IGEL Zero Horizon

IGEL Zero Horizon
IGEL Zero Horizon
Manual
IGEL Technology GmbH
IGEL Zero Horizon
02.05.2016
Important Information
Please note some important information before reading this documentation.
Copyright
This publication is protected under international copyright laws. All rights reserved. With the exception of
documentation kept by the purchaser for backup purposes, no part of this manual – including the products
and software described in it – may be reproduced, manipulated, transmitted, transcribed, copied, stored in
a data retrieval system or translated in any form or by any means without the express written permission of
IGEL Technology GmbH.
Copyright © 2016 IGEL Technology GmbH. All rights reserved.
Trademarks
IGEL is a registered trademark of IGEL Technology GmbH.
Any other names or products mentioned in this manual may be registered trademarks of the associated
companies or protected by copyright through these companies. They are mentioned solely for explanatory
or identification purposes, and to the advantage of the owner.
Disclaimer
The specifications and information contained in this manual are intended for information use only, are
subject to change at any time without notice and should not be construed as constituting a commitment or
obligation on the part of IGEL Technology GmbH. IGEL Technology GmbH assumes no responsibility or
liability for any errors or inaccuracies that may appear in this manual, including any pertaining to the
products and software described in it. IGEL Technology GmbH makes no representations or warranties
with respect to the contents thereof and specifically disclaims any implied warranties of merchantability or
fitness for any particular purpose.
IGEL Support and Knowledge Base
If you have any questions regarding an IGEL product and are already an IGEL customer, please contact your
dedicated sales partner first. Er beantwortet gerne Ihre Fragen rund um alle IGEL-Produkte.
If you are currently testing IGEL products or your sales partner is unable to provide the help you need,
please fill in the support form after logging on at the
http://www.igel.com/de/mitgliederbereich/anmelden-abmelden.html
(http://www.igel.com/de/mitgliederbereich/anmelden-abmelden.html) .
We will then contact you as soon as possible. It will make things easier for our support staff if you provide
us with all the information that is available. Please see also our notes regarding support and service
information. Pealse visit our IGEL Knowledge Base http://edocs.igel.com/ to find additional Best Practice
and How To documentation as well as the IGEL Support-FAQ (http://faq.igel.com).
2
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Contents
Important Information ...................................................................................................................................................2
1.
Quick Installation ...............................................................................................................................................7
1.1.
2.
Boot Procedure ................................................................................................................................................10
2.1.
2.2.
2.3.
3.
Starting the Setup ........................................................................................................................15
Ending the Setup ..........................................................................................................................15
Setup Areas ..................................................................................................................................16
Quicksetup ...................................................................................................................................17
Enable setup pages for users .......................................................................................................17
Setup Search ................................................................................................................................18
Sessions..........................................................................................................................................................19
5.1.
5.2.
5.3.
5.4.
5.5.
5.6.
5.7.
5.8.
5.9.
5.10.
6.
General System Information ........................................................................................................13
Sessions ........................................................................................................................................13
System ..........................................................................................................................................14
License..........................................................................................................................................14
Network Information ...................................................................................................................14
Shutting Down and Restarting a Device ......................................................................................15
Setup Application ............................................................................................................................................15
4.1.
4.2.
4.3.
4.4.
4.5.
4.6.
5.
Boot Menu ...................................................................................................................................10
Network Integration ....................................................................................................................11
X-Server ........................................................................................................................................12
Application Launcher .......................................................................................................................................12
3.1.
3.2.
3.3.
3.4.
3.5.
3.6.
4.
The IGEL Linux desktop .................................................................................................................. 8
Desktop Integration .....................................................................................................................19
Horizon Client Global ...................................................................................................................20
Horizon Client session ..................................................................................................................24
RDP - Global Settings....................................................................................................................27
Appliance Mode ...........................................................................................................................42
SSH Session ..................................................................................................................................44
Firefox browser ............................................................................................................................45
Media Player ................................................................................................................................63
Java Web Start Session ................................................................................................................66
VNC Viewer ..................................................................................................................................67
Accessories .....................................................................................................................................................68
6.1.
6.2.
6.3.
6.4.
6.5.
6.6.
6.7.
Local Terminal ..............................................................................................................................68
Change Smartcard Password .......................................................................................................68
Smartcard Personalization ...........................................................................................................68
Setup Session ...............................................................................................................................68
Quick Settings Session..................................................................................................................68
Display switch ..............................................................................................................................69
Application Launcher ...................................................................................................................70
3
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.8.
6.9.
6.10.
6.11.
6.12.
6.13.
6.14.
6.15.
6.16.
6.17.
6.18.
6.19.
6.20.
6.21.
6.22.
6.23.
6.24.
6.25.
6.26.
7.
User Interface ..................................................................................................................................................86
7.1.
7.2.
7.3.
7.4.
7.5.
7.6.
7.7.
8.
Screen...........................................................................................................................................86
Desktop ........................................................................................................................................97
Language ....................................................................................................................................104
Screen Saver and Screen Lock....................................................................................................104
Input ...........................................................................................................................................108
Hotkeys ......................................................................................................................................110
Font Services ..............................................................................................................................111
Network ........................................................................................................................................................113
8.1.
8.2.
8.3.
8.4.
8.5.
8.6.
8.7.
8.8.
8.9.
9.
Sound Mixer .................................................................................................................................71
System Log Viewer .......................................................................................................................71
UMS Registration .........................................................................................................................72
Touchscreen calibration ...............................................................................................................73
Task Manager ...............................................................................................................................73
Screenshot tool ............................................................................................................................76
Soft keyboard ...............................................................................................................................78
Java Control Panel ........................................................................................................................78
Monitor Calibration......................................................................................................................79
Commands ...................................................................................................................................79
Network Diagnostics ....................................................................................................................79
System Information......................................................................................................................81
Disk Utility ....................................................................................................................................81
Firmware Update .........................................................................................................................82
Smartcard Personalization ...........................................................................................................82
Identify Monitors .........................................................................................................................82
Upgrade License ...........................................................................................................................83
Webcam Information ...................................................................................................................84
Image viewer ................................................................................................................................85
LAN interfaces ............................................................................................................................113
Wireless......................................................................................................................................116
DHCP Options .............................................................................................................................123
Virtual Private Network - VPN ...................................................................................................123
Simple Certificate Enrollment Protocol - SCEP ..........................................................................126
Routing .......................................................................................................................................129
Hosts ..........................................................................................................................................129
Network Drives ..........................................................................................................................129
Proxy ..........................................................................................................................................131
Devices .........................................................................................................................................................131
9.1.
9.2.
9.3.
9.4.
Printers .......................................................................................................................................131
USB Storage Devices ..................................................................................................................135
Smartcard ...................................................................................................................................137
USB Access Control ....................................................................................................................138
4
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
10.
Security .........................................................................................................................................................139
10.1. Password ....................................................................................................................................139
10.2. Login Options .............................................................................................................................139
10.3. AD/Kerberos Configuration........................................................................................................144
11.
System Settings ............................................................................................................................................145
11.1.
11.2.
11.3.
11.4.
11.5.
11.6.
Time and Date ............................................................................................................................145
Update 146
Buddy Update ............................................................................................................................147
Remote management ................................................................................................................147
Shadow.......................................................................................................................................148
Remote Access (SSH / RSH) ........................................................................................................152
Power Options ..........................................................................................................................................................153
11.7. Firmware Customization ............................................................................................................162
11.8. IGEL System Registry ..................................................................................................................164
12.
Index .............................................................................................................................................................165
5
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Introduction
IGEL Thin Clients comprise the very latest hardware and an embedded operating system. Depending on the
product concerned, this operating system may be based on IGEL Linux or Microsoft Windows Embedded
Standard®. We have done our utmost to provide you with an excellent overall solution and promise to
provide the very same level of quality service and support.
The IGEL Linux Firmware
The new IGEL zero clients for Citrix HDX, Microsoft RDS/ RemoteFX or VMware Horizon provide a
genuine zero client experience at a low price yet avoid the restrictions that are typical of zero clients from
other manufacturers, e.g. the lack of an update facility, management and support.
IGEL supplies specialized zero clients without compromises, i.e. optimized for one of the three leading
virtualization solutions and with free support. Thanks to the Appliance Mode, the zero clients boot quickly
and directly into the relevant VDI session such as Citrix XenDesktop or VMware Horizon View.
Experience "zero touch deployment" thanks to rule-based configuration during rollout. Reduce your
management outlay to virtually zero thanks to profile-based, automatic remote-management of all
settings. This means "zero" local management for you.
The structure of the IGEL setup is virtually identical on all zero clients and in the Universal Management
Suite (UMS) management software. As a result, the configuration parameters in the local device setup can
be found in the same location in the tree structure as a profile used in the management software for
example. The IGEL Universal Management Suite is available to all customers on the IGEL download site. It
allows management of an unlimited number of IGEL thin clients.
IGEL zero clients are future-proof. Free updates allow access to new functions if necessary. And if you
decide to change the VDI solution later on, this is no problem either. With an IGEL Universal Desktop
upgrade license, you can get your existing IGEL zero client hardware ready for access to other VDI
solutions.
6
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
1.
Quick Installation
To install the thin client in your network environment, proceed as follows:
1. Connect the thin client as follows to the necessary devices and the network:
-
Monitor (VGA, DVI, DisplayPort)
AT-compatible keyboard with PS/2 or USB connection
USB mouse
LAN via RJ45 plug connection
2. Connect the thin client to the power supply.
3. Start the thin client and wait until the graphical user interface has loaded.
4. Click on
in the taskbar.
5. Specify the system language and keyboard layout under User Interface > Language.
6. Specify the resolution and the number of screens under User Interface > Display.
7. If you would like to specify the IP address manually, enter it in the Network > LAN Interfaces section.
8. Click on OK to confirm your changes.
The device will restart if necessary and will use the new settings thereafter.
A handy tool tip is available for virtually every setting. If you would like to know more about a
setting or option, move your mouse pointer over it and wait for a moment. You can configure
the behavior of tool tips under User Interface > Desktop. Further information can be found
under Desktop (page 90).
7
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
1.1. The IGEL Linux desktop
You can operate the thin client via the taskbar and the IGEL menu.
Figure 1: IGEL Linux desktop
8
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
The following items can be found in the taskbar at the bottom edge of the screen:
Opens the IGEL menu.
Quick Start Panel
Application Launcher: Opens a dialog window with
start symbols for sessions.
Setup: Opens the IGEL setup.
Symbol for sessions: Launches a session.
Window bar
Window buttons
Allows you to switch between open windows.
System tray
CPU energy saving plan: Changes the energy
saving settings.
Volume control
Allows you to remove a USB stick safely
Local network connection
Pager: Allows you to switch between a number of
virtual desktops
Time
Show desktop
The IGEL menu offers the following areas and functions:
•
•
•
•
Sessions: Allows you to launch sessions
System: Allows you to launch system programs
About: Shows all relevant system information
Search window: Allows you to find sessions and functions in the start menu
•
Allows you to shut down the thin client
•
Allows you to restart the thin client
9
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
2.
Boot Procedure
The quick installation procedure is complete.
 Restart the system in order to start the boot procedure.
2.1. Boot Menu
 During the boot procedure, press the ESC key in the Secondstage Loader when the Loading Kernel
message is shown on the screen.
A menu with four boot options as well as an option for resetting the thin client to the default factory
settings will appear:
-
2.1.1.
Quiet Boot (page 10): Normal boot
Verbose Boot (page 10): Boot with system messages
Emergency Boot (page 10): Setup only
Failsafe Boot (page 11): With CRC check
Reset to Factory Defaults (page 11): Resets the thin client to the default factory settings
Quiet Boot
Quiet Boot is the default boot mode. In this mode, all kernel messages are disabled and the graphical user
interface is started.
2.1.2.
Verbose Boot
Unlike in Quiet Boot mode, the boot messages are shown in Verbose Boot mode. A diagnostics shell is also
available. This can be used to execute common commands (such as ifconfig etc.) when searching for and
rectifying faults.
 Enter init 3 to close this shell.
The boot procedure will then resume.
2.1.3.
Emergency Boot
Emergency Boot is a setup with default parameters.
If you select Emergency Boot, the Secondstage Loader looks for a bootable system in the flash memory and
then resumes the boot procedure as in the other boot modes.
Essentially speaking, the X-Server is started without network drivers and with a resolution of 1024 x 768 60 Hz during an Emergency Boot. The Setup menu is then opened directly.
This option is useful if, for example, you have selected an excessively high screen resolution or a wrong
mouse type and these settings can no longer be changed in the normal setup.
10
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
2.1.4.
Failsafe Boot - CRC check
During a Failsafe Boot, a check of the file system is carried out first. The thin client then starts in Verbose
Mode.
2.1.5.
Reset to factory defaults
If you select Reset to factory defaults, all personal settings on the thin client (including your password and
the sessions you have configured) will be lost.
A warning message will appear on the screen before the procedure is carried out. If the device
is protected by an administrator password, you will be prompted to enter this password.
Do you know the password?
1. Confirm the warning message.
2. Enter the password. You have three attempts.
Do you not know the password?
1. Confirm the warning message.
2. When you are prompted to enter the password, press the Enter key three times.
3. Press c .
The Terminal Key will appear.
4. Contact us using the IGEL Service RMA form
(https://www.igel.com/en/service-support/rma-request.html).
5. Enter the Terminal Key shown, the firmware version and your contact details.
Our service department will send you a so-called Reset to Factory Defaults Key specially for your device.
To ensure that the process is as straightforward and yet as secure as possible, each key is valid for just
one device.
See also the Resetting a Thin Client with Unknown Administrator Password FAQs
(http://edocs.igel.com/index.htm#10203461.htm).
2.2. Network Integration
Once the kernel has been loaded, the network can be configured.
There are three possible ways of integrating the terminal into the network environment.
Depending on the terminal settings, choose between
•
•
•
DHCP,
BOOTP,
manually configured IP address.
11
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
The network interface can be stopped and restarted on the Linux Console (accessible via
Ctrl + Alt + F11 ) with this command:
/etc/init.d/network stop
/etc/init.d/network start
2.3. X-Server
The final step in the boot procedure involves starting the X-Server and the local window manager.
3.
Application Launcher
To launch the Application Launcher, proceed as follows:
 Click on
in the Quick Start Panel or in the start menu.
The sub-areas of the Launcher provide access to
•
•
•
•
•
Applications
System
License
Information regarding the system
Network information
12
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
3.1. General System Information
Within the Application Launcher you will find the Information page with important system data such as the
firmware version, licensed services and hardware specifications.
Figure 2: Application Launcher - system information
Details of the current network configuration with the IP address and device name are also given here.
3.2. Sessions
All sessions created are shown in a list of applications if they are enabled for the main session page.
 To open an application, double-click on it or click on Execute.
Alternatively, you can launch sessions via icons on the desktop, in the Quick Start Panel or from the
start menu and context menu.
Applications can also be launched automatically and a key combination (hotkey) can be defined.
The available options for launching a session can be defined under Desktop Integration in the
session configuration.
13
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
3.3. System
Under System, you can execute various tools including the firmware updating tool with the pre-set update
information.
The following tools are available:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Disk Utility: Shows information regarding connected USB drives.
Display Switch: Switches between a number of screens.
Firmware Update: Carries out the update with the settings configured during the setup.
Identify Monitors: Shows the monitor's number and manufacturer details.
Network Tools: Provides detailed information on the network connection and offers a number of
problem analysis tools such as Ping or Traceroute.
Safely Remove Hardware: Removes external storage devices without a risk of losing data.
Screenshot Tool: Takes photos of the screen content.
Setup: Launches the IGEL Setup.
Smartcard Personalization: Allows access data and sessions which are to be available to a smartcard
user to be written to an IGEL smartcard.
System Information: Shows information regarding hardware, the network and connected devices.
System Log Viewer: Shows system log files "live" and allows you to add your own logs.
Taskmanager: Manages all processes.
Touchscreen Calibration: Allows a connected touchscreen monitor to be calibrated.
UMS Registering: Logs the thin client on to a UMS server (access data for the server are required).
Upgrade License: Reads a new license file from the USB stick and modifies the functions of the
firmware accordingly.
Webcam Information: Shows data relating to a connected webcam and allows the camera to be tested.
3.4. License
You will find the following here:
•
•
The licenses for the components used in the UD system
Information on the provision of source code, e.g. under GPL
3.5. Network Information
The Network information tool allows you to read out data from your local network connections and check
the availability of a UMS server:
Figure 3: Network information
14
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
3.6. Shutting Down and Restarting a Device
Within the Application Launcher you will find two buttons for Reboot and Shutdown. Both actions can be
disabled for the user and will then be available to the administrator only.
You can change the default action when shutting down the device using the button on the screen or the
on/off button on the device itself in the setup under System > Power Options > Shutdown.
4.
Setup Application
With the help of the setup, you can change the system configuration and session settings.
Any changes you have made in UMS take precedence and may no longer be modifiable. A lock
symbol before a setting indicates that it cannot be changed.
4.1. Starting the Setup
You can open the setup in the following ways:
•
•
•
•
•
•
•
Double-click on Setup in the Application Launcher
or click on Execute.
Double-click on Setup on the desktop (if available based on the settings).
Select Setup in the desktop context menu (if available based on the settings).
Select System > Setup in the start menu.
Click on Setup in the Quick Start Panel.
Launch the setup using the keyboard command Ctrl + Alt + s , or
in the Appliance Mode using Ctrl + Alt + F2 .
You can configure how the setup can be launched under Accessories. The options described
above as well as combinations thereof are available.
4.2. Ending the Setup
In order to end the setup again, you have the following options:
•
•
•
Click on Apply if you have finished configuring a setup area and would like to save your settings without
closing the setup program.
Click on Cancel if you have not made any changes and would like to abort the setup.
Click on OK to save your changes and exit the setup.
15
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
4.3. Setup Areas
The setup application comprises the following main areas:
Figure 4: Setup areas
Sessions: Allows you to configure application sessions such as ICA, RDP, PowerTerm, browser and others
Accessories: Allows you to configure various local tools - setup pages for the local shell (Terminal), sound
mixer, screen keyboard (for touchscreen monitors), options for the Application Launcher and the setup
application itself.
User interface: Allows you to configure display settings, entry devices, hotkey commands etc.
Network: Allows you to configure all network settings for LAN/WLAN interfaces and the dial-up
connections
Devices: Allows you to configure various devices
Security: Allows you to set the administrator/user passwords and user authorizations etc.
System: Allows you to set various basic system parameters including the date and time, information
regarding the firmware update, remote management etc.
 Click on one of the areas to open up the relevant sub-structure.
The tree structure allows you to switch between the setup options.
Three navigation buttons are available. The buttons allow you to move back and forth between the setup
pages you have visited or reach the next level up within the structure.
You will find a more detailed description of the individual setup options elsewhere. This is merely a brief
overview.
16
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
4.4. Quicksetup
So legen Sie eine Quicksetup-Sitzung an:
1. Aktivieren Sie unter Sicherheit > Passwort das Passwort für den Administrator.
Sollen Benutzer Teile des Setups nur mit Passwort bearbeiten dürfen, aktivieren Sie auch das Passwort
für den Setupbenutzer.
2. Definieren Sie unter Zubehör > Quicksetup den Namen und die Optionen zum Aufruf des Quicksetups.
3. Schalten Sie unter Zubehör > Quicksetup > Seitenberechtigungen diejenigen Bereiche frei, auf welche
der Benutzer Zugriff haben soll.
4.5. Enable setup pages for users
If a password was set up for the administrator, the IGEL Setup can only be opened with administrator
rights, i.e. after entering the password (see Password (page 139)). However, individual areas of the setup
can be enabled for the user, e.g. to allow them to change the system language or configure a left-handed
mouse.
To enable setup pages for the user, proceed as follows:
1. Under Security > Password, enable the password for the administrator and the setup user.
If users are to be allowed to edit parts of the setup even without a password, create a quick
setup (page 16) session, the password for the setup user will not be enabled in this case.
2. Under Accessories > Setup > User Page Permissions, enable those areas to which the user is to have
access.
-
A check in the checkbox indicates that the node is visible in the setup.
A green symbol (open lock) indicates that the user is able to edit the parameters on this setup
page.
17
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Figure 5: Restricted access to the setup
If you enable a setup page on the lower levels, the node points required for access will
automatically be marked as visible (but blocked for editing purposes).
4.6. Setup Search
The Search function enables you to find parameter fields or parameter values within the setup.
1. To start a search, click on the button below the tree structure.
2. Enter the text to be searched for and the search details.
3. Select one of the hits.
4. Click on Show result and you will be taken to the relevant setup page.
The parameter or value found will be highlighted as shown below.
Figure 6: Setup search
18
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.
Sessions
Application sessions can be created and configured in the Sessions sub-structure of the IGEL setup
application. The Session Overview provides an overview of all available session types and existing sessions.
Figure 7: Session overview
 Click on Add... to create a new session.
Disabled functions are not shown in the drop-down list.
A number of session functions require the optional Multimedia Codec Pack. This applies in
particular to the playback and redirecting of multimedia content. Details can be found in the
IGEL Linux Features that Require the Multimedia Codec Pack FAQs
(http://edocs.igel.com/#10204030.htm).
5.1. Desktop Integration
For each session, there is a desktop integration configuration page on which the following actions can be
performed:
•
•
Determining the appearanceof the session on the local desktop.
Setting up the name of the session.
The session name must not contain any of these characters:
\ / : * ? “ < > | [ ] { } ( )
•
•
•
Selecting the session launch options (autostart, restart).
Enabling hotkey use.
Setting a password for launching the session (administrator, user, setup user).
19
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.2. Horizon Client Global
Menu path: Setup > Sessions > Horizon Client > Horizon Client Global
In this area, you can define the global settings for Horizon Client sessions.
The following settings are carried over from the global settings for RDP sessions; see RDP Global:
•
•
•
•
Drive mapping; see Drive mapping (RDP) (page 31)
Number of colors; see Window - RDP (page 29)
Window size; see Window - RDP (page 29)
Multi-monitor full-screen mode; see Window - RDP (page 29)
5.2.1.
Server Options
Menu path: Setup > Sessions > Horizon Client > Horizon Client Global > Server Options
In this area, you can specify the settings for the connection between the Horizon Client and the server.
•
Preferred connection protocol: The selected option is preferred by the client when negotiating the
connection protocol.
If the server does not accept the connection protocol preferred by the client, the connection
protocol preferred by the server will be used.
20
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Possible values:
•
•
Server setting: The client does not give the server details of a preferred connection protocol.
The connection protocol preferred by the server is used.
RDP: The client tells the server that it prefers RDP as the connection protocol.
PCoIP: The client tells the server that it prefers PCoIP as the connection protocol.
Enable kiosk mode: If this option is enabled, Horizon Client sessions will be held in kiosk mode.
Server certificate verification mode: Specifies what will happen if server certificate verification fails.
Possible values:
-
5.2.2.
Reject if verification fails
Warn if verification fails
Allow unverifiable connections
Local Logon
Menu path: Setup > Sessions > Horizon Client > Horizon Client Global > Local
Logon
In this area, you can pre-configure user data. As a result, you can avoid users possibly having to log on a
number of times.
You can change the following settings:
•
•
•
Use local login window: If this option is enabled, the local logon window of the thin client will be used
to log on to the server. If you use the local logon window, you can pre-configure logon information.
Preset login information: If this option is enabled, logon information will appear automatically in the
logon window. With Type, you can specify the source of the logon information.
Type:
-
-
•
•
•
set user/domain from last logon: If this option is enabled, the logon information from the last
session will appear automatically in the logon window.
set user/domain from session setup: If this option is enabled, session-specific logon
information will appear automatically in the logon window. The session-specific logon
information is described under Connection Settings (page 24).
set user/domain from Appliance Mode: If this option is enabled, the logon information
specified in the Appliance Mode for VMware Horizon will appear automatically in the logon
window; see Appliance Mode (page 42).
Show domain: If this option is enabled, the domain will be shown in the logon window.
Restart mode: If this option is enabled, the logon window will be shown in restart mode and cannot be
closed.
Exit on disconnect or when an error occurs: If this option is enabled, the session will be ended
completely when the connection is terminated. If this option is disabled, the connection overview will
be shown when the connection is terminated.
21
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Working with domains:
 To create a domain, click on
.
 To remove a domain, click on
.
 To change a domain, click on
.
Further settings options can be found under AD/Kerberos Configuration (page 143) and AD/Kerberos
(page 142).
5.2.3.
USB redirection
Menu path: Setup > Sessions > Horizon Client > Horizon Client Global > USB Redirection
In this area, you can enable and configure USB redirection for specific devices.
You can change the following settings:
To enable USB redirection, proceed as follows:
1. Enable the option Enable USB Redirection.
2. Select a Default Rule. The set rule specifies whether USB redirection is allowed or prohibited.
3. Create one or more rules for classes of devices or individual devices.
To create a class rule, proceed as follows:
1. To create a new rule, click on
in the Class Rules area.
2. Choose a rule. The rule specifies whether use of the device class defined here is allowed or prohibited.
3. Under Family, select the class of device for which the rule should apply. Examples: Audio, Printer,
Storage Devices.
4. Under Name, give a name for the rule.
5. Click on Ok.
6. Click on Apply or OK.
The rule is active.
22
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
To create a device rule, proceed as follows:
When a rule is defined, at least one of the properties Vendor ID or Product ID must be given.
1. To create a new rule, click on
in the Device Rules area.
2. Choose a Rule. The rule specifies whether use of the device defined here is allowed or prohibited.
3. Give the Vendor ID of the device as a hexadecimal value.
4. Give the Product ID of the device as a hexadecimal value.
5. Under Name, give a name for the rule.
6. Click on Ok.
7. Click on Apply or OK.
The rule is active.
5.2.4.
Multimedia
Menu path: Setup > Sessions > Horizon Client > Horizon Client Global > Multimedia
You can change the following multimedia settings:
•
Enable VMware Multimedia Redirection
Possible values:
-
•
off: The server renders the multimedia data and sends the individual images to the client.
on: The client renders the multimedia data supplied by the server.
Real Time Audio Video (RTAV): Specifies the redirection of video data from the client USB webcam.
Possible values:
-
off: The client does not forward the webcam data as video data.
With USB redirection, data from the webcam can be forwarded to the server even if RTAV is
disabled.
-
5.2.5.
on: The client forwards the webcam data as video data.
Performance
Menu path: Setup > Sessions > Horizon Client > Horizon Client Global > Performance
In this area, you can optimize the performance of Horizon Client sessions.
You can change the following settings:
•
PCoIP client-side image cache size: Specifies the size of the cache for images. Caching parts of the
display reduces the amount of data to be transferred.
Larger cache sizes of 250 MB or more should only be used if at least 2 GB RAM or more is
available.
23
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.2.6.
Smartcard
Menu path: Setup > Sessions > Horizon Client > Horizon Client Global > Smartcard
In this area, you can specify which smartcards are authorized when logging on.
5.3. Horizon Client session
5.3.1.
Connection settings
Menu path: Setup > Sessions > Horizon Client > Horizon Client Sessions > [Session Name] > Connection
Settings
In this area, you can specify the settings for the connection between the Horizon Client and the server.
•
•
•
•
•
•
Server URL: URL of the VMware Horizon server
Use Passthrough authentication for this session: If this option is enabled, the user name and password
will be temporarily saved and used for authentication during this session.
Username: User name when logging on to the VMware Horizon server
User password: Password when logging on to the VMware Horizon server
Domain: Domain when logging on to the VMware Horizon server
Session type: Specifies whether the session contains a desktop or an individual application.
Possible values:
-
•
•
•
•
•
Desktop: The session contains a desktop.
Application: The session contains an individual application.
Desktopname: Specifies a name for the desktop. This option is available if Session Type is set to
Desktop.
Application: Application that is launched during the session. This option is available if Session Type is
set to Application.
Autoconnect: If this option is enabled, the connection to the desktop or application will be established
automatically when the session starts. For this to be possible, the name of the desktop or application
must be defined. If this option is disabled, the overview will be shown when the session starts.
Preferred desktop protocol: The selected option is preferred by the client when negotiating the
connection protocol.
Enable kiosk mode: If this option is enabled, the session will be held in kiosk mode.
Further settings options can be found under AD/Kerberos Configuration (page 143) and AD/Kerberos
(page 142).
24
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.3.2.
Window
Menu path: Setup > Sessions > Horizon Client > Horizon Client Sessions > [Session Name] > Window
In this area, you can change the way in which the session is displayed.
•
Window Size: Specifies the width and height of the window.
The window size is carried over from the global settings for RDP sessions, see Window (page
29).
•
Number of Colors: Specifies the color depth.
The color depth is carried over from the global settings for RDP sessions, see Window (page 29).
•
Start Monitor: Specifies the monitor on which the session is shown.
Further settings options can be found under Screen (page 86) and Window (page 29).
5.3.3.
Mouse and keyboard
Menu path: Setup > Sessions > Horizon Client > Horizon Client Sessions > [Session Name] > Mouse and
Keyboard
In this area, you can define the settings for the mouse and keyboard.
•
Disable mouse movement events: If this option is enabled, the mouse pointer will only be shown
locally on the thin client. If the user moves the mouse over a session item, no reaction of the item will
be shown.
Further settings options can be found under Language (page 104) and Keyboard and Additional
Keyboard (page 108).
5.3.4.
Mapping
Menu path: Setup > Sessions > Horizon Client > Horizon Client Sessions > [Session Name] > Mapping
In this area, you can specify the data transmission between the thin client and the Horizon Client session.
25
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
•
•
•
•
Enable Client Audio: If this option is enabled, audio data are transmitted.
Enable Clipboard: If this option is enabled, the clipboard will be available.
Enable Printer Mapping: If this option is enabled, the printer will be available.
Enable Com Port mapping: If this option is enabled, the COM port will be available.
Enable Drive Mapping: If this option is enabled, the external drives will be available.
Enable USB Redirection: If this option is enabled, the client's USB data will be forwarded to the server.
Further settings options can be found under Drive Mapping (page 31), Serial Connections (RDP),
Printers (RDP) (page 32), Audio (page 33), Keyboard (page 30) and Printers (Devices) (page 131).
5.3.5.
Performance
Menu path: Setup > Sessions > Horizon Client > Horizon Client Sessions > [Session Name] > Performance
In this area, you can save system resources by disabling certain visual functions of the user interface.
•
•
•
•
•
•
•
Disable Wallpaper: If this option is enabled, no desktop background image will be displayed.
Don't show contents of window while dragging: If this option is enabled, the content of a window will
not be shown when the window is moved.
Disable Menu and Window animation: If this option is enabled, transitions for menus and windows will
not be animated.
Disable Themes: If this option is enabled, no optional desktop design will be used.
Disable Cursor Shadow: If this option is enabled, the mouse pointer will be shown without a shadow.
Disable Cursor Settings
Enable font smoothing: If this option is enabled, the edges of fonts will be smoothed.
Further settings options can be found under Performance (Horizon Global) (page 23) and Performance
(RDP Global) (page 33).
5.3.6.
Options
Menu path: Setup > Sessions > Horizon Client > Horizon Client Sessions > [Session Name] > Options
In this area, you can change various settings.
•
•
•
•
Working Directory: Directory that is used after logging on
Compression: If this option is enabled, the flow of data between the client and server will be
compressed.
Enforce TLS encrypted connection: If this option is enabled, the flow of data between the client and
server will be encrypted with TLS.
Network Level Authentication: If this option is enabled, the user will authenticate themselves on the
network level (network layer authentication) in order to establish an RDP connection.
If network level authentication is enabled, the local logon window is used. This also applies if
the Use local logon window option under Setup > Sessions > Horizon Client > Horizon Client
Global > Local Logon is disabled.
Further settings options can be found under Options (RDP Global) (page 34), Performance (RDP Global)
(page 33) and Local Logon (Horizon Global) (page 21).
26
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.3.7.
Multimedia
Menu path: Setup > Sessions > Horizon Client > Horizon Client Sessions > [Session Name] > Multimedia
You can change the following multimedia setting:
•
VMware multimedia redirection
Possible values:
-
Global setting: The global setting for Horizon Client sessions is used, see Horizon Client Global
Multimedia (page 23).
off: The server renders the multimedia data and sends the individual images to the client.
Further settings options can be found under Horizon Client Global Multimedia (page 23).
5.3.8.
Proxy
Menu path: Setup > Sessions > Horizon Client > Horizon Client Sessions > [Session Name] > Proxy
In this area, you can configure the use of a proxy for the connection between the client and server.
You can change the following settings:
•
•
Direct connection to the internet: If this option is enabled, no proxy is used.
Manual proxy configuration: If this option is enabled, a proxy is used. The configuration must be
specified in the following fields.
-
•
HTTP proxy: URL of the proxy for HTTP
Port: Port of the proxy for HTTP
SSL proxy: URL of the proxy for SSL
Port: Port of the proxy for SSL
SOCKS host: URL of the proxy for SOCKS
Port: Port of the proxy for SOCKS
SOCKS protocol version: Version of the SOCKS protocol used
No proxy for: List of URLs for which no proxy is to be used.
System-wide proxy configuration: If this option is enabled, the proxy configured under Setup >
Network > Proxy will be used.
Further settings options can be found under System-wide Proxy (Network) (page 130).
5.4. RDP - Global Settings
This section describes the procedure for configuring the global RDP settings. This configuration applies for
all Horizon View sessions with the use of RDP.
The protocol version can no longer be configured manually, while the version used by the server is
automatically recognized and used.
27
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.4.1.
Gateway
Menu path: Setup > Sessions > RDP > RDP Global > Gateway
Via Microsoft Remote Desktop Gateway, you can access remote Windows systems.
The gateway translates between the internal Remote Desktop Protocol RDP and the external HTTPS
connection.
Access to the Remote Desktop environment is provided via the browser. The browser establishes a secure
connection to the gateway. From here, the connection query is forwarded to the target system. In the
process, pre-defined Connection Access Policies and Resource Access Policies (CAP and RAP) for access
control are evaluated.
Figure 8: Remote Desktop Gateway
To set up the RD Gateway, proceed as follows:
1. Enable Gateway Support under Sessions > RDP > RDP Global > Gateway.
2. Record the access data. Smartcard is not supported
RD Gateway requires Microsoft Windows Server 2008R2 or Server 2012 with various
restrictions for each server version.
The following Windows Server editions can preferably be used as gateway servers:
•
•
•
•
•
•
•
•
Server 2008R2 Standard (limited to 250 RD Gateway connections)
Server 2008R2 Enterprise
Server 2008R2 Datacenter
Server 2012 Standard
Server 2012 Datacenter
Server 2012 Essential (restricted to the RD Gateway role)
Server 2012R2 Standard
Server 2012R2 Essential (restricted to the RD Gateway role)
RD Gateway is not supported in the IGEL RDP Legacy Mode.
28
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.4.2.
Local Logon
Menu path: Setup > Sessions > RDP > RDP Global > Local Logon
Under Local logon, you can pre-populate user data. As a result, you can avoid users possibly having to log
on a number of times.
You can also use Local logon to freely select the server in the logon window of an RDP session.
Enable Use local logon window to
•
•
Pre-populate user data
Freely select the server in the logon window of an RDP session.
The following presets can be configured:
Use local logon window
If this option is enabled, you will need to enter the password in the
RDP logon window on the terminal side when logging on.
Preset logon information
The logon window is pre-populated with the user name and domain.
Type
Here, you can pre-populate the user name and domain in the logon
window and choose between the settings from the last logon and the
session setup.
Show domain
Shows the domain entry in the logon window.
Specify client name to user name
This setting may help to resolve reconnection problems during load
balancing.
Relaunch mode
The RDP logon window is displayed in restart mode and cannot be
closed.
Enable network authentication
Enables network authentication via NTLM. Smartcards are not
supported here.
Domains
Allows you to add domains which are to be available. If you enter a
number of domains, these will be shown in the Domains drop-down
area in the logon module.
5.4.3.
Window
Menu path: Setup > Sessions > RDP > RDP Global > Window
In this area, you can configure the window for RDP sessions.
You can change the following settings:
29
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
Number of Colors: Specifies the color depth.
Window Size: Specifies the width and height of the window.
-
•
Fullscreen: The session is shown on the full screen. The thin client's taskbar is not visible.
Workarea: The session is shown on the full screen, minus the area needed by the thin client's
taskbar.
Numeric details: The session is shown in the selected resolution or on the selected percentage
of the screen area.
Enable Display Control: If this option is enabled, the window size can be changed during the session.
If the window size is to be changed during the session, at least Windows 8.1 or Windows
Server 2012 R2 must be running on the server.
It is not possible to change the window size during the session if the window size is set to full
screen or work area.
•
Control bar for RDP sessions: If this option is enabled, a symbol bar for minimizing and closing a
full-screen session will be shown.
If the symbol bar is enabled, a session will be shown on one monitor only, even if Multi
Monitor Fullscreen mode is set to Expand fullscreen session onto all monitors.
•
•
Enable internal Backing Store: If this option is enabled, the window content will be saved in an internal
buffer. In the event of an expose event, buffering ensures that the window content is obtained from
the internal buffer rather than having to be retrieved from the server. This reduces the burden on the
network.
Multi Monitor Fullscreen mode: Stipulates whether the full-screen mode is to be extended to all
monitors.
5.4.4.
Keyboard
Menu path: Setup > Sessions > RDP > RDP Global > Keyboard
Configure how the keyboard reacts within RDP sessions. The following options are available:
•
•
•
Clipboard (enable or disable)
PC keyboard scan codes (convert or send directly)
Overrise local window manager keyboard shortcuts (forward or execute locally)
You can select the keyboard layout in the Session Configuration. Automatic is the default.
5.4.5.
Mapping
Menu path: Setup > Sessions > RDP > RDP Global > Mapping
In this area, you can make available locally connected devices such as printers or USB storage devices in
RDP sessions.
30
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Drive Mapping
Menu path: Setup > Sessions > RDP > RDP Global > Mapping > Drive Mapping
Through drive mapping, connected mass storage devices can be made available to the user. Specify which
folders or drives are mapped during the logon.
Via Enable drive mapping, you can temporarily enable/disable drive mapping. This offers the advantage
that stored settings can be enabled or disabled without being lost.
Local (USB) devices which are to be used for drive mapping purposes must first be set up as
devices.
To set up drive mapping, proceed as follows:
1. Click on Add to bring up the mapping window.
2. Select a Drive to map from the list under which the local device or the folder is to be mapped.
If the drive letter you have selected is no longer available on the server, the specified directory
or local drive will be given the next free letter during the logon.
3. Give the Local Drive Path to which the mapping is to refer.
If you map a locally connected device, use the pre-defined path names available in the
drop-down field. The directories in question are those on which the devices are mounted by
default during the boot procedure (e.g. /autofs/floppy for an integrated disk drive).
Serial (COM) Ports
Enable Enable COM Port Mapping in order to perform bidirectional mapping between serial devices
connected to the thin client (e.g. scanners, serial printers) and the serial ports of the Citrix server.
As a result, programs running on the server can exchange data with the local devices.
 Click on Add under Serial Devices.
 From the drop-down list, select the serial connector to which a device is connected or click on Search
Devices... to select an available device.
/dev/ttyS0
Denotes the local serial connection COM1
/dev/ttyS1
Denotes the local serial connection COM2
COM3 and COM4
Denote possible expansion cards installed in the
PCI/ISA slot, e.g. an internal modem
USB COM1 to USB
COM4
Denote serial connections to USB-to-serial adapters.
Your selection will be mapped to the virtual COM1 connection. A second device will be mapped to the
virtual COM2 connection and so on.
31
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Printers
Menu path: Setup > Sessions > RDP > RDP Global > Mapping > Printers
In this area, you can configure printer mapping.
With the Enable Client Printer mapping function, the locally connected thin client printer is made available
in your RDP sessions, provided that it was not disabled on the server side.
The printers must be set up on the Devices > Printers > CUPS > Printers page and must be
enabled there for mapping in RDP sessions.
Because the thin client merely places incoming print jobs in a queue, you need to install the printer on the
server.
Device Support
Menu path: Setup > Sessions > RDP > RDP Global > Mapping > Device Support
In this area, you can enable virtual RDP channels for communicating with various devices connected to the
thin client. These can be card readers (smartcards), dictation machines or even USB storage devices.
Channels of this type allow the device to communicate with the relevant server application. Requirements:
Enable plugin support.
When using CenterTools DriveLock, ensure that the use of USB devices is not universally
restricted: Devices > USB Access Control.
DriveLock
Menu path: Setup > Sessions > RDP > RDP Global > Mapping > Device Support > DriveLock
The virtual DriveLock channel (RDP) is included from UDLX Version 5.01.100 or higher and must be
installed on the RDP server.
DriveLock can read hardware data from local USB devices and transfer these data to the server with the
help of the Virtual RDP Channel Extension. When using whitelists, rules based on the hardware properties
of the connected drive (e.g. manufacturer details, model and serial number) are taken into account.
Requirements for configuring DriveLock
The following steps are important in order to be able to define the access rights for drives via the
DriveLock server configuration:
 Enable the USB devices via drive mapping so that they are available as drives within your terminal
session.
 Check the settings under Sessions > RDP > RDP Global > Mapping > Drive Mapping. They should
correspond to the DriveLock settings.
 Disable RDP-USB Redirection under Mapping > USB Redirection. This would otherwise prevent drive
recognition by DriveLock.
 Check the settings under Devices > Storage Devices > Hotplug Storage because they can influence the
USB devices in the RDP session.
32
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
 Install and enable the DriveLock channel under Sessions > RDP > RDP Global > Mapping > Device
Support.
In the Centertools download area, you will find a document which describes in greater detail the
procedure for configuring DriveLock on the server side: How to Use Centertools DriveLock with IGEL
Thin Clients (http://edocs.igel.com/PDF/How to use DriveLock with Igel Thin-Clients.pdf) (PDF)
Audio
Menu path: Setup > Sessions > RDP > RDP Global > Mapping > Audio
In this area, you can configure the settings for local audio transmission.
 Enable Client Audio.
 Select the Audio Quality Mode and the Audio Compression.
 Audio Capture
5.4.6.
Performance
Menu path: Setup > Sessions > RDP > RDP Global >
Performance
In this area, you can configure settings in order to improve the performance of the RDP session.
 You can disable graphics functions which are not absolutely necessary.
In low-bandwidth environments, you should use compression in order to reduce the network
traffic.
Please note that the use of compression reduces the burden on the network but does use CPU
power.
Graphic settings which you can disable are:
•
•
•
•
•
•
•
Desktop background
Window contents when moving windows
Menu and window animation
Desktop themes
Mouse pointer shadow
Mouse pointer settings
Font smoothing
33
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
RemoteFX Support
Menu path: Setup > Sessions > RDP > RDP Global > Performance > RemoteFX Support
With the Service Pack 1 for Windows Server 2008 R2, local system functions such as Windows Aero or 3D
display can be made available in RDP sessions too.
In order to do this, the RemoteFX extension for RDP must be enabled. You can configure the relevant
settings under RDP Global > Performance or in the corresponding session settings.
Figure 9: Windows Aero
Globally enabling Remote FX is not recommended as conventional RDP sessions may also be
affected by this. With RemoteFX, all graphics effects available under Performance are enabled.
This may slow down the session as a result. It is better to enable the function only for individual
sessions which establish a connection to appropriately equipped servers.
Further information on Remote FX and the server-related requirements is available from Microsoft at
http://technet.microsoft.com/de-de/library/dd736539%28WS.10%29.aspx
(http://technet.microsoft.com/en-us/library/dd736539(ws.10).aspx).
In the IGEL Registry, you can configure the number of frames sent by the server without
confirmation under the key rdp.winconnect.remotefx-ack. The default value is 1. A
value of 2 or 3 can lead to improved performance in networks with high latency times.
34
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.4.7.
Options
Menu path: Setup > Sessions > RDP > RDP Global > Options
In this area, you can configure the following settings:
Disable mouse movement
events
Instructs the client not to show "unnecessary" cursor movements in order
to conserve power.
Inverted cursor color
Black, White or Dotted are available to choose from.
You can also configure your own values 'custom:<foreground
color>,<background color>'.
The colors must be given in the ARGB8888 format, e.g. 0xFF000000.
Reset license
If you have to remove the MS license from the device, enable this option
and restart the device.
Reset confirmed server
certificates
Deletes all confirmed server certificates on the client.
RDP legacy mode
Uses the local RDP client from IGEL Linux v4 - see note below.
Client Name
Give a client name for terminal service identification - the default setting
is the host name of the computer.
Custom client name
If you have opted for a custom client name, you can enter the name here.
If the field remains empty, the MAC address of the client will be used
automatically.
Force TLS-encrypted
connections
Only TLS-encrypted connections are allowed.
Verify server certificates
Verify server certificate if the connection is TLS-encrypted.
Inform IGEL Support if problems occur with the current RDP client (IGEL Linux v5), even if they
can be avoided by using the compatibility mode. The RDP legacy mode can be disabled in a
later IGEL Linux version.
5.4.8.
Native USB Redirection
Menu path: Setup > Sessions > RDP > RDP Global > Native USB Redirection
USB devices can be permitted or prohibited during an RDP session on the basis of rules. Sub-rules for
specific devices or device classes are also possible.
 Use either Native USB Redirection or Fabulatech USB Redirection.
For Fabulatech USB Redirection, a special Fabulatech server component must be installed on the Citrix
server (USB for Remote Desktop Igel Edition).
35
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
More detailed information on the function can be found on the Fabulatech partner site:
http://www.usb-over-network.com/partners/igel/ (http://www.usb-over-network.com/partners/igel/).
Enable either native or Fabulatech USB redirection – not both together.
Disable USB redirection if you use CenterTools DriveLock.
5.4.9.
Multimedia
Menu path: Setup > Sessions > RDP > RDP Global > Multimedia
To improve video playback on the remote desktop, proceed as follows:
1. To take advantage of improved playback, ensure that the necessary codecs are installed on the remote
desktop page.
2. Enable Video Redirection on the thin client.
3. Create the session.
4. Begin playback on the remote desktop.
From IGEL Linux 5.06.100, hardware acceleration for multimedia playback is available on certain
devices. You will find more detailed information in an FAQ document on the topic
(http://edocs.igel.com/#10201440.htm).
5.4.10. Remote Desktop Web Access
Menu path: Setup > Sessions > RDP > Remote Desktop Web Access
With Web Access for Remote Desktop (Web Access for RD), users can access RemoteApp and a Remote
Desktop connection via the start menu on a computer or via a web browser.
RemoteApps and Remote Desktop connections therefore provide a modified view of RemoteApp
programs and virtual desktops for users.
More information on Web access for Remote Desktop can be found under Microsoft Technet - Web
Access for RDP (http://technet.microsoft.com/en-us/library/cc731923.aspx).
36
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Configure Access to RD Connection
Menu path: Setup > Sessions > RDP > Remote Desktop Web Access
In order to allow users access to RemoteApps, you can configure Web Access in three ways:
In the Setup under Sessions > RDP > Remote Desktop Web Access, configure:
Pre-Defined Configuration (page 37): Define several server connections with the same user access data. The
user must enter their access data and the domain in the logon window.
Ask user (page 38): The connection is pre-configured on the server side. The user only needs to enter their
corporate e-mail address.
Or select the third option:
Via browser (page 38): Access via web browser
Pre-defined configuration
Menu path: Setup > Sessions > RDP > Remote Desktop Web Access
To configure pre-defined configuration, proceed as follows:
1. Click on Remote Desktop Web Access > Connections.
2. Select Pre-Defined Configuration under Server Configuration.
3. Create a new session. See the Connections (page 39) section regarding the session settings.
Figure 10: New RD Web Access Session
4. Select a logon option under Remote Desktop Web Access > Authentication.
If you have selected Pre-Defined Configuration, the Kerberos Passthrough Authentication mode will
be available for logging on in addition to the normal user authentication process.
37
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5. Under Logoff / desktop integration (page 41), you can specify how you would like to log on or off.
You must make a setting for the logon icon because this is not pre-configured and you will not
otherwise have access to the Web Access logon.
The applications can be provided in the Application Launcher, in the Start Menu, in the Quick Start Panel
or on the Desktop. Under Appearance (page 40), you can choose from the list of available applications for
display on the desktop or in the Quick Start Panel.
Ask User
Menu path: Setup > Sessions > RDP > Remote Desktop Web Access > Server
This is a very user-friendly Web Access login.
In order to use it, the network connections connected with the user name on the server side must be
pre-configured and it must be possible to query them via DNS.
To configure the Ask user login, proceed as follows:
 Select Ask user under Server configuration.
When logging in via RD Web Access, the user will be given a login window where they must only enter
their corporate e-mail address, i.e. <name>@<domain>:
Figure 11: Ask User
Via Browser
The Web Access page for Windows Server 2012 and Windows Server 2012 R2 can also be used on a
Linux thin client in the Firefox browser.
38
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
The user only needs the corresponding URL which is entered in the address bar.
They then log on on the browser page using their user name and password.
Figure 12: Remotedesktop Web Access in Firefox
If the user clicks on one of the applications offered by Web Access, the thin client will open a logon mask
and then a remote desktop session for the chosen application.
Connections
Menupath: Setup > Sessions > RDP > Remote Desktop Web Access > Connections
In this area, you can define the connections to server locations and domains:
Figure 13: Remotedeskop Web Access
For the pre-defined configuration, specify the following values:
39
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
1. Select the protocol http:// or https://.
2. Enter the name of the Remote Desktop Web Access Server and the path to the web portal.
3. If you would like to Enable gateway support, you can choose between the settings that you have made
globally or in a custom session
If you would like to carry over the session settings, you must also specify the gateway address.
Authentication
Menu path: Setup > Sessions > RDP > Remote Desktop Web Access > Authentication
You can change logon settings on the server and select applications that are launched automatically after
logging on.
The logon settings on the server are only effective if the Server configuration option under
Sessions > RDP > Remote Desktop Web Access > Connections is set to Predefined
configuration. Further information can be found under Connections (page 39).
•
Authentication mode: Specifies how the user authenticates themselves on the server.
Possible values:
-
•
•
•
Kerberos passthrough authentication: This option can be used if the local thin client logon
takes place via Kerberos. The logon data saved temporarily when logging on to the thin client
will be used for the user name and password.
Auto logon: The logon data in user name, password and domain will be used to log on.
User logon: The user enters their data in a logon window.
User name: User name when logging on to the server.
Password: Password when logging on to the server.
Domain: Domain in which the user name and password are valid.
To select an application for automatic launching, proceed as follows:
Ensure that the Show applications on the desktop option under Sessions > RDP > Remote
Desktop Web Access > Appearance is enabled.
1. Click on
in the Launch following applications automatically after server connection is
established area.
2. In the Add dialog, enter the name of the application. Example: Word 2013
You can also enter part of the name followed by an asterisk (*). If for example you enter
Word*, all available versions of Microsoft Word as well as Microsoft WordPad will be opened.
3. Click on Next.
After a successful logon, the associated desktop icon for each available application will be placed on the
thin client desktop. All applications whose name matches one of the names given in the Launch
following applications automatically after server connection is established area will then be launched.
40
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Appearance
In this area, you can decide where you would like to display RD Web Access applications:
•
•
•
In the start menu
In the Application Launcher
On the desktop
 Enable Use extended filter in order to restrict the applications shown on the desktop to a specific
selection:
Figure 14: RD Web Access Appearance
Under Add, enter the name of the application that you would like to display on the desktop.
 You can also select applications that you would like to display in the quick launch bar.
Figure 15: Configuring Quick Start Panel
Logoff / Desktop Integration
Menu path: Setup > RDP > Remote Desktop Web Access > Logoff
In these two areas, you can specify how you would like to log on to or log off from the application:
Menu path: Setup > Sessions > Citrix XenDesktop / XenApp > Legacy ICA Sessions > [Session name] >
Desktop Integration
 Give the name of the session that you would like to integrate into the desktop.
 From the Launch Options, specify how the session is to be made accessible.
 As an option, specify a hotkey for starting the session.
 Enable Autostart to start this session immediately after the system starts. Specify by how many
seconds the session start is to be delayed when Autostart is used.
Enable Restart to restart this session after the connection is terminated.
41
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.5. Appliance Mode
Menu path: Setup > Sessions > Appliance Mode
In Appliance Mode, only a specific session is shown. Access to other applications is not possible.
To enable Appliance Mode for a session type, proceed as follows.
1. In Appliance Mode pull-down menu, select the session type for which Appliance Mode is to be enabled.
You can enable Appliance Mode for one of the following session types:
-
VMware Horizon (page 42)
Citrix XenDesktop (for published desktops only, not for published applications)
Citrix Self-Service
RHEV/Spice
Imprivata (page 43)
RDP Multipoint Server
Caradigm
2. Enter the necessary configuration data for the selected session type.
The system hotkey Ctrl + Alt + s for launching the setup application does not work in the Appliance
Mode. Use Ctrl + Alt + F2 instead.
You can set up a hotkey in order to launch quick setup in Appliance Mode. You will find
instructions for setting up the hotkey under Desktop Integration (page 19).
5.5.1.
VMware Horizon
Menu path: Setup > Sessions > Appliance Mode > VMware Horizon
•
•
•
•
•
•
•
Server URL: URL of the VMware Horizon server
Username: User name when logging on to the VMware Horizon server
User password: Password when logging on to the VMware Horizon server
Domain: Domain when logging on to the VMware Horizon server
Desktop name: Desktop that is to be launched automatically
Autoconnect: If this option is enabled, the desktop given in Desktop name will be launched
automatically.
Network Level Authentication: If this option is enabled, the user will authenticate themselves on the
network level (network layer authentication) in order to establish an RDP connection.
If network level authentication is enabled, the local logon window is used. This also applies if
the Use local login window option under Setup > Sessions > Horizon Client > Horizon Client
Global > Local Logon is disabled.
42
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
Enable on-screen keyboard: If this option is enabled and a touchscreen is available, an on-screen
keyboard will be shown.
If the on-screen keyboard is enabled, the local logon window is used. This also applies if the Use
local logon window option under Setup > Sessions > Horizon Client > Horizon Client Global >
Local Logon is disabled.
•
•
•
•
X position of the on-screen keyboard: Specifies the X position of the on-screen keyboard.
Y position of the on-screen keyboard: Specifies the Y position of the on-screen keyboard.
Width of on-screen keyboard in pixels: It is recommended that you specify either the width or the
height.
Height of on-screen keyboard in pixels: It is recommended that you specify either the width or the
height.
5.5.2.
Imprivata
Menu path: Setup > Sessions > Appliance Mode > Imprivata
•
•
•
•
•
•
•
•
•
•
•
Set the URL to the server: URL of the single sign on server
Path to the Appliance: Path to the appliance on the single-sign-on server
Clear Imprivata data partition: If this option is enabled, information on the Imprivata data partition
will be deleted.
Enable Logging of the Bootstrap Component: If this option is enabled, the bootstrap component will
generate a log.
Bootstrap Component's Logging Verbosity: Specifies the level of detail for the bootstrap component
log.
Generic session: Give the name of the Citrix session that you have configured for Citrix Fast User
Switching using generic credentials.
Enable on-screen keyboard: If this option is enabled and the screen is a touchscreen, an on-screen
keyboard will be shown.
X position of the on-screen keyboard: Specifies the X position of the on-screen keyboard.
Y position of the on-screen keyboard: Specifies the Y position of the on-screen keyboard.
Width of on-screen keyboard in pixels: It is recommended that you specify either the width or the
height.
Height of on-screen keyboard in pixels: It is recommended that you specify either the width or the
height.
43
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.6. SSH Session
Menu path: Setup > Sessions > SSH
This section describes the procedure for configuring an SSH session.
Use the SSH session to launch a remote application on the host via SSH (Secure Shell) and display it on the
terminal. SSH allows secure, encrypted communication between two hosts or host and terminal via an
unsecured network. X11 connections can also be routed via this secure channel.
Command
All necessary entries for creating an executable command to
remotely launch the application via SSH
User name (remote)
Name of the remote user - The selected user must have a user
account on the remote host.
Computer (remote)
Name or IP address of the remote host from which the remote
application is launched.
Command line
Allows you to enter the name of the application program which
is to be launched.
Forward X11 connection
X11 connections are automatically forwarded to the remote
computer so that each X11 program launched from the shell or
the command passes through the encrypted SSH channel. The
authentication data are also defined automatically. This option
is enabled by default.
Enable compression
Reduces the amount of data transmitted via the data channel This option is disabled by default.
Get protocol version
You must prove your identity to the remote host using one of
the various identification methods. These depend on the
protocol version used. In this area, you can obtain details of the
protocol version after opting for a particular identification
method.
Options
You will find detailed information on SSH and the various authentication methods on the relevant
pages of the manual for your server operating system.
44
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.7. Firefox browser
Menu path: Setup > Sessions > Browser
In order to allow central configuration via the IGEL UMS, the original configuration parameters for the
Firefox 38.4.0 ESR web browser are assigned to the IGEL setup. These global settings can be changed for
each browser session.
5.7.1.
Browser Global
Menu path: Setup > Sessions > Browser > Browser Global
In this area, you can define the start page, display resolution and font size for the browser.
You can change the following settings:
•
When browser starts: Specifies what pages are shown when the browser is launched.
-
•
•
•
•
Start with a blank page
Show my home page
Resume previous session: All tabs from the last session are reopened.
Home page: Specifies the URL of the start page. You can specify a number of start pages by separating
the URLs of the start pages with a vertical dash "|".
Display resolution: Specifies the display resolution for the browser in DPI. Typical values are 72 for
medium screens and 96 for large screens.
Minimum font size: Specifies the minimum size of the fonts displayed on websites. The formats of the
websites are overwritten in the process.
Show browser splash screen: If this option is enabled, a Firefox logo will be shown in the middle of the
screen when the browser is launched.
Tabs
Menu path: Setup > Sessions > Browser > Browser Global > Tabs
In this area, you can define settings for the browser tabs.
You can change the following settings:
45
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
New pages should be opened in: Specifies how links to new pages are to be opened.
-
•
•
•
the current window: The page will open in the current window even if the link defines a new
window as the target.
a new window: If the link does not define a target, the page will open in the current window. If
the link defines a new window as the target, the page will open in a new window.
a new tab: If the link does not define a target, the page will open in the current window. If the
link defines a new window as the target, the page will open in a new tab.
Warn me when closing mutliple tabs: If this option is enabled, a warning will be shown as soon as you
attempt to close a browser window with a number of tabs.
Warn me when opening multiple tabs might slow down the browser: If this option is enabled, a
warning will be shown as soon as you open a very large number of tabs.
When a link is opened in a new tab, switch to it immediately: If this option is enabled, the focus will
switch to the new tab when a new tab is opened by a link. If this option is disabled, the focus will be
retained when a new tab is opened by a link.
Content
Menu path: Setup > Sessions > Browser > Browser Global > Content
In this area, you can change settings regarding popups, JavaScript, downloads and the browser display.
•
Block pop-up windows: If this option is enabled, websites will be prevented from automatically
opening popups. With Exceptions..., you can allow popups to be opened automatically for specific
websites.
To add an exception for the automatic opening of popups, proceed as follows:
a) Click on Exceptions....
b) Click on
.
c) In the Website field, give the URL of the website for which the exception is to apply.
d) Click on Ok.
•
Load images automatically: If this option is enabled, websites will be loaded in full, including all images.
If this option is disabled, the images will not be loaded and placeholders will be shown instead. As a
result of this, websites can be displayed more quickly, but the layout is impaired. With Exceptions...
you can allow or prevent automatic loading for specific websites.
To add an exception for the automatic loading of images, proceed as follows:
a) Click on Exceptions....
b) Click on
.
c) In the Website field, give the URL of the website for which the exception is to apply.
d) Using the Status drop-down menu, specify whether the automatic loading of images is to be
allowed or prevented for the given website.
e) Click on Ok.
46
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
Type of download directory: Specifies the directory in which a downloaded file is saved.
-
•
•
Download path: Local directory in which the downloaded file is saved if Type of download directory is
set to user-defined path. Example: /userhome
Enable JavaScript: If this option is enabled, JavaScript will run on websites.
-
•
userhome: The file is saved locally on the thin client desktop.
user-defined path: You can specify whether the downloaded file is to be opened with an
application or saved locally.
Raise or lower windows: If this option is enabled, a website can place windows in the
background or foreground via JavaScript.
Move or resize existing windows: If this option is enabled, a website can move windows or
change the window size via JavaScript.
Disable or replace context menus: If this option is enabled, a website can define a custom
context menu via JavaScript; the browser's own context menu will be suppressed in the
process.
Languages for Web Pages: One or more preferred languages for multilingual websites, given in the
form of language abbreviations separated by commas. The languages should be given in the order of
preference. Example: With de, en, fr, it, the website will be shown in German, if available,
otherwise in English etc.
Print
Menu path: Setup > Sessions > Browser > Browser Global > Print
In this area, you can set the Default Paper Size for the printer.
•
•
Use system settings for default paper size: If this option is enabled, the paper size set globally will be
used when printing websites. If this option is disabled, you can set the paper size via Default Paper
Size.
Default Paper Size: Preset paper size when printing websites.
Proxy
Menu path: Setup > Sessions > Browser > Browser Global > Proxy
In this area, you can change the proxy configuration.
To change the proxy configuration, proceed as follows:
1. In the Proxy Configuration pull-down menu, select the type of proxy configuration.
The following proxy configurations are available:
-
Direct connection to the Internet
Manual proxy configuration
Automatic proxy configuration
System-wide proxy configuration
Auto-detect proxy settings for this network
2. Enter the necessary configuration data for the selected proxy configuration.
47
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Direct connection to the Internet
With this proxy configuration, no proxy is used.
Manual proxy configuration
The configuration data must be specified in the following fields.
•
•
•
•
•
•
•
•
•
•
•
FTP Proxy: URL of the proxy for HTTP
Port: Port of the proxy for FTP
HTTP Proxy: URL of the proxy for HTTP
Port: Port of the proxy for HTTP
SSL Proxy: URL of the proxy for SSL
Port: Port of the proxy for SSL
SOCKS Host: URL of the proxy for SOCKS
Port: Port of the proxy for SOCKS
SOCKS Protocol version: Version of the SOCKS protocol used
No Proxy for: List of URLs for which no proxy is to be used.
Proxy Realm: Area in which the browser authenticates itself for the proxy. Together with the user
name and password, this information is necessary for authentication.
The Proxy Realm field is internally pre-populated with the value moz-proxy://[HTTP
Proxy]:[Port]. If the field is empty, this value will be used when authenticating the
browser.
If the proxy expects another unknown value for the proxy realm, you can determine this as
follows: Leave the Username and Password fields empty and launch the browser. The dialog
window which appears will contain the correct value for the Proxy realm field:
In the example above, the value for the Proxy realm field is as follows:
moz-proxy://172.30.178.10:8080
•
•
•
•
Use Passthrough authentication: This option can be used if the local thin client logon takes place via
Kerberos. If this option is enabled, the logon data temporarily saved when logging on to the thin client
will be carried over for the user name and password.
Username: User name with which the browser authenticates itself for the proxy.
Password: Password with which the browser authenticates itself for the proxy.
Do not prompt for proxy authentication if credentials are saved: If this option is enabled and logon
data are already saved in the browser, the user will not be asked for a user name and password.
This option should not be enabled in multiuser environments. If this option is enabled in a
multiuser environment, a user can use the logon data of a previous user.
48
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Automatic proxy configuration
With this proxy configuration, the PAC file (Proxy Auto Config) available under URL will be used.
•
•
URL: URL of the proxy configuration file
Do not prompt for proxy authentication if credentials are saved: If this option is enabled, the user will
not be prompted to enter a user name and password if the logon data are already saved in Firefox.
This option should not be enabled in multiuser environments. If this option is enabled in a
multiuser environment, a user can use the logon data of a previous user.
System-wide proxy configuration
With this proxy configuration, the proxy configured under Setup > Network > Proxy will be used.
•
Do not prompt for proxy authentication if credentials are saved: If this option is enabled, the user will
not be prompted to enter a user name and password if the logon data are already saved in Firefox.
This option should not be enabled in multiuser environments. If this option is enabled in a
multiuser environment, a user can use the logon data of a previous user.
Automatically recognize proxy configuration for this network
With this proxy configuration, WPAD (Web Proxy Autodiscovery Protocol) will be used. The browser will
determine the URL of the WPAD file wpad.dat automatically with the help of DNS.
Privacy
Menu path: Setup > Sessions > Browser
> Browser Global > Privacy
In this area, you can configure settings relevant to data protection.
•
Store Browsing History (in days): Specifies how long your browsing history will be stored. If you select
Do not save History, all browsing history data will be lost when the browser restarts.
All browsing history data stored before the period specified here will be lost.
•
•
•
Save information entered in forms and the Search Bar: If this option is enabled, entries in forms and
search bars will be retained after the browser restarts.
Remember passwords: If this option is enabled, entered passwords will be retained after the browser
restarts.
Clear private data when closing browser: If this option is enabled, any data entered will be deleted
when the browser is closed. What data are deleted is specified in the following options.
Select the items to be cleared
•
•
•
Browsing & Download History: If this option is enabled, the addresses (URLs) of visited websites and
the list of downloads will be deleted when the browser is closed.
Form & Search History: If this option is enabled, entries in the search window and in website forms will
be deleted when the browser is closed.
Saved Passwords: If this option is enabled, any passwords entered will be deleted when the browser is
closed.
49
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
•
•
•
•
Cookies: If this option is enabled, any cookies will be deleted when the browser is closed.
Cache: If this option is enabled, the cache for temporarily saving websites will be deleted when the
browser is closed.
Active Logins: If this option is enabled, ongoing sessions on websites will be terminated when the
browser is closed and will need to be restarted after the browser restarts.
Allow private browsing feature: If this option is enabled, you can open one or more private windows in
the browser. All data from private windows will be deleted after the browser is closed.
Always start in private browsing mode: if this option is enabled, the browser will be launched in
private mode. All data will be deleted after the browser is closed.
Enable "Do Not Track" feature: If this option is enabled, the browser will inform the website you are
visiting that you do not wish to be tracked, i.e. you do not want your surfing history to be recorded.
The browser will use the DNT ("Do Not Track") field in the HTTP header for this purpose.
Observing this setting is voluntary; from a technical point of view, websites can still record the
surfing history even when DNT is set to 1.
•
Enable built-in tracking protection: If this option is enabled, the browser will block specific domains
and websites which use tracking. The browser has an internal list for selecting the domains and
websites to be blocked.
If tracking protection is enabled, a shield symbol will be shown at the left-hand edge of the
address bar.
•
Suggest visited sites in URL bar: If this option is enabled, suggestions will be shown while an address is
being typed in the address bar. The suggestions will be based on previously visited websites which are
stored in the history.
-
•
•
Suggest only typed visited sites: If this option is enabled, the suggestions will be based only on
the websites that were typed directly into the address bar. Websites that were visited via
bookmarks or links in other websites will not be used for the suggestions.
Suggest bookmarked sites in URL bar: If this option is enabled, suggestions will be shown while an
address is being typed in the address bar. The suggestions will be based on bookmarks.
Suggest open pages in URL bar: If this option is enabled, suggestions will be shown while an address is
being typed in the address bar. The suggestions will be based on previously opened tabs.
Security
Menu path: Setup > Sessions > Browser > Browser Global > Security
In this area, you can define settings for phishing and malware.
•
•
Safe Browsing: If this option is enabled, the browser will check each address entered as to whether it
can be found in the black list of fraudulent websites which use phishing. If this is the case, you will be
given a warning.
Malware Protection: If this option is enabled, the browser will check whether the relevant website can
be found in the black list of fraudulent websites which provide malware for downloading before a file is
downloaded. If this is the case, you will be given a warning.
50
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Advanced
Menu path: Setup > Sessions > Browser > Browser Global > Advanced
In this area, you can change various settings as well as add or change user-defined configuration
parameters.
You can change the following settings:
•
•
Use old searchbar: If this option is enabled, the logo of the search engine currently set will be shown in
the search window. If this option is disabled, the search engine currently set will not be shown in the
search window and search suggestions will be shown in the drop-down menu.
Always use the cursor keys to navigate within pages: If this option is enabled, caret browsing will be
enabled when the browser is launched. If caret browsing is enabled, you can navigate with the
keyboard in websites without using the mouse. With the insertion mark, you can copy text to the
clipboard.
You can enable or disable caret browsing at any time by pressing F7 . To prevent caret browsing
being disabled, you will also need to enable the Setup > Sessions > Browser > Browser Sessions
> [session name] > Settings > Hotkeys > Disable Hotkeys for Starting Caret Browsing option.
•
•
•
Find As You Type: If this option is enabled, search suggestions which match the characters typed will be
shown while you type.
Warn me when websites try to redirect or reload the page: If this option is enabled, a message
window will be shown as soon as a website tries to get the browser to load another website or reload
the current website.
Check my spelling as I type
Possible values:
-
•
•
•
Off: Your spelling will not be checked while you type.
On for multi-line controls: Your spelling will be checked if you are typing in text fields with
multiple lines.
On for multi- and single-line controls: Your spelling will be checked if you are typing in text
fields with one line or multiple lines.
Use autoscrolling: If this option is enabled, you can launch automatic page scrolling by clicking on the
middle mouse button to place a scroll symbol in the text and then positioning the mouse pointer above
or below the anchor.
Use smooth scrolling: If this option is enabled, you can browse through a page using the Page Up/Down
keys smoothly as with scrolling. If the option is disabled, the display will jump immediately when you
press the Page Up/Down keys.
Disable GStreamer in Browser: If this option is enabled, GStreamer will not be used to play back
videos. This may be a good idea if you experience problems when playing back videos.
We recommend that you disable this option if there is no multimedia codec pack installed on
your thin client and you wish to view videos on HTML5 websites.
•
Disable OpenGL acceleration: If this option is enabled, hardware acceleration with OpenGL will not be
used. This may be a good idea if you experience problems with OpenGL applications,
To add a user-defined configuration parameter, proceed as follows:
51
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Changes to the advanced Firefox browser settings can impair its stability, security and speed.
IGEL Support is not responsible for problems caused by changing the browser configuration,
even if the browser configuration was changed in the IGEL setup.
The configuration parameters can also be changed in the browser via about:config. To do
this, the Browser Sessions > [Session Name] > Window Settings > Hide Browser Configuration
Page option must be disabled.
1. In the Custom preferences area, click on
.
2. Using the Active option, specify whether the configuration parameter is to be active.
3. Specify the Mode of the configuration parameter.
Possible values:
-
pref: You can change the value in the browser via about:config. When the browser
restarts, this change will be lost and the value set here will be used.
defaultPref: You can change the value in the browser via about:config. When the browser
restarts, this change will remain.
lockPref: You cannot change the value in the browser via about:config.
clearPref: You cannot change the value in the browser via about:config and the value will
not be shown via about:config.
4. Under Custom preference, give the name of the configuration parameter. Example:
ui.textSelectBackground
5. Specify the Type of the configuration parameter.
Possible values:
-
String: The value is a string of characters.
Integer: The value is a whole number.
Boolean: The value is a Boolean value, i.e. true or false.
6. Specify the Value of the configuration parameter. The possible entries depend on the Type selected.
7. Click on Ok.
The configuration parameter will take effect the next time that the browser is launched.
You will find information regarding the configuration parameters in Firefox in the MozillaZine
Knowledge Base under Firefox About:config entries (http://kb.mozillazine.org/About:config_entries).
52
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Encryption
Menu path: Setup > Sessions > Browser > Browser Global > Encryption
In this area, you can define the settings for encryption methods and certificate validation.
•
•
•
Minimum required encryption protocol: This protocol will be used to establish a secure connection if
no higher protocol is available. Higher protocols are preferred.
Maximum supported encryption protocol: This protocol is requested when negotiating the connection.
If this protocol is not available, the next lowest protocol will be requested.
If a website requires a certificate: Specifies how the browser behaves if a website requests a security
certificate.
Possible values:
-
•
•
View Certificates: If you click on this button, the certificates saved in the browser's Certificate Manager
will be displayed.
Certificate Validation: Specifies the validation of certificates using OCSP (Online Certificate Status
Protocol).
-
-
•
•
•
•
•
•
•
•
•
•
•
•
Select one automatically: The browser selects a certificate automatically.
Ask me every time: A dialog window requesting the certificate will be displayed.
Do not use OCSP for certificate validation: The certificate will not be validated using OCSP.
Validate a certificate if it specifies an OCSP server: The certificate will be validated with the
OCSP server specified in the certificate. If no OCSP server is specified, no certificate validation
will take place.
Validate all certificates using the following OCSP server: All certificates will be validated with
the OCSP server specified under the Service URL, irrespective of which OCSP server is specified
in the certificate.
Response signer: Signer of the response from the OCSP server
Service URL: URL of the OCSP server
When an OCSP server connection fails, treat the certificate as invalid: If, owing to a failed connection
to the OCSP server, no validation can take place, the certificate will be treated as invalid. In this case,
the browser will show the This connection is not trusted error message.
Use "Aladdin eToken" Security Device: If this option is enabled, Aladdin eToken will be used for
encryption.
Use "Gemalto" Security Device: If this option is enabled, Gemalto will be used for encryption.
Use "IDProtect" Security Device: If this option is enabled, Athena IPProtect will be used for
encryption.
Use "SafeSign" Security Device: If this option is enabled, SafeSign will be used for encryption.
Use "SecMaker" Security Device: If this option is enabled, SecMaker will be used for encryption.
Use TCOS 3 NetKey Security Device: If this option is enabled, TCOS 3 NewKey will be used for
encryption.
Use TCOS 3 SigG Security Device: If this option is enabled, TCOS 3 SigG will be used for encryption.
Use TCOS 3 Elster Security Device: If this option is enabled, TCOS 3 Elster will be used for
encryption.
Use TCOS 3 SD Security Device: If this option is enabled, TCOS 3 SD will be used for encryption.
53
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Commands
Menu path: Setup > Sessions > Browser > Browser Global > Commands
In this area, you can define commands for the browser.
 Click on a command in order to enable the Edit button.
Figure 16: Commands setting
5.7.2.
Browser Sessions
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name]
In this area, you can configure desktop integration for the browser session.
•
Session name: Name for the session
The session name must not contain any of these characters:
\ / : * ? “ < > | [ ] { } ( )
•
•
Start Menu: If this option is enabled, the session can be launched from the start menu.
Application Launcher: If this option is enabled, the session can be launched with the Application
Launcher.
54
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
•
•
•
•
•
•
Desktop: If this option is enabled, the session can be launched with a program launcher on the desktop.
Quick Start Panel: If this option is enabled, the session can be launched with the Quick Start Panel.
Start Menu's System tab: If this option is enabled, the session can be launched with the start menu's
system tab.
Application Launcher's system tab: If this option is enabled, the session can be launched with the
Application Launcher's system tab.
Desktop Context Menu: If this option is enabled, the session can be launched with the desktop context
menu.
Menu folder: If you specify a folder name or a path comprising a number of folder names separated by
"/", a menu path will be created for the session. The menu path will be used in the start menu and in
the desktop context menu.
Desktop folder: If you specify a folder name or a path comprising a number of folder names separated
by "/", a menu path will be created for the session. The menu path will be used for the program
launcher on the desktop.
Password Protection: Specifies which password will be requested when launching the session.
Possible values:
-
•
•
•
•
•
•
None: No password is requested when launching the session.
Administrator: The administrator password is requested when launching the session.
User: The user password is requested when launching the session.
Setup User: The setup user's password is requested when launching the session.
Hotkey: Specifies a hotkey consisting of modifiers and a key which can be used to launch the session.
Modifiers: One or two modifiers for the hotkey
Key: Key for the hotkey
Autostart: If this option is enabled, the session will be launched automatically when the thin client
boots.
Restart: If this option is enabled, the session will be relaunched automatically after termination.
Autostart Delay: Waiting time in seconds between the thin client booting and the session being
launched automatically.
Settings
Menu path: Setup > Browser > Browser Sessions > [Session Name] > Settings
In this area, you can define the start page, display resolution and font size for the browser.
You can change the following settings:
•
When browser starts: Specifies what pages are shown when the browser is launched.
-
•
•
•
Global setting: The settings under Setup > Sessions > Browser > Browser Global are used.
Start with a blank page
Show my home page
Resume previous session: All tabs from the last session are reopened.
Home page: Specifies the URL of the start page. You can specify a number of start pages by separating
the URLs of the start pages with a vertical dash "|".
Display resolution: Specifies the display resolution for the browser in DPI. Typical values are 72 for
medium screens and 96 for large screens.
Minimum font size: Specifies the minimum size of the fonts displayed on websites. The formats of the
websites are overwritten in the process.
55
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Tabs
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings > Tabs
In this area, you can define settings for the browser tabs. You will find a description under the global
settings, see Tabs (page 45).
Content
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings > Content
You will find a description under the global settings, see Content (page 46).
Exceptions for the blocking of popups and for the automatic loading of images can only be
defined in the global settings.
Printing
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings > Printing
In this area, you can set the default paper size for the printer. You will find a description under the global
settings, see Printing (page 47).
Proxy
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings > Proxy
In this area, you can change the proxy configuration. You will find a description under the global settings,
see Proxy (page 47).
Data Protection
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings > Data Protection
In this area, you can configure settings relevant to data protection. You will find a description under the
global settings, see Data Protection (page 49).
Security
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings > Security
In this area, you can define settings for phishing and malware. You will find a description under the global
settings, see Security (page 50).
56
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Advanced
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings > Advanced
In this area, you can change various settings. You will find a description under the global settings, see
Advanced (page 50).
User-defined configuration parameters can only be added and OpenGL acceleration disabled in
the global settings.
Encryption
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings > Encryption
In this area, you can define the settings for encryption methods and certificate validation. You will find a
description under the global settings, see Encryption (page 52).
Restarting
Menu path: Setup > Sessions > Browser > Browser Sessions > [Session Name] > Settings >
Restarting
In this area, you can specify whether the browser is restarted after being closed and after what delay time.
•
•
•
Restart: If this option is enabled, the browser will be restarted automatically after being closed.
Restart Timeout enabled: If this option is enabled, the browser will be restarted automatically if, after
the time interval defined under Time limit for restarting, no action on the part of the user has
occurred.
Restart Timeout: Time interval in minutes after which the browser is automatically restarted if in the
meantime no action on the part of the user has occurred.
Window settings
Menu path: Setup > Sessions > Browser > Browser Sessions > Window
In this area, you can define the window settings for a browser session.
Figure 17: Window settings
The full-screen mode is disabled by default.
 Check the checkbox in order to enable the full-screen mode.
If you have connected a number of monitors, you can specify the start monitor here.
57
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
 Under Firefox translation, select the language that the Firefox user interface is to be translated into.
 Enable Hide local file system if you do not want the local structure to be displayed when you save files.
 Disable Hide configuration page of the browser if you would like the configuration page of the browser
to be displayed for editing.
Menus and symbol bars
Menu path: Setup > Sessions > Browser > Browser Sessions > Menus & Toolbars
In this area, you can adapt Firefox menus and symbol bars to meet your personal needs by
•
•
•
Hiding items in the menu bar
Hiding list items
Configuring the symbol bar
 Enable User customization of tool bars in order to allow the user to configure symbol bars.
 Configure the navigation symbol bar.
The following items are pre-set:
Figure 18: Navigation symbol bar
 Configure the Application menu:.
58
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
The following items are pre-set:
Figure 19: Application menu
Please note that a number of items are only shown if the corresponding feature is enabled.
 Configure the Application menu:
 Other possible items for the navigation symbol bar and the application menu are:
59
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Loop button
Zoom controls
Edit controls
History panel menu
Private browsing button
Save page button
Find button
Open file button
Developer button
Sidebar button
Feed button
Print button
Character encoding button
Social share button
Panic button
Web apps button
New window button
Fullscreen button
Tab view button
Downloads button
 Click on Reset icon configuration to default in order to undo your changes.
60
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Hotkeys
Menu path: Setup > Sessions > Browser > Browser Sessions > Hotkeys
In this area, you can disable the following Firefox hotkeys:
Figure 20: Hotkeys settings
Context menu
Menu path: Setup > Sessions > Browser > Browser Sessions >
Context
In this area, you can disable various items in the browser context menu.
Figure 21: Context menu settings
5.7.3.
Browser Plug-ins
Menu path: Setup > Sessions > Browser > Plugins
Various plug-ins such as a PDF viewer, Adobe Flash Player or Red Hat Spice are available. However, they
may need to be licensed by the user first. Integration of the SecMacer security solution Net iD can also be
configured here.
61
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Flash Player
Menu path: Setup > Sessions > Browser > Plugins > Flashplayer
Before you can download and install Adobe Flash Player, you need to confirm that the software is licensed
- IGEL Universal Desktop Linux does not contain a license to use the Flash Player.
 Activate the option I will license the flashplayer by myself to activate the Download Flashplayer page.
To install Adobe Flash Player:
You can also start the installation using the UMS context menu. For this, select Other Thin Client
commands > Download Flashplayer in the context menu.
1. Navigate to the Download Flashplayer page.
2. Activate the option I want to download Adobe flashplayer and care about the licensing by myself.
3. Adjust the following settings:
-
•
Use Firmware Update settings for download: If the option is activated, the parameters User
authentication, User name, Password, and Download URL are set to the default values and
cannot be changed.
User authentication: If the option is activated, the thin client authenticates with the server
using the access data provided in User name and Password.
Download URL: URL of the directory in which the Adobe Flash Player is stored. The default value is the
official link from Adobe. Alternatively, you can provide the storage location in your company network.
The Adobe link is valid at the time when the firmware is released, but it is subject to change. In
case the download fails, modify the URL accordingly.
-
Download File: Name of the file containing the Adobe Flash Player.
1. Click Apply or Ok.
The Adobe Flash Player is downloaded and installed.
PDF viewer
Menu path: Setup > Sessions > Browser > Plugins > PDF Viewer
Here, you can specify whether PDF documents are to be embedded in the browser or displayed in a
separate window.
RedHat Spice
Menu path: Setup > Sessions > Browser > Plugins > RHEV/Spice
In this area, you can define settings for virtual environments.
 Enable Enable browser plugin in order to display virtual desktop environments everywhere via the
Internet.
 Enable or disable Enable USB sharing.
62
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5.8. Media Player
Menu path: Setup > Sessions > Media Player
Set up the Media Player for your multimedia applications here.
IGEL Linux supports the following multimedia formats and codecs out of the box:
•
•
•
•
Ogg/Vorbis
Ogg/Theora
WAV
FLAC
The following codecs are licensed via the separately available Multimedia Codec Pack:
Supported formats:
Supported codecs:
AVI
MPEG
ASF (restricted under Linux)
WMA
WMV (restricted under Linux)
MP3
OGG
MP3
AAC
WMA stereo
WMV 7/8/9
MPEG 1/2
MPEG4
H.264
AC3 is not licensed.
IGEL Zero Clients (IZ series) have the Multimedia Codec Pack installed by default.
5.8.1.
Media Player Global
Menu path: Setup > Sessions > Media Player > Media Player Global
 Configure universal settings which will apply by default during all Media Player sessions.
You can override global settings in the individual sessions.
Window
Menu path: Setup > Sessions > Media Player > Media Player Global > Window
 Under Image Aspect Ratio, specify the required aspect ratio for video playback.
63
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
You can also choose the following options:
•
•
•
•
Full-screen mode
Automatically change window size as soon as a new video is loaded
Main window should remain in the foreground
Show operating components
Playback
Menu path: Setup > Sessions > Media Player > Media Player Global > Playback
 Specify how you would like to play back media files:
Endless loop
Automatically plays back a play list endlessly
until you stop it.
Random mode
Plays back the files in a play list in a random
order.
 If you wish, choose the visual effects to be used during audio playback.
Visualization type
Determines the visualization plug-in.
Visualization size
Determines the visualization size.
Video
Menu path: Setup > Sessions > Media Player > Media Player Global > Video
Video output
GConf:
System-wide configuration
Auto:
Automatically selects the output
XVideo:
Hardware-accelerated, uses shared memory to write images to the
graphics card memory
X11:
Not hardware-accelerated, playback via the X Window System
display protocol
 Specify the brightness, saturation, contrast and color settings for videos.
Audio
Menu path: Setup > Sessions > Media Player > Media Player Global > Audio
Audio output
Audio output type
GConf:
System-wide configuration
Auto:
Automatically selects the output
ALSA:
Direct output via kernel driver for sound cards
Select Stereo if you are working with an IGEL thin client.
64
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Options
Menu path: Setup > Sessions > Media Player > Media Player Global > Options
 Specify whether you would like to disable the screen saver during audio playback.
 Specify the network connection speed in order to influence media file playback.
 Specify the necessary buffer size for your network in order to ensure smooth audio and video playback.
 Specify whether you would like to automatically load subtitles as soon as a video begins. Currently, the
coding for subtitles is always UTF-8.
 Specify the font and text size for the subtitles.
Browser Plugin
Menu path: Setup > Sessions > Media Player > Media Player Global > Browser Plugin
If you would like to use the Media Player as a Browser Plugin, you can change the configuration values
here.
This will affect manually configured Media Player sessions.
5.8.2.
Media Player Sessions
Menu path: Setup > Sessions > Media Player > Media Player Sessions
You can set up your own personal Media Player sessions here.
1. Click on Add to create a new session.
2. Specify a session name.
3. Specify which possible ways of launching the session you would like. You may choose a number of
options here.
4. You may like to select the option of using hotkeys and define them.
5. You can also specify whether autostart (following a system start) and/or restart (after a connection is
established) are to be used.
6. For the autostart option, you can also specify by how many seconds the session start is to be delayed.
As soon as you have set up a Media Player session of your own, it will appear in the structure tree under
the Media Player Sessions directory. Your own session in turn contains three folders: Playback, Options
and Desktop Integration.
Playback
Menu path: Setup > Sessions > Media Player > Media Player Sessions > [Session
name] > Playback
 Under Medium / File, give the path of the file which is to be played back when the session is launched.
Use the following formats:
/directory/filename
or
http://servername/filename.
65
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
For the window settings, you can choose whether you would like to carry over the global settings or use
your own settings for this special session.
Options
Menu path: Setup > Sessions > Media Player > Media Player Sessions > [Session name] > Options
If necessary, you can change the pre-configured settings for the operating components here.
5.9. Java Web Start Session
Menu path: Setup > Sessions > JWS Sessions
You can set up one or more Java Web Start sessions. This can be for example an IGEL UMS console running
as Java Web Start.
To set up a Java Web Start session, proceed as follows:
1. In the JWS Sessions area, click on
.
A new Java Web Start session will be created.
2. Configure the Java Web Start session. You will find further information under Java Web Start Session
(page 66).
5.9.1.
Java Web Start Session
Menu path:Setup > Sessions > JWS Sessions > Java Session
You can change the following settings:
•
•
•
•
•
•
•
•
Session Name: Name of the Java Web Start session.
Start Menu: If this option is enabled, the Java Web Start session can be launched in the start menu.
Application Launcher: If this option is enabled, the Java Web Start session can be launched with the
Application Launcher.
Desktop: If this option is enabled, the Java Web Start session can be launched with a program launcher
on the desktop.
Quick Start Panel: If this option is enabled, the Java Web Start session can be launched in the Quick
Start Panel.
Start Menu's System tab: If this option is enabled, the Java Web Start session can be launched in the
start menu's system tab.
Application Launcher's system tab: If this option is enabled, the Java Web Start session can be
launched in the Application Launcher's system tab.
Desktop Context Menu: If this option is enabled, the Java Web Start session can be launched in the
desktop context menu.
66
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
•
Menu folder: If you specify a folder name or a path comprising a number of folder names separated by
"/", a menu path will be created for the Java Web Start session. The menu path will be used in the start
menu and in the desktop context menu. Example: "Functions/Screen functions".
Desktop folder: If you specify a folder name or a path comprising a number of folder names separated
by "/", a menu path will be created for the Java Web Start session. The menu path will be used for the
program launcher on the desktop. Example: "Functions/Screen functions".
Password Protection: Specifies the password request when launching the Java Web Start session.
Possible values:
-
•
•
•
•
•
None: No password is requested when launching the Java Web Start session.
Administrator: The administrator password is requested when launching the Java Web Start
session.
User: The user password is requested when launching the Java Web Start session.
Setup User: The setup user's password is requested when launching the Java Web Start
session.
Hotkey: Specifies a hotkey consisting of modifiers and a key which can be used to launch the Java Web
Start session.
Modifiers: One or two modifiers for the hotkey
Key: Key for the hotkey
Autostart: If this option is enabled, the Java Web Start session will be launched automatically when the
thin client boots.
Autostart Delay: Waiting time in seconds between the thin client booting and the Java Web Start
session being launched automatically.
Java Web Start
Menu path: Setup > Sessions > JWS Sessions > Java Session
In this area, give the address of the JNLP file which is needed for launching the Java Web Start session. The
file is loaded into the cache before being executed.
The browser's global proxy settings are used when downloading the JNLP file. You will find a
description of these proxy settings under Browser Global Proxy.
If a proxy is to be used only for the browser but not for the Java Web Start session, give the
address of the JNLP file under Setup > Sessions > Browser > Browser Global > Proxy > No Proxy
for.
•
JNLP file: Address of the JNLP file. Example: http://www.server.com/example.jnlp
5.10. VNC Viewer
Menu path: Setup > Sessions > VNC Viewer
Create a VNC Viewer session in order to be able to access remote computers (VNC server) via the thin
client. Connection options such as the server address or the full-screen mode can be pre-populated for
each session or defined individually when the system starts.
If a server address is specified for the session, the connection dialog will not appear when the
session starts – the connection will be established immediately.
67
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.
Accessories
Menu path: Setup > Accessories
Information on other accessories provided by the Universal Desktop can be found here.
6.1. Local Terminal
Menu path: Setup > Accessories> Terminals
With a terminal session, you can execute local commands via a shell.
It is also possible to access a local shell without a terminal session: You can switch to the virtual
terminals tty11 and tty12 by pressing Ctrl + Alt + F11 / Ctrl+ Alt + F12.
6.2. Change Smartcard Password
Menu path: Setup > Accessories> Change Smartcard Password
Set up a session in order to change your IGEL smartcard password. Details of the setup procedure for your
IGEL smartcard can be found under Security > Login > Smartcard.
6.3. Smartcard Personalization
Menu path: Setup > Accessories > Smartcard Personalization
Configure the options to start the Smartcard Personalization (page 140).
6.4. Setup Session
Menu path: Setup > Accessories> Setup
Specific areas of the setup can be made available to the user, even if the overall setup can only be accessed
by the administrator. This is useful for example for keyboard and mouse settings or for screen
configuration.See Enable Setup Pages for Users (page 17).
6.5. Quick Settings Session
Menu path: Setup > Accessories> Quick Setup
Specific areas of the setup can be made available to the user, even if the overall setup can only be accessed
by the administrator. This is useful for example for keyboard and mouse settings or for screen
configuration. See Quick Setup (page 16).
68
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.6. Display switch
Menu path: Setup > Accessories > Display Switch
Display switch is a function of the IGEL Linux firmware which allows you to configure settings for the
display on various screens.
In order to use the function, you will need to enable it and set it up:
 Enable screen selection by enabling one of the starting methods under Accessories > Display Switch.
 Configure a Hotkey in order to determine a hotkey or an icon for this session.
 If necessary, specify Autostart options.
 Configure the following settings under Accessories > Display Switch > Options:
-
Dialog Type - Specify how the screen selection dialog is to look:
Minimal Dialog - Basic settings such as Mirror or Expand, for a maximum of two displays.
Advanced Dialog - The user themselves can change the resolution or rotation outside the setup.
-
Preserve settings over reboot - Save the display settings so that they can be reused in the
event of a reboot.
This setting has no function under the following condition: You work with Shared Workplace
and have assigned profiles to various users via the UMS. You can save the default settings for
users who are not assigned a profile. With the other users, these settings will be overwritten
by the profile from the UMS.
-
Configure new displays when connected - As soon as you connect a new display, a
configuration window will open.
Specify the buttons for the minimal dialog:
-
Mirror displays - Integrates an icon for shadowing displays.
Extend to the left - Integrates an icon for expanding the the screen content to the left display.
Extend to the right - Integrates an icon for expanding the screen content to the right display.
Rotate displays (Page orientation) - Integrates an icon for rotating the display.
Mouse options - Integrates an icon for mouse settings like lefthand mode, mouse speed or
double click time.
Advanced - Allows you to jump to the advanced dialog in the minimal dialog.
Reset - Allows resetting to the setup settings in the dialog.
69
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.7. Application Launcher
Menu path: Setup > Accessories > Application Launcher
•
Session name: Name for the session
The session name must not contain any of these characters:
\ / : * ? “ < > | [ ] { } ( )
•
•
•
•
•
•
•
•
•
•
Start Menu: If this option is enabled, the session can be launched from the start menu.
Application Launcher: If this option is enabled, the session can be launched with the Application
Launcher.
Desktop: If this option is enabled, the session can be launched with a program launcher on the desktop.
Quick Start Panel: If this option is enabled, the session can be launched with the Quick Start Panel.
Start Menu's System tab: If this option is enabled, the session can be launched with the start menu's
system tab.
Application Launcher's system tab: If this option is enabled, the session can be launched with the
Application Launcher's system tab.
Desktop Context Menu: If this option is enabled, the session can be launched with the desktop context
menu.
Menu folder: If you specify a folder name or a path comprising a number of folder names separated by
"/", a menu path will be created for the session. The menu path will be used in the start menu and in
the desktop context menu.
Desktop folder: If you specify a folder name or a path comprising a number of folder names separated
by "/", a menu path will be created for the session. The menu path will be used for the program
launcher on the desktop.
Password Protection: Specifies which password will be requested when launching the session.
Possible values:
-
•
•
•
•
•
•
None: No password is requested when launching the session.
Administrator: The administrator password is requested when launching the session.
User: The user password is requested when launching the session.
Setup User: The setup user's password is requested when launching the session.
Hotkey: Specifies a hotkey consisting of modifiers and a key which can be used to launch the session.
Modifiers: One or two modifiers for the hotkey
Key: Key for the hotkey
Autostart: If this option is enabled, the session will be launched automatically when the thin client
boots.
Restart: If this option is enabled, the session will be relaunched automatically after termination.
Autostart Delay: Waiting time in seconds between the thin client booting and the session being
launched automatically.
70
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Under Application Launcher > Configuration, you can hide the following items from the user:
•
•
•
•
System page
"Reboot" button
"Shut down" button
Network information page
6.8. Sound Mixer
Menu path: Setup > Accessories > Sound Preferences
Use the sound control to adjust the output volume and the input level as well as the balance between the
input and output.
Figure 22: Sound control
The system's default volume can be configured or muted in Accessories > Sound Mixer > Configuration.
These parameters can also be remotely set via IGEL UMS.
6.9. System Log Viewer
Menu path: Setup > Accessories > System Log Viewer
All available system logs are updated and displayed. You can add your own log files in the options. The
contents of the selected log can be searched in the viewer and also copied (e.g. for support purposes).
71
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Figure 23: System logs
6.10. UMS Registration
Menu path: Setup > Accessories > UMS Registration
Registration of the thin client in the IGEL Universal Management Suite can also be performed locally.
1. Open the Application Launcher.
2. In the System area, launch the UMS Registering application.
Figure 24: Remote Administration
72
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
3. Enter the Server Address, Login and Password for your UMS server.
If there is a corresponding DNS entry for the UMS server, you can leave the default value
igelrmserver in the address field.
4. Optional: Define a Structure Tag in order to sort the thin client into a directory in accordance with the
UMS directory rules.
Further information regarding the use of structure tags can be found in the "Using Structure Tags" Best
Practice (http://edocs.igel.com/index.htm#10202089.htm)
5. Optional: Select a directory on the server.
6. Optional: The New Hostname specifies the name under which the client will be registered in the UMS.
7. Click Register.
6.11. Touchscreen calibration
Menu path: Setup > Accessories > Touchscreen Calibration
Enable the calibration program for your touchscreen here and specify how you would like to bring it up.
After launching the calibration program, you will see a pattern with calibration points which must be
touched one after another.
Further setting options can be found under Touchscreen.
6.12. Task Manager
Menu path: Setup > Accessories > Taskmanager
This function provides an overview of the applications and other processes running on the thin client.
Information regarding use of this function can be found under Using the Task Manager (page 74). The
settings for launching the function are described below.
 To apply a changed setting, click on Apply.
 To apply a changed setting and close the setup, click on OK.
You can change the following settings:
73
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
•
•
•
•
•
•
•
•
•
Session Name: Name for the Taskmanager function
Start Menu: If this option is enabled, the Task Manager can be launched in the start menu.
Application Launcher: If this option is enabled, the Task Manager can be launched with the Application
Launcher.
Desktop: If this option is enabled, the Task Manager can be launched with a program launcher on the
desktop.
Quick Start Panel: If this option is enabled, the Task Manager can be launched in the Quick Start Panel.
Start Menu's system tab: If this option is enabled, the Task Manager can be launched in the start
menu's system tab.
Application Launcher's System tab: If this option is enabled, the Task Manager can be launched in the
Application Launcher's system tab.
Desktop Context Menu: If this option is enabled, the Task Manager can be launched in the desktop
context menu.
Menu folder: If you specify a folder name or a path comprising a number of folder names separated by
"/", a menu path will be created for the Task Manager. The menu path will be used in the start menu
and in the desktop context menu. Example: "Functions/Screen functions".
Desktop folder: If you specify a folder name or a path comprising a number of folder names separated
by "/", a menu path will be created for the Task Manager. The menu path will be used for the program
launcher on the desktop. Example: "Functions/Screen functions".
Password Protection: Specifies the password request when launching the Task Manager.
Possible values:
-
•
•
•
•
•
•
None: No password is requested when launching the Task Manager.
Administrator: The administrator password is requested when launching the Task Manager.
User: The user password is requested when launching the Task Manager.
Setup user: The setup user's password is requested when launching the Task Manager.
Hotkey: Specifies a hotkey consisting of modifiers and a key which can be used to launch the Task
Manager.
Modifiers: One or two modifiers for the hotkey
Key: Key for the hotkey
Autostart: If this option is enabled, the Task Manager will be launched automatically when the thin
client boots
Restart: If this option is enabled, the Task Manager will be relaunched automatically after termination.
Autostart Delay: Waiting time in seconds between the thin client booting and the Task Manager being
launched automatically.
6.12.1. Using the Task Manager
The following section explains how to use the Task Manager.
 Launch the Task Manager function. The launch options are described under Task Manager (page 73).
To determine the thin client's total processor usage, proceed as follows:
 Read the percentage value under CPU:.
To determine the thin client's total memory usage, proceed as follows:
 Read the percentage value under RAM:.
74
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
 To determine the value in bytes, click on
and enable the Show memory usage in bytes option.
To determine the extent to which a specif. ic application contributes to processor usage, proceed as
follows:
1. In the search window, enter the name of the application or part of the name.
The Task Manager will now show only the relevant applications and processes.
2. Read the percentage value for the relevant application in the CPU column.
To determine the extent to which a specific application contributes to memory usage, proceed as follows:
1. In the search window, enter the name of the application or part of the name.
The Task Manager will now show only the relevant applications and processes.
2. Read the values in the VSZ and RSS columns.
The VSZ column shows how much memory is available for the application. The RSS column shows how
much memory the application is currently using.
 If the VSZ column is not shown, click next to
on
and enable the Virtual Bytes option.
 If the RSS column is not shown, click next to
on
and enable the Private Bytes option.
75
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.13. Screenshot tool
Menu path: Setup > Accessories > Screenshot Tool
With this function, you can take a screenshot.
Information regarding use of this function can be found under Taking a screenshot (page 77). The settings
for launching the function are described below.
 To apply a changed setting, click on Apply.
 To apply a changed setting and close the setup, click on OK.
You can change the following settings:
•
•
•
•
•
•
•
•
•
•
•
Session Name: Name for the Screenshot Tool function.
Start Menu: If this option is enabled, the Screenshot Tool function can be launched from the start
menu.
Application Launcher: If this option is enabled, the Screenshot Tool function can be launched with the
Application Launcher.
Desktop: If this option is enabled, the Screenshot Tool function can be launched with a program
launcher on the desktop.
Quick Start Panel: If this option is enabled, the Screenshot Tool function can be launched from the
Quick Start Panel.
Start Menu's System tab: If this option is enabled, the Screenshot Tool function can be launched in the
start menu's system tab.
Application Launcher's System tab: If this option is enabled, the Screenshot Tool function can be
launched in the Application Launcher's system tab.
Desktop Context Menu: If this option is enabled, the Screenshot Tool function can be launched in the
desktop context menu.
Menu folder: If you specify a folder name or a path comprising a number of folder names separated by
"/", a menu path will be created for the Screenshot Tool. The menu path will be used in the start menu
and in the desktop context menu. Example: "Functions/Screen functions".
Desktop folder: If you specify a folder name or a path comprising a number of folder names separated
by "/", a menu path will be created for the Screenshot Tool. The menu path will be used for the
program launcher on the desktop Example: "Functions/Screen functions".
Password Protection: Specifies the password request when launching the Screenshot Tool function.
Possible values:
-
None: No password is requested when launching the Screenshot Tool function.
Administrator: The administrator password is requested when launching the Screenshot Tool
function.
User: The user password is requested when launching the Screenshot Tool function.
Setup user: The setup user's password is requested when launching the Screenshot Tool
function.
76
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
Hotkey: Specifies a hotkey which can be used to launch the Screenshot Tool function.
You can also define a hotkey for taking a screenshot under Setup > User Interface > Hotkeys >
Commands, see Hotkeys (page 110).
•
•
•
•
•
Modifiers: Combination of modifiers for the hotkey. You can specify a modifier, a combination of an
unlimited number of modifiers or no modifier.
Key: Key for the hotkey
Autostart: If this option is enabled, the Screenshot Tool function will be launched automatically when
the thin client boots.
Restart: If this option is enabled, the Screenshot Tool function will be relaunched automatically after
termination.
Autostart Delay: Waiting time in seconds between the thin client booting and the Screenshot Tool
function being launched automatically.
6.13.1. Taking a screenshot
To take a screenshot of the active window, proceed as follows:
1. Press the keys Alt + Print simultaneously.
2. Specify how the screenshot is to be used. You have the following options:
-
-
Save: If this option is enabled, the screenshot will be saved in PNG format via your thin client.
You can save the screenshot locally, on a network drive or on a USB mass storage device.
Copy to the clipboard: If this option is enabled, the screenshot will be available in the thin
client's local cache. You can access the local cache from an RDP session and open the image in
an RDP session application.
Open with: If this option is enabled, the screenshot will be opened in your thin client's image
viewer as soon as it is taken.
To take a screenshot of the entire screen or a selectable region, proceed as follows:
1. Launch the Screenshot Tool function by pressing Ctrl + Print simultaneously. More launch options are
described under Screenshot (page 76).
2. Select the area you would like to photograph. You have the following options:
-
Entire screen: If this option is enabled, the entire screen contents will be photographed.
Active window: If this option is enabled, the window which is currently the focus will be
photographed.
Select a region: If this option is enabled, you can freely select part of the screen using the
mouse.
Capture the mouse pointer: If this option is enabled, the mouse pointer will be visible on the
screenshot.
3. Specify the Delay before capturing in seconds. The minimum value is 1.
4. Click on Ok.
If you have enabled Entire screen or Active window, the screenshot will be taken after the Delay
before capturing has elapsed.
If you have enabled Select a region, you can select the desired part of the screen using the mouse. To
do this, press and hold the left mouse button while dragging the mouse across the screen.
5. Specify how the screenshot is to be used. You have the following options:
77
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
-
-
Save: If this option is enabled, the screenshot will be saved in PNG format via your thin client.
You can save the screenshot locally, on a network drive or on a USB mass storage device.
Copy to the clipboard: If this option is enabled, the screenshot will be available in the thin
client's local cache. You can access the local cache from an RDP session and open the image in
an RDP session application.
Open with: If this option is enabled, the screenshot will be opened in your thin client's image
viewer as soon as it is taken.
6.14. Soft keyboard
Menu path: Setup > Accessories > Soft keyboard
In this area, you can enable the On-Screen Keyboard for use with our IGEL UD10 or any other touchscreen.
In order to display the on-screen keyboard, you can either automatically launch it or show the On-Screen
Keyboard button in the taskbar. These settings can be configured for the following cases:
•
•
If the logon dialog is visible
If the screen is locked
This setting has no effect on the on-screen keyboard in the appliance mode.
You can also influence which special keys are shown on the keyboard. These also apply for the appliance
mode. The following three options are available to choose from:
•
•
•
Function keys
Navigation keys
Numeric keys
You will find additional settings under Keyboard and Additional Keyboard (page 108).
6.15. Java Control Panel
Menu path: Setup > Accessories > Java Control Panel
The Java Control Panel is an operating console which is used for various purposes.
 Specify how Java runs on your computer on the basis of various parameters.
 Manage temporary files used for the Java plug-in.
By doing this, you allow your web browser to use Sun Java to execute applets and Java Web Start. As a
result, you can launch Java applications via the network.
 Check certificates via the operating console. This gives you the security you need to use applets and
applications via the network.
 Define runtime parameters for applets executed with Java plug-in and applications executed with Java
Web Start.
78
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Further information can be found at
http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/jcp.html
(http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/jcp.html).
6.16. Monitor Calibration
Menu path: Setup > Accessories > Montor Calibration
When calibrating your monitor (auto adjust), please use this special pattern. Generally speaking, you will
achieve better results than if you calibrate the monitor with a conventional desktop and windows. Clicking
on the pattern with the mouse closes the application again.
6.17. Commands
Menu path: Setup > Accessories > Commands
The following system commands can be made accessible to the user:
•
•
•
•
•
Log out
Sort symbols
Switch off terminal
Restart terminal
Restart window manager
6.18. Network Diagnostics
Menu path: Setup > Accessories > Network Tools
The IGEL Universal Desktop Linux firmware features a number of tools for network analysis. These
include:
•
•
•
•
•
Device information (page 79)
Ping (page 80)
Netstat (page 80)
Traceroute (page 80)
Look-up (page 81)
6.18.1. Device Information
This tool provides information regarding the status of the network device used. This includes:
•
•
•
MAC and IP address
Link speed
Various interface statistics (bytes transferred, errors etc.)
79
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.18.2. Ping
The Ping tool allows you to send contact queries to a network address. You can specify the exact number of
queries to be sent. Alternatively, you can enable Unlimited Requests which means that the echo requests
will be sent until you stop the process.
The Ping result is shown below, and the Ping duration of the last five Pings is illustrated in a bar chart.
Figure 25: Ping network tools
 Enable Program→Signal Tone for Ping to configure the thin client to output an audible signal each time
a Ping is sent.
6.18.3. Netstat
Netstat provides information on active network services with protocol and port information as well as a
routing table and multicast information for your network devices.
6.18.4. Traceroute
With Traceroute, you can trace the route to a network address.
80
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.18.5. Look-up
The Look-up tool shows various information regarding your network address. The available information
types are shown in this screenshot.
Figure 26: Information types for network address
6.19. System Information
Menu path: Setup > Accessories > System Information
The system information provides an overview of all internal and connected thin client hardware
components as well as the constituent parts of the Linux system (e.g. kernel modules). The information
shown can be copied to the clipboard in order to send it to the IGEL Support department for example.
6.20. Disk Utility
Menu path: Setup > Accessories > Disk Utility
Drive management shows all recognized USB drives along with their respective properties (device name,
mount point etc.).
81
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Figure 27: Drive management
 If Dynamic Client Drive Mapping is enabled, you will find a button to safely remove external drives here.
 You can configure a Hotkey for opening Disk Utility.
6.21. Firmware Update
Menu path: Setup > Accessories > Firmware Update
This session updates the firmware with the settings saved in System > Update > Firmware Update.
6.22. Smartcard Personalization
Menu path: Setup > Accessories > Smartcard Personalization
Configure the options to start the Smartcard Personalization (page 140).
6.23. Identify Monitors
Menu path: Setup > Accessories > Identify Monitors
82
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Shows the screen number from the IGEL setup and hardware information on every connected screen.
Figure 28: Identify screens
6.24. Upgrade License
Menu path: Setup > Accessories > Upgrade License
You can distribute additional firmware functions via the IGEL Universal Management Suite or import
licenses locally to a thin client. To do this, an IGEL USB stick with a smartcard or a storage medium
containing licenses that have already been produced for this device must be inserted.
Figure 29: Firmware license upgrade
83
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.25. Webcam Information
Menu path: Setup > Accessories > Webcam Information
The Webcam Information tool reads information such as the manufacturer, model and supported video
formats from a connected webcam. A test image from the camera with the chosen settings can also be
displayed.
 Launch Webcam Information in the Application Launcher (System).
 Select a resolution and click Test in order to display the camera image.
Figure 30: Webcam information
A list with all supported video formats can be created in the Linux Console using the command:
webcam-info -l .
Figure 31: Command webcam-info -l
In order to check whether the webcam is functioning in a session (e.g. redirected via Citrix HDX
Webcam Redirection), open the website cameroid.com (http://cameroid.com) in your browser within
the session (Adobe Flash must be installed).
84
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
6.26. Image viewer
The GPicview image viewer is installed from IGEL Universal Desktop Linux 5.06.100.
Applications such as the Firefox browser or the file manager use the image viewer as an
auxiliary application. The image viewer does not have a menu entry for opening it directly.
The image viewer can be used to view a wide range of graphic MIME types:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
image/bmp
image/gif
image/jpeg
image/jpg
image/png
image/x-bmp
image/x-pcx
image/x-tga
image/x-portable-pixmap
image/x-portable-bitmap
image/x-targa
image/x-portable-greymap
application/pcx
image/svg+xml
image/svg-xml
An entry in the FAQ (https://faq.igel.com/otrs-igel/public.pl?Action=PublicFAQZoom;ItemID=680)
explains how you can change the way in which they are assigned.
Instructions for using the image viewer can be found on the Ubuntu Users website.
(http://wiki.ubuntuusers.de/GPicview)
Figure 32: Image Viewer
85
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.
User Interface
You can configure the user interface according to your needs.
7.1. Screen
Menu path: Setup > User Interface > Display
Figure 33: Screen settings
Color Depth
Allows you to select the desktop color depth. The following options are
available:
•
•
16 bits per pixel (High Color / 65,000 colors)
24 bits per pixel (True Color / 16.7 million colors)
Make sure that all screens connected to the thin client support the color setting.
86
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
DDC
Allows you to activate the Display Data Channel in order to share information
between the system and the screen. If screen problems should occur, enable
and disable the DDC setting in the Options by way of a test. DDC is enabled by
default and the native resolution supported by the screen is determined
automatically.
Screen configuration
Every screen connected to the IGEL UD device can be configured independently.
The position of the individual screens can be determined in relation to Screen
1. Click on Identify monitors to show the screen identifier on each device.
For details of the display resolution supported by your IGEL thin client, please see its data sheet.
If you use the Shared WorkPlace (SWP) feature with user-specific display resolutions, please note the
best practice on the subject (http://edocs.igel.com/index.htm#10202975.htm).
7.1.1.
Energy options
Menu path: Setup > User Interface > Display> Power Options
In this area, you can handle display power management. Your screen must support Display power
management signaling (DPMS).
Figure 34: Display power Management Options
 Enable Handle display power management in order to switch on the DPMS energy saving functions.
 Specify separately for battery and mains operation the number of minutes before the screen switches
to a specific energy-saving mode:
Three different modes are offered:
87
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
-
Standby time (standby mode)
Suspend time (sleep mode)
Off time (Off)
If a device is switched on but not used for some time, energy can also be saved by reducing the brightness
of the screen.
 Specify by how many percent the brightness of the screen is to be reduced and how long the period of
inactivity before brightness reduction should be. Values between 10 seconds and two minutes are
available to choose from.
Naturally, all stages are gone through only if the X-Server does not receive any new entries during
this period.
7.1.2.
XDMCP
Menu path: Setup > User Interface > Display> XDMCP
Enable the XDMCP function for the screen in order to be able to select the appropriate connection type.
Please note that the local setup can then be accessed only using the hotkey Ctrl + Alt + s . This should
therefore not be disabled for the setup application (Accessories→Setup).
Figure 35: Display XDMCP
Connection type
Allows you to select the appropriate connection type. If you select
broadcast, the graphical logon from the first XDMCP server that responds
to a broadcast query will be provided. If you choose the connection type
indirect via local host, a list of XDMCP hosts will be shown during the
startup procedure. Select from this list the host that provides the graphical
logon.
Name or IP of server
This field is enabled if you select the connection type direct or indirect.
Give the name or the IP address of the XDMCP server you wish to use. In
the direct mode, you are provided with the graphical logon mask straight
from the XDCMP server which you specified in the entry field. If you chose
the indirect mode, a list of available XDMCP servers will be shown by the
server you specified.
88
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Make sure the Display Manager daemon (XDM, KMD, GDM ...) is running and that access
authorization is available on the remote host.
7.1.3.
Access control
Menu path: Setup > User Interface > Display> Access Control
Thin client access control is enabled by default. If you highlight Switch off console access, it will be possible
to access your terminal screen from any UNIX host.
Figure 36: Access Control
Fixed X-Key
You can grant specific users permanent remote access to your thin client.
To do this, you will need to enable this option, click on the Calculate button
and enter the 32-character key you have received into the Xauthority file on
the user's computer.
List of Trusted X hosts
Click on the Add button to open the entry mask. Give the name of the
remote host (not the IP address) you would like to add and confirm this by
clicking on OK.
7.1.4.
Gamma correction
Menu path: Setup > User Interface > Display> Gamma correction
89
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
In this area, you can increase or decrease the various brightness ranges in order to adjust the display on
your screen to your preferences.
Figure 37: Gamma correction
90
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.1.5.
Desktop
Menu path: Setup > User Interface > Desktop
On this page, you can configure general settings for the appearance of the desktop:
•
•
•
•
•
•
•
•
•
Local Window Manager for this Display: Here, you can disable the window manager if you only work in
full-screen sessions and do not require this service.
User Interface Theme
Desktop Icon Size: Specify the size in which you would like the icons to be displayed on the desktop.
Single Click Mode: This option was set up specially for users of touchscreen monitors. Enable this mode
in order to open programs with a single click.
Default Font: Choose between serif and sans-serif text and between standard and bold.
Default Font Size: Specify your desired font size in pt (points) here.
Desktop Icon Font Size: Specify your desired font size for desktop icons in pt (points) here.
Titlebar Font: Choose between serif and sans-serif text and between standard and bold.
Titlebar Font Size: Specify your desired font size in pt (points) here.
Background
Menu path: Setup > User Interface > Desktop > Background
In this area, you can configure the desktop background with pre-defined IGEL backgrounds, a fill color or a
color gradient.
You can also select a background image of your own.
You can set up a separate background image for each monitor that is connected to the thin
client.
Own background image - server configuration
•
•
Wallpaper: Provides a selection of pre-defined IGEL backgrounds
Wallpaper Style: Provides various design versions:
-
•
•
Automatic
Centered
Tiled
Streched
Scaled
Zoomed
Color Style: Sets a fill color or a color gradient.
Desktop Color: Sets a desktop color.
You can also use a background image of your own. You can set up a separate background image
for each monitor that is connected to the thin client.
 You can provide a user-specific background image on a download server.
91
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
1. In the Desktop > Background window, enable the option Own background image.
2. Give a name for the background image file.
3. Specify the download server under Desktop > Background > Background Image Server.
If you have already defined a server for the system update files, you can use the same server
setting for downloading the background image.
The user-specific background image will be downloaded from the specified server if the function was
enabled and if requested manually (Update Background Image). The download can also be launched from
the IGEL Universal Management Suite via Update desktop changes.
A user-specific boot image can be provided on a download server.
The file types BMP, JPG, GIF, TIF, PNG and SVG are supported for an own background image
and bootsplash. A total storage area of 25 MB is available for all user-specific images.
Task bar
In this area, you can enable and configure the task bar.
Figure 38: Desktop Task Bar
92
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Under Window button sorting order, you can specify how the opened windows are to be sorted in the task
bar:
Time stamp:
The buttons are not sorted – they remain in chronological
order according to when they were created.
Window title:
The buttons are listed alphabetically.
Drag and drop:
You can arrange the buttons in any order using drag and
drop. You must drag a button far enough – at least over half
of the button to be skipped.
Groups:
You can also sort the applications in group form according
to time stamp and window title. All setup applications for
example would then be together and sorted accordingly.
Pager
Menu path: Setup > User Interface > Desktop > Pager
In this area, you can enable the use of a number of virtual workstations.
The Pager is a tool with virtual desktops which can be used as an easy way of switching between open
applications. This window is shown at the right of the taskbar. You can use up to 25 virtual desktops. If you
use a Pager, you can switch between full-screen applications for example at the click of a mouse.
Instead of minimizing/maximizing sessions or switching between them using key combinations, you simply
click on the desired screen using the mouse. The screen is then shown as it was when you closed it (unless
you restarted the system beforehand).
•
•
•
•
•
Use pager: Allow a number of virtual desktops.
Number of Screens - Horizontal: Specify how many pages you want to display next to each other.
Number of Screens - Vertical: Specify how many pages you want to display above each other.
Names of the workspaces: Give names for the individual desktops.
Paging Resistance: Specify how many pixels the cursor needs to be moved over the edge of the screen
before it triggers a switch of desktop. You only need to make this setting if you enable at least one of
the following options:
-
Wrap Workspaces when dragging a window: The desktop is switched as soon as a window is
dragged out of view.
Wrap Workspaces with pointer: The desktop is switched as soon as the mouse reaches the
edge of the screen.
93
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Start menu
Menu path: Setup > User Interface > Desktop > Start Menu
In this area, you can configure the desktop start menu:
Figure 39: Desktop Start menu
There are three start menu types:
Legacy:
Standard setting which is similar to that from Windows
95 - a list of available sessions and options
Advanced:
An expanded start menu featuring a search function and
a more attractive design It requires more resources,
which is particularly noticeable on slow devices.
Auto:
Automatically select the classic or advanced start menu
depending on the processor.
7.1.6.
Options
Menu path: Setup > User Interface > Display> Options
Configure the options for the display here:
Figure 40: Display options
94
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Monitor Probing (DDC)
Select Off in order to disable the automatic probing of display properties.
Monitor DPI
Enter the DPI resolution (dots per inch) for your monitor. The default
setting is 96 DPI.
Composite Manager
You will find three modes for the Composite Manager, the start menu and
windows with animations and effects here:
7.1.7.
•
Automatic: Disables the Composite Manager during battery operation,
if the color depth is low or if the hardware is weak.
•
•
On
Off
Universal MultiDisplay
The IGEL Universal MultiDisplay (UMD) solution enables you to set up an extended desktop with up to
eight screens in any arrangement (the individual screen areas must however be in contact with each other
at one edge and corner, and cannot overlap).
A master thin client (master) can be connected to up to three satellite thin clients (satellite), while one
or two screens can be connected to each of the thin clients within the group. Only the master is connected
to the company network. The satellites are connected, via their own network, only to the master, which
must have a second network card for this purpose.
All other peripherals such as a keyboard, mouse etc. are connected to the master. The entire system is also
configured on the master, either via its local setup or the IGEL Universal Management Suite UMS.
Figure 41: IGEL Universal MultiDisplay Setup
95
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Software Requirements
The following software requirements must be met in order to use IGEL Universal MultiDisplay:
•
IGEL UD Linux firmware offering IGEL Universal MultiDisplay support on the master and satellites
Note: Devices with IGEL Universal Desktop OS cannot be used for IGEL Universal MultiDisplay.
•
•
IGEL Universal MultiDisplay Starter Kit license for up to three displays (2x master, 1x satellite)
IGEL Universal MultiDisplay license for each additional display connected
Note: You will receive the Starter Kit license along with the master thin client. Licenses for
additional displays can be added to the master thin client in the IGEL Universal Management
Suite Console (System > License Management).
Hardware and Network Requirements
The following requirements must be met in order to use IGEL UMD:
•
•
•
•
Master: IGEL UD5-x30 LX thin client with PCIe network card installed
Satellite: Up to 3 IGEL thin clients with Universal Desktop Linux
The master is connected to the company network via the internal Ethernet port. The additional PCIe
network card is used to connect one satellite directly, or a number of satellites via an intermediate
switch.
Depending on the particular hardware configuration, screens can be connected to the master and the
satellites via the VGA, DVI or display port.
Advanced Options
In the IGEL Registry under Setup→System→Registry, you will find a number of additional parameters
which are not yet available in the actual screen configuration:
x.dmx.number_of_screens_master and x.dmx.number_of_screens_slaveX allow you to define only one
connected monitor for a particular thin client (the default setting is two available monitors per device). This
makes sense if two or more UD5s, each with a high-resolution monitor, are to be connected together via
the display port for example.
The master saves the list of available satellites. A satellite can be deleted from the list via the x.dmx.slaveX
parameter by selecting Delete Instance.
The satellites can be arranged in any order by making changes in x.dmx.slaveX.number. However, there is
no consistency check, so you must therefore carry out a manual check to ensure that the numbering is
clear.
With x.dmx.net, the automatic configuration of the internal network between the master and clients can
also be carried out manually, e.g. the IP address of the master or the address area of its DHCP server.
96
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Configuration
Once you have connected the master and satellites to each other as described above, switch on the master
thin client. In the master setup, enable IGEL Universal MultiDisplay under User Interface→Screen→IGEL
Universal MultiDisplay.
Select the number of screens and set the resolution, rotation etc. for each one. You can select the screens
from the list or simply by clicking on them in the arrangement overview.
Using drag & drop, arrange the screens in the overview in the same way as they are physically arranged.
When all screens are configured, confirm your choices by clicking on OK.
Now switch on the satellites, one after another, starting with satellite 1. After powering up a satellite, wait
around 30 seconds before switching on the next one. The satellites will receive their configuration,
including IP address, from the master. IGEL Universal MultiDisplay is now ready for use.
Usage
Once you have carried out the initial setup procedure as described above, you will not need to touch the
satellites again. The satellites are automatically shut down when you switch off the master and reactivated
when the master boots. Subsequent firmware updates will also be distributed automatically to the
satellites by the master. All changes to the screens' configuration (arrangement and resolution of the
screens, desktop background for each screen, screensaver etc.) should be made on the master (locally or
via the UMS). Naturally, this also applies to all other options, e.g. sessions.
You can move application windows freely over all the screens and enlarge the windows so that they cover
screen boundaries. If you maximize windows, they are usually enlarged to cover the area of the current
screen. Depending on the session type, sessions in full-screen format may be restricted to a specific screen
or can be expanded across all screens.
7.2. Desktop
Menu path: Setup > User Interface > Desktop
On this page, you can configure general settings for the appearance of the desktop:
•
•
•
•
•
•
•
•
•
Local Window Manager for this Display: Here, you can disable the window manager if you only work in
full-screen sessions and do not require this service.
User Interface Theme
Desktop Icon Size: Specify the size in which you would like the icons to be displayed on the desktop.
Single Click Mode: This option was set up specially for users of touchscreen monitors. Enable this mode
in order to open programs with a single click.
Default Font: Choose between serif and sans-serif text and between standard and bold.
Default Font Size: Specify your desired font size in pt (points) here.
Desktop Icon Font Size: Specify your desired font size for desktop icons in pt (points) here.
Titlebar Font: Choose between serif and sans-serif text and between standard and bold.
Titlebar Font Size: Specify your desired font size in pt (points) here.
97
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.2.1.
Background
Menu path: Setup > User Interface > Desktop > Background
In this area, you can configure the desktop background with pre-defined IGEL backgrounds, a fill color or a
color gradient.
You can also select a background image of your own.
You can set up a separate background image for each monitor that is connected to the thin
client.
Own background image - server configuration
•
•
Wallpaper: Provides a selection of pre-defined IGEL backgrounds
Wallpaper Style: Provides various design versions:
-
•
•
Automatic
Centered
Tiled
Streched
Scaled
Zoomed
Color Style: Sets a fill color or a color gradient.
Desktop Color: Sets a desktop color.
You can also use a background image of your own. You can set up a separate background image
for each monitor that is connected to the thin client.
 You can provide a user-specific background image on a download server.
1. In the Desktop > Background window, enable the option Own background image.
2. Give a name for the background image file.
3. Specify the download server under Desktop > Background > Background Image Server.
If you have already defined a server for the system update files, you can use the same server
setting for downloading the background image.
The user-specific background image will be downloaded from the specified server if the function was
enabled and if requested manually (Update Background Image). The download can also be launched from
the IGEL Universal Management Suite via Update desktop changes.
A user-specific boot image can be provided on a download server.
The file types BMP, JPG, GIF, TIF, PNG and SVG are supported for an own background image
and bootsplash. A total storage area of 25 MB is available for all user-specific images.
98
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.2.2.
Taskbar
Menu path: Setup > User Interface > Desktop > Taskbar
In this area, you can enable and configure the taskbar.
You can change the following settings:
•
•
Use taskbar: If this option is enabled, the taskbar will be displayed.
Taskbar Position: Specifies the position in which the taskbar is displayed.
Possible values:
-
•
Bottom
Top
Left
Right
Vertical Taskbar Mode: Specifies how items are shown in the taskbar. This parameter is available if
Taskbar Position is set to Left or Right.
Possible values:
-
•
Vertical: The session texts are rotated by 90°.
Deskbar: The session texts are not shown.
Taskbar Height/Width: Specifies the height of the taskbar in pixels.
If Number of rows/columns in Taskbar is set to Automatic, the window buttons as well as the
symbols in the Quick Start Panel will be shown in a number of rows depending on the height of
the taskbar. The number of rows increases in increments of 55 pixels:
•
•
•
1 - 55 pixels: One row
56 - 110 pixels: Two rows
111 - 165 pixels: Three rows
• 166 - 220 pixels: Four rows
• 221 - 275 pixels: Five rows
• 276 or more pixels: Six rows
The Maximum number of rows/columns in window button list parameter is described under
Taskbar Items (page 101).
99
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
Number of rows/columns in taskbar: Specifies the number of rows for the Quick Start Panel. The
following taskbar items can be broken down into a number of rows and columns: Symbols in the Quick
Start Panel, window buttons,
-
•
•
•
•
•
Automatic: The number of rows for the Quick Start Panel depends on the height and width of
the taskbar.
Numeric value: The chosen value specifies the number of rows for the Quick Start Panel.
Multi Monitor Taskbar Size: Specifies whether the taskbar is expanded across a number of monitors or
restricted to one monitor.
Monitor: Specifies the screen on which the taskbar is shown. This parameter is available if Multi
Monitor Taskbar Size is set to Restrict taskbar to one monitor.
Taskbar on top of all windows: If this option is enabled, the taskbar is always shown, even in sessions
with a full-screen window.
Taskbar Auto Hide: If this option is enabled, the taskbar is hidden and will only be shown if the mouse
pointer is moved to the position of the taskbar at the edge of the screen.
Auto Hide Behavior: Specifies when the taskbar is automatically hidden.
Possible values:
-
•
Intelligently: The taskbar is shown as standard. The taskbar will be hidden if the space is
needed by a window, e. g. a window in full-screen mode.
Always: The taskbar is hidden as standard. The taskbar will be shown if the mouse pointer is
moved to the edge of the screen.
Taskbar Show Delay: Time interval in milliseconds before the taskbar is shown. The mouse pointer
must be at the edge of the screen constantly during this time interval. This setting is only effective if
Taskbar Auto Hide is enabled.
With the show delay, you can prevent the taskbar for a full-screen session being covered by the
thin client's taskbar. A show delay is necessary if the taskbar for the full-screen session is set to
be shown automatically and both taskbars are positioned at the same screen edge. If no show
delay is set and the user brings up the taskbar for the full-screen session, this will immediately
be covered by the thin client's taskbar.
During the show delay time interval, the user has time to move the mouse pointer away from
the edge of the screen.
•
Taskbar Hide delay: Time interval in milliseconds before the taskbar is hidden. This setting is only
effective if Taskbar Auto Hide is enabled.
Further settings can be found under Screen Lock/Saver (page 104).
100
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.2.3.
Taskbar background
Menu path: Setup > User Interface > Desktop > Taskbar Background
You can specify the background style for the taskbar here.
To incorporate your company logo into the taskbar, proceed as follows:
1. Select Background Image under Background Style.
2. Give the path of the background image.
See also Taskbar (page 99) under User Interface.
7.2.4.
Taskbar items
Menu path: Setup > User Interface > Desktop > Taskbar Items
•
•
Taskbar Clock: If this option is enabled, a clock will be shown in the taskbar.
Sorting order in window button list: Specifies the criteria according to which the window buttons are
sorted.
Possible values:
-
-
•
Timestamp: The window buttons are sorted in the chronological order in which the windows
were opened.
Group and time stamp: The window buttons are grouped according to the type of application.
If for example a number of setup applications are open, all associated window buttons will be
arranged next to each other. Within the group, the window buttons are sorted chronologically.
Window title: The window buttons are sorted alphabetically.
Group and window title: The window buttons are grouped according to type. If for example a
number of setup applications are open, all associated window buttons will be arranged next to
each other. Within the group, the window buttons are sorted alphabetically.
Drag'n'Drop: You can order the buttons as you wish using drag and drop. You must drag a
button over at least half of the button to be skipped.
Maximum number of rows/columns in window button list: Specifies the maximum number of rows
available for window buttons.
Possible values:
-
•
•
•
Automatic: The number of rows depends on the Taskbar height/width and Number of
rows/columns in taskbar parameters, see Taskbar (page 99).
Numeric values: This value specifies the maximum number of rows.
Show labels in window button list: If this option is enabled, the names of ongoing sessions are shown
in the associated window buttons. If this option is disabled, only the symbols are shown.
Taskbar System Tray: If this option is enabled, the system tray will be shown in the taskbar.
Size of icons in system tray: Specifies the size of system tray icons (volume, network connection etc.).
101
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
You can choose a pre-defined value or enter a numeric value between 1 and 64.
Predefined values:
-
Automatic: The size is adjusted to the height and width of the taskbar.
Small: 20 pixels
Medium: 40 pixels
Large: 60 pixels
Further settings can be found under On-screen Keyboard (page 78), Keyboard and Additional Keyboard
layouts (page 108) and Screen Lock/Saver (page 104).
7.2.5.
Pager
Menu path: Setup > User Interface > Desktop > Pager
In this area, you can enable the use of a number of virtual workstations.
The Pager is a tool with virtual desktops which can be used as an easy way of switching between open
applications. This window is shown at the right of the taskbar. You can use up to 25 virtual desktops. If you
use a Pager, you can switch between full-screen applications for example at the click of a mouse.
Instead of minimizing/maximizing sessions or switching between them using key combinations, you simply
click on the desired screen using the mouse. The screen is then shown as it was when you closed it (unless
you restarted the system beforehand).
•
•
•
•
•
Use pager: Allow a number of virtual desktops.
Number of Screens - Horizontal: Specify how many pages you want to display next to each other.
Number of Screens - Vertical: Specify how many pages you want to display above each other.
Names of the workspaces: Give names for the individual desktops.
Paging Resistance: Specify how many pixels the cursor needs to be moved over the edge of the screen
before it triggers a switch of desktop. You only need to make this setting if you enable at least one of
the following options:
-
Wrap Workspaces when dragging a window: The desktop is switched as soon as a window is
dragged out of view.
Wrap Workspaces with pointer: The desktop is switched as soon as the mouse reaches the
edge of the screen.
102
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.2.6.
Start menu
Menu path: Setup > User Interface > Desktop > Start Menu
In this area, you can configure the desktop start menu:
Figure 42: Desktop Start menu
There are three start menu types:
Legacy:
Standard setting which is similar to that from Windows
95 - a list of available sessions and options
Advanced:
An expanded start menu featuring a search function and
a more attractive design It requires more resources,
which is particularly noticeable on slow devices.
Auto:
Automatically select the classic or advanced start menu
depending on the processor.
7.2.7.
Session Control Bar
Menu path: Setup > User Interface > Desktop > In-Session Control Bar
The session control bar allows you to eject a USB drive from a full-screen session, to minimize a session
view and to end the session.
•
Use in-session control bar in all supported sessions: If this option is enabled, the session control bar
will be displayed. Depending on the configuration, the session control bar will be permanently visible or
will be shown as soon as you move the cursor to the top edge of the screen.
103
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
The session control bar is available for the following session types:
•
•
•
•
•
RDP - see RDP Global
Citrix - see HDX / ICA Global, Legacy ICA Sessions and Citrix StoreFront / Web Interface
ThinLinc - see ThinLinc
NX - see NX
Parallel 2X Client - see Parallel 2X Client
To use the session control bar, proceed as follows:
 To eject a USB device, click on
.
 To minimize the session view, click on
 To end the session, click on
.
.
 To make the session control bar permanently visible, click on
.
7.3. Language
Menu path: Setup > User Interface > Language
Select the system language from the list. You can also set the keyboard layout and the input language
depending on the system language.
The language selected is the language for the user interface and therefore applies to all local
applications.
7.4. Screen Saver and Screen Lock
Menu path: Setup > User Interface > Screen Lock/Saver
You can set up the screen saver so that it is activated either automatically or in response to a key
combination (hotkey). You can also select a password option. The look of the taskbar can be configured
separately for the login dialog and the locked screen.
Example configuration of a screen lock:
104
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
General
The screen can be locked via taskbar or desktop icons or using hotkey Ctrl-Shift-L .
Figure 43: Startup Options of Screen Lock
Options
The screen lock starts automatically after 5 minutes without user action at the thin client. The screen lock
can be stopped by entering a user password or administrator password (see Password (page 139)).
Figure 44: Autostart and Password Settings
105
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Taskbar
The locked screen does not display the taskbar until the login dialog appears. The user can bring up a soft
keyboard, e.g. to login using touchscreen monitor.
Figure 45: Taskbar on Login Dialog
7.4.1.
Example configuration for the screen saver
Menu path: Setup > User Interface > Screen Lock/Saver > Screensaver
The session for the screen saver can show both a custom image and a configurable clock.
You can select the color of the background, display a custom image (or several images as a slide show) or a
digital clock whose size and color can be changed. A combination of a company logo and the clock can also
be displayed.
In our best practice you will find an example configuration and further instructions on how to
customize your IGEL Linux desktop.
1. Connect a network drive with your saved images.
You can also send images to the thin client, e.g. to a /wfs/pix target directory, using UMS file
transfer.
2. Enable the displaying of images in the configuration menu for the screen saver and use the network
drive connected beforehand as the source.
106
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Figure 46: Select image source
If you enter a folder instead of a single image file as the source, all images in the folder will be
displayed as a slide show, the display time for the images can be configured.
 You can configure a digital clock (size, position on the screen and colors) independently of the screen
display. The seconds display can be disabled.
Figure 47: Clock configuration
107
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.5. Input
Menu path: Setup > User Interface > Input
These setup pages allow you to set the keyboard layout and other input options.
The following input devices can be configured:
•
•
•
•
Keyboard (page 108)
Mouse (page 108)
Touchscreen
Signaturpad (page 109)
7.5.1.
Keyboard and additional keyboard
Menu path: Setup > User Interface > Input > Keyboard
In this area, you can configure the keyboard.
•
•
•
Keyboard layout – Determines the keyboard layout. The selected layout applies for all parts of the
system including emulations, window sessions and X applications.
Keyboard type – Determines the keyboard type.
Key repeat – Determines the automatic repeat behavior for the keyboard:
-
•
Repeat delay – Determines the delay (in milliseconds) before automatic repetition begins.
Repeat rate – Determines how often a character repeats per second.
Enable dead keys – Enable this function if the keyboard used supports dead keys for special
characters.
Start with NumLock on – Stipulates that NumLock is to be automatically enabled during the boot
procedure.
Menu path: Setup > User Interface > Input > Additional Keyboard Layouts
 You can define additional keyboard layouts which can be selected by the user. The layout can be
selected in the taskbar or changed via configurable hotkeys.
Further settings can be configured under On-screen Keyboard (page 78).
108
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.5.2.
Mouse
Menu path: Setup > User Interface > Input > Mouse
In this area, you can configure the mouse.
•
•
•
•
•
•
Lefthand mode: Changes the orientation of the mouse by switching the mouse buttons to left-handed
mode.
Emulate 3-button mouse: Enables/disables emulation of the third (middle) mouse button for mice with
only two physical buttons. This third button is emulated by pressing both buttons at the same time. If
3-button emulation was enabled, the emulation time limit determines how long (in milliseconds) the
driver waits before deciding whether two buttons were pressed at the same time.
Hide cursor: Cursor will be hidden after the defined timeout.
Pointer Speed: Determines the mouse resolution in counts per inch.
Double Click interval: Changes the maximum interval (in milliseconds) between two consecutive mouse
clicks which are to be recognized as a double-click.
Double Click Distance: Changes the maximum distance in pixle between two clicks, considered as
double click. The object under the second click receives the double click.
7.5.3.
SCIM (Input Methods)
Menu path: Setup > User Interface > Input > SCIM Input Methods Platform
Smart Common Input Method (SCIM) platform offers entry methods for over 30 languages under Linux.
You can enable one of the methods provided by the IGEL system for Chinese character sets (Simplified
Chinese, Traditional Chinese) or manage generic tables for describing the entry method.
7.5.4.
Signature pad
Menu path: Setup > User Interface > Entry > Signature Pad
The following signature pads are available for connection to IGEL Linux thin clients:
•
•
•
Softpro
StepOver TCP
signotec VCOM Daemon
Enable the Softpro SPVC signature pad channel in the IGEL Setup under Sessions > Citrix
XenDesktop / XenApp > HDX / ICA Global > Mapping > Device Support.
To enable the StepOver TCP Client in order to be able to use USB signature pads from this manufacturer in
sessions, proceed as follows:
1. Select the checkbox for StepOver TCP Client.
If necessary, you can change the TCP port.
2. Click on Apply.
109
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
You will find detailed information regarding the configuration of signature pads in the Best Practice
documents for StepOver Pads (http://edocs.igel.com/#10202863.htm) and Softpro/Kofax pads
(http://edocs.igel.com/#10202863.htm).
To enable the signotec VCOM Daemon in order to be able to use USB signature pads from this
manufacturer in sessions, proceed as follows:
1. Select the checkbox for signotec VCOM Daemon.
2. Click on Apply.
3. Go to Mapping > Serial Connections under ICA or RDP Global.
4. Enable COM Port Mapping.
5. Click on Add and choose one of these devicesSearch Devices.
Under Select Available Device, you can choose from the signotec devices /dev/ttyVST0 and
/dev/ttyVST1.
6. Select one of these devices.
7. Your signotec signature pad can now be used.
7.6. Hotkeys
Menu path: Setup > User Interface > Hotkeys > Commands
In order to make it easier to use your thin client, hotkeys are available for frequent operating routines. A
hotkey is a combination of one or more modifiers and an alphanumeric key.
You can enable or disable hotkeys and change the keys used.
To enable or disable a hotkey, proceed as follows:
1. Highlight the hotkey in the list.
2. Click on Modify....
3. Enable or disable the Hotkey option in the dialog window.
4. Click on Continue in the dialog window.
5. Click on Apply or OK.
To change the keys used for a hotkey, proceed as follows:
1. Highlight the hotkey in the list.
2. Click on Modify....
3. In the Modifiers selection list, select a modifier, no modifier or a combination of modifiers.
4. Enter the Key.
5. Click on OK or Cancel.
110
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
The following hotkeys are available and can be changed:
•
•
•
•
•
•
•
•
•
•
•
•
•
Hide all windows and show desktop
Screenshot of active window
Screenshot of entire screen
Volume up (multimedia key)
Volume down (multimedia key)
Volume mute (multimedia key)
Switch between active windows using Task Switcher
Switch between active windows using Task Switcher (backwards)
Switch focus to next window
Switch focus to next window (2)
Enable next window (reverse order)
Open start menu
Open start menu (2)
7.7. Font Services
Menu path: Setup > User Interface > Fonts Services
You can import further fonts in addition to those
•
•
provided by IGEL:
XC font service (page 111)
NFS font service (page 111)
7.7.1.
XC Font Service
Menu path: Setup > User Interface > Fonts Services > XC Font Service
If you need other fonts in addition to those offered by the thin client, you can use the XC font service.
This service must be installed on a server and fully configured there.
The advantage of using the XC font service rather than NFS is its better performance.
 Click on Enable XC Font Service in order to enable the following entry fields.
XC font server
Give the name of the server on which the XC font service operates.
Port number
Give the number of the port used by the font service for reception purposes
- the default setting is port number 710.
Favor local fonts
Enable this option if local fonts are to be used before a request is sent to the
font server.
111
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
7.7.2.
NFS Font Service
Menu path: Setup > User Interface > Fonts Services > NFS Font Service
Using the NFS font service is another way to import additional fonts. The NFS font service also offers the
advantage that the mount point for the fonts can be configured. This is necessary for a number of remote
applications that search for your fonts in a specific directory.
 Define and enable an NFS font path entry in order to use the NFS font service.
This will be added to the list of NFS mounted font directories.
 Click on Add to open the dialog window:
Local directory
Defines the local directory for the mount point
NFS server
Name or IP address of the server that makes available the font directories via
NFS.
Server path
Path on the server under which the fonts are available.
Favor local fonts
If this option is enabled, local fonts are to be used before a request is sent to the
font server.
 Click on Enable to enable the entry.
 Export the font directory to the server via NFS read-only for the thin client.
112
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
8.
Network
Menu path: Setup > Network
Configure the thin client's network connections here.
8.1. LAN interfaces
Menu path: Setup > Network > LAN Interfaces
 Click on Network >LAN interfaces in the client setup.
 Choose between automatic network setup with the protocols DHCP and BOOTP or manual network
configuration in order to set the thin client for each network interface.
Figure 48: LAN Interfaces
113
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
DHCP
Via the Dynamic Host Configuration Protocol, the thin client receives its IP address,
network mask, DNS, gateway and other network configurations from a DHCP server.
DHCP is enabled by default for LAN 1 (internal). DHCP options can be enabled in the
DHCP Client menu. A list of standard options is available. However, you can also
define your own options.
BOOTP
Via the BOOTP, the thin client receives its IP address, network mask, DNS, gateway
and other network configurations from a BOOTP server database.
The transferring of a setup.ini file or a boot script is not supported. BOOTP is not used to call
up a boot image from a server and boot this image, in spite of what the term may imply.
Specify IP address
manually
Configures the network settings manually instead of searching for a DHCP server.
Ensure that the fixed IP address that you enter is not used by another computer in
your network.
If you have to use a gateway to forward the data packages to and from the target
network, click on Enable and enter the gateway IP address.
Terminal name
Give the local name of the thin client. Otherwise, the standard name IGEL <MAC
address> will be generated.
Enable DNS
Configures the DNS - Specify the standard domain in which the device will work as
well as the IP address of up to two name servers which will be queried one after the
other.
Manual overwrite
DHCP settings
Manual entries overwrite the standard route, the domain name and the DNS servers.
Dynamic DNS
registration
Here, you can automatically report the current IP address of the thin client to the
DNS. The DHCP and DNS methods are available. If you select DNS, you may have to
specify a private TSIG key for DNS authentication.
You can find instructions for dynamic DNS registration via DNS in an FAQ document
(http://edocs.igel.com/index.htm#10203508.htm).
114
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
8.1.1.
Individual interface
Menu path: Setup > Network > LAN Interfaces > [Interface]
Under the name of the individual interface (for example Interface 1), you can overwrite some of the
general settings for LAN interfaces. In addition, there are two further settings:
IPv6 configuration
Here, you can choose a configuration type for operation with IPv6. You will
find further details in a best practice document
(http://edocs.igel.com/index.htm#10203497.htm).
Network link type
Specify the network link type for the interface. The default is Automatic
Recognition.
Figure 49: Configuration of an individual interface
Authentication
Menu path: Setup > Network > LAN Interfaces > [Interface] > Authentication
You can enable and configure network port authentication in accordance with the IEEE 802.1x standard
here. The following settings are available:
•
•
Enable IEEE-802.1x authentication: This option enables network port authentication.
EAP Type: You can choose between the PEAP and TLS authentication procedures here.
For the EAP Type PEAP, the following phase 2 authentication methods are available to choose
from under Auth Method:
• MSCHAPV2
•
•
TLS
•
GTC
•
MD5
Validate Server Certificate: If this option is enabled, the certificate of the server will be checked
cryptographically. In order to do this, the path to the CA certificate file is required in CA Root
Certificate. The file can be in PEM or DER format.
A number of the following fields need to be filled in only for specific combinations of EAP type
and Auth Method.
115
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
•
Manage certificates with SCEP (NDES): Automatically manage client certificates with SCEP (page 126)
Identity: The user name for network access
Password: The password for network access
If you leave the Identity and Password fields empty, an entry mask for authentication purposes
will be shown. However, this does not apply to the methods with a client certificate (TLS and
PEAP-TLS) where these details are mandatory.
•
•
Client Certificate: Path to the file with the certificate for client authentication in the PEM (base64) or
DER format. If a private key in the PKCS12 format is used, leave this field empty.
Private key: Path to the file with the private key for the client certificate. The file can be in the PEM
(base64), DER or PFX format. The Private Key Password may be required for access.
Wake-on-LAN
Menu path: Setup > Network > LAN Interfaces > [Interface] > Wake on LAN
Select the packages or messages with which the thin client can be started via the network.
Figure 50: Wake-on-LAN options
8.2. Wireless
Menu path: Setup > Network > LAN Interfaces > Wireless
In this area, you can configure everything relating to your wireless connections.
You will find details of compatible wireless modules in our IGEL Linux 3rd Party Hardware Database
(https://www.igel.com/en/service/linux-3rd-party-hardware-database.html).
If you use mobile devices and regularly spend time in different wireless zones, you will benefit from our
new function: IGEL Café Wireless.
116
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
This means that you can
•
•
easily connect to new, previously unknown wireless networks
save connections that you have set up and then reuse them later on
straight from the user interface via the Wireless Manager (page 118) as you would with a smartphone. This
function is irrelevant for stationary desktop devices that are managed centrally. In this case, it is assumed
that the network has fixed settings and cannot be influenced by the end user.
To configure the wireless interface, proceed as follows:
1. Open the IGEL Setup and click on Network > LAN Interfaces > Wireless.
Figure 51: Enable user-defined connections
2. Enable the Wireless Interface.
3. Select the configuration for your IP Addresses (DHCP or manual).
4. Select a configuration type for operation with IPv6.
5. Enable at least the tray icon, context menu and Wireless Manager (page 118) items. Via the Wireless
Manager (page 118), you can use IGEL Café Wireless.
Ensure that the Overwrite sessions parameter is disabled for UMS profiles with this wireless
configuration. Otherwise, user-defined connections will be lost when the thin client is
rebooted.
6. Configure the wireless network connection in the Default Wi-Fi network (page 121) dialog if you do not
select it via the Wireless Manager (page 118).
Additional connections can be configured in the Additional Wi-Fi networks dialog.
7. Configure your location in the Wireless regulatory domain (page 122) dialog.
117
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Once these settings become active on the thin client, a new tray icon for wireless connections will appear:
Figure 52: WiFi symbol
8.2.1.
Wireless Manager
You can bring up the Wireless Manager from the tray icon:
Figure 53: Symbol bar with WiFi context menu
You will need to have switched on the Wireless Manager under Network > LAN Interfaces >
Wireless (page 116)
1. Click on the Wireless Tray Icon in the task bar and then on Manage wireless network connections in
order to bring up the Wireless Manager:
Figure 54: Wireless Manager
118
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
2. Search for available networks.
-
The list of active networks is sorted according to the quality of their signal strength.
Previously configured connections are flagged with a tick in the Configured column.
The connection currently active is likewise flagged with a symbol under Connected.
3. Double click on a network in the list in order to open the entry mask. If you are using the Wireless
Manager for configuration, you only need to give the network key – this is considerably easier than
using the Setup or the UMS for configuration:
Figure 55: Configure WiFi connection
You can either permanently save the logon information or enter it each time you establish a
connection to this network.
Click on the key symbol in order to display the key phrase while you are typing.
4. Click on the Connect network button in order to establish the previously configured connection:
Figure 56: Establish connection to WiFi
The tray icon will change and show the quality of the connection to the active network.
119
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Hidden networks appear in the Wireless Manager with the network name empty or can be defined
using the Search for network button:
Figure 57: Hidden network
In order to connect to a previously unknown hidden network, you must first enter the SSID before the
access data are retrieved:
Figure 58: Name of the hidden network
If you have configured the available connections, you will no longer need the Wireless Manager
in order to establish a connection.
Figure 59: Symbol bar with active connection
In the context menu for the tray icon, all available networks are listed and can be brought up from
here.
120
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
5. The IGEL Setup shows all connections configured by the local user locally and in the UMS under
Network > LAN Interfaces > Wireless > Other WLANs:
Figure 60: User-defined WiFi connections in the IGEL Setup
A Yes in the User-defined column means that you can change or delete this connection in the
Wireless Manager. A connection that you have set up in the Wireless Manager is automatically
user defined. Connections that are specified in the Setup or in the UMS can also be flagged as
user defined. In most cases, however, this would not make much sense. After all, the end user
should only be able to delete the connections that they themselves have set up, e.g. when
traveling.
8.2.2.
Configure Connections in the Setup
Menu path: Setup > Network > LAN Interfaces >Default Wi-Fi network
In the Default Wi-Fi network and Additional Wi-Fi networks areas, you can configure wireless network
connections:
Figure 61: WiFi configuration
1. Select an Encryption Method.
2. Enter the Network Name (SSID).
3. Set further parameters depending on the encryption method selected.
121
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
For WPA(2) Enterprise encryption, the client certificate can also be requested and administered via
SCEP. See Network/SCEP (page 127) and our Certificate Enrollment and Renewal with SCEP (NDES)
(http://edocs.igel.com/#10200572.htm) best practice.
The connections defined under Additional Wi-Fi networks have the same value as the connection entered
under Default Wi-Fi network. Here, you can pre-configure wireless connections which are available for
selection by the user in the Wireless Manager (page 118).
The connections configured in the Wireless Manager (page 118) are likewise shown in the Additional Wi-Fi
networks list and are automatically flagged as User-defined.
Connection to Hidden Networks
Hidden wireless networks (WLAN without SSID broadcasting) can also be connected to. Pre-defined
connections can be used without disclosing the network name to the user. For user-defined connections,
the user must however know the name of the hidden network.
To pre-configure connections to hidden networks, proceed as follows:
 In the IGEL Setup, go to Network > LAN Interfaces > Wireless > Default Wi-Fi network and set the AP
Scan Mode parameter to No Broadcast.
Figure 62: Connection configuration for hidden networks
Additional connections can be configured in the Other Additional Wi-Fi networks dialog.
8.2.3.
Wireless regulatory domain
Menu path: Setup > Network > LAN Interfaces > Wireless > Wireless regulatory domain
In this area, you can configure your location:
Figure 63: WiFi frequency ranges
Ensure that the Wireless regulatory domain is configured correctly in order to prevent your
device making unauthorized transmissions.
122
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
8.3. DHCP Options
Menu path: Setup > Network > DHCP Client > Standard Options / Custom Options
Configure the client's use of DHCP options - a number of standard options are already set out in a list and
can be enabled. User-defined options can be set up in a list of your own and managed there.
8.4. Virtual Private Network - VPN
Menu path: Setup > Network > VPN
Remote users securely access company networks via virtual private network protocols (VPN). You can set
up your client accordingly for this purpose.
8.4.1.
PPTP
Menu path: Setup > Network > VPN > PPTP
PPTP (point-to-point tunneling protocol) is one of the most common virtual private network (VPN)
protocols allowing remote users to securely access company networks.
Automatically establishing a connection during the boot procedure
In order to set up a client which is fully configured to automatically establish a connection, you may need to
dial up first.
1. Enable this option before the desktop is launched.
The client connects to the host.
2. Click on Add to set up new connections.
3. Configure the necessary settings in order to dial up the RAS server on the desired remote station.
4. Select the network device and specify whether a dial-up connection is to be used.
5. Specify on the Options tab the name service and the IP configuration for the PPTP connection.
These data will normally be transferred from the remote station's RAS server. This means that both
DNS and IP address will be set to automatic by default.
You can set up additional network routes on the next three setup pages (Routing).
8.4.2.
OpenVPN
Menu path: Setup > Network > VPN > OpenVPN
The OpenVPN client puts in place a virtual private network using TLS encryption and requires OpenVPN 2.x
as a VPN server.
It supports the following authentication methods:
123
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
•
•
TLS certificates
Name/password
Name/password and certificates
Static key
Click on the star symbol to set up a new OpenVPN connection.
A best practice document (http://edocs.igel.com/index.htm#10203430.htm) describes how you can set
up OpenVPN connections.
8.4.3.
GeNUCard
Menu path: Setup > Network > VPN > GeNUCard
The GeNUCard VPN hardware offers a choice of pre-configured Internet and VPN connections.
The Connections window opens as soon as the GeNUCard session is launched.
Figure 64: GeNUCard configuration
•
File:
-
•
•
•
•
Change PIN
Rekeying
WiFi: Opens the WiFi dialog which allows you to configure the GeNUCard's wireless access.
Log: Allows you to view the log
Network connection: Select one of the network connections pre-configured on the GeNUCard, for
example LAN or WLAN.
VPN connection: Select one of the VPN connections pre-configured on the GeNUCard.
124
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Options
Menu path: Setup > Network > VPN > GeNUCard > Options
A valid combination of connection and user data can be pre-populated in the IGEL setup: Network > VPN >
GeNUCard > Options.
Figure 65: Automatically establishing connections
A facility for automatically establishing a connection during the boot procedure can also be enabled. This is
necessary when updating the IGEL firmware via the VPN for example.
Administrator Session
The GeNUCard is configured and administered centrally via the genucenter management station.
Further information is available from www.genua.de (http://www.genua.de).
Optionally, an administrator session allowing the GeNUCard Internet connection to be configured can be
set up:
1. Click on Add instance under System > Registry > genucard%.
The GeNUCard icon will appear on the desktop.
2. Click on the GeNUCard icon.
The GeNUCard logon window will open.
3. Enter a user name and password.
4. Click on Logon.
125
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
The Internet/VPN window will open.
Figure 66: Internet/VPN window
5. In the Internet area, configure the connection with the help of the Create, Edit, Delete buttons.
8.4.4.
NCP
Menu path: Setup > Network > VPN > NCP
The configuration parameters for the NCP Client are configured exclusively via the client program interface
itself.
You will find the documentation regarding the NCP Secure Enterprise Client at:
http://www.ncp-e.com/de/support/produktunterlagen/handbuecher.html
(https://www.ncp-e.com/en/resources/library/manuals.html)
8.5. Simple Certificate Enrollment Protocol - SCEP
Menu path: Setup > Network > SCEP Client (NDES)
SCEP allows the automatic provision of client certificates via a SCEP server and a certification authority. This
type of certificate is automatically renewed before it expires and can be used for purposes such as network
authentication (e.g. IEEE 802.1x).
126
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
A Microsoft Windows 2008 Server (MSCEP, NDES) for example can serve as a queried counterpart (SCEP
server and certification authority).
More information can be found at Microsoft, e.g. in the white paper
http://download.microsoft.com/download/a/d/f/adf2dba9-92db-4765-bf2d-34b1c8df9ca3/Microsoft%
20SCEP%20implementation%20whitepaper.doc
(http://download.microsoft.com/download/a/d/f/adf2dba9-92db-4765-bf2d-34b1c8df9ca3/microsoft
scep implementation whitepaper.doc)
 Enable certificate management via SCEP client (NDES) and then make the necessary configuration
settings.
8.5.1.
Certificate
Menu path: Setup > Network > SCEP Client (NDES) > Certificate
 Under Certificate, specify the basic date for the certificate to be issued by the certification authority.
Type of CommonName
If the client automatically obtains its network name, DNS Name (auto) is a good
type of thin client certificate.
Organizational unit
Stipulated by the certification authority.
Organization
A freely definable designation for the organization to which the client belongs.
City, state, country
Enter the location of the client here.
RSA key length
Select a key length (one able to be used by the certification authority) for the
certificate that is to be issued.
8.5.2.
Certification Authority
Menu path: Setup > Network > SCEP Client (NDES) > Certification Authority
 Enter the name of the certification authority (CA) and the hash value of the root certificate.
You will receive both of these from the certification authority.
8.5.3.
SCEP
Menu path: Setup > Network > SCEP Client (NDES) > SCEP
In addition to a certification authority, an SCEP server must also be defined.
 Enter the address and query password for the SCEP server here.
The SCEP server generates the password as a one-time password. It is needed when a certificate is
requested for the first time. New certificates will be requested before the old ones expire. In this
case, the still-valid certificate will serve as a means of authentication.
 For the purpose of checking validity, define an interval (checking frequency) and a period of time in
which certificate renewal must occur.
127
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Example:
A certificate is valid until 31.12 in any one year. The period for renewal is 10 days. This means that
a new certificate will first be requested on 21.12 of the same year.
Because of the need to enter a fingerprint (root certificate of the certification authority) and the
query password (SCEP server), the configuration process is somewhat awkward. Ideally, it should
be set up in the UMS as a profile and distributed to the clients. At the same time, the certificate
still cannot be used for communication purposes.
8.5.4.
Checking the Client Certificate
If a certificate from the certification authority has been forwarded from the SCEP server to the client, it is
then stored there in the /wfs/scep_certificates folder.
The data for the certificate (e.g. its validity, creation date and hash value) can be displayed by using the
shell command cert_show_status.
8.5.5.
Example
Certificates issued and managed via SCEP can be used for purposes such as network authentication.
Relevant options can be found when
•
configuring IEEE 802.1x authentication
Network→LAN Interfaces→Interface 1→Authentication
•
or when setting up the wireless network
Network→LAN Interfaces→Wireless→Authentication, WPA Enterprise Encryption, EAP Type TLS.
One problem when the client certificate is distributed via the network is that the same certificate is needed
for communication. The use of the SCEP in conjunction with 802.1x authentication presents no problems to
the extent that the initial request for the certificate should also be possible without a certificate.
 Enable the 802.1x authentication method after the SCEP has been configured.
When requesting the certificate, the client will attempt to establish a connection to the SCEP server
without using any authentication. It will use the authentication only after having received the certificate.
For WLAN connections, a method of certificate-less PSK encryption must first be set up. The client will then
use this connection to obtain the certificate. After this, the WLAN connection can be reconfigured once
again.
While the above-mentioned method for Ethernet connections will also function via the UMS, the initial
configuration of the WLAN can only be performed on the client as the WLAN is disabled by default.
128
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
8.6. Routing
Menu path: Setup > Network > Routing
This setup page allows you to specify additional network routes if necessary.
 In the Interface field, specify "eth0", "eth1" or "wlan0", i.e. Interface 1+2 or Wireless LAN.
You can specify up to five additional network routes.
8.7. Hosts
Menu path: Setup > Network > Hosts
If no DNS (Domain Name Service) is used, you can specify a list with hosts in order to allow translation
between your IP address, the full qualified host name and the short host name.
Click on Add to open the dialog window.
1. Enter the IP address of the host you would like to add.
2. Give the full qualified host name (e.g. <mailserver.igel.de>).
3. Give the short host name of the host (e.g. <mailserver>).
4. Confirm the details you have entered by clicking on OK.
The specified host will now be added to the computer list.
8.8. Network Drives
Menu path: Setup > Network > Network Drives
Drives shared within the network can be linked to the thin client via NFS or SMB - depending on the
protocol offered by the server.
8.8.1.
NFS
Menu path: Setup > Network > Network Drives > NFS
With NFS (Network File System), you can share files via the network. The NFS server exports a system file,
and the NFS client (your thin client) links this file to a mount point within its own file system. The exported
file system then becomes a logical part of the thin client file system although, in physical terms, it remains
on the server.
In order to set up an NFS mount, the server must first be configured. You will find detailed information
on NFS on the relevant pages of the manual for your server operating system.
129
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
The procedure for sharing files via the NFS server is as follows:
 Click on Add to open the dialog window for NFS.
You can then enter the following:
Enabled
The NFS mount is enabled by default and is mounted each time the system
boots.
Disable this entry if the shared file system is not universally needed.
Local directory
Details of the local directory onto which the shared items are to be mounted
on the local thin client file system.
Server
The name or IP address of the NFS server which provides the shared files.
Path name
Details of the path name as exported by the NFS server.
8.8.2.
Windows Drive - SMB
Menu path: Setup > Network > Network Drives > Windows Drive
SMB is used by Microsoft Windows NT, Windows 95/98, Windows 2000 and Windows XP etc. to share hard
drives and printers. As Unix (including Linux) can process this protocol with Samba Suite tools, hard drives
and printers can be used along with Windows hosts. Consequently, items shared via SMB can be integrated
into the thin client by Windows or Unix Samba hosts.
The SMB protocol is used only to share files via the network (not for printers). Shared items which
are to be mounted must first be created on the Windows or Unix host.
Local directory: Details of the local directory onto which the shared items are to be mounted on the local
thin client file system.
Server: For a Windows host, the Net BIOS name must be entered here. For a Unix Samba host, the host
name or the IP address must be used.
Share path name: Path name as exported by the Windows or Unix Samba host.
User name/password: Details of the user name and password for your user account on the Windows or
Unix Samba host.
Enabled: The SMB mount is enabled by default and is mounted each time the system boots.
Writable for users: If this option is enabled, the user who is logged on can write data. Otherwise, this is
only possible via root.
130
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
8.9. Proxy
Menu path: Setup > Network > Proxy
Select the communication protocols for which a system-wide proxy is to be used.
Figure 67: System-wide proxy
9.
Devices
Menu path: Setup > Devices > Hardware info
 Click on Hardware Information for an overview of your IGEL thin client device.
9.1. Printers
Menu path: Setup > Devices > Printer
Various printing systems can be used with the thin client.
9.1.1.
CUPS - Common UNIX Printing System
Menu path: Setup > Devices > Printers > CUPS
The Common UNIX Printing SystemTM (or CUPS) is the software which allows you to print from within
applications, e.g. from this web browser.
CUPS converts the page descriptions produced by the application, e.g. "Insert Paragraph", "Draw Line" etc.,
into data which can be read by the printer, and then sends this information to the printer.
With the appropriate configuration, CUPS can use printing devices via the following connections:
131
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
•
•
Parallel (LPT 1, LPT 2)
Serial (COM1, COM2, USB COM1, USB COM2 – with USB serial adapter)
USB (1st and 2nd USB printer)
Network (TCP/IP, LPD, IPP)
Printers
Printers can be created and edited here.
 In the edit dialog, specify a printer name which begins with a letter.
General
 Under Printer Connection, select the interface type for locally connected printers or the network
protocol for network printers.
 Depending on the above, enter the relevant configuration data for the interface or network printer.
 Select the local printer driver under Manufacturer and Printer Name.
Mapping in sessions
•
•
•
Map printer in NX sessions: Makes the printer available in NX sessions.
Map printer in ICA sessions: Makes the printer available in ICA sessions.
Map printer in RDP sessions: Makes the printer available in RDP sessions.
The remaining parameters are used to select the printer driver in ICA and RDP sessions on Windows
servers.
 Give the name of the driver under Windows which is to be used.
If it does not feature in the list, it can be specified under Use user-defined windows driver name.
When printing in ICA and RDP sessions, the print data are normally prepared for the printer model by the
Windows printer driver and are passed unchanged from the thin client to the printer.
An exception is encountered when using the Windows driver in ICA sessions: Manufacturer:
Generic, model: Generic PostScript. In this case, the print data are prepared on the thin client
with the help of the printer driver defined above under Printers for the printer model. This
requires thin client resources depending on the size of the print job.
IPP printer sharing
The IPP (Internet Printing Protocol) offers the following configuration options:
•
•
Network or host for sharing local printers: Allows printing on the local device from either the local or
the global network.
Enable IPP printer browsing: Allows you to search for shared printers in the local or global network and
show your shared printers within the network. A shared printer is visible within the network but it may
not be possible to print from the network if you do not have the necessary authorization.
132
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
9.1.2.
LPD - Line Printer Daemon
Menu path: Setup > Devices > Printer > LPD
LPD printers are used by the BSD printing system and are also supported by Windows servers.
Enable LPD print server
Makes the thin client an LPD print server. The CUPS printers defined
under 11.2.1.1 can be addressed under their printer name as a queue
name via the LPD protocol.
Print data conversion
Attempts to automatically recognize whether or not the print data need
to be prepared by the local printer driver. The None option always
forwards the print data unchanged to the printer.
Max. simultaneous connections
Limits the number of print jobs that can be accepted at the same time.
Restrict LPD access
Specifies the sub-networks or hosts from which print jobs can be
accepted.
9.1.3.
TCP/IP
Menu path: Setup > Devices > Printer > TCP/IP
You can assign printers connected to your device to a TCP/IP port. The LPT1 (TCP/IP port 3003) is enabled
by default. The printer can be connected to one of the following connections, provided that they are
available on the device:
•
•
•
•
Serial connection (COM 1 or COM 2)
Parallel connection (LPT 1)
USB (USBLP 1)
Additional serial connections: USB adapter or Perle expansion card
Data are forwarded bidirectionally at serial interfaces. This means that other serial devices such as barcode
scanners or scales can be operated too.
9.1.4.
ThinPrint
Menu path: Setup > Devices > Printer > ThinPrint
ThinPrint allows the bandwidth provided for the transfer of print jobs to be reduced depending on the
resources available. The ThinPrint client prints either on printers connected to a local interface (serial,
parallel or USB), on an LPD network printer or on a CUPS printer defined on the thin client.
The following parameters can be found on the ThinPrint setup page:
133
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Port number
Specify the port number via which the ThinPrint daemon is to communicate. Make
sure that the port number on the ThinPrint client and the ThinPrint server is the
same (communication will otherwise not be possible).
Bandwidth
Enter a bandwidth value (in bits per second) which is lower than or equal to the
value specified on the ThinPrint server. A higher value, the disabling of client
control or no entry at all means that the ThinPrint server values will be used.
Waiting time between Maximum waiting time (in seconds) if a printer is unavailable
print attempts
Number of print
attempts
Number of attempts to contact a printer in order to start a print job.
The list of ThinPrint printers is shown on the Printer page.
 Here you can manage printer configurations by adding, editing or deleting printers.
The page provides an overview of pre-configured ThinPrint printers:
Active
Indicates whether or not the printer is visible.
Name of the printer
Name under which the printer can be addressed.
Printer class
Name of the printer class - optional, max. 7 characters without spaces
Device
The following options are available here:
•
•
•
•
•
Standard
+ /dev/ttyS0, /dev/ttyS1, ... serial interface
+ /dev/lp0, /dev/lp1, ... parallel interface
+ /dev/usblp0, /dev/usblp1, ... USB printer
+ Name of a CUPS printer with LPD network printer connection: ThinPrint client
prints via the network to the LPD network printer.
+ Name of another CUPS printer: ThinPrint client forwards print jobs to the
appropriate printer in the CUPS printing system.
Defines the selected device as the standard printer.
134
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
9.2. USB Storage Devices
Menu path: Setup > Devices > Storage Devices
USB storage devices can be configured here.
9.2.1.
Hotplug storage devices
Menu path: Setup > Devices > Storage Devices > Storage Hotplug
In this area, you can set up the connection of hotplug storage devices. These can be USB mass storage
devices or MMC card readers for example.
You can change the following settings:
•
Default permission: Default access permissions for hotplug storage devices.
Possible values:
-
•
Read/Write
Read only
Enable dynamic client drive mapping. If this option is enabled, hotplug storage devices are
automatically added and removed during ICA sessions and RDP sessions.
Before you mechanically disconnect the hotplug storage device from the thin client, you must
remove it safely. To do this, click on
in the taskbar.
If the following warning is shown: The device is still in use! Do NOT disconnect the device., the
hotplug storage device must not be removed. Close either the named program or close all open
files or directories within a session that are located on the hotplug storage device.
•
•
•
•
Number of storage hotplug devices: The number of hotplug storage devices that can be used in the
session.
Private drive letter for storage drives: If this option is enabled, each hotplug storage device will be
assigned an individual drive letter. If this option is disabled, a single drive letter will be generated for all
hotplug storage devices and each hotplug storage device will be assigned a sub-directory.
Start storage drives with this drive letter: Letter that is assigned to the first hotplug storage device if
automatic drive mapping is enabled. Further hotplug storage devices are assigned the next letter
alphabetically.
ICA read access to hotplug storage devices: Specifies whether read access to hotplug storage devices is
allowed in an ICA session.
This setting is only effective if Enable dynamic drive mapping is disabled.
135
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Possible values:
•
Yes: Read access is allowed.
No: Read access is not allowed.
Ask user: Read access can be allowed on request.
ICA write access to storage hotplug devices: Specifies whether write access to hotplug storage devices
is allowed in an ICA session.
This setting is only effective if Enable dynamic drive mapping is disabled.
Possible values:
-
•
•
•
Yes: Write access is allowed.
No: Write access is not allowed.
Ask user: Write access can be allowed on request.
Use storage hotplug beep: If this option is enabled, a signal tone will be heard when connecting and
disconnecting hotplug storage devices.
Show storage hotplug message: If this option is enabled, hotplug messages will be shown when
connecting and disconnecting hotplug storage devices.
Message timeout: Period of time after which the window with the hotplug messages is hidden. If the
time period is set to 0, the window will be shown until it is closed manually.
Further settings options can be found under Drive Mapping (Citrix), Drive Mapping (RDP) (page 31) and
USB Access Control.
136
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
9.2.2.
Automount Devices
Menu path: Setup > Devices > Storage Devices > Automount
Here you can define the devices which are to be mounted automatically when accessed:
List of automount devices
Overview of the automount devices - The most commonly used devices
such as the disk drive, CD-ROM etc. are pre-configured.
Edit
Opens and enables one of the pre-defined devices
Add
Manual configuration of devices not pre-defined in the automount device
list .
Name
Name given to a device - This name is also used for the sub-directory
created in /autofs/.
Device
Allows you to select a suitable device synonym - This can also be entered
manually.
File system type
Definition of the file system - The auto option should normally be used. If,
however, you use ext2 or a problem occurs, you should clearly indicate
the file system that you use.
Automount time-out
Regulates the time-out period - Specify in seconds how long the system
should wait before the devices accessed are unmounted. The time period
ranges from 0 to 600 seconds (10 minutes).
Do not set the time-out period to zero! This may result in data loss.
9.3. Smartcard
Menu path: Setup > Devices > Smartcard
PC/SC is a service which makes smartcard readers and inserted smartcards available to application
programs. RDP and ICA connections make it possible to provide server-side applications with client-side
smartcard readers and smartcards. Local applications, e.g. browsers, can also use smartcards in the
readers. For these functions to work, the PC/SC daemon must be enabled.
 Click on Enable PC/SC Daemon to use the PC/SC interface on the thin client.
The PC/SC Devices Currently Active window shows the smartcard readers which are currently available.
Optional internal readers and a variety of USB smartcard readers are also supported.
137
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
9.4. USB Access Control
USB devices can be permitted or prohibited for use on the thin client on the basis of rules. Sub-rules for
specific devices or device classes are also possible.
1. Enable USB access control under Devices→USB Access Control.
2. Select a set rule (default behavior) which will either allow or prohibit the use of USB devices.
3. Expand the general rule by adding class rules and device rules where you specify the procedure for
handling specific classes or devices.
Device classes can be for example entry devices, printers or mass storage devices, while device rules
relate to the manufacturer, the product or the actual device (identified via its Universally Unique
Identifier UUID).
Example:
•
•
•
The set rule prohibits the use of USB devices on the thin client.
However, the use of all Human Interface Devices (HID) is permitted.
The USB storage device with the UUID 67FC-FDC6 is also permitted.
Figure 68: USB access control
Other USB storage devices, printers etc. cannot be used on the thin client with this setting.
138
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
10. Security
Menu path: Setup > Devices > Security
In order to prevent unauthorized access to the thin client setup which could allow deeper penetration into
your network, it is essential that you set up an administrator password following the initial configuration.
 You can also use an additional user password which offers various options for permitting restricted
configuration by users.
10.1. Password
Menu path: Setup > Devices > Security > Password
 Under Password, set up an administrator password and a user password.
Administrator and user password
Sets passwords for the administrator and user accounts. The
setup will be protected by the administrator password unless
the user has been granted access to specific areas.
By enabling this password, the IGEL setup, shell access to Xterm and access to the console will be
restricted to the administrator. The Reset to Factory Defaults option may only be used with this
password. If the setup is locked by an administrator password single setup pages can be enabled
for the user - see Enable Setup Pages for Use (page 17)r.
Remote user password
Sets a password for the remote session user (SSH).
Setup user
Allows the user to access the local setup.
When you enter a password, ensure that the correct keyboard layout is enabled. After all, you will
only see stars instead of characters when entering the password and will not be able to see why
the password was not accepted.
10.2. Login Options
Menu path: Setup > Devices > Security > Logon
 Here you can configure the local login procedure for the thin client. You can login via the IGEL
smartcard or via the Kerberos protocol, e.g. in a Windows domain.
139
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
10.2.1. IGEL Smartcard
Menu path: Setup > Devices > Security > Logon > IGEL
Smartcard
Logging in with IGEL smartcard
Enables local login to the thin client with the IGEL smartcard. Sessions
stored on the smartcard become available. The thin client is locked
without the smartcard and optional password.
Enable IGEL smartcard without
locking the desktop
Enables sessions stored on the smartcard after entering an optional
password. The thin client is not locked – even without a smartcard.
Company key
Shared key for smartcards and thin clients. For more details see
smartcard personalization (page 68).
You can use the optional IGEL smartcard for local authentication and personalized session configuration
("Flying Doctor Scenario").
Figure 69: IGEL Smartcard
The procedure when using the IGEL smartcard with the internal card reader or an external reading device
(USB) is as follows:
1. Enable the IGEL smartcard solution under Security→ Login→ Smartcard in the setup application.
2. Enter a company key to describe your IGEL smartcard.
3. Save your settings before you start personalizing the card.
4. In the Personalization window, you can set a login password and add sessions to the card.
140
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Session configurations are stored on the card's IC (integrated circuit) and the session can be used on
any IGEL thin client which reads the card.
Figure 70: Smartcard personalization
Company Key
The IGEL smartcard solution also contains a company key. This is an additional code which is written to the
card and which must match the code of the terminal used. If the two codes do not match, the smartcard
cannot be used on that particular terminal. This additional security feature ensures that your terminals
cannot be accessed from outside your company. It can also be used within the company in order to restrict
employees' access to specific terminals.
Save User and Password
The procedure for saving users and passwords for authentication is as follows:
 Enter the first name and surname of the user.
You will then be prompted to enter the password for this name.
If the Demand Password option is enabled, a pop-up window will always open when a smartcard is
inserted. If the wrong password is entered, access to the terminal will be denied.
141
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
If the smartcard is merely used to control access to the terminal, the procedure is as follows:
1. Insert a suitable smartcard.
2. Click on Write to Card in order to write the data to the card.
3. Remove the smartcard once the writing operation is complete.
You can now program the next smartcard.
Save Sessions
Saving sessions on the smartcard
If an employee uses a number of different terminals or the terminals are used by many different
employees, it may be a good idea to save the sessions used by an employee on his smartcard instead of on
the terminal. In this way, the user only needs to call up the applications he requires in order to perform his
duties.
The procedure for saving sessions on the smartcard is as follows:
1. Insert the employee's smartcard into the terminal.
The applications used by the employee are shown on the terminal.
2. Create the sessions you would like to add to the smartcard on the terminal (including an autostart
option and personalization of login information).On addition to the first name/surname of the card user
and an optional password, you can also add to the smartcard the sessions shown in the Available
Sessions area.
3. Once you have added all the required sessions, click on Write to Card in order to save the data on the
smartcard.
Test Smartcard
 Test the card you have created.
After performing a warm start and inserting the smartcard, the sessions will be shown immediately on the
desktop. Every session which is set to start automatically when you insert the smartcard will be launched.
10.2.2. AD/Kerberos
Menu path: Setup > Devices > Security > Logon > Active Directory / Kerberos
These setup pages allow you to enable local login to the thin client via the Kerberos protocol.
AD/Kerberos must also be configured (page 143) for this purpose.
The login can be used for single sign-on in a number of session types (ICA, RDP).
142
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
Login to Active Directory Domain: Connects the login method with the Active Directory.
Login methods:
-
Explicit: Expects login with username and password.
Remember last user name: Initializes the login mask with the username of the last user.
Therefor the option Explicit has to be enabled.
Smartcard: Expects login with smartcard.
Select the type of smartcard under Active Directory / Kerberos > Smartcard and decide which
Smartcard Removal Action shall be executed.
•
Logoff shortcut locations: Allows you to configure the way(s) in which the user can log off.
10.2.3. Auto Logoff
Menu path: Setup > Devices > Security > Logon > Auto Logoff
Define an Auto Logoff action which is carried out when you end the last instance of a session type:
1. Bring up the Security→Login→Auto Logoff setup page.
2. Choose a Session Type.
3. Choose a command (Auto Logoff Command).
4. Save your settings by clicking on Apply or OK.
If the last session instance of the selected type is ended, the system will carry out the set action.
The Shutdown command carries out the set action. You can check this under System > Energy >
Shutdown.
The Logout command has no effect if you have not defined a login method under Security > Login
(smartcard, active directory/Kerberos or IGEL Shared Workplace). The Logoff command cannot be
used together with an appliance - in this case, only the Shutdown/Suspend and Reboot commands
will work correctly.
If you use Auto Logout commands in an appliance, ensure that the appropriate session type was
selected - e.g. Horizon when using the VMware Horizon Appliance.
143
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
10.3. AD/Kerberos Configuration
Menu path: Setup > Devices > Security > Active Directory / Kerberos
 Enable and configure Kerberos on these setup pages in order to use this service for login and single
sign-on purposes.
Standard realm
Specifies the standard Kerberos realm for the client. Set this value so that it
corresponds to your Kerberos realm (Windows domain).
DNS look-up KDC
Specifies whether DNS SRV records should be used to find key distribution
centers (KDCs, domain controllers) and other servers for a realm if they are
not indicated.
DNS look-up realm
Specifies whether DNS TXT records should be used to determine the
Kerberos realm of a host.
No addresses
If this option is set, the first Kerberos ticket is addressless. This may be
necessary if the client is located behind an NAT device (Network Address
Translation).
10.3.1. Realm 1-4
Menu path: Setup > Devices > Security > Active Directory / Kerberos > Realm [1-4]
Up to 4 realms where a login is possible can be configured here.
Realm
The name of the realm/the domains where you would like to authenticate yourself.
KDC list
IP or FQDN list of the key distribution centers (domain controllers) for this realm. An
optional port number preceded by a colon can be attached to the host name.
10.3.2. Domain-Realm Mapping
Menu path: Setup > Devices > Security > Active Directory / Kerberos > Domain Realm Mapping
Domain Realm Mapping offers translation of a host name into the Kerberos realm name for the services
provided by this host.
Standard domain-realm mapping
This should be enabled if the DNS and realm names match.
Otherwise, you will need to create user-specific entries in the list.
DNS host or domain name
The entry can be a host name or a domain name. Domain names
are indicated by a preceding dot. Host names and domain names
should be entered in lower-case letters.
Realm
Kerberos realm name for this host or this domain
144
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
11. System Settings
Menu path: Setup > System
As previously explained under Quick installation (page 7), various basic system settings can be configured in
the sub-structure.
11.1. Time and Date
Menu path: Setup > System > Time and Date
1. Go to System > Time and Date
Figure 71: Time and Date Configuration
2. Maintain your changes.
3. Click Set time and date to save your settings.
You can use a time server within your network (via Network Time Protocol (NTP)) to set time and
date automatically during system boot and with periodic update. Make sure the time zone is
configured correctly. Choose the region from the drop-down-menus .
Make sure the time zone is configured correctly. Choose the region from the drop-down-menus .
Note: If choosing General as Time Zone Area you have to set your GMT time zone (Location)
following the POSIX standard (as usual in Linux) - which means you have to invert the offset of your
common UTC time zone! (See tool tip for Location as well.) Therefore it is preferable to set the
system's time zone by choosing the corresponding area and location instead of defining the GMT
offset.
145
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Example for America/New York: In POSIX standard GMT+5 is
the time zone 5 hours west of Greenwich and corresponds to
UTC-5.
FAQ: Updating Timezone Information (Daylight Saving Time, DST)
(http://edocs.igel.com/index.htm#10202723_1.htm)
11.2. Update
Menu path: Setup > System > Update
On the Update page, a simple dialog for updating your thin client firmware is displayed. The normal
procedure for updating your thin client is as follows:
1. Go to www.myigel.biz (http://myigel.biz) and download the desired firmware image from the IGEL
server.
2. Unzip the ZIP file (the usual format in which updates are provided).
3. Save all files in the directory provided either on your local FTP/HTTP server or on a drive which is
accessible from the client (e.g. a USB stick, NFS share etc.).
4. Configure the necessary settings (see below).
5. Save your changes and click on Update Firmware.
The update process will now proceed automatically.
The update procedure cannot be carried out via PPP/ISDN connections. In this case, you should use
a local storage medium (USB stick) to provide the update.
The following information must be given before the update can start (the details required vary depending
on the protocol chosen):
Protocol
Allows you to select the protocol to be used (FTP, HTTP, HTTPS etc.) from the
drop-down list.
Server name and port
Details of the name or IP address of the server used as well as the port that is
to be used
Path name on the server
Details of the directory in which you have saved the update files - starting from
the root directory
User name
The user account name
Password
The password for this user/this account
146
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
11.3. Buddy Update
Under Buddy Update, you can specify your thin client as an update server for other IGEL thin clients. If you
use a thin client as an update server, only the FTP protocol can be used to update the firmware. A number
of thin clients can be set up as buddy update servers within the network.
Thin clients without a specified update server search for available servers during the update. The first
update server found then provides the update.
11.4. Remote management
Menu path: Setup > System > Remote management
This Setup page contains settings for managing the thin client remotely via Universal Management Suite
(UMS).
•
•
Enable Remote Management: If this option is enabled, the thin client can be managed via UMS.
Universal Management Suite: If this client is already registered with a UMS, the UMS server is found in
the list. Alternatively, enter a host name or IP address in UMS Server along with a Port Number in
order to make the client register with the specified UMS server.
The list may contain more than one UMS server. If the client cannot reach a UMS Server under
the name igelrmserver and the DHCP option 244 is not set either, the client will try the list
entries until it reaches a UMS server.
•
•
•
•
Enable User Information: If this option is enabled, the user will be informed via a message window
when the thin client receives new settings or a shutdown command.
User information Message Timeout: Time in seconds for which the user message window is displayed.
Structural directory tag: This tag makes the UMS server put the client into the specified thin client
directory.
UMS Registering: This button opens the UMS Registering (page 72) utility from the System menu.
Find more information about using structural tags in the Best Practice "Using Structure Tags"
(http://edocs.igel.com/index.htm#10202089.htm).
11.4.1. Legacy 'setup.ini' transfer
Menu path: Setup > System > Remote management > Legacy 'setup.ini' transfer
You can also set up the thin client by directly transferring the setup.ini configuration file:
1. In System > Remote Administration, disable the Allow remote management option in order to disable
the IGEL remote management service.
2. Click on Transfer the setup.ini configuration file to load the configuration needed for the thin client
directly via DHCP.
The setup.ini file will then be administered manually without the graphical setup, e.g. of the IGEL
UMS.
Two transfer protocols are available – TFTP and FTP. The corresponding DHCP tags are:
147
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
TFTP (disabled by default)
ID 66
Name or IP of the server
ID 67
File path on the server The setup.ini file will be searched for in <File
path>/.
FTP (enabled by default)
ID 161
Name or IP of the server
ID 162
File path on the server The setup.ini file will be searched for in <File
path>/igel/ud/.
ID 184
User name
ID 185
Password
It is recommended that you set the Disable when updating option at the same time. This will
ensure that the setup.ini and the update data are transferred separately.
11.5. Shadow
Menu path: Setup > System > Shadow
For helpdesk purposes, you can observe the client through shadowing. This is possible via the IGEL Remote
Manager or another VNC client (e.g. TightVNC) . The options for the VNC functions are as follows:
Ask user for permission
In a number of countries, unannounced mirroring is prohibited by law.
Do not disable this option if you are in one of these countries!
Allow entries from remote
computer
If this option is enabled, the remote user may make keyboard and
mouse entries as if they were the local user.
Use password
Enable this option to set up a password which the remote user must
enter before they can begin mirroring.
11.5.1. Secure Shadowing (VNC with SSL/TLS)
Menu path: Setup > System > Shadowing
The secure shadowing function is only relevant to clients which meet the requirements for secure
shadowing and have enabled the corresponding option. Secure shadowing improves security when remote
maintaining a client via VNC at a number of locations:
•
Encryption: The connection between the shadowing computer and the shadowed client is encrypted.
This is independent of the VNC viewer used.
148
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
•
•
Integrity: Only clients in the UMS database can be shadowed.
Authorization: Only authorized persons (UMS administrators with adequate authorizations) can
shadow clients.
Direct shadowing without logging on to the UMS is not possible.
•
Limiting: Only the VNC viewer program configured in the UMS (internal or external VNC viewer) can be
used for shadowing.
Direct shadowing of a client by another computer is likewise not permitted.
•
Logging: Connections established via secure shadowing are recorded in the UMS server log.
In addition to the connection data, the associated user data (shadowing UMS administrator, optional)
can be recorded in the log too.
Further information regarding secure shadowing can be found in the best practice
(http://edocs.igel.com/index.htm#10204531.htm) document.
Basic principles and requirements
The Secure Shadowing option can be enabled subject to the following requirements being met:
•
•
•
•
IGEL Universal Desktop Linux or IGEL Universal Desktop OS 2, each from Version 5.03.190 or IGEL
Universal Desktop Windows Embedded Standard 7 from Version 3.09.100
IGEL Universal Management Suite from Version 4.07.100 onwards
The client is registered on the UMS server
The client can communicate with UMS console and UMS server (see below)
Basic technical principles:
Unlike with "normal" shadowing, the connection between the VNC viewer and the VNC server (on the
client) is not established directly during secure shadowing. Instead, it runs via two proxies – one for the
UMS console and one for the VNC server on the client. These proxies communicate via a TLS/SSL-encrypted
channel, while the local communication, e.g. between the VNC viewer application and the UMS proxy,
takes place in the conventional unencrypted manner. As a result, a secure connection can also be
established with external VNC programs that do not support TLS/SSL connections.
The two proxies (UMS console and client) communicate with TLS/SSL encryption via the same port as the
"normal" VNC connection: 5900. As a result, no special rules for firewalls need to be configured in order to
perform secure shadowing.
If secure shadowing is active for a client under Setup > System > Shadowing > Secure Shadowing), the cliet
generates a certificate in accordance with the X.509 standard and transfers it to the UMS Server when the
system is next started. The UMS server checks subsequent requests for a secure VNC connection using the
certificate. The certificate in PEM format can be found in the /wfs/ca-certs/tc_ca.crt directory
on the client. The validity of the certificate can be checked on the (Linux) client using the command:
x11vnc -sslCertInfo /wfs/ca-certs/tc_ca.crt
149
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Figure 72: Thin client certificate for secure shadowing
If a UMS administrator calls up the Shadowing function in the UMS Console for the client, the console
receives a signed request from the UMS Server which is then passed on to the client to be shadowed. This
in turn passes on the request to the UMS server which checks the validity of the request using the original
certificate. If this check is successful, the console reports that the channel for the connection between the
proxies can be established. The UMS proxy on the console connects to the server proxy on the client, and
the server proxy in turn establishes on the client the connection to its VNC server.
Only when these connections have been established does the console call up the VNC viewer which then
connects to the console proxy. The VNC client and VNC server are now connected via the two proxies which
transfer data with TLS/SSL encryption.
Secure shadowing can be enforced independently of the client configuration for all clients that
support this function: UMS Administration > Misc Settings > Activate Global Secure VNC.
Shadow clients securely
In order to shadow a client securely (with encryption), the administrator must log on to the server via the
UMS console. When doing so, it is irrelevant whether a purely local UMS administrator account is used or
the user was adopted via an Active Directory for example. As always, however, the UMS administrator
must have the permission to shadow the object, see Object-related access rights
(http://edocs.igel.com/index.htm#2307.htm).
The client to be shadowed is called up in the navigation tree and, as usual, can be executed via Shadow in
the context menu. The connection window however differs from the dialog for normal VNC shadowing. The
IP and port of the client to be shadowed cannot be changed, and a password for the connection is not
requested – this is superfluous after logging on to the console beforehand.
150
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Figure 73: Secure shadowing connection dialog
When a VNC connection has been established, the symbol in the connection tab indicates secure
shadowing:
Figure 74: Secure VNC connection
VNC logging
Connections via secure shadowing are always logged in the UMS. Via UMS Administration > Misc Settings >
Secure VNC, you can configure whether the user name of the person shadowing is to be recorded in the log
(the default is inactive).
Figure 75: Options for VNC logging
151
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
The VNC log can be called up via the context menu of a client or folder (for several clients, Logging > Secure
VNC Logs). The name, MAC address and IP address of the shadowed client, the time and duration of the
procedure and, if configured accordingly, the user name of the shadowing UMS administrator are logged.
Figure 76: Log entries for secure VNC connections
 To sort the list (e.g. according to user names), click on the relevant column header or filter the content
shown by making entries in the Filter field.
11.6. Remote Access (SSH / RSH)
In order to allow central administration, the thin client can be configured in such a way that it can be
accessed via the WAN.
Remote access to the local setup is permitted by default. However, you can restrict remote access to a
specific user from a specific host. To enable restriction, give the full name of the host (e.g.
xterm.igel.de) and the permitted user.
The Users for SSH Access to the thin Client are configured under System > Remote Access > SSH Access in
the setup.
In the default setting, two users are already configured:
•
•
user: The regular thin client user account. It has full shell access, but SSH access is disabled in the
default configuration.
ruser A special remote user whose access to applications can be restricted in Applications access for
remote user 'ruser'
Pick user or ruser depending on your use case for SSH access. If in doubt, pick the more restricted
ruser.
152
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Power Options
Menu path: Setup > System > Power Options
Under System > Power Options, you will find numerous settings for energy management.
11.6.1. Energy options
The System-> Energy->Energy Options setup page offers numerous settings for energy management.
Figure 77: Standby
System
standby
Specify how long the user can be inactive before the system switches to standby mode –
from Never or 10 Mins to 24 Hours.
Figure 78: CPU
153
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
CPU power plan for AC mode
Specify here which CPU power plan (CPU Governor) the device is
to use in AC mode.
Explanation of the settings:
•
High Performance- full performance with maximum
processor speed
•
Balanced (smooth) - slower regulation of performance in a
balanced manner according to the demands of programs.
Suitable for users who are bothered by the fan frequently
running at high speed.
•
Balanced (recommended) - rapid regulation of performance
according to the demands of programs (recommended).
• Power Saver - lowest processor speed
The standard settings are High Performance in AC mode and
Balanced (recommended) in battery mode.
CPU power plan for battery mode
Specify here which CPU power plan (CPU Governor) the device is
to use in battery mode. For an explanation of the settings, see
above.
Tray icon
Enable this setting in order to display a CPU tray icon which
allows you to switch quickly between the power plans.
Figure 79: Critical charge level
Critical battery level (percentage)
Here you can configure the battery level percentage below
which the battery level is regarded as critical.
Critical battery action
Here you can specify what action is to be taken in the event of a
critical battery level: No Action, Warning, Execute Command or
Execute Command in Console.
Critical command
Enter a valid command here. The standard command
user_shutdown -f shuts down the system in the proper
manner.
Figure 80: Low charge level
154
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Low battery level (percentage)
Here you can configure the battery level percentage below
which the battery level is regarded as low.
Low battery action
Here you can specify what action is to be taken in the event of a
low battery level: No Action, Warning, Execute Command or
Execute Command in Console.
Low command
Enter a valid command here. The standard command
user_shutdown -f shuts down the system in the proper
manner.
Figure 81: Options
Display percentage
Shows the battery level percentage in the tray.
Display time
Shows the remaining battery running time / charging time in the
tray.
11.6.2. System
SsyMenu path: Setup > System > Power Options > System
Figure 82: Energy Options System
155
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
System standby
Specify how long the user can be inactive before the system switches to
standby mode – from Never or 10 Mins to 24 Hours.
CPU power plan
Specify here which CPU power plan (CPU Governor) the device is to use in
AC mode.
Explanation of the settings:
•
•
High Performance- full performance with maximum processor speed
Balanced (smooth) - slower regulation of performance in a balanced
manner according to the demands of programs. Suitable for users
who are bothered by the fan frequently running at high speed.
•
Balanced (recommended) - rapid regulation of performance
according to the demands of programs (recommended).
• Power Saver - lowest processor speed
The standard settings are High Performance in AC mode and Balanced
(recommended) in battery mode.
Tray icon
Enable this setting in order to display a CPU tray icon which allows you to
switch quickly between the power plans.
11.6.3. Battery
Menu path: Setup > System > Power Options > Battery
Figure 83: Energy Options Battery
156
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Critical battery level (percentage)
Here you can configure the battery level percentage below
which the battery level is regarded as critical. You can configure
two different scenarios.
Critical battery action
Here you can specify what action is to be taken in the event of a
critical battery level: No Action, Warning, Execute Command or
Execute Command in Console.
Critical command
Enter a valid command here. The standard command
user_shutdown -f shuts down the system in the proper
manner.
Display percentage
Shows the battery level percentage in the tray.
Display time
Shows the remaining battery running time / charging time in the
tray.
11.6.4. Display
Menu path: Setup > System > Power Options > Display
Figure 84: Energy Options Display
157
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Set the screen energy options
Handle display power
management
Enable this checkbox in order to be able to make the following settings. In
older firmware versions, this option was called DPMS (Display Power
Management Signaling).
Standby time
Specify how many minutes the user can be inactive before the screen
switches to standby mode.
Suspend time
Specify the number of minutes before the screen switches to suspend mode.
Off time
Specify the number of minutes before the screen switches off.
Brightness reduction
On inactivity, reduce to
Specify to how many percent the screen brightness should be reduced if you
are not using the device.
Reduce after
Specify a time between 10 and 120 seconds after which the screen brightness
will be reduced.
11.6.5. Shutdown
Menu path: Setup > System > Power Options > Shutdown
This setup page contains settings for shutting down.
Figure 85: Shutdown
158
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Allow system shutdown
Allows the user to shut down the device.
Allow standby suspend
Allows the user to place the device in standby mode.
Allow canceling of shutdown process
Allows the user to cancel the shutdown or standby process.
Default action
Defines which action is pre-selected in the dialog shown.
Dialog Timeout
Time span in seconds after which the option pre-selected in the
dialog is executed.
Disable User Message
When shutting down the device, no dialog which with the user
can interact is shown.
11.6.6. Energy options
The System-> Energy->Energy Options setup page offers numerous settings for energy management.
Figure 86: Standby
System
standby
Specify how long the user can be inactive before the system switches to standby mode –
from Never or 10 Mins to 24 Hours.
Figure 87: CPU
159
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
CPU power plan for AC mode
Specify here which CPU power plan (CPU Governor) the device is
to use in AC mode.
Explanation of the settings:
•
High Performance- full performance with maximum
processor speed
•
Balanced (smooth) - slower regulation of performance in a
balanced manner according to the demands of programs.
Suitable for users who are bothered by the fan frequently
running at high speed.
•
Balanced (recommended) - rapid regulation of performance
according to the demands of programs (recommended).
• Power Saver - lowest processor speed
The standard settings are High Performance in AC mode and
Balanced (recommended) in battery mode.
CPU power plan for battery mode
Specify here which CPU power plan (CPU Governor) the device is
to use in battery mode. For an explanation of the settings, see
above.
Tray icon
Enable this setting in order to display a CPU tray icon which
allows you to switch quickly between the power plans.
Figure 88: Critical charge level
Critical battery level (percentage)
Here you can configure the battery level percentage below
which the battery level is regarded as critical.
Critical battery action
Here you can specify what action is to be taken in the event of a
critical battery level: No Action, Warning, Execute Command or
Execute Command in Console.
Critical command
Enter a valid command here. The standard command
user_shutdown -f shuts down the system in the proper
manner.
Figure 89: Low charge level
160
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Low battery level (percentage)
Here you can configure the battery level percentage below
which the battery level is regarded as low.
Low battery action
Here you can specify what action is to be taken in the event of a
low battery level: No Action, Warning, Execute Command or
Execute Command in Console.
Low command
Enter a valid command here. The standard command
user_shutdown -f shuts down the system in the proper
manner.
Figure 90: Options
Display percentage
Shows the battery level percentage in the tray.
Display time
Shows the remaining battery running time / charging time in the
tray.
11.6.7. DPMS
With DPMS (Display Power Management Signaling), you can send signals for power management to your
monitor if it supports this function.
Figure 91: DPMS
161
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
DPMS
Enable DPMS.
Standby Time
Specify how many minutes the user can be inactive before the screen switches to
standby mode.
Suspend Time
Specify the number of minutes before the screen switches to suspend mode.
Off Time
Specify the number of minutes before the screen switches off.
11.7. Firmware Customization
Menu path: Setup > System > Firmware Customization
Configure the firmware to create your own personal workstation.
11.7.1. Custom Application
Menu path: Setup > System > Firmware Customization > Custom Application
Applications which were loaded onto a custom partition for example can be launched via the Application
Launcher or an icon on the desktop once they have been defined as own applications. In order for this to
be possible, a command to call up the application must be entered under Settings.
11.7.2. Custom Commands
Menu path: Setup > System > Firmware Configuration > Custom Commands
Custom commands can be executed at various points in time during the system start. These commands can
use predefined environment variables (page 163).
Base commands
Network commands
Desktop commands
Reconfiguration commands
162
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
11.7.3. Corporate design
Menu path: Setup > System > Firmware Customization > Corporate Design
In this area, settings allowing you to adapt the user interface to your corporate design are grouped
together.
You can place your own logo in the following places:
•
•
•
•
•
•
In the bootsplash
As a background image
As a screensaver
As a start button icon
As a company logo in the start menu
In the taskbar (page 100)
11.7.4. Environment variables
Menu path: Setup > System > Firmware Customization > Environment Variables
Environment variables allow you to use dynamic parameter content for a number of session types, e.g. so
as not to have to enter ICA or RDP servers for every session. Within the IGEL Setup, the variables can be
found under: System→Firmware Configuration→Environment Variables
Predefined variables can also be supplied and distributed via the IGEL UMS. Additional defined variables
can only be used locally and may be overwritten by a UMS configuration.
The environment variables are available in Custom Commands (page 162).
In addition, the following session parameters can be updated with variables:
•
•
•
•
•
ICA - User name (ICA sessions→[Session name]→Logon)
ICA - Citrix server or Published Application (ICA sessions→[Session name] -→ Server)
XenApp - User name (Citrix XenApp/Program Neighborhood→Logon)
RDP - User name (RDP sessions→[Session name]→Logon)
RDP - Server (RDP sessions→[Session name]→Server)
Use in sessions
1. Enable environment variables under Enable variable substitution in session.
2. Specify the variable name and content (e.g. Variable Name = SERVER NAME | Value = test server)
3. Enter the variable name in the session parameter field. The name is preceded by a $ sign (e.g.
$SERVERNAME )
In the case of RDP and ICA sessions, the setting is implemented after being saved and is entered into the
session file. With XenApp, the setting is not implemented until a session starts and is running.
163
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
11.7.5. Features
Menu path: Setup > System > Firmware Customization > Features
Using this list of available services, you can quickly enable or disable firmware components such as
Powerterm, Media Player etc. If a service was disabled, the associated session type will no longer be
available when the system is restarted. Existing sessions will not be shown but will not be deleted either. A
disabled session type will not be updated during a firmware update. You should therefore disable unused
services in order to speed up update processes.
11.8. IGEL System Registry
Menu path: Setup > System > Firmware Customization > Custom Commands
You can change virtually every firmware parameter in the Registry. You will find information on the
individual items in the tool tips.
However, changes to the thin client configuration via the Registry should only be made by experienced
administrators. Incorrect parameter settings can easily destroy the configuration and cause the system
to crash. In cases like these, the only way to restore the thin client is to reset it to the factory defaults!
You can search for setup parameters within the IGEL Registry by clicking on the Parameter Search button. If
you would like to find the FTP settings for updating the Linux firmware, you can search for the parameter
name ftp. The parameter found in the Registry structure is highlighted:
Figure 92: Parameter search in the IGEL Registry
164
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
12. Index
Configuration ................................................... 103
Configure Access to RD Connection .................. 38
A
Access control .....................................................93
Accessories .........................................................71
AD/Kerberos .....................................................147
AD/Kerberos Configuration ..............................148
Administrator Session.......................................131
Advanced ...................................................... 53, 60
Advanced Options ............................................102
Appearance.........................................................42
Configure Connections in the Setup ................ 126
Connection settings ........................................... 24
Connections ....................................................... 41
Content .........................................................48, 59
Context menu .................................................... 64
Corporate design ............................................. 169
CUPS - Common UNIX Printing System ........... 137
Custom Application ......................................... 168
Custom Commands.......................................... 168
Application Launcher .................................... 13, 72
D
Data Protection.................................................. 59
Ask User ..............................................................39
Desktop .......................................................95, 104
Audio ............................................................ 34, 67
Desktop Integration ........................................... 20
Authentication ............................................ 42, 120
Device Information ............................................ 82
Auto Logoff .......................................................148
Device Support .................................................. 33
Automount Devices ..........................................142
Devices ............................................................. 137
Appliance Mode..................................................43
B
Background ................................................. 95, 104
Basic principles and requirements ...................154
Battery ..............................................................162
Boot Menu ..........................................................10
Boot Procedure...................................................10
Browser Global ...................................................47
Browser Plugin ....................................................68
DHCP Options .................................................. 128
Disk Utility .......................................................... 84
Display ............................................................. 163
Display switch .................................................... 72
Domain-Realm Mapping .................................. 149
DPMS ............................................................... 166
Drive Mapping ................................................... 32
DriveLock ........................................................... 33
Browser Sessions ................................................57
E
Emergency Boot................................................. 10
Buddy Update ...................................................151
Enable setup pages for users ............................. 18
Browser Plug-ins .................................................64
C
Certificate .........................................................133
Certification Authority ......................................133
Change Smartcard Password ..............................71
Checking the Client Certificate .........................134
Commands .................................................... 56, 82
Encryption .....................................................55, 60
Ending the Setup................................................ 16
Energy options ....................................91, 158, 164
Environment variables ..................................... 169
Example ........................................................... 134
Example configuration for the screen saver .... 112
Company Key ....................................................146
165
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
F
Failsafe Boot - CRC check....................................11
Features ............................................................169
Firefox browser...................................................47
Firmware Customization ..................................168
Firmware Update ................................................85
Flash Player .........................................................64
Font Services.....................................................116
Keyboard and additional keyboard ................. 114
L
LAN interfaces.................................................. 118
Language .......................................................... 110
Legacy 'setup.ini' transfer ................................ 152
License ............................................................... 14
Local Logon ...................................................21, 29
Local Terminal.................................................... 71
G
Gamma correction ..............................................94
Login Options ................................................... 144
Gateway ..............................................................28
Look-up .............................................................. 84
General System Information ..............................13
LPD - Line Printer Daemon............................... 138
GeNUCard .........................................................129
H
Hardware and Network Requirements ............101
Logoff / Desktop Integration ............................. 43
M
Mapping ........................................................26, 31
Media Player ...................................................... 65
Horizon Client Global ..........................................21
Media Player Global........................................... 66
Horizon Client session ........................................24
Media Player Sessions ....................................... 68
Hosts .................................................................135
Menus and symbol bars..................................... 61
Hotkeys ....................................................... 63, 115
Monitor Calibration ........................................... 82
Hotplug storage devices ...................................140
Mouse .............................................................. 114
I
Identify Monitors ................................................86
Mouse and keyboard ......................................... 25
IGEL Smartcard .................................................145
Multimedia .............................................23, 27, 37
IGEL System Registry ........................................170
N
Native USB Redirection...................................... 36
Image viewer ......................................................88
NCP .................................................................. 132
Important Information ......................................... 2
Netstat ............................................................... 83
Imprivata ............................................................45
Network ........................................................... 118
Individual interface ...........................................119
Network Diagnostics .......................................... 82
Input .................................................................113
Network Drives ................................................ 135
Introduction .......................................................... 6
Network Information ......................................... 15
J
Java Control Panel ..............................................81
Network Integration .......................................... 11
Java Web Start ....................................................70
NFS Font Service .............................................. 117
Java Web Start Session .......................................69
K
Keyboard.............................................................31
NFS ................................................................... 135
O
OpenVPN ......................................................... 129
Options ............................... 26, 35, 67, 68, 98, 130
166
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
P
Pager ........................................................... 97, 108
Screen ................................................................ 90
Password ..........................................................144
Screenshot tool .................................................. 79
PDF viewer ..........................................................65
Secure Shadowing (VNC with SSL/TLS) ............ 153
Performance ........................................... 24, 26, 34
Security .................................................53, 60, 144
Ping .....................................................................83
Serial (COM) Ports ............................................. 32
Playback ........................................................ 66, 68
Server Options ................................................... 21
Power Options ..................................................158
Session Control Bar .......................................... 109
PPTP ..................................................................128
Sessions.........................................................14, 20
Pre-defined configuration ..................................38
Settings .............................................................. 58
Print ....................................................................49
Setup Application............................................... 16
Printers ....................................................... 33, 137
Setup Areas ........................................................ 17
Printing ...............................................................59
Setup Search ...................................................... 19
Privacy ................................................................51
Setup Session ..................................................... 71
Proxy ............................................... 27, 49, 59, 136
Shadow ............................................................ 153
Q
Quick Installation .................................................. 7
Shadow clients securely................................... 155
Quick Settings Session ........................................71
Shutting Down and Restarting a Device ............ 15
Quicksetup ..........................................................17
Signature pad ................................................... 115
Quiet Boot ..........................................................10
Simple Certificate Enrollment Protocol - SCEP 132
R
RDP - Global Settings ..........................................28
Smartcard ...................................................24, 142
Realm 1-4 ..........................................................149
Soft keyboard..................................................... 81
RedHat Spice.......................................................65
Software Requirements ................................... 100
Remote Access (SSH / RSH) ..............................157
Sound Mixer....................................................... 74
Remote Desktop Web Access .............................38
SSH Session ........................................................ 46
Remote management .......................................152
Start menu ..................................................98, 109
RemoteFX Support..............................................34
Starting the Setup .............................................. 16
Reset to factory defaults ....................................11
System ........................................................14, 160
Restarting ...........................................................60
System Information ........................................... 84
Routing .............................................................134
System Log Viewer............................................. 74
S
Save Sessions ....................................................147
System Settings................................................ 150
Screen Saver and Screen Lock ......................... 110
Shutdown......................................................... 163
Smartcard Personalization............................71, 85
Save User and Password...................................146
T
Tabs...............................................................47, 59
SCEP ..................................................................133
Taking a screenshot ........................................... 80
SCIM (Input Methods) ......................................115
Task bar.............................................................. 97
167
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Task Manager .....................................................76
Windows Drive - SMB ...................................... 136
Taskbar .............................................................105
Wireless ........................................................... 122
Taskbar background .........................................107
Wireless Manager ............................................ 123
Taskbar items....................................................107
Wireless regulatory domain ............................ 128
TCP/IP ...............................................................139
Test Smartcard..................................................147
X
XC Font Service ................................................ 116
The IGEL Linux desktop......................................... 8
XDMCP ............................................................... 92
The IGEL Linux Firmware ...................................... 6
X-Server ............................................................. 12
ThinPrint ...........................................................139
Time and Date ..................................................150
Touchscreen calibration .....................................76
Traceroute ..........................................................83
U
UMS Registration ................................................75
Universal MultiDisplay......................................100
Update ..............................................................151
Upgrade License .................................................86
Usage ................................................................104
USB Access Control ...........................................143
USB redirection...................................................22
USB Storage Devices .........................................140
User Interface .....................................................89
Using the Task Manager .....................................77
V
Verbose Boot ......................................................10
Via Browser.........................................................40
Video ...................................................................67
Virtual Private Network - VPN ..........................128
VMware Horizon.................................................44
VNC logging ......................................................156
VNC Viewer .........................................................70
W
Wake-on-LAN....................................................121
Webcam Information .........................................87
Window .................................................. 25, 30, 66
Window settings .................................................60
168
IGEL Technology GmbH
IGEL Zero Horizon
5.07.100
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising