Home » HP Manuals » Desktops » HP t420 » Manual Viewer

HP t420 Administrator Guide 8 - Page 172

security

Add to My Manuals
Save this manual to your list of manuals

Page 172 highlights

Registry key root/screensaver/off root/screensaver/origImageCopyPath root/screensaver/solidColor root/screensaver/standby root/screensaver/suspend root/screensaver/timeoutScreensaver root/screensaver/timeoutSleep root/screensaver/useSolidColor security Registry key root/security/SecurityFeaturs/ SpeculativeStoreBypassControl root/security/authenticationFailDelay root/security/domainEntryMode root/security/enableLockOverride root/security/enableSecretPeek root/security/encryption/identity/ encryptedSecretCipher root/security/encryption/identity/ encryptedSecretTTL root/security/encryption/identity/ encryptedSecretTTLnonSSO 160 Appendix D Registry keys Description Sets the timeout delay in minutes before the monitor turns off. This is the path where the custom image is saved when mode is set to Default. If useSolidColor is on and enableCustomLogo is off, this solid color is used for the screen saver. Sets the timeout delay in minutes before the monitor goes into standby mode. Sets the timeout delay in minutes before the monitor goes into suspend mode. Sets the timeout delay in minutes before the screen saver starts. Sets the timeout delay in minutes before the thin client goes into the Sleep state. If set to 1 and enableCustomLogo is off, the value of the solidColor key is used by the screen saver. Description Controls whether mitigations for Speculative Store Bypass (CVE-2018-3639) are enabled. By default, these mitigations are not enabled. To enable them, set the key value to on. For any change to this key to take effect, reboot the computer. Sets the approximate time, in milliseconds, to delay after a failed login attempt. The actual time will vary plus or minus 25% of this value. For example, use a value of 3000 to obtain a delay of approximately 3 seconds. If set to 1, the domain is expected to be entered in a separate text field labeled Domain. if set to 0, the domain is expected to be entered as part of the User field. If set to 1, administrators can override the screen lock of a local desktop. If set to 1, password and PIN dialogs will have a button that, while selected, will show the entered password/PIN in clear text. Sets the algorithm for symmetric encryption of a secret. All algorithms use an appropriate amount of random salt, which is regenerated each time the secret is stored. The encryption key is different on each thin client, and encryption and decryption are available only to authorized programs. The supported cipher list includes most OpenSSL ciphers and ChaCha20-Poly1305. Sets the number of seconds since the last successful login that a stored encrypted secret will be considered valid. If set to a negative number, encrypted secrets will not time out. Specifies the number of seconds that a stored, non-SSO encrypted secret is considered valid. If set to a nonpositive number, encrypted secrets do not time out.

Section	Page
Getting started	13
Finding more information	13
Choosing an OS configuration	14
Choosing a remote management service	15
Starting the thin client for the first time	15
Switching between administrator mode and user mode	15
GUI overview	16
Desktop	16
Taskbar	17
Connection configuration	18
Desktop connection management	18
Connection Manager (ThinPro only)	19
Advanced connection settings	19
Kiosk mode	20
Connection types	22
Citrix	22
Citrix Connection Manager	22
Connection	22
Configuration	23
General Settings	24
Options	24
Local Resources	25
Window	25
Firewall	26
Keyboard Shortcuts	26
Session	27
Advanced	27
RDP	27
RDP per-connection settings	27
Network	27
Service	28
Window	29
Options	29
Local Resources	30
Experience	31
Diagnostics	31
Advanced	32
RemoteFX	32
RDP multi-monitor sessions	32
RDP multimedia redirection	33
RDP device redirection	33
RDP USB redirection	33
RDP mass storage redirection	33
RDP printer redirection	34
RDP audio redirection	34
RDP smart card redirection	35
VMware Horizon View	35
VMware Horizon View per-connection settings	35
Network	35
General	36
Security	37
RDP Options	37
RDP Experience	38
Advanced	39
VMware Horizon View multi-monitor sessions	39
VMware Horizon View keyboard shortcuts	39
VMware Horizon View device redirection	40
VMware Horizon View USB redirection	40
VMware Horizon View audio redirection	40
VMware Horizon View smart card redirection	40
VMware Horizon View webcam redirection	41
Changing the VMware Horizon View protocol	41
VMware Horizon View HTTPS and certificate management requirements	41
Web Browser	42
Web Browser per-connection settings	42
Configuration	43
Preferences	43
Advanced	43
Additional connection types (ThinPro only)	43
TeemTalk	43
Configuration	43
TeemTalk Session Wizard	44
Advanced	45
XDMCP	45
Configuration	45
Advanced	45
Secure Shell	45
Configuration	46
Advanced	46
Telnet	46
Configuration	46
Advanced	47
Custom	47
Configuration	47
Advanced	47
HP True Graphics	48
Server-side requirements	48
Client-side requirements	48
Client-side configuration	48
Compression settings	48
Window settings	49
Monitor layout and hardware limitations	49
Enabling HP True Graphics for multiple monitors on the HP t420	49
Tips & best practices	50
Active Directory integration	51
Login screen	51
Single sign-on	51
Desktop	51
Screen lock	52
Administrator mode	52
Settings and the domain user	52
Start menu	53
Connection management	53
Switch to Administrator/Switch to User	53
System Information	53
Control Panel	53
Tools	53
Power	54
Search	54
Control Panel	55
System	55
Network settings	55
Wired network settings	56
Wireless network settings	56
DNS settings	58
IPSec rules	59
Configuring VPN settings	59
Configuring HP Velocity	59
DHCP options	60
Component Manager	60
Removing components	60
Undoing a change	61
Applying the changes permanently	61
Security	61
Security settings	61
Local Accounts	62
Encryption	62
Options	62
Certificates	63
Certificate Manager	63
SCEP Manager	63
Manageability	64
Active Directory configuration	64
Status tab	64
Options tab	65
HP ThinState	65
Managing an HP ThinPro image	65
Capturing an HP ThinPro image to an FTP server	65
Deploying an HP ThinPro image using FTP or HTTP	66
Capturing an HP ThinPro image to a USB flash drive	66
Deploying an HP ThinPro image with a USB flash drive	67
Managing a client profile	67
Saving a client profile to an FTP server	67
Restoring a client profile using FTP or HTTP	67
Saving a client profile to a USB flash drive	68
Restoring a client profile from a USB flash drive	68
VNC Shadowing	68
Input Devices	69
Hardware	69
Display preferences	70
Redirecting USB devices	70
Configuring printers	71
Appearance	71
Customization Center	72
System Information	73
HP Smart Client Services	74
Supported operating systems	74
Prerequisites for HP Smart Client Services	74
Obtaining HP Smart Client Services	74
Viewing the Automatic Update website	75
Creating an Automatic Update profile	75
MAC-address-specific profiles	75
Updating thin clients	76
Using the broadcast update method	76
Using the DHCP tag update method	76
Example of performing DHCP tagging	76
Using the DNS alias update method	77
Using the manual update method	77
Performing a manual update	77
Profile Editor	78
Opening Profile Editor	78
Loading a client profile	78
Client profile customization	78
Selecting the platform for a client profile	78
Configuring a default connection for a client profile	79
Modifying the registry settings of a client profile	79
Adding files to a client profile	79
Adding a configuration file to a client profile	79
Adding certificates to a client profile	80
Adding a symbolic link to a client profile	80
Saving the client profile	80
Serial or parallel printer configuration	81
Obtaining the printer settings	81
Setting up printer ports	81
Installing printers on the server	81
Troubleshooting	83
Troubleshooting network connectivity	83
Troubleshooting Citrix password expiration	83
Using system diagnostics to troubleshoot	83
Saving system diagnostic data	84
Uncompressing the system diagnostic files	84
Uncompressing the system diagnostic files on Windows-based systems	84
Uncompressing the system diagnostic files in Linux- or Unix-based systems	84
Viewing the system diagnostic files	84
Viewing files in the Commands folder	84
Viewing files in the /var/log folder	85
Viewing files in the /etc folder	85
USB updates	86
HP ThinUpdate	86
BIOS tools (desktop thin clients only)	87
BIOS settings tool	87
BIOS flashing tool	87
Resizing the flash drive partition	88
Registry keys	89
Audio	89
CertMgr	90
ComponentMgr	90
ConnectionManager	90
ConnectionType	91
custom	91
firefox	94
freerdp	98
ssh	108
teemtalk	112
telnet	115
view	119
xdmcp	127
xen	131
DHCP	143
Dashboard	143
Display	144
Imprivata	146
Network	146
Power	156
SCIM	158
ScepMgr	158
Search	159
Serial	159
SystemInfo	160
TaskMgr	160
USB	160
auto-update	161
background	163
config-wizard	164
desktop	165
domain	166
entries	167
firewall	167
hwh264	168
keyboard	168
logging	169
login	169
mouse	170
restore-points	170
screensaver	170
security	172
shutdown	173
sshd	173
time	173
touchscreen	175
translation	175
usb-update	176
users	176
vncserver	179
zero-login	181

Match case Limit results 1 per page

Registry key

Description

root/screensaver/off

Sets the timeout delay in minutes before the monitor turns

oﬀ.

root/screensaver/origImageCopyPath

This is the path where the custom image is saved when

mode

set to

Default

root/screensaver/solidColor

useSolidColor

is on and

enableCustomLogo

oﬀ,

this

solid color is used for the screen saver.

root/screensaver/standby

Sets the timeout delay in minutes before the monitor goes into

standby mode.

root/screensaver/suspend

Sets the timeout delay in minutes before the monitor goes into

suspend mode.

root/screensaver/timeoutScreensaver

Sets the timeout delay in minutes before the screen saver starts.

root/screensaver/timeoutSleep

Sets the timeout delay in minutes before the thin client goes into

the Sleep state.

root/screensaver/useSolidColor

If set to 1 and

enableCustomLogo

oﬀ,

the value of the

solidColor

key is used by the screen saver.

security

Registry key

Description

root/security/SecurityFeaturs/

SpeculativeStoreBypassControl

Controls whether mitigations for Speculative Store Bypass

(CVE-2018-3639) are enabled. By default, these mitigations are

not enabled. To enable them, set the key value to on.

For any change to this key to take

eﬀect,

reboot the computer.

root/security/authenticationFailDelay

Sets the approximate time, in milliseconds, to delay after a failed

value. For example, use a value of 3000 to obtain a delay of

approximately 3 seconds.

root/security/domainEntryMode

If set to 1, the domain is expected to be entered in a separate text

ﬁeld

labeled

Domain

. if set to 0, the domain is expected to be

entered as part of the

User

ﬁeld.

root/security/enableLockOverride

If set to 1, administrators can override the screen lock of a local

desktop.

root/security/enableSecretPeek

If set to 1, password and PIN dialogs will have a button that, while

selected, will show the entered password/PIN in clear text.

root/security/encryption/identity/

encryptedSecretCipher

Sets the algorithm for symmetric encryption of a secret. All

algorithms use an appropriate amount of random salt, which is

regenerated each time the secret is stored. The encryption key is

diﬀerent

on each thin client, and encryption and decryption are

available only to authorized programs. The supported cipher list

includes most OpenSSL ciphers and ChaCha20–Poly1305.

root/security/encryption/identity/

encryptedSecretTTL

Sets the number of seconds since the last successful login that a

stored encrypted secret will be considered valid. If set to a

negative number, encrypted secrets will not time out.

root/security/encryption/identity/

encryptedSecretTTLnonSSO

Speciﬁes

the number of seconds that a stored, non-SSO encrypted

secret is considered valid. If set to a nonpositive number,

encrypted secrets do not time out.

160

Appendix D

Registry keys