Home » HP Manuals » Desktops » HP t505 » Manual Viewer

HP t505 Administrator Guide 7 - Page 36

Certificates, Certificate Manager, SCEP Manager

Add to My Manuals
Save this manual to your list of manuals

Page 36 highlights

Option VNC Use Password VNC Notify User to Allow Refuse VNC Show Timeout for Notification User Notification Message Refuse connections in default Re-set VNC server right now Description Makes a password required when accessing the thin client using VNC. Click Set Password to set the password. Enables a notification dialog on the remote system that informs the remote user when someone is attempting to connect using VNC. The user can refuse either allow or refuse access. Sets the length of time in seconds that the remote notification dialog is displayed. Allows you to display a message in the notification dialog to the remote user. If enabled, the VNC connection will be refused by default when the timer expires. Resets the VNC server after applying the new settings. Certificates NOTE: For more information about using certificates in Linux, go to http://www.openssl.org/docs/apps/ x509.html. Certificate Manager To open the Certificate Manager: ▲ Select Advanced > Certificates in the Control Panel. Use the Certificate Manager to manually install a certificate from a certificate authority (CA). This action copies the certificate to the user's local certificate store (/usr/local/share/ca-certificates) and configures OpenSSL to use the certificate for connection verification. If desired, use the Profile Editor to attach the certificate to a profile, as described in Adding certificates to a ThinPro profile on page 64. NOTE: Generally, a self-signed certificate will work as long as it is valid according to specification and can be verified by OpenSSL. SCEP Manager To open the SCEP Manager: ▲ Select Advanced > SCEP Manager in the Control Panel. Use the SCEP Manager when you need to enroll or renew client-side certificates from a CA. During an enrollment or renewal, the SCEP Manager generates the thin client's private key and certificate request, and then it sends the request to the CA on the SCEP server. When the CA issues the certificate, the certificate is returned and placed in the thin client's certificate store. OpenSSL uses the certificate for connection verification. NOTE: Before enrollment, make sure that the SCEP server is configured properly. Use the Identifying tab of the SCEP Manager to enter information about the user, if desired. 24 Chapter 4 Control Panel configurations

Section	Page
Welcome	13
Finding more resources	13
Comparison of ThinPro and Smart Zero	13
Document organization	14
Getting started	15
Choosing a management service	15
Starting HP ThinPro for the first time	15
Navigating the interface	17
Using the taskbar	17
Using the Connection Manager controls	18
Viewing system information	19
Hiding the system information screens	19
Control Panel configurations	20
Control Panel overview	21
Client aggregation	24
Configuring client aggregation	25
Configuring the aggregation clients	25
Configuring the aggregation server	26
Display preferences	26
Configuring printers	26
Redirecting USB devices	27
Network settings	27
Wired network settings	28
Wireless network settings	28
DNS settings	29
IPSec rules	29
Configuring VPN settings	30
Configuring HP Velocity	30
Component Manager	30
Removing components	31
Undoing a change	31
Applying the changes permanently	31
Customization Center	31
HP ThinState	32
Managing an HP ThinPro image	32
Capturing an HP ThinPro image to an FTP server	32
Deploying an HP ThinPro image using FTP or HTTP	33
Capturing an HP ThinPro image to a USB flash drive	33
Deploying an HP ThinPro image with a USB flash drive	33
Managing a ThinPro profile	34
Saving a ThinPro profile to an FTP server	34
Restoring a ThinPro profile using FTP or HTTP	34
Saving a ThinPro profile to a USB flash drive	35
Restoring a ThinPro profile from a USB flash drive	35
VNC Shadowing	35
Certificates	36
Certificate Manager	36
SCEP Manager	36
DHCP options	37
Common connection configurations	38
Common connection settings	38
Kiosk mode	39
Citrix connections	40
Citrix Receiver features	40
HDX MediaStream	41
HP True Graphics	42
HP True Graphics server-side requirements	42
XenApp/XenDesktop	42
HDX 3D Pro	42
Verifying server compression options	42
HP True Graphics client-side configuration	42
Compression settings	42
Window settings	43
Monitor layout and hardware limitations	43
Enabling HP True Graphics for multiple monitors on the HP t420	43
Citrix connection support matrix	43
Citrix general settings	43
Citrix connection-specific settings	46
RDP connections	48
RDP features	48
RDP general settings	48
RDP connection-specific settings	48
Using RemoteFX with RDP	52
Using multi-monitor sessions with RDP	53
Using multimedia redirection with RDP	53
Using device redirection with RDP	54
Using USB redirection with RDP	54
Using mass storage redirection with RDP	54
Using printer redirection with RDP	55
Using audio redirection with RDP	55
Using smart card redirection with RDP	56
VMware Horizon View connections	57
VMware Horizon View settings	57
Using multi-monitor sessions with VMware Horizon View	60
Using keyboard shortcuts with VMware Horizon View	60
Using Multimedia Redirection with VMware Horizon View	60
Using device redirection with VMware Horizon View	60
Using USB redirection with VMware Horizon View	60
Using mass storage redirection with VMware Horizon View	60
Using printer redirection with VMware Horizon View	61
Using audio redirection with VMware Horizon View	61
Using smart card redirection with VMware Horizon View	61
Using webcam redirection with VMware Horizon View	62
Changing the VMware Horizon View protocol type	62
VMware Horizon View HTTPS and certificate management requirements	62
Web Browser connections	64
Web Browser general settings	64
Web Browser connection-specific settings	64
Additional connection types (ThinPro configuration only)	65
TeemTalk connection settings	65
XDMCP connection settings	67
SSH connection settings	67
Telnet connection settings	69
Custom connection settings	69
HP Smart Client Services	70
Supported operating systems	70
Prerequisites for HP Smart Client Services	70
Obtaining HP Smart Client Services	70
Viewing the Automatic Update website	71
Creating an Automatic Update profile	71
Updating thin clients	71
Using the broadcast update method	71
Using the DHCP tag update method	72
Example of performing DHCP tagging	72
Using the DNS alias update method	72
Using the manual update method	72
Performing a manual update	73
Using the Profile Editor	74
Accessing the Profile Editor	74
Loading a ThinPro profile	74
Modifying a ThinPro profile	74
Selecting the platform for a ThinPro profile	75
Configuring a default connection for a ThinPro profile	75
Modifying the registry settings of a ThinPro profile	75
Adding files to a ThinPro profile	75
Adding a configuration file to a ThinPro profile	76
Adding certificates to a ThinPro profile	76
Adding a symbolic link to a ThinPro profile	76
Saving the ThinPro profile	77
Configuring a serial or parallel printer	77
Obtaining the printer settings	77
Setting up printer ports	77
Installing printers on the server	78
Troubleshooting	79
Troubleshooting network connectivity	79
Troubleshooting firmware corruption	79
Reimaging thin client firmware	80
Troubleshooting Citrix password expiration	80
Using system diagnostics to troubleshoot	80
Saving system diagnostic data	80
Uncompressing the system diagnostic files	80
Uncompressing the system diagnostic files on Windows-based systems	80
Uncompressing the system diagnostic files in Linux- or Unix-based systems	81
Viewing the system diagnostic files	81
Viewing files in the Commands folder	81
Viewing files in the /var/log folder	81
Viewing files in the /etc folder	81
USB updates	82
BIOS tools	83
BIOS settings tool	83
BIOS flashing tool	83
Resizing the flash drive partition	84
Customizing the Smart Zero login screen	85
Customizing the screen background	85
Common attributes	85
Elements	87
Image	89
Text	90
Registry keys	93
root > Audio	94
root > CertMgr	94
root > ComponentMgr	95
root > ConnectionManager	95
root > ConnectionType	95
root > ConnectionType > custom	95
root > ConnectionType > firefox	98
root > ConnectionType > freerdp	102
root > ConnectionType > ssh	110
root > ConnectionType > teemtalk	114
root > ConnectionType > telnet	117
root > ConnectionType > view	121
root > ConnectionType > xdmcp	128
root > ConnectionType > xen	131
root > CpuMgr	143
root > DHCP	143
root > Dashboard	143
root > Display	144
root > Network	146
root > SCIM	151
root > ScepMgr	151
root > Search	152
root > Serial	153
root > SystemInfo	153
root > TaskMgr	154
root > USB	154
root > auto-update	154
root > background	156
root > config-wizard	157
root > desktop	157
root > entries	157
root > keyboard	158
root > logging	159
root > mouse	159
root > restore-points	159
root > screensaver	159
root > security	160
root > sshd	161
root > time	161
root > touchscreen	162
root > translation	162
root > usb-update	163
root > users	163
root > vncserver	165

Match case Limit results 1 per page

Option

Description

VNC Use Password

Makes a password required when accessing the thin client using VNC.

Click

Set Password

to set the password.

VNC Notify User to Allow Refuse

Enables a

notiﬁcation

dialog on the remote system that informs the

remote user when someone is attempting to connect using VNC. The

user can refuse either allow or refuse access.

VNC Show Timeout for

Notiﬁcation

Sets the length of time in seconds that the remote

notiﬁcation

dialog is

displayed.

User

Notiﬁcation

Message

Allows you to display a message in the

notiﬁcation

dialog to the remote

user.

Refuse connections in default

If enabled, the VNC connection will be refused by default when the timer

expires.

Re-set VNC server right now

Resets the VNC server after applying the new settings.

Certiﬁcates

NOTE:

For more information about using

certiﬁcates

in Linux, go to

http://www.openssl.org/

docs/apps/

x509.html

Certiﬁcate

Manager

To open the

Certiﬁcate

Manager:

▲

Select

Advanced >

Certiﬁcates

in the Control Panel.

Use the

Certiﬁcate

Manager to manually install a

certiﬁcate

from a

certiﬁcate

authority (CA). This action

copies the

certiﬁcate

to the user’s local

certiﬁcate

store

(/usr/local/share/ca-certiﬁcates)

and

conﬁgures

OpenSSL to use the

certiﬁcate

for connection

veriﬁcation.

If desired, use the

Proﬁle

Editor to attach the

certiﬁcate

to a

proﬁle,

as described in

Adding

certiﬁcates

to a

ThinPro

proﬁle

on page

NOTE:

Generally, a self-signed

certiﬁcate

will work as long as it is valid according to

speciﬁcation

and can be

veriﬁed

by OpenSSL.

SCEP Manager

To open the SCEP Manager:

▲

Select

Advanced > SCEP Manager

in the Control Panel.

Use the SCEP Manager when you need to enroll or renew client-side

certiﬁcates

from a CA.

During an enrollment or renewal, the SCEP Manager generates the thin client’s private key and

certiﬁcate

request, and then it sends the request to the CA on the SCEP server. When the CA issues the

certiﬁcate,

the

certiﬁcate

is returned and placed in the thin client’s

certiﬁcate

store. OpenSSL uses the

certiﬁcate

for

connection

veriﬁcation.

NOTE:

Before enrollment, make sure that the SCEP server is

conﬁgured

properly.

Use the

Identifying

tab of the SCEP Manager to enter information about the user, if desired.

Chapter 4

Control Panel

conﬁgurations