HP mt46 Mobile Thin Client Guide
Below you will find brief information for ThinPro 7.1. This guide provides information on configuring and managing HP ThinPro 7.1, including connection configuration for Citrix, RDP, and VMware Horizon View. Learn how to set up Active Directory integration, customize the user interface, manage security settings, and use tools such as HP ThinState for image management. The guide also covers troubleshooting and advanced configurations for optimal performance of your thin client environment.
Advertisement
Advertisement
Administrator Guide
HP ThinPro 7.1
© Copyright 2019 HP Development Company,
L.P.
Citrix and XenDesktop are trademarks of Citrix
Systems, Inc. and/or one or more of its subsidiaries, and may be registered in the
United States Patent and Trademark Office and in other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Microsoft, Windows, Windows
Vista, and Windows Server are either registered trademarks or trademarks of Microsoft
Corporation in the United States and/or other countries. UNIX is a registered trademark of
The Open Group. VMware and Horizon View are registered trademarks or trademarks of
VMware, Inc. in the United States and/or other jurisdictions. AMD and ATI are trademarks of
Advanced Micro Devices, Inc. NVIDIA is a registered trademark of NVIDIA Corporation in the U.S. and other countries.
Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and
12.212, Commercial Computer Software,
Computer Software Documentation, and
Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
The information contained herein is subject to change without notice. The only warranties for
HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
First Edition: April 2019
Document Part Number: L62791–001
Open source software
This product includes software licensed under an open source software license, such as the
GNU General Public License and the GNU Lesser
General Public License or other open source license. To the extent HP has an obligation or, in its sole discretion, chooses to make the source code for such software available under the applicable open source software license, source code for the software can be obtained from the following location: ftp://ftp.hp.com/pub/tcdebian/pool/ thinpro710/ .
User input syntax key
Text that you must enter into a user interface is indicated by fixed-width font .
Item
Text without brackets or braces
<Text inside angle brackets>
[Text inside square brackets]
{Text inside braces}
|
...
Description
Items you must type exactly as shown
A placeholder for a value you must provide; omit the brackets
Optional items; omit the brackets
A set of items from which you must choose only one; omit the braces
A separator for items from which you must choose only one; omit the vertical bar
Items that can or must repeat; omit the ellipsis iii
iv User input syntax key
Table of contents
v
vi
Enabling HP True Graphics for multiple monitors on the HP t420 ................................ 39
vii
viii
Capturing an HP ThinPro image to an FTP server ........................................ 55
Deploying an HP ThinPro image using FTP or HTTP .................................... 56
Capturing an HP ThinPro image to a USB flash drive ................................... 56
Deploying an HP ThinPro image with a USB flash drive ............................... 56
Saving a client profile to an FTP server ........................................................ 57
Restoring a client profile using FTP or HTTP ............................................... 57
Saving a client profile to a USB flash drive .................................................. 57
Restoring a client profile from a USB flash drive ......................................... 58
ix
x
Uncompressing the system diagnostic files on Windows-based systems .................... 74
Uncompressing the system diagnostic files in Linux- or Unix-based systems ............. 74
xi
xii
1 Getting started
This guide is for administrators of HP thin clients based on the HP ThinPro operating system and assumes that you will log in to the system as an administrator when modifying system configurations or using administrative tools as described in this guide.
NOTE: HP ThinPro has two possible OS configurations: ThinPro and Smart Zero. HP ThinPro-based thin clients can be purchased with either OS configuration as the default, and you can switch between OS configurations via Control Panel.
For more information about each OS configuration, see Choosing an OS configuration on page 2
. For more information about switching between OS configurations, see
Customization Center on page 61
.
Finding more information
NOTE: Information at websites listed in this table might be available in English only.
Resource
HP support website http://www.hp.com/support
Contents
Administrator guides, hardware reference guides, white papers, and other documentation
▲ Search for the thin client model, and then see the User Guides section of the support page for that model.
NOTE: HP Device Manager and HP Remote Graphics Software each have a dedicated support page, so search for the app name instead, and then see the User Guides section.
Documentation for Microsoft software Microsoft support website http://support.microsoft.com
Citrix support website http://www.citrix.com/support
VMware support website http://www.vmware.com/support
Documentation for Citrix software
Documentation for VMware software
Finding more information 1
Choosing an OS configuration
HP ThinPro includes two OS configurations, each tailored for a different thin client deployment scenario:
● The ThinPro OS configuration is the complete version of the operating system and is the most suitable for multipurpose environments that require advanced administration or end-user customization.
Features of this OS configuration include the following:
– Boots to the ThinPro desktop or Active Directory login screen
– Has more connection types than Smart Zero
– Allows multiple connections (of any supported type) to be configured and run simultaneously
● The Smart Zero OS configuration is a simpler, more secure version of the operating system and is the most suitable for single-purpose, kiosk-style environments that require minimal administration and little to no end-user customization. Features of this OS configuration include the following:
– Boots directly to a virtual session and hides the desktop, a feature also known as “kiosk mode”
– Has fewer connection types than ThinPro
– Supports only one connection to be configured and run at a time
– Does not support Active Directory authentication or single sign-on
NOTE:
You can switch between OS configurations via Control Panel (see Customization Center on page 61 ).
You can also customize some of the default settings of each OS configuration; for example, to change which connection types are available, enable kiosk mode for ThinPro, or boot to the desktop for Smart Zero.
For more information about kiosk mode, see
The following table lists the default available connection types for each OS configuration.
OS configuration
ThinPro
Smart Zero
Default available connection types
● Citrix®
● RDP
● VMware® Horizon® View™
● Web Browser (Firefox)
● XDMCP
● Secure Shell
● Telnet
● Custom
● Citrix
● RDP
● VMware Horizon View
● Web Browser (Firefox)
2 Chapter 1 Getting started
Choosing a remote management service
Regardless of the OS configuration, there are two different remote management services that you can use to manage HP ThinPro-based thin clients:
● HP Device Manager (HPDM) is ideal for large environments with a variety of operating systems, including a mixture of HP ThinPro-based and Windows®-based thin clients. HPDM provides a greater variety of management options than HP Smart Client Services. For more information or to download
HPDM, go to http://www.hp.com/go/hpdm .
● HP Smart Client Services can manage HP ThinPro-based thin clients only and is optimized for use with
Smart Zero and a “zero management” scenario. For more information, see
.
HP recommends evaluating both services and choosing the one that is best for your deployment.
Starting the thin client for the first time
When you first start a new HP ThinPro-based thin client, a setup program runs automatically. The Initial Setup
Wizard allows you to select a language, select the keyboard mapping, select a network connection, and configure the date and time settings.
TIP: If you want to modify the configuration of a single thin client and then copy and deploy the configuration to other thin clients, first use the Initial Setup Wizard and the Control Panel to modify the
or Control Panel on page 45 . For more information about HP ThinState, see
Switching between administrator mode and user mode
▲ Right-click the desktop or select Start, and then select Switch to Administrator from the menu.
For more information about the desktop, see Desktop on page 7 .
For more information about Control Panel, see Taskbar on page 8
and
NOTE: The first time you switch to administrator mode, you are prompted to set up an administrator password. The administrator password must be entered every subsequent time you switch to administrator mode. When Active Directory authentication is enabled, you can also switch to administrator mode by entering the domain credentials of a person in the domain admin group.
When in administrator mode, the screen is surrounded by a red border.
Choosing a remote management service 3
2 ThinPro PC Converter
Starting with ThinPro 7.1, ThinPro can be used on hardware other than HP Thin Clients by using HP ThinPro PC
Converter Deployment Tool. The system must meet these minimum requirements:
● CPU: Any 64-bit x86 CPU.
● Memory: 2GB of memory, with at least 1GB free for operating system use.
● Storage: 2GB or more of internal storage for installation.
● Graphics: Intel, ATI/AMD, or Nvidia. If the graphics card is not recognized, limited-performance VESA mode can be used.
● Audio: Audio support is optional.
● Networking: A recognized wired or wireless network adapter.
● USB: HP recommends 2.0 or 3.0 or USB-C high-performance flash drives.
● Licensing: The ThinPro software must be properly licensed.
The first time that a system boots with ThinPro, a compatibility check window appears showing the compatibility status of the system of each of these requirements.
Deployment tool
HP ThinPro PC Converter Deployment Tool allows you to run ThinPro on a PC that runs Microsoft Windows and that meets the minimum requirements. This tool allows for the creation of a USB flash drive containing the
ThinPro image. You can boot and run the ThinPro image from the created USB flash drive or you can install the
ThinPro image directly onto the PC. You also have the option of creating a mass-deployment image deployable by remote management tools.
For more details, see the HP ThinPro PC Converter Deployment Tool Administrator Guide.
Compatibility check and installation
The first time that ThinPro is booted from a USB flash drive, the Compatibility Check window appears. The
Compatibility Check tool assesses the hardware on the system to see if it meets the minimum requirements and whether the ThinPro software has recognized the device and assigned a device driver. If the system does not meet minimum requirements, or if required hardware is not found, the Compatibility Check tool will display a warning and additional information.
NOTE: The Compatibility Check tool does only a cursory examination of the hardware and driver state. It does not perform detailed functionality checks such as sending network packets, playing audio files, testing for bad blocks of memory, or evaluating performance. HP cannot guarantee that all hardware components in the PC will work well with ThinPro, even if the Compatibility Check tool determines that the PC is compatible.
If ThinPro is running from a USB flash drive, and if the Compatibility Check passes all the required checks, two buttons appear at the bottom of the window. The first button allows the ThinPro software to be installed directly onto internal storage. The second button allows you to run ThinPro from the USB flash drive without direct installation onto the PC.
4 Chapter 2 ThinPro PC Converter
NOTE: The installation button will only appear with a USB flash drive created with the Installer Flash Drive option of the Deployment Tool. The Bootable Flash Drive option does not allow installation.
When installing ThinPro onto the PC, you have the option of saving the settings that were configured while running ThinPro from the USB flash drive. If the settings are not saved, the default factory image of ThinPro will be installed.
The Compatibility Check tool can also be started manually from the administrator tools list under the start button.
Licensing
Supported HP Thin Clients are auto-licensed and do not need license files. If a system is auto-licensed, many of the licensing information sources listed below will not be visible.
All other systems need valid license files to run ThinPro. License files are obtained from the HP Inc. Software
Depot.
The Deployment Tool prompts you to browse to valid license files. The files you select will be automatically copied when you create a bootable and installer ThinPro USB flash drive, and also when you create a massdeployment image.
If the Deployment Tool and valid licenses are used to install ThinPro onto a device, there is no need to manually install license files. However, if you install ThinPro through some other means, you might have to copy license files to the /persistent/licenses directory on the device. You can use HP Device Manager
(or some other mechanism) to perform this deployment.
License types
There are three types of license files:
● A Trial License allows you to run ThinPro for a short time without paying any licensing fees.
● A Unit License allows you to run a particular version of ThinPro indefinitely. It also denotes that royalty fees have been paid, and it unlocks any royalty-bearing software.
● A Support License gives access to system patches and enhancements and allows the system to be upgraded to newer versions of ThinPro.
Depending on the combination of licenses present on the system, various features will be made visible, hidden, or disabled.
System tray icon
A system tray icon indicates the licensing state of the system.
Icon Description
Valid license.
License near expiration.
Invalid license (such as an expired trial license).
Licensing 5
Hovering over the systray icon gives information about active licenses found on the system. A right-click will launch the System Info app with the License tab selected.
Notifications
Notifications might pop up above the system tray icon periodically.
Courtesy notifications warn when a support license or a trial license is approaching expiration. You can disable
Other notifications warn of licensing errors such as expired, missing, or invalid license files. You cannot disable these types of notifications.
System information
The Software License Tab of the System Information application shows both the overall licensing state of the system and details on each license file found on the system, including start and end dates, license count, license serial number, and other information.
Desktop background watermark
Watermark text is displayed on the desktop background with a trial license or with an expired or invalid combination of licenses. You cannot disable this watermark text.
System update tools
If a system is not auto-licensed and it does not have an active support license, the patches and upgrades shown by Easy Update and other system-update tools will be limited.
Royalty-bearing software
Some software used by ThinPro has royalties attached. An example is any feature using H.264 video decoding. If the system is not auto-licensed and no valid unit license is found on the system, royalty-bearing software will be disabled. Trial licenses do not enable royalty-bearing software.
Connections
If no valid license combination is found on the system, the ability to create remote connections to other systems might be limited or disabled.
6 Chapter 2 ThinPro PC Converter
3 GUI overview
Desktop
NOTE: The following image demonstrates the desktop for ThinPro with a U.S. locale setting. For Smart Zero, the taskbar is vertical and right-aligned by default, and the desktop theme varies by connection type. The display format of some taskbar information varies by locale setting.
Item
(1) Desktop
(2)
(3)
Connection shortcuts
Taskbar
Description
In ThinPro, you can arrange connection shortcuts in the desktop area and customize the background theme.
In Smart Zero, the desktop is replaced by a customizable login screen with a theme specific to the chosen connection type.
Double-click a connection shortcut to launch a connection. Right-click the icon to display a menu of actions related to the current connection and select to drag the icon to a new location.
Provides quick access to programs and system functions (see
for more information).
Desktop 7
Taskbar
NOTE: The following image demonstrates the taskbar for ThinPro with a U.S. locale setting. For Smart Zero, the taskbar is vertical and right-aligned by default. The display format of some taskbar information varies by locale setting.
Item
(1)
(2)
Start
Application area
(3) System tray
Description
Displays a main menu. For more information, see
Displays the icons for the currently open applications.
TIP: You can hold down Ctrl + Alt and then press Tab repeatedly to select an application to bring to the foreground.
Provides quick access to or provides information about certain functions and services.
Place the cursor over a system tray item to display a tool-tip (select items only).
Select to start a configuration action, and right-click to display a menu.
Items in the system tray can include the following, but some items might not appear depending on the system configuration:
● Audio mixer
● Keyboard: Select this icon to change the keyboard layout, open the virtual keyboard, or change the system layout. Right-click to open the virtual keyboard. To display the name of the current keyboard layout, hover over the icon.
● Wired network status: Right-click this icon to display more information about a connected network.
● Wireless network status: Select this icon to see a list of available wireless networks and connect to one by creating a wireless profile for that network.
● Automatic Update status: The Automatic Update icon is displayed when
Automatic Update is checking for updates or updating the computer. To view more information, select the icon. If ThinPro cannot find a valid automaticupdate server or if the registry key to display the icon is disabled, the icon is not displayed.
● Intelligent Input Bus (Ibus): Ibus is an input method (IM) framework for multilingual input in Unix-like operating systems.
● Battery icon: To open Power Manager, right-click this icon and select Adjust
Power Settings.
● User icon: Indicates that Active Directory authentication is enabled. Select to lock the screen or update the domain password. To display the current user, hover over the icon.
● License icon: Indicates the state of ThinPro Licensing. Hover over the icon to see details on the currently-active licenses and right-click to go to the System
Info page to see more licensing detail. This is not visible on current HP thin clients, as they are auto-licensed.
Displays the current date and time and opens the date and time settings.
(4) Date and time
8 Chapter 3 GUI overview
4 Connection configuration
Desktop connection management
Connection management can be done directly from the desktop as well as through the legacy Connection
Manager (see
Connection Manager (ThinPro only) on page 10 ) or the Start menu. By default, the desktop
displays an icon as a shortcut for each configured connection.
When you first start the computer, several sample connection icons are displayed on the desktop. You can create a new, generic connection shortcut for any of the connection types supported by ThinPro.
▲ To create a new connection shortcut, right-click the desktop, and then select Create.
All icons are automatically placed into a grid. You can click and drag an icon to any other grid position on the desktop. After an icon has been moved to a grid position, it is pinned in that position. It stays in that position even if other connection shortcuts are added, deleted, or rearranged.
Any icons not pinned to a grid position are floating. They might be automatically moved when connection shortcuts are added, deleted, or rearranged. To change a pinned icon to a floating icon, right-click the icon and clear Pin Position.
You can start, stop, edit, copy, rename, or delete each connection. If user editing is not enabled, nonadministrator users can only start or stop a connection.
▲ To manage a connection on the desktop, right-click the connection icon, and then select an action.
NOTE: If user editing is not enabled, you must switch to administrator mode to manage a connection.
● Start/Stop: Starts a connection or stops an active connection. You can also double-click the connection icon. When the connection is active, a green circle is displayed on the connection icon, and the connection icon is displayed in the taskbar. When a connection starts, if any connection parameters are missing, a dialog box asks for the missing parameters. For example, because none of the starting icons have a remote server defined, a dialog box asks for the address or name of the remote server when the connection is started.
● Edit: Opens the complete connection editor.
● Copy: Creates a copy of the connection with all the parameters of the original connection and a unique name.
● Rename: Allows you to rename the connection. You can also double-click the text beneath the connection icon or use the connection editor.
● Delete: Deletes the connection.
Desktop connection management 9
Connection Manager (ThinPro only)
NOTE: HP recommends using the connection shortcuts. However, you can use the legacy Connection
Manager interface.
The following image demonstrates Connection Manager with a U.S. locale setting.
(4)
(5)
(6)
Item
(1)
(2)
(3)
(7)
Connection list
Start
Stop
Edit
Delete
Add
Settings
Description
Lists the configured connections and whether each connection is active or inactive.
Starts the selected connection.
Stops the selected connection.
Lets you edit the selected connection.
Deletes the selected connection.
Lets you add a new connection.
NOTE: See
Choosing an OS configuration on page 2 for a list of the available
connection types.
Lets you edit general settings for Citrix connections. These settings apply to all connections of that type.
To open Connection Manager:
1.
In administrator mode, select Start, and then type Connection Manager in the search box.
2.
Select Connection Manager.
For more information about configuring connections, see the following:
●
Connection configuration on page 9
●
Advanced connection settings
The following table describes the settings that are available under the Advanced category when editing a connection of any connection type.
10 Chapter 4 Connection configuration
NOTE: These settings affect the connection you are currently configuring only.
Option
Fallback Connection
Auto start priority
Share credentials with screensaver
Auto reconnect
Wait for network before connecting
Show icon on desktop
Allow the user to launch this connection
Allow the user to edit this connection
Login dialog options
Description
Specifies the fallback connection. If the connection fails to start, the fallback connection will attempt to start instead.
NOTE: This option is not available for the VMware Horizon View connection type.
Determines the order that connections will auto-start. 0 means auto-start is disabled. The other values determine the startup order, with 1 being the highest priority.
Enables users to unlock the local screen saver using their credentials for that connection.
NOTE: This option is only available for the Citrix, RDP, and VMware Horizon
View connection types.
If enabled, this connection will attempt to auto-reconnect if the connection is dropped.
NOTE: Stopping a connection via Connection Manager will prevent an autoreconnection.
Disable this option if your connection doesn’t need the network to start or if you don’t want to wait for network to start the connection.
If enabled, a desktop icon is created for this connection. This option is enabled by default.
If disabled, the connection is not visible on the desktop, but is visible in the Start menu and Connection Manager.
If enabled, this connection can be launched by an end user.
If enabled, this connection can be modified by an end user.
Enable or disable these options to configure the login dialog for the connection.
NOTE: This option is only available for the Citrix, RDP, and VMware Horizon
View connection types.
The following options are available:
● Show server field
● Show username field
● Show password field
● Show domain field
● Show ‘remember me’ checkbox
NOTE: This option saves the user name and domain, but the password still needs to be entered each time.
Kiosk mode
When a thin client is configured for kiosk mode, it performs an automatic login to the default connection on startup using predefined user credentials. If the connection is ever lost due to a logout, disconnect, or network failure, it reconnects automatically as soon as it can be restored.
Kiosk mode 11
TIP: The remote host can be configured to start resources automatically upon login, making the kiosk mode experience seamless.
) and configure a connection. When this is done, the following settings are set automatically:
● The taskbar auto-hides.
● The connection auto-starts.
● The connection auto-reconnects.
● The connection shares the user credentials with the local screen saver.
● The desktop theme is set to that connection type’s default theme.
● The USB redirection protocol in USB Manager is set to that connection type’s protocol.
If you want to configure a thin client for kiosk mode in ThinPro (for example, if you want to use a connection type available only with ThinPro), manually configure the following settings for the desired connection:
● In Customization Center, set the taskbar to Auto hide.
● In connection’s settings, do the following:
– Set Auto start priority to 1.
– Enable Auto reconnect.
– Enable Share credentials with screensaver, if available.
– For a Web Browser connection only, select the Enable kiosk mode option.
● In USB Manager, set the proper USB redirection protocol, if necessary.
TIP: When in kiosk mode, to minimize the connection and return to the local desktop, press Ctrl + Alt + End .
12 Chapter 4 Connection configuration
5 Connection types
Citrix
The following table describes the supported Citrix XenApp backends.
Access type
PNAgent (legacy)
Web browser
StoreFront
Workspace
XenApp version
7.6 LTSR and 7.15 LTSR and 7.16 or later
7.6 LTSR and 7.15 LTSR and 7.16 or later
7.6 LTSR and 7.15 LTSR and 7.16 or later
7.6 LTSR and 7.15 LTSR and 7.16 or later
The following table describes the supported Citrix XenDesktop® backends.
Access type
PNAgent (legacy)
Web browser
StoreFront
Workspace
XenApp version
7.6 LTSR and 7.15 LTSR and 7.16 or later
7.6 LTSR and 7.15 LTSR and 7.16 or later
7.6 LTSR and 7.15 LTSR and 7.16 or later
7.6 LTSR and 7.15 LTSR and 7.16 or later
Citrix Connection Manager
NOTE: Connection, configuration, and advanced settings affect only the connection you are currently configuring. General settings affect all Citrix connections.
Connection
The following table describes the settings that are available under the Connection category when editing a
Citrix connection.
Option
Name
Connection Mode
Description
The connection name.
Sets the connection mode to one of the following:
● PNAgent
● StoreFront
● Workspace
NOTE: Authentication options are displayed following this option and vary depending on the connection mode you selected. See Citrix documentation for more information.
NOTE: You can test the connection settings by selecting the Test connection button.
Citrix 13
Option
URL
Ignore Certificate Check
Credentials
User
Password
Domain
Test connection
Description
The Citrix server hostname or IP address. If you are configuring a connection to a server on an HTTPS site, enter the FQDN for the site and the local root certificate in the Citrix certificate store.
The check box next to this option forces an HTTPS connection, if selected.
Bypasses the verification of the Citrix server’s certificate.
NOTE: Workspace mode cannot ignore certificate check.
Sets the authentication mode to one of the following:
● Anonymous login: For StoreFront servers that allow unauthenticated (anonymous) users.
● Use Single Sign-On credentials: The credentials used at login are also used to start the connection.
● Ask for credentials at connection start: There are no pre-supplied credential components.
● Use predefined user, password, and/or domain: Some or all of the credentials are stored and supplied for the connection.
● Use predefined smart card: The connection is expected to be used with a smart card for authentication.
The username for this connection.
The password for this connection.
The domain name for this connection (optional).
Checks the URL and the credentials.
Configuration
The following table describes the settings that are available under the Configuration category when editing a
Citrix connection.
Option
Auto Reconnect Applications on Login
Autostart mode
Description
With this option selected, resources that were open when the user last logged out will be reopened when they log in again.
TIP: If not using the Citrix SmoothRoaming feature, disable this option to increase your connection speed.
Lets you set a specific application or desktop to start automatically when the Citrix connection begins. If set to Auto Start Single Resource, and if there is a single published resource, that resource starts automatically.
NOTE: This option has no effect if Auto Reconnect Applications on Login is selected and there are applications to reconnect to.
If you have selected Auto Start Application or Auto Start Desktop, select the
Enumeration button to retrieve a list of resources (applications or desktops) and display them in Citrix Connection Manager, which enables you to select resources to start automatically upon connection.
If you have selected Auto Start Single Resource, select the Enumeration button to retrieve the number of resources. If there is only one resource, it is started automatically upon connection.
14 Chapter 5 Connection types
Option
Show resources
Show resources in the Start Menu
Show only subscribed resources
Description
With this option selected, you must then select where to display the resources:
● In a window: Displays resources in a window.
● Directly on desktop: Displays resources on the desktop.
With this option selected, remote resources from the connection are shown in the Start menu.
If selected, only subscribed resources are shown during a Citrix connection.
NOTE: This option is not supported when you use Citrix Self-Service UI.
General Settings
NOTE: These settings affect all Citrix connections.
To edit the general settings:
▲ In Citrix Connection Manager, select the General Settings tab, and then select Xen Connection General
Settings Manager.
Options
The following table describes the settings that are available under the Options category when editing the
Citrix general settings.
Option
Enable HDX MediaStream
Enable MultiMedia
Enable Connection Bar
Enable Auto Reconnect
Enable Session Reliability
Enable Smart Card Channel
Session Reliability Timeout (seconds)
Enable Clipboard Redirection
Use Data Compression
Enable H264 Compression
Enable Middle Button Paste
User Agent String
Sound
Description
Enables HDX MediaStream.
Enables multimedia.
Enables the connection bar.
Enable automatic reconnection of dropped connections.
Enables the Citrix Session Reliability feature. See Citrix documentation for more information.
Enables the smart card channel feature.
NOTE: If you want to use a smart card in the Citrix session but are not using a smart card connection, enable this option.
Specifies the session reliability timeout in seconds. The default is 180 seconds.
Enables clipboard redirection.
Use data compression for this connection.
Enables H.264 compression. See Citrix documentation to determine if this method of data compression is best for your use cases.
Enables the middle mouse button paste function.
Specify a User Agent string to be used for requests sent to the Citrix server.
This option is useful for a NetScaler configuration.
Sets the sound quality or disables sound entirely.
Citrix 15
Option
Transport Protocol
Use deprecated cipher suites
Description
Specifies the transport protocol for the connection and whether to use a fallback transport protocol.
● Off (default): Use TCP.
● On: Use UDP and do not fall back to TCP on failure.
● Preferred: Try UDP first and fall back to TCP on failure.
Specifies whether the deprecated cipher suites: TLS_RSA, RD4–MD5,
RC4_128_SHA are allowed or not.
Local Resources
The following table describes the settings that are available under the Local Resources category when editing the Citrix general settings.
Option
Citrix USB Redirection Status
Printers
Webcam/Audio-Input
Drive Mapping/Redirection
Description
To configure, select USB Manager. See
Redirecting USB devices on page 60
.
● Enabled: USB redirection is supported for the Citrix connection.
● Disabled: USB redirection is disabled for the Citrix connection.
Controls how local printer redirection is handled.
Controls how local webcam and audio input redirection is handled.
Specifies the method used to access the local drive.
NOTE: Select only one method of drive redirection.
● USB Redirection: Enables USB redirection. For more options, open USB
Manager.
● Dynamic Drive Mapping: Enables dynamic drive mapping.
● Static Drive Mapping (Legacy): Enables static drive mapping, which allows you to specify drive mappings to local paths. To specify these paths, select Configure Mapping Folders.
16 Chapter 5 Connection types
Window
The following table describes the settings that are available under the Window category when editing the
Citrix general settings.
Option
TWI Mode
Default Window Size
Default Window Colors
Left Monitor
Right Monitor
Top Monitor
Bottom Monitor
Description
Lets you display a single seamless window on the local ThinPro desktop as if it were a native application.
When TWI Mode is set to Force Seamless Off, this controls the default window size.
Sets the default color depth.
When Show the Virtual Desktop on all monitors is disabled, these fields let you specify how the virtual desktop is displayed across specific monitors.
Self-Service
The following table describes the settings that are available under the Self-Service category when editing the
Citrix general settings (for Workspace mode only).
Option
Option 1 Enable Kiosk Mode
Option 1.1 Show taskbar
Option 1.2 Enable shared user mode
Option 2 Disable Citrix Workspace – Preferences
Option 3 Disable Citrix Connection Center
Description
Configure a user device to start up in kiosk mode, in which self-service starts in full screen mode.
Specifies whether the taskbar is displayed or not. Customization Center has more options to customize taskbar.
Multiple users could share the device.
Disable Citrix menu item – Preferences in Self-Service UI.
Disable Citrix menu item – Connection Center in Self-Service UI.
Firewall
The following table describes the settings that are available under the Firewall category when editing the
Citrix general settings.
Option
Proxy Type
Proxy Address
Proxy Port
Username
Password
Use Alternate Address for Firewall Connection
Description
Specifies the proxy type.
The IP address of the proxy server.
The port for connection to the proxy server.
The username to use for connection to the proxy server.
The password to use for connection to the proxy server.
The Citrix ICA Client will request the alternate address defined for the server when contacting servers inside the firewall. The alternate address must be specified for each server in a server farm.
Citrix 17
Keyboard Shortcuts
The following table describes the settings that are available under the Keyboard Shortcuts category when editing the Citrix general settings.
Option
Enable UseLocalIM
Use EUKS Number
Keyboard Mapping File
Handling of keyboard shortcuts
Stop Direct key handling
Alt+F1 ... Alt+F12
Description
Uses the local input method to interpret keyboard input. This is supported only for European languages.
Controls the usage of Extended Unicode Keyboard Support (EUKS) on
Windows servers. Valid options are described below:
● 0: EUKS is not used.
● 1: EUKS is used as a fallback.
● 2: EUKS is used whenever possible.
Specifies the keyboard mapping file. Select Auto to allow the file to be selected automatically. Otherwise, select a specific mapping file.
NOTE: To use your own keyboard mapping file, save it in the folder: /usr/lib/ICAClient/keyboard/ .
Specifies how keyboard shortcuts should be handled. The following settings are available:
● Translated: Keyboard shortcuts apply to the local desktop (client side).
● Direct in full screen desktops only: Keyboard shortcuts apply to the remote desktop (server side), but only for a non-seamless ICA session in full-screen mode.
● Direct: Keyboard shortcuts apply to the remote desktop (server side) for both seamless and non-seamless ICA sessions when their windows have the keyboard focus.
Specifies the key combination that disables Direct handling of keyboard shortcuts.
Lets you add keyboard shortcuts to be handled.
Session
The following table describes the settings that are available under the Session category when editing the
Citrix general settings.
Option
Auto Logout Delay Before App Launch
Description
When using a Citrix server with multiple published resources, this specifies the number of seconds to allow a user to launch an app after login before the system automatically logs out and returns to the initial login screen.
Auto Logout Delay After App Close When using a Citrix server with multiple published resources, this specifies the number of seconds between the closing of the last Xen published resource and when the user is automatically logged out and returned to the initial login screen.
Server Check Timeout To perform a basic connectivity check to the selected server and port, set this option to a value other than the default –1.
TIP: Setting any of these values to less than 0 will disable auto-logout.
18 Chapter 5 Connection types
Option Description
NOTE: Citrix processing delays might increase the auto-logout time.
Advanced
NOTE:
See Advanced connection settings on page 10 for information about the settings available under the
Advanced category when editing a connection.
RDP
The RDP client is based on FreeRDP 1.1 and meets the following requirements for RDP:
● Hardware-accelerated RemoteFX
● MMR supported when connecting to Windows hosts with the Desktop Experience feature enabled
● USBR supported when connecting to RDP servers that enable it
RDP per-connection settings
NOTE: These settings affect the connection you are currently configuring only.
Network
The following table describes the settings that are available under the Network category when editing an RDP connection.
Option
Connection Name
Server Name/Address
Credentials
User
Password
Domain
Description
A custom name for this connection.
The IP address or server name for this connection, or the RD Web Access feed URL. If required, the port can be appended to the server after a colon (by default, the port is
3389 for a direct RDP connection).
NOTE: The RD Web Access feed URL must begin with https:// . By default, this is added automatically as specified by the rdWebFeedUrlPattern registry key, which defines the pattern of the URL.
● Use Single Sign-On credentials: The credentials used at login are also used to start the connection.
● Ask for credentials at connection start: There are no pre-supplied credential components.
● Use predefined user, password, and/or domain: Some or all of the credentials are stored and supplied for the connection.
● Use predefined smart card: The connection is expected to be used with a smart card for authentication.
The username for this connection.
The password for this connection.
The domain name for this connection (optional).
RDP 19
Option
Use RD Gateway
Server Probe
Description
Enables additional RD Gateway options, such as the gateway address, port, and credentials.
Launches the Server Probe, which can be used to determine which RDP features are supported by your RDP server.
Service
The following table describes the settings that are available under the Service category when editing an RDP connection.
Option
Service
Description
Sets the RDP service to one of the following:
● Remote Computer: When using this service, a direct RDP connection is created to a remote computer. A remote application or alternate shell can optionally be started upon connection. The following additional options are available for a Remote
Computer service:
– If Mode is set to Remote Application, the Application field specifies the path of the application to run.
– If Mode is set to Alternate Shell, the Command field specifies the command that executes the application to run in the alternate shell. For example, to run
Microsoft® Word, type Word.exe
.
If Mode is set to Alternate Shell, the Directory field specifies the server’s working directory path for the application’s program files. For example, the working directory for Microsoft Word is C:\Program Files
\Microsoft .
● RD Web Access: When using this service, a list of RemoteApp resources is retrieved from the server and presented to the user, and the actual RDP connection is started when a resource is selected. The following additional options are available for RD
Web Access:
– Keep resource selection window open: With this option selected, users can open multiple resources simultaneously from the resource selection window.
– Auto-start single resource: With this option selected, and if there is a single published resource, that resource will start automatically upon connection.
– Resource filter and Web Feed Browser: These can be used to limit the remote resources that will be made available to the user in the resource selection window.
– Auto-disconnect timeout: With this option selected, you can set how long a
Web Access connection can be maintained before it is automatically closed as a security measure.
NOTE: An advantage of using RD Web Access is that it handles the details of brokered connections and the Load Balance URL automatically.
For more information, see the HP ThinPro white paper RD Web Access Deployment
Example (available in English only).
Window
The following table describes the settings that are available under the Window category when editing an RDP connection.
20 Chapter 5 Connection types
Option
Hide window decorations
Window size
Percentage Size
Fixed Size
Description
This setting makes sure that screen elements such as the menu bar, minimize and close options, and borders of the window pane are not displayed.
Sets the window size to full, fixed, or percent.
If Window Size is set to percent, this option sets the percentage of the screen that a desktop window occupies.
NOTE: The resulting sizes might be rounded.
NOTE: RemoteFX supports only a fixed list of resolutions.
If Window Size is set to fixed, this option sets the width and height in pixels that the desktop window occupies.
Options
The following table describes the settings that are available under the Options category when editing an RDP connection.
Option
Enable motion events
Enable data compression
Enable deprecated RDP encryption
Enable offscreen cache
Attach to admin console
Cross-session copy/paste
Enable buffering of RDP6 primitives
Enable Progressive RemoteFX Codec
Enable Multimedia Redirection
Certificate verification policy
TLS Version
Send hostname as
Description
If enabled, mouse motions are continuously relayed to the RDP server.
Enables bulk compression of data between the RDP server and RDP client.
Enables last-generation RDP encryption when NLA is not available.
If enabled, off-screen memory is used to cache bitmaps.
Attaches the connection to the administrator console port.
If enabled, copy and paste are enabled between different RDP sessions.
If enabled, non-RemoteFX graphics performance is increased at the cost of less frequent screen updates.
Enables the RemoteFX Progressive Codec, which transmits the desktop in a series of sharper and sharper images.
NOTE: This codec might cause visual artifacts on desktops with highly dynamic content, so this codec can be disabled, if necessary.
Allows multimedia files to be sent directly to the client for local playback.
Select one of the following:
● Accept all RDP server certificates
● Use remembered hosts; warn if unknown or invalid certificate
● Skip remembered hosts; warn if unknown or invalid certificate
● Connect only to pre-approved RDP servers
Sets the version of Transport Layer Security to be used during the early stages of negotiation with the RDP server. Either set this to match the version of TLS used by your
RDP server, or try setting it to auto.
NOTE: There are some server-side defects in some unpatched RDP servers that can cause the auto setting to fail, so it is not the default setting.
For per-device licensing, this selects how the client hostname is sent to the RDP server.
Select hostname or mac.
RDP 21
Option
Hostname to send
Load Balance Info
Description
Normally, the thin client's hostname is used for Client Access Licenses. This field allows a different value to be sent.
TIP: Select the (i) icon next to this option for more information.
Use this option with a brokered RDP connection.
TIP: Select the (i) icon next to this option for more information.
NOTE: For more information about the options Enable deprecated RDP encryption and TLS Version, see the HP ThinPro white paper Security Layers for RDP Connections (available in English only).
Local Resources
The following table describes the settings that are available under the Local Resources category when editing an RDP connection.
NOTE: HP recommends high-level device redirection for all local devices unless there is a specific reason to use USB redirection (USBR) instead. For more information, see the HP ThinPro white paper USB Manager
(available in English only).
Option
Audio Devices
Printers
Serial/Parallel Ports
USB Storage
Local Partitions
Smart Cards
Other USB Devices
Description
Determines whether audio devices are redirected by high-level RDP audio redirection, low-level USB redirection, or disabled for this connection.
Determines whether printers are redirected by high-level printer redirection (which requires them to be set up via the Printers tool in Control Panel), low-level USB redirection, or disabled for this connection.
Determines whether serial and parallel ports are redirected or disabled for this connection.
Determines whether USB storage devices such as USB flash drives and optical drives are redirected by high-level storage redirection, low-level USB redirection, or disabled for this connection.
Determines whether local partitions of the USB flash drive of the thin client are redirected or disabled for this connection.
Determines whether smart cards are redirected by high-level smart card redirection or disabled for this connection.
NOTE: When the Use predefined smart card setting is enabled, this setting is disabled.
Determines whether other classes of USB devices (such as webcams and tablets) are redirected by low-level USB redirection or disabled for this connection.
Experience
The following table describes the settings that are available under the Experience category when editing an
RDP connection.
Option
Choose your connection speed to optimize performance
Description
Selecting a connection speed (LAN, Broadband, or Modem) will enable or disable the following options to optimize performance:
22 Chapter 5 Connection types
Option
End-to-End Connection Health
Monitoring
Warning Timeout
Recovery Timeout
Error Timeout
Description
● Desktop background
● Font smoothing
● Desktop composition
● Show contents of window while dragging
● Menu and window animation
● Themes
Selecting Client Preferred Settings allows the RDP client to choose which options to use to provide the best RDP experience.
You can also select your own custom combination of options.
Select to enable the timeout options.
NOTE: For more information, see the HP ThinPro white paper RDP Connection Drop
Detection (available in English only).
Specifies the amount of time in seconds after receiving the last network traffic from the server before the user is warned of a lost connection. This function can be disabled by clearing the option or setting the time to zero.
With the Show Warning Dialog option selected, a warning dialog will be displayed when this timeout is reached. Otherwise, the warning is written to the connection log only.
TIP: HP recommends increasing the timeout value for networks that experience frequent busy periods or momentary outages.
Specifies the amount of time in seconds after receiving the last network traffic from the server that the RDP client waits for the connection to recover without taking any special action. At the end of this period, the RDP client attempts a quick reconnection with the session.
Specifies the amount of time in seconds after receiving the last network traffic from the server that the RDP client waits before stopping attempts to reconnect with that server.
Diagnostics
The following table describes the settings that are available under the Diagnostics category when editing an
RDP connection.
These features diagnose specific problems and are disabled by default.
Option
Show RDP dashboard
Show Connection Health Graph
USB Redirection Analysis
Synchronous X11
Description
If enabled, the RDP dashboard is shown during the connection.
TIP: Select the (i) icon next to this option for more information.
With this option enabled, a two-dimensional graph of response time from the RDP server will be shown when the connection is started.
TIP: Select the (i) icon next to this option for more information.
This feature determines and displays the current redirection method for each redirected
USB device.
TIP: Select the (i) icon next to this option for more information.
Forces frequent flushing of X11 buffers at the cost of performance.
RDP 23
Option
Logging
Capture
Description
Enables the X11 logfile. Select the Autoflush option to increase the frequency of log output at the cost of performance.
Allows the capture and replay of X11 output from a session.
Advanced
NOTE: See
Advanced connection settings on page 10
for information about the settings available under the
Advanced category when editing a connection.
RemoteFX
RemoteFX is an advanced graphics display protocol that is designed to replace the graphics component of the traditional RDP protocol. It uses the hardware acceleration capabilities of the server GPU to encode the screen contents via the RemoteFX codec and send screen updates to the RDP client. RemoteFX uses advanced pipelining technologies and adaptive graphics to make sure that it delivers the best possible experience based on content type, CPU and network bandwidth availability, and rendering speed.
RemoteFX is enabled by default. The administrator or user does not have to change any settings to enable it.
The RDP client negotiates with any RDP server it contacts, and if RemoteFX is available, it will be used.
NOTE: For more information, see the HP ThinPro white paper Enabling RemoteFX for RDP (available in
English only).
RDP multi-monitor sessions
True multi-monitor support does not require special configuration. The RDP client automatically identifies which monitor is specified as the primary monitor in the local settings and places the taskbar and desktop icons on that monitor. When a window is maximized within the remote session, the window will only cover the monitor it was maximized on.
Display preferences and monitor resolutions can be viewed but not modified within the remote session. To modify the session resolution, log out of the session and change the resolution on the local thin client.
By default, all RDP sessions will be full-screen and cover all monitors to enhance the virtualization experience. Additional window options are available in the RDP Connection Manager.
NOTE: Remote Desktop Virtualization Host (RDVH) sessions with graphics card support might only support certain resolutions and counts of monitors. The limits are specified when the RemoteFX virtual graphics device is configured for the RDVH virtual machine.
NOTE: For more information about RDP multi-monitor sessions, see the HP ThinPro white paper True Multi-
Monitor Mode for RDP (available in English only).
RDP multimedia redirection
Multimedia redirection (MMR) is a technology that integrates with Windows Media Player on the remote host and streams the encoded media to the RDP client instead of playing it on the remote host and re-encoding it via RDP. This technology reduces the server load and network traffic, and greatly improves the multimedia experience, supporting 24 fps playback of 1080p videos with automatic audio syncing. MMR is enabled by default. The RDP client will negotiate with any RDP server it contacts, and if MMR is available, it will be used.
24 Chapter 5 Connection types
MMR also uses an advanced codec detection scheme that identifies whether the thin client supports the codec being requested by the remote host before attempting to redirect it. The result is that only supported codecs will be redirected and all unsupported codecs fall back to server-side rendering.
TIP: For simplified management, HP recommends that MMR be enabled or disabled on the remote host.
RDP device redirection
Device redirection makes sure that when a user plugs a device into the thin client, the device is automatically detected and accessible in the remote session. RDP supports redirection of many different types of devices.
RDP USB redirection
USB redirection works by transmitting low-level USB protocol calls over the network to the remote host. Any
USB device plugged into the local host appears within the remote host as a native USB device, as if it were plugged in locally. Standard Windows drivers support the device in the remote session, and all device types are supported without requiring additional drivers on the thin client.
Not all devices default to USB redirection. For example, USB keyboards, mice, and other input devices usually are not set to be redirected, as the remote session expects input to come from the thin client. Some devices such as mass storage, printers, and audio devices might use additional options for redirection.
Note the following additional information about USB redirection with RDP:
● The server must support USB redirection for it to be available to the thin client. General-purpose USB redirection is supported with RDVH servers with RemoteFX, Windows 8, Windows 10, Windows Server
2012, and Windows Server 2016.
● The protocol in USB Manager in Control Panel must be set to RDP.
● For RDP connections, the controls in USB Manager determine if a USB device is redirected. The settings for the individual connection determine how a USB device is redirected.
RDP mass storage redirection
By default, the RDP session redirects all mass storage devices to the remote host using high-level drive redirection. When a device such as a USB flash drive, USB DVD-ROM drive, or USB external HDD is plugged into the thin client, the thin client detects and mounts the drive on the local file system. RDP then detects a mounted drive and redirects it to the remote host. Within the remote host, it will appear as a new disk drive in
Windows Explorer, with the name <device label> on <client hostname> ; for example,
Bill_USB on HP04ab598100ff .
There are three restrictions to this type of redirection.
● The device will not appear in the taskbar on the remote host with an icon to eject the device. Because of this, make sure to give the device a sufficient amount of time to sync data after a copy before removing the device to be sure that the device does not corrupt. Typically, less than one second is required after the file copy dialog finishes, but up to 10 seconds might be required depending on the device write speed and network latency.
● Only file systems supported by the thin client will be mounted. The supported file systems are FAT32,
NTFS, ISO9660 (CD-ROMs), UDF (DVD-ROMs), and ext3.
● The device will be treated as a directory; common drive tasks like formatting and modification of the disk label will not be available.
USB redirection of storage devices can be disabled in an individual connection's settings. If desired, you can disable mass storage redirection altogether. To do this, turn off USB redirection, and then change the registry keys as described in the following table.
RDP 25
Registry entry root/USB/root/holdProtocolStatic root/USB/root/protocol
Value to set
1 local
Description
Makes sure that the USBR type will not be automatically changed when a connection is set or unset
Makes sure that the RDP connection does not attempt to redirect any devices to the remote session
To completely disable local mounting of USB mass storage devices or to disable the redirection of USB mass storage devices but still allow other devices to redirect, in the thin client file system, delete the udev rule /etc/udev/rules.d/010_usbdrive.rules
.
RDP printer redirection
By default, RDP has two methods of printer redirection enabled:
● USB redirection: Any USB printer plugged into the device will show up as a local printer in the remote session. The standard printer installation process must happen in the remote session if the printer is not already installed on that remote host. There are no settings to manage locally.
● High-level redirection: If either USB redirection is unavailable on the remote host or the printer is a parallel or serial printer, use high-level redirection. Configure the printer to use a local printer spooler, and the RDP client automatically sets up a remote printer that sends print spooling commands through a virtual channel from the remote host to the thin client.
A generic postscript driver is used if no driver is specified, but additional printer features might be available if the printer is set up locally with a specific Windows driver. This Windows driver must match the driver that the printer would use when locally attached to a Windows operating system. This information is usually found under Model in the printer properties.
NOTE: See
Serial or parallel printer configuration on page 71 for more information.
RDP audio redirection
By default, high-level audio redirection will redirect audio from the remote host to the thin client. Basic voice control might need to be set up, and RDP 7.1 contains a number of advanced audio redirection features that might require additional configuration.
See the following notes about using audio redirection with RDP:
● RDP delivers the highest quality audio as the network bandwidth allows. RDP reduces audio quality to play on low-bandwidth connections.
● No native audio or video syncing mechanisms are available in standard RDP. Longer videos might not sync with audio. MMR or RemoteFX can resolve this issue.
● HP recommends high-level audio redirection, but USB redirection of audio devices is possible if additional functionality is present, such as a digital volume control. Only high-level redirection is available for analog devices.
● Microphone redirection is enabled by default. The default microphone volume might need to be adjusted on the thin client. Older Windows RDP servers must have their settings modified to enable audio input.
● Both the local and remote volume settings will affect the final volume. HP recommends setting the local volume to a maximum and adjusting the volume within the remote host.
26 Chapter 5 Connection types
RDP smart card redirection
By default, smart cards will be redirected using high-level redirection, allowing them to be used to log in to the session and other remote applications.
To enable smart card login for an RDP connection:
▲ Select Use predefined smart card in the RDP Connection Manager.
This will allow the user to connect without first specifying credentials. The RDP client will start the RDP session, and the user will be prompted to authenticate by smart card.
This technology requires drivers for the smart card reader driver to be installed on the thin client. By default, the CCID and Gemalto drivers are installed, which adds support for the majority of smart card readers available. Additional drivers can be installed by adding them to /usr/lib/pkcs11/ .
NOTE: When smart card login is enabled, Network Level Authentication is not supported and is automatically disabled.
VMware Horizon View
VMware Horizon View per-connection settings
NOTE: These settings affect the connection you are currently configuring only.
Network
The following table describes the settings that are available under the Network category when editing a
VMware Horizon View connection.
Option
Name
Address
Credentials
User
Password
Domain
Description
Enter a name for this connection.
Enter the hostname or IP address of a VMware Horizon View server.
● Log in anonymously using unauthenticated access
● Use Single Sign-On credentials: The credentials used at login are also used to start the connection.
● Ask for credentials at connection start: There are no pre-supplied credential components.
● Use predefined user, password, and/or domain: Some or all of the credentials are stored and supplied for the connection.
● Use predefined smart card: The connection is expected to be used with a smart card for authentication.
Enter the username to use for the connection.
Enter the password to use for the connection.
Enter the domain to use for the connection.
General
The following table describes the settings that are available under the General category when editing a
VMware Horizon View connection.
VMware Horizon View 27
Option Description
Enable MMR
Enable USB auto-connect when inserted
Enable USB auto-connect at startup
Send Ctrl + Alt + Del to virtual desktop
Allow Horizon Client data sharing
Enables multimedia redirection for BLAST and PCoIP connections.
NOTE: HP recommends disabling this option.
For connections made with RDP protocol, use the Enable Multimedia Redirection option.
See
.
Enable USB device redirection when a USB device is inserted.
Enable USB device redirection when a VMware View connection starts.
Enable sending Ctrl + Alt + Del to virtual desktop directly.
If your Horizon administrator has opted to participate in the customer experience improvement program, VMware collects and receives anonymous data on client systems to prioritize hardware and software compatibility.
Enable client drive redirection
Preferred Protocol
Enables the shared folder feature for BLAST and PCoIP connections. This option is enabled by default.
If enabled, applications do not start in maximized windows.
Don’t start application maximized
Automatic login
Virtualization pack for Skype for Business Enables virtualization of Skype for Business.
NOTE: Video calls might use most of the processing power of a thin client. HP recommends disabling this option.
Default Desktop
When enabled, the user is automatically logged in when the connection is established.
NOTE: HP recommends enabling this option.
Specifies a desktop to start automatically when a VMware Horizon View connection is launched.
Lets you select PCoIP, RDP, or BLAST as the preferred protocol or choose to select the protocol later.
Application Size
Desktop Size
Printers
Sets the application window size. You can select All Monitors, Full Screen, Large
Window, or Small Window.
Sets the desktop window size. You can select All Monitors, Full Screen, Large Window, or Small Window.
Controls how local printer redirection is handled:
● ThinPrint: Shares printers using high-level redirection.
● USB Redirection
● Disable
NOTE: For connections made with RDP protocol, see
RDP printer redirection on page 26
.
Security
The following table describes the settings that are available under the Security category when editing a
VMware Horizon View connection.
Option
Close After Disconnect
Description
Makes the VMware Horizon View client close automatically after users log out of their desktops or the session terminates with an error.
28 Chapter 5 Connection types
Option
Hide top Menu bar
Prevent users from changing server address
Enable session roaming monitor
Certificate verification policy
Description
This option is a security feature designed so that a user does not need to take an additional step to fully log out after they are finished with their desktop session.
This option is enabled by default for security purposes but can be disabled if users find that they are often switching to a new desktop pool after logging out of a session and do not want to fully log in again.
Makes the top menu bar invisible for users.
This option enabled by default. Disable it if users prefer to access options for window size or desktop pool selection in a VMware Horizon View session.
If enabled, end users cannot change the server address.
Closes the connection if the session roams from another client. This option is supported on only PCoIP connections.
Select one of the following:
● Allow all connections
● Warn
● Refuse insecure connections
RDP Options
The following table describes the settings that are available under the RDP Options category when editing a
VMware Horizon View connection.
Option
Enable motion events
Enable data compression
Enable deprecated RDP encryption
Enable offscreen cache
Attach to admin console
Cross-session copy/paste
Enable buffering of RDP6 primitives
Enable Progressive RemoteFX Codec
Enable Multimedia Redirection
TLS Version
Send hostname as
Description
Enables motion events for this connection.
Uses data compression for this connection.
Enables encryption for this connection.
If enabled, off-screen memory is used to cache bitmaps.
Attaches the connection to the administrator console port.
If enabled, copy and paste are enabled between different RDP sessions.
If enabled, non-RemoteFX graphics performance is increased at the cost of less frequent screen updates.
Enables the RemoteFX Progressive Codec, which transmits the desktop in a series of sharper and sharper images.
Allows multimedia files to be sent directly to the client for local playback. For more information, see
RDP multimedia redirection on page 24 .
Sets the version of Transport Layer Security to be used during the early stages of negotiation with the RDP server. Either set this to match the version of TLS used by your
RDP server, or try setting it to auto.
NOTE: There are some server-side defects in some unpatched RDP servers that can cause the auto setting to fail, so it is not the default setting.
For per-device licensing, this selects how the client hostname is sent to the RDP server.
Select hostname or mac.
VMware Horizon View 29
Option
Hostname to send
Load Balance Info
Remote computer sound
Enable port mapping
Enable printer mapping
Shared folders
Description
Normally, the thin client's hostname is used for Client Access Licenses. This field allows a different value to be sent.
TIP: Select the (i) icon next to this option for more information.
Use this option with a brokered RDP connection.
TIP: Select the (i) icon next to this option for more information.
Specifies where the remote computer’s sound should be played (remotely or locally) or if it should not be played at all.
Maps the thin client's serial and parallel ports to the remote session.
Maps the local print queue to the remote session. Use this option if either USB redirection is unavailable on the remote host or the printer is a parallel or serial printer.
Configure the printer to use a local printer spooler, and the VMware Horizon View client automatically sets up a remote printer that sends print spooling commands through a virtual channel from the remote host to the thin client.
This method requires both that the printer be configured on the thin client and a
Windows driver be specified on the thin client because the VMware Horizon View client needs to specify to the remote host which driver to use for the remote printer. This
Windows driver must match the driver that the printer would use when locally attached to a Windows operating system. This information is usually found under the Model in the printer properties.
Add, Remove, or Edit shared folders.
RDP Experience
The following table describes the settings that are available under the RDP Experience category when editing a VMware Horizon View connection.
Option
Choose your connection speed to optimize performance
Description
Selecting a connection speed (LAN, Broadband, or Modem) will enable or disable the following options to optimize performance:
● Desktop background
● Font smoothing
● Desktop composition
● Show contents of window while dragging
● Menu and window animation
● Themes
Selecting Client Preferred Settings will allow the VMware Horizon View client to choose which options to use.
You can also select your own custom combination of options.
Select to enable the timeout options.
End-to-End Connection Health
Monitoring
Warning Timeout Specifies the amount of time in seconds after receiving the last network traffic from the server before the user is warned of a lost connection. This function can be disabled by clearing the option or setting the time to zero.
30 Chapter 5 Connection types
Option
Recovery Timeout
Error Timeout
Description
With the Show Warning Dialog option selected, a warning dialog will be displayed when this timeout is reached. Otherwise, the warning is written to the connection log only.
TIP: HP recommends increasing the timeout value for networks that experience frequent busy periods or momentary outages.
Specifies the amount of time in seconds after receiving the last network traffic from the server that the RDP client waits for the connection to recover without taking any special action. At the end of this period, the RDP client attempts a quick reconnection with the session.
Specifies the amount of time in seconds after receiving the last network traffic from the server that the RDP client waits before stopping attempts to reconnect with that server.
TIP: Select the ? icon next to this field for more information.
Advanced
NOTE:
See Advanced connection settings on page 10 for information about the settings available under the
Advanced category when editing a connection.
VMware Horizon View multi-monitor sessions
VMware Horizon View supports multi-monitor sessions. To enhance the virtualization experience, the default
VMware Horizon View sessions use full-screen and span all monitors. To choose a different window size, select Full Screen – All Monitors under the protocol type of the desktop pool for the connection and then choose another option from the window size list. The next time you connect to a session the window will open in the selected size.
VMware Horizon View keyboard shortcuts
Windows keyboard shortcuts
To help administer Windows systems, VMware Horizon View supports Windows keyboard shortcuts. For example, when Ctrl + Alt + Del is used, VMware Horizon View displays a message that provides the following options:
● Send a Ctrl+Alt+Del command.
● Disconnect the session: Use this when you have no other way of ending the session.
Windows keyboard shortcuts will be forwarded to the remote desktop session. The result is that local keyboard shortcuts, such as Ctrl + Alt + Tab and Ctrl + Alt + F4 , will not function while inside the remote session.
TIP: To be able to switch sessions, disable the Hide top Menu bar option in the VMware Horizon View
Connection Manager or via the registry key root/ConnectionType/view/connections/<UUID>/ hideMenuBar .
Media keys
VMware Horizon View uses media keys to control options such as volume, play/pause, and mute during a remote desktop session. This supports multimedia programs such as Windows Media Player.
VMware Horizon View 31
VMware Horizon View device redirection
VMware Horizon View USB redirection
To enable USBR for VMware Horizon View connections, select VMware Horizon View as the remote protocol in
USB Manager.
For more information on USBR, including device- and class-specific redirection, see
RDP USB redirection on page 25 .
VMware Horizon View audio redirection
If you do not need the audio recording capability, use high-level audio redirection. Audio will play out of the
3.5 mm jack or, by default, a USB headset if it is plugged in. Use the local audio manager to adjust the input/ output level, select playback, and capture devices.
The VMware Horizon View client supports high-level audio-record redirection only via the PCoIP connection type on x86 units when connecting to a server running VMware Horizon View 5.2 Feature Pack 2 or higher or the BLAST connection type on x86 units when connecting to a server running VMware Horizon View 7.x or higher. If you need audio-recording support and are using a different configuration, use one of the following methods:
● If your system uses VMware Horizon View Client 1.7 or higher, use the RDP protocol to allow for highlevel audio redirection through either the 3.5 mm jack or a USB headset.
NOTE: To use high-level audio-record redirection through the RDP protocol, the server must support it and be configured to allow audio recording over a remote session. The server must be running Windows
7 or greater. You also must make sure the HKLM\SYSTEM\CurrentControlSet\Control
\Terminal Server\WinStations\RDP-Tcp\fDisableAudioCapture registry key is set to
0 .
● If you have a USB headset with a microphone, you can use USBR. Set the USB headset to be redirected into the session. The headset will show up as an audio device. By default, USB audio devices are not redirected and the VMware Horizon View client uses high-level audio redirection. To redirect the USB headset, use the thin client’s USB Manager and select the USB headset to be redirected. Make sure that
VMware Horizon View is selected as the USBR protocol and make sure that the headset is selected under the devices to be redirected.
NOTE: VMware and HP do not recommend using USBR for headsets. A large amount network bandwidth is required to stream audio data over the USBR protocol. Also, you might experience poor audio quality with this method.
VMware Horizon View smart card redirection
To use a smart card to log in to the VMware Horizon View server:
1.
Be sure smart card login is enabled in the VMware Horizon View Connection Manager.
After starting the connection, the VMware Horizon View client will display a list of server credentials.
2.
To unlock the credentials and access the VMware Horizon View Manager server, type the appropriate PIN for the server.
NOTE: After you supply the correct PIN, the user’s credentials will be used to log in to the VMware Horizon
View Manager server. Please see the VMware Horizon View documentation for details on configuring the server to support smart card login. As long as the server is configured to allow smart card login, the user’s credentials will pass through and they will be logged in to the desktop without having to enter their PIN again.
32 Chapter 5 Connection types
NOTE: To log in to the VMware Horizon View Manager administrator server with a smart card, the local
information on smart card driver installation. Once logged in to the remote host, the smart card will be passed to the remote host using a virtual channel, not USBR. This virtual channel redirection makes sure that the smart card can be used for tasks such as email signing, screen locking, and so on, but might cause the smart card to not show as a smart card device in the Windows Device Manager.
NOTE: The remote host must have the proper smart card drivers installed.
VMware Horizon View webcam redirection
The VMware Horizon View client supports high-level webcam redirection only through RTAV using x86 units connected to a back-end server running VMware Horizon View 5.2 Feature Pack 2 or higher. Other connection methods do not support high-level webcam redirection and can redirect webcams only using USBR. Based on internal testing and validation, HP has found that the performance of a webcam connected through basic
USBR performs poorly. HP does not recommend the use of this configuration and suggests that customers who require this function test using x86 units with RTAV technology to ensure satisfactory levels of
for more information.
VMware Horizon View COM port redirection
To enable COM port redirection for VMware Horizon View connection:
▲ Set root/ConnectionType/view/general/enableComPortRedirection to 1 in regeditor.
NOTE: By default, this setting is enabled.
Changing the VMware Horizon View protocol
VMware Horizon View Client can use either the PCoIP, RDP, or BLAST protocol.
To change the protocol:
1.
In VMware Horizon View Client, select a pool that supports one of the supported protocols.
2.
Under the Connection menu, select Settings.
3.
Change the protocol by using the drop-down box next to Connect Via.
NOTE: Use VMware Horizon View Manager to set which protocol should be used for each desktop pool.
TIP: HP recommends using the PCoIP protocol to enhance the desktop experience. However, the RDP protocol provides more options for customization and might work better on slower connections.
VMware Horizon View HTTPS and certificate management requirements
VMware Horizon View Client 1.5 and VMware Horizon View Server 5.0 and later require HTTPS. By default, the
VMware Horizon View client warns about untrusted server certificates, such as self-signed (like the VMware
Horizon View Manager default certificate) or expired certificates. If a certificate is signed by a Certificate
Authority (CA) and the CA is untrusted, the connection will return an error and the user will not be allowed to connect.
HP recommends that a signed certificate verified by a standard trusted root CA be used on the VMware
Horizon View Manager server. This makes sure that users will be able to connect to the server without being prompted or required to do any configuration. If using an internal CA, the VMware Horizon View client connection returns an error until you complete one of the following tasks:
VMware Horizon View 33
● Use Certificate Manager to import the certificate from a file or URL.
● Use a remote profile update to import a certificate.
● In the VMware Horizon View Connection Manager, set Connection Security Level to Allow all
connections.
The following table describes certificate trust when the security level is set to Refuse insecure connections.
Certificate trust
Trusted
Self-signed
Expired
Untrusted
Result
Trusted
Error
Error
Error
The following table describes certificate trust when the security level is set to Warn.
Certificate trust
Trusted
Self-signed
Expired
Untrusted
Result
Trusted
Warning
Warning
Error
The following table describes certificate trust when the security level is set to Allow all connections.
Certificate trust
Trusted
Self-signed
Expired
Untrusted
Result
Trusted
Untrusted
Untrusted
Untrusted
The following table describes the connection behavior associated with each result.
Result
Trusted
Untrusted
Warning
Error
Description
Connects without a certificate warning dialog and displays a green lock icon
Connects without a certificate warning dialog and displays a red unlock icon
Connects with a certificate warning dialog and displays a red unlock icon
Does not allow the connection
34 Chapter 5 Connection types
Web Browser
Web Browser per-connection settings
NOTE: These settings affect the connection you are currently configuring only.
Configuration
The following table describes the settings that are available under the Configuration category when editing a
Web Browser connection.
Option
Name
URL
Intended Use
Allow smartcard login
Enable kiosk mode
Enable full screen
Enable print dialog
Description
The connection name.
The URL for the connection.
Lets you specify how USB redirection is performed when the Web Browser connection starts. Select Citrix, RDP, or Internet.
Allows you to use smart-card authentication for a connection if you select a URL or icon that starts a remote connection.
Enables kiosk mode.
Uses full screen mode for the connection.
Enables the print dialog box.
Preferences
Use these options to configure the Web Browser. These options can be shared by multiple Web Browser connections or be specific to a single connection.
Advanced
NOTE:
See Advanced connection settings on page 10 for information about the settings available under the
Advanced category when editing a connection.
Additional connection types (ThinPro only)
NOTE: By default, these connection types are not available in Smart Zero. For more information, see
Choosing an OS configuration on page 2
.
XDMCP
NOTE: These settings affect the connection you are currently configuring only.
Configuration
The following table describes the settings that are available under the Configuration category when editing an XDMCP connection.
Web Browser 35
Option
Name
Type
Address
Use font server
Font server
Configure display
Description
The connection name.
The XDMCP connection type. Valid options are: chooser, query, and broadcast.
This value is required if the Type value is set to query.
Use a remote X font server instead of locally installed fonts.
Font server is not enabled unless the Use font server option is selected.
Select to set the display configuration for the connection. If you do not set this configuration, the default configuration will be used.
Advanced
NOTE: See
Advanced connection settings on page 10
for information about the settings available under the
Advanced category when editing a connection.
Secure Shell
NOTE: These settings affect only the connection you are currently configuring.
Configuration
The following table describes the settings that are available under the Configuration category when editing an SSH connection.
Option
Name
Address
Port
User name
Run application
Compression
X11 connection forwarding
Force TTY allocation
Foreground color
Background color
Font
Description
The connection name.
The IP address of the remote system.
The remote port to use for the connection.
The username to use for the connection.
The application to run to make the connection.
Select this option if you want to compress the data sent between the server and thin client.
If the server has an X server on it, select this option to allow the user to open user interfaces from the SSH session and display them locally on the thin client.
Select this option and specify a command to initiate a temporary session to run the command. Once the command has completed, the session will terminate. If no command is specified, then the session will run normally as if the option were not selected.
The default color of the text in the SSH session.
The default color of the background in the SSH session.
Valid options are: 7X14, 5X7, 5X8, 6X9, 6X12, 7X13, 8X13, 8X16, 9X15, 10X20, and
12X24.
36 Chapter 5 Connection types
Advanced
NOTE:
See Advanced connection settings on page 10 for information about the settings available under the
Advanced category when editing a connection.
Telnet
NOTE: These settings affect the connection you are currently configuring only.
Configuration
The following table describes the settings that are available under the Configuration category when editing a
Telnet connection.
Option
Name
Address
Port
Foreground color
Background color
Font
Description
The name of the connection.
The IP address of the remote system.
The port to use on the remote system.
The foreground color.
The background color.
Valid options are: 7X14, 5X7, 5X8, 6X9, 6X12, 6X13, 7X13, 8X13, 8X16, 9X15, 10X20, and 12X24.
Advanced
NOTE:
See Advanced connection settings on page 10 for information about the settings available under the
Advanced category when editing a connection.
Custom
If you would like to install a custom Linux® application, you can use the Custom connection to allow you to open this application through Connection Manager.
NOTE: These settings affect the connection you are currently configuring only.
Configuration
The following table describes the settings that are available under the Configuration category when editing a
Custom connection.
Option
Name
Enter command to run
Description
The connection name.
The command to run to make the remote connection.
Advanced
NOTE:
See Advanced connection settings on page 10 for information about the settings available under the
Advanced category when editing a connection.
Additional connection types (ThinPro only) 37
6 HP True Graphics
HP True Graphics offloads rich multimedia content to the thin client’s GPU, delivering high-frame-rate images and boosting efficiency.
Server-side requirements
See the following table for a list of supported server-side products of the independent software vendor (ISV) you are using for your virtual desktop infrastructure (VDI).
ISV
Citrix®
VMware®
Supported products
XenApp®/XenDesktop® 7.0 or newer
IMPORTANT: The Citrix server must support sending session data in H.264 format (a
Citrix technology known as SuperCodec). H.264 is enabled by default and is processed using the DeepCompressionV2 encoder, a CPU-based compression algorithm.
VMware Horizon™ 6.0 and newer
VMware Horizon View™ 5.2 and 5.3
VMware View® 5.1
Client-side requirements
See the following table for a list of supported thin client operating systems and supported client-side software from the ISV you are using for your VDI.
NOTE: HP True Graphics are not available with a Trial ThinPro license.
Supported operating systems
HP ThinPro 5.0 and newer
Supported Citrix clients
Citrix Receiver 13.1.1 and newer
NOTE: A version of Citrix Receiver that supports HP True Graphics is preinstalled starting with HP ThinPro 5.2 and is available as an add-on for HP ThinPro 5.0 and 5.1.
Supported VMware clients
VMware Horizon Client 4.0 and newer
(using the Blast protocol)
Client-side configuration
NOTE: The information in this section applies to Citrix only. For VMware, simply use the Blast protocol to enable HP True Graphics.
Compression settings
To enable HP True Graphics on HP ThinPro:
▲ Select the Enable H264 Compression general setting for Citrix connections.
38 Chapter 6 HP True Graphics
NOTE: Some screen data, such as text, might be sent using methods other than H.264. In general, it is best to keep this feature enabled, but for troubleshooting or specific use cases, the following registry keys can be set to 0 to disable this feature:
● root/ConnectionType/xen/general/enableTextTracking
● root/ConnectionType/xen/general/enableSmallFrames
Window settings
To force remote applications to run in windowed mode:
▲ Set the TWI Mode general setting for Citrix connections to Force Seamless Off.
Monitor layout and hardware limitations
Consider the following limitations on monitor layout:
● Most configurations with a maximum of two monitors that have a 1920 × 1200 resolution are supported.
● HP t420 Thin Client: Due to its default BIOS configuration, this model uses HP True Graphics for one
for more information.
● HP t630 Thin Client: This model supports a maximum of two monitors at 1920 × 1200 or one monitor at
3840 × 2160.
● HP t730 Thin Client: This model supports a maximum of three monitors at 1920 × 1200.
● Rotated monitors might not display correctly.
● If you are using HP True Graphics with two monitors and trying to play a video using HDX MediaStream, the video will fail because H.264 supports only two hardware decode sessions, which are being consumed by the monitors.
NOTE: HDX MediaStream is also trying to leverage local hardware decoding of H.264, which causes the issue.
Enabling HP True Graphics for multiple monitors on the HP t420
To enable HP True Graphics for multiple monitors on the HP t420:
1.
Restart the thin client and press F10 to access the BIOS.
2.
Select Advanced ► Integrated Graphics.
3.
Set Integrated Graphics to Force.
4.
Set UMA Frame Buffer Size to 512 MB.
After these steps are performed, the amount of memory available for graphics is expanded, and HP True
Graphics can be used for two monitors.
TIP: These settings can also be configured via HPDM or via the BIOS tools included with HP ThinPro.
Client-side configuration 39
Tips & best practices
Consider the following when using HP True Graphics:
● After connecting to a remote desktop, you can use Citrix HDX Monitor to determine which encoder is being used for the session by examining the Component_Encoder value under the Graphics - Thinwire
Advanced section. If the value reads DeepCompressionV2Encoder or DeepCompressionEncoder, then the server is properly sending the data in a format that is accelerated by HP True Graphics.
NOTE: If legacy graphics are being forced via a server policy, such as CompatibilityEncoder or
LegacyEncoder, the server is compressing graphics in a method that is compatible with older versions of
Citrix clients, and HP True Graphics will not provide enhanced performance.
● HP True Graphics might provide some benefits to older versions of XenDesktop if using HDX 3D Pro.
Benefits are not provided if HDX 3D Pro is used with the visual quality set to Always Lossless, because then the graphical information is not sent to the thin client in H.264 format.
40 Chapter 6 HP True Graphics
7 Active Directory integration
By using Active Directory integration, you can force users to log in to the thin client using domain credentials.
Optionally, those credentials can be encrypted and stored and then later supplied to remote connections as they start, which is a process known as single sign-on.
NOTE: Enabling authentication requires no special domain permissions.
There are two modes in which Active Directory integration can operate. By simply enabling authentication against the domain, domain credentials can be used for the following operations:
● Logging in to the thin client
● Starting a connection using Single Sign-On
● Switching to administrator mode using administrative credentials
● Unlocking a locked screen using the login credentials
● Overriding a locked screen using administrative credentials
The thin client can also be formally joined to the domain. This adds the thin client to the domain’s database and might enable dynamic DNS, where the thin client informs the DNS server of changes in its IP address or hostname association. Unlike domain authentication, a formal join requires credentials of a domain user authorized to add clients to the domain. Joining to the domain is optional. All domain functions except dynamic DNS are available without joining.
Login screen
When domain authentication is enabled, ThinPro displays a domain login screen upon startup. The login screen also includes options that might be necessary to configure before logging in.
The background desktop layout, login dialog style, login dialog text, and which buttons are available can all be adjusted via registry settings and/or configuration file settings. For more information, see the HP ThinPro white paper Login Screen Customization (available in English only).
If the system detects that the user tried to log in with expired credentials, they are prompted to update their credentials.
Single sign-on
After a domain user has logged in, the credentials that were used can also be presented at startup to any connection configured to use them. This allows a user to sign in to the thin client and start Citrix, VMware
Horizon View, and RDP sessions without having to enter their credentials again, for as long as they are logged in to the thin client.
Desktop
Once the user has successfully logged in using domain credentials, an Active Directory icon is available on the taskbar. The user can select the icon to perform the following functions:
Login screen 41
● Show who is logged in to the system
● Lock the screen
● Change the domain password
Screen lock
The screen can be locked due to inactivity timeout or through manual locking. If the screen was locked by a domain user, the unlock dialog expects the user to provide the same domain password they used to log in.
Like the login dialog, there are options provided, plus one additional function: screen unlock. If the screenunlock button is selected, the unlock screen instead requires the root (administrator) password or any set of domain credentials in the domain admin group, which was designated during domain authentication setup.
When the user supplies override credentials, the screen does not return to the desktop; it instead returns to the login screen.
Administrator mode
In addition to the traditional method of using the root password to enter administrator mode, the domain credentials of a user in the designated domain administrator group can be used to switch to administrator mode.
Settings and the domain user
When a domain user is logged in, any changes to settings are saved in a registry layer that applies only to that user. This includes newly created connections.
If the user has made no changes to system settings or connections, the system defaults will apply instead.
When the system is changed to administrator mode, settings and connection changes are no longer being made to the user-specific layer of the registry. Instead, while in administrator mode, all changes apply instead to the base-level registry. In that way, a change to a setting while in administrator mode applies to all users unless there is a user-specific, custom setting already specified.
42 Chapter 7 Active Directory integration
8 Start menu
▲ To open the Start menu, select Start .
Connection management
The menu lists all the available connections. Right-click the connection name to manage that connection or select it to start the connection. If the connection is running, selecting it stops the connection. For more information on connection management, see
Desktop connection management on page 9 .
Switch to Administrator/Switch to User
This option allows you to switch between administrator mode and user mode.
System Information
This option starts the System Information application. For more information, see
.
Control Panel
This option starts Control Panel. For more information, see Control Panel on page 45
.
Tools
There are many system tools provided, including one to start programs, such as a text terminal, or to run the
Initial Setup Wizard a second time. If you are logged in as a user, only authorized tools are displayed. If this list is empty, the Tools menu entry is hidden.
Menu option
X Terminal
Wireless Statistics
Check for Updates
Text Editor
Task Manager
Snipping Tool
Registry Editor
Description
Lets you execute Linux commands.
Lets you view information about wireless access points.
Searches for updates from the server.
Opens a basic text editor for viewing and editing text files.
Lets you monitor the CPU usage and the CPU usage history for the thin client.
Lets you take a snapshot of a rectangular selection of the screen, a specific window, or the entire screen.
Opens the ThinPro Registry Editor.
Connection management 43
Menu option
Initial Setup Wizard
Compatibility Check
Description
Starts the Initial Setup Wizard.
Runs the ThinPro Compatibility Check tool, which assesses the system's suitability for running ThinPro.
Power
These options allow you to log out, shut down the computer, restart the computer, or enable the Sleep state.
An administrator can restrict the options visible to a user using the Power Manager tool. See
Search
When you type in the search box, a set of potential matches for your search are displayed from most likely to least likely. The search includes the visible names of controls, tools, and connections and associated aliases and synonyms. For example, in administrator mode, typing encryption displays the Security control, because that control offers encryption parameters.
To see all available options, type a space in the search box or select the magnifying glass icon.
Search also returns the options to create new connections of all available types. This can be used to manage connections.
44 Chapter 8 Start menu
9 Control Panel
Control Panel lets you modify the system configuration.
To open Control Panel:
▲ Select Start, and then select Control Panel.
NOTE: You can also search for a specific Control Panel function using the Start menu search box.
NOTE: All Control Panel items are accessible in administrator mode. In user mode, only Control Panel items that are enabled by the administrator for use by users are accessible.
TIP: To specify which Control Panel items end users have access to, open Control Panel, select Appearance, select Customization Center, and then select or clear items in the Applications list.
System
Menu option
Date and Time
Network
DHCP Options
Power Manager
Imprivata Setup
Component Manager
Factory Reset
Snapshots
Description
Lets you configure the time zone and the date and time options.
Lets you configure network settings.
For more information, see
Lets you configure DHCP options.
For more information, see
Lets you configure power management settings such as a screen saver and screen lock, CPU settings, when to turn off the display, and when to enter the Sleep state.
In administrator mode, you can restrict access to power-related options (such as Reboot) on a system-wide basis.
Lets you enable Imprivata Appliance Mode and specify an
Imprivata server.
Lets you remove system components.
For more information, see
Component Manager on page 50 .
Lets you restore the thin client to its default factory configuration.
Lets you restore the thin client to a previous state or to its default factory configuration.
Network settings
Network settings can be configured using the Network Manager. To open the Network Manager:
▲ Select System and then select Network in Control Panel.
See the following sections for more information about the different tabs in the Network Manager:
●
System 45
●
●
●
●
Wired network settings
The following table describes the options available in the Wired tab of the Network Manager.
Option
Enable IPv6
Ethernet Speed
Connection Method
MTU
Security Settings
Description
Enables IPv6. IPv4 is used by default, and they cannot be used at the same time.
Lets you set the Ethernet Speed. If your switch or hub does not have a special requirement, leave this at the default setting of Automatic.
Lets you choose between Automatic and Static. If your network environment is using DHCP, then the
Automatic option should work without any further configurations needed.
If Static is selected, the Static Address Configuration settings will become available. Be sure to input these values according to whether you are using IPv4 or IPv6.
Allows you to enter the maximum transmission unit (in bytes).
Lets you set the authentication setting to one of the following:
● None
● 802.1X-TTLS
● 802.1X-PEAP
● 802.1X-TLS
Note the following about TTLS and PEAP:
● The Inner Authentication option should be set to whatever your server supports.
● The CA Certificate setting should point to the server’s certificate on the local thin client.
● The Username and Password are the user’s credentials.
Note the following about TLS:
● The CA Certificate setting should point to the server’s certificate on the local thin client.
● If your Private Key file is .p12 or .pfx, then the User Certificate setting can be left blank.
● The Identity setting should be the username that corresponds to the user certificate.
● The Private Key Password setting is the password of the user’s private key file.
Wireless network settings
Use this tab to add, edit, and delete wireless profiles that correspond to wireless networks.
The following tables describe the options available when adding or editing a wireless profile.
NOTE: This tab is available only if the thin client has a wireless adapter.
TIP: You can also access these settings by selecting the network status icon in the taskbar.
Use the Wireless tab to configure general settings.
46 Chapter 9 Control Panel
Option
Scan AP
SSID
Wireless Band
SSID Hidden
Enable IPv6
Enable Power Management
Connection Method
Security Settings
Auto Connect
Enable Wireless
Description
Scans for available wireless networks.
Use this box to manually enter the SSID of the wireless network if it is not found by the scan.
Select Auto, 2.4GHz, or 5GHz.
Enable this option if the SSID of the wireless network is set to be hidden (not broadcasting).
Enables IPv6. IPv4 is used by default, and they cannot be used at the same time.
Enables the power management feature for the wireless adapter.
Lets you select between Automatic and Static. If your network environment is using DHCP, then the
Automatic option should work without any further configurations.
If Static is selected, the Static Address Configuration settings will become available. Be sure to input these values according to whether you are using IPv4 or IPv6.
Lets you set the authentication setting to one of the following:
● None
● WEP
● WPA/WPA2-PSK
● 802.1X-TTLS
● 802.1X-PEAP
● 802.1X-TLS
● EAP-FAST
For WEP and WPA/WPA2-PSK, you just need to enter the network key and select OK.
For EAP-FAST, set Anonymous Identity, Username, Password, and Provisioning Method. You do not need to change the PAC file settings.
See Wired network settings on page 46
for more information about TTLS, PEAP, and TLS.
This option is reserved for future use.
Enables the wireless adapter.
Use the IPv4 tab to configure IPv4 connection settings.
Option
IPv4 Enabled
IPv4 Method
Description
Enables IPv4.
Lets you select between Automatic and Static. If your network environment is using DHCP, then the
Automatic option should work without any further configurations.
If Static is selected, the Static Address Configuration settings are displayed, and you must enter the
IPv4 settings.
Use the IPv6 tab to configure IPv6 connection settings.
Option
IPv6 Enabled
Description
Enables the usage of an IPv6 global address.
System 47
Option
IPv6 Method
Description
NOTE: HP ThinPro tries to obtain an IPv6 global address via route advertisement or DHCPv6.
Lets you select between Automatic and Static. If your network environment is using DHCP, then the
Automatic option should work without any further configurations.
If Static is selected, the Static Address Configuration settings are displayed, and you must enter the
IPv6 settings.
Use the Security tab to configure the connection security settings.
Option
Authentication
Description
Lets you set the authentication setting to one of the following:
● None
● WEP
● WPA/WPA2-PSK
● WPA/WPA2 Enterprise-TTLS
● WPA/WPA2 Enterprise-PEAP
● WPA/WPA2 Enterprise-TLS
● EAP-FAST
For WEP and WPA/WPA2-PSK, you just need to enter the network key and select OK.
For EAP-FAST, set Anonymous Identity, Username, Password, and Provisioning Method. You do not need to change the PAC file settings.
See
Wired network settings on page 46 for more information about TTLS, PEAP, and TLS.
DNS settings
The following table describes the options available in the DNS tab of the Network Manager.
Option
Hostname
DNS Servers
Search Domains
HTTP Proxy
FTP Proxy
HTTPs Proxy
Description
This is generated automatically according to the MAC address of the thin client. You can alternatively set a custom hostname.
Use this box to set custom DNS server information.
Use this box to restrict the domains that are searched.
Use these boxes to set proxy server information using the following format: http://<address>:<port>
HP recommends using the http:// prefix for all three proxy settings because it is supported better.
NOTE: The proxy settings are set to the http_proxy, ftp_proxy, and https_proxy environmental variables for the system.
48 Chapter 9 Control Panel
IPSec rules
Use this tab to add, edit, and delete IPSec rules. An IPSec rule should be the same for each system that uses
IPSec to communicate.
When configuring an IPSec rule, use the General tab to set the rule’s information, addresses, and authentication method. The Source Address is the IP address of the thin client, and the Destination Address is the IP address of the system that the thin client is going to communicate with.
NOTE: Only the PSK and Certificate authentication types are supported. Kerberos authentication is not supported.
Use the Tunnel tab to configure settings for tunnel mode.
Use the Phase I and Phase II tabs to configure advanced security settings. The settings should be the same for all peer systems that communicate with each other.
NOTE: An IPSec rule can also be used to communicate with a computer running Windows.
Configuring VPN settings
HP ThinPro supports two types of VPN:
● Cisco
● PPTP
Enable the Auto Start option to start the VPN automatically.
Note the following about creating a VPN using Cisco:
● The Gateway is the gateway’s IP address or hostname.
● The Group name and Group password are the IPSec ID and IPSec password.
● The Domain setting is optional.
● The User name and User password are the user credentials that have rights to create a VPN connection on the server side.
● The Security Type should be set the same as it is on the server side.
● The NAT Traversal option should be set according to your VPN environment.
● The IKE DH Group option sets the Diffie-Hellman group to use for VPN.
● The PFS Type option sets the Diffie-Hellman group to use for Perfect Forward Secrecy.
Note the following about creating a VPN using PPTP:
● The Gateway is the gateway’s IP address or hostname.
● The NT Domain setting is optional.
● The User name and User password are the user credentials that have rights to create a VPN connection on the server side.
DHCP options
To open the DHCP Option Manager:
▲ Select System and then select DHCP Options in Control Panel.
The DHCP Option Manager displays details of the DHCP options that are requested by the thin client.
System 49
TIP: The drop-down list allows you to filter which DHCP tags are displayed.
To direct the thin client to request or ignore specific DHCP options:
▲ Select or deselect the check boxes in the Requested column.
If a pencil is shown in the DHCP Code column, the code number can be changed in case there is a conflict on your DHCP server over a particular code number.
To change a DHCP code:
▲ Double-click the DHCP code and type a new number.
NOTE: Changeable DHCP codes can only be changed while that DHCP option is enabled in the
Requested column.
To learn more about how a DHCP option is used on the thin client and on the DHCP server:
▲ Select the icon in the Info column of that option.
Component Manager
Component Manager lets you remove system components that are not used in your environment, which might be desirable to reduce the image size or increase security. For example, if Citrix connections are never used in your environment, you might want to remove the Citrix component.
As components are removed, the new configuration can be tested before you apply the changes permanently.
You can also undo changes that were made, if the changes have not yet been applied permanently.
IMPORTANT: After the new configuration is applied permanently, all snapshots are removed and a new factory snapshot is created. Removed components cannot be restored after this point.
NOTE: Removing components might not reduce the use of local disk space, but it should reduce the size of any disk images created from the local system.
To open the Component Manager:
▲ Select System and then select Component Manager in Control Panel.
Removing components
To remove components:
1.
In the Component Manager, select the desired components.
TIP: To select multiple components, use Ctrl or Shift .
2.
Select Remove Component(s).
3.
If the confirmation dialog appears, select OK.
4.
After the components are removed, test the new configuration.
Undoing a change
You can undo each change, one at a time, if the changes have not yet been applied permanently. A restart of the thin client is required after each undo.
To undo a change made with the Component Manager:
50 Chapter 9 Control Panel
1.
In the Component Manager, select Revert Last Change.
2.
Select Yes to restart the thin client.
Repeat this process for as many changes you want to undo.
IMPORTANT: If you take a snapshot of the image while testing a new configuration, you cannot undo the changes via the Component Manager. Those changes can be undone only by restoring a previous snapshot via the Snapshots tool. However, this does not work if the changes have already been applied permanently, because that function deletes all existing snapshots. If changes have already been applied permanently, you must reinstall the operating system to restore most removed components. Some components (such as Citrix,
RDP, and VMware Horizon View) might be available as add-ons on the web and can be restored by reinstalling them.
Applying the changes permanently
To apply changes made with the Component Manager permanently:
IMPORTANT: After the new configuration is applied permanently, all snapshots are removed and a new factory snapshot is created. Removed components cannot be restored after this point.
1.
In the Component Manager, select Apply Component Configuration.
2.
Select Yes.
Security
Menu option
Security
Change Domain Password
Certificates
Firewall Manager
SCEP Manager
Description
For more information, see
Security settings on page 51 .
If a domain is being used, lets you change the domain password.
Opens Certificate Manager, which lets you easily import, view, or remove certificates.
For more information, see
Certificate Manager on page 53
.
Lets you configure firewall settings.
Allows for network-based certificate management.
Security settings
Security settings can be configured using Security Manager. To open Security Manager, select Security and then select Security in Control Panel.
See the following sections for more information about the different tabs in Security Manager.
●
●
●
Local Accounts
The Local Accounts tab can be used to change the local root and user account passwords or to disable authentication using those accounts.
Security 51
CAUTION: Disabling the root and/or user accounts might leave your system in an unusable state unless
Active Directory authentication is enabled. For example, if the root account is disabled, you will only be able to change to administrator mode using domain credentials of an administrator. However, disabling the local accounts might improve security when Active Directory authentication is enabled because you no longer have to maintain and update a shared secret such as the thin client’s root password.
If Active Directory authentication has been used and there is any cached data for domain users on the thin client, you can also delete the user’s cached data from this tab.
NOTE: If the user logged in using a domain account, they cannot delete their own account’s data because it would leave the system in an indeterminate state.
Encryption
Active Directory credentials and other secrets can be hashed for functions like screen-unlock and/or encrypted and stored on the system for single sign-on.
The hash algorithm for creating a password’s hash can be selected from this menu. The default, scrypt, is a well-accepted key derivation function. Argon2, another key derivation function is also available, as well as conventional hashes SHA-256 and SHA-512. The advantage of a key derivation function is that it is computationally expensive to compute a rainbow table that matches plain-text passwords to precomputed hash values, whereas conventional hashes are meant to execute as fast as possible. All hashes are stored with 128 or more bits of random salt which changes each time the password hash is computed and stored.
Encrypted passwords are used in situations where they can be reversed and supplied to connections when they start (single sign-on). The encryption algorithm can be selected here from a wide variety supported by
OpenSSL. Unless there is a good reason to select a different value, HP recommends using the default encryption algorithm, which is generally regarded as a modern, secure algorithm by the security community.
The number of salt bits and key bits will vary from one algorithm to another and you can get details by pressing the info button next to the algorithm selector. Encryption keys are unique per thin client and are stored in a place that only administrators can read. Furthermore, only certain authorized applications on the system can do decryption.
Both hashes and encrypted secrets can be set with a time-to-live. If the amount of time between when the secret was hashed or encrypted and the time when it is used or decrypted exceeds the time-to-live, the hashmatch or decryption will fail.
By default, the single sign-on password is usable for only one day, but any passwords stored with connection or network settings can be used indefinitely.
Options
Local user must log in: If this option is selected when Active Directory authentication is disabled, the login screen still appears at startup and logout. In this situation, the local user or root credentials must be used to gain access to the system.
Enable secret peek: If enabled, most password and secret entry fields on the system display a small eyeball icon on the right side. When that eyeball icon is selected by pressing and holding down the left mouse button, the secret is displayed in plain text as long as the mouse button is held down. As soon as the button is released, the secret is again obscured.
Use domain text entry: If enabled, a separate Domain input field is provided for the domain name where applicable. If disabled, the domain is determined by the value entered in the User field instead. For instance, if the User field contains “mike@mycorp”, the domain is assumed to be “mycorp”. If the user field is “graycorp
\mary”, the domain is assumed to be “graycorp”.
Allow administrators to override screen lock: If enabled, you can override a locked screen and return it to the login screen or ThinPro desktop, just as if the user had manually logged out of the thin client.
52 Chapter 9 Control Panel
Certificates
NOTE: For more information about using certificates in Linux, go to https://www.openssl.org/docs/ .
Certificate Manager
To open Certificate Manager:
▲ Select Security and then select Certificates in Control Panel.
Use Certificate Manager to manually install a certificate from a certificate authority (CA). This action copies the certificate to the user’s local certificate store (/usr/local/share/ca-certificates) and configures OpenSSL to use the certificate for connection verification.
NOTE: Generally, a self-signed certificate will work as long as it is valid according to specification and can be verified by OpenSSL.
SCEP Manager
To open the SCEP Manager:
▲ Select Security and then select SCEP Manager in Control Panel.
Use the SCEP Manager when you need to enroll or renew client-side certificates from a CA.
During an enrollment or renewal, the SCEP Manager generates the thin client’s private key and certificate request, and then it sends the request to the CA on the SCEP server. When the CA issues the certificate, the certificate is returned and placed in the thin client’s certificate store. OpenSSL uses the certificate for connection verification.
NOTE: Before enrollment, make sure that the SCEP server is configured properly.
Use the Identifying tab of the SCEP Manager to enter information about the user, if desired.
NOTE: The Common Name is required and is the Fully Qualified Domain Name (FQDN) of the thin client by default. The other information is all optional. The Country or Region is entered as two letters, such as US for the United States and CN for China.
Use the Servers tab of the SCEP Manager to add SCEP servers and enroll or renew certificates.
TIP: When entering a new SCEP server, save the server information first, and then use the Settings button to go back and do an enrollment.
Manageability
Menu option
Active Directory
Automatic Update
Easy Update
Description
For more information, see
Active Directory configuration on page 54 .
Lets you configure the Automatic Update server manually.
For more information, see
HP Smart Client Services on page 64 .
Launches HP Easy Tools.
For more information, see the user guide for HP Easy Tools.
Manageability 53
Menu option
HPDM Agent
SSHD Manager
ThinState
VNC Shadow
Description
Lets you configure the HP Device Manager (HPDM) Agent.
For more information, see the Administrator Guide for HPDM.
Enables access through a secure shell.
HP ThinState lets you make a copy of or restore the entire operating system image or just its configuration settings.
For more information, see HP ThinState on page 55
.
Lets you configure VNC Shadowing options.
For more information, see VNC Shadowing on page 58
.
Active Directory configuration
Status tab
This control lets you activate or deactivate authentication against a domain, joining the domain, and various domain-related options.
After you make a change to domain parameters on the Status tab, the page shows a pending action and you must select Apply to make that action happen. Joining or unjoining the domain requires credentials with permissions to perform that operation. After enabling authentication or joining the domain, some of the subparameters might be marked as read-only because it is not possible to change them at that point in time.
Instead, you must unjoin or disable authentication altogether and then apply the changes. Then you can reenable authentication or join with altered sub-parameters.
Option
Domain name
Authenticate against domain
Require thin client login
Workgroup
Domain controllers
Join the thin client to the domain
Organizational Unit (OU)
Dynamic DNS
Description
If the thin client can determine the domain name using DHCP options, it will be displayed here. Otherwise you will have to enter the fully-qualified domain name manually.
When enabled, domain credentials can be used, as outlined in the Active Directory
Integration section of this guide.
This is on by default, and it causes the system to boot up into the domain login screen. If disabled, domain credentials can still be used to switch to administrator mode or to override a locked screen, but single sign-on will not be available.
Usually this is auto-detected from information provided by network servers, but you can use this as a manual override if you have an unusual network topology.
These are usually detected using DNS lookups, but you can specify them manually if your network is not supplying that information.
As explained in the chapter on Active Directory Integration, this option lets you formally add the thin client to the Active Directory’s databases.
The thin client is usually added to the “Computers” OU of the database, but you can manually enter a different value here if your database schema demands it.
If enabled, the thin client will try to update the DNS server whenever its IP-address/ hostname association changes.
54 Chapter 9 Control Panel
Options tab
Option
Enable single sign-on
Domain login group
Domain admin group
Enable cached domain login
Retain user preferences at logout
Allow domain password changes
Description
If enabled, a password supplied at login is encrypted and saved on the system. When a connection starts with SSO credentials configured, it can decrypt the password and pass it to the connection so that it can be used for remote login.
If enabled, login is restricted to users in the listed domain group.
If enabled, escalation to administrator mode and screen-lock override is limited to members of the listed domain group.
If enabled, a hash of the user’s password is saved on the system and can be used for login even when the Active Directory server is inaccessible.
If this option is enabled, any setting changes made by a domain user are stored in a place where those settings are applied only to that user. If this option is disabled, any such userspecific changes are discarded when the user logs out.
If enabled, expired passwords result in a prompt that allows the user to update their password, and they can manually update their password using the user icon on the taskbar.
HP ThinState
HP ThinState allows you to capture and deploy an HP ThinPro image or configuration (profile) to another thin client of compatible model and hardware.
Managing an HP ThinPro image
Capturing an HP ThinPro image to an FTP server
To capture an HP ThinPro image to an FTP server:
IMPORTANT: The directory on the FTP server where you intend to save the captured image must already exist before initiating the capture.
1.
Select Management > ThinState in Control Panel.
2.
Select the HP ThinPro image, and then select Next.
3.
Select make a copy of the HP ThinPro image, and then select Next.
4.
Select a FTP server, and then select Next.
5.
Enter the FTP server information in the fields.
NOTE: The name of the image file is set by default to be the thin client’s hostname.
Select Compress the image if you want to compress the captured image.
NOTE: The HP ThinPro image file is a simple disk dump. The uncompressed size is about 1 GB, and a compressed image without add-ons is approximately 500 MB.
6.
Select Finish.
When the image capture begins, all applications stop and a new window appears showing the progress.
If a problem occurs, select Details for information. The desktop reappears after the capture is complete.
Manageability 55
Deploying an HP ThinPro image using FTP or HTTP
IMPORTANT: If you stop a deployment before it is finished, the previous image is not restored and the contents of the USB flash drive of the thin client will be corrupted.
To deploy an HP ThinPro image using FTP or HTTP:
1.
Select Management > ThinState in Control Panel.
2.
Select the HP ThinPro image, and then select Next.
3.
Select restore an HP ThinPro image, and then select Next.
4.
Select either the FTP or HTTP protocol, and then enter the server information in the fields.
NOTE: The Username and Password fields are not required if you use the HTTP protocol.
5.
Select Retain HP ThinPro Configuration if you want to preserve all previously configured settings.
6.
Select Finish.
When the image deployment begins, all applications stop and a new window appears showing the progress. If a problem occurs, select Details for information. The desktop reappears after the deployment is complete.
NOTE: An MD5sum check is done only if the MD5 file exists on the server.
Capturing an HP ThinPro image to a USB flash drive
To capture an HP ThinPro image to USB flash drive:
IMPORTANT: Back up any data on the USB flash drive before you begin. HP ThinState automatically formats the USB flash drive to create a bootable USB flash drive. This process erases all data currently on the USB flash drive.
1.
Select Management > ThinState in Control Panel.
2.
Select the HP ThinPro image, and then select Next.
3.
Select make a copy of the HP ThinPro image, and then select Next.
4.
Select create a bootable USB flash drive, and then select Next.
The thin client restarts and then prompts you to enter a USB flash drive.
5.
Insert a USB flash drive into a USB port on the thin client.
6.
Select the USB flash drive, and then select Finish.
A new window displays the progress. If a problem occurs, select Details for information. The desktop reappears after the capture is complete.
Deploying an HP ThinPro image with a USB flash drive
To deploy an HP ThinPro image with a USB flash drive:
IMPORTANT: If you stop a deployment before it is finished, the previous image is not restored and the contents of the USB flash drive of the thin client will be corrupted. In this state, the thin client must be reimaged using a USB flash drive.
56 Chapter 9 Control Panel
1.
Turn off the target thin client.
2.
Insert the USB flash drive.
3.
Turn on the thin client.
NOTE: The screen remains black for 10-15 seconds while the thin client detects and boots from the USB flash drive. If the thin client fails to boot from the USB flash drive, try unplugging all other USB devices and repeat the procedure.
Managing a client profile
A client profile contains the connections, settings, and customizations that you configured using Connection
Manager and Control Panel. A profile is saved in a configuration file that is specific to the version of HP
ThinPro in which it was created.
NOTE: A client profile can also be preconfigured and deployed using Profile Editor and Automatic Update
(see
and HP Smart Client Services on page 64
for more information).
Saving a client profile to an FTP server
To save a client profile to an FTP server:
IMPORTANT: The directory on the FTP server where you intend to save the profile must already exist before initiating the save.
1.
Select Management > ThinState in Control Panel.
2.
Select the HP ThinPro configuration, and then select Next.
3.
Select save the configuration, and then select Next.
4.
Select on a FTP server, and then select Next.
5.
Enter the FTP server information in the fields.
6.
Select Finish.
Restoring a client profile using FTP or HTTP
To restore a client profile using FTP or HTTP:
1.
Select Management > ThinState in Control Panel.
2.
Select the HP ThinPro configuration, and then select Next.
3.
Select restore a configuration, and then select Next.
4.
Select on a remote server, and then select Next.
5.
Select either the FTP or HTTP protocol, and then type the server information in the fields.
NOTE: The Username and Password fields are not required if you are using the HTTP protocol.
6.
Select Finish.
Saving a client profile to a USB flash drive
To save a client profile to a USB flash drive:
1.
Insert a USB flash drive into a USB port on the thin client.
2.
Select Management > ThinState in Control Panel.
Manageability 57
3.
Select the HP ThinPro configuration, and then select Next.
4.
Select save the configuration, and then select Next.
5.
Select on a USB key, and then select Next.
6.
Select the USB flash drive.
7.
Select Browse.
8.
Navigate to the desired location on the USB flash drive and assign a file name to the profile.
9.
Select Save.
10.
Select Finish.
Restoring a client profile from a USB flash drive
To restore a client profile from a USB flash drive:
1.
Insert the USB flash drive containing the profile into a USB port on the target thin client.
2.
Select Management > ThinState in Control Panel.
3.
Select the HP ThinPro configuration, and then select Next.
4.
Select restore a configuration, and then select Next.
5.
Select on a USB key, and then select Next.
6.
Select the USB key.
7.
Select Browse.
8.
Double-click the desired configuration file on the USB key.
9.
Select Finish.
VNC Shadowing
Virtual Network Computing (VNC) is a remote desktop protocol that allows you to see the desktop of a remote computer and control it with your local mouse and keyboard.
To increase security, HP recommends leaving VNC disabled unless it is needed for remote diagnosis. Then, disable VNC when remote access to the thin client is no longer necessary.
To access the VNC Shadow tool:
▲ Select Manageability and then select VNC Shadow in Control Panel.
NOTE: You must restart the thin client before any changes to the VNC Shadowing options will take effect.
The following table describes the options available in the VNC Shadow tool.
Option
Enable VNC Shadow
VNC Read Only
VNC Use Password
Show “Stop Shadowing” Button
Description
Enables VNC Shadowing.
Makes the VNC session read-only.
Makes a password required when accessing the thin client using VNC.
Select Set Password to set the password.
If enabled, a Stop Shadowing button shows in the top left corner of the remote system. It stops VNC shadowing when pressed.
58 Chapter 9 Control Panel
Option
VNC Allow Loopback Only
VNC Notify User to Allow Refuse
Automatically close the notification after (seconds)
User Notification Message
Refuse connections in default
Re-set VNC server right now
Input Devices
Menu option
Keyboard
Keyboard Shortcuts
Mouse
Description
If enabled, you can connect to the VNC server only from this thin client that is identified by the loopback address.
Enables a notification dialog on the remote system that informs the remote user when someone is attempting to connect using VNC. The user can refuse either allow or refuse access.
Closes the User Notification Message after x seconds.
Allows you to display a message in the notification dialog to the remote user.
If enabled, the VNC connection will be refused by default when the timer expires.
Resets the VNC server after applying the new settings.
Touch Screen
Ibus
Description
Lets you change the keyboard layout to accommodate the language used by the primary keyboard and the secondary keyboard.
Lets you create, modify, and delete keyboard shortcuts.
Lets you configure the mouse speed and whether mouse input is right-handed or left-handed.
On thin clients with a TouchPad, this menu option also lets you disable or enable the TouchPad.
Lets you configure touch screen options.
Lets you configure lbus (Intelligent Input Bus) for multilingual input.
lbus is not enabled by default. To enable lbus:
Control Panel>Input Devices>lbus Input Method>Start IBUS on boot
The Default Ibus configuration file can be modified or restored to factory settings from the Control Panel as well.
After reboot, the Ibus tray icon appears. Select the icon to choose language. Right-click the icon for more configuration options.
NOTE: Ibus in ThinPro is preloaded with Chinese, Japanese, and
Korean languages. To add additional languages:
1.
Right-click the lbus system tray icon.
2.
Select the Input Method tab.
3.
Select Add.
Input Devices 59
Hardware
Menu option
Display
Sound
USB Manager
Serial Manager
Printers
Description
Lets you configure and test display options.
For more information, see Display management on page 60
.
Lets you control the playback, input devices, and input audio levels.
Lets you configure the redirection options for USB devices.
For more information, see Redirecting USB devices on page 60 .
Lets you configure serial devices.
Lets you set up local and network printers. Local printers can be shared across the network.
For more information, see Configuring printers on page 60 .
Display management
Display management allows you to configure screen settings and apply these changes in session. To open display management:
Control Panel>Hardware>Display Management.
Redirecting USB devices
To redirect USB devices:
1.
In Control Panel, select Hardware, and then select USB Manager.
2.
On the Protocol page, select a remote protocol.
If the setting is Local, you can also specify the options allow devices to be mounted and mount devices
read-only.
3.
On the Devices page, you can enable or disable redirection for individual devices if necessary.
4.
On the Classes page, you can select specific device classes to be redirected to remote sessions.
5.
When you are finished, select Apply.
Configuring printers
To configure a printer:
1.
Select Hardware and then select Printers in Control Panel.
2.
In the Printing dialog, select Add .
3.
In the New Printer dialog, select the printer to configure, and then select Forward.
NOTE: If you select a serial printer, be sure to input the correct settings on the right side of the dialog, or the printer might not function correctly.
4.
Select the make of the printer. If you are unsure, select the Generic (recommended) option, and then select Forward.
60 Chapter 9 Control Panel
5.
Select the model of and driver for the printer, and then select Forward.
NOTE: If you are unsure of the printer model or which driver to use, or if the model of your printer is not listed, select Back and try using the Generic (recommended) option for the make of the printer.
If using the Generic (recommended) make, be sure to select text-only (recommended) for the model and Generic text-only printer [en] (recommended) for the driver.
6.
Fill in optional information about the printer, such as its name and location.
NOTE: HP recommends that you type the correct driver name into the Windows Driver box. The driver must also be installed on the Windows server for the printer to work properly. If a driver is not specified, a generic postscript driver is used. Using a specific Windows driver might enable more printer functions.
7.
Select Apply, and then print a test page if desired.
Repeat this process to configure additional printers if necessary.
TIP: The most common problem is that the wrong driver is being used for the printer. To change the driver, right-click the printer and select Properties, and then change the make and model.
Appearance
Menu option
Background Manager
Customization Center
Language
Description
Lets you configure the background theme and dynamically display system information (such as the hostname, IP address, hardware model, and MAC address of the thin client) in the background.
For more information, see the HP ThinPro white paper Login
Screen Customization (available in English only).
Lets you do the following:
● Switch between the ThinPro and Smart Zero configurations
● Configure desktop and taskbar options
● Select which connection types and Control Panel items end users have access to
For more information, see
Customization Center on page 61 .
Lets you display the HP ThinPro interface in a different language.
Customization Center
To open Customization Center:
▲ Select Appearance and then select Customization Center in Control Panel.
The button at the top of the Desktop page can be used to switch between the ThinPro and Smart Zero configurations. See
Choosing an OS configuration on page 2
for more information about the differences between the two configurations.
Appearance 61
NOTE: When switching from ThinPro to Smart Zero, if you have configured a single connection, that connection is used automatically as the Smart Zero connection. If you have configured multiple connections, you are prompted to select the connection to use.
Before switching to Smart Zero mode, the domain authentication function on the thin client should be disabled. Domain authentication and Smart Zero mode are incompatible.
The following table describes the rest of the options available on the Desktop page.
Option Description
Launch the Connection Manager at start up
When enabled, Connection Manager launches automatically at system startup.
Enable right-click menu Disable this option to disable the context menu that appears when you right-click the desktop
Enable X host access control security When enabled, only the systems listed in the XHost Access Control List area are allowed to remotely control the thin client.
Enable USB Update
Authenticate USB Update
Enables updates to be installed from a USB flash drive. See
for more information.
Disable this option to allow end users to install updates via USB.
Allow user to switch to administrator mode
Time before cancelling administrator mode
Disable this option to remove the Administrator/User Mode Switch option from Control Panel in user mode.
Specifies the idle timeout (in minutes) after which administrator mode will be terminated. If set to 0 or negative, administrator mode will never be automatically terminated.
Use the Connections and Applications pages to select which connection types and Control Panel applications are available in user mode.
Use the Taskbar page to configure the taskbar.
62 Chapter 9 Control Panel
10 System Information
In the Start menu, select System Information to view system, network, and software information. The following table describes the information that is displayed on each panel.
Panel
General
Network
Net Tools
Software Information
Software License
System Logs
Description
Displays information about the BIOS, operating system, CPU, and memory.
Displays information about the network interface, gateway, and DNS settings.
Provides the following tools for monitoring and troubleshooting purposes:
● Ping: Specify an IP address of another device on the network to attempt to establish contact.
● DNS Lookup: Use this tool to resolve a domain name into an IP address.
● Trace Route: Use this tool to track the path that a network packet takes from one device to another.
Displays a list of installed add-ons on the Service Packs tab and software version information on the Software Installed tab.
TIP: You can also access the Administrator Guide (this document) from this screen.
Displays the EULA for the HP ThinPro operating system and, if not auto-licensed, information about ThinPro licenses on the system.
Displays the following logs:
● Authorization and Security
● Connection Manager
● DHCP Leases
● General System Log
● Kernel
● Network Manager
● Smart Client Services
● X Server
● OneSign
In administrator mode, the debug level can be changed to display additional information that might be requested by HP support for troubleshooting purposes.
.
NOTE:
See SystemInfo on page 145 for information about registry keys that can be used to hide the System
Information screens.
63
11 HP Smart Client Services
HP Smart Client Services is a set of server-side tools that enable you to configure client profiles that can be distributed to large numbers of thin clients. This function is called Automatic Update.
HP ThinPro detects an Automatic Update server upon startup and configures settings accordingly. This simplifies device installation and maintenance.
Supported operating systems
HP Smart Client Services supports the following operating systems:
● Windows Server® 2016
● Windows Server 2012 R2
● Windows Server 2012
● Windows 7
● Windows Server 2008
● Windows Server 2008 R2
● Windows Server 2003
● Windows Vista®
● Windows XP
NOTE: The installer is 32-bit only, although it is supported on both the 32-bit and 64-bit versions of the
Windows operating system.
Prerequisites for HP Smart Client Services
Before installing HP Smart Client Services, verify the configuration and installation status of the following components:
● Internet Information Services (IIS)
● .NET Framework 3.5
For information about installing or enabling these components on the operating system that you are using for the server, go to http://www.microsoft.com
.
Obtaining HP Smart Client Services
To obtain HP Smart Client Services, go to ftp://ftp.hp.com/pub/tcdebian/SmartClientServices/ .
64 Chapter 11 HP Smart Client Services
Viewing the Automatic Update website
1.
On the server desktop, select Start > Control Panel, and then select Administrative Tools.
2.
Double-click Internet Information Services (IIS) Manager.
3.
In the left pane of the IIS Manager, expand the following items:
“Server name” > Sites > HP Automatic Update > auto-update
NOTE: The physical location where the Automatic Update files are stored is as follows:
C:\Program Files (x86)\HP\HP Smart Client Service\auto-update
Creating an Automatic Update profile
Automatic Update uses profiles to deploy a configuration to thin clients. By default, when you create a profile
using Profile Editor (see Profile Editor on page 68
), the tool lets you save it to the following folder:
C:\Program Files (x86)\HP\HP Smart Client Service\auto-update
\PersistentProfile\
You can also export an existing profile from a thin client using HP ThinState and copy the profile to this location.
When searching for updates, HP ThinPro looks for this folder and applies the profile saved there. This ensures that all thin clients use the same configuration.
MAC-address-specific profiles
Automatic Update profiles can be created for a single MAC address. This can be useful when some thin clients need a different configuration.
Profiles for a single MAC address must be stored on the Automatic Update server, in the following folder:
C:\Program Files (x86)\HP\HP Smart Client Service\auto-update
\PersistentProfile\MAC\
When searching for updates, HP ThinPro looks for the generic profile first, and then a MAC-address-based profile. These profiles are merged and installed together on the thin client. The MAC-address-based profile address-based profile is used.
takes precedence; that is, if the same registry key has a different value in both files, the value in the MAC-
This ensures that a shared configuration can be provided to all thin clients, but a specific customization can be added, if necessary.
This section describes how to create an Automatic Update profile for a single MAC address.
1.
Obtain the MAC address of the thin client using the system info. For example, the following steps use the
MAC address 00fcab8522ac .
2.
Use Profile Editor to create or modify a client profile (see Profile Editor on page 68
) until you are ready to save the client profile.
3.
In Profile Editor, select the Finish link in the left-hand pane to access the Current profile pane.
4.
Select Save profile as to save the client profile as the following:
C:\Program Files (x86)\HP\HP Smart Client Service\auto-update
\PersistentProfile\MAC\00fcab8522ac.xml
Viewing the Automatic Update website 65
5.
Select the Finish button in the Current profile pane to exit Profile Editor.
6.
Restart the thin client that uses the specified MAC address to initiate the Automatic Update process.
Updating thin clients
Using the broadcast update method
To do a broadcast update, plug the thin client into the same network as the update server. A broadcast update relies on HP Smart Client Services, which works with IIS to automatically push updates to the thin client.
NOTE: Broadcast updates work only if the thin client is on the same subnet as the server.
TIP: To verify that the broadcast updates are working, run Profile Editor and make some changes. Connect the thin client and verify that it has downloaded the new profile. If it has not, see
Using the DHCP tag update method
On the Windows Server systems, DHCP tagging enables a thin client to update. Use this method to update specific thin clients; however, if you have only one or two clients to update, consider using the manual update method instead. Otherwise, HP recommends the broadcast update method.
Example of performing DHCP tagging
The example in this section shows how to perform DHCP tagging on a Windows 2008 R2 Server.
NOTE: To use DHCP tagging, see your DHCP server documentation.
1.
On the server desktop, select Start > Administrative Tools > DHCP.
2.
In the left pane of the DHCP screen, select the domain where the thin clients are connected.
3.
In the right pane of the DHCP screen, expand and right-click IPv4, and then select Set Predefined
Options.
4.
In the Predefined Options and Values dialog, select Add.
5.
In the Option Type box, configure the options as described in the following table.
Field
Name
Data Type
Code
Description
Entry
Enter auto-update .
Select String.
Enter 137 .
Enter HP Automatic Update .
6.
Select OK.
7.
In the Predefined Options and Values dialog, under Value > String, enter the update server address in the format of the following example: http://auto-update.dominio.com:18287/auto-update
8.
To complete the setup, select OK. DHCP tagging is now ready to update specific thin clients.
66 Chapter 11 HP Smart Client Services
Using the DNS alias update method
During system startup, Automatic Update attempts to resolve the DNS alias auto-update. If that host name resolves, it attempts to check for updates at http://auto-update:18287. This update method enables thin clients to access a single update server across the entire domain, thus simplifying management for deployments with many subnets and DHCP servers.
To configure the DNS alias update method:
▲ Change the hostname of the server hosting HP Smart Client Services to auto-update or create a DNS alias of auto-update for that server.
Using the manual update method
Use the manual update method to connect a thin client to a specific server for an update. Also, use this method if you want to test an update on a single thin client before pushing the update to many thin clients, or if you have specific updates to be installed on only one or two thin clients.
NOTE: Be sure you specify the hostname of the manual server in the profile that you are updating to.
Otherwise the settings reset to automatic when downloading the profile. Use Profile Editor to modify these settings at root/auto-update.
NOTE: If multiple thin clients require specific updates, use the DHCP tagging method.
If no update segregation is required, use the broadcast update method.
Performing a manual update
1.
Select Management > Automatic Update in Control Panel.
2.
Select Enable manual configuration.
3.
Set the Protocol as http.
4.
In the Server field, enter the update server hostname and port in the following format:
<hostname>:18287
5.
In the Path field, enter the following: auto-update
6.
Select Preserve thin client configuration if you want to preserve all previously configured settings.
7.
Select OK, and then the thin client will pull the updates.
Updating thin clients 67
12 Profile Editor
HP Smart Client Services contains Profile Editor, which allows administrators to create client profiles and upload them to the Automatic Update server.
TIP: In addition to creating a new client profile, you can edit an existing profile that was exported using HP
ThinState.
A client profile contains the connections, settings, and customizations that were configured using Connection
Manager and various Control Panel items. A client profile is saved in a configuration file that is specific to the version of HP ThinPro in which it was created.
Opening Profile Editor
▲ Select Start, select All Programs, select HP, select HP Automatic Update Server, and then select
Profile Editor.
Loading a client profile
The name of the currently-loaded client profile is indicated on the initial screen of Profile Editor.
To load a different client profile:
1.
At the initial screen of Profile Editor, select the link that displays the name of the currently-loaded client profile.
2.
Navigate to a client profile, and then select Open.
Client profile customization
Selecting the platform for a client profile
Use the Platform screen in Profile Editor to do the following:
● Select the desired HP ThinPro image version that is compatible with your hardware
● Choose between ThinPro and Smart Zero
● View installed client kits that provide additional registry settings
NOTE: Client kits should be placed in the following directory:
C:\Program Files (x86)\HP\HP Smart Client Service\auto-update\Packages
To configure a client profile’s platform settings:
1.
On the Platform screen in Profile Editor, select an OS Build ID that corresponds to the desired image version.
IMPORTANT: Be sure to create a different client profile for each hardware type.
68 Chapter 12 Profile Editor
NOTE: If a client kit is installed, it is displayed automatically in the Client Kits box, and additional registry settings will be available on the Registry screen.
2.
Set the configuration to either standard (ThinPro) or zero (Smart Zero).
NOTE: For older image versions, this setting is greyed out and set to zero automatically.
Configuring a default connection for a client profile
To configure a default connection for a client profile:
1.
On the Connection screen in Profile Editor, choose the desired connection type from the Type dropdown list.
NOTE: The available connection types differ depending on whether you chose ThinPro or Smart Zero on the Platform screen.
2.
In the Server field, enter the name or IP address of the server.
Modifying the registry settings of a client profile
To change default registry settings for a client profile:
1.
On the Registry screen in Profile Editor, expand the folders in the Registry settings tree to locate the registry setting you want to change.
2.
Select the registry key, and then enter the desired value in the Value field.
NOTE:
See Registry keys on page 79 for a comprehensive list and description of registry keys.
Adding files to a client profile
Use the Files screen in Profile Editor to add configuration files that will be installed on the thin client automatically when the client profile is installed. This is typically used for the following reasons:
● To add certificates
● To modify device settings when a registry setting for the change is unavailable
● To modify the behavior of the system by inserting custom scripts or modifying existing scripts
You can also specify a symbolic link that points to a file already installed on the thin client. Use this when the file needs to be accessed from more than one directory.
Adding a configuration file to a client profile
1.
On the Files screen in Profile Editor, select Add a file.
2.
Select Import File, locate the file to be imported, and then select Open.
NOTE: Files can also be exported using the Export File button, if further details about the file are required.
3.
In the Path field, enter the path where the file will be installed on the thin client.
4.
In the File details section, set the Owner, Group, and Permissions fields to the appropriate values.
Client profile customization 69
NOTE: Typically, setting the owner and group as root and the permissions as 644 is satisfactory. If a special owner, group, or permissions are required, refer to standard Unix® file permissions for guidelines on changing the file details.
5.
Select Save to finish adding the configuration file to the client profile.
NOTE: A file installed as part of a profile will automatically overwrite any existing file on the file system at the destination path. Additionally, a second profile without the file attached will not revert previously attached files. All files that have been installed through profile attachment are permanent and must be reverted manually or through a factory reset.
Adding certificates to a client profile
Client profiles automatically include certificates that are imported to a standard client certificate store for the following applications:
● VMware Horizon View, Citrix, RDP
● Automatic Update
● HP Smart Client Services
● Web browser stores
To import other certificates to a client profile:
1.
On the Files screen in Profile Editor, select Add a file.
2.
Select Import File, locate the certificate, and then select Open.
NOTE: The certificate should be formatted as a .pem
or .crt
file.
3.
In the Path field, set the path to the following:
/usr/local/share/ca-certificates
4.
Select Save to finish adding the certificate to the client profile.
5.
After installing the client profile, use Certificate Manager to confirm that the certificate was imported properly.
Adding a symbolic link to a client profile
1.
On the Files screen in Profile Editor, select Add a file.
2.
In the Type drop-down list, select Link.
3.
In the Symbolic link details section, set the Link field to the path of the desired file already installed on the thin client.
4.
Select Save to finish adding the symbolic link.
Saving the client profile
1.
In Profile Editor, select Finish in the left-hand pane to access the Current profile screen.
2.
Select Save Profile to save to the current client profile, or select Save Profile As to save as a new client profile.
NOTE: If Save Profile is disabled, your client profile has not changed since the last time it was saved.
3.
Select the Finish button in the Current profile screen to exit Profile Editor.
70 Chapter 12 Profile Editor
Serial or parallel printer configuration
You can use Profile Editor to set up the serial or parallel printer ports. A USB printer automatically maps when plugged in.
Obtaining the printer settings
Before configuring printer ports, obtain the printer's settings. If available, check the printer's documentation before going further. If it is not available, follow these steps:
1.
For most printers, press and hold the Feed button while turning the device on.
2.
After a few seconds, release the Feed button. This allows the printer to enter a test mode and print the required information.
TIP: You might need to turn the printer off to cancel the Test mode or press Feed again to print a diagnostic page.
Setting up printer ports
1.
In Profile Editor, select Registry, and then enable the Show all settings check box.
2.
Enable printer port mapping for your connection type:
● Citrix: No action is required.
● RDP: Navigate to root > ConnectionType > freerdp. Right-click the connections folder, select New
connection, and then select OK. Set the portMapping registry key to 1 to enable printer port mapping.
● VMware Horizon View: Navigate to root > ConnectionType > view. Right-click the connections folder, select New connection, and then select OK. Under the xfreerdpOptions folder, set the
portMapping registry key to 1 to enable printer port mapping.
3.
Navigate to root > Serial. Right-click the Serial folder, select New UUID, and then select OK.
4.
Under the new directory, set the baud, dataBits, flow, and parity values to the ones obtained in
Obtaining the printer settings on page 71
.
Set the device value to the port the printer will be plugged into. For example, the first serial port would be /dev/ttyS0 , the second serial port would be /dev/ttyS1 , and so on. For USB serial printers, use the format /dev/ttyUSB# , where # is the number of the port, starting with 0.
Installing printers on the server
1.
On the Windows desktop, select Start > Printers and Faxes.
2.
Select Add Printer, and then select Next.
3.
Select Local Printer attached to this Computer and, if required, deselect Automatically detect and
install my Plug and Play printer.
4.
When completed, select Next.
5.
In the menu, select a port.
Serial or parallel printer configuration 71
NOTE: The port you need is in the section of ports labeled TS###, where ### is a number between
000–009, 033–044. The appropriate port depends on your hostname and the printer you want to install.
For example, with a hostname of ZTAHENAKOS and a serial printer, select the port with
(ZTAHENAKOS:COM1). For a parallel printer, select (ZTAHENAKOS:LPT1). The TS### is assigned by the server, so it will not be the same every time.
6.
Select the manufacturer and driver for your printer.
TIP: If desired, use the driver disc Windows Update to install the driver.
NOTE: For basic or test printing, the Generic Manufacturer or Generic/Text Only printer usually works.
7.
If prompted to keep the existing driver and it is known to work, keep it, and then select Next.
8.
Assign a name to the printer. To use it as the default printer, select Yes, and then select Next.
9.
To share the printer, select Share name and assign it a share name. Otherwise, select Next.
10.
On the next page, you may request a test print. HP recommends this because it will verify the printer setup is correct. If it is not set up properly, review the settings and try again.
NOTE: If the thin client disconnects from the server, the printer will need to be set up again the next time the thin client connects.
72 Chapter 12 Profile Editor
13 Troubleshooting
Troubleshooting network connectivity
1.
Ping a server by completing the following steps: a.
Select the System Information button on the taskbar, and then select the Net Tools tab.
b.
Under Select Tool, select Ping.
c.
In the Target Host box, enter the server address, and then select Start Process.
If the ping is successful, the system displays the following output:
PING 10.30.8.52 (10.30.8.52) 56(84) bytes of data.
64 bytes from 10.30.8.52:icmp_seq-1 ttl=64 time=0.81 5 ms 64 bytes from 10.30.8.52:icmp_seq=2 ttl=64 time=0.735 ms
If the ping is unsuccessful, the thin client might be disconnected from the network and experience a long delay with no system output.
2.
If the thin client does not respond to the ping, complete the following steps: a.
Check the network cable and check the network settings in Control Panel.
b.
Try pinging other servers or thin clients.
c.
If you can reach other thin clients, verify that you typed the correct server address.
d.
Ping the server using the IP address instead of the domain name or vice-versa.
3.
Check the system logs by doing the following: a.
Select the System Information button on the taskbar, and then select the System Logs tab.
b.
Check for any errors in the logs.
c.
If there is an error, then the Server is not set up notification appears. Verify that the server is set up properly and that HP Smart Client Services is running.
Troubleshooting Citrix password expiration
If users are not being prompted to change expired Citrix passwords, then make sure the XenApp Services site
(PNAgent site) has the Prompt authentication method set to allow users to change expired passwords. If you allow users to change their passwords by connecting directly to the domain controller, then make sure the time of the thin client is in sync with the domain controller and use the full domain name (for example, domain_name.com
) when entering the Citrix login credentials. For more information, see Citrix documentation.
Using system diagnostics to troubleshoot
System diagnostics take a snapshot of the thin client that can be used to help solve issues without physical access to the thin client. This snapshot contains log files from the BIOS information and the processes active at the time the system diagnostics were run.
Troubleshooting network connectivity 73
TIP: You can change the Debug level setting in the System Logs tab of the System Information window to specify the amount of information to be included in the diagnostic report. This information may be requested by HP for troubleshooting. Because the system resets log files when it reboots, be sure to capture logs before a reboot.
For the most useful logs, set the level to capture a high level of detail before reproducing the problem and creating a diagnostic report.
Saving system diagnostic data
1.
Insert a USB flash drive into the thin client.
2.
Select the System Information button on the taskbar, and then select the System Logs tab.
3.
Select Diagnostic, and then save the compressed diagnostic file Diagnostic.tgz to the USB flash drive.
Uncompressing the system diagnostic files
The system diagnostic file Diagnostic.tgz is compressed and will need to be uncompressed before you can view the diagnostic files.
Uncompressing the system diagnostic files on Windows-based systems
1.
Download and install a copy of the Windows version of 7-Zip.
NOTE: You may obtain a free copy of 7-Zip for Windows at http://www.7-zip.org/download.html
.
2.
Insert the USB flash drive that contains the saved system diagnostic file, and then copy Diagnostic.tgz to the desktop.
3.
Right-click Diagnostic.tgz and select 7-zip > Extract files.
4.
Open the newly created folder named Diagnostic and repeat step 3 on Diagnostic.tar.
Uncompressing the system diagnostic files in Linux- or Unix-based systems
1.
Insert the USB flash drive that contains the saved system diagnostic file, and then copy Diagnostic.tgz to the home directory.
2.
Open a terminal and browse to the home directory.
3.
On the command line, enter tar xvfz Diagnostic.tgz
.
Viewing the system diagnostic files
The system diagnostic files are divided into the Commands, /var/log, and /etc folders.
Viewing files in the Commands folder
This table describes the files to look for in the Commands folder.
File demidecode.txt
dpkg_--list.txt
ps_-ef.txt
Description
This file contains information on the system BIOS and graphics.
This file lists the packages installed at the time system diagnostics were run.
This file lists the active processes at the time system diagnostics were run.
74 Chapter 13 Troubleshooting
Viewing files in the /var/log folder
The useful file in the /var/log folder is Xorg.0.log.
Viewing files in the /etc folder
The /etc folder contains the file system at the time the system diagnostics were run.
Using system diagnostics to troubleshoot 75
A USB updates
simultaneously install multiple add-ons and certificates, as well as deploy a profile.
To perform USB updates:
1.
Place the desired files onto a USB flash drive.
NOTE: The files can be placed in the root directory or in subfolders.
2.
Connect the USB flash drive to the thin client.
Updates are detected automatically and displayed in the USB Update dialog, in which you can search and view details about the detected updates.
3.
Select the check boxes next to the updates you want to install, and then select Install.
4.
After installation, restart the thin client if prompted.
HP ThinUpdate
HP ThinUpdate allows you to download images and add-ons from HP and create bootable USB flash drives for image deployment. For more information see the Administrator Guide for HP ThinUpdate.
76 Appendix A USB updates
B BIOS tools (desktop thin clients only)
There are two kinds of BIOS tools for HP ThinPro:
● BIOS settings tool: Used to retrieve or modify BIOS settings
● BIOS flashing tool: Used to update the BIOS
These tools can be run via an X terminal.
BIOS settings tool
The following table describes the syntax for the BIOS settings tool.
NOTE: Changes do not take effect until the next reboot.
Syntax hptc-bios-cfg –G <file name> hptc-bios-cfg –S <file name> hptc-bios-cfg –h
Description
Retrieves the current BIOS settings and saves them to the specified file so they can be viewed or modified (CPQSETUP.TXT by default).
Writes the BIOS settings from the specified file (CPQSETUP.TXT by default) to the BIOS.
Displays a list of options.
BIOS flashing tool
The following table describes the syntax for the BIOS flashing tool.
NOTE: Changes do not take effect until the next reboot.
Syntax hptc-bios-flash <image name> hptc-bios-flash –h
Description
Prepares the system to update the BIOS during the next restart.
This command automatically copies the files into the correct location and prompts you to restart the thin client.
NOTE: This command requires that the Tool-less update option in the BIOS settings is set to Auto.
Displays a list of options.
BIOS settings tool 77
C Resizing the flash drive partition
IMPORTANT: HP thin clients that ship from the factory with HP ThinPro use the entire flash drive. The image capture methods capture the smallest possible image, allowing images from larger flash drives to be deployed onto smaller flash drives that have enough space for the captured image. Resizing the flash drive partition should no longer be necessary for HP thin clients that ship from the factory with HP ThinPro. For thin clients with HP ThinPro that are not using the entire flash drive for any reason, see the following information.
To use the entire space of the flash drive, you have to modify the partition size and expand the file system to take up that additional space. This can be accomplished using the resize-image script via an X terminal.
NOTE: When an image is deployed via HPDM, HP ThinState, or Automatic Update, the file system is automatically resized to use all available space on the flash drive.
The following table describes the syntax for the resize-image script.
Syntax resize-image resize-image --size <size in MB>
Example: resize-image --size 1024 resize-image --no-prompt
– or – resize-image --no-prompt --size <size in MB>
Example: resize-image --no-prompt --size 1024
Description
When called with no parameters, the script displays the current size of the partition and the amount of available space on the flash drive. The script prompts you to enter the target partition size and then confirm the change. The change takes effect after the next thin client restart.
NOTE: It is not possible to decrease the partition size. The entered value must be larger than the current partition size.
Using this syntax, you can specify the target partition size in megabytes (MB) as a parameter and then confirm the change.
Using this syntax, the script runs automatically with no user interaction required.
If no specific size is given as a parameter simultaneously, the partition size is increased to the maximum size.
TIP: This non-interactive mode is useful for scripting and performing this operation from a remote administration tool like
HP Device Manager.
78 Appendix C Resizing the flash drive partition
D Registry keys
Audio
The HP ThinPro registry keys are grouped into folders and can be modified in several different ways:
● Using a _File and Registry task in HPDM.
● Using the Registry Editor component of Profile Editor and then deploying the new profile.
● Using Registry Editor in the HP ThinPro user interface, which is available in the Tools menu in administrator mode.
Each top-level section in this appendix corresponds to one of the top-level registry folders.
NOTE: Some registry keys might apply to ThinPro or Smart Zero only.
Registry key root/Audio/AdjustSoundPath root/Audio/JackRetask root/Audio/OutputMute root/Audio/OutputScale root/Audio/OutputScaleAuto root/Audio/OutputVolume root/Audio/PlaybackDevice root/Audio/PulseBuffer root/Audio/RecordDevice root/Audio/RecordMute
Description
Sets the full path to the sound played when the playback volume is changed via the volume controls.
This registry key applies only to thin clients that have repurposable jacks.
For the t730’s lower front port:
● 0/1: No change / headphone
● 2: Microphone
For the t630’s back port:
● 0: No change / line in
● 1: Headphone / line out
You must restart the thin client after changing these settings.
If set to 1, the internal speaker and headphone jack are muted.
Sets the volume scale for the internal speaker and headphone jack, ranging from 1 to 400.
If set to 1, the OutputScale value will be set automatically based on the thin client model.
Sets the volume for the internal speaker and headphone jack, ranging from 1 to 100.
Sets the device to use for playback.
The recommended range for this value is between 1024 and
8192. A value that is too high might cause jittering in playback, while a value that is too low might cause the thin client to crash.
Sets the device to use for capture.
If set to 1, the microphone jack is muted.
Audio 79
Registry key root/Audio/RecordScale root/Audio/RecordScaleAuto root/Audio/RecordVolume root/Audio/VisibleInSystray root/Audio/shortcutPassThrough
Description
Sets the volume scale for the microphone jack, ranging from 1 to
400.
If set to 1, the RecordScale value will be set automatically based on the thin client model.
Sets the volume for the microphone jack, ranging from 1 to 100.
If set to 1, a speaker icon is visible in the system tray.
Defines the apps that allow audio shortcuts to be passed through using a space-separated list. The available options are freerdp , view , and xen .
CertMgr
This registry category is used internally and does not have any user-defined entries.
ComponentMgr
Registry key root/ComponentMgr/
NotShowDeleteSnapshotWarning
Description
If set to 1, warning information will not be shown while deleting a snapshot.
ConnectionManager
Registry key root/ConnectionManager/ createSampleConnections root/ConnectionManager/customLogoPath root/ConnectionManager/defaultConnection root/ConnectionManager/minHeight root/ConnectionManager/minWidth root/ConnectionManager/splashLogoPath root/ConnectionManager/useKioskMode root/ConnectionManager/ useSplashOnConnectionStartup
Description
If set to 1, sample user-modifiable connection icons are created on the desktop on first boot.
To properly launch a connection on startup, this must be set to a valid connection using the format <type>:<label> like in the following example: xen:Default Connection
Sets the full path to the image displayed while a connection is loading.
If set to 1, the image set by splashLogoPath is enabled. By default, this is enabled for ThinPro and disabled for Smart Zero.
80 Appendix D Registry keys
ConnectionType custom
Registry key root/ConnectionType/custom/authorizations/ user/add root/ConnectionType/custom/authorizations/ user/general root/ConnectionType/custom/connections/
<UUID>/afterStartedCommand root/ConnectionType/custom/connections/
<UUID>/afterStoppedCommand root/ConnectionType/custom/connections/
<UUID>/authorizations/user/edit root/ConnectionType/custom/connections/
<UUID>/authorizations/user/execution root/ConnectionType/custom/connections/
<UUID>/autoReconnect root/ConnectionType/custom/connections/
<UUID>/autoReconnectDelay root/ConnectionType/custom/connections/
<UUID>/autostart root/ConnectionType/custom/connections/
<UUID>/beforeStartingCommand root/ConnectionType/custom/connections/
<UUID>/command root/ConnectionType/custom/connections/
<UUID>/connectionEndAction root/ConnectionType/custom/connections/
<UUID>/coord root/ConnectionType/custom/connections/
<UUID>/dependConnectionId root/ConnectionType/custom/connections/
<UUID>/extraEnvValues/<UUID>/key root/ConnectionType/custom/connections/
<UUID>/extraEnvValues/<UUID>/value root/ConnectionType/custom/connections/
<UUID>/fallBackConnection root/ConnectionType/custom/connections/
<UUID>/hasDesktopIcon
Description
If set to 1, an end user has permission to add a new connection of this type using Connection Manager. This key has no effect on
Smart Zero.
If set to 1, an end user has permission to modify the general settings for this connection type using Connection Manager. This key has no effect on Smart Zero.
Sets the command to execute after the connection has been started.
Sets the command to execute after the connection has been stopped.
If set to 1, an end user has permission to modify the connection settings for this connection.
If set to 1, an end user has permission to execute this connection.
If set to 1, the connection will be restarted when it is closed or disconnected.
Sets the amount of time in seconds to wait before reconnecting the session. The default of 0 will cause the connection to reconnect immediately. This setting only takes effect when autoReconnect is set to 1.
If set to a value of 1–5, the connection will be started automatically after the system boots, with the value of 1 having the highest priority.
Sets the command to execute before the connection starts.
Sets the main command for the custom connection to execute.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Sets the name of an extra environment variable for use with the connection.
Sets the value of an extra environment variable for use with the connection.
Sets the fallback connection via its UUID.
If set to 1, the desktop icon for this connection is enabled. This key has no effect on Smart Zero.
ConnectionType 81
Registry key root/ConnectionType/custom/coreSettings/ icon48Path
Description root/ConnectionType/custom/connections/
<UUID>/iconPosition root/ConnectionType/custom/connections/
<UUID>/label root/ConnectionType/custom/connections/
<UUID>/startMode root/ConnectionType/custom/connections/
<UUID>/waitForNetwork root/ConnectionType/custom/coreSettings/
USBrelevant root/ConnectionType/custom/coreSettings/ appName root/ConnectionType/custom/coreSettings/ className root/ConnectionType/custom/coreSettings/ editor root/ConnectionType/custom/coreSettings/ generalSettingsEditor
Sets the x,y coordinates of a pinned desktop icon. If not specified, the icon floats.
Sets the connection name that is displayed in the UI. On Smart
Zero, this will typically be set to Default Connection and does not display in the UI.
If set to the default focus and the connection is already started, the connection will be given focus. Otherwise, an error will be returned stating that the connection is already started.
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
Specifies if this connection type is USB-relevant. If it is, it might have a USB plugin for redirecting USB devices.
Sets the internal application name to use for this connection type.
This key should not need to be modified.
Sets the internal application class name to use for this connection type. This key should not need to be modified.
Sets the internal application name to use when Connection
Manager is launched for this connection type. This key should not need to be modified.
Sets the internal application name to use when the General
Settings Manager is launched for this connection type. This key should not need to be modified.
root/ConnectionType/custom/coreSettings/icon Specifies the icon from the icon theme set to use for this connection.
root/ConnectionType/custom/coreSettings/ icon16Path
Sets the path to the 16 × 16 pixel icon for this application.
root/ConnectionType/custom/coreSettings/ icon32Path
Sets the path to the 32 × 32 pixel icon for this application.
Sets the path to the 48 × 48 pixel icon for this application.
root/ConnectionType/custom/coreSettings/ iconActive root/ConnectionType/custom/coreSettings/ stopProcess
Reserved for future use.
root/ConnectionType/custom/coreSettings/label Sets the name to display for this connection type in the UI.
root/ConnectionType/custom/coreSettings/ priorityInConnectionLists
Sets the priority of this connection type when it is displayed in
Connection Manager and the configuration wizard that displays during initial setup. A higher value moves the connection type towards the top of the list. If set to 0, the connection type is hidden from the configuration wizard and is shown last in
Connection Manager. Connection types with the same priority are listed in alphabetical order.
root/ConnectionType/custom/coreSettings/ serverRequired
Sets whether a server name or address is unused , optional , or required for this connection type.
Sets the behavior that should occur when connection-mgr stop is called on this connection. By default this is close , which will send a standard kill signal to the process. When set to kill , the process specified by appName will be forcefully killed. When
82 Appendix D Registry keys
Registry key Description set to custom , a custom execution script specified by wrapperScript will be executed with the argument stop to terminate the process gracefully.
root/ConnectionType/custom/coreSettings/tier Specifies the relative importance of this connection type and the order in which it is listed in the Create menu.
root/ConnectionType/custom/coreSettings/ watchPid
If set to 1, the connection is monitored under the name specified by appName . This key should not need to be modified.
root/ConnectionType/custom/coreSettings/ wrapperScript root/ConnectionType/custom/gui/CustomManager/ name root/ConnectionType/custom/gui/CustomManager/ status root/ConnectionType/custom/gui/CustomManager/ title root/ConnectionType/custom/gui/CustomManager/ widgets/autoReconnect root/ConnectionType/custom/gui/CustomManager/ widgets/autostart root/ConnectionType/custom/gui/CustomManager/ widgets/command root/ConnectionType/custom/gui/CustomManager/ widgets/fallBackConnection root/ConnectionType/custom/gui/CustomManager/ widgets/hasDesktopIcon root/ConnectionType/custom/gui/CustomManager/ widgets/label root/ConnectionType/custom/gui/CustomManager/ widgets/waitForNetwork
Sets the script or binary to execute when launching this connection type. This is the primary script handling all connection settings and command line arguments for the connection. This key should not need to be modified.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the Auto reconnect widget in Custom
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto start priority widget in Custom
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Enter command to run widget in Custom
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Fallback Connection widget in Custom
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show icon on desktop widget in Custom
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Name widget in Custom Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Wait for network before connecting widget in Custom Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to
ConnectionType 83
Registry key Description inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
firefox
Registry key root/ConnectionType/firefox/authorizations/ user/add root/ConnectionType/firefox/connections/
<UUID>/address root/ConnectionType/firefox/connections/
<UUID>/afterStartedCommand root/ConnectionType/firefox/connections/
<UUID>/afterStoppedCommand root/ConnectionType/firefox/connections/
<UUID>/authorizations/user/edit root/ConnectionType/firefox/connections/
<UUID>/authorizations/user/execution root/ConnectionType/firefox/connections/
<UUID>/autoReconnect root/ConnectionType/firefox/connections/
<UUID>/autoReconnectDelay root/ConnectionType/firefox/connections/
<UUID>/autostart
Description
If set to 1, an end user has permission to add a new connection of this type using Connection Manager. This key has no effect on
Smart Zero.
Sets the URL or IP address to connect to.
Sets the command to execute after the connection has been started.
Sets the command to execute after the connection has been stopped.
If set to 1, an end user has permission to modify the connection settings for this connection.
If set to 1, an end user has permission to execute this connection.
If set to 1, the connection will be restarted when it is closed or disconnected.
Sets the amount of time in seconds to wait before reconnecting the session. The default of 0 will cause the connection to reconnect immediately. This setting only takes effect when autoReconnect is set to 1.
If set to a value of 1–5, the connection will be started automatically after the system boots, with the value of 1 having the highest priority.
Reserved for future use.
Sets the command to execute before the connection starts.
root/ConnectionType/firefox/connections/
<UUID>/autostartDelay root/ConnectionType/firefox/connections/
<UUID>/beforeStartingCommand root/ConnectionType/firefox/connections/
<UUID>/connectionEndAction root/ConnectionType/firefox/connections/
<UUID>/coord root/ConnectionType/firefox/connections/
<UUID>/dependConnectionId root/ConnectionType/firefox/connections/
<UUID>/enablePrintDialog root/ConnectionType/firefox/connections/
<UUID>/enableSmartCard root/ConnectionType/firefox/connections/
<UUID>/extraEnvValues/<UUID>/key
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
If set to 1, the Print dialog in the web browser can be used.
If set to 1, smart card login is enabled for Citrix connections created via the web browser.
Sets the name of an extra environment variable for use with the connection.
84 Appendix D Registry keys
Registry key root/ConnectionType/firefox/connections/
<UUID>/extraEnvValues/<UUID>/value root/ConnectionType/firefox/connections/
<UUID>/fallBackConnection root/ConnectionType/firefox/connections/
<UUID>/forbiddenFiles root/ConnectionType/firefox/connections/
<UUID>/fullscreen root/ConnectionType/firefox/connections/
<UUID>/hasDesktopIcon root/ConnectionType/firefox/connections/
<UUID>/iconPosition root/ConnectionType/firefox/connections/
<UUID>/intendedUse root/ConnectionType/firefox/connections/
<UUID>/kioskMode root/ConnectionType/firefox/connections/
<UUID>/label root/ConnectionType/firefox/connections/
<UUID>/manageOwnPrefs root/ConnectionType/firefox/connections/
<UUID>/showBackForwardButton root/ConnectionType/firefox/connections/
<UUID>/showHomeButton root/ConnectionType/firefox/connections/
<UUID>/showSearchBar root/ConnectionType/firefox/connections/
<UUID>/showTabsBar root/ConnectionType/firefox/connections/
<UUID>/showTaskBar root/ConnectionType/firefox/connections/
<UUID>/showUrlBarRefreshButton root/ConnectionType/firefox/connections/
<UUID>/startMode root/ConnectionType/firefox/connections/
<UUID>/waitForNetwork
Description
Sets the value of an extra environment variable for use with the connection.
Sets the fallback connection via its UUID.
This registry key only works when Allow connections to manage
their own settings is selected in the Web Browser Connection
General Settings Manager. The files listed in this registry key's value will be removed after a Web Browser connection is ended.
The file names should be separated by a comma, and a wildcard is supported. For example: *.rdf,cookies.sqlite
If set to 1, the web browser will start in full screen. If kioskMode is disabled, the browser UI is accessible in full screen mode.
If set to 1, the desktop icon for this connection is enabled. This key has no effect on Smart Zero.
Sets the x,y coordinates of a pinned desktop icon. If not specified, the icon floats.
Sets the intended usage of this Web Browser connection to
Citrix , RDP , or Internet .
If set to 1, the web browser will launch in kiosk mode, meaning that the web browser will start in full screen (even if fullscreen is set to 0) and the browser UI is inaccessible.
Sets the connection name that is displayed in the UI. On Smart
Zero, this will typically be set to Default Connection and does not display in the UI.
If set to 1, the connection manages its own preferences and stores them in the following location: /etc/firefox/
<UUID> . If set to 0, the connection uses shared preferences.
If set to 1, the web browser's Back and Forward buttons are displayed when kiosk mode is enabled.
If set to 1, the web browser's Home button is displayed when kiosk mode is enabled.
If set to 1, the web browser's search bar is displayed when kiosk mode is enabled.
If set to 1, the web browser's tabs are displayed when kiosk mode is enabled.
If set to 1, the web browser's taskbar is displayed when kiosk mode is enabled.
If set to 1, the web browser's URL bar and Refresh button are displayed when kiosk mode is enabled.
If set to the default focus and the connection is already started, the connection will be given focus. Otherwise, an error will be returned stating that the connection is already started.
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
ConnectionType 85
Registry key root/ConnectionType/firefox/coreSettings/ icon32Path
Description root/ConnectionType/firefox/coreSettings/
USBrelevant root/ConnectionType/firefox/coreSettings/ appName root/ConnectionType/firefox/coreSettings/ className root/ConnectionType/firefox/coreSettings/ editor
Specifies if this connection type is USB-relevant. If it is, it might have a USB plugin for redirecting USB devices.
Sets the internal application name to use for this connection type.
This key should not need to be modified.
Sets the internal application class name to use for this connection type. This key should not need to be modified.
Sets the internal application name to use when Connection
Manager is launched for this connection type. This key should not need to be modified.
root/ConnectionType/firefox/coreSettings/icon Specifies the icon from the icon theme set to use for this connection.
root/ConnectionType/firefox/coreSettings/ icon16Path
Sets the path to the 16 × 16 pixel icon for this application.
Sets the path to the 32 × 32 pixel icon for this application.
root/ConnectionType/firefox/coreSettings/ icon48Path
Sets the path to the 48 × 48 pixel icon for this application.
root/ConnectionType/firefox/coreSettings/ iconActive root/ConnectionType/firefox/coreSettings/ label
Reserved for future use.
Sets the name to display for this connection type in the UI.
root/ConnectionType/firefox/coreSettings/ priorityInConnectionLists root/ConnectionType/firefox/coreSettings/ restartIdleTime root/ConnectionType/firefox/coreSettings/ serverRequired
Sets the priority of this connection type when it is displayed in
Connection Manager and the Configuration Wizard that displays during initial setup. A higher value will move the connection type towards the top of the list. If set to 0, the connection type is hidden from Configuration Wizard and is shown last in Connection
Manager. Connections types with the same priority are listed in alphabetical order.
Sets the time in minutes before the web browser restarts when the system is not receiving user input. If set to 0, restart is disabled.
Sets whether a server name or address is unused , optional , or required for this connection type.
root/ConnectionType/firefox/coreSettings/ stopProcess
Sets the behavior that should occur when connection-mgr stop is called on this connection. By default this is close , which will send a standard kill signal to the process. When set to kill , the process specified by appName will be forcefully killed. When set to custom , a custom execution script specified by wrapperScript will be executed with the argument stop to terminate the process gracefully.
root/ConnectionType/firefox/coreSettings/tier Specifies the relative importance of this connection type and the order in which it is listed in the Create menu.
root/ConnectionType/firefox/coreSettings/ wrapperScript root/ConnectionType/firefox/general/ enableUserChanges
Sets the script or binary to execute when launching this connection type. This is the primary script handling all connection settings and command line arguments for the connection. This key should not need to be modified.
If set to 1, the settings configured in the Firefox Preferences dialog will be saved after each session.
86 Appendix D Registry keys
Registry key root/ConnectionType/firefox/gui/
FirefoxManager/name root/ConnectionType/firefox/gui/
FirefoxManager/status root/ConnectionType/firefox/gui/
FirefoxManager/title root/ConnectionType/firefox/gui/
FirefoxManager/widgets/address root/ConnectionType/firefox/gui/
FirefoxManager/widgets/autoReconnect root/ConnectionType/firefox/gui/
FirefoxManager/widgets/autostart root/ConnectionType/firefox/gui/
FirefoxManager/widgets/enablePrintDialog root/ConnectionType/firefox/gui/
FirefoxManager/widgets/fallBackConnection root/ConnectionType/firefox/gui/
FirefoxManager/widgets/hasDesktopIcon root/ConnectionType/firefox/gui/
FirefoxManager/widgets/kioskMode root/ConnectionType/firefox/gui/
FirefoxManager/widgets/label root/ConnectionType/firefox/gui/
FirefoxManager/widgets/showBackForwardButton
Description
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the URL widget in Web Browser Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Auto reconnect widget in Web Browser
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto start priority widget in Web
Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Enable print dialog widget in Web
Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Fallback Connection widget in Web
Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show icon on desktop widget in Web
Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Enable kiosk mode widget in Web
Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Name widget in Web Browser Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Show Back and Forward Button widget in Web Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
ConnectionType 87
Registry key root/ConnectionType/firefox/gui/
FirefoxManager/widgets/showHomeButton root/ConnectionType/firefox/gui/
FirefoxManager/widgets/showSearchBar root/ConnectionType/firefox/gui/
FirefoxManager/widgets/showTabsBar root/ConnectionType/firefox/gui/
FirefoxManager/widgets/showTaskBar root/ConnectionType/firefox/gui/
FirefoxManager/widgets/ showUrlBarRefreshButton root/ConnectionType/firefox/gui/
FirefoxManager/widgets/startMode root/ConnectionType/firefox/gui/
FirefoxManager/widgets/waitForNetwork
Description
Controls the state of the Show Home Button widget in Web
Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show Search Bar widget in Web Browser
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show Tabs Bar widget in Web Browser
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show Task Bar widget in Web Browser
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show URL Bar and Refresh Button widget in Web Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Enable full screen widget in Web
Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Wait for network before connecting widget in Web Browser Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
freerdp
Registry key root/ConnectionType/freerdp/authorizations/ user/add root/ConnectionType/freerdp/connections/
<UUID>/ExtraArgs root/ConnectionType/freerdp/connections/
<UUID>/SingleSignOn root/ConnectionType/freerdp/connections/
<UUID>/address
Description
If set to 1, an end user has permission to add a new connection of this type using Connection Manager. This key has no effect on
Smart Zero.
Specifies extra arguments for the xfreerdp client. Run xfreerdp --help from an X terminal to see all available arguments.
If enabled, the user, domain, and password combination for the
RDP connection is saved to unlock the screen saver.
Sets the hostname or IP address to connect to. The port number can be appended on the end after a colon character. For example: servername:3389
88 Appendix D Registry keys
Registry key root/ConnectionType/freerdp/connections/
<UUID>/afterStoppedCommand root/ConnectionType/freerdp/connections/
<UUID>/application root/ConnectionType/freerdp/connections/
<UUID>/attachToConsole root/ConnectionType/freerdp/connections/
<UUID>/audioLatency root/ConnectionType/freerdp/connections/
<UUID>/authorizations/user/edit root/ConnectionType/freerdp/connections/
<UUID>/authorizations/user/execution root/ConnectionType/freerdp/connections/
<UUID>/autoReconnect root/ConnectionType/freerdp/connections/
<UUID>/autoReconnectDelay root/ConnectionType/freerdp/connections/
<UUID>/autostart root/ConnectionType/freerdp/connections/
<UUID>/bandwidthLimitation root/ConnectionType/freerdp/connections/
<UUID>/beforeStartingCommand root/ConnectionType/freerdp/connections/
<UUID>/clipboardExtension root/ConnectionType/freerdp/connections/
<UUID>/compression root/ConnectionType/freerdp/connections/
<UUID>/credentialsType root/ConnectionType/freerdp/connections/
<UUID>/dependConnectionId root/ConnectionType/freerdp/connections/
<UUID>/directory root/ConnectionType/freerdp/connections/
<UUID>/disableMMRwithRFX root/ConnectionType/freerdp/connections/
<UUID>/domain root/ConnectionType/freerdp/connections/
<UUID>/enableMMR
Description
Sets the command to execute after the connection has been stopped.
Specifies an alternate shell or application to run.
Sets the average milliseconds of offset between the audio stream and the display of corresponding video frames after decoding.
If set to 1, an end user has permission to modify the connection settings for this connection.
If set to 1, an end user has permission to execute this connection.
If set to 1, the connection will be restarted when it is closed or disconnected.
Sets the amount of time in seconds to wait before reconnecting the session. The default of 0 will cause the connection to reconnect immediately. This setting only takes effect when autoReconnect is set to 1.
If set to a value of 1–5, the connection will be started automatically after the system boots, with the value of 1 having the highest priority.
If set to a value greater than 0, the value represents an approximate bandwidth limitation for downloading and uploading in kilobytes per second. If set to 0 (the default), there is no limitation.
Sets the command to execute before the connection starts.
If set to 1, clipboard functionality is enabled between different
RDP sessions and between RDP sessions and the local system.
If set to 1, compression of RDP data sent between the client and the server is enabled.
Specifies the credential type between sso (single sign-on), startup (credentials are requested at startup), password
(preconfigured user/domain/password), or smartcard
(preconfigured smart card).
This registry key is either used internally or reserved for future use. The value should not be changed.
Specifies the startup directory where an alternate shell application is executed.
If set to 1, multimedia redirection is disabled if a valid RemoteFX session is established.
Sets the default domain to supply to the remote host during login.
If a domain is not specified, the default domain for the remote host will be used.
If set to 1, the Multimedia Redirection add-on is enabled, causing supported codecs played through Windows Media Player to be redirected to the client.
ConnectionType 89
Registry key root/ConnectionType/freerdp/connections/
<UUID>/extraEnvValues/<UUID>/key root/ConnectionType/freerdp/connections/
<UUID>/extraEnvValues/<UUID>/value root/ConnectionType/freerdp/connections/
<UUID>/fallBackConnection root/ConnectionType/freerdp/connections/
<UUID>/frameAcknowledgeCount root/ConnectionType/freerdp/connections/
<UUID>/gatewayAddress root/ConnectionType/freerdp/connections/
<UUID>/gatewayCredentialsType root/ConnectionType/freerdp/connections/
<UUID>/gatewayDomain root/ConnectionType/freerdp/connections/
<UUID>/gatewayEnabled root/ConnectionType/freerdp/connections/
<UUID>/gatewayPassword root/ConnectionType/freerdp/connections/
<UUID>/gatewayPort root/ConnectionType/freerdp/connections/
<UUID>/gatewayUser root/ConnectionType/freerdp/connections/
<UUID>/gatewayUsesSameCredentials root/ConnectionType/freerdp/connections/
<UUID>/hasDesktopIcon root/ConnectionType/freerdp/connections/
<UUID>/hostnameType root/ConnectionType/freerdp/connections/
<UUID>/iconPosition
Description
Sets the name of an extra environment variable for use with the connection.
Sets the value of an extra environment variable for use with the connection.
Sets the fallback connection via its UUID.
Sets the number of video frames the server can push without waiting for acknowledgement from the client. Lower numbers result in a more responsive desktop but lower frame rate. If set to
0, frame acknowledgement is not used in the client-server interactions.
Sets the RD Gateway server name or address.
Specifies the credential type between whether credentials are to be supplied by sso (single sign-on), startup (credentials are requested at startup), or password (preconfigured user/domain/ password).
Sets the default domain to supply to the RD Gateway during login.
Usually, this setting is used with kiosk-style applications where a generic user name is used to login. If gatewayUsesSameCredentials is to 1, this value is disabled.
If set to 1, RD Gateway is expected to be used.
Sets the default password to supply to the RD Gateway during login. This value is usually encrypted. Usually, this setting is used with kiosk-style applications where a generic user name is used to login. If gatewayUsesSameCredentials is to 1, this value is disabled.
Sets the port number to use when contacting the RDP server. This value can be left empty. The most common value is 443.
Sets the default user name to supply to the RD Gateway during login. Usually, this setting is used with kiosk-style applications where a generic user name is used to login. If gatewayUsesSameCredentials is to 1, this value is disabled.
If set to 1, the same credentials that are used to connect to the final server are used to connect to the RD Gateway.
If set to 1, the desktop icon for this connection is enabled. This key has no effect on Smart Zero.
If set to hostname, the system hostname is sent to the remote host. This is typically used to identify the thin client associated with a particular RDP session. The sent hostname can be overridden using sendHostname in the connection-specific settings. If set to mac, the MAC address of the first available network adapter is sent instead of the hostname.
Sets the x,y coordinates of a pinned desktop icon. If not specified, the icon floats.
90 Appendix D Registry keys
Registry key root/ConnectionType/freerdp/connections/
<UUID>/label root/ConnectionType/freerdp/connections/
<UUID>/loadBalanceInfo root/ConnectionType/freerdp/connections/
<UUID>/localPartitionRedirection root/ConnectionType/freerdp/connections/
<UUID>/loginfields/domain root/ConnectionType/freerdp/connections/
<UUID>/loginfields/password root/ConnectionType/freerdp/connections/
<UUID>/loginfields/rememberme root/ConnectionType/freerdp/connections/
<UUID>/loginfields/server root/ConnectionType/freerdp/connections/
<UUID>/loginfields/showpassword root/ConnectionType/freerdp/connections/
<UUID>/loginfields/smartcard root/ConnectionType/freerdp/connections/
<UUID>/loginfields/username root/ConnectionType/freerdp/connections/
<UUID>/mouseMotionEvents root/ConnectionType/freerdp/connections/
<UUID>/offScreenBitmaps root/ConnectionType/freerdp/connections/
<UUID>/password root/ConnectionType/freerdp/connections/
<UUID>/perfFlagDesktopComposition
Description
Sets the connection name that is displayed in the UI. On Smart
Zero, this will typically be set to Default Connection and does not display in the UI.
This value is the load balancing cookie sent for brokering purposes to the server upon connection and corresponds to the loadbalanceinfo field in the .rdp file. By default, the value is empty.
If set to 1, the local non-USB storage partitions are redirected to the remote host via the Storage extension. If set to 0, the extension is disabled for non-USB storage partitions that are not used by HP ThinPro.
If set to 1, the Domain field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
If set to 1, the Password field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
If set to 1, the Remember me check box is shown in the login dialog for the connection. If set to 2, the check box is shown but disabled. If set to 0, the check box is hidden.
If set to 1, the Server box is shown in the login dialog for the connection. If set to 2, the box is shown but disabled. If set to 0, the box is hidden. If set to 3, the system settings are used.
If set to 1, the Show password check box is shown in the login dialog for the connection. If set to 2, the check box is shown but disabled. If set to 0, the check box is hidden.
If set to 1, the Smart card login check box is shown in the login dialog for the connection. If set to 2, the check box is shown but disabled. If set to 0, the check box is hidden. This check box might not appear if no smart card is detected, even if this option is enabled.
If set to 1, the User Name field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
If set to 0, mouse motion events are not sent to the server. This can prevent some user feedback such as tooltips from functioning properly.
If set to 0, off-screen bitmaps are disabled. This can increase performance slightly but will cause blocks of the screen to update asynchronously, causing screen transitions to update nonuniformly.
Sets the default password to supply to the remote host during login. This value will be encrypted. Generally, this setting is used for kiosk-style applications where a generic password is used for login.
If set to 1, desktop composition (such as translucent borders) is allowed if supported by the server. Turning off desktop composition can improve performance for low-bandwidth connections. Generally, this only affects RemoteFX. If set to 2, the value is selected based on the thin client performance.
ConnectionType 91
Registry key root/ConnectionType/freerdp/connections/
<UUID>/perfFlagFontSmoothing root/ConnectionType/freerdp/connections/
<UUID>/perfFlagNoCursorSettings root/ConnectionType/freerdp/connections/
<UUID>/perfFlagNoCursorShadow root/ConnectionType/freerdp/connections/
<UUID>/perfFlagNoMenuAnimations root/ConnectionType/freerdp/connections/
<UUID>/perfFlagNoTheming root/ConnectionType/freerdp/connections/
<UUID>/perfFlagNoWallpaper root/ConnectionType/freerdp/connections/
<UUID>/perfFlagNoWindowDrag root/ConnectionType/freerdp/connections/
<UUID>/portMapping root/ConnectionType/freerdp/connections/
<UUID>/printerMapping root/ConnectionType/freerdp/connections/
<UUID>/rdWebFeed/autoDisconnectTimeout root/ConnectionType/freerdp/connections/
<UUID>/rdWebFeed/autoStartSingleResource root/ConnectionType/freerdp/connections/
<UUID>/rdWebFeed/filter/<UUID>/alias root/ConnectionType/freerdp/connections/
<UUID>/rdWebFeed/filter/<UUID>/name root/ConnectionType/freerdp/connections/
<UUID>/rdWebFeed/keepResourcesWindowOpened
Description
If set to 1, font smoothing is allowed if supported by the server and enabled. Turning off font smoothing can improve performance on low-bandwidth connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, cursor blinking is disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, mouse cursor shadows are disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, menu animations are disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, user interface themes are disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, the desktop wallpaper is disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, full-content window dragging is disabled, which can improve performance on low-bandwidth RDP connections. The window outline is used instead. If set to 2, the value is selected based on the thin client performance.
If set to 1, all serial and parallel ports are redirected to the remote host via the Ports extension. If set to 0, the extension is disabled.
If set to 1, all printers defined locally via CUPS are redirected to the remote host via the Printers extension. If set to 0, the extension is disabled. If set to 2, the USB printers are redirected as configured in USB Manager.
Sets the number of minutes there can be no RemoteApp and
Desktop resource running before the connection ends automatically. A countdown counter is displayed during the last
20 seconds providing the user an opportunity to disarm the timer.
If set to 0 (the default), the timer is disabled.
If set to 1, and if only a single published resource (RemoteApp program or virtual desktop) is returned by the server, that resource will be started automatically.
Specifies the alias of a resource for the resource filter. RemoteApp and Desktop resources with a matching alias will be available to users.
Specifies the name of a resource for the resource filter.
RemoteApp and Desktop resources with a matching name will be available to users.
If set to 0, the resource selection window is closed automatically after a resource has started. If set to 1, the resource selection window is kept open after resources have started. This allows a user to start several resources before closing the resource selection window.
92 Appendix D Registry keys
Registry key root/ConnectionType/freerdp/connections/
<UUID>/rdWebFeed/ trustedPublisherSha1Thumbprints root/ConnectionType/freerdp/connections/
<UUID>/rdWebFeed/verifyPublisherSignature root/ConnectionType/freerdp/connections/
<UUID>/rdp6Buffering root/ConnectionType/freerdp/connections/
<UUID>/rdp8Codecs root/ConnectionType/freerdp/connections/
<UUID>/rdpEncryption root/ConnectionType/freerdp/connections/
<UUID>/rdpH264Codec root/ConnectionType/freerdp/connections/
<UUID>/rdpProgressiveCodec root/ConnectionType/freerdp/connections/
<UUID>/redirectPreference root/ConnectionType/freerdp/connections/
<UUID>/remoteApp root/ConnectionType/freerdp/connections/
<UUID>/remoteDesktopService root/ConnectionType/freerdp/connections/
<UUID>/remoteFx root/ConnectionType/freerdp/connections/
<UUID>/requireEncryptionOracleRemediation
Description
Specifies a comma-separated list of SHA1 thumbprints of the trusted resource publishers. Note that a certificate that matches one of these thumbprints is not verified. Import the publisher's root CA for better security. Also see the registry key verifyPublisherSignature and Certificate Manager in
Control Panel.
If set to 1, the publisher's signature is verified when available in published .rdp files. Only resources with a valid signature from a trusted publisher can be run. If set to 0, no verification of the signature is done. Also see the registry key trustedPublisherSha1Thumbprints .
If set to 1, non-RemoteFX graphics performance is increased at the cost of less frequent screen updates.
If set to 1, RDP 8 codecs are used if available. This setting should be disabled only in the case of a defect specific to RDP 8 codecs.
Disabling this setting might also disable more advanced codecs.
If set to 1, standard RDP encryption is used to encrypt all data between the client and the server.
If set to 1, RDP 8 H.264 codecs are used if available. This setting has known visual errors, particularly in multi-monitor configurations, and should be considered experimental and unsupported. Enabling this setting simply advises the server that the thin client supports H.264 for desktop display. The server must also support H.264, and the server makes the final decision on what codecs are used. This setting affects only the desktop codecs. It does not affect multimedia redirection codecs.
If set to 1, RDP 8 progressive codecs are used if available. This setting should be disabled only in the case of a defect specific to
RDP 8 progressive codecs. Disabling this setting might also disable more advanced codecs.
For redirection, the RDP client is given several destination possibilities. It normally tries them in the following order: FQDN,
Primary IP, IP List, NetBIOS. If FQDN is not desired, one of the alternatives can be tried first by setting this registry key. If the specified method does not work, the RDP client falls back to the original order. A setting of auto forces the original order.
Specifies the name of an available application to run in Remote
Application Integrated Locally (RAIL) mode.
If set to Remote Computer , a direct RDP connection to a remote computer is done. If set to RD Web Access , a connection to an RD Web Access service is done first to retrieve a feed of the published RemoteApp resources.
If set to 1, RemoteFX in the style of RDP 7.1 is used if available.
This setting is deprecated and might disappear in a future release of HP ThinPro. This setting should be disabled only in the case of a defect specific to RemoteFX protocol. Disabling this setting might also disable more advanced codecs.
If set to 1, the Remote Desktop Client refuses to connect to servers that do not offer suitable protections. This addresses
Microsoft security vulnerability CVE-2018-0886.
ConnectionType 93
Registry key root/ConnectionType/freerdp/connections/
<UUID>/scCertificate root/ConnectionType/freerdp/connections/
<UUID>/scPin root/ConnectionType/freerdp/connections/
<UUID>/scRedirection root/ConnectionType/freerdp/connections/
<UUID>/seamlessWindow root/ConnectionType/freerdp/connections/
<UUID>/securityLevel root/ConnectionType/freerdp/connections/
<UUID>/sendHostname root/ConnectionType/freerdp/connections/
<UUID>/showConnectionGraph root/ConnectionType/freerdp/connections/
<UUID>/showRDPDashboard root/ConnectionType/freerdp/connections/
<UUID>/smartcard root/ConnectionType/freerdp/connections/
<UUID>/sound root/ConnectionType/freerdp/connections/
<UUID>/startMode root/ConnectionType/freerdp/connections/
<UUID>/timeoutError root/ConnectionType/freerdp/connections/
<UUID>/timeoutRecovery
Description
If a preconfigured smart card login is selected, this gives an identifier corresponding to the certificate on that smart card to be used for authentication.
If a preconfigured smart card login is selected, this gives the PIN or password for that smart card.
If set to 1, all local smart card readers are redirected to the remote host but are not used for the Network Level
Authentication (NLA) of the RDP session.
NOTE: If credentialsType is set to smartcard or smartcard is set to 1 , scRedirection is ignored, depending on the HP ThinPro version. In this configuration, the smart card readers are always redirected.
If set to 1, window decorations are disabled. This can be desirable in a multi-monitor configuration to allow the connection to be set to the size of the primary monitor.
Sets the certificate security level. If set to 0, all connections are allowed. If set to 1, remembered hosts are selected and a warning dialog is shown if verification is not passed. If set to 2, remembered hosts are not selected and a warning dialog is shown if verification is not passed. If set to 3, all insecure connections are refused.
Sets the thin client hostname that is sent to the remote host. If left blank, the system hostname is sent. The registry key root/
ConnectionType/freerdp/general/sendHostname must be set to hostname for this key to be used.
This is a diagnostic function. If set to 1, when the session starts, a separate program will be started to graph the connection's health.
If set to 1, when the session starts, a separate window displays
RDP performance and status.
If set to 1, local smartcard authentication to the remote host is allowed. Currently, this will disable Network Level Authentication
(NLA).
If set to 1, the playback and recording devices are redirected to the remote host via the Audio extension. If set to 0, the extension is disabled. If set to 2, the USB audio devices are redirected as configured in USB Manager. Generally, HP recommends setting this value to 1 so that high-level audio redirection is used. This will improve audio quality and ensure that client audio redirected via other extensions (such as
Multimedia Redirection ) matches local audio settings.
If set to the default focus and the connection is already started, the connection will be given focus. Otherwise, an error will be returned stating that the connection is already started.
Sets the number of milliseconds to wait after losing the connection before giving up on reconnecting with the server. If set to 0, reconnection is attempted forever.
Sets the number of milliseconds to wait after losing the connection for networking to recover without trying a forced reconnect.
94 Appendix D Registry keys
Registry key root/ConnectionType/freerdp/connections/
<UUID>/timeoutWarning root/ConnectionType/freerdp/connections/
<UUID>/timeoutWarningDialog root/ConnectionType/freerdp/connections/
<UUID>/timeoutsEnabled root/ConnectionType/freerdp/connections/
<UUID>/tlsVersion root/ConnectionType/freerdp/connections/
<UUID>/usbMiscRedirection root/ConnectionType/freerdp/connections/
<UUID>/usbStorageRedirection root/ConnectionType/freerdp/connections/
<UUID>/username root/ConnectionType/freerdp/connections/
<UUID>/waitForNetwork root/ConnectionType/freerdp/connections/
<UUID>/windowMode root/ConnectionType/freerdp/connections/
<UUID>/windowSizeHeight root/ConnectionType/freerdp/connections/
<UUID>/windowSizePercentage root/ConnectionType/freerdp/connections/
<UUID>/windowSizeWidth root/ConnectionType/freerdp/connections/
<UUID>/windowType
Description
Sets the number of milliseconds to wait after losing the connection before warning the user that the connection has been lost.
If set to 1, when an end-to-end connection drop is detected, a dialog is displayed and the screen will turn grayscale. Otherwise, messages are written to the connection log and the session freezes.
If set to 1, end-to-end connection health checks are done.
Sets the version of Transport Layer Security to be used during the early stages of negotiation with the RDP server. Either set this to match the version of TLS used by your RDP server, or try setting it to auto .
NOTE: There are some server-side defects in some unpatched
RDP servers that can cause the auto setting to fail, so it is not the default setting.
If set to 0, redirection is disabled for all other USB devices except those handled by sound , printerMapping , portMapping , usbStorageRedirection , and localPartitionRedirection . If set to 2, all other USB devices are redirected to the remote host as configured in USB
Manager.
If set to 1, USB storage devices are redirected to the remote host via the Storage extension. If set to 0, the extension is disabled.
If set to 2, USB storage devices are redirected as configured in USB
Manager.
Sets the default user name to supply to the remote host during login. Generally, this setting is used for kiosk-style applications where a generic user name is used for login.
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
If set to Remote Application , RDP will run in Remote
Application Integrated Locally (RAIL) mode. This requires that the
RemoteApp server allows the desired application to run as a remote application. The application will be displayed in a separate window within the desktop environment, making it look like the application is part of the local system. Also see the remoteApp registry key. If set to Alternate Shell , a non-standard shell is invoked. Also see the application and directory registry keys.
ConnectionType 95
Registry key root/ConnectionType/freerdp/connections/
<UUID>/x11Capture root/ConnectionType/freerdp/connections/
<UUID>/x11CaptureDir root/ConnectionType/freerdp/connections/
<UUID>/x11LogAutoflush root/ConnectionType/freerdp/connections/
<UUID>/x11Logfile root/ConnectionType/freerdp/connections/
<UUID>/x11Logging root/ConnectionType/freerdp/connections/
<UUID>/x11Synchronous root/ConnectionType/freerdp/connections/
<UUID>/xkbLayoutId root/ConnectionType/freerdp/coreSettings/ iconActive
Description
This is a diagnostic function. If set to 1, X11 operations are captured for later playback.
This is a diagnostic function. The value sets the directory for X11 capture files.
This is a diagnostic function. If set to 1, the X11 logfile is more frequently flushed to disk.
This is a diagnostic function. The value sets the path to the X11 logfile.
This is a diagnostic function. If set to 1, X11 operations are logged.
This is a diagnostic function. If set to 1, X11 operations are not buffered.
Sets an XKB layout ID for bypassing the system keyboard. To see the list of available IDs, enter the following command in an X terminal: xfreerdp --kbd-list .
root/ConnectionType/freerdp/coreSettings/
USBrelevant root/ConnectionType/freerdp/coreSettings/ appName root/ConnectionType/freerdp/coreSettings/ className root/ConnectionType/freerdp/coreSettings/ disableLinkDropWarning root/ConnectionType/freerdp/coreSettings/ editor
Specifies if this connection type is USB-relevant. If it is, it might have a USB plugin for redirecting USB devices.
Sets the internal application name to use for this connection type.
This key should not need to be modified.
Sets the internal application class name to use for this connection type. This key should not need to be modified.
If set to 1, the operating system does not generate a dialog indicating that networking is down because the connection protocol handles such situations.
Sets the internal application name to use when Connection
Manager is launched for this connection type. This key should not need to be modified.
root/ConnectionType/freerdp/coreSettings/icon Specifies the icon from the icon theme set to use for this connection.
root/ConnectionType/freerdp/coreSettings/ icon16Path
Sets the path to the 16 × 16 pixel icon for this application.
root/ConnectionType/freerdp/coreSettings/ icon32Path
Sets the path to the 32 × 32 pixel icon for this application.
root/ConnectionType/freerdp/coreSettings/ icon48Path
Sets the path to the 48 × 48 pixel icon for this application.
Reserved for future use.
root/ConnectionType/freerdp/coreSettings/ initialConnectionTimeout root/ConnectionType/freerdp/coreSettings/ label
Sets the number of seconds to wait for an initial response from the RDP server before giving up.
Sets the name to display for this connection type in the UI.
root/ConnectionType/freerdp/coreSettings/ priorityInConnectionLists
Sets the priority of this connection type when it is displayed in
Connection Manager and the Configuration Wizard that displays during initial setup. A higher value will move the connection type towards the top of the list. If set to 0, the connection type is hidden from Configuration Wizard and is shown last in Connection
96 Appendix D Registry keys
Registry key Description root/ConnectionType/freerdp/coreSettings/ stopProcess
Manager. Connections types with the same priority are listed in alphabetical order.
Sets the behavior that should occur when connection-mgr stop is called on this connection. By default this is close , which will send a standard kill signal to the process. When set to kill , the process specified by appName will be forcefully killed. When set to custom , a custom execution script specified by wrapperScript will be executed with the argument stop to terminate the process gracefully.
root/ConnectionType/freerdp/coreSettings/tier Specifies the relative importance of this connection type and the order in which it is listed in the Create menu.
root/ConnectionType/freerdp/coreSettings/ watchPid
If set to 1, the connection is monitored under the name specified by appName . This key should not need to be modified.
root/ConnectionType/freerdp/coreSettings/ wrapperScript root/ConnectionType/freerdp/coreSettings/ wrapperScriptGeneration root/ConnectionType/freerdp/general/ autoReconnectDialogTimeout root/ConnectionType/freerdp/general/ disablePasswordChange root/ConnectionType/freerdp/general/ preferredAudio root/ConnectionType/freerdp/general/ rdWebFeedUrlPattern root/ConnectionType/freerdp/general/ serialPortsDriver root/ConnectionType/freerdp/general/ serialPortsPermissive
Sets the script or binary to execute when launching this connection type. This is the primary script handling all connection settings and command line arguments for the connection. This key should not need to be modified.
Lets Connection Manager know what type of parameters to pass to the wrapper script.
If autoReconnect is enabled, this key sets the number of seconds before timing out any error dialogs for the connection. If set to 0, the dialogs wait indefinitely for user interaction.
When a remote login fails due to bad credentials, the user is presented with a button that brings up a dialog for updating their password. If this key is set is 1, that button and dialog are not displayed.
Sets the default audio backend for high-level audio redirection
(both in and out).
Sets the pattern used to build the RD Web Access URL. The host of the URL, e.g. myserver.com, is replaced by the value of the connection's Address field. This pattern is not used when the address is already a URL.
This setting ensures a better compatibility with the expected underlying Windows driver SerCx2.sys, SerCx.sys, or Serial.sys.
If set to 1, errors for unsupported features will be ignored.
ssh
Registry key root/ConnectionType/ssh/authorizations/ user/add root/ConnectionType/ssh/authorizations/user/ general
Description
If set to 1, an end user has permission to add a new connection of this type using Connection Manager. This key has no effect on
Smart Zero.
If set to 1, an end user has permission to modify the general settings for this connection type using Connection Manager. This key has no effect on Smart Zero.
ConnectionType 97
Registry key root/ConnectionType/ssh/connections/<UUID>/ address root/ConnectionType/ssh/connections/<UUID>/ afterStartedCommand root/ConnectionType/ssh/connections/<UUID>/ afterStoppedCommand root/ConnectionType/ssh/connections/<UUID>/ application root/ConnectionType/ssh/connections/<UUID>/ authorizations/user/edit root/ConnectionType/ssh/connections/<UUID>/ authorizations/user/execution root/ConnectionType/ssh/connections/<UUID>/ autoReconnect root/ConnectionType/ssh/connections/<UUID>/ autoReconnectDelay root/ConnectionType/ssh/connections/<UUID>/ autostart
Description
Sets the hostname or IP address to connect to.
Sets the command to execute after the connection has been started.
Sets the command to execute after the connection has been stopped.
Specifies the application to run.
If set to 1, an end user has permission to modify the connection settings for this connection.
If set to 1, an end user has permission to execute this connection.
If set to 1, the connection will be restarted when it is closed or disconnected.
Sets the amount of time in seconds to wait before reconnecting the session. The default of 0 will cause the connection to reconnect immediately. This setting only takes effect when autoReconnect is set to 1.
If set to a value of 1–5, the connection will be started automatically after the system boots, with the value of 1 having the highest priority.
Sets the background color for the connection.
root/ConnectionType/ssh/connections/<UUID>/ backgroundColor root/ConnectionType/ssh/connections/<UUID>/ beforeStartingCommand root/ConnectionType/ssh/connections/<UUID>/ compression root/ConnectionType/ssh/connections/<UUID>/ connectionEndAction root/ConnectionType/ssh/connections/<UUID>/ coord root/ConnectionType/ssh/connections/<UUID>/ dependConnectionId root/ConnectionType/ssh/connections/<UUID>/ extraEnvValues/<UUID>/key root/ConnectionType/ssh/connections/<UUID>/ extraEnvValues/<UUID>/value root/ConnectionType/ssh/connections/<UUID>/ fallBackConnection root/ConnectionType/ssh/connections/<UUID>/ font root/ConnectionType/ssh/connections/<UUID>/ foregroundColor root/ConnectionType/ssh/connections/<UUID>/ fork
Sets the command to execute before the connection starts.
Enables compression for an SSH connection.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Sets the name of an extra environment variable for use with the connection.
Sets the value of an extra environment variable for use with the connection.
Sets the fallback connection via its UUID.
Sets the font size for the connection.
Sets the foreground color for the connection.
If set to 1, the Fork into background option is enabled for the connection.
98 Appendix D Registry keys
Registry key root/ConnectionType/ssh/coreSettings/ icon32Path
Description root/ConnectionType/ssh/connections/<UUID>/ hasDesktopIcon root/ConnectionType/ssh/connections/<UUID>/ iconPosition root/ConnectionType/ssh/connections/<UUID>/ isInMenu root/ConnectionType/ssh/connections/<UUID>/ label root/ConnectionType/ssh/connections/<UUID>/ loginfields/server root/ConnectionType/ssh/connections/<UUID>/ loginfields/username root/ConnectionType/ssh/connections/<UUID>/ port root/ConnectionType/ssh/connections/<UUID>/ startMode root/ConnectionType/ssh/connections/
<UUID>/tty root/ConnectionType/ssh/connections/<UUID>/ username
If set to 1, the desktop icon for this connection is enabled. This key has no effect on Smart Zero.
Sets the x,y coordinates of a pinned desktop icon. If not specified, the icon floats.
This registry key is either used internally or reserved for future use. The value should not be changed.
Sets the connection name that is displayed in the UI. On Smart
Zero, this will typically be set to Default Connection and does not display in the UI.
If set to 1, the Server box is shown in the login dialog for the connection. If set to 2, the box is shown but disabled. If set to 0, the box is hidden. If set to 3, the system settings are used.
If set to 1, the User Name box is shown in the login dialog for the connection. If set to 2, the box is shown but disabled. If set to 0, the box is hidden. If set to 3, the system settings are used.
Sets the port number to use when contacting the SSH server. The default is 22.
If set to the default focus and the connection is already started, the connection will be given focus. Otherwise, an error will be returned stating that the connection is already started.
If set to 1, the Force TTY allocation option is enabled for the connection.
Sets the default user name to supply to the remote host during login. Generally, this setting is used for kiosk-style applications where a generic user name is used for login.
root/ConnectionType/ssh/connections/<UUID>/ waitForNetwork root/ConnectionType/ssh/connections/
<UUID>/x11 root/ConnectionType/ssh/coreSettings/ className root/ConnectionType/ssh/coreSettings/editor
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
If set to 1, the X11 connection forwarding option is enabled for the connection.
root/ConnectionType/ssh/coreSettings/
USBrelevant
Specifies if this connection type is USB-relevant. If it is, it might have a USB plugin for redirecting USB devices.
root/ConnectionType/ssh/coreSettings/appName Sets the internal application name to use for this connection type.
This key should not need to be modified.
Sets the internal application class name to use for this connection type. This key should not need to be modified.
Sets the internal application name to use when Connection
Manager is launched for this connection type. This key should not need to be modified.
root/ConnectionType/ssh/coreSettings/icon root/ConnectionType/ssh/coreSettings/ icon16Path
Specifies the icon from the icon theme set to use for this connection.
Sets the path to the 16 × 16 pixel icon for this application.
Sets the path to the 32 × 32 pixel icon for this application.
ConnectionType 99
Registry key root/ConnectionType/ssh/coreSettings/ icon48Path root/ConnectionType/ssh/coreSettings/ iconActive
Description
Sets the path to the 48 × 48 pixel icon for this application.
Reserved for future use.
root/ConnectionType/ssh/coreSettings/label root/ConnectionType/ssh/coreSettings/ priorityInConnectionLists root/ConnectionType/ssh/coreSettings/ serverRequired
Sets the name to display for this connection type in the UI.
Sets the priority of this connection type when it is displayed in
Connection Manager and the Configuration Wizard that displays during initial setup. A higher value will move the connection type towards the top of the list. If set to 0, the connection type is hidden from Configuration Wizard and is shown last in Connection
Manager. Connections types with the same priority are listed in alphabetical order.
Sets whether a server name or address is unused , optional , or required for this connection type.
root/ConnectionType/ssh/coreSettings/ stopProcess
Sets the behavior that should occur when connection-mgr stop is called on this connection. By default this is close , which will send a standard kill signal to the process. When set to kill , the process specified by appName will be forcefully killed. When set to custom , a custom execution script specified by wrapperScript will be executed with the argument stop to terminate the process gracefully.
root/ConnectionType/ssh/coreSettings/tier Specifies the relative importance of this connection type and the order in which it is listed in the Create menu.
root/ConnectionType/ssh/coreSettings/watchPid If set to 1, the connection is monitored under the name specified by appName . This key should not need to be modified.
root/ConnectionType/ssh/coreSettings/ wrapperScript root/ConnectionType/ssh/gui/SshManager/name
Sets the script or binary to execute when launching this connection type. This is the primary script handling all connection settings and command line arguments for the connection. This key should not need to be modified.
This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/ssh/gui/SshManager/status This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/ssh/gui/SshManager/title This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/ssh/gui/SshManager/ widgets/address root/ConnectionType/ssh/gui/SshManager/ widgets/application root/ConnectionType/ssh/gui/SshManager/ widgets/autoReconnect
Controls the state of the Address widget in Secure Shell
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Run application widget in Secure Shell
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto reconnect widget in Secure Shell
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the
100 Appendix D Registry keys
Registry key root/ConnectionType/ssh/gui/SshManager/ widgets/autostart root/ConnectionType/ssh/gui/SshManager/ widgets/backgroundColor root/ConnectionType/ssh/gui/SshManager/ widgets/compression root/ConnectionType/ssh/gui/SshManager/ widgets/fallBackConnection root/ConnectionType/ssh/gui/SshManager/ widgets/font root/ConnectionType/ssh/gui/SshManager/ widgets/foregroundColor root/ConnectionType/ssh/gui/SshManager/ widgets/fork root/ConnectionType/ssh/gui/SshManager/ widgets/hasDesktopIcon root/ConnectionType/ssh/gui/SshManager/ widgets/isInMenu root/ConnectionType/ssh/gui/SshManager/ widgets/label root/ConnectionType/ssh/gui/SshManager/ widgets/port
Description widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto start priority widget in Secure
Shell Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Background color widget in Secure Shell
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Compression widget in Secure Shell
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Fallback Connection widget in Secure
Shell Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Font widget in Secure Shell Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Foreground color widget in Secure Shell
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Fork into background widget in Secure
Shell Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show icon on desktop widget in Secure
Shell Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the Name widget in Secure Shell Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Port widget in Secure Shell Connection
Manager. If set to active , the widget is visible in the UI and the
ConnectionType 101
Registry key root/ConnectionType/ssh/gui/SshManager/ widgets/tty root/ConnectionType/ssh/gui/SshManager/ widgets/username root/ConnectionType/ssh/gui/SshManager/ widgets/waitForNetwork root/ConnectionType/ssh/gui/SshManager/ widgets/x11
Description user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Force TTY allocation widget in Secure
Shell Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the User name widget in Secure Shell
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Wait for network before connecting widget in Secure Shell Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the X11 connection forwarding widget in
Secure Shell Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
telnet
Registry key root/ConnectionType/telnet/authorizations/ user/add root/ConnectionType/telnet/authorizations/ user/general root/ConnectionType/telnet/connections/
<UUID>/address root/ConnectionType/telnet/connections/
<UUID>/afterStartedCommand root/ConnectionType/telnet/connections/
<UUID>/afterStoppedCommand root/ConnectionType/telnet/connections/
<UUID>/authorizations/user/edit root/ConnectionType/telnet/connections/
<UUID>/authorizations/user/execution root/ConnectionType/telnet/connections/
<UUID>/autoReconnect root/ConnectionType/telnet/connections/
<UUID>/autostart
Description
If set to 1, an end user has permission to add a new connection of this type using Connection Manager. This key has no effect on
Smart Zero.
If set to 1, an end user has permission to modify the general settings for this connection type using Connection Manager. This key has no effect on Smart Zero.
Sets the hostname or IP address to connect to.
Sets the command to execute after the connection has been started.
Sets the command to execute after the connection has been stopped.
If set to 1, an end user has permission to modify the connection settings for this connection.
If set to 1, an end user has permission to execute this connection.
If set to 1, the connection will be restarted when it is closed or disconnected.
If set to a value of 1–5, the connection will be started automatically after the system boots, with the value of 1 having the highest priority.
102 Appendix D Registry keys
Registry key root/ConnectionType/telnet/connections/
<UUID>/backgroundColor root/ConnectionType/telnet/connections/
<UUID>/beforeStartingCommand root/ConnectionType/telnet/connections/
<UUID>/connectionEndAction root/ConnectionType/telnet/connections/
<UUID>/coord root/ConnectionType/telnet/connections/
<UUID>/dependConnectionId root/ConnectionType/telnet/connections/
<UUID>/extraEnvValues/<UUID>/key root/ConnectionType/telnet/connections/
<UUID>/extraEnvValues/<UUID>/value root/ConnectionType/telnet/connections/
<UUID>/fallBackConnection root/ConnectionType/telnet/connections/
<UUID>/font root/ConnectionType/telnet/connections/
<UUID>/foregroundColor root/ConnectionType/telnet/connections/
<UUID>/hasDesktopIcon root/ConnectionType/telnet/connections/
<UUID>/iconPosition root/ConnectionType/telnet/connections/
<UUID>/label root/ConnectionType/telnet/connections/
<UUID>/locale root/ConnectionType/telnet/connections/
<UUID>/loginfields/server root/ConnectionType/telnet/connections/
<UUID>/port root/ConnectionType/telnet/connections/
<UUID>/startMode root/ConnectionType/telnet/connections/
<UUID>/waitForNetwork root/ConnectionType/telnet/coreSettings/
USBrelevant root/ConnectionType/telnet/coreSettings/ appName
Description
Sets the background color for the connection.
Sets the command to execute before the connection starts.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Sets the name of an extra environment variable for use with the connection.
Sets the value of an extra environment variable for use with the connection.
Sets the fallback connection via its UUID.
Sets the font size for the connection.
Sets the foreground color for the connection.
If set to 1, the desktop icon for this connection is enabled. This key has no effect on Smart Zero.
Sets the x,y coordinates of a pinned desktop icon. If not specified, the icon floats.
Sets the connection name that is displayed in the UI. On Smart
Zero, this will typically be set to Default Connection and does not display in the UI.
Sets the locale of the connection.
If set to 1, the Server box is shown in the login dialog for the connection. If set to 2, the box is shown but disabled. If set to 0, the box is hidden. If set to 3, the system settings are used.
Sets the port number to use when contacting the server. The default is 23.
If set to the default focus and the connection is already started, the connection will be given focus. Otherwise, an error will be returned stating that the connection is already started.
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
Specifies if this connection type is USB-relevant. If it is, it might have a USB plugin for redirecting USB devices.
Sets the internal application name to use for this connection type.
This key should not need to be modified.
ConnectionType 103
Registry key root/ConnectionType/telnet/coreSettings/ icon32Path
Description root/ConnectionType/telnet/coreSettings/ className root/ConnectionType/telnet/coreSettings/ editor root/ConnectionType/telnet/coreSettings/ generalSettingsEditor
Sets the internal application class name to use for this connection type. This key should not need to be modified.
Sets the internal application name to use when Connection
Manager is launched for this connection type. This key should not need to be modified.
Sets the internal application name to use when the General
Settings Manager is launched for this connection type. This key should not need to be modified.
root/ConnectionType/telnet/coreSettings/icon Specifies the icon from the icon theme set to use for this connection.
root/ConnectionType/telnet/coreSettings/ icon16Path
Sets the path to the 16 × 16 pixel icon for this application.
Sets the path to the 32 × 32 pixel icon for this application.
root/ConnectionType/telnet/coreSettings/ icon48Path
Sets the path to the 48 × 48 pixel icon for this application.
root/ConnectionType/telnet/coreSettings/ iconActive
Reserved for future use.
root/ConnectionType/telnet/coreSettings/label Sets the name to display for this connection type in the UI.
root/ConnectionType/telnet/coreSettings/ priorityInConnectionLists root/ConnectionType/telnet/coreSettings/ serverRequired
Sets the priority of this connection type when it is displayed in
Connection Manager and the Configuration Wizard that displays during initial setup. A higher value will move the connection type towards the top of the list. If set to 0, the connection type is hidden from Configuration Wizard and is shown last in Connection
Manager. Connections types with the same priority are listed in alphabetical order.
Sets whether a server name or address is unused , optional , or required for this connection type.
root/ConnectionType/telnet/coreSettings/ stopProcess
Sets the behavior that should occur when connection-mgr stop is called on this connection. By default this is close , which will send a standard kill signal to the process. When set to kill , the process specified by appName will be forcefully killed. When set to custom , a custom execution script specified by wrapperScript will be executed with the argument stop to terminate the process gracefully.
root/ConnectionType/telnet/coreSettings/tier Specifies the relative importance of this connection type and the order in which it is listed in the Create menu.
root/ConnectionType/telnet/coreSettings/ wrapperScript root/ConnectionType/telnet/gui/TelnetManager/ name root/ConnectionType/telnet/gui/TelnetManager/ status root/ConnectionType/telnet/gui/TelnetManager/ title
Sets the script or binary to execute when launching this connection type. This is the primary script handling all connection settings and command line arguments for the connection. This key should not need to be modified.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
104 Appendix D Registry keys
Registry key root/ConnectionType/telnet/gui/TelnetManager/ widgets/address root/ConnectionType/telnet/gui/TelnetManager/ widgets/autoReconnect root/ConnectionType/telnet/gui/TelnetManager/ widgets/autostart root/ConnectionType/telnet/gui/TelnetManager/ widgets/backgroundColor root/ConnectionType/telnet/gui/TelnetManager/ widgets/fallBackConnection root/ConnectionType/telnet/gui/TelnetManager/ widgets/foregroundColor root/ConnectionType/telnet/gui/TelnetManager/ widgets/hasDesktopIcon root/ConnectionType/telnet/gui/TelnetManager/ widgets/label root/ConnectionType/telnet/gui/TelnetManager/ widgets/port root/ConnectionType/telnet/gui/TelnetManager/ widgets/waitForNetwork
Description
Controls the state of the Address widget in Telnet Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Auto reconnect widget in Telnet
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto start priority widget in Telnet
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Background color widget in Telnet
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Fallback Connection widget in Telnet
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Foreground color widget in Telnet
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show icon on desktop widget in Telnet
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Name widget in Telnet Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Port widget in Telnet Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Wait for network before connecting widget in Telnet Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
ConnectionType 105
view
Registry key root/ConnectionType/view/authorizations/ user/add root/ConnectionType/view/authorizations/user/ commandLineBox root/ConnectionType/view/authorizations/user/ general root/ConnectionType/view/connections/<UUID>/
ExtraArgs root/ConnectionType/view/connections/<UUID>/
SingleSignOn
Description
If set to 1, an end user has permission to add a new connection of this type using Connection Manager. This key has no effect on
Smart Zero.
If set to 1, an end user has permission to enter command-line arguments in VMware Horizon View Connection Manager.
If set to 1, an end user has permission to modify the general settings for this connection type using Connection Manager. This key has no effect on Smart Zero.
Specifies extra arguments for the VMware Horizon View client.
Run view_client --help or vmware-view --help from an X terminal to see all available arguments.
root/ConnectionType/view/connections/<UUID>/ afterStartedCommand root/ConnectionType/view/connections/<UUID>/ afterStoppedCommand root/ConnectionType/view/connections/<UUID>/ allowBlacklistedDrivers root/ConnectionType/view/connections/<UUID>/ appInMenu root/ConnectionType/view/connections/<UUID>/ appOnDesktop root/ConnectionType/view/connections/<UUID>/ applicationSize
Sets the command to execute after the connection has been started.
Sets the command to execute after the connection has been stopped.
If set to 1, allows VMware Horizon View connections to enable the
H.264 feature with AMD open-source graphic drivers. If set to 0,
VMware Horizon View connections disable hardware acceleration with blacklisted drivers (such as AMDGPU and Radeon).
If set to 1, all applications for this connection will be displayed in the taskbar menu.
If set to 1, all applications for this connection will be displayed on the desktop.
Sets the size in which the VMware Horizon View client will launch applications.
root/ConnectionType/view/connections/<UUID>/ attachToConsole root/ConnectionType/view/connections/<UUID>/ authorizations/user/edit root/ConnectionType/view/connections/<UUID>/ authorizations/user/execution
If set to 1, an end user has permission to modify the connection settings for this connection.
If set to 1, an end user has permission to execute this connection.
root/ConnectionType/view/connections/<UUID>/ autoHideMenuBar root/ConnectionType/view/connections/<UUID>/ autoReconnect root/ConnectionType/view/connections/<UUID>/ autoReconnectDelay root/ConnectionType/view/connections/<UUID>/ automaticLogin
If set to 1, the connection will be restarted when it is closed or disconnected.
Sets the amount of time in seconds to wait before reconnecting the session. The default of 0 will cause the connection to reconnect immediately. This setting only takes effect when autoReconnect is set to 1.
If set to 1, the VMware Horizon View client will attempt to log in automatically if all fields are provided. If set to 0, users have to select Connect manually in the VMware Horizon View client, log in, and select a desktop.
106 Appendix D Registry keys
Registry key root/ConnectionType/view/connections/<UUID>/ autostart
Description
If set to a value of 1–5, the connection will be started automatically after the system boots, with the value of 1 having the highest priority.
Reserved for future use.
root/ConnectionType/view/connections/<UUID>/ autostartDelay root/ConnectionType/view/connections/<UUID>/ beforeStartingCommand root/ConnectionType/view/connections/<UUID>/ closeAfterDisconnect
Sets the command to execute before the connection starts.
root/ConnectionType/view/connections/<UUID>/ closeAfterRoaming root/ConnectionType/view/connections/<UUID>/ coord root/ConnectionType/view/connections/<UUID>/ credentialsType root/ConnectionType/view/connections/<UUID>/ dependConnectionId root/ConnectionType/view/connections/<UUID>/ desktop
If set to 1, the connection is ended after the first desktop is closed. If set to 0, the VMware Horizon View client returns to the desktop selection screen. This is enabled by default to prevent users from accidentally leaving the connection at the desktop selection screen after logging off.
If set to 1, the VMware connection will be disconnected if it is roamed to another place..
This registry key is either used internally or reserved for future use. The value should not be changed.
Specifies the credential type between anonymous
(unauthenticated access), sso (single sign-on), startup
(credentials are requested at startup), card).
password (preconfigured user/domain/password), or smartcard (preconfigured smart
This registry key is either used internally or reserved for future use. The value should not be changed.
If specified, the named desktop will launch automatically upon login. By default, if there is only one desktop available, it will launch automatically without needing to be specified.
Sets the size in which the VMware Horizon View client will launch the desktop.
root/ConnectionType/view/connections/<UUID>/ desktopSize root/ConnectionType/view/connections/<UUID>/ directory root/ConnectionType/view/connections/<UUID>/ disableMaximizedApp root/ConnectionType/view/connections/<UUID>/ domain root/ConnectionType/view/connections/<UUID>/ enableCDR root/ConnectionType/view/connections/<UUID>/ enableMMR
If set to 1, window size settings for maximized applications are disabled.
Sets the domain to provide to View Connection Server. If no domain is specified, the default domain for the server is used.
If set to 1, the Client Drive Redirection add-on is enabled.
root/ConnectionType/view/connections/<UUID>/ enableMediaProvider root/ConnectionType/view/connections/<UUID>/ enableSeamlessWindow
If set to 1, the Multimedia Redirection add-on is enabled via the
Blast/PCoIP protocol, causing supported codecs played through
Windows Media Player to be redirected to the client. This greatly improves full-screen and high-definition video playback for codecs such as WMV9, VC1, and MPEG4. Video is rendered locally using the CPU power.
If set to 1, the VMware Horizon Virtualization Pack for Skype
Business component is enabled. This component enables Linux users to redirect Skype for Business calls with the VMware
Horizon View Client.
If set to 1, the VMware Horizon View client starts applications in seamless window mode.
ConnectionType 107
Registry key root/ConnectionType/view/connections/<UUID>/ enableSingleMode root/ConnectionType/view/connections/<UUID>/ extraEnvValues/<UUID>/key root/ConnectionType/view/connections/<UUID>/ extraEnvValues/<UUID>/value root/ConnectionType/view/connections/<UUID>/ fallBackConnection root/ConnectionType/view/connections/<UUID>/ fullscreen root/ConnectionType/view/connections/<UUID>/ hasDesktopIcon root/ConnectionType/view/connections/<UUID>/ hideMenuBar root/ConnectionType/view/connections/<UUID>/ iconPosition root/ConnectionType/view/connections/<UUID>/ isInMenu root/ConnectionType/view/connections/<UUID>/ label root/ConnectionType/view/connections/<UUID>/ lockServer root/ConnectionType/view/connections/<UUID>/ loginfields/domain root/ConnectionType/view/connections/<UUID>/ loginfields/password root/ConnectionType/view/connections/<UUID>/ loginfields/rememberme root/ConnectionType/view/connections/<UUID>/ loginfields/server root/ConnectionType/view/connections/<UUID>/ loginfields/showpassword root/ConnectionType/view/connections/<UUID>/ loginfields/smartcard root/ConnectionType/view/connections/<UUID>/ loginfields/username
Description
Sets the name of an extra environment variable for use with the connection.
Sets the value of an extra environment variable for use with the connection.
Sets the fallback connection via its UUID.
If set to 1, the VMware Horizon View client launches in full screen mode when started.
If set to 1, the desktop icon for this connection is enabled. This key has no effect on Smart Zero.
If set to 1, the top menu bar within the desktop is hidden. This bar is used to manage remote devices and start other desktops.
Sets the x,y coordinates of a pinned desktop icon. If not specified, the icon floats.
This registry key is either used internally or reserved for future use. The value should not be changed.
Sets the connection name that is displayed in the UI. On Smart
Zero, this will typically be set to Default Connection and does not display in the UI.
If set to 1, end users are prevented from changing the server address.
If set to 1, the Domain field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
If set to 1, the Password field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
If set to 1, the Remember me check box is shown in the login dialog for the connection. If set to 2, the check box is shown but disabled. If set to 0, the check box is hidden.
If set to 1, the Server box is shown in the login dialog for the connection. If set to 2, the box is shown but disabled. If set to 0, the box is hidden. If set to 3, the system settings are used.
If set to 1, the Show password check box is shown in the login dialog for the connection. If set to 2, the check box is shown but disabled. If set to 0, the check box is hidden.
If set to 1, the Smart card login check box is shown in the login dialog for the connection. If set to 2, the check box is shown but disabled. If set to 0, the check box is hidden. This check box might not appear if no smart card is detected, even if this option is enabled.
If set to 1, the User Name field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
108 Appendix D Registry keys
Registry key root/ConnectionType/view/connections/<UUID>/ networkCondition root/ConnectionType/view/connections/<UUID>/ password
Description
Allows the selection of the network conditions for the best experience.
Sets the default password to supply to the remote host during login. This value will be encrypted. Generally, this setting is used for kiosk-style applications where a generic password is used for login.
Sets the preferred protocol.
root/ConnectionType/view/connections/<UUID>/ preferredProtocol root/ConnectionType/view/connections/<UUID>/ printerMapping root/ConnectionType/view/connections/<UUID>/ saveCredentials root/ConnectionType/view/connections/<UUID>/ sendCtrlAltDelToVM root/ConnectionType/view/connections/<UUID>/ server root/ConnectionType/view/connections/<UUID>/ sessionEndAction root/ConnectionType/view/connections/<UUID>/ singleDesktop root/ConnectionType/view/connections/<UUID>/ smartcard
If set to 1, all printers defined locally via CUPS are redirected to the remote host via ThinPrint. If set to 0, the printer mapping is disabled. If set to 2, the USB printers are redirected as configured in USB Manager.
Sets the address of the remote host to connect to. This is typically a URL such as http://server.domain.com
.
root/ConnectionType/view/connections/<UUID>/ startMode
If set to 1, locally-attached smart cards are forwarded to the remote host, allowing them to be used by applications on the remote host. This only enables smart card login for the remote host, not for View Connection Server.
If set to the default focus and the connection is already started, the connection will be given focus. Otherwise, an error will be returned stating that the connection is already started.
root/ConnectionType/view/connections/<UUID>/ usbAutoConnectAtStartUp root/ConnectionType/view/connections/<UUID>/ usbAutoConnectOnInsert root/ConnectionType/view/connections/<UUID>/ useCurrentViewConfig root/ConnectionType/view/connections/<UUID>/ username root/ConnectionType/view/connections/<UUID>/ viewSecurityLevel
If set to 1, the HP scripts do not create a new /etc/vmware/ config file, and the VMware Horizon View client uses the current /etc/vmware/config file.
Sets the default user name to supply to the remote host during login. Generally, this setting is used for kiosk-style applications where a generic user name is used for login.
If set to Refuse insecure connections , the VMware
Horizon View client will not allow a user to connect to View
Connection Server if the server's SSL certificate is invalid. If set to
Warn , the VMware Horizon View client will display a warning if the server's certificate is not able to be verified, and if the certificate is self-signed or expired, the user still will not be allowed to connect. If set to Allow all connections , the server certificate will not be verified and connections to any server will be allowed.
ConnectionType 109
Registry key root/ConnectionType/view/connections/<UUID>/ waitForNetwork root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/compression root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/disableMMRwithRFX root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/enableMMR
Description
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/attachToConsole root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/audioLatency root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/clipboardExtension root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/colorDepth root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/frameAcknowledgeCount root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/general/sendHostname root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/hostnameType root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/loadBalanceInfo root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/mouseMotionEvents root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/offScreenBitmaps
Sets the average milliseconds of offset between the audio stream and the display of corresponding video frames after decoding.
If set to 1, clipboard functionality is enabled between different
RDP sessions and between RDP sessions and the local system.
This setting is deprecated. It is used to reduce the color depth of the connection below that of the native desktop resolution.
Frequently, this has been used to reduce network bandwidth.
Reducing color depth to a level not supported by the video driver can cause screen corruption or launch failures.
If set to 1, compression of RDP data sent between the client and the server is enabled.
If set to 1, multimedia redirection is disabled if a valid RemoteFX session is established.
If set to 1, the Multimedia Redirection add-on is enabled, causing supported codecs played through Windows Media Player to be redirected to the client.
Sets the number of video frames the server can push without waiting for acknowledgement from the client. Lower numbers result in a more responsive desktop but lower frame rate. If set to
0, frame acknowledgement is not used in the client-server interactions.
If set to hostname , the system hostname is sent to the remote host. This is typically used to identify the thin client associated with a particular RDP session. The sent hostname can be overridden using sendHostname in the connection-specific settings. If set to mac , the MAC address of the first available network adapter is sent instead of the hostname.
If set to hostname, the system hostname is sent to the remote host. This is typically used to identify the thin client associated with a particular RDP session. The sent hostname can be overriden using sendHostname in the connection-specific settings. If set to mac, the MAC address of the first available network adapter is sent instead of the hostname.
This value is the load balancing cookie sent for brokering purposes to the server upon connection and corresponds to the loadbalanceinfo field in the .rdp file. By default, the value is empty.
If set to 0, mouse motion events are not sent to the server. This can prevent some user feedback such as tooltips from functioning properly.
If set to 0, off-screen bitmaps are disabled. This can increase performance slightly but will cause blocks of the screen to update asynchronously, causing screen transitions to update nonuniformly.
110 Appendix D Registry keys
Registry key root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/perfFlagDesktopComposition root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/perfFlagFontSmoothing root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/perfFlagNoCursorSettings root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/perfFlagNoCursorShadow root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/perfFlagNoMenuAnimations root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/perfFlagNoTheming root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/perfFlagNoWallpaper root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/perfFlagNoWindowDrag root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/portMapping root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/printerMapping root/ConnectionType/freerdp/connections/
<UUID>/rdp6Buffering root/ConnectionType/freerdp/connections/
<UUID>/rdp8Codecs root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/rdpEncryption root/ConnectionType/freerdp/connections/
<UUID>/rdpH264Codec root/ConnectionType/freerdp/connections/
<UUID>/rdpProgressiveCodec
Description
If set to 1, desktop composition (such as translucent borders) is allowed if supported by the server. Turning off desktop composition can improve performance for low-bandwidth connections. Generally, this only affects RemoteFX. If set to 2, the value is selected based on the thin client performance.
If set to 1, font smoothing is allowed if supported by the server and enabled. Turning off font smoothing can improve performance on low-bandwidth connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, cursor blinking is disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, mouse cursor shadows are disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, menu animations are disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, user interface themes are disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, the desktop wallpaper is disabled, which can improve performance on low-bandwidth RDP connections. If set to 2, the value is selected based on the thin client performance.
If set to 1, full-content window dragging is disabled, which can improve performance on low-bandwidth RDP connections. The window outline is used instead. If set to 2, the value is selected based on the thin client performance.
If set to 1, the following serial and parallel ports are redirected to the remote host: ttyS0, ttyS1, ttyS2, ttyS3, ttyUSB0, lp0.
If set to 1, all printers defined locally via CUPS are redirected to the remote host.
If set to 1, non-RemoteFX graphics performance is increased at the cost of less frequent screen updates.
If set to 1, RDP 8 codecs are used if available. This setting should be disabled only in the case of a defect specific to RDP 8 codecs.
Disabling this setting might also disable more advanced codecs.
If set to 1, standard RDP encryption is used to encrypt all data between the client and the server.
If set to 1, RDP 8 H.264 codecs are used if available. This setting has known visual errors, particularly in multi-monitor configurations, and should be considered experimental and unsupported. Enabling this setting simply advises the server that the thin client supports H.264 for desktop display. The server must also support H.264, and the server makes the final decision on what codecs are used. This setting affects only the desktop codecs. It does not affect multimedia redirection codecs.
If set to 1, RDP 8 progressive codecs are used if available. This setting should be disabled only in the case of a defect specific to
RDP 8 progressive codecs. Disabling this setting might also disable more advanced codecs.
ConnectionType 111
Registry key root/ConnectionType/freerdp/connections/
<UUID>/redirectPreference root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/remoteFx root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/sendHostname root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/sound root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/timeoutError root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/timeoutRecovery root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/timeoutWarning root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/timeoutWarningDialog
Description
For redirection, the RDP client is given several destination possibilities. It normally tries them in the following order: FQDN,
Primary IP, IP List, NetBIOS. If FQDN is not desired, one of the alternatives can be tried first by setting this registry key. If the specified method does not work, the RDP client falls back to the original order. A setting of auto forces the original order.
If set to 1, RemoteFX is used if available.
Sets the thin client hostname that is sent to the remote host. If left blank, the system hostname is sent. The registry key root/
ConnectionType/view/connections/<UUID>/ xfreerdpOptions/general/sendHostname must be set to hostname for this key to be used.
If set to Bring to this computer , sound is redirected from the remote host to the client using a standard virtual channel. If set to Leave at remote computer , sound is left at the remote host. This can be useful when using a redirected USB audio device. If set to any other value, audio is disabled. Generally,
HP recommends setting this value to Bring to this computer and not redirecting USB playback devices to the remote host. This will improve audio quality and ensure that client audio redirected via other virtual channels (such as
Multimedia Redirection ) matches local audio settings.
Sets the number of milliseconds to wait after losing the connection before giving up on reconnecting with the server. If set to 0, reconnection is attempted forever.
Sets the number of milliseconds to wait after losing the connection for networking to recover without trying a forced reconnect.
Sets the number of milliseconds to wait after losing the connection before warning the user that the connection has been lost.
If set to 1, when an end-to-end connection drop is detected, a dialog is displayed and the screen will turn grayscale. Otherwise, messages are written to the connection log and the session freezes.
If set to 1, end-to-end connection health checks are done.
root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/timeoutsEnabled root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/tlsVersion root/ConnectionType/view/connections/<UUID>/ xfreerdpOptions/xkbLayoutId root/ConnectionType/view/coreSettings/
USBrelevant
Sets the version of Transport Layer Security to be used during the early stages of negotiation with the RDP server. Either set this to match the version of TLS used by your RDP server, or try setting it to auto.
NOTE: There are some server-side defects in some unpatched
RDP servers that can cause the auto setting to fail, so it is not the default setting.
Sets an XKB layout ID for bypassing the system keyboard. To see the list of available IDs, enter the following command in an X terminal: xfreerdp --kbd-list .
Indicates if this connection type is USB-relevant. If it is, it might have a USB plugin for redirecting USB devices.
112 Appendix D Registry keys
Registry key root/ConnectionType/view/coreSettings/ icon32Path
Description root/ConnectionType/view/coreSettings/appName Sets the internal application name to use for this connection type.
This key should not need to be modified.
root/ConnectionType/view/coreSettings/ className
Sets the internal application class name to use for this connection type. This key should not need to be modified.
root/ConnectionType/view/coreSettings/editor Sets the internal application name to use when Connection
Manager is launched for this connection type. This key should not need to be modified.
root/ConnectionType/view/coreSettings/icon root/ConnectionType/view/coreSettings/ icon16Path
Specifies the icon from the icon theme set to use for this connection.
Sets the path to the 16 × 16 pixel icon for this application.
Sets the path to the 32 × 32 pixel icon for this application.
root/ConnectionType/view/coreSettings/ icon48Path
Sets the path to the 48 × 48 pixel icon for this application.
root/ConnectionType/view/coreSettings/ iconActive
Reserved for future use.
root/ConnectionType/view/coreSettings/label root/ConnectionType/view/coreSettings/ priorityInConnectionLists root/ConnectionType/view/coreSettings/ serverRequired root/ConnectionType/view/coreSettings/ stopProcess root/ConnectionType/view/coreSettings/tier root/ConnectionType/view/coreSettings/ watchPid root/ConnectionType/view/coreSettings/ wrapperScript root/ConnectionType/view/coreSettings/ wrapperScriptGeneration root/ConnectionType/view/general/ enableComPortRedirection
Sets the name to display for this connection type in the UI.
Sets the priority of this connection type when it is displayed in
Connection Manager and the Configuration Wizard that displays during initial setup. A higher value will move the connection type towards the top of the list. If set to 0, the connection type is hidden from Configuration Wizard and is shown last in Connection
Manager. Connections types with the same priority are listed in alphabetical order.
Sets whether a server name or address is unused , optional , or required for this connection type.
Sets the behavior that should occur when connection-mgr stop is called on this connection. By default this is close , which will send a standard kill signal to the process. When set to kill , the process specified by appName will be forcefully killed. When set to custom , a custom execution script specified by wrapperScript will be executed with the argument stop to terminate the process gracefully.
Specifies the relative importance of this connection type and the order in which it is listed in the Create menu.
If set to 1, the connection is monitored under the name specified by appName . This key should not need to be modified.
Sets the script or binary to execute when launching this connection type. This is the primary script handling all connection settings and command line arguments for the connection. This key should not need to be modified.
Lets Connection Manager know what type of parameters to pass to the wrapper script.
ConnectionType 113
Registry key root/ConnectionType/view/general/rdpOptions
Description
Options specified here will be forwarded directly to the RDP client if RDP is used as the display protocol for the VMware Horizon View connection. To see a full list of options, enter the following command in an X terminal: rdesktop --help .
root/ConnectionType/view/gui/viewManager/name This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/view/gui/viewManager/ status root/ConnectionType/view/gui/viewManager/ title
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/view/gui/viewManager/ widgets/autostart root/ConnectionType/view/gui/viewManager/ widgets/fallBackConnection root/ConnectionType/view/gui/viewManager/ widgets/label
Controls the state of the Auto start priority widget in VMware
Horizon View Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Fallback Connection widget in VMware
Horizon View Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Name widget in VMware Horizon View
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
xdmcp
Registry key root/ConnectionType/xdmcp/authorizations/ user/add root/ConnectionType/xdmcp/authorizations/ user/general root/ConnectionType/xdmcp/connections/<UUID>/ address
Description
If set to 1, an end user has permission to add a new connection of this type using Connection Manager. This key has no effect on
Smart Zero.
If set to 1, an end user has permission to modify the general settings for this connection type using Connection Manager. This key has no effect on Smart Zero.
Sets the hostname or IP address to connect to.
root/ConnectionType/xdmcp/connections/<UUID>/ afterStartedCommand root/ConnectionType/xdmcp/connections/<UUID>/ afterStoppedCommand root/ConnectionType/xdmcp/connections/<UUID>/ authorizations/user/edit root/ConnectionType/xdmcp/connections/<UUID>/ authorizations/user/execution
Sets the command to execute after the connection has been started.
Sets the command to execute after the connection has been stopped.
If set to 1, an end user has permission to modify the connection settings for this connection.
If set to 1, an end user has permission to execute this connection.
root/ConnectionType/xdmcp/connections/<UUID>/ autoReconnect
If set to 1, the connection will be restarted when it is closed or disconnected.
114 Appendix D Registry keys
Registry key root/ConnectionType/xdmcp/connections/<UUID>/ autostart root/ConnectionType/xdmcp/connections/<UUID>/ beforeStartingCommand
Description
If set to a value of 1–5, the connection will be started automatically after the system boots, with the value of 1 having the highest priority.
Sets the command to execute before the connection starts.
root/ConnectionType/xdmcp/connections/<UUID>/ color
Sets the color depth of the display for the connection.
root/ConnectionType/xdmcp/connections/<UUID>/ connectionEndAction root/ConnectionType/xdmcp/connections/<UUID>/ coord root/ConnectionType/xdmcp/connections/<UUID>/ dependConnectionId root/ConnectionType/xdmcp/connections/<UUID>/ extraEnvValues/<UUID>/key root/ConnectionType/xdmcp/connections/<UUID>/ extraEnvValues/<UUID>/value
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Sets the name of an extra environment variable for use with the connection.
Sets the value of an extra environment variable for use with the connection.
Sets the fallback connection via its UUID.
root/ConnectionType/xdmcp/connections/<UUID>/ fallBackConnection root/ConnectionType/xdmcp/connections/<UUID>/ fontServer
Sets the address of the font server to use. The registry key useFontServer must also be set to 1.
root/ConnectionType/xdmcp/connections/<UUID>/ hasDesktopIcon root/ConnectionType/xdmcp/connections/<UUID>/ iconPosition root/ConnectionType/xdmcp/connections/<UUID>/ isInMenu root/ConnectionType/xdmcp/connections/<UUID>/ label root/ConnectionType/xdmcp/connections/<UUID>/ loginfields/server root/ConnectionType/xdmcp/connections/<UUID>/ refreshRate
If set to 1, the desktop icon for this connection is enabled. This key has no effect on Smart Zero.
Sets the x,y coordinates of a pinned desktop icon. If not specified, the icon floats.
This registry key is either used internally or reserved for future use. The value should not be changed.
Sets the connection name that is displayed in the UI. On Smart
Zero, this will typically be set to Default Connection and does not display in the UI.
If set to 1, the Server box is shown in the login dialog for the connection. If set to 2, the box is shown but disabled. If set to 0, the box is hidden. If set to 3, the system settings are used.
Sets the refresh rate of the display for the connection.
root/ConnectionType/xdmcp/connections/<UUID>/ startMode root/ConnectionType/xdmcp/connections/<UUID>/ type root/ConnectionType/xdmcp/connections/<UUID>/ useFontServer
If set to the default focus and the connection is already started, the connection will be given focus. Otherwise, an error will be returned stating that the connection is already started.
Sets the XDMCP connection type. If set to chooser , all available hosts are listed and the user can select which one to connect to. If set to query , an XDMCP request is sent to the specified host directly. If set to broadcast , all available hosts are listed and the first one is connected to automatically.
If set to 1, the font server is enabled. If set to 0, the local font is used.
ConnectionType 115
Registry key root/ConnectionType/xdmcp/connections/<UUID>/ waitForNetwork root/ConnectionType/xdmcp/connections/<UUID>/ windowSize
Description
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
Sets the window size of the connection.
root/ConnectionType/xdmcp/coreSettings/
USBrelevant root/ConnectionType/xdmcp/coreSettings/ appName
Specifies if this connection type is USB-relevant. If it is, it might have a USB plugin for redirecting USB devices.
Sets the internal application name to use for this connection type.
This key should not need to be modified.
root/ConnectionType/xdmcp/coreSettings/audio This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/xdmcp/coreSettings/ className root/ConnectionType/xdmcp/coreSettings/ desktopButton
Sets the internal application class name to use for this connection type. This key should not need to be modified.
This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/xdmcp/coreSettings/editor Sets the internal application name to use when Connection
Manager is launched for this connection type. This key should not need to be modified.
root/ConnectionType/xdmcp/coreSettings/ generalSettingsEditor
This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/xdmcp/coreSettings/icon root/ConnectionType/xdmcp/coreSettings/ icon16Path
Specifies the icon from the icon theme set to use for this connection.
Sets the path to the 16 × 16 pixel icon for this application.
root/ConnectionType/xdmcp/coreSettings/ icon32Path
Sets the path to the 32 × 32 pixel icon for this application.
root/ConnectionType/xdmcp/coreSettings/ icon48Path root/ConnectionType/xdmcp/coreSettings/ iconActive
Sets the path to the 48 × 48 pixel icon for this application.
Reserved for future use.
root/ConnectionType/xdmcp/coreSettings/label Sets the name to display for this connection type in the UI.
root/ConnectionType/xdmcp/coreSettings/ priorityInConnectionLists root/ConnectionType/xdmcp/coreSettings/ serverRequired
Sets the priority of this connection type when it is displayed in
Connection Manager and the Configuration Wizard that displays during initial setup. A higher value will move the connection type towards the top of the list. If set to 0, the connection type is hidden from Configuration Wizard and is shown last in Connection
Manager. Connections types with the same priority are listed in alphabetical order.
Sets whether a server name or address is unused , optional , or required for this connection type.
root/ConnectionType/xdmcp/coreSettings/ stopProcess
Sets the behavior that should occur when connection-mgr stop is called on this connection. By default this is close , which will send a standard kill signal to the process. When set to kill , the process specified by appName will be forcefully killed. When set to custom , a custom execution script specified by wrapperScript will be executed with the argument stop to terminate the process gracefully.
116 Appendix D Registry keys
Registry key root/ConnectionType/xdmcp/coreSettings/tier root/ConnectionType/xdmcp/coreSettings/ watchPid root/ConnectionType/xdmcp/coreSettings/ wrapperScript root/ConnectionType/xdmcp/gui/XdmcpManager/ name root/ConnectionType/xdmcp/gui/XdmcpManager/ status root/ConnectionType/xdmcp/gui/XdmcpManager/ title root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/address root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/autoReconnect root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/autostart root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/color root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/fontServer root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/hasDesktopIcon root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/isInMenu root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/label
Description
Specifies the relative importance of this connection type and the order in which it is listed in the Create menu.
If set to 1, the connection is monitored under the name specified by appName . This key should not need to be modified.
Sets the script or binary to execute when launching this connection type. This is the primary script handling all connection settings and command line arguments for the connection. This key should not need to be modified.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the Address widget in XDMCP Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Auto reconnect widget in XDMCP
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto start priority widget in XDMCP
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the Font server widget in XDMCP Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Show icon on desktop widget in XDMCP
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the Name widget in XDMCP Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
ConnectionType 117
Registry key root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/refreshRate root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/type root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/useFontServer root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/waitForNetwork root/ConnectionType/xdmcp/gui/XdmcpManager/ widgets/windowSize
Description
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the Type widget in XDMCP Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Use font server widget in XDMCP
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Wait for network before connecting widget in XDMCP Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
This registry key is either used internally or reserved for future use. The value should not be changed.
xen
Registry key root/ConnectionType/xen/authorizations/ user/add root/ConnectionType/xen/authorizations/user/ general root/ConnectionType/xen/connections/<UUID>/
SingleSignOn root/ConnectionType/xen/connections/<UUID>/ address root/ConnectionType/xen/connections/<UUID>/ afterStartedCommand root/ConnectionType/xen/connections/<UUID>/ afterStoppedCommand root/ConnectionType/xen/connections/<UUID>/ allowSaveConnInfo root/ConnectionType/xen/connections/<UUID>/ appInMenu root/ConnectionType/xen/connections/<UUID>/ appInWindowOrOnDesktop root/ConnectionType/xen/connections/<UUID>/ appOnDashboard
Description
If set to 1, an end user has permission to add a new connection of this type using Connection Manager. This key has no effect on
Smart Zero.
If set to 1, an end user has permission to modify the general settings for this connection type using Connection Manager. This key has no effect on Smart Zero.
If set to 1, the connection shares credentials with the screen saver.
Sets the address of the remote host to connect to. This is typically a URL such as http://server.domain.com
.
Sets the command to execute after the connection has been started.
Sets the command to execute after the connection has been stopped.
If set to 1, all applications for the connection are displayed in the taskbar menu.
If set to 1 and appOnDesktop is enabled, all applications for the connection are displayed in a broker window. If set to 0, the applications for the connection are displayed directly on the desktop.
If set to 1, all applications for the connection will be displayed on the taskbar.
118 Appendix D Registry keys
Registry key root/ConnectionType/xen/connections/<UUID>/ appOnDesktop root/ConnectionType/xen/connections/<UUID>/ authorizations/user/edit root/ConnectionType/xen/connections/<UUID>/ authorizations/user/execution root/ConnectionType/xen/connections/<UUID>/ autoLaunchSingleApp
Description
If set to 1, all applications for the connection will be displayed on the desktop.
If set to 1, an end user has permission to modify the connection settings for this connection.
If set to 1, an end user has permission to execute this connection.
root/ConnectionType/xen/connections/<UUID>/ autoReconnect root/ConnectionType/xen/connections/<UUID>/ autoReconnectAppsOnLogin root/ConnectionType/xen/connections/<UUID>/ autoReconnectDelay root/ConnectionType/xen/connections/<UUID>/ autoRefreshInterval root/ConnectionType/xen/connections/<UUID>/ autoStartDesktop root/ConnectionType/xen/connections/<UUID>/ autoStartResource root/ConnectionType/xen/connections/<UUID>/ autoStartWithGuessing root/ConnectionType/xen/connections/<UUID>/ autostart
If set to 1, and if only a single published application or desktop is returned by the Citrix server, that resource will be launched automatically.
If set to 1, the connection will be restarted when it is closed or disconnected.
If set to 1, the system will attempt to reconnect any active or disconnected Citrix sessions upon initial login.
Sets the amount of time in seconds to wait before reconnecting the session. The default of 0 will cause the connection to reconnect immediately. This setting only takes effect when autoReconnect is set to 1.
Controls the amount of time in seconds before the resources are cleared and refreshed again from the server. Set to -1 to disable.
It is normally not required to frequently refresh the resources from the server.
If set to 1 and if autoStartResource is empty, the first desktop to become available when the connection is started will be launched automatically.
Sets the name of the desktop or application to start automatically when the connection is launched.
If set to 1, the connection tries to launch autoStartDesktop or autoStartResource first. If the connection cannot launch either successfully, it tries to launch another resource by guessing.
If set to a value of 1–5, the connection will be started automatically after the system boots, with the value of 1 having the highest priority.
Reserved for future use.
Sets the command to execute before the connection starts.
root/ConnectionType/xen/connections/<UUID>/ autostartDelay root/ConnectionType/xen/connections/<UUID>/ beforeStartingCommand root/ConnectionType/xen/connections/<UUID>/ connectionMode root/ConnectionType/xen/connections/<UUID>/ connectionStopAction root/ConnectionType/xen/connections/<UUID>/ continueWithNewPassword root/ConnectionType/xen/connections/<UUID>/ coord
Sets the Citrix connection mode for the connection.
Defines the action to be done when the connection is ended from
Connection Manager. The available options are disconnect and logoff .
If set to 1, after resetting the password, the connection continues to launch with the new password. If set to 0, after resetting the password, the current connection closes.
This registry key is either used internally or reserved for future use. The value should not be changed.
ConnectionType 119
Registry key root/ConnectionType/xen/connections/<UUID</ credentialsType root/ConnectionType/xen/connections/<UUID>/ dependConnectionId root/ConnectionType/xen/connections/<UUID>/ domain root/ConnectionType/xen/connections/<UUID>/ enableRSAToken
Description
Specifies the credential type between anonymous
(unauthenticated access), sso (single sign-on), startup
(credentials are requested at startup), password (preconfigured user/domain/password), or smartcard (preconfigured smart card).
This registry key is either used internally or reserved for future use. The value should not be changed.
Sets the domain to provide to the XenDesktop server. If no domain is specified, the default domain for the server is used.
CAUTION: This functionality is unsupported.
If set to 1, the user will be prompted before connecting for a security token value to use when authenticating with NetScaler
Gateway.
Sets the name of an extra environment variable for use with the connection.
Sets the value of an extra environment variable for use with the connection.
Sets the fallback connection via its UUID.
root/ConnectionType/xen/connections/<UUID>/ extraEnvValues/<UUID>/key root/ConnectionType/xen/connections/<UUID>/ extraEnvValues/<UUID>/value root/ConnectionType/xen/connections/<UUID>/ fallBackConnection root/ConnectionType/xen/connections/<UUID>/ folder root/ConnectionType/xen/connections/<UUID>/ forceHttps root/ConnectionType/xen/connections/<UUID>/ fullscreen root/ConnectionType/xen/connections/<UUID>/ hasDesktopIcon root/ConnectionType/xen/connections/<UUID>/ iconPosition root/ConnectionType/xen/connections/<UUID>/ ignoreCertCheck root/ConnectionType/xen/connections/<UUID>/ label
If set to 1, only HTTPS connections are allowed.
If set to 1, the Citrix client launches in full screen mode when started.
If set to 1, the desktop icon for this connection is enabled. This key has no effect on Smart Zero.
Sets the x,y coordinates of a pinned desktop icon. If not specified, the icon floats.
If set to 1, certificate checks are ignored for the connection.
Sets the connection name that is displayed in the UI. On Smart
Zero, this will typically be set to Default Connection and does not display in the UI.
root/ConnectionType/xen/connections/<UUID>/ logOnMethod root/ConnectionType/xen/connections/<UUID>/ loginfields/domain root/ConnectionType/xen/connections/<UUID>/ loginfields/password root/ConnectionType/xen/connections/<UUID>/ loginfields/rememberme
If set to 1, the Domain field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
If set to 1, the Password field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
If set to 1, the Remember me check box is shown in the login dialog for the connection. If set to 2, the check box is shown but disabled. If set to 0, the check box is hidden.
120 Appendix D Registry keys
Registry key root/ConnectionType/xen/connections/<UUID>/ loginfields/server root/ConnectionType/xen/connections/<UUID>/ loginfields/showpassword root/ConnectionType/xen/connections/<UUID>/ loginfields/smartcard root/ConnectionType/xen/connections/<UUID>/ loginfields/username root/ConnectionType/xen/connections/<UUID>/ password root/ConnectionType/xen/connections/<UUID>/ resListRequest root/ConnectionType/xen/connections/<UUID>/ saveNewUrl
Description
If set to 1, the Server box is shown in the login dialog for the connection. If set to 2, the box is shown but disabled. If set to 0, the box is hidden. If set to 3, the system settings are used.
If set to 1, the Show password button is shown in the login dialog for the connection. If set to 2, the button is shown but disabled. If set to 0, the button is hidden.
If set to 1, the Smart card login check box is shown in the login dialog for the connection. If set to 2, the check box is shown but disabled. If set to 0, the check box is hidden. This check box might not appear if no smart card is detected, even if this option is enabled.
If set to 1, the User Name field is shown in the login dialog for the connection. If set to 2, the field is shown but disabled. If set to 0, the field is hidden.
Sets the default password to supply to the remote host during login. This value will be encrypted. Generally, this setting is used for kiosk-style applications where a generic password is used for login.
If set to 1, a connection only lists the resources without launching them or downloading icons.
This is an internal value. If set to ToBeAsked , the script prompts the user. If set to Auto , the script does not prompt the user, and whether the URL is saved depends on the case. If set to Yes , the user asked to save the new URL. If set to No , the user asked to not save the new URL.
root/ConnectionType/xen/connections/<UUID>/ savePassword root/ConnectionType/xen/connections/<UUID>/ smartCardModuleKey root/ConnectionType/xen/connections/<UUID>/ startMode root/ConnectionType/xen/connections/<UUID>/ subscribedOnly root/ConnectionType/xen/connections/<UUID>/ unplugSmartCardAction
Specifies the security module to use for a smart card connection.
If set to the default focus and the connection is already started, the connection will be given focus. Otherwise, an error will be returned stating that the connection is already started.
If set to 1, only subscribed resources for the connection are displayed.
Sets the action to perform when a smart card is unplugged during a connection. disconnect will disconnect the current session. close will close all the opened resources. noaction will do nothing.
root/ConnectionType/xen/connections/<UUID>/ useCurrentCitrixConfig root/ConnectionType/xen/connections/<UUID>/ username root/ConnectionType/xen/connections/<UUID>/ waitForNetwork root/ConnectionType/xen/coreSettings/
USBrelevant
Sets the default user name to supply to the remote host during login. Generally, this setting is used for kiosk-style applications where a generic user name is used for login.
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
Specifies if this connection type is USB-relevant. If it is, it might have a USB plugin for redirecting USB devices.
ConnectionType 121
Registry key Description root/ConnectionType/xen/coreSettings/appName Sets the internal application name to use for this connection type.
This key should not need to be modified.
root/ConnectionType/xen/coreSettings/ autoLogoutDelayAfterLaunch root/ConnectionType/xen/coreSettings/ autoLogoutDelayBeforeLaunch
This setting applies to Citrix servers with multiple published resources. If less than 0, no auto-logout is performed. Otherwise, this setting dictates the number of seconds between the closing of the last Xen published resource and when the user is logged out automatically and returned to the initial login screen. Citrix process delays might extend the auto-logout time.
This setting applies to Citrix servers with multiple published resources. If less than 0, no auto-logout is performed. Otherwise, this setting dictates the number of seconds allowed to pass while no applications are launched before the user is logged out automatically and returned to the initial login screen. Citrix process delays might extend the auto-logout time.
root/ConnectionType/xen/coreSettings/ className root/ConnectionType/xen/coreSettings/ connectionUtil
Sets the internal application class name to use for this connection type. This key should not need to be modified.
Sets the Citrix connection utility for the connection.
root/ConnectionType/xen/coreSettings/ credsCache root/ConnectionType/xen/coreSettings/editor root/ConnectionType/xen/coreSettings/ generalSettingsEditor root/ConnectionType/xen/coreSettings/icon root/ConnectionType/xen/coreSettings/ icon16Path
Specifies whether the Connection Manager caches the credentials for further use.
Sets the internal application name to use when Connection
Manager is launched for this connection type. This key should not need to be modified.
Sets the internal application name to use when the General
Settings Manager is launched for this connection type. This key should not need to be modified.
Specifies the icon from the icon theme set to use for this connection.
Sets the path to the 16 × 16 pixel icon for this application.
root/ConnectionType/xen/coreSettings/ icon32Path
Sets the path to the 32 × 32 pixel icon for this application.
root/ConnectionType/xen/coreSettings/ icon48Path
Sets the path to the 48 × 48 pixel icon for this application.
Reserved for future use.
root/ConnectionType/xen/coreSettings/ iconActive root/ConnectionType/xen/coreSettings/label root/ConnectionType/xen/coreSettings/ priorityInConnectionLists root/ConnectionType/xen/coreSettings/ retryTimeout
Sets the name to display for this connection type in the UI.
Sets the priority of this connection type when it is displayed in
Connection Manager and the Configuration Wizard that displays during initial setup. A higher value will move the connection type towards the top of the list. If set to 0, the connection type is hidden from Configuration Wizard and is shown last in Connection
Manager. Connections types with the same priority are listed in alphabetical order.
This setting applies when a virtual machine is restarting and is not yet available to launch as a Citrix resource. If set to a negative number, reconnection is not attempted. Otherwise, it gives the time (in seconds) that HP ThinPro attempts to reconnect to the virtual machine.
122 Appendix D Registry keys
Registry key root/ConnectionType/xen/coreSettings/ serverRequired root/ConnectionType/xen/general/
TWIModeResizeType root/ConnectionType/xen/general/ allowReadOnA ... allowReadOnZ
Description
Sets whether a server name or address is unused , optional , or required for this connection type.
root/ConnectionType/xen/coreSettings/ stopProcess
Sets the behavior that should occur when connection-mgr stop is called on this connection. By default this is close , which will send a standard kill signal to the process. When set to kill , the process specified by appName will be forcefully killed. When set to custom , a custom execution script specified by wrapperScript will be executed with the argument stop to terminate the process gracefully.
root/ConnectionType/xen/coreSettings/tier Specifies the relative importance of this connection type and the order in which it is listed in the Create menu.
root/ConnectionType/xen/coreSettings/watchPid If set to 1, the connection is monitored under the name specified by appName . This key should not need to be modified.
root/ConnectionType/xen/coreSettings/ wrapperScript root/ConnectionType/xen/coreSettings/ wrapperScriptGeneration root/ConnectionType/xen/general/CGPAddress root/ConnectionType/xen/general/TWIMode
Sets the script or binary to execute when launching this connection type. This is the primary script handling all connection settings and command line arguments for the connection. This key should not need to be modified.
Lets Connection Manager know what type of parameters to pass to the wrapper script.
Specifies the CGP address using the syntax hostname:port .
Optionally, instead of specifying the hostname, you can type an asterisk (*). This will use the value from the connection’s address registry key as the host. For example: *:2598
The port value is optional. If you do not specify a port value, the default of 2598 is used. If a connection on port 2598 fails, the thin client tries to establish a connection on port 1494.
Controls seamless mode for published applications. This setting directly maps to the Citrix .ini file setting TWIMode .
This setting directly maps to the Citrix .ini file setting
TWIMoveResizeType .
If set to 1, a user can read the mapped drive.
root/ConnectionType/xen/general/ allowWriteOnA ... allowWriteOnZ
If set to 1, a user can write to the mapped drive.
root/ConnectionType/xen/general/async If set to 1, asynchronous polling is enabled. This setting directly maps to the Citrix .ini file setting CommPollSize .
root/ConnectionType/xen/general/autoReconnect If set to 1, automatic session reconnection is enabled. This is not the same as the connection-specific auto-reconnect. This occurs internally within the Citrix client without restarting the connection. This setting directly maps to the Citrix .ini file setting
TransportReconnectEnabled .
root/ConnectionType/xen/general/ bitmapCacheSize
Sets the minimum size for bitmap caching. This setting directly maps to the Citrix .ini file setting
PersistentCacheMinBitmap .
root/ConnectionType/xen/general/bottomMonitor Sets the screen area of the bottom monitor to show the virtual desktop. If set to 0, the monitor is not used to show the virtual desktop.
ConnectionType 123
Registry key Description root/ConnectionType/xen/general/colorDepth Forces a specific color depth for all connections. This is usually done only in specialized environments where the automatic depth selection fails or in very slow networks to reduce congestion.
root/ConnectionType/xen/general/colorMapping If set to Shared - Approximate Colors , approximate colors from the default colormap are used. If set to Private -
Exact Colors , precise colors are used. This setting directly maps to the Citrix .ini file setting ApproximateColors .
root/ConnectionType/xen/general/ contentRedirection
If set to 1, links from web content are sent from the server to the client so that the client can try to open them locally.
root/ConnectionType/xen/general/debugLogLevel If set to 0, no debug log is created. If set to 3, an error level log is created. If set to 4, a warning level log is created. If set to 7, all debug level logs are created.
root/ConnectionType/xen/general/ defaultBrowserProtocol
Controls the protocol used to locate the host for the connection. If not specified, the default value from the [WFClient] section of wfclient.ini is used. This setting directly maps to the Citrix .ini file setting BrowserProtocol .
root/ConnectionType/xen/general/ drivePathMappedOnA ... drivePathMappedOnZ root/ConnectionType/xen/general/ enableAlertSound
Sets the local filesystem directory to map to the remote host.
Typically this is set to /media to allow all connected USB drives to be mapped to the remote host via a single drive letter.
If set to 1, Windows alert sounds are enabled. This setting indirectly maps to the Citrix .ini file setting DisableSound .
If set to 1, clipboard redirection is enabled.
root/ConnectionType/xen/general/ enableClipboard root/ConnectionType/xen/general/ enableConnectionBar root/ConnectionType/xen/general/ enableCursorColors root/ConnectionType/xen/general/ enableDataCompression root/ConnectionType/xen/general/ enableDriveMapAndRedirect root/ConnectionType/xen/general/ enableDriveMapping root/ConnectionType/xen/general/ enableDynamicDriveMapping root/ConnectionType/xen/general/ enableH264Compression root/ConnectionType/xen/general/ enableHDXFlashRedirection
If set to 1, enables Citrix Desktop Viewer in the session user interface. By default, this setting is set to 0 (disabled) on the client side because this value is set on the client by the ICA file for a desktop session.
If set to 1, colored cursors are enabled. Setting this to 0 might fix graphical cursor corruption in some cases.
If set to 1, data compression is enabled. This setting directly maps to the Citrix .ini file setting Compress .
If set to 1, mapping and redirection for USB storage devices is enabled.
If set to 1, directories on the local filesystem can be forwarded to the remote host via a virtual drive. Typically /media is mapped to Z to allow USB drives to be forwarded to the remote host. If
USB redirection is enabled, this setting should be disabled to prevent storage conflicts. To be properly mapped to the remote host in this fashion, the USB device must use one of the following filesystems: FAT32, NTFS, ext2, ext3.
If set to 1, USB storage devices will be dynamically mapped on the
Citrix server. If set to 0, dynamic mapping of USB storage devices is disabled.
If set to 1, H.264 compression is enabled. The H.264 codec provides better performance of rich and professional graphics applications on WAN networks than the JPEG codec.
NOTE: This feature is supported for the 32-bit version of HP
ThinPro only.
124 Appendix D Registry keys
Registry key root/ConnectionType/xen/general/ enableRC4128SHA
Description root/ConnectionType/xen/general/ enableHDXFlashServerContentFetch
Controls the behavior of HDX Flash Redirection. If set to Always ,
HDX Flash Redirection is used if possible, and the user is not prompted. If set to Ask , the user is prompted. If set to Never , the feature is disabled.
NOTE: This feature is supported for the 32-bit version of HP
ThinPro only.
Controls the behavior of HDX Flash Server-Side Content Fetching.
If disabled, the client will fetch for content.
root/ConnectionType/xen/general/ enableHDXMediaStream
If set to 1, HDX MediaStream is enabled. If set to 0, media files will still play via standard streaming, but the quality might not be as high.
root/ConnectionType/xen/general/enableHWH264 If set to 1, and if enableH264Compression is also set to 1, hardware compression for H.264 is enabled. If set to 0, H.264 compression will be handled by software.
root/ConnectionType/xen/general/ enableMapOnA ... enableMapOnZ root/ConnectionType/xen/general/ enableMultiMedia
If set to 1, a local filesystem directory can be mapped to this drive on the remote host. The corresponding drivePathMappedOn registry key must be set to a valid local directory for drive mapping to work properly.
If set to 1, multimedia is enabled. HDX Lync might have a conflict when this setting is enabled. This setting maps directly to the multimedia in the virtual channels section of the Citrix .ini file settings. Enable this setting when HDX MediaStream is enabled.
root/ConnectionType/xen/general/ enableOffScreenSurface
If set to 1, the server can use the X PixMap format for offscreen drawing. This reduces bandwidth in 15-bit and 24-bit color modes at the expense of X server memory and processor time.
This setting directly maps to the Citrix .ini file setting
EnableOSS .
root/ConnectionType/xen/general/enableRC4MD5 root/ConnectionType/xen/general/ enableSessionReliability root/ConnectionType/xen/general/ enableSmallFrames root/ConnectionType/xen/general/ enableUSBRedirection root/ConnectionType/xen/general/ encryptionLevel
If set to 1, Citrix Session Reliability is enabled. Session Reliability changes the way sessions are resumed after losing a network connection. See Citrix documentation for more information on
Session Reliability.
If set to 1, small non-H.264 rectangle updates are enabled for H.
264. enableTextTracking must also be enabled for this to have an effect.
If set to 1, smart card login is enabled.
root/ConnectionType/xen/general/ enableSmartCard root/ConnectionType/xen/general/enableTLSRSA root/ConnectionType/xen/general/ enableTextTracking
If set to 1, optimized lossless text overlays are enabled for H.264.
If set to 1, USB storage devices will be redirected.
Sets the level of encryption. Encryption protocols for all levels are defined in the [EncryptionLevelSession] section of module.ini. This setting directly maps to the Citrix .ini file setting
[EncryptionLevelSession] .
ConnectionType 125
Registry key root/ConnectionType/xen/general/ fontSmoothingType root/ConnectionType/xen/general/ hotKey<1thru15>Char root/ConnectionType/xen/general/ hotKey<1thru15>Shift
Description
Sets the font smoothing type.
Sets the hot key to forward to the remote session when the key or key combination set in the corresponding hotKeyShift is pressed.
Sets the key or key combination used to activate the hot key set in the corresponding hotKeyChar .
root/ConnectionType/xen/general/ httpAddresses/<UUID>/address root/ConnectionType/xen/general/ keyPassthroughEscapeChar root/ConnectionType/xen/general/ keyPassthroughEscapeShift
Sets the keyboard key for disabling the transparent keyboard mode. This setting directly maps to the Citrix .ini file setting
KeyPassthroughEscapeChar .
Sets the keyboard key combination for disabling the transparent keyboard mode. This setting directly maps to the Citrix .ini file setting KeyPassthroughEscapeShift .
root/ConnectionType/xen/general/ keyboardMappingFile root/ConnectionType/xen/general/ lastComPortNum
Specifies a keyboard mapping file for a Citrix session. By default, the startup script selects a keyboard mapping file based on the keyboard layout.
Sets the number of mapped serial ports. If set to 0, serial port mapping is disabled.
root/ConnectionType/xen/general/leftMonitor Sets the screen area of the left monitor to show the virtual desktop. If set to 0, the monitor is not used to show the virtual desktop.
root/ConnectionType/xen/general/localTextEcho Controls keyboard latency reduction. This setting indirectly maps to the Citrix .ini file setting ZLKeyboardMode .
root/ConnectionType/xen/general/ monitorNetwork root/ConnectionType/xen/general/ mouseClickFeedback
If set to Off , network connectivity is not monitored. If set to
Local network link status only , only the local network link status is monitored. If set to Server online status , both the local network link status and server connectivity are monitored.
Controls mouse latency reduction. This setting indirectly maps to the Citrix .ini file setting ZLMouseMode .
root/ConnectionType/xen/general/ mouseMiddleButtonPaste root/ConnectionType/xen/general/noInfoBox
If set to 1, middle mouse button paste emulation for Windows sessions is enabled. This setting directly maps to the Citrix .ini file setting MouseSendsControlV .
If set to 1, the client manager (wfcmgr) will not display when a client session terminates. This setting directly maps to the
Citrix .ini file setting PopupOnExit .
root/ConnectionType/xen/general/ printerAutoCreation
If set to 0, printer mapping is disabled. If set to 1, printers defined locally will be mapped to the connection. If set to 2, USB printers are redirected as configured in USB Manager.
root/ConnectionType/xen/general/proxyAddress Sets the proxy address to use if a manual proxy setting is selected via proxyType .
root/ConnectionType/xen/general/proxyPassword Sets the proxy password to use if a manual proxy setting is selected via proxyType . This password will be encrypted using rc4 encryption.
126 Appendix D Registry keys
Registry key root/ConnectionType/xen/general/proxyPort root/ConnectionType/xen/general/proxyType root/ConnectionType/xen/general/proxyUser
Description
Sets the proxy port to use if a manual proxy setting is selected via proxyType .
Sets the type of proxy to use for XenDesktop connections. The value Use Browser settings is only supported if a local browser is installed.
Sets the proxy username to use if a manual proxy setting is selected via proxyType .
root/ConnectionType/xen/general/rightMonitor Sets the screen area of the right monitor to show the virtual desktop. If set to 0, the monitor is not used to show the virtual desktop.
root/ConnectionType/xen/general/saveLogs If set to 1, detailed log information is saved after the session ends. This log information will be saved to the following directory: /tmp/debug/citrix/<date>/ root/ConnectionType/xen/general/selfservice/ disableConfigMgr
If set to 1, session-sharing requests are sent to other Citrix sessions on the same X display. This setting directly maps to the
Citrix .ini file setting EnableSessionSharingClient .
root/ConnectionType/xen/general/selfservice/ disableConnectionCenter root/ConnectionType/xen/general/selfservice/ enableKioskMode root/ConnectionType/xen/general/selfservice/ sharedUserMode root/ConnectionType/xen/general/selfservice/ showTaskBarInKioskMode root/ConnectionType/xen/general/ serverCheckTimeout root/ConnectionType/xen/general/ sessionReliabilityTTL
Specifies the session reliability timeout in seconds. This configures the Session Reliability Time To Live (TTL).
If set to 1, the virtual desktop will be shown on all monitors.
root/ConnectionType/xen/general/ showOnAllMonitors root/ConnectionType/xen/general/ smartCardModuleMap/CoolKeyPK11 root/ConnectionType/xen/general/ smartCardModuleMap/GemaltoDotNet root/ConnectionType/xen/general/sound root/ConnectionType/xen/general/speedScreen root/ConnectionType/xen/general/tcpAccel root/ConnectionType/xen/general/tcpAddresses/
<UUID>/address
Specifies the path to the CoolKey PKCS #11 smart card security module.
Specifies the path to the Gemalto .NET
smart card security module.
Sets the sound quality. This setting indirectly maps to the
Citrix .ini file setting AudioBandwidthLimit .
root/ConnectionType/xen/general/topMonitor root/ConnectionType/xen/general/ transparentKeyPassthrough
Sets the screen area of the top monitor to show the virtual desktop. If set to 0, the monitor is not used to show the virtual desktop.
Controls how certain Windows key combinations handled. If set to
Translated , the key combinations apply to the local desktop. If
ConnectionType 127
Registry key root/ConnectionType/xen/general/ transportProtocol root/ConnectionType/xen/general/ twRedundantImageItems root/ConnectionType/xen/general/ useAlternateAddress root/ConnectionType/xen/general/ useBitmapCache root/ConnectionType/xen/general/useEUKS root/ConnectionType/xen/general/useLocalIM
Description set to Direct in full screen desktops only , the key combinations apply to the remote session only when it is in full screen mode. If set to Direct , the key combinations always apply to the remote session as long as the window has focus. This setting indirectly maps to the Citrix .ini file setting
TransparentKeyPassthrough .
Sets the transport protocol. If set to On (default), the connection uses UDP and does not fall back on TCP if there is a failure. If set to Off , the connection uses TCP. If set to Preferred , the connection tries to use UDP first and falls back on TCP if there is a failure.
Controls the number of screen areas that will be tracked in
ThinWire to prevent redundant drawing of bitmap images. An adequate value for 1024 × 768 sessions is 300.
If set to 1, an alternate address is used for firewall connections.
This setting directly maps to the Citrix .ini file setting
UseAlternateAddress .
If set to 1, the persistent disk cache is enabled. The persistent disk cache stores commonly-used graphical objects such as bitmaps on the hard disk of the thin client. Using the persistent disk cache increases performance across low-bandwidth connections but reduces the amount of available disk space on the thin client. For thin clients on high-speed LANs, usage of the persistent disk cache is not necessary. This setting directly maps to the Citrix .ini file setting PersistentCacheEnabled .
Controls the use of Extended Unicode Keyboard Support (EUKS) on Windows servers. If set to 0, EUKS is not used. If set to 1, EUKS is used as a fallback. If set to 2, EUKS is used whenever possible.
If this setting is enabled, the local X input method is used to interpret keyboard input. This is supported for European languages only. This setting directly maps to the Citrix .ini file setting useLocalIME .
root/ConnectionType/xen/general/userAgent root/ConnectionType/xen/general/ waitForNetwork
The string from this key will be presented by the Citrix client and will be helpful for administrators to know where the connection request is from.
If set to 1, the connection will not be launched until networking is available. This ensures that, on a slow network, the connection does not launch before networking is available, which could cause a failure.
root/ConnectionType/xen/general/ webcamFramesPerSec
Controls the HDXWebCamFramesPerSec variable in the
All_Regions.ini file.
root/ConnectionType/xen/general/webcamHeight Controls the HDXWebCamHeight variable in the
All_Regions.ini
file.
root/ConnectionType/xen/general/webcamQuality Controls the HDXWebCamQuality variable in the
All_Regions.ini
file. Valid input ranges from 1 to 63.
root/ConnectionType/xen/general/webcamSupport If set to 0, the webcam and webcam audio are disabled. If set to 1, the webcam and webcam audio are enabled, with compression. If set to 2, USB redirection of the webcam and webcam audio is enabled.
128 Appendix D Registry keys
Registry key root/ConnectionType/xen/general/webcamWidth
Description
Controls the HDXWebCamWidth variable in the
All_Regions.ini
file.
root/ConnectionType/xen/general/windowHeight Sets the height of the window in pixels if windowSize is set to
Fixed Size .
root/ConnectionType/xen/general/windowPercent Sets the size of the window as a percentage if windowSize is set to Percentage of Screen Size .
root/ConnectionType/xen/general/windowSize root/ConnectionType/xen/general/windowWidth root/ConnectionType/xen/gui/XenDesktopPanel/ disabled
If set to Default , the server-side settings are used. If set to
Full Screen , the window is maximized without borders on all available screens. If set to Fixed Size , the windowWidth and windowHeight registry keys can be used to specify the size of the window in pixels. If set to Percentage of Screen
Size , the windowPercent key can be used to specify the size of the window as a percentage. For Percentage of Screen
Size to take effect, enableForceDirectConnect must be set to 1 and TWIMode must be set to 0. This setting only works with XenApp and only if the server allows direct connections. This setting does not work with XenDesktop.
Sets the width of the window in pixels if windowSize is set to
Fixed Size .
If set to 1, the Xen Desktop panel and its taskbar are disabled.
This is usually used when autoStartResource or autoStartDesktop is enabled.
root/ConnectionType/xen/gui/XenManager/name This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/xen/gui/XenManager/status This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/xen/gui/XenManager/title This registry key is either used internally or reserved for future use. The value should not be changed.
root/ConnectionType/xen/gui/XenManager/ widgets/address
Controls the state of the Service URL widget in Citrix Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
root/ConnectionType/xen/gui/XenManager/ widgets/appInMenu root/ConnectionType/xen/gui/XenManager/ widgets/appOnDesktop root/ConnectionType/xen/gui/XenManager/ widgets/autoReconnect
Controls the state of the Show applications on taskbar widget in
Citrix Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show applications on desktop widget in
Citrix Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto reconnect widget in Citrix
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
ConnectionType 129
Registry key root/ConnectionType/xen/gui/XenManager/ widgets/autoStartDesktop root/ConnectionType/xen/gui/XenManager/ widgets/autoStartResource root/ConnectionType/xen/gui/XenManager/ widgets/autostart root/ConnectionType/xen/gui/XenManager/ widgets/domain root/ConnectionType/xen/gui/XenManager/ widgets/fallBackConnection root/ConnectionType/xen/gui/XenManager/ widgets/folder root/ConnectionType/xen/gui/XenManager/ widgets/hasDesktopIcon root/ConnectionType/xen/gui/XenManager/ widgets/label root/ConnectionType/xen/gui/XenManager/ widgets/password root/ConnectionType/xen/gui/XenManager/ widgets/username root/ConnectionType/xen/gui/XenManager/ widgets/waitForNetwork
Description
Controls the state of the Auto Start Desktop widget in Citrix
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto Start Resource widget in Citrix
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Auto start priority widget in Citrix
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Domain widget in Citrix Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Fallback Connection widget in Citrix
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Show icon on desktop widget in Citrix
Connection Manager. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Name widget in Citrix Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Password widget in Citrix Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Username widget in Citrix Connection
Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Wait for network before connecting widget in Citrix Connection Manager. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
130 Appendix D Registry keys
Registry key Description root/ConnectionType/xen/gui/fbpanel/autohide If set to true , the taskbar auto-hides.
root/ConnectionType/xen/gui/fbpanel/edge root/ConnectionType/xen/gui/fbpanel/hidden
Sets the default position of the taskbar when more than one published desktop or application is available.
If set to 1, the taskbar is completely hidden, but only if autoStartResource or autoStartDesktop is enabled.
DHCP
This folder exists to support temporary registry keys that are added when the system acquires a DHCP lease.
No modification is necessary.
Dashboard
NOTE: The dashboard is the same thing as the taskbar.
Registry key root/Dashboard/GUI/Clock root/Dashboard/GUI/DomainUser root/Dashboard/GUI/PowerButton root/Dashboard/GUI/Search root/Dashboard/GUI/SystemTray root/Dashboard/GUI/TaskBar root/Dashboard/General/AutoHide root/Dashboard/General/EnterLeaveTimeout root/Dashboard/General/IconSize root/Dashboard/General/Length root/Dashboard/General/LengthToScreenSide root/Dashboard/General/PanelDockSide root/Dashboard/General/SlidingTimeout root/Dashboard/General/Width
Description
If set to 1, the clock is shown on the taskbar.
If set to 1, the domain-user icon is shown on the taskbar if the system is in domain-login mode.
If set to 1, the power button is shown on the taskbar.
If set to 1, the Search button is shown on the taskbar.
If set to 1, the system tray is shown on the taskbar.
If set to 1, the application area is shown on the taskbar.
If set to 1, the taskbar auto-hides.
Sets the amount of time in milliseconds before the taskbar will hide or show when AutoHide is enabled.
Sets the size of the icons on the taskbar.
If set to -1, the size of the icon is based on the width of the taskbar.
Sets the length of the taskbar.
If set to 1, the length of taskbar is fixed and equal to the length of the side of the screen to which it is anchored.
Sets the side of the screen to which the taskbar is docked.
Sets the amount of time in milliseconds that it takes for the taskbar to hide or show when AutoHide is enabled.
Sets the width of the taskbar.
If set to -1, the width is scaled based on the height of the primary monitor.
DHCP 131
Imprivata
Registry key root/Imprivata/ImprivataServer root/Imprivata/USBr/Devices root/Imprivata/USBr/Devices/1162:2200/ forcedState root/Imprivata/USBr/Devices/1162:2200/info root/Imprivata/USBr/Devices/147e:2016/ forcedState root/Imprivata/USBr/Devices/147e:2016/info root/Imprivata/enableImprivata
Description
Specifies the URL of the Imprivata server.
Lists some USB devices with a predefined redirection rule specific to the remote connections launched using the Imprivata environment. For each USB device, the redirection rule is given by the setting: forcedState. Requires OneSign ProveID Embedded 6.2 with the ability to use the vendor scripts set.
If set to 0, will not redirect.
If set to 0, will not redirect.
If set to 1, the Imprivata ProveID Embedded setting is enabled. By default, this key is set to 0.
InputMethod
Registry key root/InputMethod/enablelbus
Description
Network
Registry key root/Network/ActiveDirectory/Domain root/Network/ActiveDirectory/DynamicDNS root/Network/ActiveDirectory/Enabled root/Network/ActiveDirectory/Method root/Network/ActiveDirectory/Password root/Network/ActiveDirectory/Username root/Network/DNSServers
Description
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Additional DNS servers for domain name resolution can be specified here. The specified servers will be used in addition to any servers retrieved via DHCP. Up to three IPv4 or IPv6 addresses can be specified, separated by commas.
132 Appendix D Registry keys
Registry key root/Network/DefaultHostnamePattern root/Network/EncryptWpaConfig root/Network/FtpProxy root/Network/IPSec/IPSecRules/<UUID>/
QMAHEnable
Description
Sets the default hostname pattern to use when generating a new hostname. This is used if the Hostname registry key and /etc/ hostname are both empty. The hostname pattern uses % as a delimiter. In the example HPTC%MAC:1-6% , HPTC would be the prefix, and the first six characters of the thin client MAC address would follow. So if the MAC address of the thin client is
11:22:33:44:55:66 , the generated hostname would be
HPTC112233 . If the pattern is TC%MAC% , the generated hostname would be TC112233445566 . If the pattern is HP
%MAC:7% , the generated hostname would be HP1122334 .
If set to 1, the password is encrypted.
Sets the FTP proxy address. HP recommends using the following format for this value because the http prefix is better supported: http://ProxyServer:Port root/Network/Hostname root/Network/HttpProxy root/Network/HttpsProxy root/Network/IPSec/IPSecRules/<UUID>/
MMLifetimeMinutes
Sets the hostname of the thin client.
Sets the HTTP proxy address. HP recommends using the following format: http://ProxyServer:Port
Sets the HTTPS proxy address. HP recommends using the following format for this value because the http prefix is better supported: http://ProxyServer:Port root/Network/IPSec/IPSecRules/<UUID>/DstAddr Sets the destination address for the IPSec rule.
root/Network/IPSec/IPSecRules/<UUID>/
MMAuthMethod
Sets the authentication method for the IPSec rule. PSK is for using a pre-shared key, and Certificate is for using certificate files.
root/Network/IPSec/IPSecRules/<UUID>/
MMAuthMethodCACert root/Network/IPSec/IPSecRules/<UUID>/
MMAuthMethodClientCert
If the authentication method is Certificate , the CA certificate file path is saved in this registry key.
If the authentication method is Certificate , the client certificate file path is saved in this registry key.
root/Network/IPSec/IPSecRules/<UUID>/
MMAuthMethodPresharedKey root/Network/IPSec/IPSecRules/<UUID>/
MMAuthMethodPrivateKey root/Network/IPSec/IPSecRules/<UUID>/
MMDHGroup
If the authentication method is PSK , the pre-shared key value is saved in this registry key.
If the authentication method is Certificate , the private key file path that corresponds with the client certificate is saved in this registry key.
Sets the phase 1 Diffie-Hellman group.
Sets the phase 1 encryption algorithm.
root/Network/IPSec/IPSecRules/<UUID>/
MMEncryptionAlg root/Network/IPSec/IPSecRules/<UUID>/
MMIntegrityAlg
Sets the phase 1 integrity algorithm.
Sets the phase 1 lifetime.
Enables phase 2 AH.
root/Network/IPSec/IPSecRules/<UUID>/
QMAHIntegrityAlg
Sets the phase 2 AH integrity algorithm.
Network 133
Registry key root/Network/IPSec/IPSecRules/<UUID>/
QMESPEnable root/Network/IPSec/IPSecRules/<UUID>/
QMESPEncryptionAlg
Description
Enables phase 2 ESP.
Sets the phase 2 ESP encryption algorithm.
root/Network/IPSec/IPSecRules/<UUID>/
QMESPIntegrityAlg
Sets the phase 2 ESP integrity algorithm.
root/Network/IPSec/IPSecRules/<UUID>/
QMLifetimeSeconds root/Network/KeepPreviousDNS root/Network/SearchDomains root/Network/VPN/AutoStart root/Network/VPN/PPTP/Domain root/Network/VPN/PPTP/Gateway root/Network/VPN/PPTP/Password root/Network/VPN/PPTP/Username root/Network/VPN/Type root/Network/VPN/VPNC/DPDEndianess root/Network/VPN/VPNC/DPDInterval root/Network/VPN/VPNC/DebugLevel
Sets the phase 2 lifetime.
root/Network/IPSec/IPSecRules/<UUID>/
RuleDescription root/Network/IPSec/IPSecRules/<UUID>/
RuleEnable root/Network/IPSec/IPSecRules/<UUID>/
TunnelSrcAddr
Sets the description for the IPSec rule.
If set to 1, the rule is enabled.
root/Network/IPSec/IPSecRules/<UUID>/RuleName Sets the name for the IPSec rule.
root/Network/IPSec/IPSecRules/<UUID>/SrcAddr Sets the source address for the IPSec rule.
root/Network/IPSec/IPSecRules/<UUID>/
TunnelDstAddr
Sets the tunnel destination address for the IPSec rule.
root/Network/IPSec/IPSecRules/<UUID>/
TunnelEnable
Enables tunnel mode for the IPSec rule.
Sets the tunnel source address for the IPSec rule.
If set to 1, previously-configured DNS servers and search domains not generated by the Network Manager will be kept in resolv.conf.
If set to 0, resolv.conf will be overwritten completely.
Additional search domains for FQDN resolution can be specified here. The specified domains will be appended to any incomplete server definitions in an attempt to generate an FQDN that can be resolved via DNS. For example, a search domain of mydomain.com
will allow the server definition myserver to resolve properly to myserver.mydomain.com
, even if the
DNS server does not have myserver in its name resolution tables. Up to five additional search domains can be specified.
If set to 1, VPN starts automatically when the system starts up.
Sets the PPTP domain.
Sets the PPTP gateway.
Sets the PPTP user password.
Sets the PPTP username.
Sets the VPN type.
Sets the endianness of the DPD sequence number (see rfc3706).
0: big endian; 1: little endian. Try toggling this if the session aborts intermittently for no apparent reason.
Sets the DPD interval (see rfc3706) in seconds.
Sets the debug level to either 0, 1, 2, 3, or 99. This generates a lot of logs. Enable this only when you need to troubleshoot a VPN issue.
134 Appendix D Registry keys
Registry key root/Network/VPN/VPNC/Domain root/Network/VPN/VPNC/Gateway root/Network/VPN/VPNC/Group root/Network/VPN/VPNC/GroupPassword root/Network/VPN/VPNC/IKEDHGroup root/Network/VPN/VPNC/LocalUDPPort root/Network/VPN/VPNC/NATTMode root/Network/VPN/VPNC/Password root/Network/VPN/VPNC/PerfectForwardSecrecy root/Network/VPN/VPNC/Security root/Network/VPN/VPNC/Username root/Network/VisibleInSystray root/Network/Wired/DefaultGateway root/Network/Wired/EnableDefGatewayAsDNS root/Network/Wired/EthernetSpeed root/Network/Wired/IPAddress root/Network/Wired/IPv6Enable root/Network/Wired/Interface root/Network/Wired/MTU root/Network/Wired/Method root/Network/Wired/Profiles/<UUID>/
AutoConnect root/Network/Wired/Profiles/<UUID>/
EthernetSpeed
Description
Sets the VPNC domain.
Sets the VPNC gateway.
Sets the VPNC group.
Sets the VPNC group password.
Sets the VPNC IKE Diffie-Hellman group.
Sets the local UDP port to use for VPNC. If set to 0, a random port will be used. This setting is valid only when the NAT traversal mode ( NATTMode ) is cisco-udp .
Sets the VPNC NAT traversal mode.
Sets the VPNC user password.
Sets the VPNC Diffie-Hellman group to use for Perfect Forward
Secrecy (PFS).
Sets the VPNC security level.
Sets the VPNC username.
If set to 1, the network icon is visible in the system tray.
Sets the default gateway the device will use to communicate with the Internet. Typically this is the IP address of the router. This setting takes effect only when Method is set to Static .
If set to 1, the default gateway will also be the name server.
Sets the link speed of the primary Ethernet network interface.
Automatic allows the fastest available link speed to be used, which is usually 1 Gbps or 100 Mbps/Full depending on the switch.
The link speed can also be forced to a single speed (100 Mbps or
10 Mbps) and duplex mode (Full or Half) to support switches and hubs that do not perform appropriate auto-negotiation.
Sets the IPv4 address of the thin client. This setting will only take effect when Method is set to Static .
If set to 1, IPv6 is enabled.
Sets the default Ethernet interface or NIC.
Sets the MTU. It does not matter if the IP address is static or
DHCP-acquired.
If set to Automatic , the thin client will use DHCP to attempt to retrieve network settings. If set to Static , the values of the
IPAddress , SubnetMask , and DefaultGateway registry keys are used. HP does not recommend using Static in a generic client profile because it will cause all thin clients to receive the same IP address.
If set to 1, automatic connection to the network is enabled.
Sets the link speed of the primary Ethernet network interface.
Automatic allows the fastest available link speed to be used, which is usually 1 Gbps or 100 Mbps/full depending on the switch.
The link speed can be forced to a combination of a single speed
Network 135
Registry key root/Network/Wired/Profiles/<UUID>/IPv4/
Address root/Network/Wired/Profiles/<UUID>/IPv4/
DefaultGateway root/Network/Wired/Profiles/<UUID>/IPv6/
Address root/Network/Wired/Profiles/<UUID>/IPv6/
DefaultGateway
Description
( 100 Mbps or 10 Mbps) and duplex mode ( Full or Half ) to support switches and hubs that do not perform auto-negotiation.
Sets the IPv4 address of the client. This setting takes effect only if
Method is set to Static .
Sets the default gateway that the device uses to communicate with the Internet. Typically, this is the IP address of the router.
This setting takes effect only if Method is set to Static .
If set to 1, IPv4 is enabled for this profile.
root/Network/Wired/Profiles/<UUID>/IPv4/
Enabled root/Network/Wired/Profiles/<UUID>/IPv4/
Method root/Network/Wired/Profiles/<UUID>/IPv4/
SubnetMask
If set to Automatic , the client uses DHCP to attempt to retrieve network settings. If set to Static , the values of the Address ,
SubnetMask , and DefaultGateway registry keys are used.
HP does not recommend using Static in a generic client profile, because all clients would use the same IP address.
Sets the subnet mask of the device, such as 255.255.255.0 (for a standard class C subnet). This setting takes effect only if Method is set to Static .
Sets the IPv6 address of the client. This setting takes effect only if
Method is set to Static .
Sets the default gateway that the device uses to communicate with the Internet. Typically, this is the IP address of the router.
This setting takes effect only if Method is set to Static .
If set to 1, IPv6 is enabled for this profile.
root/Network/Wired/Profiles/<UUID>/IPv6/
Enabled root/Network/Wired/Profiles/<UUID>/IPv6/
Method root/Network/Wired/Profiles/<UUID>/IPv6/
SubnetMask root/Network/Wired/Profiles/<UUID>/MTU root/Network/Wired/Profiles/<UUID>/Priority root/Network/Wired/Profiles/<UUID>/Security/
EAPPEAP/AnonyIdentity root/Network/Wired/Profiles/<UUID>/EAPPEAP/
CACert root/Network/Wired/Profiles/<UUID>/Security/
EAPPEAP/InnerAuth
If set to Automatic , the client uses DHCP to attempt to retrieve network settings. If set to Static , the values of the Address ,
SubnetMask , and DefaultGateway registry keys are used.
HP does not recommend using Static in a generic client profile, because all clients would use the same IP address.If set to
Automatic , the client uses DHCP to attempt to retrieve network settings. If set to Static , the values of the Address ,
SubnetMask , and DefaultGateway registry keys are used.
HP does not recommend using Static in a generic client profile, because all clients would use the same IP address.
Sets the subnet mask of the device, which is usually the IPv6 prefix length. This setting takes effect only if Method is set to
Static .
Sets the MTU. It does not matter if the IP address is static or acquired by DHCP.
Reserved for wired network.
Sets the anonymous identity for PEAP authentication.
Sets the path to the CA certificate file for PEAP authentication.
Sets the PEAP inner authentication protocol.
136 Appendix D Registry keys
Registry key root/Network/Wired/Profiles/<UUID>/Security/
EAPPEAP/PEAPVer root/Network/Wired/Profiles/<UUID>/Security/
EAPPEAP/Password
Description
Sets the PEAP version.
Sets the password for PEAP authentication.
root/Network/Wired/Profiles/<UUID>/Security/
EAPPEAP/Username
Sets the username for PEAP authentication.
root/Network/Wired/Profiles/<UUID>/Security/
EAPTLS/CACert
Sets the path to the CA certificate file for TLS authentication.
root/Network/Wired/Profiles/<UUID>/Security/
EAPTLS/Identity root/Network/Wired/Profiles/<UUID>/EAPTLS/
PrivateKey
Sets the identity for TLS authentication.
Sets the path to a private key file for TLS authentication.
root/Network/Wired/Profiles/<UUID>/Security/
EAPTLS/PrivateKeyPassword
Sets the password to a private key file for TLS authentication.
root/Network/Wired/Profiles/<UUID>/EAPTLS/
UserCert
Sets the path to a user certificate file for TLS authentication.
root/Network/Wired/Profiles/<UUID>/Security/
EAPTTLS/AnonyIdentity root/Network/Wired/Profiles/<UUID>/Security/
EAPTTLS/CACert
Sets the anonymous identity for TTLS authentication.
Sets the path to a CA certificate file for TTLS authentication.
root/Network/Wired/Profiles/<UUID>/Security/
EAPTTLS/InnerAuth
Sets the TTLS inner authentication protocol.
root/Network/Wired/Profiles/<UUID>/Security/
EAPTTLS/Password
Sets the password for TTLS authentication.
root/Network/Wired/Profiles/<UUID>/Security/
EAPTTLS/Username root/Network/Wired/Profiles/<UUID>/Security/
Type
Sets the username for TTLS authentication.
Sets the wired authentication type.
root/Network/Wired/Profiles/<UUID>/
WiredInterface
Sets the wired interface for the profile.
root/Network/Wired/Security/CACert Sets the path to CA certificate file.
root/Network/Wired/Security/EnableMachineAuth If set to 1, machine authentication for PEAP is enabled.
root/Network/Wired/Security/Identity root/Network/Wired/Security/InnerAuth
Sets the identity or anonymous identity.
Sets the PEAP inner authentication protocol.
root/Network/Wired/Security/InnerAuthTTLS root/Network/Wired/Security/MachineAuthName root/Network/Wired/Security/
MachineAuthPassword root/Network/Wired/Security/PEAPVersion root/Network/Wired/Security/Password
Sets the TTLS inner authentication protocol.
Stores the machine account name when machine authentication is enabled.
Stores the machine account password when machine authentication is enabled.
Sets the PEAP version.
Sets the password.
Network 137
Registry key root/Network/Wired/Security/PrivateKey root/Network/Wired/Security/Type root/Network/Wired/Security/UserCert root/Network/Wired/Security/Username root/Network/Wired/SubnetMask root/Network/Wired/UseWiredProfiles root/Network/WiredWirelessSwitch root/Network/Wireless/DefaultGateway root/Network/Wireless/EnableDefGatewayAsDNS root/Network/Wireless/EnableWireless root/Network/Wireless/IPAddress root/Network/Wireless/IPv6Enable root/Network/Wireless/Interface root/Network/Wireless/Method root/Network/Wireless/PowerEnable root/Network/Wireless/Profiles/<UUID>/
AutoConnect root/Network/Wireless/Profiles/<UUID>/IPv4/
Address root/Network/Wireless/Profiles/<UUID>/IPv4/
DefaultGateway
Description
Sets the path to a private key file. This is only used for TLS authentication.
Sets the 802.1x authentication type.
Sets the path to a user certificate file. This is only used for TLS authentication.
Sets the username.
Sets the subnet mask of the device, such as 255.255.255.0 (for a standard class C subnet). This setting will only take effect when
Method is set to Static .
If set to 1, the wired connection is configured in profile mode, which can connect to multiple wired networks. If set to 0, it can connect to only one wired network.
If set to 0, a wired network and a wireless network can be connected simultaneously. If set to 1, the wired network takes priority over the wireless network; that is, if the wired network cannot connect, a configured wireless network is used.
Sets the default gateway the device will use to communicate with the Internet. Typically this is the IP address of the router. This setting will only take effect when Method is set to Static .
If set to 1, the default gateway will also be the name server.
If set to 1, wireless functionality is enabled. If set to 0, wireless functionality Is disabled.
Sets the IPv4 address of the thin client. This setting will only take effect when Method is set to Static .
If set to 1, IPv6 is enabled.
Sets the default wireless interface or wireless network adapter.
If set to Automatic , the thin client will use DHCP to attempt to retrieve network settings. If set to Static , the values of the
IPAddress , SubnetMask , and DefaultGateway registry keys are used. HP does not recommend using Static in a generic client profile because it will cause all thin clients to receive the same IP address.
If set to 1, power management of the wireless network card is enabled.
If set to 1, automatic connection to the SSID is enabled.
Sets the IPv4 address of the client. This setting takes effect only if
Method is set to Static .
Sets the default gateway the device uses to communicate with the Internet. Typically, this Is the IP address of the router. This setting takes effect only if Method is set to Static .
If set to 1, IPv4 is enabled for this profile.
root/Network/Wireless/Profiles/<UUID>/IPv4/
Enabled root/Network/Wireless/Profiles/<UUID>/IPv4/
Method
If set to Automatic , the client uses DHCP to retrieve network settings. If set to Static , the values of the Address ,
SubnetMask , and DefaultGateway registry keys are used.
138 Appendix D Registry keys
Registry key root/Network/Wireless/Profiles/<UUID>/IPv4/
SubnetMask root/Network/Wireless/Profiles/<UUID>/IPv6/
Address root/Network/Wireless/Profiles/<UUID>/IPv6/
DefaultGateway root/Network/Wireless/Profiles/<UUID>/IPv6/
Enabled root/Network/Wireless/Profiles/<UUID>/IPv6/
Method
Description
HP does not recommend using Static in a generic client profile, because all clients using that profile would use the same IP address.
Sets the subnet mask of the device, such as 255.255.255.0 (for a standard class C subnet). This setting takes effect only if Method is set to Static .
Sets the IPv6 address of the client. This setting takes effect only if
Method is set to Static .
Sets the default gateway the device uses to communicate with the Internet. Typically, this Is the IP address of the router. This setting takes effect only if Method is set to Static .
If set to 1, IPv6 is enabled for this profile.
root/Network/Wireless/Profiles/<UUID>/IPv6/
SubnetMask root/Network/Wireless/Profiles/<UUID>/
PowerEnable root/Network/Wireless/Profiles/<UUID>/
Priority
If set to Automatic , the client uses DHCP to attempt to retrieve network settings. If set to Static , the values of the Address ,
SubnetMask , and DefaultGateway registry keys are used.
HP does not recommend using Static in a generic client profile, because all clients would use the same IP address.
Sets the subnet mask of the device, which is usually the IPv6 prefix length. This setting takes effect only if Method is set to
Static .
If set to 1, power management of the wireless network card is enabled.
Defines the priority of the network. For a wireless network, a larger number means a higher priority. High priority is preferred for a wireless network connection.
Sets the wireless access point to use via SSID.
Specifies whether the SSID of the wireless access point is hidden.
Sets the anonymous identity for EAP-FAST authentication.
root/Network/Wireless/Profiles/<UUID>/SSID root/Network/Wireless/Profiles/<UUID>/
SSIDHidden root/Network/Wireless/Profiles/<UUID>/
Security/EAPFAST/AnonyIdentity root/Network/Wireless/Profiles/<UUID>/
Security/EAPFAST/FastProvision root/Network/Wireless/Profiles/<UUID>/
Security/EAPFAST/PACFile root/Network/Wireless/Profiles/<UUID>/
Security/EAPFAST/Password root/Network/Wireless/Profiles/<UUID>/
Security/EAPFAST/Username root/Network/Wireless/Profiles/<UUID>/
Security/EAPPEAP/AnonyIdentity root/Network/Wireless/Profiles/<UUID>/
Security/EAPPEAP/CACert root/Network/Wireless/Profiles/<UUID>/
Security/EAPPEAP/InnerAuth
Sets the provisioning option for EAP-FAST authentication.
Sets the path to the PAC file for EAP-FAST authentication.
Sets the password for EAP-FAST authentication.
Sets the username for EAP-FAST authentication.
Sets the anonymous identity for EAP PEAP authentication.
Sets the path to the CA certificate file for EAP PEAP authentication.
Sets the PEAP inner authentication protocol.
Network 139
Registry key root/Network/Wireless/Profiles/<UUID>/
Security/EAPPEAP/PEAPVer root/Network/Wireless/Profiles/<UUID>/
Security/EAPPEAP/Password root/Network/Wireless/Profiles/<UUID>/
Security/EAPPEAP/Username root/Network/Wireless/Profiles/<UUID>/
Security/EAPTLS/CACert root/Network/Wireless/Profiles/<UUID>/
Security/EAPTLS/Identity root/Network/Wireless/Profiles/<UUID>/
Security/EAPTLS/PrivateKey root/Network/Wireless/Profiles/<UUID>/
Security/EAPTLS/PrivateKeyPassword root/Network/Wireless/Profiles/<UUID>/
Security/EAPTLS/UserCert root/Network/Wireless/Profiles/<UUID>/
Security/EAPTTLS/AnonyIdentity root/Network/Wireless/Profiles/<UUID>/
Security/EAPTTLS/CACert root/Network/Wireless/Profiles/<UUID>/
Security/EAPTTLS/InnerAuth root/Network/Wireless/Profiles/<UUID>/
Security/EAPTTLS/Password root/Network/Wireless/Profiles/<UUID>/
Security/EAPTTLS/Username root/Network/Wireless/Profiles/<UUID>/
Security/PSK/HexdecimalMode root/Network/Wireless/Profiles/<UUID>/
Security/PSK/PreSharedKey root/Network/Wireless/Profiles/<UUID>/
Security/Type root/Network/Wireless/Profiles/<UUID>/
Security/WEP/AuthType root/Network/Wireless/Profiles/<UUID>/
Security/WEP/Key root/Network/Wireless/Profiles/<UUID>/
Security/WEP/KeyIndex root/Network/Wireless/Profiles/<UUID>/
Security/WirelessBand root/Network/Wireless/Profiles/<UUID>/
Security/WirelessInterface root/Network/Wireless/Roaming/ enableRoamingOptions
140 Appendix D Registry keys
Description
Sets the PEAP version.
Sets the password for EAP PEAP authentication.
Sets the username for EAP PEAP authentication.
Sets the path to the CA certificate file for TLS authentication.
Sets the identity for TLS authentication.
Sets the path to a private key file for TLS authentication.
Sets the password to a private key file for TLS authentication.
Sets the path to a user certificate file for TLS authentication.
Sets the anonymous identity for TTLS authentication.
Sets the path to a CA certificate file for TTLS authentication.
Sets the TTLS inner authentication protocol.
Sets the password for TTLS authentication.
Sets the username for TTLS authentication.
Sets the password for PSK authentication.
Sets the wireless authentication type.
Sets the WEP authentication type.
Sets the WEP password.
Sets the WEP password index.
Specifies the frequency range selection. Select Auto to scan all wireless channels; select 2.4GHz
to scan only 2.4 GHz channels; select 5GHz to scan only 5 GHz channels.
Sets the wireless interface for the profile.
If set to 1, wireless roaming options are configurable.
Registry key root/Network/Wireless/Roaming/ longScanInterval root/Network/Wireless/Roaming/roamingNap root/Network/Wireless/Roaming/ roamingThreshold root/Network/Wireless/Roaming/scanInterval root/Network/Wireless/SSID root/Network/Wireless/SSIDHidden root/Network/Wireless/SSIDWhiteList root/Network/Wireless/Security/CACert
Description
Specifies how often, in seconds, to scan for an access point with a stronger signal when the signal strength is above the roaming threshold. The default is 60.
Specifies how often, in seconds, the connection sleeps when the wpa_applicant status changes. This helps reduce spurious Wi-Fi events from breaking live connections when roaming occurs.
Sets the minimum signal strength, in dBm, allowed before attempting to roam to a stronger access point. Note that this value is negative.
Sets how often, in seconds, to scan for a stronger access point when the signal strength is below the roaming threshold.
Sets the wireless access point to use via its SSID.
Specifies if the SSID of the wireless access point is hidden.
Specifies a whitelist for wireless access points. If this registry key's value is not empty, only the SSIDs specified in the value will be shown in the wireless access point scan results. Use a semicolon to separate the SSIDs.
Sets the path to CA certificate file.
Sets the path to the PAC file for EAP-FAST authentication.
Sets the provisioning option for EAP-FAST authentication.
root/Network/Wireless/Security/EAPFASTPAC root/Network/Wireless/Security/
EAPFASTProvision root/Network/Wireless/Security/Identity root/Network/Wireless/Security/InnerAuth
Sets the identity or anonymous identity.
Sets the PEAP inner authentication protocol.
root/Network/Wireless/Security/InnerAuthTTLS Sets the TTLS inner authentication protocol.
root/Network/Wireless/Security/PEAPVersion root/Network/Wireless/Security/Password
Sets the PEAP version.
Sets the password.
root/Network/Wireless/Security/PrivateKey root/Network/Wireless/Security/Type
Sets the path to a private key file. This is only used for TLS authentication.
Sets the wireless authentication type.
root/Network/Wireless/Security/UserCert root/Network/Wireless/Security/Username root/Network/Wireless/Security/WEPAuth root/Network/Wireless/Security/WEPIndex root/Network/Wireless/SubnetMask
Sets the path to a user certificate file. This is only used for TLS authentication.
Sets the username.
Sets the WEP authentication type.
Sets the WEP password index.
Sets the subnet mask of the device, such as 255.255.255.0 (for a standard class C subnet). This setting will only take effect when
Method is set to Static .
root/Network/Wireless/UseWirelessProfiles If set to 1, the wireless connection is configured in profile mode, which can connect to multiple wireless networks. This is useful for mobile computing. If set to 0, only one configured wireless network can be connected.
Network 141
Registry key root/Network/Wireless/WirelessBand root/Network/Wireless/WpaDriver root/Network/Wireless/bcmwlCountryOverride root/Network/Wireless/ disableUserCreateWirelessProfile root/Network/Wireless/ disableUserWirelessProfileTrayMenu root/Network/Wireless/ disableWirelessProfileTrayMenu root/Network/Wireless/ tryAutoWirelessIfUserFailed root/Network/disableLeftClickMenu root/Network/disableRightClickMenu root/Network/enableVPNMenu root/Network/userLock root/Network/userLockEngaged
Description
Specifies the frequency range selection. Select Auto to scan all wireless channels; select 2.4GHz
to scan only 2.4 GHz channels; select 5GHz to scan only 5 GHz channels.
Specifies the driver used by wpa_supplicant ( wext by default). nl80211 is the only other driver that is currently supported.
Overrides the country value from the BIOS in case the BIOS does not have the necessary value. The bcmwl driver accepts the wl_country option, which is retrieved from BIOS values on an asneeded basis (only Indonesia is supported currently). A system restart is required for any changes to take effect.
If set to 1, user accounts cannot create wireless profiles from the wireless system tray.
If set to 1, the wireless menu of the wireless system tray icon is disabled for the user account.
If set to 1, the wireless menu of the wireless system tray icon is disabled.
If set to 1, if a user tries to connect to a wireless AP and fails, the wireless module tries to connect wirelessly using all available profiles. If set to 0, if a user tries to connect to a wireless AP and fails, the wireless status is set to disconnected. This is a fallback function.
If set to 1, the left-click menu for the network system tray icon is disabled.
If set to 1, the right-click menu for the network system tray icon is disabled.
If set to 1, the left-click VPN menu accessible from the network taskbar icon is enabled.
If set to 1, and if the network settings have been modified by the user, the network settings are preserved when importing a client profile.
This registry key is set to 1 automatically after the network settings have been modified by the user. You normally do not need to modify this setting.
Power
Registry key root/Power/applet/VisibleInSystray root/Power/buttons/logout/authorized root/Power/buttons/power/authorized root/Power/buttons/poweroff/authorized root/Power/buttons/reboot/authorized root/Power/buttons/sleep/authorized
Description
If set to 1, the battery icon is displayed in the system tray.
If set to 1, the logout function is available.
If set to 1, the power function is available.
If set to 1, the poweroff function is available.
If set to 1, the reboot function is available.
If set to 1, the Sleep function is available.
142 Appendix D Registry keys
Registry key root/Power/currentPowerPlan root/Power/default/AC/brightness root/Power/default/AC/cpuMode root/Power/default/AC/lidAction root/Power/default/AC/powerButtonAction root/Power/default/AC/sleep root/Power/default/AC/standby root/Power/default/AC/timeoutDim root/Power/default/battery/brightness root/Power/default/battery/cpuMode root/Power/default/battery/critical/ criticalBatteryAction root/Power/default/battery/critical/ criticalBatteryLevel root/Power/default/battery/lidAction root/Power/default/battery/low/brightness root/Power/default/battery/low/cpuMode root/Power/default/battery/low/ lowBatteryLevel root/Power/default/battery/low/sleep root/Power/default/battery/low/standby root/Power/default/battery/low/timeoutDim
Description
This registry key selects which power plan is used. This is automatically set to default.
Sets the default brightness percentage level for when the mobile thin client is plugged in.
Sets the CPU mode for a power plan while the computer is connected to AC power. By default, it is set to performance.
Sets the action that occurs when the computer lid is closed while the computer is connected to AC power. By default, it is set to
Sleep.
Sets the action that occurs when the power button is pressed while the computer is connected to AC power. By default, it is set to shutdown.
Sets the value (in minutes) that the computer waits before it enters the Sleep state while the computer is connected to AC power. By default, it is set to 30. If set to 0, the computer never enters the Sleep state.
Sets the value (in minutes) that the computer waits before the display turns off while the computer is connected to AC power. By default, it is set to 15. If set to 0, the computer never enters standby mode.
This key is currently not in use.
Sets the default brightness percentage level for when the mobile thin client is not plugged in.
Sets the CPU mode for a power plan while the computer is not connected to AC power. By default, it is set to ondemand.
Sets the action to perform when the battery is at the critical charge level, defined by criticalBatteryLevel .
Sets the percentage threshold for when the battery is considered to be at a critical level of power.
Sets the action that occurs when the computer lid is closed while the computer is not connected to AC power. By default, it is set to
Sleep.
Sets the default brightness percentage level for when the battery is running low on power.
Sets the CPU mode (performance or on demand).
Sets the percentage of battery power left for when the battery is considered to be at a low level of power.
Sets the value (in minutes) that the computer waits before it enters the Sleep state while the computer is not connected to AC power. By default, it is set to 30. If set to 0, the computer never enters the Sleep state.
Sets the value (in minutes) that the computer waits before the display turns off while the computer is not connected to AC power.
By default, it is set to 15. If set to 0, the computer never enters standby mode.
This key is currently not in use.
Power 143
Registry key Description root/Power/default/battery/powerButtonAction Specifies what to do when power button is pressed.
root/Power/default/battery/sleep root/Power/default/battery/standby
Sets how many minutes to wait before entering Sleep. 0 = never.
Sets how many minutes to wait before turning off the display. 0 = never.
root/Power/default/battery/timeoutDim This key is currently not in use.
ScepMgr
Registry key Description root/ScepMgr/General/AutoRenew/Enabled root/ScepMgr/General/AutoRenew/TimeFrame root/ScepMgr/IdentifyingInfo/CommonName
If set to 1, certificates will be renewed automatically before they expire.
Sets the number of days before a certificate's expiration date that the SCEP Manager will try to renew the certificate automatically.
Sets the common name to use for SCEP identifying information, such as your name or the Fully-Qualified Domain Name (FQDN) of the device. The FQDN is used by default if this value is left empty.
root/ScepMgr/IdentifyingInfo/CountryName root/ScepMgr/IdentifyingInfo/EmailAddress
Sets the country or region to use for SCEP identifying information.
Sets the email address to use for SCEP identifying information.
root/ScepMgr/IdentifyingInfo/LocalityName Sets the locality name to use for SCEP identifying information, such as a city name.
root/ScepMgr/IdentifyingInfo/OrganizationName Sets the organization name to use for SCEP identifying information, such as a company name or government organization name.
root/ScepMgr/IdentifyingInfo/
OrganizationUnitName root/ScepMgr/IdentifyingInfo/StateName root/ScepMgr/ScepEnroll/ScepServers/<UUID>/
CertFileChanged root/ScepMgr/ScepEnroll/ScepServers/<UUID>/
DontVerifyPeer root/ScepMgr/ScepEnroll/ScepServers/<UUID>/
KeySize
Sets the organizational unit name to use for SCEP identifying information, such as a department name or section name.
Sets the state or province to use for SCEP identifying information.
The registry key is used only to inform other applications that a certificate file has changed. This should not need to be modified.
This registry key is used for https only. If set to 1, the SCEP client does not verify the server certificate. This key is set to 0 by default.
Sets the key size to use for the generated key pair.
Sets the SCEP server name.
root/ScepMgr/ScepEnroll/ScepServers/<UUID>/
ServerName root/ScepMgr/ScepEnroll/ScepServers/<UUID>/
ServerUrl root/ScepMgr/ScepEnroll/ScepServers/<UUID>/
Status/Code root/ScepMgr/ScepEnroll/ScepServers/<UUID>/
Status/Detail
Sets the SCEP server URL, which is necessary for the SCEP client to enroll a certificate.
Contains the status code of the SCEP enrollment. This value is read-only.
Contains detailed information about the SCEP enrollment. This value is read-only.
144 Appendix D Registry keys
Search
Registry key root/Search/Category/Miscellaneons/
CheckForUpdate root/Search/Category/Miscellaneons/Logout root/Search/Category/Miscellaneons/Reboot root/Search/Category/Miscellaneons/ShutDown root/Search/Category/Miscellaneons/Sleep root/Search/Category/Miscellaneons/
SwitchToAdmin root/Search/Category/Regeditor/byDir root/Search/Category/Regeditor/byKey root/Search/Category/Regeditor/byValue root/Search/Category/Regeditor/byWhole
Description
Serial
Registry key root/Serial/<UUID>/baud root/Serial/<UUID>/dataBits root/Serial/<UUID>/device root/Serial/<UUID>/flow root/Serial/<UUID>/name root/Serial/<UUID>/parity
Description
Sets the speed of the serial device.
Sets how many bits are in each character.
Specifies the serial device attached to the system.
Sets the flow control of the serial device, which is used to communicate stops and starts of the serial communication.
Specifies the Windows device port for communicating with the serial device.
Sets the parity bit of the serial device. The parity bit is used for error detection. If set to none , there is no parity detection.
SystemInfo
Registry key root/SystemInfo/Pages/General root/SystemInfo/Pages/License root/SystemInfo/Pages/NetTools root/SystemInfo/Pages/Network
Description
If set to 0, the General tab of the System Information window is hidden from end users.
If set to 0, the Software License tab of the System Information window is hidden from end users.
If set to 0, the Net Tools tab of the System Information window is hidden from end users.
If set to 0, the Network tab of the System Information window is hidden from end users.
Search 145
Registry key root/SystemInfo/Pages/SoftwareInformationTab/
ServicePacks root/SystemInfo/Pages/SoftwareInformationTab/
SoftwareInformation root/SystemInfo/Pages/SoftwareInformationTab/
SoftwareInstalled root/SystemInfo/Pages/SystemLogs root/SystemInfo/authorized
Description
If set to 0, the Service Packs tab in the Software Information section of the System Information window is hidden from end users.
If set to 0, the Software Information tab of the System
Information window is hidden from end users.
If set to 0, the Software Installed tab in the Software
Information section of the System Information window is hidden from end users.
If set to 0, the System Logs tab of the System Information window is hidden from end users.
If set to 0, the System Information button on the taskbar is disabled for end users.
TaskMgr
Registry key root/TaskMgr/General/AlwaysOnTop
Description
If set to 1, the Task Manager window is always on top.
USB
Registry key root/USB/Classes/(Defined at Interface level)/ClassID root/USB/Classes/(Defined at Interface level)/DisplayName root/USB/Classes/(Defined at Interface level)/State root/USB/Classes/(Defined at Interface level)/Visible root/USB/Devices/<UUID>/DisplayName root/USB/Devices/<UUID>/ProductID root/USB/Devices/<UUID>/State root/USB/Devices/<UUID>/VendorID root/USB/root/autoSwitchProtocol root/USB/root/mass-storage/allowed root/USB/root/mass-storage/read-only
Description
Sets the USB class ID number.
Sets the USB class name.
Sets whether the class is mapped to the remote host.
Sets whether the class is shown in the UI, not shown in the UI, or disabled.
Sets the name to show in USB Manager. If not supplied, USB
Manager will attempt to generate an appropriate name using device information.
Sets the product ID of the device.
Sets whether this device is mapped to the remote host as follows:
0 = Do Not Redirect; 1 = Use Defaults; 2 = Redirect.
Sets the vendor ID of the device.
If set to 1, the remote USB protocol will switch automatically based on which protocol is chosen.
If set to 1, mass storage devices will be mounted automatically when the protocol is local .
If set to 1, when mass storage devices are mounted automatically, they will be mounted as read-only.
146 Appendix D Registry keys
Registry key root/USB/root/protocol root/USB/root/showClasses
auto-update
Registry key root/auto-update/DNSAliasDir root/auto-update/LockScreenTimeout root/auto-update/ManualUpdate root/auto-update/ScheduledScan/Enabled root/auto-update/ScheduledScan/Interval root/auto-update/ScheduledScan/Period root/auto-update/ScheduledScan/StartTime root/auto-update/ServerURL root/auto-update/VisibleInSystray root/auto-update/checkCertSig root/auto-update/checkCustomSig root/auto-update/checkImgSig root/auto-update/checkPackageSig root/auto-update/checkProfileSig root/auto-update/enableLockScreen
Description
Sets which protocol owns remote USB. Valid values depend on which protocols are installed on the system but can include local , xen , freerdp , and view .
If set to 1, the Classes section is shown in the USB Manager.
Description
Sets the default root directory for DNS alias mode on the server hosting HP Smart Client Services.
Specifies the timeout (in minutes) after which the screen will unlock during an automatic update. If set to 0, the screen will be unlocked throughout the entire automatic update until the update is complete.
If set to 1, the DHCP tag, DNS alias, and broadcast update methods for Automatic Update are disabled. When performing a manual update, the password , path , protocol , user , and
ServerURL registry keys must be set to ensure the update server is known.
If set to 1, the thin client performs periodic scans of the
Automatic Update server to check for updates. If set to 0, the thin client will only check for updates at system startup.
Sets the amount of time to wait between scheduled update scans.
This should be specified in the HH:MM format. Intervals longer than 24 hours can be specified. For example, to have the scans occur every 48 hours, set this to 48:00 .
Thin clients will randomly activate their scheduled scan throughout the defined period. Using a long period avoids cases where all thin clients update at exactly the same, which could cause network congestion. The period should be specified in the
HH:MM format. For example, to spread thin client updates over a
2.5-hour period, set this to 02:30 .
Sets the start time of the first scheduled update scan period in the format HH:MM , using the 24-hour time format. For example, 4:35 p.m. would be 16:35 .
Sets the IP address or domain name of the update server used when ManualUpdate is enabled.
If set to 1, the Automatic Update system tray icon is enabled.
If set to 1, the certificate signature is verified.
If set to 1, the custom packages signature is verified.
Reserved for future use.
If set to 1, the packages signature is verified.
If set to 1, the profiles signature is verified.
If set to 1, the screen locks while an automatic update is in progress.
auto-update 147
Registry key root/auto-update/gui/auto-update/ enableLockScreen root/auto-update/gui/auto-update/ enableOnBootup root/auto-update/gui/auto-update/password root/auto-update/gui/auto-update/protocol
Description root/auto-update/enableOnBootup If set to 1, Automatic Update is enabled at system startup.
root/auto-update/enableSystrayLeftClickMenu If set to 1, the left-click menu for the Automatic Update system tray icon is enabled.
root/auto-update/enableSystrayRightClickMenu If set to 1, the right-click menu for the Automatic Update system tray icon is enabled.
root/auto-update/gui/auto-update/ManualUpdate Controls the state of the Enable manual configuration widget in the Automatic Update tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
root/auto-update/gui/auto-update/ServerURL Controls the state of the Server widget in the Automatic Update tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Enable Lock Screen when Automatic
Update widget in the Automatic Update tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Enable Automatic Update on system
startup widget in the Automatic Update tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Password widget in the Automatic
Update tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Protocol widget in the Automatic Update tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
root/auto-update/gui/auto-update/tag root/auto-update/gui/auto-update/user root/auto-update/password root/auto-update/path root/auto-update/preserveConfig root/auto-update/protocol
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the User name widget in the Automatic
Update tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Sets the password used when ManualUpdate is enabled. This is only used when protocol is set to ftp . This value will be encrypted.
Sets the relative path from the default server URL for when
ManualUpdate is enabled. Typically, this is empty or set to auto-update .
If set to 1, the current thin client configuration settings will be preserved when an image update occurs via Automatic Update.
Sets the protocol used when ManualUpdate is enabled.
148 Appendix D Registry keys
Registry key root/auto-update/tag root/auto-update/user
Description
This registry key is obsolete. It previously set the tag number used for DHCP (137). This is now detected via the tag name auto-update .
Sets the username used when ManualUpdate is enabled. This is only used when 'protocol' is set to 'ftp'.
background
Registry key root/background/bginfo/alignment root/background/bginfo/enabled root/background/bginfo/horizontalLocation root/background/bginfo/interval root/background/bginfo/preset root/background/bginfo/shadowColor root/background/bginfo/shadowOffset root/background/bginfo/text root/background/bginfo/textColor root/background/bginfo/textSize root/background/bginfo/verticalLocation root/background/desktop/color root/background/desktop/color2 root/background/desktop/imagePath root/background/desktop/lastBrowseDir root/background/desktop/style root/background/desktop/theme
Description
Sets the Background Sysinfo text alignment.
If set to 1 , system information is displayed on the desktop background (Background Sysinfo).
Sets the Background Sysinfo location on the X-axis in a percentage.
Sets the Background Sysinfo text refresh interval in seconds.
Sets the Background Sysinfo preset file to use . If set to none , you can customize the settings in Background Manager.
Sets the Background Sysinfo shadow color.
Sets the Background Sysinfo shadow offset. If set to 0 , the shadow is disabled.
Sets the Background Sysinfo text. For more information, see the
HP ThinPro white paper Login Screen Customization (available in
English only).
Sets the Background Sysinfo text color.
Sets the Background Sysinfo text size.
Sets the Background Sysinfo location on the Y-axis in a percentage.
Specifies the solid color, the background color if any is visible behind the image, or the top color in a gradient.
If theme is set to gradient , this key stores the bottom color in the gradient.
If theme is set to either none or image , this key stores the desktop background image path used by the user-defined theme.
If theme is set to none , this key stores the last used directory.
If theme is set to none , this key stores how the background image is placed on the desktop (such as center , tile , stretch , fit , and fill ).
Specifies the system theme setting. This value is set via the
Background Manager tool in Control Panel. The valid values depend on the themes that exist on the system. This can be set to none or image to let the user define a background image, to auto to have the system automatically set the appropriate background 149
Registry key root/background/desktop/updateInterval
Description protocol's theme for Smart Zero, or to default to use the default theme for ThinPro, or one of several predefined themes.
Sets the background refresh interval in seconds.
boot
Registry key root/boot/enablePlymouth root/boot/extraCmdline
Description
config-wizard
Registry key root/config-wizard/configWizardOptions
Description
Specifies, in a space-separated list, which configuration wizard options are displayed. By default, all options ( language , keyboard , network , datetime , end ) are listed.
root/config-wizard/disableAllChecksAtStartup If set to 1, all checks at startup are disabled. If set to 0, you can enable/disable each type of check individually with the registry keys enableConnectionCheck , enableNetworkCheck , and enableUpdateCheck .
root/config-wizard/enableConfigWizard root/config-wizard/enableConnectionCheck
If set to 1, the configuration wizard at system startup is enabled.
If set to 1, the connection check at system startup is enabled.
root/config-wizard/enableNetworkCheck If set to 1, the network check at system startup is enabled.
root/config-wizard/showNetworkSettingsButton If set to 1, the network settings button is shown in the network check window.
desktop
Registry key root/desktop/preferences/arrangeBy root/desktop/preferences/fontFamily root/desktop/preferences/gridSize root/desktop/preferences/iconGlowColor root/desktop/preferences/iconPercent
Description
Specifies whether to arrange icons by name or type.
Specifies the font used for desktop icons.
Specifies, in pixels, the desktop icon grid size. If set to a value less than 64, the size is computed as a proportion of the monitor size.
Specifies the color that glows behind the desktop icon when a pointer hovers over it. Valid strings are in the style
QColor::setNamedColor() . If not set, the system chooses a color that contrasts with the background.
Specifies the percentage of the grid size to use for the icon. If the value is greater than 0, it is calculated as a proportion of the grid size.
150 Appendix D Registry keys
Registry key Description root/desktop/preferences/iconShadowColor root/desktop/preferences/menu/arrange/ authorized
Specifies the shadow color behind the desktop icon and text. Valid strings are in the style QColor::setNamedColor() . If not set, the system chooses a color that contrasts with the background.
Specifies whether users can use the arrange function on the desktop.
root/desktop/preferences/menu/create/ authorized
Specifies whether users can create connections from the rightclick menu on the desktop.
root/desktop/preferences/menu/drag/authorized Specifies whether users can drag and drop icons on the desktop.
root/desktop/preferences/menu/lockScreen/ authorized root/desktop/preferences/menu/logout/ authorized root/desktop/preferences/menu/modeSwitch/ authorized root/desktop/preferences/menu/power/ authorized
Specifies whether users can lock the screen from the right-click menu on the desktop.
Specifies whether users can log out from the right-click menu on the desktop.
Specifies whether users can switch to administrator mode from the right-click menu on the desktop.
Specifies whether users can access the power submenu from the right-click menu on the desktop.
root/desktop/preferences/menu/poweroff/ authorized root/desktop/preferences/menu/reboot/ authorized root/desktop/preferences/menu/sleep/ authorized root/desktop/preferences/menuTextSize root/desktop/preferences/screenMargin root/desktop/preferences/textBold root/desktop/preferences/textColor root/desktop/preferences/textShadowColor root/desktop/preferences/textSize
Specifies whether users can turn off the system from the rightclick menu on the desktop.
Specifies whether users can restart the system from the rightclick menu on the desktop.
Specifies whether users can put the system into the Sleep state from the right-click menu on the desktop.
Specifies the height of the desktop menu text in pixels. If nonpositive, the height is calculated as a proportion of the monitor size.
Specifies the margin between the screen edges and icons.
Specifies whether to bold the text.
Specifies the text color for the desktop icons. Valid strings are in the style QColor::setNamedColor() . If not set, the system chooses a color that contrasts with the background.
Specifies the shadow color behind desktop icons and text. Valid strings are in the style QColor::setNamedColor() . If not set, the system chooses a color that contrasts with the text color.
Specifies the height of the desktop icon text in pixels. If nonpositive, the height is calculated as a proportion of the monitor size.
root/desktop/shortcuts/<action>/command root/desktop/shortcuts/<action>/enabled
Sets the command that is run by the shortcut.
If set to 1, the shortcut is enabled.
root/desktop/shortcuts/<action>/shortcut Sets the shortcut name.
root/desktop/shortcuts/<action>/shortcutsMode Sets the shortcut mode.
desktop 151
domain
Registry key root/domain/OU root/domain/allowSmartcard root/domain/cacheDomainLogin root/domain/ddns root/domain/domain root/domain/domainAdminGroup root/domain/domainControllers root/domain/domainJoined root/domain/domainUsersGroup root/domain/enableDomainAdmin root/domain/enableDomainUsers root/domain/enablePasswordChange root/domain/enableSSO root/domain/loginAtStart root/domain/retainUserRegistry root/domain/workgroup
Description
Specifies the organizational unit associated with the thin client's domain membership.
This key is currently unused.
If enabled, a hash of domain login credentials is saved to disk so that subsequent logins can occur even if the Active Directory server is inaccessible.
If enabled, the thin client attempts to update the DNS server with its hostname and IP address during each DHCP renewal.
Specifies the domain to which this thin client is joined or to which this thin client is authenticating against.
If enableDomainAdmin is enabled, members of this AD group can switch the thin client to administrator mode.
Specifies a comma-separated list of domain controllers to use with this domain. If left blank (recommended), automatic lookup of domain controllers is performed using DNS instead.
Indicates if the thin client has been formally added to the domain.
If enableDomainUsers is enabled, domain logins are limited to direct members of this group. Nested groups are not supported for this feature.
If set to 1, members of the group listed in domainAdminGroup can switch the thin client to administrator mode. If set to 0, the local root account must be used to perform local administrative tasks.
If set to 1, domain logins are limited to members of the group listed in domainUserGroup . If set to 0, any valid domain credential is permitted to log in to the thin client.
If set to 1, the user can change their domain password directly from the thin client.
If enabled, encrypted current credentials are cached in memory and they can be reused when starting remote connections.
If set to 1, and if the thin client has been added to a domain, a login screen is displayed when the thin client starts up. Otherwise, the legacy ThinPro shared desktop is displayed at startup.
If set to 1, any custom setting changes made by the user are retained between login sessions.
Specifies the workgroup or “short domain” associated with the thin client's domain membership. This is also referred to as the
NetBIOS domain name during creation of the Active Directory domain. This value is usually auto-detected during domain authentication by looking up the value from a domain controller.
152 Appendix D Registry keys
entries
Registry key root/entries/<UUID>/command root/entries/<UUID>/folder root/entries/<UUID>/icon root/entries/<UUID>/label root/entries/<UUID>/metaInfo root/entries/<UUID>/onDesktop root/entries/<UUID>/onMenu
firewall
Registry key root/firewall/direct/pptp-rule root/firewall/icmp-blocks root/firewall/interfaces root/firewall/masquerade root/firewall/ports root/firewall/services/<service>/checked root/firewall/services/<service>/description root/firewall/services/<service>/ destinations/ipv4 root/firewall/services/<service>/ destinations/ipv6
Description root/firewall/services/<service>/modules root/firewall/services/<service>/portprotocols root/firewall/services/<service>/short root/firewall/sources root/firewall/startAtBoot
Description
hwh264
Registry key root/hwh264/force2x4k
Description
HP does not recommend changing the value of this key.
entries 153
Registry key Description
In some Citrix H264 desktop configurations, large desktop streams with dual monitors cause a flickering effect. H264 is usually disabled for large streams due to this issue.
keyboard
Registry key root/keyboard/DrawLocaleLetter root/keyboard/SystrayMenu/keyboardLayout root/keyboard/SystrayMenu/languages root/keyboard/SystrayMenu/virtualKeyboard root/keyboard/VisibleInSystray root/keyboard/XkbLayout root/keyboard/XkbModel root/keyboard/XkbOptions root/keyboard/XkbVariant root/keyboard/enable2 root/keyboard/layout root/keyboard/layout2 root/keyboard/model root/keyboard/model2 root/keyboard/numlock root/keyboard/switch root/keyboard/variant root/keyboard/variant2
Description
If set to 1, the keyboard system tray icon will draw the language locale string instead of using static images.
If set to 1, the right-click menu on the keyboard system tray icon offers an option to open the Keyboard Layout tool in Control
Panel.
If set to 1, the right-click menu on the keyboard system tray icon offers an option to open the Language tool in Control Panel.
If set to 1, the right-click menu on the keyboard system tray icon offers an option to open the virtual keyboard.
If set to 1, the keyboard system tray icon is displayed and indicates the current keyboard layout.
This is an internal key used to map to an XKB keyboard layout.
This key should not need to be modified.
This is an internal key used to map to an XKB keyboard model.
This key should not need to be modified.
This is an internal key used to map to XKB keyboard options. This key should not need to be modified.
This is an internal key used to map to an XKB keyboard variant.
This key should not need to be modified.
If set to 1, the secondary keyboard layout can be switched to via the keyboard shortcut defined by switch .
Sets the primary keyboard layout.
Sets the secondary keyboard layout.
Sets the primary keyboard model.
Sets the secondary keyboard model.
If set to 1, the Num Lock function is enabled at system startup.
This registry key is intentionally ignored on mobile thin clients.
Sets the keyboard shortcut for switching between the first and second keyboard layout ( enable2 must also be set to 1). Valid values are as follows: grp:ctrl_shift_toggle , grp:ctrl_alt_toggle , grp:alt_shift_toggle .
Sets the primary keyboard variant.
Sets the secondary keyboard variant.
154 Appendix D Registry keys
license
Registry key root/license/courtesyNotificationEnable root/license/courtesyNotificationInterval root/license/courtesyNotificationStart root/license/courtesyNotificationText
Description
If set to 1, systray notifications are enabled as license expiration approaches.
If positive, number of hours between courtesy notifications.
If positive, courtesy notifications start this many days before expiration.
If not blank, this text is used in courtesy notifications. %1 is replaced with the number of days left before expiration; %2 is replaced with the expiration date.
This value is ready-only.
root/license/watermark
logging
Registry key root/logging/general/debugLevel root/logging/general/showDebugLevelBox
Description
Sets the debug level. This value will be leveraged by other modules to generate the corresponding logs.
If set to 1, the Debug level option on the System Logs tab of the
System Information window will be available to end users. If set to 0, the option is available to administrators only.
login
Registry key root/login/buttons/configure/authorized root/login/buttons/info/authorized root/login/buttons/keyboard/authorized root/login/buttons/locale/authorized root/login/buttons/mouse/authorized root/login/buttons/onscreenKeyboard/ authorized root/login/buttons/power/authorized root/login/buttons/poweroff/authorized root/login/buttons/reboot/authorized root/login/buttons/show/authorized
Description
If set to 1, the Configuration button is available at the login screen.
If set to 1, the System Information button is available at the login screen.
If set to 1, keyboard layout settings can be configured at the login screen.
If set to 1, language settings can be configured at the login screen.
If set to 1, mouse settings can be configured at the login screen.
If set to 1, the onscreen keyboard is available at the login screen.
If set to 1, the power button is available at the login screen.
If set to 1, the shut down function is available at the login screen.
If set to 1, the restart function is available at the login screen.
If set to 1, the button drawer containing additional options is available at the login screen.
license 155
Registry key root/login/buttons/sleep/authorized root/login/buttons/touchscreen/authorized
Description
If set to 1, the Sleep function is available at the login screen.
If set to 1, touch screen settings can be configured at the login screen. The registry key root/touchscreen/enabled must also be enabled.
root/login/rememberedDomain root/login/rememberedUser
mouse
Registry key root/mouse/MouseHandedness root/mouse/MouseSpeed root/mouse/MouseThreshold root/mouse/disableTrackpadWhileTyping root/mouse/enableNaturalScrolling root/mouse/enableTrackpad root/mouse/enableTrackpadTapping root/mouse/enableTwoFingerScrolling
Description
If set to 0, the mouse is right-handed. If set to 1, the mouse is left-handed.
Sets the acceleration of the mouse pointer. Typically, a value from
0 to 25 is in the usable range. A value of 0 completely disables acceleration, causing the mouse to move at a constant slow, but measurable pace.
Sets the number of pixels before mouse acceleration is enabled. A value of 0 sets the acceleration to a natural curve that gradually scales acceleration, allowing for both precise and quick movements.
If set to 1, the trackpad will temporarily be disabled while typing.
If set to 0, the trackpad will not be temporarily disabled while typing.
If set to 1 (default), Natural Scrolling is enabled on the trackpad. If set to 0, Natural Scrolling is disabled on the trackpad.
If set to 1, the trackpad is enabled. If set to 0, the trackpad is disabled.
If set to 0 (default), the tap-to-click behavior of the trackpad is disabled. If set to 1, tap-to-click behavior is enabled.
If set to 1 (default), two finger scrolling is enabled on the trackpad. If set to 0, two finger scrolling is disabled on the trackpad.
root/mouse/gui
restore-points
Registry key root/restore-points/factory
Description
Specifies which snapshot to use for a factory reset.
156 Appendix D Registry keys
screensaver
Registry key root/screensaver/enableCustomLogo root/screensaver/enableDPMS root/screensaver/enableScreensaver root/screensaver/enableSleep root/screensaver/lockScreen root/screensaver/lockScreenDomain
Description root/screensaver/SlideShowAllMonitors root/screensaver/SlideShowInterval root/screensaver/SlideShowPath
If set to 1, the screen saver slide show will be shown on all monitors. If set to 0, the slide show will be shown on the primary monitor only.
Sets the interval in seconds for switching images in the screen saver slide show.
Specifies the directory that contains the images for the screen saver slide show.
root/screensaver/buttons/configure/authorized If set to 1, the Configuration button is available while the screen is locked.
root/screensaver/buttons/info/authorized If set to 1, the System Information button is available while the screen is locked.
root/screensaver/buttons/keyboard/authorized If set to 1, keyboard layout settings can be configured while the screen is locked.
root/screensaver/buttons/locale/authorized If set to 1, language settings can be configured while the screen is locked.
root/screensaver/buttons/mouse/authorized root/screensaver/buttons/onscreenKeyboard/ authorized
If set to 1, mouse settings can be configured while the screen is locked.
If set to 1, the onscreen keyboard is available while the screen is locked.
root/screensaver/buttons/power/authorized If set to 1, the power button is available while the screen is locked.
root/screensaver/buttons/poweroff/authorized If set to 1, the shut down function is available while the screen is locked.
root/screensaver/buttons/reboot/authorized root/screensaver/buttons/show/authorized
If set to 1, the restart function is available while the screen is locked.
If set to 1, the button drawer containing additional options is available while the screen is locked.
root/screensaver/buttons/sleep/authorized root/screensaver/buttons/touchscreen/ authorized
If set to 1, the Sleep function is available while the screen is locked.
If set to 1, touch screen settings can be configured while the screen is locked. The registry key root/touchscreen/ enabled must also be enabled.
If set to 1, the custom image defined in logoPath is used for the screen saver.
If set to 0, monitor power management is disabled. This causes the monitor to always stay on unless turned off manually.
If set to 1, the screen saver is enabled.
If set to 1, Sleep is enabled.
If set to 1 and you are logged into administrator mode, a password is required to return to the desktop from the screen saver.
If set to 1 and the system is in domain mode, a password is required to return to the desktop from the screen saver.
screensaver 157
Registry key root/screensaver/lockScreenUser root/screensaver/logoPath root/screensaver/mode root/screensaver/off root/screensaver/origImageCopyPath root/screensaver/solidColor root/screensaver/standby root/screensaver/suspend root/screensaver/timeoutScreensaver root/screensaver/timeoutSleep root/screensaver/useSolidColor
security
Registry key root/security/SecurityFeaturs/
SpeculativeStoreBypassControl root/security/authenticationFailDelay root/security/domainEntryMode root/security/enableLockOverride root/security/enableSecretPeek root/security/encryption/identity/ encryptedSecretCipher
158 Appendix D Registry keys
Description
If set to 1 and you are not logged in as an administrator and the system is not in domain mode, a password is required to return to the desktop from the screen saver.
Sets the path to a custom image to use for the screen saver.
Sets the rendering mode for the screen saver image (such as
Center , Tile , Expand , and Stretch ). If set to Default , the image is displayed without any processing. If set to SlideShow , the screen saver will cycle through images in the directory specified by SlideShowPath .
Sets the timeout delay in minutes before the monitor turns off.
This is the path where the custom image is saved when mode is set to Default .
If useSolidColor is on and enableCustomLogo is off, this solid color is used for the screen saver.
Sets the timeout delay in minutes before the monitor goes into standby mode.
Sets the timeout delay in minutes before the monitor goes into suspend mode.
Sets the timeout delay in minutes before the screen saver starts.
Sets the timeout delay in minutes before the thin client goes into the Sleep state.
If set to 1 and enableCustomLogo is off, the value of the solidColor key is used by the screen saver.
Description
Controls whether mitigations for Speculative Store Bypass
(CVE-2018-3639) are enabled. By default, these mitigations are not enabled. To enable them, set the key value to on.
For any change to this key to take effect, reboot the computer.
Sets the approximate time, in milliseconds, to delay after a failed login attempt. The actual time will vary plus or minus 25% of this value. For example, use a value of 3000 to obtain a delay of approximately 3 seconds.
If set to 1, the domain is expected to be entered in a separate text field labeled Domain. if set to 0, the domain is expected to be entered as part of the User field.
If set to 1, administrators can override the screen lock of a local desktop.
If set to 1, password and PIN dialogs will have a button that, while selected, will show the entered password/PIN in clear text.
Sets the algorithm for symmetric encryption of a secret. All algorithms use an appropriate amount of random salt, which is
Registry key root/security/encryption/identity/ encryptedSecretTTL root/security/encryption/identity/ encryptedSecretTTLnonSSO root/security/encryption/identity/ secretHashAlgorithm root/security/encryption/identity/ secretHashTTL root/security/mustLogin
shutdown
Registry key Description root/shutdown/enableAutomaticShutdownTimeout If set to 1, a progress bar is shown in the shutdown/restart/logout confirmation dialog box. If the question is not answered in time, automatically shutdown/restart/logout.
root/shutdown/timeOfAutomaticShutdownTimeout Sets the wait time for automatic shutdown timeout.
sshd
Description regenerated each time the secret is stored. The encryption key is different on each thin client, and encryption and decryption are available only to authorized programs. The supported cipher list includes most OpenSSL ciphers and ChaCha20–Poly1305.
Sets the number of seconds since the last successful login that a stored encrypted secret will be considered valid. If set to a negative number, encrypted secrets will not time out.
Specifies the number of seconds that a stored, non-SSO encrypted secret is considered valid. If set to a nonpositive number, encrypted secrets do not time out.
Sets the algorithm for creating a hash of a secret. Key Derivation
Functions (KDFs) such as scrypt or argon2 are better than straightforward hashes because it is not quick to compute a rainbow dictionary using a KDF. All algorithms use an appropriate amount of random salt, which is regenerated each time the secret is hashed. The supported list includes scrypt, Argon2, SHA-256, and SHA-512 (though the latter two are not KDFs).
Sets the number of seconds since the last successful login that a stored hashes of secrets will be considered valid. If set to a negative number, hashes of secrets will not time out.
If set to 1, all users are forced to log in before accessing the desktop.
Registry key root/sshd/disableWeakCipher root/sshd/disableWeakHmac root/sshd/disableWeakKex root/sshd/enabled root/sshd/userAccess
Description
If set to 1, disable the CBC mode cipher and other known weak ciphers, such as 3DES, arcfour, etc.
If set to 1, disable 96 bit hmac and any sha1–based and md5– based hmac.
If set to 1, disable key exchange algorithms that have DH with
SHA1.
If set to 1, the SSH daemon is enabled and the thin client can be accessed via SSH.
If set to 1, end users can connect to the thin client via SSH.
shutdown 159
time
Registry key root/time/NTPServers root/time/dateFormatLong root/time/dateFormatShort root/time/dateTimeFormatLong root/time/dateTimeFormatShort root/time/hideCountries root/time/hideMap root/time/hideWinZones root/time/hideZones root/time/timeFormatLong root/time/timeFormatShort root/time/timezone root/time/use24HourFormat
160 Appendix D Registry keys
Description
Specifies NTP servers to use via a comma-separated list. Private
NTP servers or large virtual NTP clusters such as pool.ntp.org
are the best choices to minimize server load.
Clear this value to return to using DHCP servers (tag 42) instead of a fixed list.
An optional way to override the long date format used in various
ThinPro tools. For formatting, do a web search for
QDate::toString . If left blank, a locale-specific string is usually used.
An optional way to override the short date format used in various
ThinPro tools. For formatting, do a web search for
QDate::toString . If left blank, a locale-specific string is usually used.
An optional way to override the long date&time format used in various ThinPro tools. For formatting, do a web search for
QDate::toString . If left blank, a locale-specific string is usually used.
An optional way to override the short date&time format used in various ThinPro tools. For formatting, do a web search for
QDate::toString . If left blank, a locale-specific string is usually used.
A semicolon-separated list of countries that you want hidden in the time zone selection GUI.
If set to 1, the map is not drawn. This might be preferable in instances where boundaries are in dispute.
A semicolon-separated list of Windows-format time zones, such as “(UTC+2:00) Tripoli,” that you want hidden in the time zone selection GUI.
A semicolon-separated list of Linux-format time zones, such as
“America/Denver”, that you want hidden in the time zone selection GUI.
An optional way to override the long time format used in various
ThinPro tools. For formatting, do a web search for
QDate::toString . If left blank, a locale-specific string is usually used.
An optional way to override the short time format used in various
ThinPro tools. For formatting, do a web search for
QDate::toString . If left blank, a locale-specific string is usually used.
Sets the time zone. Time zones should be specified as defined by
Linux Timezone in the Date and Time tool in Control Panel, and they should be in the following format:
<region>/<subregion>
If set to -1, the system chooses the format automatically according to the locale. If set to 0, the a.m./p.m. format is used. If set to 1, the 24-hour format is used.
Registry key root/time/useADDNSTimeServers root/time/useDHCPTimezone root/time/useNTPServers
Description
If set to 1, the thin client will attempt to set the time zone via the
Active Directory domain controllers auto-discovered on the local network. It does this via the following DNS query for SRV records:
_ldap._tcp.dc._msdcs.domain
.
If set to 1, the thin client will attempt to set the time zone via
DHCP. To properly set the time zone via this registry key, ensure that the DHCP server for the thin client forwards the tcode DHCP tag (which is usually tag 101, although 100 and 2 can work also).
If set to 1, the use of NTP time servers to synchronize the thin client clock is enabled. If this is enabled, ensure that an NTP server is specified via DHCP or via NTPServers .
touchscreen
Registry key root/touchscreen/beep root/touchscreen/calibrated root/touchscreen/enabled root/touchscreen/maxx root/touchscreen/maxy root/touchscreen/minx root/touchscreen/miny root/touchscreen/port root/touchscreen/swapx root/touchscreen/swapy root/touchscreen/type
Description
Defines whether the thin client beeps when the touch screen is used.
This registry key is either used internally or reserved for future use. The value should not be changed.
If set to 1, touch input is enabled.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Specifies the port that is connected to the touch screen.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Specifies the controller type of the touch screen.
translation
Registry key Description root/translation/coreSettings/localeMapping/
<LanguageCode>
These are internal keys used to provide the text string next to the appropriate language on the language selector. These keys should not need to be modified.
root/translation/coreSettings/localeSettings Sets the locale for the thin client. This locale will also be forwarded to the remote connection. Valid locales are en_US touchscreen 161
Registry key root/translation/gui/LocaleManager/name root/translation/gui/LocaleManager/status root/translation/gui/LocaleManager/title root/translation/gui/LocaleManager/widgets/ localeSettings
Description
(English), de_DE (German), es_ES (Spanish), fr_FR (French), ru_RU (Russian), ja_JP (Japanese), ko_KR (Korean), zh_CN
(Simplified Chinese), and zh_TW (Traditional Chinese).
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the locale setting widget in the Language tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
usb-update
Registry key root/usb-update/authentication root/usb-update/enable root/usb-update/height root/usb-update/searchMaxDepth root/usb-update/width
Description
If set to 1, an administrator password is required to do USB updates.
If set to 1, USB update auto-detection is enabled.
Sets the height of the USB Update window in pixels.
Sets the depth of subdirectories to be searched for updates.
Setting a high search depth can cause delays on USB flash drives that have thousands of directories.
The width of the USB Update window in pixels.
users
Registry key root/users/root/enablePassword root/users/root/password root/users/root/timeout root/users/user/SSO root/users/user/WOL root/users/user/XHostCheck
Description
If enabled, logins to the local root administrator account are enabled. If disabled, only Active Directory administrators can change the thin client to administrator mode.
Sets the administrator password. If empty, administrator mode is locked.
Specifies the idle timeout (in minutes) after which administrator mode will be terminated. If set to 0 or negative, administrator mode will never be automatically terminated.
This registry key is either used internally or reserved for future use. The value should not be changed.
If set to 1, Wake On LAN (WOL) is enabled.
If set to 1, only the systems listed under root/users/user/ xhosts are allowed to remotely control the thin client.
162 Appendix D Registry keys
Registry key root/users/user/apps/hptc-control-panel/ authorized
Description root/users/user/apps/hptc-ad-change-password/ authorized root/users/user/apps/hptc-ad-mgr/authorized root/users/user/apps/hptc-agent-mgr/ authorized root/users/user/apps/hptc-component-mgr/ authorized root/users/user/apps/hptc-config-wizard/ authorized root/users/user/apps/hptc-connection-wizard/ authorized
If set to 1, the Change Domain Password Control Panel item is accessible by end users.
If set to 1, the Active Directory Control Panel item is accessible by end users.
If set to 1, the HPDM Agent Control Panel item is accessible by end users.
root/users/user/apps/hptc-auto-update/ authorized root/users/user/apps/hptc-background-mgr/ authorized
If set to 1, the Automatic Update Control Panel item is accessible by end users.
If set to 1, the Background Manager Control Panel item is accessible by end users.
root/users/user/apps/hptc-cert-mgr/authorized If set to 1, the Certificate Manager Control Panel item is accessible by end users.
root/users/user/apps/hptc-compatibility/ authorized
If set to 1, the Compatibility Check Control Panel item is accessible by end users.
If set to 1, the Component Manager Control Panel item is accessible by end users.
If set to 1, the Initial Setup Wizard Start menu item is accessible by end users.
If set to 1, Create a Connection is accessible by end users.
If set to 1, Control Panel is accessible by end users.
root/users/user/apps/hptc-date-mgr/authorized If set to 1, the Date and Time Control Panel item is accessible by end users.
root/users/user/apps/hptc-dhcp-mgr/authorized If set to 1, the DHCP Options Control Panel item is accessible by end users.
root/users/user/apps/hptc-display-prefs/ authorized root/users/user/apps/hptc-easy-update/ authorized
If set to 1, the Display Control Panel item is accessible by end users.
If set to 1, the Easy Update Control Panel item is accessible by end users.
root/users/user/apps/hptc-factory-reset/ authorized root/users/user/apps/hptc-firewalld-mgr/ authorized
If set to 1, the Factory Reset Control Panel item is accessible by end users.
If set to 1, the Firewall Manager Control Panel item is accessible by end users.
root/users/user/apps/hptc-i18n-mgr/authorized If set to 1, the Language Control Panel item is accessible by end users.
root/users/user/apps/hptc-ibus-mgr/authorized If set to 1, the Ibus Input Method Control Panel item is accessible by end users.
root/users/user/apps/hptc-imprivata-mgr/ authorized root/users/user/apps/hptc-keyboard-layout/ authorized
If set to 1, the Imprivata Setup Control Panel item is accessible by end users.
If set to 1, the Keyboard Layout Control Panel item is accessible by end users.
root/users/user/apps/hptc-kiosk/authorized If set to 1, Connection Manager is accessible by end users.
root/users/user/apps/hptc-licenses/authorized If set to 1, HP License Agreement is accessible by end users.
users 163
Registry key root/users/user/apps/hptc-mixer/authorized root/users/user/apps/hptc-mouse/authorized root/users/user/apps/hptc-network-mgr/ authorized root/users/user/apps/hptc-power-mgr/ authorized
Description
If set to 1, the Sound Control Panel item is accessible by end users.
If set to 1, the Mouse Control Panel item is accessible by end users.
If set to 1, the Network Manager Control Panel item is accessible by end users.
If set to 1, the Power Manager Control Panel item is accessible by end users.
If set to 1, the Printers Control Panel item is accessible by end users.
If set to 1, Registry Editor is accessible by end users.
root/users/user/apps/hptc-printer-mgr/ authorized root/users/user/apps/hptc-regeditor/ authorized root/users/user/apps/hptc-restore/authorized If set to 1, the Snapshots Control Panel item is accessible by end users.
root/users/user/apps/hptc-scep-mgr/authorized If set to 1, the SCEP Manager Control Panel item is accessible by end users.
root/users/user/apps/hptc-security/authorized If set to 1, the Security Control Panel item is accessible by end users.
root/users/user/apps/hptc-serial-mgr/ authorized root/users/user/apps/hptc-shortcut-mgr/ authorized
If set to 1, the Serial Manager Control Panel item is accessible by end users.
If set to 1, the Keyboard Shortcuts Control Panel item is accessible by end users.
root/users/user/apps/hptc-snipping-tool/ authorized
If set to 1, the Snipping Tool Start menu item is accessible by end users.
root/users/user/apps/hptc-sshd-mgr/authorized If set to 1, the SSHD Manager Control Panel item is accessible by end users.
root/users/user/apps/hptc-switch-admin/ authorized
If set to 1, Switch to Administrator/User is accessible by end users.
root/users/user/apps/hptc-sysinfo/authorized If set to 1, System Information is accessible by end users.
root/users/user/apps/hptc-task-mgr/authorized If set to 1, the Task Manager Start menu item is accessible by end users.
root/users/user/apps/hptc-text-editor/ authorized
If set to 1, the Text Editor Start menu item is accessible by end users.
root/users/user/apps/hptc-thinstate/ authorized root/users/user/apps/hptc-touchscreen/ authorized
If set to 1, theThinState Control Panel item is accessible by end users.
If set to 1, the Touch Screen Control Panel item is accessible by end users.
root/users/user/apps/hptc-update/authorized If set to 1, Check for Updates is accessible by end users.
root/users/user/apps/hptc-usb-mgr/authorized If set to 1, the USB Manager Control Panel item is accessible by end users.
root/users/user/apps/hptc-user-rights/ authorized root/users/user/apps/hptc-vncshadow/ authorized
If set to 1, the Customization Center Control Panel item is accessible by end users.
If set to 1, the VNC Shadow Control Panel item is accessible by end users.
164 Appendix D Registry keys
Registry key Description root/users/user/apps/hptc-wlsstat/authorized If set to 1, Wireless Statistics is accessible by end users.
root/users/user/apps/hptc-xen-general-mgr/ authorized
If set to 1, the Citrix general settings are accessible by end users.
root/users/user/apps/hptc-xterm/authorized root/users/user/desktopScaling root/users/user/enablePassword root/users/user/hideDesktopPanel root/users/user/kioskMode root/users/user/launchConnectionManager root/users/user/rightclick root/users/user/ssoconnectiontype root/users/user/switchAdmin root/users/user/theme root/users/user/xhosts/<UUID>/xhost
If set to 1, X Terminal is accessible by end users.
CAUTION: Enabling X terminal access is a security risk and is not recommended in a production environment. The X terminal should only be enabled for use in debugging a protected, nonproduction environment.
Specifies the percentage to increase or decrease the size of desktop elements. If set to 100 (default), standard scaling is used.
If set to 50, half the size of standard scaling is used. If set to 200, double the size of standard scaling is used.
If enabled, logins to the local shared account user are enabled.
If set to 1, desktop panels such as the taskbar are not started or shown in the desktop.
This registry key is either used internally or reserved for future use. The value should not be changed.
If set to 1, Connection Manager launches at system startup.
If set to 1, the right-click menu for the desktop is enabled.
This registry key is either used internally or reserved for future use. The value should not be changed.
If set to 1, switching to administrator mode is enabled.
Reserved for future use.
Specifies the IP address or hostname of a system that will be allowed to remotely control the thin client when XHostCheck is enabled.
vncserver
Registry key root/vncserver/coreSettings/enableVncShadow root/vncserver/coreSettings/ userNotificationMessage root/vncserver/coreSettings/ vncAllowLoopbackOnly
Description
If set to 1, the VNC shadowing server for the thin client is enabled.
Sets the notification message that is shown to the user when someone is attempting to connect to the thin client using VNC.
If set to 1, only a localhost or loopback address is allowed for VNC connections.
root/vncserver/coreSettings/ vncDefaultNumLockStatus root/vncserver/coreSettings/ vncNotifyShowTimeout
If set to 1, Num Lock is on by default. If set to 0, Num Lock is off by default.
If set to 1, a timeout is applied to the notification dialog that is shown to the user when someone is attempting to connect to the thin client using VNC.
root/vncserver/coreSettings/vncNotifyTimeout Sets the timeout in seconds for the notification dialog that is shown to the user when someone is attempting to connect to the thin client using VNC.
vncserver 165
Registry key root/vncserver/coreSettings/vncNotifyUser root/vncserver/coreSettings/vncPassword root/vncserver/coreSettings/vncReadOnly root/vncserver/coreSettings/ vncRefuseInDefault root/vncserver/coreSettings/vncStopButton root/vncserver/coreSettings/ vncTakeEffectRightNow root/vncserver/coreSettings/vncUseHTTP root/vncserver/coreSettings/vncUsePassword root/vncserver/coreSettings/vncUseSSL root/vncserver/gui/VNCShadowManager/name root/vncserver/gui/VNCShadowManager/status root/vncserver/gui/VNCShadowManager/title root/vncserver/gui/VNCShadowManager/widgets/ enableVncShadow root/vncserver/gui/VNCShadowManager/widgets/ userNotificationMessage root/vncserver/gui/vncAllowLoopbackOnly root/vncserver/gui/VNCShadowManager/widgets/ vncNotifyShowTimeout root/vncserver/gui/VNCShadowManager/widgets/ vncNotifyTimeout root/vncserver/gui/VNCShadowManager/widgets/ vncNotifyUser
Description
If set to 1, a notification is shown to the user when someone is attempting to connect to the thin client using VNC.
Sets the password for VNC shadowing. The key vncUsePassword must also be enabled.
If set to 1, VNC shadowing will operate in view-only mode.
If set to 1, VNC requests are refused automatically if the user does not interact with the notification dialog before the timeout.
If set to 1, an always-on-top button is shown on the left corner of the screen. Selecting that button disconnects the VNC session.
If set to 1, VNC settings take effect immediately after being modified.
If set to 1, HTTP port 5800 is open for VNC connections.
If set to 1, the password specified in vncPassword is required for VNC shadowing.
If set to 1, SSL is used for VNC connections.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
This registry key is either used internally or reserved for future use. The value should not be changed.
Controls the state of the Enable VNC Shadow widget in the VNC
Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the User Notification Message widget in the
VNC Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Allow Loopback Connections Only widget in the VNC Shadow utility. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the VNC Show Timeout for Notification widget in the VNC Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the numerical widget in the VNC Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the VNC Notify User to Allow Refuse widget in the VNC Shadow tool. If set to active , the widget is visible in
166 Appendix D Registry keys
Registry key root/vncserver/gui/VNCShadowManager/widgets/ vncPassword root/vncserver/gui/VNCShadowManager/widgets/ vncReadOnly root/vncserver/gui/VNCShadowManager/widgets/ vncRefuseInDefault root/vncserver/gui/vncStopButton root/vncserver/gui/VNCShadowManager/widgets/ vncTakeEffectRightNow root/vncserver/gui/VNCShadowManager/widgets/ vncUseHTTP root/vncserver/gui/VNCShadowManager/widgets/ vncUsePassword root/vncserver/gui/VNCShadowManager/widgets/ vncUseSSL
Description the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Set Password widget in the VNC Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the VNC Read Only widget in the VNC
Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the Refuse connections in default widget in the VNC Shadow tool. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the VNC Stop Shadow button widget in the
VNC Shadow utility. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the Re-set VNC server right now widget in the VNC Shadow tool. If set to active , the widget is visible in the
UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
Controls the state of the VNC Use HTTP Port 5800 widget in the
VNC Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the VNC Use Password widget in the VNC
Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the readonly state.
Controls the state of the VNC Use SSL widget in the VNC Shadow tool. If set to active , the widget is visible in the UI and the user can interact with it. If set to inactive , the widget is hidden. If set to read-only , the widget is visible in the read-only state.
zero-login
Registry key Description root/zero-login/buttons/configure/authorized If set to 1, the Configure button is available in the login or Smart
Zero credentials dialog box.
root/zero-login/buttons/info/authorized If set to 1, the System Information button is available in the login or Smart Zero credentials dialog box.
zero-login 167
Registry key root/zero-login/buttons/keyboard/authorized root/zero-login/buttons/locale/authorized root/zero-login/buttons/mouse/authorized root/zero-login/buttons/onscreenKeyboard/ authorized root/zero-login/buttons/power/authorized root/zero-login/buttons/poweroff/authorized root/zero-login/buttons/reboot/authorized root/zero-login/buttons/show/authorized root/zero-login/buttons/sleep/authorized root/zero-login/buttons/touchscreen/ authorized
Description
If set to 1, the Keyboard Layout selection is available in the login or Smart Zero credentials dialog box.
If set to 1, the Locale selection is available in the login or Smart
Zero credentials dialog box.
If set to 1, the Mouse selection is available in the login or Smart
Zero credentials dialog box.
If set to 1, the on-screen keyboard option is available in the login or Smart Zero credentials dialog box.
If set to 1, the Power button is available in the login or Smart Zero credentials dialog box.
If set to 1, the Poweroff option is available in the login or Smart
Zero credentials dialog box.
If set to 1, the Reboot option is available in the login or Smart
Zero credentials dialog box.
If set to 1, buttons are displayed in the login or Smart Zero credentials dialog box.
If set to 1, the Sleep option is available in the login or Smart Zero credentials dialog box.
If set to 1, the Touchscreen selection is available in the login or
Smart Zero credentials dialog box.
NOTE: The root/touchscreen/enabled key must also be set.
168 Appendix D Registry keys
Index
A
audio redirection
B
C
certificates
Citrix
client profile
connections
Control Panel
ThinState. See HP ThinState
D
device redirection
display management 60 display profiles 60
E
F
G
GUI
Connection Manager (ThinPro
H
HP Device Manager. See HPDM Agent
See also remote management service
HP Smart Client Services
Profile Editor. See Profile Editor
supported operating systems 64
See also remote management service
I
imaging. See HP ThinState
K
L
M mass storage redirection
MMR. See multimedia redirection
multimedia redirection
N network settings
Index 169
O
P
parallel printer configuration 71
printer redirection
R
RDP
device redirection 25 mass storage redirection 25
multi-monitor sessions 24 multimedia redirection 24
remote management service,
S
serial printer configuration 71
smart card redirection
Smart Zero. See OS configuration
T
170 Index
thin clients updating. See updating thin clients
ThinPro. See OS configuration
ThinState. See HP ThinState
troubleshooting 73 network connectivity 73 using system diagnostics 73
U updating thin clients
DNS alias update 67 manual update 67
USB redirection
V
VMware Horizon View
certificates 33 changing protocols 33
keyboard shortcuts 31 multi-monitor sessions 31
W
Web Browser
webcam redirection
websites
X
Download
Public link updated
The public link to your chat has been updated. You may view and manage your chat links after registration here.
Document public link
Advertisement
Key features
Connection configuration for Citrix, RDP, & VMware Horizon View
Active Directory integration for centralized user management
HP ThinState for simplified image and profile management
Customization options for user experience enhancements
Enhanced security settings for data protection
Frequently asked questions
The guide explains where to find the menu item to switch between administrator and user modes.
The source code for such software can be obtained from ftp://ftp.hp.com/pub/tcdebian/pool/thinpro710/.
The Manageability section describes how to capture an HP ThinPro image to an FTP server using HP ThinState.
The Troubleshooting section provides tips and techniques for resolving network connectivity issues.