients. 2. Save the application and the pre/post install scripts in the softwareTcApps folder of the local repository or the Wyse Management Suite repository. 3.
• • Immediately—Server runs the job immediately. On device time zone—Server creates one job for each device time zone and schedules the job to the selected date or time of the device time zone. • On selected time zone—Server creates one job to run at the date or time of the designated time zone. 24. To create the job, click Preview and schedules are displayed on the next page. 25. You can check the status of the job by going to the Jobs page.
Add ThinOS BIOS file to repository Steps 1. In the Apps & Data tab, under OS Image Repository, click ThinOS. 2. Click Add BIOS file. The Add File screen is displayed. 3. To select a file, click Browse and go to the location where your file is located. 4. Enter the description for your file. 5. Select the check box if you want to override an existing file. 6. Select the platform from the BIOS platform type drop-down list. 7. Click Upload.
3. To select a file, click Browse and go to the location where your file is located. 4. Enter the description for your file. 5. Click Upload. NOTE: If the application exists in the public repository, the application reference is added to the inventory. Else, the application is uploaded to the public repository and the reference is added to the inventory. Also, ThinOS firmware and BIOS packages that are uploaded by the operator cannot be deleted by tenant administrators.
• • Hosts Rules NOTE: To view the maximum size and the supported format of the files that you can upload, click the information (i) icon. 5. Select the check box if you want to override an existing file. NOTE: The file is added to the repository when you select the check box but it is not assigned to any of the groups or devices. To assign the file, go to the respective device configuration page. 6. Click Upload. How to change wallpaper for all devices belonging to marketing group Steps 1. 2. 3. 4. 5. 6.
9 Managing rules This section describes how to add and manage the rules in the Wyse Management Suite console. The following filtering options are provided: • • • Registration Unmanaged Device Auto Assignment Alert Notification Figure 6.
2. Click Registration, and select the unmanaged devices option. 3. Click Edit Rule. The Edit Rule window is displayed. You can view the following details: • Rule • Description • Device Target • Group 4. From the drop-down menu, select a target client to apply the Notification Target option and the time duration to apply the Notification Frequency option. NOTE: The notification frequency can be configured for every 4 hours, every 12 hours, daily, or weekly basis to the target device. 5.
The selected rule is disabled. 4. Select the disabled rule, and click the Delete Disabled Rule(s) option. The rule is deleted. Save the rule order Prerequisites If multiple rules are present, then you can change the order of a rule to be applied on the devices. Steps 1. 2. 3. 4. Click the Rules tab. Select the Unmanaged Device Auto Assignment option. Select the rule which you want to move and then move it to the top order. Click Save Rule Order. NOTE: You cannot change the IPV6 Prefix rule order.
10 Managing Jobs This section describes how to schedule and manage jobs in the management console. In this page you can see jobs based on the following filtering options: • • Configuration Groups—From the drop-down menu, select the configuration group type. Scheduled by—From the drop-down menu, select a scheduler who performs the scheduling activity.
Figure 7. Jobs page Topics: • • • • • Sync BIOS admin password Search a scheduled job by using filters Schedule a device command job Schedule the image policy Schedule an application policy Sync BIOS admin password Steps 1. Click Jobs. The Jobs page is displayed. 2. From the More Actions drop-down menu, select the Sync BIOS Admin Password option. The Sync BIOS Admin Password Job window is displayed. 3. Enter the password. The password must be a minimum of 4 and a maximum of 32 characters. 4.
Search a scheduled job by using filters This section describes how to search a scheduled job and manage the jobs in the management console. Steps 1. Click Jobs. The Jobs page is displayed. 2. From the Configuration Groups drop-down menu, select either the default policy group or the groups which are added by an administrator. 3. From the Scheduled by drop-down menu, select a scheduler who performs the scheduling activity.
• • • 3. 4. 5. 6. 7. 8. Wake on LAN Shutdown Query The device command is a recurring job. On selected days of the week and at a specific time the commands are sent to the selected devices. From the drop-down list, select the type of operating system. Enter the name of the job. From the drop-down list, select a group name. Enter the job description. From the drop-down list, select the date or time. Enter/select the following details: • • • Effective— Enter the starting and ending date.
11 Managing Events In the Events page, you can view all events and alerts in the management system using the management console. It also provides instructions on viewing an audit of events and alerts for system auditing purposes. A summary of events and alerts is used to obtain an easy-to-read daily summary of what has happened in the system. The Audit window arranges the information into a typical audit log-view.
• Alert History 4. From the Timeframe drop-down menu, select any one of the following operating systems: This option enables you to view the events which occurred in a particular timeframe. The available options in the drop-down menu are: • • • • Today Yesterday This Week Custom 5. From the Event Type drop-down menu, select the operating system. All the events are classified under particular groups.
12 Managing users This section describes how to perform a routine user management task in the management console. The following are the two types of users: • Administrators—Wyse Management Suite administrator can be assigned the role of a global administrator, group administrator, or viewer. ○ A Global Administrator has access to all the Wyse Management Suite functions. ○ A Group Administrator has access to all assets and functions for specific groups that are assigned to them.
Figure 9. Users page Topics: • • • • • • • • • • • • Add a new admin profile Create auto assignment rules for unmanaged devices Edit an administrator profile Add end user Edit an end user Create end-user exceptions Bulk import end users Deleting end user Deactivate an administrator profile Delete an administrator profile Edit a user profile Bulk import unassigned administrators or cloud connect users Add a new admin profile Steps 1. Click Users. 2. Click Administrator(s). 3. Click Add Admin.
• ○ Title ○ Mobile phone number If you click the Roles tab, enter the following details: a. In the Roles section, from the Role drop down list, select the Administrator role. ○ Global Administrator ○ Group Administrator ○ Viewer NOTE: If you select the Administrator role as Viewer, the following administrative tasks are displayed: ▪ Query Device ▪ Unregister Device ▪ Restart/Shutdown Device ▪ Change Group Assignment ▪ Remote Shadow ▪ Lock Device ▪ Wipe Device ▪ Send Message ▪ WOL Device b.
• ○ Title ○ Mobile phone number If you click the Roles tab, enter the following details: a. In the Roles section, from the Role drop down list, select the Administrator role. b. In the Password section, do the following: i. Enter the custom password. ii. To generate any random password, select the Generate random password radio button. 6. Click Save. Add end user Steps 1. 2. 3. 4. 5. Click the Users tab. Click End Users. Click Add User.
NOTE: You can add up to 100 end users to Wyse Management Suite. Deleting end user Steps 1. Click End Users tab. 2. Click Delete End User. An Alert window is displayed. Enter a reason for the deletion to enable the Delete link. 3. Click Delete. Deactivate an administrator profile Deactivating the admin profile prevents you from logging in to the console, and removes your account from the registered devices list. Steps 1. Click Users. 2. Click Administrator(s). 3.
• ○ Title ○ Mobile phone number If you click the Roles tab, enter the following details: a. In the Roles section, from the Role drop down list, select the Administrator role. b. In the Password section, do the following: i. Enter the custom password. ii. To generate any random password, select the Generate random password radio button. 6. Click Save. Bulk import unassigned administrators or cloud connect users Steps 1. Click Users. The Users page is displayed. 2. Select the Unassigned Admins option. 3.
13 Portal administration This section contains a brief overview of your system administration tasks that are required to set up and maintain your system. Figure 10.
5. Click Save. 6. Click Import. 7. Enter the username and password. NOTE: To search groups and users, you can filter them based on Search Base, and Group name contains options. You can enter the values as following: • OU=, for example, OU=TestOU • DC=, DC=, DC=com, for example, DC=Skynet, DC=Alpha, DC=Com You can enter a space after a comma, but you cannot use single or double quotes. 8. 9. 10. 11. Click Login.
Configuring Active Directory Federation Services feature on public cloud You can configure Active Directory Federation Services (ADFS) on a public cloud. Steps 1. On the Portal Admin page, under Console Settings, click Active Directory (AD). 2. Enter the Wyse Management Suite details to ADFS. To know the location details on the ADFS server where you must upload the Wyse Management Suite .xml files, hover over the information (i) icon. NOTE: To download the Wyse Management Suite .
Alert classifications The Alert page categorizes the alerts as Critical, Warning, or Info. NOTE: To receive alerts through e-mail, select the Alert Preferences option from the username menu displayed on the upper-right corner.
3. On the Wyse Management Suite Repository page, enter the credentials to register the Wyse Management Suite repository to Wyse Management Suite server. 4. If you enable the Register to Public WMS Management Portal option, you can register the repository to Wyse Management Suite public cloud. 5. Click the Sync Files option to send the sync file command. 6. Click Check In and then click Send Command to send the device information command to the device. 7.
3. Click the Subnet Mapping option. 4. Enter subnets or ranges, one value per line. You must use hyphen for range separation. 5. Optionally, clear the Allow devices from subnets not mapped to this file repository to download files from this repository as a fallback method using subnet proximity check box if you want the file repository to be accessed only through the configured subnets or ranges.
By default, you have eight attempts to verify the one time passcode. If you fail to verify the passcode, the account will be locked. Only global administrators can unlock locked accounts. Enabling multi-tenant accounts This section allows you to create tenant accounts which can be managed independently of one another. You can manage the organizations independently.
Manage system setup You can change the SMTP details, certificates, MQTT details, and external Wyse Management Suite URL details configured during the installation. From Wyse Management Suite 2.1, the Dynamic Schema Configuration is supported for ThinOS 9.x devices that enables you to update the latest configuration settings without any changes on the server side. In public cloud, the Wyse Management Suite operator can upgrade the 9.x configuration user interface.
14 Teradici device management The Teradici device management section provides the information about managing and discovering the teradici divices. The teradici management console uses SDK’s to support management, configuration for tera devices. This is applicable only for Wyse Management Suite private cloud with pro license type.
3. Enter the administrator password (default password is Administrator) and login. 4. Go to, upload > certificate. Select the Cert.pemfile from the default path and click Upload. 5. Go to Configuration > Management. Click the clear management state button to register the device to the new Management Server. 6. Set the manager discovery mode to manual 7.
NOTE: The MC's FQDN must be entered because the DNS specification does not allow an IP address in the SRV records. 6. Click OK. Adding a DNS TXT record 1. In Forward Lookup Zones, right-click the domain, and then select Other New Records from the context menu. 2. In the Resource Record Type dialog box, select the Text (TXT) from the list, and then click Create Record. 3. Enter the following details: a. In the Record name field, enter the host name of the Wyse Management Suite server offering the service.
▪ If Configure CIFS User Credentials option is selected with Create a New User option. 1. 2. 3. 4. • Stop the service. Update the EMSDK service. Update the service log on user to the newly created user. Restart the service. It operates under the same pre-configured user. When you install both Wyse Management Suite and Teradici EMSDK on a system that has already the EMSDK service installed.
15 Managing license subscription This section enables you to view and manage the management console license subscription and its usage. On the Portal Admin page, you can view the Subscription option.
5. 6. 7. 8. 9. Copy the generated license key. Log in to Wyse Management Suite Private Cloud console. Go to Portal Administration > Accounts > Subscription. Enter the generated license key in the box. Click Import. Thin client licenses allocation You can allocate the thin client licenses between Wyse Management Suite Private Cloud and Wyse Management Suite Public Cloud account. Steps 1. Log in to the Wyse Management Suite Public Cloud console. 2. Go to Portal Administration > Accounts > Subscription. 3.
16 Firmware upgrade You can use Wyse Management Suite to upgrade your firmware. Topics: • • Upgrading ThinLinux 1.x to 2.1 and later versions Upgrading ThinOS 8.x to 9.0 Upgrading ThinLinux 1.x to 2.1 and later versions If you want to pull a customized image from TL 2.x before you upgrade, you must prepare the ThinLinux 2,x and then upgrade the ThinLinux 1.x image. Prepare the ThinLinux 2.x image Prerequisites Use Wyse Management Suite version 1.
Results NOTE: • If you are using Wyse Management Suite 1.3 remote repository, then the xml file is not available in the repository. You must upgrade Wyse Management Suite to 1.4 or later versions to access the file. • Recovery Pull operation does not preserve the user settings. Upgrade ThinLinux 1.x to 2.x Steps 1. Go to www.dell.com/support. 2. Click Product Support, enter the Service Tag of your thin client, and then press Enter.
Table 6. Firmware images Platform ThinOS firmware image Wyse 3040 Thin Client A10Q_wnos Wyse 5070 Thin Client—Celeron processor X10_wnos Wyse 5070 Thin Client—Pentium processor X10_wnos Wyse 5070 Extended Thin Client—Pentium processor X10_wnos Wyse 5470 Thin Client X10_wnos Wyse 5470 All-in-One Thin Client X10_wnos Add ThinOS firmware to the repository Steps 1. Log in to Wyse Management Suite using your tenant credentials. 2. In the Apps & Data tab, under OS Image Repository, click ThinOS. 3.
Upgrade ThinOS 9.x to later versions using Wyse Management Suite Prerequisites • • • • Ensure that you have installed the ThinOS v9.0.1136 image on the thin client. Ensure that you have created a group in Wyse Management Suite with a group token. Use this group token to register the ThinOS 9.x devices. Ensure that the thin client is registered to Wyse Management Suite. Ensure that you have not configured any wallpaper settings on Wyse Management Suite. This is applicable when you are running ThinOS 9.0.
17 Remote repository Wyse Management Suite allows you to have local and remote repositories for applications, operating system images and so on. If the user accounts are distributed across geographies, it would be efficient to have a separate local repository for each of the distributed user account so the devices can download images from its local repository. This flexibility is provided with WMS_Repo.exe software. The WMS_Repo.
5. Click Register to start the registration. Select the Register to public WMS Management Portal if you are registering on the public cloud. Figure 13. Register on a public cloud 6. Enter the following details, and click Register: a. Wyse Management Suite server URL NOTE: Unless you register with Wyse Management Suite v1.0, you cannot use MQTT Server URL. b. c. WMS Repository URL (update the URL with the domain name) d. Wyse Management Suite administrator login username information e.
Figure 14. Registration successful 8. The following screen on the Wyse Management Suite portal confirms the successful registration of the remote repository: Figure 15. Registration successful on the portal 9. HTTPS is by default enabled with WMS_Repo.exe, and is installed with the self-signed certificate. To install your own domain-specific certificate, scroll down the registration page to upload the SSL certificates.
Figure 16. Certificate upload 10. The server restarts, and the uploaded certificate is displayed.
Figure 17. SSL certificate enabled 11. If the Wyse Management Suite is enabled with self-signed or a private domain certificate, you can upload the certificate on the Wyse Management Suite repository server to validate the Wyse Management Suite CA credentials. Figure 18. Trust store certificates 12. Navigate to the C:\wmsrepo location that you entered during registration, and you can view the folders where all the repository files are saved and managed.
Manage Wyse Management Suite repository service Wyse Management Suite repository is displayed as Dell WMS Repository: Tomcat Service in the Windows Local Services window and is configured to start automatically when the server restarts as shown: Remote repository 99
18 Troubleshooting your device You can view and manage the troubleshooting information using the Devices page. Steps 1. On the Device Details page, click Troubleshooting tab. 2. Click Request Screen Shot. You can capture the screenshot of the thin client with or without the client permission. If you select the Require User Acceptance check box, then a message is displayed on the client. This option is applicable only for Windows Embedded Standard, Linux, and ThinLinux devices. 3.
Device fails to register to Wyse Management Suite when WinHTTP proxy is configured WDA is a WinHTTP Client and fetches WinHTTP proxy information from the local system. If you have configured WinHTTP Proxy and the device fails to contact the Wyse Management Suite server, do the following to enable the Proxy Information available at the system level: • • Case 1—When the device is added to a domain, enable IE-Proxy Configurations for each user using the Group Policy from the domain.
19 Frequently asked questions Topics: • • • • • • • • What takes precedence between Wyse Management Suite and ThinOS UI when conflicting settings are enforced? How do I use Wyse Management Suite file repository? How do I import users from a .
• When CA Validation from the Wyse Management Suite server is enabled, the certificate should be present in the client. All the operations, such as, Apps and Data, Image Pull/Push is successful. If the certificate is not present in the client, the Wyse Management Suite server provides one generic audit event message Failed to Validate Certificate Authority under Events page. All the operations, such as, Apps and Data, Image Pull/Push is not successful.
• For example, WMSServerName.YourDomain.Com:443 To create the 166 MQTT server URL option tag, do the following: a. Enter the following values, and click OK. ○ Name—MQTT ○ Data type—String ○ Code—166 ○ Description—MQTT Server b. Enter the following value, and click OK. String—MQTT FQDN • For example, WMSServerName.YourDomain.Com:1883 To create the 167 Wyse Management Suite CA Validation server URL option tag, do the following: a. Enter the following values, and click OK.
7. Click Other New Records. 8. Select Text (TXT), click Create Record, and do the following: a. To create Wyse Management Suite Group Token record, enter the following values, and click OK. • • Record name—_WMS_GROUPTOKEN Text—WMS Group token b. To create Wyse Management Suite CA validation record, enter the following values, and then click OK.
