Dell Wyse 3020 Wyse ThinOS Version 8.5 INI Reference Guide - Page 35

SelectServerList={PNA, VDI}, Parameters for wnos INI

Page 35 highlights

[ScepUserDomain=scep_enrollment_user_domain] [ScepUserPwd=scep_enrollment_user_password] [ScepUserPwdEnc=encrypted_scep_enrollment_user_password] SelectServerList={PNA, VDI} [Default=default_desc] list of servers {Server1; Server2; ...ServerN} before URL. Currently HTTP is used as the only communication protocol for SCEP requests and security is ensured by SCEP itself. CACertHashType-This is the hash type used to verify certificate authority's certificate. CACertHash-This is the hash value used to verify certificate authority's certificate. Client will not issue a certificate request to a SCEP server and cannot pass certificate chain checking through a valid certificate authority. EnrollPwd or EnrollPwdEnc-These keywords are used to set the enrollment password from a SCEP administrator. EnrollPwd is the plain-text enrollment password and EnrollPwdEnc is the encrypted form of the same enrollment password. Use only one of these two fields to set the used enrollment password. As a substitute of using EnrollPwd or EnrollPwdEnc to directly specify an enrollment password, client allows using a SCEP administrator's credential to automatically get an enrollment password from a Windows SCEP server. In this case, the ScepUser, ScepUserDomain, ScepUserPwd (or ScepUserPwdEnc, in encrypted form instead of plan-text) are used to specify the SCEP administrator's credential, and ScepAdminUrl must be set correctly to specify the corresponding SCEP admin web page's URL. If neither EnrollPwd nor EnrollPwdEnc is set, client will try to use these set of settings to automatically get an enrollment password and then use that password to request a certificate. If communication security is necessary in your environment during this phase, please add https:// as the prefix for ScepAdminUrl to use HTTPS instead of the default HTTP protocol. Use ScepAutoEnroll=no AutoRenew=yes to only enable SCEP auto renew; all other parameters are not needed if ScepAutoEnroll is set to no. NOTE: SCEP server's URL must be an HTTP link. Do not add protocol prefix to RequestURL and ScepAdminURL. Allows users to select one PNA or VDI server during logon. For server use the format: description = [ ] NOTE: There must be "description" and "host" key words on each server. For PNA server options, use the options of the PnliteServer parameter in Connection Settings: wnos.ini files, {username} INI, and $MAC INI Files. PNA example: SelectServerList=PNA; Default=test3; description = test1; host = 192.168.0.10; autoconnectlist =*; reconnectfrombutton=0; description = test2; host = HostName2.wyse.com; TimeOut=200; descriprion = test3 host = https:// server3.wyse.com For a VDI server: If you want to use a VDI broker, specify ConnectionBroker in wnos.ini. Otherwise the VDI broker's type is default. Parameters for wnos INI files only 35

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110

[ScepUserDomain=scep_enrollment_user_domain]
[ScepUserPwd=scep_enrollment_user_password]
[ScepUserPwdEnc=encrypted_scep_enrollment_user_password]
before URL. Currently HTTP is used as the only communication
protocol for SCEP requests and security is ensured by SCEP itself.
CACertHashType
—This is the hash type used to verify
certificate
authority's
certificate.
CACertHash
—This is the hash value used to verify
certificate
authority's
certificate.
Client will not issue a
certificate
request to a
SCEP server and cannot pass
certificate
chain checking through a
valid
certificate
authority.
EnrollPwd
or
EnrollPwdEnc
—These keywords are used to set the
enrollment password from a SCEP administrator.
EnrollPwd
is the plain-text enrollment password and
EnrollPwdEnc
is the encrypted form of the same enrollment password. Use only
one of these two
fields
to set the used enrollment password.
As a substitute of using EnrollPwd or EnrollPwdEnc to directly
specify an enrollment password, client allows using a SCEP
administrator's credential to automatically get an enrollment
password from a Windows SCEP server. In this case, the
ScepUser
,
ScepUserDomain
,
ScepUserPwd
(or
ScepUserPwdEnc, in encrypted form instead of plan-text) are used
to specify the SCEP administrator's credential, and ScepAdminUrl
must be set correctly to specify the corresponding SCEP admin
web page's URL. If neither EnrollPwd nor EnrollPwdEnc is set,
client will try to use these set of settings to automatically get an
enrollment password and then use that password to request a
certificate.
If communication security is necessary in your
environment during this phase, please add https:// as the
prefix
for
ScepAdminUrl to use HTTPS instead of the default HTTP protocol.
Use ScepAutoEnroll=no AutoRenew=yes to only enable SCEP auto
renew; all other parameters are not needed if ScepAutoEnroll is set
to no.
NOTE:
SCEP server’s URL must be an HTTP link. Do not
add protocol
prefix
to RequestURL and ScepAdminURL.
SelectServerList={PNA, VDI}
[Default=default_desc]
list of servers {Server1; Server2; ...ServerN}
Allows users to select one PNA or VDI server during logon. For
server use the format:
description = <server’s description> host = <server’s
url> [ <options>]
NOTE:
There must be “description” and “host” key words
on each server.
For PNA server options
, use the options of the PnliteServer
parameter in
Connection Settings: wnos.ini
files,
{username} INI,
and $MAC INI Files.
PNA example:
SelectServerList=PNA; Default=test3;
description = test1; host =
192.168.0.10; autoconnectlist
=*; reconnectfrombutton=0; description =
test2; host = HostName2.wyse.com; TimeOut=200;
descriprion = test3 host =
https://
server3.wyse.com
For a VDI server:
If you want to use a VDI broker, specify
ConnectionBroker in wnos.ini. Otherwise the VDI broker’s type is
default.
Parameters for wnos INI
files
only
35