Reference Guide

Table 5. Connection Settings: wnos.ini files only
Parameter Description
AddCertificate=filename
password={plain text password}
Password-enc={encrypted password}
AddCertificate — Specifies a certificate file residing in the subfolder cacerts under
the wnos folder to load on platforms with nand flash, or on the memory. The length
of the filename, including the trailing period and the file extension, is limited to 64
characters.
AddCertificate must be used when configuring the Citrix Secure Gateway PNAgent
Interface (PNAgent/Lite servers) in the Network Setup dialog box.
Adding certificates are required if the user CSG environments use certificate agents
that are not covered by the built-in certificates. The certificates are used to validate
server identities by the thin client. Supported files include .crt file on ICA CSG; .cer
and .pfx in 802.1x. Password and Password-Enc are specially used with PFX files.
CaradigmServer=vip list
[EGPGroup=group name]
[EnableLogOff={yes,no}]
[SecurityMode={default, full, warning, low}]
[DisableManualLogon=yes, no]
CaradigmServer=vip list contains a list of VIP addresses with optional TCP port
number of Caradigm servers. EGPGroup defines the user group name. If
EnableLogOff=yes is specified, the user is logged off from the session before
system signs off. Otherwise the session is disconnected. The logged off user has a
timeout value which can be set using SessionConfig parameter
SessionLogOffTimeout.
The default timeout value is 1, if no SessionLogOffTimeout is specified.
SecurityMode specifies the SSL certification validation policy.
If set to default, it applies the SecurityPolicy setting.
If set to full, the SSL connection needs to verify server certificate. If it is untrusted,
drop the connection.
If set to warning, the SSL connection needs to verify server certificate.
If it is untrusted, it is up to you to continue or drop the connection.
If set to low, the server certificate is not checked. The value is persistent, the
default value of the setting is default.
DisableManualLogon is set to yes to disable user to manually enter credentials to
authenticate into the device. It only allows an already enrolled proximity badge and in
active grace period to authenticate with a single badge tap. The default value is no
Community=community
[Encrypt={yes, no}]
Specifies the SNMP community name. A string up to 31 characters are allowed.
After the value is specified, it is saved in the non-volatile memory.
If encrypt=yes, an encrypted string is used as a community name.
The default value is set to no.
NOTE: Use our Windows Password_Gen tool or built-in tool to generate
the encrypted string.
20 Parameters for wnos INI files only