Install Guide

Wyse Device Agent

The Wyse Device Agent (WDA) is a unified agent for all thin client management solutions. If you install WDA, you can manage thin clients

using Wyse Management Suite.

The following three types of customer security environments are supported by the Wyse Device Agent:

• Highly secured environments—To mitigate the risk against rouge DHCP or DNS server for new device discovery, administrators

must log in to each device individually and configure the Wyse Management Suite server URL. You can use either CA-signed or self-

signed certificates. However, Dell recommends that you use a CA-signed certificate. In Wyse Management Suite private cloud solution

with self-signed certificate, the certificate should be manually configured in every device. Also, the certificate must be copied to the

Agent Configuration folder to preserve the certificate and mitigate the risk against rouge DHCP or DNS server even after you

reimage the device.

The Agent Configuration folder is available at the following location:

• Windows Embedded Standard devices—%SYSTEMDRIVE%\\Wyse\\WCM\\ConfigMgmt\\Certificates

• ThinLinux devices—/etc/addons.d/WDA/certs

• ThinOS devices—wnos/cacerts/

NOTE: You must import the certificate to a thin client running ThinOS operating system using a USB drive or FTP

paths.

• Secured environments—To mitigate the risk against rouge DHCP or DNS server for new device discovery, administratos must

configure Wyse Management Suite server using CA-signed certificates. The device can fetch the Wyse Management Suite server

URL from the DHCP/DNS records and perform the CA validation. Wyse Management Suite private cloud solution with self-signed

certificate requires the certificate to be pushed to the device after first registration if the device does not have the certificate before

registration. This certificate is preserved even after you reimage or restart the device to mitigate the risk against rouge DHCP or DNS

server.

• Normal environments—The device obtains the Wyse Management Suite server URL from the DHCP/DNS records for Wyse

Management Suite private cloud that is configured with CA-signed or self-signed certificate. If CA validation option is disabled on the

device, Wyse Management Suite administrator is notified after you register the device for the first time. In this scenario, Dell

recommends that the administrators perform a certificate push to the device where the server is configured with self-signed

certificate. This environment is not available for public cloud.

Wyse Device Agent 33