Administrator Guide

Parameter Description
If the terminal is locked and unlocked by using password, start counting
the sign on expiration time again.
If the default value yes is set, then when you unlock the system, the
system will refresh PNA list to verify the password. Set the value to no to
disable the behavior of refresh. (CIR63666)
The optional keyword SCShowCNName is set to yes to forcibly use the
CN name of the certicate as the user name when using smartcard sign
on. By default, the UPN name is used as the user name.
The optional keyword SCSecurePINEntry is set to yes to enable Secure
PIN entry function for pkcs15 card with Cherry keyboard. The default
value is no.
The optional keyword DisableEditDomain is set to yes to stop typing in the
domain box manually. Typing the character @ or \ as the format domain
\user and user@domain in username box are not allowed.
The option AdGroupPreFix is only valid, when you congure
SignOn=NTLM. If the option is congured, then zero Clinet will verify all
AD group names to which the sign-on user belongs, to get the rst group
name so that its prex matches adgrpnameprex, and load adgroup/
the_whole_ad_group_name.ini if the conguration le exits, before
loading user specic ini. For example, if the sign no user is user_111 in a
domain, user_111 belongs to group domain user and group tc_grp1_ad, the
option is congured as AdGroupPrex=tc_grp1. If the conguration le
adgroup/tc_grp1_ad.ini exists, it will be loaded.
RequireSmartCard is used for authentication of smartcard.
If optional RequireSmartCard=yes or force, only smartcard authentication
is allowed.
If optional RequireSmartCard=no, smartcard authentication is disabled.
If optional RequireSmartCard=optional, smartcard authentication is
optional. The default value is optional.
The optional keyword CitrixSignonStyle species the sign on window style
for ThinOS Lite build. By default, CitrixSignonStyle=default, the citrix
receiver store front style sign on window is used if StoreFront Style is
checked in Xen Broker GUI, otherwise, the legacy ThinOS Lite sign on
window style is used. If you set CitrixSignonStyle=thinos, the ThinOS Lite
sign on window style is used. If set CitrixSignonStyle=Xenith, the legacy
ThinOS Lite sign on window style is used.
CitrixSignonStyle species the signon window style for ThinOS Lite build.
By default, CitrixSignonStyle=default, the citrix receiver store front style
signon window is used. If StoreFront Style is checked in Xen Broker GUI,
otherwise, the legacy Xenith signon window style is used. If you set
CitrixSignonStyle=thinos, the ThinOS signon window style is used. If set
CitrixSignonStyle=Xenith, the legacy ThinOS Lite signon window style is
used.
ScepAutoEnroll = { yes |
no }
AutoRew = { yes | no }
InstallCACert = {yes | no }
[CountryName = county]
[State = state]
This option is to allow client automatically get certicates and renew
certicates using SCEP protocol.
ScepAutoEnroll—Set this keyword to yes to enable client's functionality
to automatically obtain certicate.
Set AutoRenew—Set this keyword to yes to enable certicate auto
renew. Client only tries to renew certicates requested either manually or
automatically through SCEP from this client, and the renewal is
performed only after a certicate's 1/2 valid period has passed.
Creating and Using xen.ini Files 223