Install Guide

Wyse Device Agent
The Wyse Device Agent (WDA) is a unified agent for all thin client management solutions. If you install WDA, you can manage
thin clients using Wyse Management Suite.
The following three types of customer security environments are supported by the Wyse Device Agent:
● Highly secured environments—To mitigate the risk against rouge DHCP or DNS server for new device discovery,
administrators must log in to each device individually and configure the Wyse Management Suite server URL. You can use
either CA-signed or self-signed certificates. However, Dell recommends that you use a CA-signed certificate. In Wyse
Management Suite private cloud solution with self-signed certificate, the certificate should be manually configured in every
device. Also, the certificate must be copied to the Agent Configuration folder to preserve the certificate and mitigate
the risk against rouge DHCP or DNS server even after you reimage the device.
The Agent Configuration folder is available at the following location:
○ Windows Embedded Standard devices—%SYSTEMDRIVE%\\Wyse\\WCM\\ConfigMgmt\\Certificates
○ ThinLinux devices—/etc/addons.d/WDA/certs
○ ThinOS devices—wnos/cacerts/
NOTE: You must import the certificate to a thin client running ThinOS operating system using a USB drive or FTP paths.
● Secured environments—To mitigate the risk against rouge DHCP or DNS server for new device discovery, administratos
must configure Wyse Management Suite server using CA-signed certificates. The device can fetch the Wyse Management
Suite server URL from the DHCP/DNS records and perform the CA validation. Wyse Management Suite private cloud
solution with self-signed certificate requires the certificate to be pushed to the device after first registration if the device
does not have the certificate before registration. This certificate is preserved even after you reimage or restart the device to
mitigate the risk against rouge DHCP or DNS server.
● Normal environments—The device obtains the Wyse Management Suite server URL from the DHCP/DNS records for
Wyse Management Suite private cloud that is configured with CA-signed or self-signed certificate. If CA validation option is
disabled on the device, Wyse Management Suite administrator is notified after you register the device for the first time. In
this scenario, Dell recommends that the administrators perform a certificate push to the device where the server is
configured with self-signed certificate. This environment is not available for public cloud.
7
32 Wyse Device Agent