Users Guide

When you set the user privilege to Customize, you can manually select options that you want to enable or disable in the
ThinOS system menu.
7. Click Save & Publish.
Flash security
● Secure Boot—By default, Secure Boot is enabled on the device to ensure that the system is secure during the boot
process.
● Flash encryption—The entire disk is encrypted for each individual device except the Extensible Firmware Interface (EFI)
system partition. The data on the disk is safe and secure.
USB device security
● Allow or block access to USB devices—ThinOS enables you to allow or block access to USB devices that are connected
to your device.
To allow access to USB devices, do the following:
1. On the ThinOS client, open Admin Policy Tool, or go to the ThinOS 9.x policy settings on Wyse Management Suite.
The Configuration Control | ThinOS page is displayed.
2. On the Advanced tab, expand Privacy & Security, and click Device Security.
3. From the Device Security Type drop-down list, select Allow.
4. In the Device Security Allow list section, click Add Row.
5. Enter the vendor ID and product ID of the device. Example—0xvvvvpppp, where vvvv is device vendor ID and pppp is
device product ID.
6. Enter the class name or class ID. Example—Audio or 0xccsspp.
7. Click Save & Publish.
To block access to USB devices, do the following:
1. On the ThinOS client, open Admin Policy Tool, or go to the ThinOS 9.x policy settings on Wyse Management Suite.
The Configuration Control | ThinOS page is displayed.
2. On the Advanced tab, expand Privacy & Security, and click Device Security.
3. From the Device Security Type drop-down list, select Deny.
4. In the Device Security Allow list section, click Add Row.
5. Enter the vendor ID and product ID of the device. Example—0xvvvvpppp, where vvvv is device vendor ID and pppp is
device product ID.
6. Enter the class name or class ID. Example—Audio or 0xccsspp.
7. Click Save & Publish.
● Allow or block access to USB ports—ThinOS enables you to allow or block access to USB ports of the device.
To enable or disable access to USB ports, do the following:
1. On the ThinOS client, open Admin Policy Tool, or go to the ThinOS 9.x policy settings on Wyse Management Suite.
The Configuration Control | ThinOS page is displayed.
2. On the Advanced tab, expand BIOS, and select your platform model.
3. From the Device Security Type drop-down list, select Deny.
4. In the System Configuration section, click the Enable Rear USB Ports toggle switch to enable or disable the rear
USB ports. If the USB port is disabled, the operating system cannot detect the device that is attached to this port.
5. Click the Enable Front USB Ports toggle switch to enable or disable the front USB ports. If the USB port is disabled,
the operating system cannot detect the device that is attached to this port.
6. Click Save & Publish.
Security quick reference
7