Administrator Guide

Parameter Description
NOTE:
• If the parameter ManualOverride is set, a warning message is
displayed when the users try to reset the device to allow them
to retain the personalized settings or revert to default settings.
The components set using the INI statements are ignored. For
example,
ManualOverride=Yes
Components="display,timezone"
This INI statement allows the user to customize display and
timezone settings, and these personalized settings are not
overridden by wnos.ini after the device restart.
MaxVNCD={0, 1}
[VNCD_8bits={yes,no}]
[VNCD_Zlib={yes, no}]
Default is 0.Option to enable VNC shadowing. Default value is 0 means
VNC shadowing is disabled. Set to 1 to enable shadowing.
NOTE: Only one VNC client session is allowed and a password is
required.
See also VNCPrompt to enable a VNC shadowing prompt to a user. See
also VncPassword to specify a string of up to 8 characters as the
password used for shadowing.
OneSignServer=onesign_server
[DisableBeep={yes,no}]
[KioskMode=yes,no}]
[TapToLock={0,1,2}]
[EnableWindowAuthentication={yes,no}]
[AutoAccess={VMW,XD,XA,LOCAL}]
[NetBIOSDomainName={yes,no}]
[SuspendAction={0, 1}]
[DisableHotKey={yes,no}]
Loglevel=0/1/2/3
[DisablePromptToEnroll={yes,no}]
A list of host names or IP addresses with optional TCP port number or
URLs of Imprivata OneSign servers. It should use https protocol. If
OneSignServer="" is dened, then only imprivata virtual channel can
work.If DisableBeep is set to yes, then Rdeas reader can be set to mute
when a card is tapped. Default is no.
If KisokMode is set to yes, then dierent OneSign user can unlock the
client desktop. Default is no.
Optional keyword TaptoLock is only active when KioskMode=yes. If
TapToLock=0, then tap a card to lock terminal is disabled. If
TapToLock=1(Tap to lock), then use the proximity card to lock the
terminal. If TapToLock=2(Tap over), then lock the terminal and log in as a
dierent user. Default is 2.
If EnableWindowAuthentication is set to yes and OneSign signon fails,
then continue to sign-on with windows credential to pre-dene broker.
Default is yes.
If AutoAccess is dened, then auto launch the corresponding type of
broker. Otherwise, get the broker type from the Imprivata Server setting
of computer and user policy. If none of them is dened, then launch the
rst available broker server from the Imprivata server. If
AutoAccess=LOCAL is set, then launch the broker from the zero client
setting; the broker getting from the Imprivata Server is ignored.
NOTE:
• AutoAccess can be set in [username].ini and xen.ini. The xen.ini
has priority over [username].ini.
If NetBIOSDomainName is set to yes, then Imprivata domain list will show
NetBIOS domain name and card user will authenticate to the broker
server using NetBIOS domain name. Default is no.
If SuspendAction is set to 0, then lock the terminal when you tap the card
or press the hotkey. If set to 1, then signo the terminal. If ‘no’ is dened,
then lock the terminal in KioskMode and sign-o the terminal in none
KioskMode.
200
Creating and Using xen.ini Files