Administrator Guide
Table Of Contents
- Dell Wyse ThinOS Lite Release 2.6 Administrator’s Guide
- Introduction
- Before working on ThinOS Lite
- Getting started
- Global connection settings
- Configuring the connectivity
- Configuring the network settings
- Configuring the remote connections
- Configuring the Citrix broker setup
- Configuring the visual settings
- Configuring the general options
- Configuring the authentication settings
- Configuring the central configurations
- Configuring the VPN manager
- Configuring the connection broker
- Configuring Citrix
- Configuring the Citrix broker setup
- Citrix HDX RealTime Multimedia Engine—RTME
- Citrix Icon refresh
- Using multiple audio in Citrix session
- Using Citrix NetScaler with CensorNet MFA authentication
- Okta Integration through Citrix NetScaler
- Configuring ICA connections
- ICA Self Service Password Reset—SSPR
- QUMU or ICA Multimedia URL Redirection
- HTML5 Video Redirection
- ICA SuperCodec
- Anonymous logon
- Configuring the Citrix UPD Printer
- Introduction to Flash Redirection
- Configuring Citrix
- Configuring Zero Client Settings
- Performing Diagnostics
- BIOS Management
- Security Changes
- Creating and Using xen.ini Files
- Examples of Common Printing Configurations
- Important Notes
- Troubleshooting
The following kinds of server names are supported — all examples are based on Cert Common name
company.wyse.com
￭ *.wyse.com
￭ *wyse.com
￭ *.com
NOTE:
Using only the FQDN, that is company.wyse.com does not work. You must use one of the options (note that
*.wyse.com is the most common option as multiple authentication servers may exist): servername.wyse.com
● LEAP — If you select the LEAP option, click Properties to open and configure the Authentication Properties
dialog box. Be sure to use the correct username and password for authentication. The maximum length for the
username or the password is 31 characters.
● PEAP — If you select the PEAP option, click Properties to open and configure the Authentication Properties
dialog box. Be sure to select either EAP_GTC or EAP_MSCHAPv2, and then use the correct username, password
and domain. Validate Server Certificate is optional.
● FAST—If you select the FAST option, click Properties to open and configure the Authentication Properties
dialog box. Be sure to select either EAP_GTC or EAP_MSCHAPv2, and then use the correct username, password
and domain. Validate Server Certificate is optional.
From ThinOS Lite 2.3, EAP-FAST authentication is supported. During the initial connection, when there is a request
for a Tunnel PAC from the authenticator, the PAC is used to complete the authentication. Therefore, the first time
connection always fails and the following connections succeed. Only automatic PAC provisioning is supported. The
user/machine PAC provisioning generated with Cisco EAP-FAST utility is not supported.
Configuring EAP-GTC and EAP-MSCHAPV2
● To configure EAP-GTC, enter the username only. The password or PIN is required when authenticating.
● To configure EAP-MSCHAPv2, enter the username, password and domain.
NOTE: The domain\username in the username box is supported, but you must leave the domain box blank.
The CA certificate must be installed on the thin client and the server certificate is forced to be validated. When
EAP-MSCCHAPV2 is selected as EAP type in the Authentication Properties dialog box for PEAP or FAST
authentication, an option to hide the domain is available for selection. Username and Password boxes are available for
use, but the Domain text box is disabled.
When EAP-MSCHAPV2 is selected as EAP type in the Authentication Properties dialog box for PEAP or FAST
authentication, a check box to enable Single Sign-On feature is available for selection.
3. Click OK to save the settings.
Configuring the WLAN settings
1. From the floating bar menu, click System Setup, and then click Network Setup.
The Network Setup dialog box is displayed.
2. Click the WLAN tab, and use the following guidelines:
Configuring the connectivity
33