Administrator Guide HP ThinPro 7

image1

Administrator Guide

HP ThinPro 7.1

Copyright 2019 HP Development Company, L.P.
Citrix and XenDesktop are trademarks of Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered in the United States Patent and Trademark Office and in other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Microsoft, Windows, Windows Vista, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. UNIX is a registered trademark of The Open Group. VMware and Horizon View are registered trademarks or trademarks of VMware, Inc. in the United States and/or other jurisdictions. AMD and ATI are trademarks of Advanced Micro Devices, Inc. NVIDIA is a registered trademark of NVIDIA Corporation in the U.S. and other countries.

Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and

12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s standard commercial license.

The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

First Edition: April 2019

Document Part Number: L62791–001

Open source software

This product includes software licensed under

an open source software license, such as the

GNU General Public License and the GNU Lesser

General Public License or other open source

license. To the extent HP has an obligation or,

in its sole discretion, chooses to make the

source code for such software available under

the applicable open source software license,

source code for the software can be obtained

from the following location:

ftp://ftp.hp.com/pub/tcdebian/pool/

thinpro710/.

User input syntax key

Text that you must enter into a user interface is indicated by fixed-width font.

 

Item

Description

Text without brackets or braces

Items you must type exactly as shown

<Text inside angle brackets>

A placeholder for a value you must provide; omit the brackets

[Text inside square brackets]

Optional items; omit the brackets

{Text inside braces}

A set of items from which you must choose only one; omit the braces

|

A separator for items from which you must choose only one; omit the vertical bar

Items that can or must repeat; omit the ellipsis

iii

iv User input syntax key

Table of contents

1 Getting started 1

Finding more information 1

Choosing an OS configuration 2

Choosing a remote management service 3

Starting the thin client for the first time 3

Switching between administrator mode and user mode 3

2 ThinPro PC Converter 4

Deployment tool 4

Compatibility check and installation 4

Licensing 5

License types 5

System tray icon 5

Notifications 6

System information 6

Desktop background watermark 6

System update tools 6

Royalty-bearing software 6

Connections 6

3 GUI overview 7

Desktop 7

Taskbar 8

4 Connection configuration 9

Desktop connection management 9

Connection Manager (ThinPro only) 10

Advanced connection settings 10

Kiosk mode 11

5 Connection types 13

Citrix 13

Citrix Connection Manager 13

Connection 13

Configuration 14

General Settings 15

v

Options 15

Local Resources 16

Window 17

Self-Service 17

Firewall 17

Keyboard Shortcuts 18

Session 18

Advanced 19

RDP 19

RDP per-connection settings 19

Network 19

Service 20

Window 20

Options 21

Local Resources 22

Experience 22

Diagnostics 23

Advanced 24

RemoteFX 24

RDP multi-monitor sessions 24

RDP multimedia redirection 24

RDP device redirection 25

RDP USB redirection 25

RDP mass storage redirection 25

RDP printer redirection 26

RDP audio redirection 26

RDP smart card redirection 27

VMware Horizon View 27

VMware Horizon View per-connection settings 27

Network 27

General 27

Security 28

RDP Options 29

RDP Experience 30

Advanced 31

VMware Horizon View multi-monitor sessions 31

VMware Horizon View keyboard shortcuts 31

VMware Horizon View device redirection 32

VMware Horizon View USB redirection 32

VMware Horizon View audio redirection 32

VMware Horizon View smart card redirection 32

vi

VMware Horizon View webcam redirection 33

VMware Horizon View COM port redirection 33

Changing the VMware Horizon View protocol 33

VMware Horizon View HTTPS and certificate management requirements 33

Web Browser 35

Web Browser per-connection settings 35

Configuration 35

Preferences 35

Advanced 35

Additional connection types (ThinPro only) 35

XDMCP 35

Configuration 35

Advanced 36

Secure Shell 36

Configuration 36

Advanced 37

Telnet 37

Configuration 37

Advanced 37

Custom 37

Configuration 37

Advanced 37

6 HP True Graphics 38

Server-side requirements 38

Client-side requirements 38

Client-side configuration 38

Compression settings 38

Window settings 39

Monitor layout and hardware limitations 39

Enabling HP True Graphics for multiple monitors on the HP t420 39

Tips & best practices 40

7 Active Directory integration 41

Login screen 41

Single sign-on 41

Desktop 41

Screen lock 42

Administrator mode 42

Settings and the domain user 42

vii

8 Start menu 43

Connection management 43

Switch to Administrator/Switch to User 43

System Information 43

Control Panel 43

Tools 43

Power 44

Search 44

9 Control Panel 45

System 45

Network settings 45

Wired network settings 46

Wireless network settings 46

DNS settings 48

IPSec rules 49

Configuring VPN settings 49

DHCP options 49

Component Manager 50

Removing components 50

Undoing a change 50

Applying the changes permanently 51

Security 51

Security settings 51

Local Accounts 51

Encryption 52

Options 52

Certificates 53

Certificate Manager 53

SCEP Manager 53

Manageability 53

Active Directory configuration 54

Status tab 54

Options tab 55

HP ThinState 55

Managing an HP ThinPro image 55

Capturing an HP ThinPro image to an FTP server 55

Deploying an HP ThinPro image using FTP or HTTP 56

Capturing an HP ThinPro image to a USB flash drive 56

Deploying an HP ThinPro image with a USB flash drive 56

Managing a client profile 57

viii

Saving a client profile to an FTP server 57

Restoring a client profile using FTP or HTTP 57

Saving a client profile to a USB flash drive 57

Restoring a client profile from a USB flash drive 58

VNC Shadowing 58

Input Devices 59

Hardware 60

Display management 60

Redirecting USB devices 60

Configuring printers 60

Appearance 61

Customization Center 61

10 System Information 63

11 HP Smart Client Services 64

Supported operating systems 64

Prerequisites for HP Smart Client Services 64

Obtaining HP Smart Client Services 64

Viewing the Automatic Update website 65

Creating an Automatic Update profile 65

MAC-address-specific profiles 65

Updating thin clients 66

Using the broadcast update method 66

Using the DHCP tag update method 66

Example of performing DHCP tagging 66

Using the DNS alias update method 67

Using the manual update method 67

Performing a manual update 67

12 Profile Editor 68

Opening Profile Editor 68

Loading a client profile 68

Client profile customization 68

Selecting the platform for a client profile 68

Configuring a default connection for a client profile 69

Modifying the registry settings of a client profile 69

Adding files to a client profile 69

Adding a configuration file to a client profile 69

Adding certificates to a client profile 70

ix

Adding a symbolic link to a client profile 70

Saving the client profile 70

Serial or parallel printer configuration 71

Obtaining the printer settings 71

Setting up printer ports 71

Installing printers on the server 71

13 Troubleshooting 73

Troubleshooting network connectivity 73

Troubleshooting Citrix password expiration 73

Using system diagnostics to troubleshoot 73

Saving system diagnostic data 74

Uncompressing the system diagnostic files 74

Uncompressing the system diagnostic files on Windows-based systems 74

Uncompressing the system diagnostic files in Linux- or Unix-based systems 74

Viewing the system diagnostic files 74

Viewing files in the Commands folder 74

Viewing files in the /var/log folder 75

Viewing files in the /etc folder 75

Appendix A USB updates 76

HP ThinUpdate 76

Appendix B BIOS tools (desktop thin clients only) 77

BIOS settings tool 77

BIOS flashing tool 77

Appendix C Resizing the flash drive partition 78

Appendix D Registry keys 79

Audio 79

CertMgr 80

ComponentMgr 80

ConnectionManager 80

ConnectionType 81

custom 81

firefox 84

freerdp 88

ssh 97

telnet 102

x

view 106

xdmcp 114

xen 118

DHCP 131

Dashboard 131

Imprivata 132

InputMethod 132

Network 132

Power 142

ScepMgr 144

Search 145

Serial 145

SystemInfo 145

TaskMgr 146

USB 146

auto-update 147

background 149

boot 150

config-wizard 150

desktop 150

domain 152

entries 153

firewall 153

hwh264 153

keyboard 154

license 155

logging 155

login 155

mouse 156

restore-points 156

screensaver 157

security 158

shutdown 159

sshd 159

time 160

touchscreen 161

translation 161

usb-update 162

users 162

vncserver 165

zero-login 167

xi

Index 169

xii

Getting started
This guide is for administrators of HP thin clients based on the HP ThinPro operating system and assumes that you will log in to the system as an administrator when modifying system configurations or using administrative tools as described in this guide.

 

NOTE: HP ThinPro has two possible OS configurations: ThinPro and Smart Zero. HP ThinPro-based thin clients can be purchased with either OS configuration as the default, and you can switch between OS configurations via Control Panel.

 

For more information about each OS configuration, see Choosing an OS configuration on page 2. For more information about switching between OS configurations, see Customization Center on page 61.

 

Finding more information

 

NOTE: Information at websites listed in this table might be available in English only.

 

Resource

Contents

HP support website

Administrator guides, hardware reference guides, white papers, and other

http://www.hp.com/support

documentation

▲ Search for the thin client model, and then see the User Guides section of

the support page for that model.

NOTE: HP Device Manager and HP Remote Graphics Software each have a

dedicated support page, so search for the app name instead, and then see

the User Guides section.

Microsoft support website

Documentation for Microsoft software

http://support.microsoft.com

Citrix support website

Documentation for Citrix software

http://www.citrix.com/support

VMware support website

Documentation for VMware software

http://www.vmware.com/support

Finding more information 1

Choosing an OS configuration

HP ThinPro includes two OS configurations, each tailored for a different thin client deployment scenario:

The ThinPro OS configuration is the complete version of the operating system and is the most suitable for multipurpose environments that require advanced administration or end-user customization. Features of this OS configuration include the following:
–Boots to the ThinPro desktop or Active Directory login screen

–Has more connection types than Smart Zero

–Allows multiple connections (of any supported type) to be configured and run simultaneously

The Smart Zero OS configuration is a simpler, more secure version of the operating system and is the most suitable for single-purpose, kiosk-style environments that require minimal administration and little to no end-user customization. Features of this OS configuration include the following:
–Boots directly to a virtual session and hides the desktop, a feature also known as “kiosk mode”

–Has fewer connection types than ThinPro

–Supports only one connection to be configured and run at a time

–Does not support Active Directory authentication or single sign-on

 

NOTE: You can switch between OS configurations via Control Panel (see Customization Center on page 61).

 

You can also customize some of the default settings of each OS configuration; for example, to change which connection types are available, enable kiosk mode for ThinPro, or boot to the desktop for Smart Zero.

For more information about kiosk mode, see Kiosk mode on page 11.

 

The following table lists the default available connection types for each OS configuration.

 

OS configuration

Default available connection types

ThinPro

Citrix®

RDP

VMware® Horizon® View™

Web Browser (Firefox)

XDMCP

Secure Shell

Telnet

Custom

Smart Zero

Citrix

RDP

VMware Horizon View

Web Browser (Firefox)

Chapter 1 Getting started
Choosing a remote management service

Regardless of the OS configuration, there are two different remote management services that you can use to manage HP ThinPro-based thin clients:

HP Device Manager (HPDM) is ideal for large environments with a variety of operating systems, including a mixture of HP ThinPro-based and Windows®-based thin clients. HPDM provides a greater variety of management options than HP Smart Client Services. For more information or to download HPDM, go to http://www.hp.com/go/hpdm.
HP Smart Client Services can manage HP ThinPro-based thin clients only and is optimized for use with Smart Zero and a “zero management” scenario. For more information, see HP Smart Client Services on page 64. For information on how to download HP Smart Client Services, see Obtaining HP Smart Client Services on page 64.
HP recommends evaluating both services and choosing the one that is best for your deployment.

Starting the thin client for the first time

When you first start a new HP ThinPro-based thin client, a setup program runs automatically. The Initial Setup Wizard allows you to select a language, select the keyboard mapping, select a network connection, and configure the date and time settings.

 

TIP: If you want to modify the configuration of a single thin client and then copy and deploy the configuration to other thin clients, first use the Initial Setup Wizard and the Control Panel to modify the configuration, and then deploy the configuration using HPDM or HP ThinState. For more information, see GUI overview on page 7 or Control Panel on page 45. For more information about HP ThinState, see HP ThinState on page 55.

 

Switching between administrator mode and user mode

Right-click the desktop or select Start, and then select Switch to Administrator from the menu. For more information about the desktop, see Desktop on page 7.
For more information about Control Panel, see Taskbar on page 8 and Control Panel on page 45.

 

NOTE: The first time you switch to administrator mode, you are prompted to set up an administrator password. The administrator password must be entered every subsequent time you switch to administrator mode. When Active Directory authentication is enabled, you can also switch to administrator mode by entering the domain credentials of a person in the domain admin group.

 

When in administrator mode, the screen is surrounded by a red border.

 

Choosing a remote management service 3

ThinPro PC Converter
Starting with ThinPro 7.1, ThinPro can be used on hardware other than HP Thin Clients by using HP ThinPro PC Converter Deployment Tool. The system must meet these minimum requirements:

CPU: Any 64-bit x86 CPU.
Memory: 2GB of memory, with at least 1GB free for operating system use.
Storage: 2GB or more of internal storage for installation.
Graphics: Intel, ATI/AMD, or Nvidia. If the graphics card is not recognized, limited-performance VESA mode can be used.
Audio: Audio support is optional.
Networking: A recognized wired or wireless network adapter.
USB: HP recommends 2.0 or 3.0 or USB-C high-performance flash drives.
Licensing: The ThinPro software must be properly licensed.
The first time that a system boots with ThinPro, a compatibility check window appears showing the compatibility status of the system of each of these requirements.

Deployment tool

HP ThinPro PC Converter Deployment Tool allows you to run ThinPro on a PC that runs Microsoft Windows and that meets the minimum requirements. This tool allows for the creation of a USB flash drive containing the ThinPro image. You can boot and run the ThinPro image from the created USB flash drive or you can install the ThinPro image directly onto the PC. You also have the option of creating a mass-deployment image deployable by remote management tools.

For more details, see the HP ThinPro PC Converter Deployment Tool Administrator Guide.

Compatibility check and installation

The first time that ThinPro is booted from a USB flash drive, the Compatibility Check window appears. The Compatibility Check tool assesses the hardware on the system to see if it meets the minimum requirements and whether the ThinPro software has recognized the device and assigned a device driver. If the system does not meet minimum requirements, or if required hardware is not found, the Compatibility Check tool will display a warning and additional information.

 

NOTE: The Compatibility Check tool does only a cursory examination of the hardware and driver state. It does not perform detailed functionality checks such as sending network packets, playing audio files, testing for bad blocks of memory, or evaluating performance. HP cannot guarantee that all hardware components in the PC will work well with ThinPro, even if the Compatibility Check tool determines that the PC is compatible.

 

If ThinPro is running from a USB flash drive, and if the Compatibility Check passes all the required checks, two buttons appear at the bottom of the window. The first button allows the ThinPro software to be installed directly onto internal storage. The second button allows you to run ThinPro from the USB flash drive without direct installation onto the PC.

Chapter 2 ThinPro PC Converter
NOTE: The installation button will only appear with a USB flash drive created with the Installer Flash Drive option of the Deployment Tool. The Bootable Flash Drive option does not allow installation.

 

When installing ThinPro onto the PC, you have the option of saving the settings that were configured while running ThinPro from the USB flash drive. If the settings are not saved, the default factory image of ThinPro will be installed.

The Compatibility Check tool can also be started manually from the administrator tools list under the start button.

Licensing

Supported HP Thin Clients are auto-licensed and do not need license files. If a system is auto-licensed, many of the licensing information sources listed below will not be visible.

All other systems need valid license files to run ThinPro. License files are obtained from the HP Inc. Software Depot.

The Deployment Tool prompts you to browse to valid license files. The files you select will be automatically copied when you create a bootable and installer ThinPro USB flash drive, and also when you create a mass-deployment image.

If the Deployment Tool and valid licenses are used to install ThinPro onto a device, there is no need to manually install license files. However, if you install ThinPro through some other means, you might have to copy license files to the /persistent/licenses directory on the device. You can use HP Device Manager (or some other mechanism) to perform this deployment.

License types

There are three types of license files:

A Trial License allows you to run ThinPro for a short time without paying any licensing fees.
A Unit License allows you to run a particular version of ThinPro indefinitely. It also denotes that royalty fees have been paid, and it unlocks any royalty-bearing software.
A Support License gives access to system patches and enhancements and allows the system to be upgraded to newer versions of ThinPro.
Depending on the combination of licenses present on the system, various features will be made visible, hidden, or disabled.

System tray icon

A system tray icon indicates the licensing state of the system.

 

Icon Description

 

Valid license.

 

License near expiration.

 

Invalid license (such as an expired trial license).

 

Licensing 5

Hovering over the systray icon gives information about active licenses found on the system. A right-click will launch the System Info app with the License tab selected.

Notifications

Notifications might pop up above the system tray icon periodically.

Courtesy notifications warn when a support license or a trial license is approaching expiration. You can disable courtesy notifications through certain registry settings. See Registry keys on page 79 for more information.

Other notifications warn of licensing errors such as expired, missing, or invalid license files. You cannot disable these types of notifications.

System information

The Software License Tab of the System Information application shows both the overall licensing state of the system and details on each license file found on the system, including start and end dates, license count, license serial number, and other information.

Desktop background watermark

Watermark text is displayed on the desktop background with a trial license or with an expired or invalid combination of licenses. You cannot disable this watermark text.

System update tools

If a system is not auto-licensed and it does not have an active support license, the patches and upgrades shown by Easy Update and other system-update tools will be limited.

Royalty-bearing software

Some software used by ThinPro has royalties attached. An example is any feature using H.264 video decoding. If the system is not auto-licensed and no valid unit license is found on the system, royalty-bearing software will be disabled. Trial licenses do not enable royalty-bearing software.

Connections

If no valid license combination is found on the system, the ability to create remote connections to other systems might be limited or disabled.

Chapter 2 ThinPro PC Converter
GUI overview
Desktop

 

NOTE: The following image demonstrates the desktop for ThinPro with a U.S. locale setting. For Smart Zero, the taskbar is vertical and right-aligned by default, and the desktop theme varies by connection type. The display format of some taskbar information varies by locale setting.

 

Item

Description

(1)

Desktop

In ThinPro, you can arrange connection shortcuts in the desktop area and customize

the background theme.

In Smart Zero, the desktop is replaced by a customizable login screen with a theme

specific to the chosen connection type.

(2)

Connection shortcuts

Double-click a connection shortcut to launch a connection. Right-click the icon to

display a menu of actions related to the current connection and select to drag the

icon to a new location.

(3)

Taskbar

Provides quick access to programs and system functions (see Taskbar on page 8

for more information).

Desktop 7

Taskbar

 

NOTE: The following image demonstrates the taskbar for ThinPro with a U.S. locale setting. For Smart Zero, the taskbar is vertical and right-aligned by default. The display format of some taskbar information varies by locale setting.

 

Item

Description

(1)

Start

Displays a main menu. For more information, see Start menu on page 43.

(2)

Application area

Displays the icons for the currently open applications.

TIP: You can hold down Ctrl+Alt and then press Tab repeatedly to select an

application to bring to the foreground.

(3)

System tray

Provides quick access to or provides information about certain functions and

services.

Place the cursor over a system tray item to display a tool-tip (select items only).

Select to start a configuration action, and right-click to display a menu.

Items in the system tray can include the following, but some items might not appear

depending on the system configuration:

Audio mixer

Keyboard: Select this icon to change the keyboard layout, open the virtual

keyboard, or change the system layout. Right-click to open the virtual

keyboard. To display the name of the current keyboard layout, hover over the

icon.

Wired network status: Right-click this icon to display more information about a

connected network.

Wireless network status: Select this icon to see a list of available wireless

networks and connect to one by creating a wireless profile for that network.

Automatic Update status: The Automatic Update icon is displayed when

Automatic Update is checking for updates or updating the computer. To view

more information, select the icon. If ThinPro cannot find a valid automatic-

update server or if the registry key to display the icon is disabled, the icon is

not displayed.

Intelligent Input Bus (Ibus): Ibus is an input method (IM) framework for

multilingual input in Unix-like operating systems.

Battery icon: To open Power Manager, right-click this icon and select Adjust

Power Settings.

User icon: Indicates that Active Directory authentication is enabled. Select to

lock the screen or update the domain password. To display the current user,

hover over the icon.

License icon: Indicates the state of ThinPro Licensing. Hover over the icon to

see details on the currently-active licenses and right-click to go to the System

Info page to see more licensing detail. This is not visible on current HP thin

clients, as they are auto-licensed.

(4)

Date and time

Displays the current date and time and opens the date and time settings.

Chapter 3 GUI overview
Connection configuration
Desktop connection management

Connection management can be done directly from the desktop as well as through the legacy Connection Manager (see Connection Manager (ThinPro only) on page 10) or the Start menu. By default, the desktop displays an icon as a shortcut for each configured connection.

When you first start the computer, several sample connection icons are displayed on the desktop. You can create a new, generic connection shortcut for any of the connection types supported by ThinPro.

To create a new connection shortcut, right-click the desktop, and then select Create.
All icons are automatically placed into a grid. You can click and drag an icon to any other grid position on the desktop. After an icon has been moved to a grid position, it is pinned in that position. It stays in that position even if other connection shortcuts are added, deleted, or rearranged.

Any icons not pinned to a grid position are floating. They might be automatically moved when connection shortcuts are added, deleted, or rearranged. To change a pinned icon to a floating icon, right-click the icon and clear Pin Position.

You can start, stop, edit, copy, rename, or delete each connection. If user editing is not enabled, non-administrator users can only start or stop a connection.

To manage a connection on the desktop, right-click the connection icon, and then select an action.

NOTE: If user editing is not enabled, you must switch to administrator mode to manage a connection.

 

Start/Stop: Starts a connection or stops an active connection. You can also double-click the connection icon. When the connection is active, a green circle is displayed on the connection icon, and the connection icon is displayed in the taskbar. When a connection starts, if any connection parameters are missing, a dialog box asks for the missing parameters. For example, because none of the starting icons have a remote server defined, a dialog box asks for the address or name of the remote server when the connection is started.
Edit: Opens the complete connection editor.
Copy: Creates a copy of the connection with all the parameters of the original connection and a unique name.
Rename: Allows you to rename the connection. You can also double-click the text beneath the connection icon or use the connection editor.
Delete: Deletes the connection.
Desktop connection management 9

Connection Manager (ThinPro only)

 

NOTE: HP recommends using the connection shortcuts. However, you can use the legacy Connection Manager interface.

 

The following image demonstrates Connection Manager with a U.S. locale setting.

 

Item

Description

(1)

Connection list

Lists the configured connections and whether each connection is active or inactive.

(2)

Start

Starts the selected connection.

(3)

Stop

Stops the selected connection.

(4)

Edit

Lets you edit the selected connection.

(5)

Delete

Deletes the selected connection.

(6)

Add

Lets you add a new connection.

NOTE: See Choosing an OS configuration on page 2 for a list of the available

connection types.

(7)

Settings

Lets you edit general settings for Citrix connections. These settings apply to all

connections of that type.

To open Connection Manager:

In administrator mode, select Start, and then type Connection Manager in the search box.
Select Connection Manager.
For more information about configuring connections, see the following:

Connection configuration on page 9
Connection types on page 13
Advanced connection settings

The following table describes the settings that are available under the Advanced category when editing a connection of any connection type.

10 Chapter 4 Connection configuration

NOTE: These settings affect the connection you are currently configuring only.

 

Option

Description

Fallback Connection

Specifies the fallback connection. If the connection fails to start, the fallback

connection will attempt to start instead.

NOTE: This option is not available for the VMware Horizon View connection

type.

Auto start priority

Determines the order that connections will auto-start. 0 means auto-start is

disabled. The other values determine the startup order, with 1 being the highest

priority.

Share credentials with screensaver

Enables users to unlock the local screen saver using their credentials for that

connection.

NOTE:

This option is only available for the Citrix, RDP, and VMware Horizon

View connection types.

Auto reconnect

If enabled, this connection will attempt to auto-reconnect if the connection is

dropped.

NOTE: Stopping a connection via Connection Manager will prevent an auto-

reconnection.

Wait for network before connecting

Disable this option if your connection doesn’t need the network to start or if you

don’t want to wait for network to start the connection.

Show icon on desktop

If enabled, a desktop icon is created for this connection. This option is enabled

by default.

If disabled, the connection is not visible on the desktop, but is visible in the Start

menu and Connection Manager.

Allow the user to launch this connection

If enabled, this connection can be launched by an end user.

Allow the user to edit this connection

If enabled, this connection can be modified by an end user.

Login dialog options

Enable or disable these options to configure the login dialog for the connection.

NOTE:

This option is only available for the Citrix, RDP, and VMware Horizon

View connection types.

The following options are available:

Show server field

Show username field

Show password field

Show domain field

Show ‘remember me’ checkbox

NOTE: This option saves the user name and domain, but the password

still needs to be entered each time.

Kiosk mode

When a thin client is configured for kiosk mode, it performs an automatic login to the default connection on startup using predefined user credentials. If the connection is ever lost due to a logout, disconnect, or network failure, it reconnects automatically as soon as it can be restored.

Kiosk mode 11

TIP: The remote host can be configured to start resources automatically upon login, making the kiosk mode experience seamless.

 

The easiest way to configure a thin client for kiosk mode is to switch it to Smart Zero (see Customization Center on page 61) and configure a connection. When this is done, the following settings are set automatically:

The taskbar auto-hides.
The connection auto-starts.
The connection auto-reconnects.
The connection shares the user credentials with the local screen saver.
The desktop theme is set to that connection type’s default theme.
The USB redirection protocol in USB Manager is set to that connection type’s protocol.
If you want to configure a thin client for kiosk mode in ThinPro (for example, if you want to use a connection type available only with ThinPro), manually configure the following settings for the desired connection:

In Customization Center, set the taskbar to Auto hide.
In connection’s settings, do the following:
–Set Auto start priority to 1.

–Enable Auto reconnect.

–Enable Share credentials with screensaver, if available.

–For a Web Browser connection only, select the Enable kiosk mode option.

In USB Manager, set the proper USB redirection protocol, if necessary.

TIP: When in kiosk mode, to minimize the connection and return to the local desktop, press Ctrl+Alt+End.

 

12 Chapter 4 Connection configuration

Connection types
Citrix

The following table describes the supported Citrix XenApp backends.

 

Access type

XenApp version

PNAgent (legacy)

7.6 LTSR and 7.15 LTSR and 7.16 or later

Web browser

7.6 LTSR and 7.15 LTSR and 7.16 or later

StoreFront

7.6 LTSR and 7.15 LTSR and 7.16 or later

Workspace

7.6 LTSR and 7.15 LTSR and 7.16 or later

The following table describes the supported Citrix XenDesktop® backends.

 

Access type

XenApp version

PNAgent (legacy)

7.6 LTSR and 7.15 LTSR and 7.16 or later

Web browser

7.6 LTSR and 7.15 LTSR and 7.16 or later

StoreFront

7.6 LTSR and 7.15 LTSR and 7.16 or later

Workspace

7.6 LTSR and 7.15 LTSR and 7.16 or later

Citrix Connection Manager

 

NOTE: Connection, configuration, and advanced settings affect only the connection you are currently configuring. General settings affect all Citrix connections.

 

Connection

The following table describes the settings that are available under the Connection category when editing a Citrix connection.

 

Option

Description

Name

The connection name.

Connection Mode

Sets the connection mode to one of the following:

PNAgent

StoreFront

Workspace

NOTE: Authentication options are displayed following this option and vary depending on the connection mode you selected. See Citrix documentation for more information.

NOTE: You can test the connection settings by selecting the Test connection button.

 

Citrix 13

Option

Description

URL

The Citrix server hostname or IP address. If you are configuring a connection to a server

on an HTTPS site, enter the FQDN for the site and the local root certificate in the Citrix

certificate store.

The check box next to this option forces an HTTPS connection, if selected.

Ignore Certificate Check

Bypasses the verification of the Citrix server’s certificate.

NOTE: Workspace mode cannot ignore certificate check.

Credentials

Sets the authentication mode to one of the following:

Anonymous login: For StoreFront servers that allow unauthenticated (anonymous)

users.

Use Single Sign-On credentials: The credentials used at login are also used to start

the connection.

Ask for credentials at connection start: There are no pre-supplied credential

components.

Use predefined user, password, and/or domain: Some or all of the credentials are

stored and supplied for the connection.

Use predefined smart card: The connection is expected to be used with a smart

card for authentication.

User

The username for this connection.

Password

The password for this connection.

Domain

The domain name for this connection (optional).

Test connection

Checks the URL and the credentials.

 

Configuration

The following table describes the settings that are available under the Configuration category when editing a Citrix connection.

 

Option

Description

Auto Reconnect Applications on Login

With this option selected, resources that were open when the user last logged out will be

reopened when they log in again.

TIP:

If not using the Citrix SmoothRoaming feature, disable this option to increase your

connection speed.

Autostart mode

Lets you set a specific application or desktop to start automatically when the Citrix

connection begins. If set to Auto Start Single Resource, and if there is a single published

resource, that resource starts automatically.

NOTE:

This option has no effect if Auto Reconnect Applications on Login is selected

and there are applications to reconnect to.

If you have selected Auto Start Application or Auto Start Desktop, select the Enumeration button to retrieve a list of resources (applications or desktops) and display them in Citrix Connection Manager, which enables you to select resources to start automatically upon connection.

If you have selected Auto Start Single Resource, select the Enumeration button to retrieve the number of resources. If there is only one resource, it is started automatically upon connection.

 

14 Chapter 5 Connection types

Option

Description

Show resources

With this option selected, you must then select where to display the resources:

In a window: Displays resources in a window.

Directly on desktop: Displays resources on the desktop.

Show resources in the Start Menu

With this option selected, remote resources from the connection are shown in the Start

menu.

Show only subscribed resources

If selected, only subscribed resources are shown during a Citrix connection.

NOTE: This option is not supported when you use Citrix Self-Service UI.

 

General Settings

 

NOTE: These settings affect all Citrix connections.

 

To edit the general settings:

In Citrix Connection Manager, select the General Settings tab, and then select Xen Connection General Settings Manager.
Options

The following table describes the settings that are available under the Options category when editing the Citrix general settings.

 

Option

Description

Enable HDX MediaStream

Enables HDX MediaStream.

Enable MultiMedia

Enables multimedia.

Enable Connection Bar

Enables the connection bar.

Enable Auto Reconnect

Enable automatic reconnection of dropped connections.

Enable Session Reliability

Enables the Citrix Session Reliability feature. See Citrix documentation for

more information.

Enable Smart Card Channel

Enables the smart card channel feature.

NOTE: If you want to use a smart card in the Citrix session but are not

using a smart card connection, enable this option.

Session Reliability Timeout (seconds)

Specifies the session reliability timeout in seconds. The default is 180

seconds.

Enable Clipboard Redirection

Enables clipboard redirection.

Use Data Compression

Use data compression for this connection.

Enable H264 Compression

Enables H.264 compression. See Citrix documentation to determine if this

method of data compression is best for your use cases.

Enable Middle Button Paste

Enables the middle mouse button paste function.

User Agent String

Specify a User Agent string to be used for requests sent to the Citrix server.

This option is useful for a NetScaler configuration.

Sound

Sets the sound quality or disables sound entirely.

Citrix 15

Option

Description

Transport Protocol

Specifies the transport protocol for the connection and whether to use a

fallback transport protocol.

Off (default): Use TCP.

On: Use UDP and do not fall back to TCP on failure.

Preferred: Try UDP first and fall back to TCP on failure.

Use deprecated cipher suites

Specifies whether the deprecated cipher suites: TLS_RSA, RD4–MD5,

RC4_128_SHA are allowed or not.

 

Local Resources

The following table describes the settings that are available under the Local Resources category when editing the Citrix general settings.

 

Option

Description

Citrix USB Redirection Status

To configure, select USB Manager. See Redirecting USB devices

on page 60.

Enabled: USB redirection is supported for the Citrix connection.

Disabled: USB redirection is disabled for the Citrix connection.

Printers

Controls how local printer redirection is handled.

Webcam/Audio-Input

Controls how local webcam and audio input redirection is handled.

Drive Mapping/Redirection

Specifies the method used to access the local drive.

NOTE: Select only one method of drive redirection.

USB Redirection: Enables USB redirection. For more options, open USB

Manager.

Dynamic Drive Mapping: Enables dynamic drive mapping.

Static Drive Mapping (Legacy): Enables static drive mapping, which

allows you to specify drive mappings to local paths. To specify these

paths, select Configure Mapping Folders.

16 Chapter 5 Connection types

Window

The following table describes the settings that are available under the Window category when editing the Citrix general settings.

 

Option

Description

TWI Mode

Lets you display a single seamless window on the local ThinPro desktop as if

it were a native application.

Default Window Size

When TWI Mode is set to Force Seamless Off, this controls the default

window size.

Default Window Colors

Sets the default color depth.

Left Monitor

When Show the Virtual Desktop on all monitors is disabled, these fields let

Right Monitor

you specify how the virtual desktop is displayed across specific monitors.

Top Monitor

Bottom Monitor

Self-Service

The following table describes the settings that are available under the Self-Service category when editing the Citrix general settings (for Workspace mode only).

 

Option

Description

Option 1 Enable Kiosk Mode

Configure a user device to start up in kiosk mode, in which self-service starts

in full screen mode.

Option 1.1 Show taskbar

Specifies whether the taskbar is displayed or not. Customization Center has

more options to customize taskbar.

Option 1.2 Enable shared user mode

Multiple users could share the device.

Option 2 Disable Citrix Workspace – Preferences

Disable Citrix menu item – Preferences in Self-Service UI.

Option 3 Disable Citrix Connection Center

Disable Citrix menu item – Connection Center in Self-Service UI.

Firewall

The following table describes the settings that are available under the Firewall category when editing the Citrix general settings.

 

Option

Description

Proxy Type

Specifies the proxy type.

Proxy Address

The IP address of the proxy server.

Proxy Port

The port for connection to the proxy server.

Username

The username to use for connection to the proxy server.

Password

The password to use for connection to the proxy server.

Use Alternate Address for Firewall Connection

The Citrix ICA Client will request the alternate address defined for the server

when contacting servers inside the firewall. The alternate address must be

specified for each server in a server farm.

Citrix 17

Keyboard Shortcuts

The following table describes the settings that are available under the Keyboard Shortcuts category when editing the Citrix general settings.

 

Option

Description

Enable UseLocalIM

Uses the local input method to interpret keyboard input. This is supported

only for European languages.

Use EUKS Number

Controls the usage of Extended Unicode Keyboard Support (EUKS) on

Windows servers. Valid options are described below:

0: EUKS is not used.

1: EUKS is used as a fallback.

2: EUKS is used whenever possible.

Keyboard Mapping File

Specifies the keyboard mapping file. Select Auto to allow the file to be

selected automatically. Otherwise, select a specific mapping file.

NOTE: To use your own keyboard mapping file, save it in the

folder: /usr/lib/ICAClient/keyboard/.

Handling of keyboard shortcuts

Specifies how keyboard shortcuts should be handled. The following settings

are available:

Translated: Keyboard shortcuts apply to the local desktop (client

side).

Direct in full screen desktops only: Keyboard shortcuts apply to the

remote desktop (server side), but only for a non-seamless ICA session

in full-screen mode.

Direct: Keyboard shortcuts apply to the remote desktop (server side)

for both seamless and non-seamless ICA sessions when their windows

have the keyboard focus.

Stop Direct key handling

Specifies the key combination that disables Direct handling of keyboard

shortcuts.

Alt+F1 … Alt+F12

Lets you add keyboard shortcuts to be handled.

Session

The following table describes the settings that are available under the Session category when editing the Citrix general settings.

 

Option

Description

Auto Logout Delay Before App Launch

When using a Citrix server with multiple published resources, this specifies

the number of seconds to allow a user to launch an app after login before

the system automatically logs out and returns to the initial login screen.

Auto Logout Delay After App Close

When using a Citrix server with multiple published resources, this specifies

the number of seconds between the closing of the last Xen published

resource and when the user is automatically logged out and returned to the

initial login screen.

Server Check Timeout

To perform a basic connectivity check to the selected server and port, set

this option to a value other than the default –1.

 

TIP: Setting any of these values to less than 0 will disable auto-logout.

18 Chapter 5 Connection types

Option Description

 

NOTE: Citrix processing delays might increase the auto-logout time.

 

Advanced

 

NOTE: See Advanced connection settings on page 10 for information about the settings available under the Advanced category when editing a connection.

 

RDP

The RDP client is based on FreeRDP 1.1 and meets the following requirements for RDP:

Hardware-accelerated RemoteFX
MMR supported when connecting to Windows hosts with the Desktop Experience feature enabled
USBR supported when connecting to RDP servers that enable it
RDP per-connection settings

 

NOTE: These settings affect the connection you are currently configuring only.

 

Network

The following table describes the settings that are available under the Network category when editing an RDP connection.

 

Option

Description

Connection Name

A custom name for this connection.

Server Name/Address

The IP address or server name for this connection, or the RD Web Access feed URL. If

required, the port can be appended to the server after a colon (by default, the port is

3389 for a direct RDP connection).

NOTE: The RD Web Access feed URL must begin with https://. By default, this is

added automatically as specified by the rdWebFeedUrlPattern registry key, which

defines the pattern of the URL.

Credentials

Use Single Sign-On credentials: The credentials used at login are also used to start

the connection.

Ask for credentials at connection start: There are no pre-supplied credential

components.

Use predefined user, password, and/or domain: Some or all of the credentials are

stored and supplied for the connection.

Use predefined smart card: The connection is expected to be used with a smart

card for authentication.

User

The username for this connection.

Password

The password for this connection.

Domain

The domain name for this connection (optional).

RDP 19

Option

Description

Use RD Gateway

Enables additional RD Gateway options, such as the gateway address, port, and

credentials.

Server Probe

Launches the Server Probe, which can be used to determine which RDP features are

supported by your RDP server.

 

Service

The following table describes the settings that are available under the Service category when editing an RDP connection.

 

Option

Description

Service

Sets the RDP service to one of the following:

Remote Computer: When using this service, a direct RDP connection is created to a

remote computer. A remote application or alternate shell can optionally be started

upon connection. The following additional options are available for a Remote

Computer service:

If Mode is set to Remote Application, the Application field specifies the path

of the application to run.

If Mode is set to Alternate Shell, the Command field specifies the command

that executes the application to run in the alternate shell. For example, to run

Microsoft® Word, type Word.exe.

If Mode is set to Alternate Shell, the Directory field specifies the server’s

working directory path for the application’s program files. For example, the

working directory for Microsoft Word is C:\Program Files

\Microsoft.

RD Web Access: When using this service, a list of RemoteApp resources is retrieved

from the server and presented to the user, and the actual RDP connection is started

when a resource is selected. The following additional options are available for RD

Web Access:

Keep resource selection window open: With this option selected, users can

open multiple resources simultaneously from the resource selection window.

Auto-start single resource: With this option selected, and if there is a single

published resource, that resource will start automatically upon connection.

Resource filter and Web Feed Browser: These can be used to limit the remote

resources that will be made available to the user in the resource selection

window.

Auto-disconnect timeout: With this option selected, you can set how long a

Web Access connection can be maintained before it is automatically closed as

a security measure.

NOTE: An advantage of using RD Web Access is that it handles the details of brokered connections and the Load Balance URL automatically.

For more information, see the HP ThinPro white paper RD Web Access Deployment Example (available in English only).

 

Window

The following table describes the settings that are available under the Window category when editing an RDP connection.

20 Chapter 5 Connection types

Option

Description

Hide window decorations

This setting makes sure that screen elements such as the menu bar, minimize and

close options, and borders of the window pane are not displayed.

Window size

Sets the window size to full, fixed, or percent.

Percentage Size

If Window Size is set to percent, this option sets the percentage of the screen that a

desktop window occupies.

NOTE: The resulting sizes might be rounded.

NOTE: RemoteFX supports only a fixed list of resolutions.

Fixed Size

If Window Size is set to fixed, this option sets the width and height in pixels that the

desktop window occupies.

 

Options

The following table describes the settings that are available under the Options category when editing an RDP connection.

 

Option

Description

Enable motion events

If enabled, mouse motions are continuously relayed to the RDP server.

Enable data compression

Enables bulk compression of data between the RDP server and RDP client.

Enable deprecated RDP encryption

Enables last-generation RDP encryption when NLA is not available.

Enable offscreen cache

If enabled, off-screen memory is used to cache bitmaps.

Attach to admin console

Attaches the connection to the administrator console port.

Cross-session copy/paste

If enabled, copy and paste are enabled between different RDP sessions.

Enable buffering of RDP6 primitives

If enabled, non-RemoteFX graphics performance is increased at the cost of less frequent

screen updates.

Enable Progressive RemoteFX Codec

Enables the RemoteFX Progressive Codec, which transmits the desktop in a series of

sharper and sharper images.

NOTE: This codec might cause visual artifacts on desktops with highly dynamic

content, so this codec can be disabled, if necessary.

Enable Multimedia Redirection

Allows multimedia files to be sent directly to the client for local playback.

Certificate verification policy

Select one of the following:

Accept all RDP server certificates

Use remembered hosts; warn if unknown or invalid certificate

Skip remembered hosts; warn if unknown or invalid certificate

Connect only to pre-approved RDP servers

TLS Version

Sets the version of Transport Layer Security to be used during the early stages of

negotiation with the RDP server. Either set this to match the version of TLS used by your

RDP server, or try setting it to auto.

NOTE: There are some server-side defects in some unpatched RDP servers that can

cause the auto setting to fail, so it is not the default setting.

Send hostname as

For per-device licensing, this selects how the client hostname is sent to the RDP server.

Select hostname or mac.

RDP 21

Option

Description

Hostname to send

Normally, the thin client’s hostname is used for Client Access Licenses. This field allows a

different value to be sent.

TIP:

Select the (i) icon next to this option for more information.

Load Balance Info

Use this option with a brokered RDP connection.

TIP:

Select the (i) icon next to this option for more information.

 

NOTE: For more information about the options Enable deprecated RDP encryption and TLS Version, see the HP ThinPro white paper Security Layers for RDP Connections (available in English only).

 

Local Resources

The following table describes the settings that are available under the Local Resources category when editing an RDP connection.

 

NOTE: HP recommends high-level device redirection for all local devices unless there is a specific reason to use USB redirection (USBR) instead. For more information, see the HP ThinPro white paper USB Manager (available in English only).

 

Option

Description

Audio Devices

Determines whether audio devices are redirected by high-level RDP audio redirection,

low-level USB redirection, or disabled for this connection.

Printers

Determines whether printers are redirected by high-level printer redirection (which

requires them to be set up via the Printers tool in Control Panel), low-level USB

redirection, or disabled for this connection.

Serial/Parallel Ports

Determines whether serial and parallel ports are redirected or disabled for this

connection.

USB Storage

Determines whether USB storage devices such as USB flash drives and optical drives are

redirected by high-level storage redirection, low-level USB redirection, or disabled for

this connection.

Local Partitions

Determines whether local partitions of the USB flash drive of the thin client are

redirected or disabled for this connection.

Smart Cards

Determines whether smart cards are redirected by high-level smart card redirection or

disabled for this connection.

NOTE: When the Use predefined smart card setting is enabled, this setting is disabled.

Other USB Devices

Determines whether other classes of USB devices (such as webcams and tablets) are

redirected by low-level USB redirection or disabled for this connection.

Experience

The following table describes the settings that are available under the Experience category when editing an RDP connection.

 

Option

Description

Choose your connection speed to

Selecting a connection speed (LAN, Broadband, or Modem) will enable or disable the

optimize performance

following options to optimize performance:

22 Chapter 5 Connection types

Option

Description

Desktop background

Font smoothing

Desktop composition

Show contents of window while dragging

Menu and window animation

Themes

Selecting Client Preferred Settings allows the RDP client to choose which options to use to

provide the best RDP experience.

You can also select your own custom combination of options.

End-to-End Connection Health

Select to enable the timeout options.

Monitoring

NOTE: For more information, see the HP ThinPro white paper RDP Connection Drop

Detection (available in English only).

Warning Timeout

Specifies the amount of time in seconds after receiving the last network traffic from the

server before the user is warned of a lost connection. This function can be disabled by

clearing the option or setting the time to zero.

With the Show Warning Dialog option selected, a warning dialog will be displayed when this

timeout is reached. Otherwise, the warning is written to the connection log only.

TIP: HP recommends increasing the timeout value for networks that experience frequent

busy periods or momentary outages.

Recovery Timeout

Specifies the amount of time in seconds after receiving the last network traffic from the

server that the RDP client waits for the connection to recover without taking any special

action. At the end of this period, the RDP client attempts a quick reconnection with the

session.

Error Timeout

Specifies the amount of time in seconds after receiving the last network traffic from the

server that the RDP client waits before stopping attempts to reconnect with that server.

 

Diagnostics

The following table describes the settings that are available under the Diagnostics category when editing an RDP connection.

These features diagnose specific problems and are disabled by default.

 

Option

Description

Show RDP dashboard

If enabled, the RDP dashboard is shown during the connection.

TIP:

Select the (i) icon next to this option for more information.

Show Connection Health Graph

With this option enabled, a two-dimensional graph of response time from the RDP

server will be shown when the connection is started.

TIP:

Select the (i) icon next to this option for more information.

USB Redirection Analysis

This feature determines and displays the current redirection method for each redirected

USB device.

TIP:

Select the (i) icon next to this option for more information.

Synchronous X11

Forces frequent flushing of X11 buffers at the cost of performance.

RDP 23

Option

Description

Logging

Enables the X11 logfile. Select the Autoflush option to increase the frequency of log

output at the cost of performance.

Capture

Allows the capture and replay of X11 output from a session.

 

Advanced

 

NOTE: See Advanced connection settings on page 10 for information about the settings available under the Advanced category when editing a connection.

 

RemoteFX

RemoteFX is an advanced graphics display protocol that is designed to replace the graphics component of the traditional RDP protocol. It uses the hardware acceleration capabilities of the server GPU to encode the screen contents via the RemoteFX codec and send screen updates to the RDP client. RemoteFX uses advanced pipelining technologies and adaptive graphics to make sure that it delivers the best possible experience based on content type, CPU and network bandwidth availability, and rendering speed.

RemoteFX is enabled by default. The administrator or user does not have to change any settings to enable it.

The RDP client negotiates with any RDP server it contacts, and if RemoteFX is available, it will be used.

 

NOTE: For more information, see the HP ThinPro white paper Enabling RemoteFX for RDP (available in English only).

 

RDP multi-monitor sessions

True multi-monitor support does not require special configuration. The RDP client automatically identifies which monitor is specified as the primary monitor in the local settings and places the taskbar and desktop icons on that monitor. When a window is maximized within the remote session, the window will only cover the monitor it was maximized on.

Display preferences and monitor resolutions can be viewed but not modified within the remote session. To modify the session resolution, log out of the session and change the resolution on the local thin client.

By default, all RDP sessions will be full-screen and cover all monitors to enhance the virtualization experience. Additional window options are available in the RDP Connection Manager.

 

NOTE: Remote Desktop Virtualization Host (RDVH) sessions with graphics card support might only support certain resolutions and counts of monitors. The limits are specified when the RemoteFX virtual graphics device is configured for the RDVH virtual machine.

 

NOTE: For more information about RDP multi-monitor sessions, see the HP ThinPro white paper True Multi-Monitor Mode for RDP (available in English only).

 

RDP multimedia redirection

Multimedia redirection (MMR) is a technology that integrates with Windows Media Player on the remote host and streams the encoded media to the RDP client instead of playing it on the remote host and re-encoding it via RDP. This technology reduces the server load and network traffic, and greatly improves the multimedia experience, supporting 24 fps playback of 1080p videos with automatic audio syncing. MMR is enabled by default. The RDP client will negotiate with any RDP server it contacts, and if MMR is available, it will be used.

24 Chapter 5 Connection types

MMR also uses an advanced codec detection scheme that identifies whether the thin client supports the codec being requested by the remote host before attempting to redirect it. The result is that only supported codecs will be redirected and all unsupported codecs fall back to server-side rendering.

 

TIP: For simplified management, HP recommends that MMR be enabled or disabled on the remote host.

 

RDP device redirection

Device redirection makes sure that when a user plugs a device into the thin client, the device is automatically detected and accessible in the remote session. RDP supports redirection of many different types of devices.

RDP USB redirection

USB redirection works by transmitting low-level USB protocol calls over the network to the remote host. Any USB device plugged into the local host appears within the remote host as a native USB device, as if it were plugged in locally. Standard Windows drivers support the device in the remote session, and all device types are supported without requiring additional drivers on the thin client.

Not all devices default to USB redirection. For example, USB keyboards, mice, and other input devices usually are not set to be redirected, as the remote session expects input to come from the thin client. Some devices such as mass storage, printers, and audio devices might use additional options for redirection.

Note the following additional information about USB redirection with RDP:

The server must support USB redirection for it to be available to the thin client. General-purpose USB redirection is supported with RDVH servers with RemoteFX, Windows 8, Windows 10, Windows Server 2012, and Windows Server 2016.
The protocol in USB Manager in Control Panel must be set to RDP.
For RDP connections, the controls in USB Manager determine if a USB device is redirected. The settings for the individual connection determine how a USB device is redirected.
RDP mass storage redirection

By default, the RDP session redirects all mass storage devices to the remote host using high-level drive redirection. When a device such as a USB flash drive, USB DVD-ROM drive, or USB external HDD is plugged into the thin client, the thin client detects and mounts the drive on the local file system. RDP then detects a mounted drive and redirects it to the remote host. Within the remote host, it will appear as a new disk drive in Windows Explorer, with the name <device label> on <client hostname>; for example,

Bill_USB on HP04ab598100ff.

There are three restrictions to this type of redirection.

The device will not appear in the taskbar on the remote host with an icon to eject the device. Because of this, make sure to give the device a sufficient amount of time to sync data after a copy before removing the device to be sure that the device does not corrupt. Typically, less than one second is required after the file copy dialog finishes, but up to 10 seconds might be required depending on the device write speed and network latency.
Only file systems supported by the thin client will be mounted. The supported file systems are FAT32, NTFS, ISO9660 (CD-ROMs), UDF (DVD-ROMs), and ext3.
The device will be treated as a directory; common drive tasks like formatting and modification of the disk label will not be available.
USB redirection of storage devices can be disabled in an individual connection’s settings. If desired, you can disable mass storage redirection altogether. To do this, turn off USB redirection, and then change the registry keys as described in the following table.

RDP 25

Registry entry

Value to set

Description

root/USB/root/holdProtocolStatic

1

Makes sure that the USBR type will not be automatically

changed when a connection is set or unset

root/USB/root/protocol

local

Makes sure that the RDP connection does not attempt to

redirect any devices to the remote session

 

To completely disable local mounting of USB mass storage devices or to disable the redirection of USB mass storage devices but still allow other devices to redirect, in the thin client file system, delete the udev rule /etc/udev/rules.d/010_usbdrive.rules.

RDP printer redirection

By default, RDP has two methods of printer redirection enabled:

USB redirection: Any USB printer plugged into the device will show up as a local printer in the remote session. The standard printer installation process must happen in the remote session if the printer is not already installed on that remote host. There are no settings to manage locally.
High-level redirection: If either USB redirection is unavailable on the remote host or the printer is a parallel or serial printer, use high-level redirection. Configure the printer to use a local printer spooler, and the RDP client automatically sets up a remote printer that sends print spooling commands through a virtual channel from the remote host to the thin client.
A generic postscript driver is used if no driver is specified, but additional printer features might be available if the printer is set up locally with a specific Windows driver. This Windows driver must match the driver that the printer would use when locally attached to a Windows operating system. This information is usually found under Model in the printer properties.

 

NOTE: See Serial or parallel printer configuration on page 71 for more information.

 

RDP audio redirection

By default, high-level audio redirection will redirect audio from the remote host to the thin client. Basic voice control might need to be set up, and RDP 7.1 contains a number of advanced audio redirection features that might require additional configuration.

See the following notes about using audio redirection with RDP:

RDP delivers the highest quality audio as the network bandwidth allows. RDP reduces audio quality to play on low-bandwidth connections.
No native audio or video syncing mechanisms are available in standard RDP. Longer videos might not sync with audio. MMR or RemoteFX can resolve this issue.
HP recommends high-level audio redirection, but USB redirection of audio devices is possible if additional functionality is present, such as a digital volume control. Only high-level redirection is available for analog devices.
Microphone redirection is enabled by default. The default microphone volume might need to be adjusted on the thin client. Older Windows RDP servers must have their settings modified to enable audio input.
Both the local and remote volume settings will affect the final volume. HP recommends setting the local volume to a maximum and adjusting the volume within the remote host.
26 Chapter 5 Connection types

RDP smart card redirection

By default, smart cards will be redirected using high-level redirection, allowing them to be used to log in to the session and other remote applications.

To enable smart card login for an RDP connection:

Select Use predefined smart card in the RDP Connection Manager.
This will allow the user to connect without first specifying credentials. The RDP client will start the RDP session, and the user will be prompted to authenticate by smart card.

This technology requires drivers for the smart card reader driver to be installed on the thin client. By default, the CCID and Gemalto drivers are installed, which adds support for the majority of smart card readers available. Additional drivers can be installed by adding them to /usr/lib/pkcs11/.

 

NOTE: When smart card login is enabled, Network Level Authentication is not supported and is automatically disabled.

 

VMware Horizon View

VMware Horizon View per-connection settings

 

NOTE: These settings affect the connection you are currently configuring only.

 

Network

The following table describes the settings that are available under the Network category when editing a VMware Horizon View connection.

 

Option

Description

Name

Enter a name for this connection.

Address

Enter the hostname or IP address of a VMware Horizon View server.

Credentials

Log in anonymously using unauthenticated access

Use Single Sign-On credentials: The credentials used at login are also used to

start the connection.

Ask for credentials at connection start: There are no pre-supplied credential

components.

Use predefined user, password, and/or domain: Some or all of the credentials are

stored and supplied for the connection.

Use predefined smart card: The connection is expected to be used with a smart

card for authentication.

User

Enter the username to use for the connection.

Password

Enter the password to use for the connection.

Domain

Enter the domain to use for the connection.

General

The following table describes the settings that are available under the General category when editing a VMware Horizon View connection.

VMware Horizon View 27

Option

Description

Enable MMR

Enables multimedia redirection for BLAST and PCoIP connections.

NOTE: HP recommends disabling this option.

For connections made with RDP protocol, use the Enable Multimedia Redirection option.

See RDP Options on page 29.

Enable USB auto-connect when inserted

Enable USB device redirection when a USB device is inserted.

Enable USB auto-connect at startup

Enable USB device redirection when a VMware View connection starts.

Send Ctrl + Alt + Del to virtual desktop

Enable sending Ctrl + Alt + Del to virtual desktop directly.

Allow Horizon Client data sharing

If your Horizon administrator has opted to participate in the customer experience

improvement program, VMware collects and receives anonymous data on client systems

to prioritize hardware and software compatibility.

Enable client drive redirection

Enables the shared folder feature for BLAST and PCoIP connections. This option is

enabled by default.

Don’t start application maximized

If enabled, applications do not start in maximized windows.

Automatic login

When enabled, the user is automatically logged in when the connection is established.

NOTE: HP recommends enabling this option.

Virtualization pack for Skype for Business

Enables virtualization of Skype for Business.

NOTE: Video calls might use most of the processing power of a thin client. HP

recommends disabling this option.

Default Desktop

Specifies a desktop to start automatically when a VMware Horizon View connection is

launched.

Preferred Protocol

Lets you select PCoIP, RDP, or BLAST as the preferred protocol or choose to select the

protocol later.

Application Size

Sets the application window size. You can select All Monitors, Full Screen, Large

Window, or Small Window.

Desktop Size

Sets the desktop window size. You can select All Monitors, Full Screen, Large Window,

or Small Window.

Printers

Controls how local printer redirection is handled:

ThinPrint: Shares printers using high-level redirection.

USB Redirection

Disable

NOTE: For connections made with RDP protocol, see RDP printer redirection

on page 26.

 

Security

The following table describes the settings that are available under the Security category when editing a VMware Horizon View connection.

 

Option

Description

Close After Disconnect

Makes the VMware Horizon View client close automatically after users log out of their

desktops or the session terminates with an error.

28 Chapter 5 Connection types

Option

Description

This option is a security feature designed so that a user does not need to take an

additional step to fully log out after they are finished with their desktop session.

This option is enabled by default for security purposes but can be disabled if users find

that they are often switching to a new desktop pool after logging out of a session and do

not want to fully log in again.

Hide top Menu bar

Makes the top menu bar invisible for users.

This option enabled by default. Disable it if users prefer to access options for window

size or desktop pool selection in a VMware Horizon View session.

Prevent users from changing server

If enabled, end users cannot change the server address.

address

Enable session roaming monitor

Closes the connection if the session roams from another client. This option is supported

on only PCoIP connections.

Certificate verification policy

Select one of the following:

Allow all connections

Warn

Refuse insecure connections

 

RDP Options

The following table describes the settings that are available under the RDP Options category when editing a VMware Horizon View connection.

 

Option

Description

Enable motion events

Enables motion events for this connection.

Enable data compression

Uses data compression for this connection.

Enable deprecated RDP encryption

Enables encryption for this connection.

Enable offscreen cache

If enabled, off-screen memory is used to cache bitmaps.

Attach to admin console

Attaches the connection to the administrator console port.

Cross-session copy/paste

If enabled, copy and paste are enabled between different RDP sessions.

Enable buffering of RDP6 primitives

If enabled, non-RemoteFX graphics performance is increased at the cost of less frequent

screen updates.

Enable Progressive RemoteFX Codec

Enables the RemoteFX Progressive Codec, which transmits the desktop in a series of

sharper and sharper images.

Enable Multimedia Redirection

Allows multimedia files to be sent directly to the client for local playback. For more

information, see RDP multimedia redirection on page 24.

TLS Version

Sets the version of Transport Layer Security to be used during the early stages of

negotiation with the RDP server. Either set this to match the version of TLS used by your

RDP server, or try setting it to auto.

NOTE: There are some server-side defects in some unpatched RDP servers that can

cause the auto setting to fail, so it is not the default setting.

Send hostname as

For per-device licensing, this selects how the client hostname is sent to the RDP server.

Select hostname or mac.

VMware Horizon View 29

Option

Description

Hostname to send

Normally, the thin client’s hostname is used for Client Access Licenses. This field allows a

different value to be sent.

TIP:

Select the (i) icon next to this option for more information.

Load Balance Info

Use this option with a brokered RDP connection.

TIP:

Select the (i) icon next to this option for more information.

Remote computer sound

Specifies where the remote computer’s sound should be played (remotely or locally) or if

it should not be played at all.

Enable port mapping

Maps the thin client’s serial and parallel ports to the remote session.

Enable printer mapping

Maps the local print queue to the remote session. Use this option if either USB

redirection is unavailable on the remote host or the printer is a parallel or serial printer.

Configure the printer to use a local printer spooler, and the VMware Horizon View client

automatically sets up a remote printer that sends print spooling commands through a

virtual channel from the remote host to the thin client.

This method requires both that the printer be configured on the thin client and a

Windows driver be specified on the thin client because the VMware Horizon View client

needs to specify to the remote host which driver to use for the remote printer. This

Windows driver must match the driver that the printer would use when locally attached

to a Windows operating system. This information is usually found under the Model in the

printer properties.

Shared folders

Add, Remove, or Edit shared folders.

 

RDP Experience

The following table describes the settings that are available under the RDP Experience category when editing a VMware Horizon View connection.

 

Option

Description

Choose your connection speed to

Selecting a connection speed (LAN, Broadband, or Modem) will enable or disable the

optimize performance

following options to optimize performance:

Desktop background

Font smoothing

Desktop composition

Show contents of window while dragging

Menu and window animation

Themes

Selecting Client Preferred Settings will allow the VMware Horizon View client to choose

which options to use.

You can also select your own custom combination of options.

End-to-End Connection Health

Select to enable the timeout options.

Monitoring

Warning Timeout

Specifies the amount of time in seconds after receiving the last network traffic from the

server before the user is warned of a lost connection. This function can be disabled by

clearing the option or setting the time to zero.

30 Chapter 5 Connection types

Option

Description

With the Show Warning Dialog option selected, a warning dialog will be displayed when this

timeout is reached. Otherwise, the warning is written to the connection log only.

TIP: HP recommends increasing the timeout value for networks that experience frequent

busy periods or momentary outages.

Recovery Timeout

Specifies the amount of time in seconds after receiving the last network traffic from the

server that the RDP client waits for the connection to recover without taking any special

action. At the end of this period, the RDP client attempts a quick reconnection with the

session.

Error Timeout

Specifies the amount of time in seconds after receiving the last network traffic from the

server that the RDP client waits before stopping attempts to reconnect with that server.

TIP: Select the ? icon next to this field for more information.

 

Advanced

 

NOTE: See Advanced connection settings on page 10 for information about the settings available under the Advanced category when editing a connection.

 

VMware Horizon View multi-monitor sessions

VMware Horizon View supports multi-monitor sessions. To enhance the virtualization experience, the default VMware Horizon View sessions use full-screen and span all monitors. To choose a different window size, select Full Screen – All Monitors under the protocol type of the desktop pool for the connection and then choose another option from the window size list. The next time you connect to a session the window will open in the selected size.

VMware Horizon View keyboard shortcuts

Windows keyboard shortcuts

To help administer Windows systems, VMware Horizon View supports Windows keyboard shortcuts. For example, when Ctrl+Alt+Del is used, VMware Horizon View displays a message that provides the following options:

Send a Ctrl+Alt+Del command.
Disconnect the session: Use this when you have no other way of ending the session.
Windows keyboard shortcuts will be forwarded to the remote desktop session. The result is that local keyboard shortcuts, such as Ctrl+Alt+Tab and Ctrl+Alt+F4, will not function while inside the remote session.

 

TIP: To be able to switch sessions, disable the Hide top Menu bar option in the VMware Horizon View Connection Manager or via the registry key root/ConnectionType/view/connections/<UUID>/

 

hideMenuBar.

 

Media keys

VMware Horizon View uses media keys to control options such as volume, play/pause, and mute during a remote desktop session. This supports multimedia programs such as Windows Media Player.

VMware Horizon View 31

VMware Horizon View device redirection

VMware Horizon View USB redirection

To enable USBR for VMware Horizon View connections, select VMware Horizon View as the remote protocol in USB Manager.

For more information on USBR, including device- and class-specific redirection, see RDP USB redirection on page 25.

VMware Horizon View audio redirection

If you do not need the audio recording capability, use high-level audio redirection. Audio will play out of the 3.5 mm jack or, by default, a USB headset if it is plugged in. Use the local audio manager to adjust the input/ output level, select playback, and capture devices.

The VMware Horizon View client supports high-level audio-record redirection only via the PCoIP connection type on x86 units when connecting to a server running VMware Horizon View 5.2 Feature Pack 2 or higher or the BLAST connection type on x86 units when connecting to a server running VMware Horizon View 7.x or higher. If you need audio-recording support and are using a different configuration, use one of the following methods:

If your system uses VMware Horizon View Client 1.7 or higher, use the RDP protocol to allow for high-level audio redirection through either the 3.5 mm jack or a USB headset.

NOTE: To use high-level audio-record redirection through the RDP protocol, the server must support it and be configured to allow audio recording over a remote session. The server must be running Windows 7 or greater. You also must make sure the HKLM\SYSTEM\CurrentControlSet\Control

 

\Terminal Server\WinStations\RDP-Tcp\fDisableAudioCapture registry key is set to 0.

 

If you have a USB headset with a microphone, you can use USBR. Set the USB headset to be redirected into the session. The headset will show up as an audio device. By default, USB audio devices are not redirected and the VMware Horizon View client uses high-level audio redirection. To redirect the USB headset, use the thin client’s USB Manager and select the USB headset to be redirected. Make sure that VMware Horizon View is selected as the USBR protocol and make sure that the headset is selected under the devices to be redirected.

NOTE: VMware and HP do not recommend using USBR for headsets. A large amount network bandwidth is required to stream audio data over the USBR protocol. Also, you might experience poor audio quality with this method.

 

VMware Horizon View smart card redirection

To use a smart card to log in to the VMware Horizon View server:

Be sure smart card login is enabled in the VMware Horizon View Connection Manager.
After starting the connection, the VMware Horizon View client will display a list of server credentials.

To unlock the credentials and access the VMware Horizon View Manager server, type the appropriate PIN for the server.

NOTE: After you supply the correct PIN, the user’s credentials will be used to log in to the VMware Horizon View Manager server. Please see the VMware Horizon View documentation for details on configuring the server to support smart card login. As long as the server is configured to allow smart card login, the user’s credentials will pass through and they will be logged in to the desktop without having to enter their PIN again.

 

32 Chapter 5 Connection types

NOTE: To log in to the VMware Horizon View Manager administrator server with a smart card, the local smart card driver must be installed on the thin client. See RDP smart card redirection on page 27 for more information on smart card driver installation. Once logged in to the remote host, the smart card will be passed to the remote host using a virtual channel, not USBR. This virtual channel redirection makes sure that the smart card can be used for tasks such as email signing, screen locking, and so on, but might cause the smart card to not show as a smart card device in the Windows Device Manager.

 

NOTE: The remote host must have the proper smart card drivers installed.

 

VMware Horizon View webcam redirection

The VMware Horizon View client supports high-level webcam redirection only through RTAV using x86 units connected to a back-end server running VMware Horizon View 5.2 Feature Pack 2 or higher. Other connection methods do not support high-level webcam redirection and can redirect webcams only using USBR. Based on internal testing and validation, HP has found that the performance of a webcam connected through basic USBR performs poorly. HP does not recommend the use of this configuration and suggests that customers who require this function test using x86 units with RTAV technology to ensure satisfactory levels of performance. With USBR, the webcam might perform poorly or not at all. See RDP USB redirection on page 25 for more information.

VMware Horizon View COM port redirection

To enable COM port redirection for VMware Horizon View connection:

Set root/ConnectionType/view/general/enableComPortRedirection to 1 in regeditor.

NOTE: By default, this setting is enabled.

 

Changing the VMware Horizon View protocol

VMware Horizon View Client can use either the PCoIP, RDP, or BLAST protocol.

To change the protocol:

In VMware Horizon View Client, select a pool that supports one of the supported protocols.
Under the Connection menu, select Settings.
Change the protocol by using the drop-down box next to Connect Via.

NOTE: Use VMware Horizon View Manager to set which protocol should be used for each desktop pool.

 

TIP: HP recommends using the PCoIP protocol to enhance the desktop experience. However, the RDP protocol provides more options for customization and might work better on slower connections.

 

VMware Horizon View HTTPS and certificate management requirements

VMware Horizon View Client 1.5 and VMware Horizon View Server 5.0 and later require HTTPS. By default, the VMware Horizon View client warns about untrusted server certificates, such as self-signed (like the VMware Horizon View Manager default certificate) or expired certificates. If a certificate is signed by a Certificate Authority (CA) and the CA is untrusted, the connection will return an error and the user will not be allowed to connect.

HP recommends that a signed certificate verified by a standard trusted root CA be used on the VMware Horizon View Manager server. This makes sure that users will be able to connect to the server without being prompted or required to do any configuration. If using an internal CA, the VMware Horizon View client connection returns an error until you complete one of the following tasks:

VMware Horizon View 33

Use Certificate Manager to import the certificate from a file or URL.
Use a remote profile update to import a certificate.
In the VMware Horizon View Connection Manager, set Connection Security Level to Allow all connections.
The following table describes certificate trust when the security level is set to Refuse insecure connections.

 

Certificate trust

Result

Trusted

Trusted

Self-signed

Error

Expired

Error

Untrusted

Error

The following table describes certificate trust when the security level is set to Warn.

 

Certificate trust

Result

Trusted

Trusted

Self-signed

Warning

Expired

Warning

Untrusted

Error

The following table describes certificate trust when the security level is set to Allow all connections.

 

Certificate trust

Result

Trusted

Trusted

Self-signed

Untrusted

Expired

Untrusted

Untrusted

Untrusted

The following table describes the connection behavior associated with each result.

 

Result

Description

Trusted

Connects without a certificate warning dialog and displays a green lock icon

Untrusted

Connects without a certificate warning dialog and displays a red unlock icon

Warning

Connects with a certificate warning dialog and displays a red unlock icon

Error

Does not allow the connection

34 Chapter 5 Connection types

Web Browser

Web Browser per-connection settings

 

NOTE: These settings affect the connection you are currently configuring only.

 

Configuration

The following table describes the settings that are available under the Configuration category when editing a Web Browser connection.

 

Option

Description

Name

The connection name.

URL

The URL for the connection.

Intended Use

Lets you specify how USB redirection is performed when the Web Browser connection

starts. Select Citrix, RDP, or Internet.

Allow smartcard login

Allows you to use smart-card authentication for a connection if you select a URL or icon

that starts a remote connection.

Enable kiosk mode

Enables kiosk mode.

Enable full screen

Uses full screen mode for the connection.

Enable print dialog

Enables the print dialog box.

Preferences

Use these options to configure the Web Browser. These options can be shared by multiple Web Browser connections or be specific to a single connection.

Advanced

 

NOTE: See Advanced connection settings on page 10 for information about the settings available under the Advanced category when editing a connection.

 

Additional connection types (ThinPro only)

 

NOTE: By default, these connection types are not available in Smart Zero. For more information, see Choosing an OS configuration on page 2.

 

XDMCP

 

NOTE: These settings affect the connection you are currently configuring only.

 

Configuration

The following table describes the settings that are available under the Configuration category when editing an XDMCP connection.

Web Browser 35

Option

Description

Name

The connection name.

Type

The XDMCP connection type. Valid options are: chooser, query, and broadcast.

Address

This value is required if the Type value is set to query.

Use font server

Use a remote X font server instead of locally installed fonts.

Font server

Font server is not enabled unless the Use font server option is selected.

Configure display

Select to set the display configuration for the connection. If you do not set this

configuration, the default configuration will be used.

 

Advanced

 

NOTE: See Advanced connection settings on page 10 for information about the settings available under the Advanced category when editing a connection.

 

Secure Shell

 

NOTE: These settings affect only the connection you are currently configuring.

 

Configuration

The following table describes the settings that are available under the Configuration category when editing an SSH connection.

 

Option

Description

Name

The connection name.

Address

The IP address of the remote system.

Port

The remote port to use for the connection.

User name

The username to use for the connection.

Run application

The application to run to make the connection.

Compression

Select this option if you want to compress the data sent between the server and thin

client.

X11 connection forwarding

If the server has an X server on it, select this option to allow the user to open user

interfaces from the SSH session and display them locally on the thin client.

Force TTY allocation

Select this option and specify a command to initiate a temporary session to run the

command. Once the command has completed, the session will terminate. If no command

is specified, then the session will run normally as if the option were not selected.

Foreground color

The default color of the text in the SSH session.

Background color

The default color of the background in the SSH session.

Font

Valid options are: 7X14, 5X7, 5X8, 6X9, 6X12, 7X13, 8X13, 8X16, 9X15, 10X20, and

12X24.

36 Chapter 5 Connection types

Advanced

 

NOTE: See Advanced connection settings on page 10 for information about the settings available under the Advanced category when editing a connection.

 

Telnet

 

NOTE: These settings affect the connection you are currently configuring only.

 

Configuration

The following table describes the settings that are available under the Configuration category when editing a Telnet connection.

 

Option

Description

Name

The name of the connection.

Address

The IP address of the remote system.

Port

The port to use on the remote system.

Foreground color

The foreground color.

Background color

The background color.

Font

Valid options are: 7X14, 5X7, 5X8, 6X9, 6X12, 6X13, 7X13, 8X13, 8X16, 9X15, 10X20,

and 12X24.

Advanced

 

NOTE: See Advanced connection settings on page 10 for information about the settings available under the Advanced category when editing a connection.

 

Custom

If you would like to install a custom Linux® application, you can use the Custom connection to allow you to open this application through Connection Manager.

 

NOTE: These settings affect the connection you are currently configuring only.

 

Configuration

The following table describes the settings that are available under the Configuration category when editing a Custom connection.

 

Option

Description

Name

The connection name.

Enter command to run

The command to run to make the remote connection.

Advanced

 

NOTE: See Advanced connection settings on page 10 for information about the settings available under the Advanced category when editing a connection.

 

Additional connection types (ThinPro only) 37

HP True Graphics
HP True Graphics offloads rich multimedia content to the thin client’s GPU, delivering high-frame-rate images and boosting efficiency.

Server-side requirements

See the following table for a list of supported server-side products of the independent software vendor (ISV) you are using for your virtual desktop infrastructure (VDI).

 

ISV

Supported products

Citrix®

XenApp®/XenDesktop® 7.0 or newer

IMPORTANT: The Citrix server must support sending session data in H.264 format (a

Citrix technology known as SuperCodec). H.264 is enabled by default and is processed

using the DeepCompressionV2 encoder, a CPU-based compression algorithm.

VMware®

VMware Horizon™ 6.0 and newer

VMware Horizon View™ 5.2 and 5.3

VMware View® 5.1

Client-side requirements

See the following table for a list of supported thin client operating systems and supported client-side software from the ISV you are using for your VDI.

 

NOTE: HP True Graphics are not available with a Trial ThinPro license.

 

Supported operating systems Supported Citrix clients Supported VMware clients

 

HP ThinPro 5.0 and newer Citrix Receiver 13.1.1 and newer

NOTE: A version of Citrix Receiver that

supports HP True Graphics is preinstalled

starting with HP ThinPro 5.2 and is

available as an add-on for HP ThinPro 5.0

and 5.1.

VMware Horizon Client 4.0 and newer (using the Blast protocol)

 

Client-side configuration

 

NOTE: The information in this section applies to Citrix only. For VMware, simply use the Blast protocol to enable HP True Graphics.

 

Compression settings

To enable HP True Graphics on HP ThinPro:

Select the Enable H264 Compression general setting for Citrix connections.
38 Chapter 6 HP True Graphics

NOTE: Some screen data, such as text, might be sent using methods other than H.264. In general, it is best to keep this feature enabled, but for troubleshooting or specific use cases, the following registry keys can be set to 0 to disable this feature:

 

root/ConnectionType/xen/general/enableTextTracking
root/ConnectionType/xen/general/enableSmallFrames

Window settings

To force remote applications to run in windowed mode:

Set the TWI Mode general setting for Citrix connections to Force Seamless Off.
Monitor layout and hardware limitations

Consider the following limitations on monitor layout:

Most configurations with a maximum of two monitors that have a 1920 × 1200 resolution are supported.
HP t420 Thin Client: Due to its default BIOS configuration, this model uses HP True Graphics for one monitor only, by default. See Enabling HP True Graphics for multiple monitors on the HP t420
on page 39 for more information.

HP t630 Thin Client: This model supports a maximum of two monitors at 1920 × 1200 or one monitor at 3840 × 2160.
HP t730 Thin Client: This model supports a maximum of three monitors at 1920 × 1200.
Rotated monitors might not display correctly.
If you are using HP True Graphics with two monitors and trying to play a video using HDX MediaStream, the video will fail because H.264 supports only two hardware decode sessions, which are being consumed by the monitors.

NOTE: HDX MediaStream is also trying to leverage local hardware decoding of H.264, which causes the issue.

 

Enabling HP True Graphics for multiple monitors on the HP t420

To enable HP True Graphics for multiple monitors on the HP t420:

Restart the thin client and press F10 to access the BIOS.
Select Advanced ► Integrated Graphics.
Set Integrated Graphics to Force.
Set UMA Frame Buffer Size to 512 MB.
After these steps are performed, the amount of memory available for graphics is expanded, and HP True Graphics can be used for two monitors.

 

TIP: These settings can also be configured via HPDM or via the BIOS tools included with HP ThinPro.

 

Client-side configuration 39

Tips & best practices

Consider the following when using HP True Graphics:

After connecting to a remote desktop, you can use Citrix HDX Monitor to determine which encoder is being used for the session by examining the Component_Encoder value under the Graphics – Thinwire Advanced section. If the value reads DeepCompressionV2Encoder or DeepCompressionEncoder, then the server is properly sending the data in a format that is accelerated by HP True Graphics.

NOTE: If legacy graphics are being forced via a server policy, such as CompatibilityEncoder or LegacyEncoder, the server is compressing graphics in a method that is compatible with older versions of Citrix clients, and HP True Graphics will not provide enhanced performance.

 

HP True Graphics might provide some benefits to older versions of XenDesktop if using HDX 3D Pro. Benefits are not provided if HDX 3D Pro is used with the visual quality set to Always Lossless, because then the graphical information is not sent to the thin client in H.264 format.
40 Chapter 6 HP True Graphics

Active Directory integration
By using Active Directory integration, you can force users to log in to the thin client using domain credentials. Optionally, those credentials can be encrypted and stored and then later supplied to remote connections as they start, which is a process known as single sign-on.

 

NOTE: Enabling authentication requires no special domain permissions.

 

There are two modes in which Active Directory integration can operate. By simply enabling authentication against the domain, domain credentials can be used for the following operations:

Logging in to the thin client
Starting a connection using Single Sign-On
Switching to administrator mode using administrative credentials
Unlocking a locked screen using the login credentials
Overriding a locked screen using administrative credentials
The thin client can also be formally joined to the domain. This adds the thin client to the domain’s database and might enable dynamic DNS, where the thin client informs the DNS server of changes in its IP address or hostname association. Unlike domain authentication, a formal join requires credentials of a domain user authorized to add clients to the domain. Joining to the domain is optional. All domain functions except dynamic DNS are available without joining.

Login screen

When domain authentication is enabled, ThinPro displays a domain login screen upon startup. The login screen also includes options that might be necessary to configure before logging in.

The background desktop layout, login dialog style, login dialog text, and which buttons are available can all be adjusted via registry settings and/or configuration file settings. For more information, see the HP ThinPro white paper Login Screen Customization (available in English only).

If the system detects that the user tried to log in with expired credentials, they are prompted to update their credentials.

Single sign-on

After a domain user has logged in, the credentials that were used can also be presented at startup to any connection configured to use them. This allows a user to sign in to the thin client and start Citrix, VMware Horizon View, and RDP sessions without having to enter their credentials again, for as long as they are logged in to the thin client.

Desktop

Once the user has successfully logged in using domain credentials, an Active Directory icon is available on the taskbar. The user can select the icon to perform the following functions:

Login screen 41

Show who is logged in to the system
Lock the screen
Change the domain password
Screen lock

The screen can be locked due to inactivity timeout or through manual locking. If the screen was locked by a domain user, the unlock dialog expects the user to provide the same domain password they used to log in. Like the login dialog, there are options provided, plus one additional function: screen unlock. If the screen-unlock button is selected, the unlock screen instead requires the root (administrator) password or any set of domain credentials in the domain admin group, which was designated during domain authentication setup. When the user supplies override credentials, the screen does not return to the desktop; it instead returns to the login screen.

Administrator mode

In addition to the traditional method of using the root password to enter administrator mode, the domain credentials of a user in the designated domain administrator group can be used to switch to administrator mode.

Settings and the domain user

When a domain user is logged in, any changes to settings are saved in a registry layer that applies only to that user. This includes newly created connections.

If the user has made no changes to system settings or connections, the system defaults will apply instead.

When the system is changed to administrator mode, settings and connection changes are no longer being made to the user-specific layer of the registry. Instead, while in administrator mode, all changes apply instead to the base-level registry. In that way, a change to a setting while in administrator mode applies to all users unless there is a user-specific, custom setting already specified.

42 Chapter 7 Active Directory integration

Start menu

▲ To open the Start menu, select Start .

Connection management

The menu lists all the available connections. Right-click the connection name to manage that connection or select it to start the connection. If the connection is running, selecting it stops the connection. For more information on connection management, see Desktop connection management on page 9.

Switch to Administrator/Switch to User

This option allows you to switch between administrator mode and user mode.

System Information

This option starts the System Information application. For more information, see System Information on page 63.

Control Panel

This option starts Control Panel. For more information, see Control Panel on page 45.

Tools

There are many system tools provided, including one to start programs, such as a text terminal, or to run the Initial Setup Wizard a second time. If you are logged in as a user, only authorized tools are displayed. If this list is empty, the Tools menu entry is hidden.

 

Menu option

Description

X Terminal

Lets you execute Linux commands.

Wireless Statistics

Lets you view information about wireless access points.

Check for Updates

Searches for updates from the server.

Text Editor

Opens a basic text editor for viewing and editing text files.

Task Manager

Lets you monitor the CPU usage and the CPU usage history for the

thin client.

Snipping Tool

Lets you take a snapshot of a rectangular selection of the screen,

a specific window, or the entire screen.

Registry Editor

Opens the ThinPro Registry Editor.

Connection management 43

Menu option

Description

Initial Setup Wizard

Starts the Initial Setup Wizard.

Compatibility Check

Runs the ThinPro Compatibility Check tool, which assesses the

system’s suitability for running ThinPro.

 

Power

These options allow you to log out, shut down the computer, restart the computer, or enable the Sleep state.

An administrator can restrict the options visible to a user using the Power Manager tool. See System on page 45.

Search

When you type in the search box, a set of potential matches for your search are displayed from most likely to least likely. The search includes the visible names of controls, tools, and connections and associated aliases and synonyms. For example, in administrator mode, typing encryption displays the Security control, because that control offers encryption parameters.

To see all available options, type a space in the search box or select the magnifying glass icon.

Search also returns the options to create new connections of all available types. This can be used to manage connections.

44 Chapter 8 Start menu

Control Panel
Control Panel lets you modify the system configuration.

To open Control Panel:

Select Start, and then select Control Panel.

NOTE: You can also search for a specific Control Panel function using the Start menu search box.

 

NOTE: All Control Panel items are accessible in administrator mode. In user mode, only Control Panel items that are enabled by the administrator for use by users are accessible.

 

TIP: To specify which Control Panel items end users have access to, open Control Panel, select Appearance, select Customization Center, and then select or clear items in the Applications list.

 

System

 

Menu option

Description

Date and Time

Lets you configure the time zone and the date and time options.

Network

Lets you configure network settings.

For more information, see Network settings on page 45.

DHCP Options

Lets you configure DHCP options.

For more information, see DHCP options on page 49.

Power Manager

Lets you configure power management settings such as a screen

saver and screen lock, CPU settings, when to turn off the display,

and when to enter the Sleep state.

In administrator mode, you can restrict access to power-related

options (such as Reboot) on a system-wide basis.

Imprivata Setup

Lets you enable Imprivata Appliance Mode and specify an

Imprivata server.

Component Manager

Lets you remove system components.

For more information, see Component Manager on page 50.

Factory Reset

Lets you restore the thin client to its default factory configuration.

Snapshots

Lets you restore the thin client to a previous state or to its default

factory configuration.

Network settings

Network settings can be configured using the Network Manager. To open the Network Manager:

Select System and then select Network in Control Panel.
See the following sections for more information about the different tabs in the Network Manager:

Wired network settings
System 45

Wireless network settings
DNS settings
IPSec rules
Configuring VPN settings
Wired network settings

The following table describes the options available in the Wired tab of the Network Manager.

 

Option

Description

Enable IPv6

Enables IPv6. IPv4 is used by default, and they cannot be used at the same time.

Ethernet Speed

Lets you set the Ethernet Speed. If your switch or hub does not have a special requirement, leave this

at the default setting of Automatic.

Connection Method

Lets you choose between Automatic and Static. If your network environment is using DHCP, then the

Automatic option should work without any further configurations needed.

If Static is selected, the Static Address Configuration settings will become available. Be sure to input

these values according to whether you are using IPv4 or IPv6.

MTU

Allows you to enter the maximum transmission unit (in bytes).

Security Settings

Lets you set the authentication setting to one of the following:

None

802.1X-TTLS

802.1X-PEAP

802.1X-TLS

Note the following about TTLS and PEAP:

The Inner Authentication option should be set to whatever your server supports.

The CA Certificate setting should point to the server’s certificate on the local thin client.

The Username and Password are the user’s credentials.

Note the following about TLS:

The CA Certificate setting should point to the server’s certificate on the local thin client.

If your Private Key file is .p12 or .pfx, then the User Certificate setting can be left blank.

The Identity setting should be the username that corresponds to the user certificate.

The Private Key Password setting is the password of the user’s private key file.

Wireless network settings

Use this tab to add, edit, and delete wireless profiles that correspond to wireless networks.

The following tables describe the options available when adding or editing a wireless profile.

 

NOTE: This tab is available only if the thin client has a wireless adapter.

 

TIP: You can also access these settings by selecting the network status icon in the taskbar.

 

Use the Wireless tab to configure general settings.

46 Chapter 9 Control Panel

Option

Description

Scan AP

Scans for available wireless networks.

SSID

Use this box to manually enter the SSID of the wireless network if it is not found by the scan.

Wireless Band

Select Auto, 2.4GHz, or 5GHz.

SSID Hidden

Enable this option if the SSID of the wireless network is set to be hidden (not broadcasting).

Enable IPv6

Enables IPv6. IPv4 is used by default, and they cannot be used at the same time.

Enable Power Management

Enables the power management feature for the wireless adapter.

Connection Method

Lets you select between Automatic and Static. If your network environment is using DHCP, then the

Automatic option should work without any further configurations.

If Static is selected, the Static Address Configuration settings will become available. Be sure to input

these values according to whether you are using IPv4 or IPv6.

Security Settings

Lets you set the authentication setting to one of the following:

None

WEP

WPA/WPA2-PSK

802.1X-TTLS

802.1X-PEAP

802.1X-TLS

EAP-FAST

For WEP and WPA/WPA2-PSK, you just need to enter the network key and select OK.

For EAP-FAST, set Anonymous Identity, Username, Password, and Provisioning Method. You do not

need to change the PAC file settings.

See Wired network settings on page 46 for more information about TTLS, PEAP, and TLS.

Auto Connect

This option is reserved for future use.

Enable Wireless

Enables the wireless adapter.

 

Use the IPv4 tab to configure IPv4 connection settings.

 

Option

Description

IPv4 Enabled

Enables IPv4.

IPv4 Method

Lets you select between Automatic and Static. If your network environment is using DHCP, then the

Automatic option should work without any further configurations.

If Static is selected, the Static Address Configuration settings are displayed, and you must enter the

IPv4 settings.

Use the IPv6 tab to configure IPv6 connection settings.

 

Option Description

 

IPv6 Enabled Enables the usage of an IPv6 global address.

System 47

Option

Description

NOTE: HP ThinPro tries to obtain an IPv6 global address via route advertisement or DHCPv6.

IPv6 Method

Lets you select between Automatic and Static. If your network environment is using DHCP, then the

Automatic option should work without any further configurations.

If Static is selected, the Static Address Configuration settings are displayed, and you must enter the

IPv6 settings.

 

Use the Security tab to configure the connection security settings.

 

Option Description

 

Authentication Lets you set the authentication setting to one of the following:

None
WEP
WPA/WPA2-PSK
WPA/WPA2 Enterprise-TTLS
WPA/WPA2 Enterprise-PEAP
WPA/WPA2 Enterprise-TLS
EAP-FAST
For WEP and WPA/WPA2-PSK, you just need to enter the network key and select OK.

For EAP-FAST, set Anonymous Identity, Username, Password, and Provisioning Method. You do not need to change the PAC file settings.

See Wired network settings on page 46 for more information about TTLS, PEAP, and TLS.

 

DNS settings

The following table describes the options available in the DNS tab of the Network Manager.

 

Option

Description

Hostname

This is generated automatically according to the MAC address of the thin client. You can alternatively

set a custom hostname.

DNS Servers

Use this box to set custom DNS server information.

Search Domains

Use this box to restrict the domains that are searched.

HTTP Proxy

Use these boxes to set proxy server information using the following format:

FTP Proxy

http://<address>:<port>

HTTPs Proxy

HP recommends using the http:// prefix for all three proxy settings because it is supported better.

NOTE: The proxy settings are set to the http_proxy, ftp_proxy, and https_proxy environmental

variables for the system.

48 Chapter 9 Control Panel

IPSec rules

Use this tab to add, edit, and delete IPSec rules. An IPSec rule should be the same for each system that uses IPSec to communicate.

When configuring an IPSec rule, use the General tab to set the rule’s information, addresses, and authentication method. The Source Address is the IP address of the thin client, and the Destination Address is the IP address of the system that the thin client is going to communicate with.

 

NOTE: Only the PSK and Certificate authentication types are supported. Kerberos authentication is not supported.

 

Use the Tunnel tab to configure settings for tunnel mode.

Use the Phase I and Phase II tabs to configure advanced security settings. The settings should be the same for all peer systems that communicate with each other.

 

NOTE: An IPSec rule can also be used to communicate with a computer running Windows.

 

Configuring VPN settings

HP ThinPro supports two types of VPN:

Cisco
PPTP
Enable the Auto Start option to start the VPN automatically.

Note the following about creating a VPN using Cisco:

The Gateway is the gateway’s IP address or hostname.
The Group name and Group password are the IPSec ID and IPSec password.
The Domain setting is optional.
The User name and User password are the user credentials that have rights to create a VPN connection on the server side.
The Security Type should be set the same as it is on the server side.
The NAT Traversal option should be set according to your VPN environment.
The IKE DH Group option sets the Diffie-Hellman group to use for VPN.
The PFS Type option sets the Diffie-Hellman group to use for Perfect Forward Secrecy.
Note the following about creating a VPN using PPTP:

The Gateway is the gateway’s IP address or hostname.
The NT Domain setting is optional.
The User name and User password are the user credentials that have rights to create a VPN connection on the server side.
DHCP options

To open the DHCP Option Manager:

Select System and then select DHCP Options in Control Panel.
The DHCP Option Manager displays details of the DHCP options that are requested by the thin client.

System 49

TIP: The drop-down list allows you to filter which DHCP tags are displayed.

 

To direct the thin client to request or ignore specific DHCP options:

Select or deselect the check boxes in the Requested column.
If a pencil is shown in the DHCP Code column, the code number can be changed in case there is a conflict on your DHCP server over a particular code number.

To change a DHCP code:

Double-click the DHCP code and type a new number.

NOTE: Changeable DHCP codes can only be changed while that DHCP option is enabled in the Requested column.

 

To learn more about how a DHCP option is used on the thin client and on the DHCP server:

Select the icon in the Info column of that option.
Component Manager

Component Manager lets you remove system components that are not used in your environment, which might be desirable to reduce the image size or increase security. For example, if Citrix connections are never used in your environment, you might want to remove the Citrix component.

As components are removed, the new configuration can be tested before you apply the changes permanently.

You can also undo changes that were made, if the changes have not yet been applied permanently.

 

IMPORTANT: After the new configuration is applied permanently, all snapshots are removed and a new factory snapshot is created. Removed components cannot be restored after this point.

 

NOTE: Removing components might not reduce the use of local disk space, but it should reduce the size of any disk images created from the local system.

 

To open the Component Manager:

Select System and then select Component Manager in Control Panel.
Removing components

To remove components:

In the Component Manager, select the desired components.

TIP: To select multiple components, use Ctrl or Shift.

 

Select Remove Component(s).
If the confirmation dialog appears, select OK.
After the components are removed, test the new configuration.
Undoing a change

You can undo each change, one at a time, if the changes have not yet been applied permanently. A restart of the thin client is required after each undo.

To undo a change made with the Component Manager:

50 Chapter 9 Control Panel

In the Component Manager, select Revert Last Change.
Select Yes to restart the thin client.
Repeat this process for as many changes you want to undo.

 

IMPORTANT: If you take a snapshot of the image while testing a new configuration, you cannot undo the changes via the Component Manager. Those changes can be undone only by restoring a previous snapshot via the Snapshots tool. However, this does not work if the changes have already been applied permanently, because that function deletes all existing snapshots. If changes have already been applied permanently, you must reinstall the operating system to restore most removed components. Some components (such as Citrix, RDP, and VMware Horizon View) might be available as add-ons on the web and can be restored by reinstalling them.

 

Applying the changes permanently

To apply changes made with the Component Manager permanently:

 

IMPORTANT: After the new configuration is applied permanently, all snapshots are removed and a new factory snapshot is created. Removed components cannot be restored after this point.

 

In the Component Manager, select Apply Component Configuration.
Select Yes.
Security

 

Menu option

Description

Security

For more information, see Security settings on page 51.

Change Domain Password

If a domain is being used, lets you change the domain password.

Certificates

Opens Certificate Manager, which lets you easily import, view, or

remove certificates.

For more information, see Certificate Manager on page 53.

Firewall Manager

Lets you configure firewall settings.

SCEP Manager

Allows for network-based certificate management.

Security settings

Security settings can be configured using Security Manager. To open Security Manager, select Security and then select Security in Control Panel.

See the following sections for more information about the different tabs in Security Manager.

Local Accounts on page 51
Encryption on page 52
Options on page 52
Local Accounts

The Local Accounts tab can be used to change the local root and user account passwords or to disable authentication using those accounts.

Security 51

CAUTION: Disabling the root and/or user accounts might leave your system in an unusable state unless Active Directory authentication is enabled. For example, if the root account is disabled, you will only be able to change to administrator mode using domain credentials of an administrator. However, disabling the local accounts might improve security when Active Directory authentication is enabled because you no longer have to maintain and update a shared secret such as the thin client’s root password.

 

If Active Directory authentication has been used and there is any cached data for domain users on the thin client, you can also delete the user’s cached data from this tab.

 

NOTE: If the user logged in using a domain account, they cannot delete their own account’s data because it would leave the system in an indeterminate state.

 

Encryption

Active Directory credentials and other secrets can be hashed for functions like screen-unlock and/or encrypted and stored on the system for single sign-on.

The hash algorithm for creating a password’s hash can be selected from this menu. The default, scrypt, is a well-accepted key derivation function. Argon2, another key derivation function is also available, as well as conventional hashes SHA-256 and SHA-512. The advantage of a key derivation function is that it is computationally expensive to compute a rainbow table that matches plain-text passwords to precomputed hash values, whereas conventional hashes are meant to execute as fast as possible. All hashes are stored with 128 or more bits of random salt which changes each time the password hash is computed and stored.

Encrypted passwords are used in situations where they can be reversed and supplied to connections when they start (single sign- on). The encryption algorithm can be selected here from a wide variety supported by OpenSSL. Unless there is a good reason to select a different value, HP recommends using the default encryption algorithm, which is generally regarded as a modern, secure algorithm by the security community. The number of salt bits and key bits will vary from one algorithm to another and you can get details by pressing the info button next to the algorithm selector. Encryption keys are unique per thin client and are stored in a place that only administrators can read. Furthermore, only certain authorized applications on the system can do decryption.

Both hashes and encrypted secrets can be set with a time-to -live. If the amount of time between when the secret was hashed or encrypted and the time when it is used or decrypted exceeds the time-to-live, the hash-match or decryption will fail.

By default, the single sign- on password is usable for only one day, but any passwords stored with connection or network settings can be used indefinitely.

Options

Local user must log in: If this option is selected when Active Directory authentication is disabled, the login screen still appears at startup and logout. In this situation, the local user or root credentials must be used to gain access to the system.

Enable secret peek: If enabled, most password and secret entry fields on the system display a small eyeball icon on the right side. When that eyeball icon is selected by pressing and holding down the left mouse button, the secret is displayed in plain text as long as the mouse button is held down. As soon as the button is released, the secret is again obscured.

Use domain text entry: If enabled, a separate Domain input field is provided for the domain name where applicable. If disabled, the domain is determined by the value entered in the User field instead. For instance, if the User field contains “[email protected]”, the domain is assumed to be “mycorp”. If the user field is “graycorp \mary”, the domain is assumed to be “graycorp”.

Allow administrators to override screen lock: If enabled, you can override a locked screen and return it to the login screen or ThinPro desktop, just as if the user had manually logged out of the thin client.

52 Chapter 9 Control Panel

Certificates

 

NOTE: For more information about using certificates in Linux, go to https://www.openssl.org/docs/.

 

Certificate Manager

To open Certificate Manager:

Select Security and then select Certificates in Control Panel.
Use Certificate Manager to manually install a certificate from a certificate authority (CA). This action copies the certificate to the user’s local certificate store (/usr/local/share/ca-certificates) and configures OpenSSL to use the certificate for connection verification.

If desired, use Profile Editor to attach the certificate to a profile, as described in Adding certificates to a client profile on page 70.

 

NOTE: Generally, a self-signed certificate will work as long as it is valid according to specification and can be verified by OpenSSL.

 

SCEP Manager

To open the SCEP Manager:

Select Security and then select SCEP Manager in Control Panel.
Use the SCEP Manager when you need to enroll or renew client-side certificates from a CA.

During an enrollment or renewal, the SCEP Manager generates the thin client’s private key and certificate request, and then it sends the request to the CA on the SCEP server. When the CA issues the certificate, the certificate is returned and placed in the thin client’s certificate store. OpenSSL uses the certificate for connection verification.

 

NOTE: Before enrollment, make sure that the SCEP server is configured properly.

 

Use the Identifying tab of the SCEP Manager to enter information about the user, if desired.

 

NOTE: The Common Name is required and is the Fully Qualified Domain Name (FQDN) of the thin client by default. The other information is all optional. The Country or Region is entered as two letters, such as US for the United States and CN for China.

 

Use the Servers tab of the SCEP Manager to add SCEP servers and enroll or renew certificates.

 

TIP: When entering a new SCEP server, save the server information first, and then use the Settings button to go back and do an enrollment.

 

Manageability

 

Menu option

Description

Active Directory

For more information, see Active Directory configuration

on page 54.

Automatic Update

Lets you configure the Automatic Update server manually.

For more information, see HP Smart Client Services on page 64.

Easy Update

Launches HP Easy Tools.

For more information, see the user guide for HP Easy Tools.

Manageability 53

Menu option

Description

HPDM Agent

Lets you configure the HP Device Manager (HPDM) Agent.

For more information, see the Administrator Guide for HPDM.

SSHD Manager

Enables access through a secure shell.

ThinState

HP ThinState lets you make a copy of or restore the entire

operating system image or just its configuration settings.

For more information, see HP ThinState on page 55.

VNC Shadow

Lets you configure VNC Shadowing options.

For more information, see VNC Shadowing on page 58.

 

Active Directory configuration

Status tab

This control lets you activate or deactivate authentication against a domain, joining the domain, and various domain-related options.

After you make a change to domain parameters on the Status tab, the page shows a pending action and you must select Apply to make that action happen. Joining or unjoining the domain requires credentials with permissions to perform that operation. After enabling authentication or joining the domain, some of the sub-parameters might be marked as read-only because it is not possible to change them at that point in time. Instead, you must unjoin or disable authentication altogether and then apply the changes. Then you can re-enable authentication or join with altered sub-parameters.

 

Option

Description

Domain name

If the thin client can determine the domain name using DHCP options, it will be displayed

here. Otherwise you will have to enter the fully-qualified domain name manually.

Authenticate against domain

When enabled, domain credentials can be used, as outlined in the Active Directory

Integration section of this guide.

Require thin client login

This is on by default, and it causes the system to boot up into the domain login screen. If

disabled, domain credentials can still be used to switch to administrator mode or to override

a locked screen, but single sign-on will not be available.

Workgroup

Usually this is auto-detected from information provided by network servers, but you can use

this as a manual override if you have an unusual network topology.

Domain controllers

These are usually detected using DNS lookups, but you can specify them manually if your

network is not supplying that information.

Join the thin client to the domain

As explained in the chapter on Active Directory Integration, this option lets you formally add

the thin client to the Active Directory’s databases.

Organizational Unit (OU)

The thin client is usually added to the “Computers” OU of the database, but you can

manually enter a different value here if your database schema demands it.

Dynamic DNS

If enabled, the thin client will try to update the DNS server whenever its IP-address/

hostname association changes.

54 Chapter 9 Control Panel

Options tab

 

Option

Description

Enable single sign-on

If enabled, a password supplied at login is encrypted and saved on the system. When a

connection starts with SSO credentials configured, it can decrypt the password and pass it

to the connection so that it can be used for remote login.

Domain login group

If enabled, login is restricted to users in the listed domain group.

Domain admin group

If enabled, escalation to administrator mode and screen-lock override is limited to members

of the listed domain group.

Enable cached domain login

If enabled, a hash of the user’s password is saved on the system and can be used for login

even when the Active Directory server is inaccessible.

Retain user preferences at logout

If this option is enabled, any setting changes made by a domain user are stored in a place

where those settings are applied only to that user. If this option is disabled, any such user-

specific changes are discarded when the user logs out.

Allow domain password changes

If enabled, expired passwords result in a prompt that allows the user to update their

password, and they can manually update their password using the user icon on the taskbar.

HP ThinState

HP ThinState allows you to capture and deploy an HP ThinPro image or configuration (profile) to another thin client of compatible model and hardware.

Managing an HP ThinPro image

Capturing an HP ThinPro image to an FTP server

To capture an HP ThinPro image to an FTP server:

 

IMPORTANT: The directory on the FTP server where you intend to save the captured image must already exist before initiating the capture.

 

Select Management > ThinState in Control Panel.
Select the HP ThinPro image, and then select Next.
Select make a copy of the HP ThinPro image, and then select Next.
Select a FTP server, and then select Next.
Enter the FTP server information in the fields.

NOTE: The name of the image file is set by default to be the thin client’s hostname.

 

Select Compress the image if you want to compress the captured image.

 

NOTE: The HP ThinPro image file is a simple disk dump. The uncompressed size is about 1 GB, and a compressed image without add-ons is approximately 500 MB.

 

Select Finish.
When the image capture begins, all applications stop and a new window appears showing the progress. If a problem occurs, select Details for information. The desktop reappears after the capture is complete.

Manageability 55

Deploying an HP ThinPro image using FTP or HTTP

 

IMPORTANT: If you stop a deployment before it is finished, the previous image is not restored and the contents of the USB flash drive of the thin client will be corrupted.

 

To deploy an HP ThinPro image using FTP or HTTP:

Select Management > ThinState in Control Panel.
Select the HP ThinPro image, and then select Next.
Select restore an HP ThinPro image, and then select Next.
Select either the FTP or HTTP protocol, and then enter the server information in the fields.

NOTE: The Username and Password fields are not required if you use the HTTP protocol.

 

Select Retain HP ThinPro Configuration if you want to preserve all previously configured settings.
Select Finish.
When the image deployment begins, all applications stop and a new window appears showing the progress. If a problem occurs, select Details for information. The desktop reappears after the deployment is complete.

 

NOTE: An MD5sum check is done only if the MD5 file exists on the server.

 

Capturing an HP ThinPro image to a USB flash drive

To capture an HP ThinPro image to USB flash drive:

 

IMPORTANT: Back up any data on the USB flash drive before you begin. HP ThinState automatically formats the USB flash drive to create a bootable USB flash drive. This process erases all data currently on the USB flash drive.

 

Select Management > ThinState in Control Panel.
Select the HP ThinPro image, and then select Next.
Select make a copy of the HP ThinPro image, and then select Next.
Select create a bootable USB flash drive, and then select Next.
The thin client restarts and then prompts you to enter a USB flash drive.

Insert a USB flash drive into a USB port on the thin client.
Select the USB flash drive, and then select Finish.
A new window displays the progress. If a problem occurs, select Details for information. The desktop reappears after the capture is complete.

Deploying an HP ThinPro image with a USB flash drive

To deploy an HP ThinPro image with a USB flash drive:

 

IMPORTANT: If you stop a deployment before it is finished, the previous image is not restored and the contents of the USB flash drive of the thin client will be corrupted. In this state, the thin client must be reimaged using a USB flash drive.

 

56 Chapter 9 Control Panel

Turn off the target thin client.
Insert the USB flash drive.
Turn on the thin client.

NOTE: The screen remains black for 10-15 seconds while the thin client detects and boots from the USB flash drive. If the thin client fails to boot from the USB flash drive, try unplugging all other USB devices and repeat the procedure.

 

Managing a client profile

A client profile contains the connections, settings, and customizations that you configured using Connection Manager and Control Panel. A profile is saved in a configuration file that is specific to the version of HP ThinPro in which it was created.

 

NOTE: A client profile can also be preconfigured and deployed using Profile Editor and Automatic Update (see Profile Editor on page 68 and HP Smart Client Services on page 64 for more information).

 

Saving a client profile to an FTP server

To save a client profile to an FTP server:

 

IMPORTANT: The directory on the FTP server where you intend to save the profile must already exist before initiating the save.

 

Select Management > ThinState in Control Panel.
Select the HP ThinPro configuration, and then select Next.
Select save the configuration, and then select Next.
Select on a FTP server, and then select Next.
Enter the FTP server information in the fields.
Select Finish.
Restoring a client profile using FTP or HTTP

To restore a client profile using FTP or HTTP:

Select Management > ThinState in Control Panel.
Select the HP ThinPro configuration, and then select Next.
Select restore a configuration, and then select Next.
Select on a remote server, and then select Next.
Select either the FTP or HTTP protocol, and then type the server information in the fields.

NOTE: The Username and Password fields are not required if you are using the HTTP protocol.

 

Select Finish.
Saving a client profile to a USB flash drive

To save a client profile to a USB flash drive:

Insert a USB flash drive into a USB port on the thin client.
Select Management > ThinState in Control Panel.
Manageability 57

Select the HP ThinPro configuration, and then select Next.
Select save the configuration, and then select Next.
Select on a USB key, and then select Next.
Select the USB flash drive.
Select Browse.
Navigate to the desired location on the USB flash drive and assign a file name to the profile.
Select Save.
Select Finish.
Restoring a client profile from a USB flash drive

To restore a client profile from a USB flash drive:

Insert the USB flash drive containing the profile into a USB port on the target thin client.
Select Management > ThinState in Control Panel.
Select the HP ThinPro configuration, and then select Next.
Select restore a configuration, and then select Next.
Select on a USB key, and then select Next.
Select the USB key.
Select Browse.
Double-click the desired configuration file on the USB key.
Select Finish.
VNC Shadowing

Virtual Network Computing (VNC) is a remote desktop protocol that allows you to see the desktop of a remote computer and control it with your local mouse and keyboard.

To increase security, HP recommends leaving VNC disabled unless it is needed for remote diagnosis. Then, disable VNC when remote access to the thin client is no longer necessary.

To access the VNC Shadow tool:

Select Manageability and then select VNC Shadow in Control Panel.

NOTE: You must restart the thin client before any changes to the VNC Shadowing options will take effect.

 

The following table describes the options available in the VNC Shadow tool.

 

Option

Description

Enable VNC Shadow

Enables VNC Shadowing.

VNC Read Only

Makes the VNC session read-only.

VNC Use Password

Makes a password required when accessing the thin client using VNC.

Select Set Password to set the password.

Show “Stop Shadowing” Button

If enabled, a Stop Shadowing button shows in the top left corner of the

remote system. It stops VNC shadowing when pressed.

58 Chapter 9 Control Panel

Option

Description

VNC Allow Loopback Only

If enabled, you can connect to the VNC server only from this thin client

that is identified by the loopback address.

VNC Notify User to Allow Refuse

Enables a notification dialog on the remote system that informs the

remote user when someone is attempting to connect using VNC. The

user can refuse either allow or refuse access.

Automatically close the notification after (seconds)

Closes the User Notification Message after x seconds.

User Notification Message

Allows you to display a message in the notification dialog to the remote

user.

Refuse connections in default

If enabled, the VNC connection will be refused by default when the timer

expires.

Re-set VNC server right now

Resets the VNC server after applying the new settings.

 

Input Devices

 

Menu option

Description

Keyboard

Lets you change the keyboard layout to accommodate the

language used by the primary keyboard and the secondary

keyboard.

Keyboard Shortcuts

Lets you create, modify, and delete keyboard shortcuts.

Mouse

Lets you configure the mouse speed and whether mouse input is

right-handed or left-handed.

On thin clients with a TouchPad, this menu option also lets you

disable or enable the TouchPad.

Touch Screen

Lets you configure touch screen options.

Ibus

Lets you configure lbus (Intelligent Input Bus) for multilingual

input.

lbus is not enabled by default. To enable lbus:

Control Panel>Input Devices>lbus Input Method>Start IBUS on

boot

The Default Ibus configuration file can be modified or restored to

factory settings from the Control Panel as well.

After reboot, the Ibus tray icon appears. Select the icon to choose

language. Right-click the icon for more configuration options.

NOTE: Ibus in ThinPro is preloaded with Chinese, Japanese, and

Korean languages. To add additional languages:

1.

Right-click the lbus system tray icon.

2.

Select the Input Method tab.

3.

Select Add.

Input Devices 59

Hardware

 

Menu option

Description

Display

Lets you configure and test display options.

For more information, see Display management on page 60.

Sound

Lets you control the playback, input devices, and input audio

levels.

USB Manager

Lets you configure the redirection options for USB devices.

For more information, see Redirecting USB devices on page 60.

Serial Manager

Lets you configure serial devices.

Printers

Lets you set up local and network printers. Local printers can be

shared across the network.

For more information, see Configuring printers on page 60.

Display management

Display management allows you to configure screen settings and apply these changes in session. To open display management:

Control Panel>Hardware>Display Management.

Redirecting USB devices

To redirect USB devices:

In Control Panel, select Hardware, and then select USB Manager.
On the Protocol page, select a remote protocol.
If the setting is Local, you can also specify the options allow devices to be mounted and mount devices read-only.

On the Devices page, you can enable or disable redirection for individual devices if necessary.
On the Classes page, you can select specific device classes to be redirected to remote sessions.
When you are finished, select Apply.
Configuring printers

To configure a printer:

Select Hardware and then select Printers in Control Panel.
In the Printing dialog, select Add .
In the New Printer dialog, select the printer to configure, and then select Forward.

NOTE: If you select a serial printer, be sure to input the correct settings on the right side of the dialog, or the printer might not function correctly.

 

Select the make of the printer. If you are unsure, select the Generic (recommended) option, and then select Forward.
60 Chapter 9 Control Panel

Select the model of and driver for the printer, and then select Forward.

NOTE: If you are unsure of the printer model or which driver to use, or if the model of your printer is not listed, select Back and try using the Generic (recommended) option for the make of the printer.

 

If using the Generic (recommended) make, be sure to select text-only (recommended) for the model and Generic text-only printer [en] (recommended) for the driver.

 

Fill in optional information about the printer, such as its name and location.

NOTE: HP recommends that you type the correct driver name into the Windows Driver box. The driver must also be installed on the Windows server for the printer to work properly. If a driver is not specified, a generic postscript driver is used. Using a specific Windows driver might enable more printer functions.

 

Select Apply, and then print a test page if desired.
Repeat this process to configure additional printers if necessary.

 

TIP: The most common problem is that the wrong driver is being used for the printer. To change the driver, right-click the printer and select Properties, and then change the make and model.

 

Appearance

 

Menu option

Description

Background Manager

Lets you configure the background theme and dynamically display

system information (such as the hostname, IP address, hardware

model, and MAC address of the thin client) in the background.

For more information, see the HP ThinPro white paper Login

Screen Customization (available in English only).

Customization Center

Lets you do the following:

Switch between the ThinPro and Smart Zero configurations

Configure desktop and taskbar options

Select which connection types and Control Panel items end

users have access to

For more information, see Customization Center on page 61.

Language

Lets you display the HP ThinPro interface in a different language.

Customization Center

To open Customization Center:

Select Appearance and then select Customization Center in Control Panel.
The button at the top of the Desktop page can be used to switch between the ThinPro and Smart Zero configurations. See Choosing an OS configuration on page 2 for more information about the differences between the two configurations.

Appearance 61

NOTE: When switching from ThinPro to Smart Zero, if you have configured a single connection, that connection is used automatically as the Smart Zero connection. If you have configured multiple connections, you are prompted to select the connection to use.

 

Before switching to Smart Zero mode, the domain authentication function on the thin client should be disabled. Domain authentication and Smart Zero mode are incompatible.

 

The following table describes the rest of the options available on the Desktop page.

 

Option

Description

Launch the Connection Manager at

When enabled, Connection Manager launches automatically at system startup.

start up

Enable right-click menu

Disable this option to disable the context menu that appears when you right-click the desktop

Enable X host access control security

When enabled, only the systems listed in the XHost Access Control List area are allowed to

remotely control the thin client.

Enable USB Update

Enables updates to be installed from a USB flash drive. See USB updates on page 76 for more

information.

Authenticate USB Update

Disable this option to allow end users to install updates via USB.

Allow user to switch to administrator

Disable this option to remove the Administrator/User Mode Switch option from Control Panel

mode

in user mode.

Time before cancelling administrator

Specifies the idle timeout (in minutes) after which administrator mode will be terminated. If set

mode

to 0 or negative, administrator mode will never be automatically terminated.

Use the Connections and Applications pages to select which connection types and Control Panel applications are available in user mode.

Use the Taskbar page to configure the taskbar.

62 Chapter 9 Control Panel

10 System Information

In the Start menu, select System Information to view system, network, and software information. The following table describes the information that is displayed on each panel.

 

Panel

Description

General

Displays information about the BIOS, operating system, CPU, and memory.

Network

Displays information about the network interface, gateway, and DNS settings.

Net Tools

Provides the following tools for monitoring and troubleshooting purposes:

Ping: Specify an IP address of another device on the network to attempt to establish

contact.

DNS Lookup: Use this tool to resolve a domain name into an IP address.

Trace Route: Use this tool to track the path that a network packet takes from one device to

another.

Software Information

Displays a list of installed add-ons on the Service Packs tab and software version information on

the Software Installed tab.

TIP: You can also access the Administrator Guide (this document) from this screen.

Software License

Displays the EULA for the HP ThinPro operating system and, if not auto-licensed, information

about ThinPro licenses on the system.

System Logs

Displays the following logs:

Authorization and Security

Connection Manager

DHCP Leases

General System Log

Kernel

Network Manager

Smart Client Services

X Server

OneSign

In administrator mode, the debug level can be changed to display additional information that

might be requested by HP support for troubleshooting purposes.

Select Diagnostic to save a diagnostic file. For more information, see Using system diagnostics to troubleshoot on page 73.

 

NOTE: See SystemInfo on page 145 for information about registry keys that can be used to hide the System Information screens.

 

63

11 HP Smart Client Services

HP Smart Client Services is a set of server-side tools that enable you to configure client profiles that can be distributed to large numbers of thin clients. This function is called Automatic Update.

HP ThinPro detects an Automatic Update server upon startup and configures settings accordingly. This simplifies device installation and maintenance.

Supported operating systems

HP Smart Client Services supports the following operating systems:

Windows Server® 2016
Windows Server 2012 R2
Windows Server 2012
Windows 7
Windows Server 2008
Windows Server 2008 R2
Windows Server 2003
Windows Vista®
Windows XP

NOTE: The installer is 32-bit only, although it is supported on both the 32-bit and 64-bit versions of the Windows operating system.

 

Prerequisites for HP Smart Client Services

Before installing HP Smart Client Services, verify the configuration and installation status of the following components:

Internet Information Services (IIS)
.NET Framework 3.5
For information about installing or enabling these components on the operating system that you are using for the server, go to http://www.microsoft.com.

Obtaining HP Smart Client Services

To obtain HP Smart Client Services, go to ftp://ftp.hp.com/pub/tcdebian/SmartClientServices/.

64 Chapter 11 HP Smart Client Services

Viewing the Automatic Update website

On the server desktop, select Start > Control Panel, and then select Administrative Tools.
Double-click Internet Information Services (IIS) Manager.
In the left pane of the IIS Manager, expand the following items:
“Server name” > Sites > HP Automatic Update > auto-update

 

NOTE: The physical location where the Automatic Update files are stored is as follows:

 

C:\Program Files (x86)\HP\HP Smart Client Service\auto-update

 

Creating an Automatic Update profile

Automatic Update uses profiles to deploy a configuration to thin clients. By default, when you create a profile using Profile Editor (see Profile Editor on page 68), the tool lets you save it to the following folder:

C:\Program Files (x86)\HP\HP Smart Client Service\auto-update \PersistentProfile\

You can also export an existing profile from a thin client using HP ThinState and copy the profile to this location.

When searching for updates, HP ThinPro looks for this folder and applies the profile saved there. This ensures that all thin clients use the same configuration.

MAC-address-specific profiles

Automatic Update profiles can be created for a single MAC address. This can be useful when some thin clients need a different configuration.

Profiles for a single MAC address must be stored on the Automatic Update server, in the following folder:

C:\Program Files (x86)\HP\HP Smart Client Service\auto-update \PersistentProfile\MAC\

When searching for updates, HP ThinPro looks for the generic profile first, and then a MAC-address-based profile. These profiles are merged and installed together on the thin client. The MAC-address-based profile takes precedence; that is, if the same registry key has a different value in both files, the value in the MAC-address-based profile is used.

This ensures that a shared configuration can be provided to all thin clients, but a specific customization can be added, if necessary.

This section describes how to create an Automatic Update profile for a single MAC address.

Obtain the MAC address of the thin client using the system info. For example, the following steps use the MAC address 00fcab8522ac.
Use Profile Editor to create or modify a client profile (see Profile Editor on page 68) until you are ready to save the client profile.
In Profile Editor, select the Finish link in the left-hand pane to access the Current profile pane.
Select Save profile as to save the client profile as the following:
C:\Program Files (x86)\HP\HP Smart Client Service\auto-update \PersistentProfile\MAC\00fcab8522ac.xml

Viewing the Automatic Update website 65

Select the Finish button in the Current profile pane to exit Profile Editor.
Restart the thin client that uses the specified MAC address to initiate the Automatic Update process.
Updating thin clients

Using the broadcast update method

To do a broadcast update, plug the thin client into the same network as the update server. A broadcast update relies on HP Smart Client Services, which works with IIS to automatically push updates to the thin client.

 

NOTE: Broadcast updates work only if the thin client is on the same subnet as the server.

 

TIP: To verify that the broadcast updates are working, run Profile Editor and make some changes. Connect the thin client and verify that it has downloaded the new profile. If it has not, see Troubleshooting on page 73.

 

Using the DHCP tag update method

On the Windows Server systems, DHCP tagging enables a thin client to update. Use this method to update specific thin clients; however, if you have only one or two clients to update, consider using the manual update method instead. Otherwise, HP recommends the broadcast update method.

Example of performing DHCP tagging

The example in this section shows how to perform DHCP tagging on a Windows 2008 R2 Server.

 

NOTE: To use DHCP tagging, see your DHCP server documentation.

 

On the server desktop, select Start > Administrative Tools > DHCP.
In the left pane of the DHCP screen, select the domain where the thin clients are connected.
In the right pane of the DHCP screen, expand and right-click IPv4, and then select Set Predefined Options.
In the Predefined Options and Values dialog, select Add.
In the Option Type box, configure the options as described in the following table.

Field

Entry

Name

Enter auto-update.

Data Type

Select String.

Code

Enter 137.

Description

Enter HP Automatic Update.

 

Select OK.
In the Predefined Options and Values dialog, under Value > String, enter the update server address in the format of the following example: http://auto-update.dominio.com:18287/auto-update
To complete the setup, select OK. DHCP tagging is now ready to update specific thin clients.
66 Chapter 11 HP Smart Client Services

Using the DNS alias update method

During system startup, Automatic Update attempts to resolve the DNS alias auto-update. If that host name resolves, it attempts to check for updates at http://auto -update:18287. This update method enables thin clients to access a single update server across the entire domain, thus simplifying management for deployments with many subnets and DHCP servers.

To configure the DNS alias update method:

Change the hostname of the server hosting HP Smart Client Services to auto-update or create a DNS alias of auto-update for that server.
Using the manual update method

Use the manual update method to connect a thin client to a specific server for an update. Also, use this method if you want to test an update on a single thin client before pushing the update to many thin clients, or if you have specific updates to be installed on only one or two thin clients.

 

NOTE: Be sure you specify the hostname of the manual server in the profile that you are updating to. Otherwise the settings reset to automatic when downloading the profile. Use Profile Editor to modify these settings at root/auto-update.

 

NOTE: If multiple thin clients require specific updates, use the DHCP tagging method.

If no update segregation is required, use the broadcast update method.

 

Performing a manual update

Select Management > Automatic Update in Control Panel.
Select Enable manual configuration.
Set the Protocol as http.
In the Server field, enter the update server hostname and port in the following format:
<hostname>:18287

In the Path field, enter the following: auto-update
Select Preserve thin client configuration if you want to preserve all previously configured settings.
Select OK, and then the thin client will pull the updates.
Updating thin clients 67

12 Profile Editor

HP Smart Client Services contains Profile Editor, which allows administrators to create client profiles and upload them to the Automatic Update server.

 

TIP: In addition to creating a new client profile, you can edit an existing profile that was exported using HP ThinState.

 

A client profile contains the connections, settings, and customizations that were configured using Connection Manager and various Control Panel items. A client profile is saved in a configuration file that is specific to the version of HP ThinPro in which it was created.

Opening Profile Editor

Select Start, select All Programs, select HP, select HP Automatic Update Server, and then select Profile Editor.
Loading a client profile

The name of the currently-loaded client profile is indicated on the initial screen of Profile Editor.

To load a different client profile:

At the initial screen of Profile Editor, select the link that displays the name of the currently-loaded client profile.
Navigate to a client profile, and then select Open.
Client profile customization

Selecting the platform for a client profile

Use the Platform screen in Profile Editor to do the following:

Select the desired HP ThinPro image version that is compatible with your hardware
Choose between ThinPro and Smart Zero
View installed client kits that provide additional registry settings

NOTE: Client kits should be placed in the following directory:

 

C:\Program Files (x86)\HP\HP Smart Client Service\auto-update\Packages

 

To configure a client profile’s platform settings:

On the Platform screen in Profile Editor, select an OS Build ID that corresponds to the desired image version.

IMPORTANT: Be sure to create a different client profile for each hardware type.

 

68 Chapter 12 Profile Editor

NOTE: If a client kit is installed, it is displayed automatically in the Client Kits box, and additional registry settings will be available on the Registry screen.

 

Set the configuration to either standard (ThinPro) or zero (Smart Zero).

NOTE: For older image versions, this setting is greyed out and set to zero automatically.

 

Configuring a default connection for a client profile

To configure a default connection for a client profile:

On the Connection screen in Profile Editor, choose the desired connection type from the Type drop-down list.

NOTE: The available connection types differ depending on whether you chose ThinPro or Smart Zero on the Platform screen.

 

In the Server field, enter the name or IP address of the server.
Modifying the registry settings of a client profile

To change default registry settings for a client profile:

On the Registry screen in Profile Editor, expand the folders in the Registry settings tree to locate the registry setting you want to change.
Select the registry key, and then enter the desired value in the Value field.

NOTE: See Registry keys on page 79 for a comprehensive list and description of registry keys.

 

Adding files to a client profile

Use the Files screen in Profile Editor to add configuration files that will be installed on the thin client automatically when the client profile is installed. This is typically used for the following reasons:

To add certificates
To modify device settings when a registry setting for the change is unavailable
To modify the behavior of the system by inserting custom scripts or modifying existing scripts
You can also specify a symbolic link that points to a file already installed on the thin client. Use this when the file needs to be accessed from more than one directory.

Adding a configuration file to a client profile

On the Files screen in Profile Editor, select Add a file.
Select Import File, locate the file to be imported, and then select Open.

NOTE: Files can also be exported using the Export File button, if further details about the file are required.

 

In the Path field, enter the path where the file will be installed on the thin client.
In the File details section, set the Owner, Group, and Permissions fields to the appropriate values.
Client profile customization 69

NOTE: Typically, setting the owner and group as root and the permissions as 644 is satisfactory. If a special owner, group, or permissions are required, refer to standard Unix® file permissions for guidelines on changing the file details.

 

Select Save to finish adding the configuration file to the client profile.

NOTE: A file installed as part of a profile will automatically overwrite any existing file on the file system at the destination path. Additionally, a second profile without the file attached will not revert previously attached files. All files that have been installed through profile attachment are permanent and must be reverted manually or through a factory reset.

 

Adding certificates to a client profile

Client profiles automatically include certificates that are imported to a standard client certificate store for the following applications:

VMware Horizon View, Citrix, RDP
Automatic Update
HP Smart Client Services
Web browser stores
To import other certificates to a client profile:

On the Files screen in Profile Editor, select Add a file.
Select Import File, locate the certificate, and then select Open.

NOTE: The certificate should be formatted as a .pem or .crt file.

 

In the Path field, set the path to the following:
/usr/local/share/ca-certificates

Select Save to finish adding the certificate to the client profile.
After installing the client profile, use Certificate Manager to confirm that the certificate was imported properly.
Adding a symbolic link to a client profile

On the Files screen in Profile Editor, select Add a file.
In the Type drop-down list, select Link.
In the Symbolic link details section, set the Link field to the path of the desired file already installed on the thin client.
Select Save to finish adding the symbolic link.
Saving the client profile

In Profile Editor, select Finish in the left-hand pane to access the Current profile screen.
Select Save Profile to save to the current client profile, or select Save Profile As to save as a new client profile.

NOTE: If Save Profile is disabled, your client profile has not changed since the last time it was saved.

 

Select the Finish button in the Current profile screen to exit Profile Editor.
70 Chapter 12 Profile Editor

Serial or parallel printer configuration

You can use Profile Editor to set up the serial or parallel printer ports. A USB printer automatically maps when plugged in.

Obtaining the printer settings

Before configuring printer ports, obtain the printer’s settings. If available, check the printer’s documentation before going further. If it is not available, follow these steps:

For most printers, press and hold the Feed button while turning the device on.
After a few seconds, release the Feed button. This allows the printer to enter a test mode and print the required information.

TIP: You might need to turn the printer off to cancel the Test mode or press Feed again to print a diagnostic page.

 

Setting up printer ports

In Profile Editor, select Registry, and then enable the Show all settings check box.
Enable printer port mapping for your connection type:
Citrix: No action is required.
RDP: Navigate to root > ConnectionType > freerdp. Right-click the connections folder, select New connection, and then select OK. Set the portMapping registry key to 1 to enable printer port mapping.
VMware Horizon View: Navigate to root > ConnectionType > view. Right-click the connections folder, select New connection, and then select OK. Under the xfreerdpOptions folder, set the portMapping registry key to 1 to enable printer port mapping.
Navigate to root > Serial. Right-click the Serial folder, select New UUID, and then select OK.
Under the new directory, set the baud, dataBits, flow, and parity values to the ones obtained in Obtaining the printer settings on page 71.
Set the device value to the port the printer will be plugged into. For example, the first serial port would be /dev/ttyS0, the second serial port would be /dev/ttyS1, and so on. For USB serial printers, use the format /dev/ttyUSB#, where # is the number of the port, starting with 0.

Installing printers on the server

On the Windows desktop, select Start > Printers and Faxes.
Select Add Printer, and then select Next.
Select Local Printer attached to this Computer and, if required, deselect Automatically detect and install my Plug and Play printer.
When completed, select Next.
In the menu, select a port.
Serial or parallel printer configuration 71

NOTE: The port you need is in the section of ports labeled TS###, where ### is a number between 000–009, 033–044. The appropriate port depends on your hostname and the printer you want to install. For example, with a hostname of ZTAHENAKOS and a serial printer, select the port with (ZTAHENAKOS:COM1). For a parallel printer, select (ZTAHENAKOS:LPT1). The TS### is assigned by the server, so it will not be the same every time.

 

Select the manufacturer and driver for your printer.

TIP: If desired, use the driver disc Windows Update to install the driver.

 

NOTE: For basic or test printing, the Generic Manufacturer or Generic/Text Only printer usually works.

 

If prompted to keep the existing driver and it is known to work, keep it, and then select Next.
Assign a name to the printer. To use it as the default printer, select Yes, and then select Next.
To share the printer, select Share name and assign it a share name. Otherwise, select Next.
On the next page, you may request a test print. HP recommends this because it will verify the printer setup is correct. If it is not set up properly, review the settings and try again.

NOTE: If the thin client disconnects from the server, the printer will need to be set up again the next time the thin client connects.

 

72 Chapter 12 Profile Editor

13 Troubleshooting

Troubleshooting network connectivity

Ping a server by completing the following steps:
Select the System Information button on the taskbar, and then select the Net Tools tab.
Under Select Tool, select Ping.
In the Target Host box, enter the server address, and then select Start Process.
If the ping is successful, the system displays the following output:

PING 10.30.8.52 (10.30.8.52) 56(84) bytes of data.

64 bytes from 10.30.8.52:icmp_seq-1 ttl=64 time=0.81 5 ms 64 bytes from 10.30.8.52:icmp_seq=2 ttl=64 time=0.735 ms

If the ping is unsuccessful, the thin client might be disconnected from the network and experience a long delay with no system output.

If the thin client does not respond to the ping, complete the following steps:
Check the network cable and check the network settings in Control Panel.
Try pinging other servers or thin clients.
If you can reach other thin clients, verify that you typed the correct server address.
Ping the server using the IP address instead of the domain name or vice-versa.
Check the system logs by doing the following:
Select the System Information button on the taskbar, and then select the System Logs tab.
Check for any errors in the logs.
If there is an error, then the Server is not set up notification appears. Verify that the server is set up properly and that HP Smart Client Services is running.
Troubleshooting Citrix password expiration

If users are not being prompted to change expired Citrix passwords, then make sure the XenApp Services site (PNAgent site) has the Prompt authentication method set to allow users to change expired passwords. If you allow users to change their passwords by connecting directly to the domain controller, then make sure the time of the thin client is in sync with the domain controller and use the full domain name (for example, domain_name.com) when entering the Citrix login credentials. For more information, see Citrix documentation.

Using system diagnostics to troubleshoot

System diagnostics take a snapshot of the thin client that can be used to help solve issues without physical access to the thin client. This snapshot contains log files from the BIOS information and the processes active at the time the system diagnostics were run.

Troubleshooting network connectivity 73

TIP: You can change the Debug level setting in the System Logs tab of the System Information window to specify the amount of information to be included in the diagnostic report. This information may be requested by HP for troubleshooting. Because the system resets log files when it reboots, be sure to capture logs before a reboot.

 

For the most useful logs, set the level to capture a high level of detail before reproducing the problem and creating a diagnostic report.

 

Saving system diagnostic data

Insert a USB flash drive into the thin client.
Select the System Information button on the taskbar, and then select the System Logs tab.
Select Diagnostic, and then save the compressed diagnostic file Diagnostic.tgz to the USB flash drive.
Uncompressing the system diagnostic files

The system diagnostic file Diagnostic.tgz is compressed and will need to be uncompressed before you can view the diagnostic files.

Uncompressing the system diagnostic files on Windows-based systems

Download and install a copy of the Windows version of 7-Zip.

NOTE: You may obtain a free copy of 7-Zip for Windows at http://www.7-zip.org/download.html.

 

Insert the USB flash drive that contains the saved system diagnostic file, and then copy Diagnostic.tgz to the desktop.
Right-click Diagnostic.tgz and select 7-zip > Extract files.
Open the newly created folder named Diagnostic and repeat step 3 on Diagnostic.tar.
Uncompressing the system diagnostic files in Linux- or Unix-based systems

Insert the USB flash drive that contains the saved system diagnostic file, and then copy Diagnostic.tgz to the home directory.
Open a terminal and browse to the home directory.
On the command line, enter tar xvfz Diagnostic.tgz.
Viewing the system diagnostic files

The system diagnostic files are divided into the Commands, /var/log, and /etc folders.

Viewing files in the Commands folder

This table describes the files to look for in the Commands folder.

 

File

Description

demidecode.txt

This file contains information on the system BIOS and graphics.

dpkg_–list.txt

This file lists the packages installed at the time system diagnostics were run.

ps_-ef.txt

This file lists the active processes at the time system diagnostics were run.

74 Chapter 13 Troubleshooting

Viewing files in the /var/log folder

The useful file in the /var/log folder is Xorg.0.log.

Viewing files in the /etc folder

The /etc folder contains the file system at the time the system diagnostics were run.

Using system diagnostics to troubleshoot 75

USB updates
When USB updates are enabled (see Customization Center on page 61), you can use a USB flash drive to simultaneously install multiple add-ons and certificates, as well as deploy a profile.

To perform USB updates:

Place the desired files onto a USB flash drive.

NOTE: The files can be placed in the root directory or in subfolders.

 

Connect the USB flash drive to the thin client.
Updates are detected automatically and displayed in the USB Update dialog, in which you can search and view details about the detected updates.

Select the check boxes next to the updates you want to install, and then select Install.
After installation, restart the thin client if prompted.
HP ThinUpdate

HP ThinUpdate allows you to download images and add-ons from HP and create bootable USB flash drives for image deployment. For more information see the Administrator Guide for HP ThinUpdate.

76 Appendix A USB updates

BIOS tools (desktop thin clients only)
There are two kinds of BIOS tools for HP ThinPro:

BIOS settings tool: Used to retrieve or modify BIOS settings
BIOS flashing tool: Used to update the BIOS
These tools can be run via an X terminal.

BIOS settings tool

The following table describes the syntax for the BIOS settings tool.

 

NOTE: Changes do not take effect until the next reboot.

 

Syntax

Description

hptc-bios-cfg –G <file name>

Retrieves the current BIOS settings and saves them to the

specified file so they can be viewed or modified (CPQSETUP.TXT

by default).

hptc-bios-cfg –S <file name>

Writes the BIOS settings from the specified file (CPQSETUP.TXT by

default) to the BIOS.

hptc-bios-cfg –h

Displays a list of options.

BIOS flashing tool

The following table describes the syntax for the BIOS flashing tool.

 

NOTE: Changes do not take effect until the next reboot.

 

Syntax

Description

hptc-bios-flash <image name>

Prepares the system to update the BIOS during the next restart.

This command automatically copies the files into the correct

location and prompts you to restart the thin client.

NOTE: This command requires that the Tool-less update option

in the BIOS settings is set to Auto.

hptc-bios-flash –h

Displays a list of options.

BIOS settings tool 77

Resizing the flash drive partition

IMPORTANT: HP thin clients that ship from the factory with HP ThinPro use the entire flash drive. The image capture methods capture the smallest possible image, allowing images from larger flash drives to be deployed onto smaller flash drives that have enough space for the captured image. Resizing the flash drive partition should no longer be necessary for HP thin clients that ship from the factory with HP ThinPro. For thin clients with HP ThinPro that are not using the entire flash drive for any reason, see the following information.

 

To use the entire space of the flash drive, you have to modify the partition size and expand the file system to take up that additional space. This can be accomplished using the resize-image script via an X terminal.

 

NOTE: When an image is deployed via HPDM, HP ThinState, or Automatic Update, the file system is automatically resized to use all available space on the flash drive.

 

The following table describes the syntax for the resize-image script.

 

Syntax

Description

resize-image

When called with no parameters, the script displays the current

size of the partition and the amount of available space on the

flash drive. The script prompts you to enter the target partition

size and then confirm the change. The change takes effect after

the next thin client restart.

NOTE: It is not possible to decrease the partition size. The

entered value must be larger than the current partition size.

resize-image –size <size in MB>

Using this syntax, you can specify the target partition size in

Example: resize-image –size 1024

megabytes (MB) as a parameter and then confirm the change.

resize-image –no-prompt

Using this syntax, the script runs automatically with no user

– or –

interaction required.

If no specific size is given as a parameter simultaneously, the

resize-image –no-prompt –size <size in MB>

partition size is increased to the maximum size.

Example: resize-image –no-prompt –size 1024

TIP: This non-interactive mode is useful for scripting and

performing this operation from a remote administration tool like

HP Device Manager.

78 Appendix C Resizing the flash drive partition

Registry keys
The HP ThinPro registry keys are grouped into folders and can be modified in several different ways:

Using a _File and Registry task in HPDM.
Using the Registry Editor component of Profile Editor and then deploying the new profile.
Using Registry Editor in the HP ThinPro user interface, which is available in the Tools menu in administrator mode.
Each top-level section in this appendix corresponds to one of the top-level registry folders.

 

NOTE: Some registry keys might apply to ThinPro or Smart Zero only.

 

Audio

 

Registry key

Description

root/Audio/AdjustSoundPath

Sets the full path to the sound played when the playback volume

is changed via the volume controls.

root/Audio/JackRetask

This registry key applies only to thin clients that have re-

purposable jacks.

For the t730’s lower front port:

●0/1: No change / headphone

●2: Microphone

For the t630’s back port:

●0: No change / line in

●1: Headphone / line out

You must restart the thin client after changing these settings.

root/Audio/OutputMute

If set to 1, the internal speaker and headphone jack are muted.

root/Audio/OutputScale

Sets the volume scale for the internal speaker and headphone

jack, ranging from 1 to 400.

root/Audio/OutputScaleAuto

If set to 1, the OutputScale value will be set automatically

based on the thin client model.

root/Audio/OutputVolume

Sets the volume for the internal speaker and headphone jack,

ranging from 1 to 100.

root/Audio/PlaybackDevice

Sets the device to use for playback.

root/Audio/PulseBuffer

The recommended range for this value is between 1024 and

8192. A value that is too high might cause jittering in playback,

while a value that is too low might cause the thin client to crash.

root/Audio/RecordDevice

Sets the device to use for capture.

root/Audio/RecordMute

If set to 1, the microphone jack is muted.

Audio 79

Registry key

Description

root/Audio/RecordScale

Sets the volume scale for the microphone jack, ranging from 1 to

400.

root/Audio/RecordScaleAuto

If set to 1, the RecordScale value will be set automatically

based on the thin client model.

root/Audio/RecordVolume

Sets the volume for the microphone jack, ranging from 1 to 100.

root/Audio/VisibleInSystray

If set to 1, a speaker icon is visible in the system tray.

root/Audio/shortcutPassThrough

Defines the apps that allow audio shortcuts to be passed through

using a space-separated list. The available options are freerdp,

view, and xen.

 

CertMgr

This registry category is used internally and does not have any user-defined entries.

ComponentMgr

 

Registry key

Description

root/ComponentMgr/

If set to 1, warning information will not be shown while deleting a

NotShowDeleteSnapshotWarning

snapshot.

ConnectionManager

 

Registry key

Description

root/ConnectionManager/

If set to 1, sample user-modifiable connection icons are created

createSampleConnections

on the desktop on first boot.

root/ConnectionManager/customLogoPath

root/ConnectionManager/defaultConnection

To properly launch a connection on startup, this must be set to a

valid connection using the format <type>:<label> like in the

following example:

xen:Default Connection

root/ConnectionManager/minHeight

root/ConnectionManager/minWidth

root/ConnectionManager/splashLogoPath

Sets the full path to the image displayed while a connection is

loading.

root/ConnectionManager/useKioskMode

root/ConnectionManager/

If set to 1, the image set by splashLogoPath is enabled. By

useSplashOnConnectionStartup

default, this is enabled for ThinPro and disabled for Smart Zero.

80 Appendix D Registry keys

ConnectionType

custom

 

Registry key

Description

root/ConnectionType/custom/authorizations/

If set to 1, an end user has permission to add a new connection of

user/add

this type using Connection Manager. This key has no effect on

Smart Zero.

root/ConnectionType/custom/authorizations/

If set to 1, an end user has permission to modify the general

user/general

settings for this connection type using Connection Manager. This

key has no effect on Smart Zero.

root/ConnectionType/custom/connections/

Sets the command to execute after the connection has been

<UUID>/afterStartedCommand

started.

root/ConnectionType/custom/connections/

Sets the command to execute after the connection has been

<UUID>/afterStoppedCommand

stopped.

root/ConnectionType/custom/connections/

If set to 1, an end user has permission to modify the connection

<UUID>/authorizations/user/edit

settings for this connection.

root/ConnectionType/custom/connections/

If set to 1, an end user has permission to execute this connection.

<UUID>/authorizations/user/execution

root/ConnectionType/custom/connections/

If set to 1, the connection will be restarted when it is closed or

<UUID>/autoReconnect

disconnected.

root/ConnectionType/custom/connections/

Sets the amount of time in seconds to wait before reconnecting

<UUID>/autoReconnectDelay

the session. The default of 0 will cause the connection to

reconnect immediately. This setting only takes effect when

autoReconnect is set to 1.

root/ConnectionType/custom/connections/

If set to a value of 1–5, the connection will be started

<UUID>/autostart

automatically after the system boots, with the value of 1 having

the highest priority.

root/ConnectionType/custom/connections/

Sets the command to execute before the connection starts.

<UUID>/beforeStartingCommand

root/ConnectionType/custom/connections/

Sets the main command for the custom connection to execute.

<UUID>/command

root/ConnectionType/custom/connections/

This registry key is either used internally or reserved for future

<UUID>/connectionEndAction

use. The value should not be changed.

root/ConnectionType/custom/connections/

This registry key is either used internally or reserved for future

<UUID>/coord

use. The value should not be changed.

root/ConnectionType/custom/connections/

This registry key is either used internally or reserved for future

<UUID>/dependConnectionId

use. The value should not be changed.

root/ConnectionType/custom/connections/

Sets the name of an extra environment variable for use with the

<UUID>/extraEnvValues/<UUID>/key

connection.

root/ConnectionType/custom/connections/

Sets the value of an extra environment variable for use with the

<UUID>/extraEnvValues/<UUID>/value

connection.

root/ConnectionType/custom/connections/

Sets the fallback connection via its UUID.

<UUID>/fallBackConnection

root/ConnectionType/custom/connections/

If set to 1, the desktop icon for this connection is enabled. This

<UUID>/hasDesktopIcon

key has no effect on Smart Zero.

ConnectionType 81

Registry key

Description

root/ConnectionType/custom/connections/

Sets the x,y coordinates of a pinned desktop icon. If not specified,

<UUID>/iconPosition

the icon floats.

root/ConnectionType/custom/connections/

Sets the connection name that is displayed in the UI. On Smart

<UUID>/label

Zero, this will typically be set to Default Connection and

does not display in the UI.

root/ConnectionType/custom/connections/

If set to the default focus and the connection is already started,

<UUID>/startMode

the connection will be given focus. Otherwise, an error will be

returned stating that the connection is already started.

root/ConnectionType/custom/connections/

If set to 1, the connection will not be launched until networking is

<UUID>/waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

root/ConnectionType/custom/coreSettings/

Specifies if this connection type is USB-relevant. If it is, it might

USBrelevant

have a USB plugin for redirecting USB devices.

root/ConnectionType/custom/coreSettings/

Sets the internal application name to use for this connection type.

appName

This key should not need to be modified.

root/ConnectionType/custom/coreSettings/

Sets the internal application class name to use for this connection

className

type. This key should not need to be modified.

root/ConnectionType/custom/coreSettings/

Sets the internal application name to use when Connection

editor

Manager is launched for this connection type. This key should not

need to be modified.

root/ConnectionType/custom/coreSettings/

Sets the internal application name to use when the General

generalSettingsEditor

Settings Manager is launched for this connection type. This key

should not need to be modified.

root/ConnectionType/custom/coreSettings/icon

Specifies the icon from the icon theme set to use for this

connection.

root/ConnectionType/custom/coreSettings/

Sets the path to the 16 × 16 pixel icon for this application.

icon16Path

root/ConnectionType/custom/coreSettings/

Sets the path to the 32 × 32 pixel icon for this application.

icon32Path

root/ConnectionType/custom/coreSettings/

Sets the path to the 48 × 48 pixel icon for this application.

icon48Path

root/ConnectionType/custom/coreSettings/

Reserved for future use.

iconActive

root/ConnectionType/custom/coreSettings/label

Sets the name to display for this connection type in the UI.

root/ConnectionType/custom/coreSettings/

Sets the priority of this connection type when it is displayed in

priorityInConnectionLists

Connection Manager and the configuration wizard that displays

during initial setup. A higher value moves the connection type

towards the top of the list. If set to 0, the connection type is

hidden from the configuration wizard and is shown last in

Connection Manager. Connection types with the same priority are

listed in alphabetical order.

root/ConnectionType/custom/coreSettings/

Sets whether a server name or address is unused, optional,

serverRequired

or required for this connection type.

root/ConnectionType/custom/coreSettings/

Sets the behavior that should occur when connection-mgr

stopProcess

stop is called on this connection. By default this is close, which

will send a standard kill signal to the process. When set to kill,

the process specified by appName will be forcefully killed. When

 

82 Appendix D Registry keys

Registry key

Description

set to custom, a custom execution script specified by

wrapperScript will be executed with the argument stop to

terminate the process gracefully.

root/ConnectionType/custom/coreSettings/tier

Specifies the relative importance of this connection type and the

order in which it is listed in the Create menu.

root/ConnectionType/custom/coreSettings/

If set to 1, the connection is monitored under the name specified

watchPid

by appName. This key should not need to be modified.

root/ConnectionType/custom/coreSettings/

Sets the script or binary to execute when launching this

wrapperScript

connection type. This is the primary script handling all connection

settings and command line arguments for the connection. This

key should not need to be modified.

root/ConnectionType/custom/gui/CustomManager/

This registry key is either used internally or reserved for future

name

use. The value should not be changed.

root/ConnectionType/custom/gui/CustomManager/

This registry key is either used internally or reserved for future

status

use. The value should not be changed.

root/ConnectionType/custom/gui/CustomManager/

This registry key is either used internally or reserved for future

title

use. The value should not be changed.

root/ConnectionType/custom/gui/CustomManager/

Controls the state of the Auto reconnect widget in Custom

widgets/autoReconnect

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/custom/gui/CustomManager/

Controls the state of the Auto start priority widget in Custom

widgets/autostart

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/custom/gui/CustomManager/

Controls the state of the Enter command to run widget in Custom

widgets/command

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/custom/gui/CustomManager/

Controls the state of the Fallback Connection widget in Custom

widgets/fallBackConnection

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/custom/gui/CustomManager/

Controls the state of the Show icon on desktop widget in Custom

widgets/hasDesktopIcon

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/custom/gui/CustomManager/

Controls the state of the Name widget in Custom Connection

widgets/label

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/custom/gui/CustomManager/

Controls the state of the Wait for network before connecting

widgets/waitForNetwork

widget in Custom Connection Manager. If set to active, the

widget is visible in the UI and the user can interact with it. If set to

 

ConnectionType 83

Registry key Description

 

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

 

firefox

 

Registry key

Description

root/ConnectionType/firefox/authorizations/

If set to 1, an end user has permission to add a new connection of

user/add

this type using Connection Manager. This key has no effect on

Smart Zero.

root/ConnectionType/firefox/connections/

Sets the URL or IP address to connect to.

<UUID>/address

root/ConnectionType/firefox/connections/

Sets the command to execute after the connection has been

<UUID>/afterStartedCommand

started.

root/ConnectionType/firefox/connections/

Sets the command to execute after the connection has been

<UUID>/afterStoppedCommand

stopped.

root/ConnectionType/firefox/connections/

If set to 1, an end user has permission to modify the connection

<UUID>/authorizations/user/edit

settings for this connection.

root/ConnectionType/firefox/connections/

If set to 1, an end user has permission to execute this connection.

<UUID>/authorizations/user/execution

root/ConnectionType/firefox/connections/

If set to 1, the connection will be restarted when it is closed or

<UUID>/autoReconnect

disconnected.

root/ConnectionType/firefox/connections/

Sets the amount of time in seconds to wait before reconnecting

<UUID>/autoReconnectDelay

the session. The default of 0 will cause the connection to

reconnect immediately. This setting only takes effect when

autoReconnect is set to 1.

root/ConnectionType/firefox/connections/

If set to a value of 1–5, the connection will be started

<UUID>/autostart

automatically after the system boots, with the value of 1 having

the highest priority.

root/ConnectionType/firefox/connections/

Reserved for future use.

<UUID>/autostartDelay

root/ConnectionType/firefox/connections/

Sets the command to execute before the connection starts.

<UUID>/beforeStartingCommand

root/ConnectionType/firefox/connections/

This registry key is either used internally or reserved for future

<UUID>/connectionEndAction

use. The value should not be changed.

root/ConnectionType/firefox/connections/

This registry key is either used internally or reserved for future

<UUID>/coord

use. The value should not be changed.

root/ConnectionType/firefox/connections/

This registry key is either used internally or reserved for future

<UUID>/dependConnectionId

use. The value should not be changed.

root/ConnectionType/firefox/connections/

If set to 1, the Print dialog in the web browser can be used.

<UUID>/enablePrintDialog

root/ConnectionType/firefox/connections/

If set to 1, smart card login is enabled for Citrix connections

<UUID>/enableSmartCard

created via the web browser.

root/ConnectionType/firefox/connections/

Sets the name of an extra environment variable for use with the

<UUID>/extraEnvValues/<UUID>/key

connection.

84 Appendix D Registry keys

Registry key

Description

root/ConnectionType/firefox/connections/

Sets the value of an extra environment variable for use with the

<UUID>/extraEnvValues/<UUID>/value

connection.

root/ConnectionType/firefox/connections/

Sets the fallback connection via its UUID.

<UUID>/fallBackConnection

root/ConnectionType/firefox/connections/

This registry key only works when Allow connections to manage

<UUID>/forbiddenFiles

their own settings is selected in the Web Browser Connection

General Settings Manager. The files listed in this registry key’s

value will be removed after a Web Browser connection is ended.

The file names should be separated by a comma, and a wildcard is

supported. For example: *.rdf,cookies.sqlite

root/ConnectionType/firefox/connections/

If set to 1, the web browser will start in full screen. If kioskMode

<UUID>/fullscreen

is disabled, the browser UI is accessible in full screen mode.

root/ConnectionType/firefox/connections/

If set to 1, the desktop icon for this connection is enabled. This

<UUID>/hasDesktopIcon

key has no effect on Smart Zero.

root/ConnectionType/firefox/connections/

Sets the x,y coordinates of a pinned desktop icon. If not specified,

<UUID>/iconPosition

the icon floats.

root/ConnectionType/firefox/connections/

Sets the intended usage of this Web Browser connection to

<UUID>/intendedUse

Citrix, RDP, or Internet.

root/ConnectionType/firefox/connections/

If set to 1, the web browser will launch in kiosk mode, meaning

<UUID>/kioskMode

that the web browser will start in full screen (even if

fullscreen is set to 0) and the browser UI is inaccessible.

root/ConnectionType/firefox/connections/

Sets the connection name that is displayed in the UI. On Smart

<UUID>/label

Zero, this will typically be set to Default Connection and

does not display in the UI.

root/ConnectionType/firefox/connections/

If set to 1, the connection manages its own preferences and

<UUID>/manageOwnPrefs

stores them in the following location: /etc/firefox/

<UUID>. If set to 0, the connection uses shared preferences.

root/ConnectionType/firefox/connections/

If set to 1, the web browser’s Back and Forward buttons are

<UUID>/showBackForwardButton

displayed when kiosk mode is enabled.

root/ConnectionType/firefox/connections/

If set to 1, the web browser’s Home button is displayed when

<UUID>/showHomeButton

kiosk mode is enabled.

root/ConnectionType/firefox/connections/

If set to 1, the web browser’s search bar is displayed when kiosk

<UUID>/showSearchBar

mode is enabled.

root/ConnectionType/firefox/connections/

If set to 1, the web browser’s tabs are displayed when kiosk mode

<UUID>/showTabsBar

is enabled.

root/ConnectionType/firefox/connections/

If set to 1, the web browser’s taskbar is displayed when kiosk

<UUID>/showTaskBar

mode is enabled.

root/ConnectionType/firefox/connections/

If set to 1, the web browser’s URL bar and Refresh button are

<UUID>/showUrlBarRefreshButton

displayed when kiosk mode is enabled.

root/ConnectionType/firefox/connections/

If set to the default focus and the connection is already started,

<UUID>/startMode

the connection will be given focus. Otherwise, an error will be

returned stating that the connection is already started.

root/ConnectionType/firefox/connections/

If set to 1, the connection will not be launched until networking is

<UUID>/waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

 

ConnectionType 85

Registry key

Description

root/ConnectionType/firefox/coreSettings/

Specifies if this connection type is USB-relevant. If it is, it might

USBrelevant

have a USB plugin for redirecting USB devices.

root/ConnectionType/firefox/coreSettings/

Sets the internal application name to use for this connection type.

appName

This key should not need to be modified.

root/ConnectionType/firefox/coreSettings/

Sets the internal application class name to use for this connection

className

type. This key should not need to be modified.

root/ConnectionType/firefox/coreSettings/

Sets the internal application name to use when Connection

editor

Manager is launched for this connection type. This key should not

need to be modified.

root/ConnectionType/firefox/coreSettings/icon

Specifies the icon from the icon theme set to use for this

connection.

root/ConnectionType/firefox/coreSettings/

Sets the path to the 16 × 16 pixel icon for this application.

icon16Path

root/ConnectionType/firefox/coreSettings/

Sets the path to the 32 × 32 pixel icon for this application.

icon32Path

root/ConnectionType/firefox/coreSettings/

Sets the path to the 48 × 48 pixel icon for this application.

icon48Path

root/ConnectionType/firefox/coreSettings/

Reserved for future use.

iconActive

root/ConnectionType/firefox/coreSettings/

Sets the name to display for this connection type in the UI.

label

root/ConnectionType/firefox/coreSettings/

Sets the priority of this connection type when it is displayed in

priorityInConnectionLists

Connection Manager and the Configuration Wizard that displays

during initial setup. A higher value will move the connection type

towards the top of the list. If set to 0, the connection type is

hidden from Configuration Wizard and is shown last in Connection

Manager. Connections types with the same priority are listed in

alphabetical order.

root/ConnectionType/firefox/coreSettings/

Sets the time in minutes before the web browser restarts when

restartIdleTime

the system is not receiving user input. If set to 0, restart is

disabled.

root/ConnectionType/firefox/coreSettings/

Sets whether a server name or address is unused, optional,

serverRequired

or required for this connection type.

root/ConnectionType/firefox/coreSettings/

Sets the behavior that should occur when connection-mgr

stopProcess

stop is called on this connection. By default this is close, which

will send a standard kill signal to the process. When set to kill,

the process specified by appName will be forcefully killed. When

set to custom, a custom execution script specified by

wrapperScript will be executed with the argument stop to

terminate the process gracefully.

root/ConnectionType/firefox/coreSettings/tier

Specifies the relative importance of this connection type and the

order in which it is listed in the Create menu.

root/ConnectionType/firefox/coreSettings/

Sets the script or binary to execute when launching this

wrapperScript

connection type. This is the primary script handling all connection

settings and command line arguments for the connection. This

key should not need to be modified.

root/ConnectionType/firefox/general/

If set to 1, the settings configured in the Firefox Preferences

enableUserChanges

dialog will be saved after each session.

 

86 Appendix D Registry keys

Registry key

Description

root/ConnectionType/firefox/gui/

This registry key is either used internally or reserved for future

FirefoxManager/name

use. The value should not be changed.

root/ConnectionType/firefox/gui/

This registry key is either used internally or reserved for future

FirefoxManager/status

use. The value should not be changed.

root/ConnectionType/firefox/gui/

This registry key is either used internally or reserved for future

FirefoxManager/title

use. The value should not be changed.

root/ConnectionType/firefox/gui/

Controls the state of the URL widget in Web Browser Connection

FirefoxManager/widgets/address

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/firefox/gui/

Controls the state of the Auto reconnect widget in Web Browser

FirefoxManager/widgets/autoReconnect

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Auto start priority widget in Web

FirefoxManager/widgets/autostart

Browser Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Enable print dialog widget in Web

FirefoxManager/widgets/enablePrintDialog

Browser Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Fallback Connection widget in Web

FirefoxManager/widgets/fallBackConnection

Browser Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Show icon on desktop widget in Web

FirefoxManager/widgets/hasDesktopIcon

Browser Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Enable kiosk mode widget in Web

FirefoxManager/widgets/kioskMode

Browser Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Name widget in Web Browser Connection

FirefoxManager/widgets/label

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/firefox/gui/

Controls the state of the Show Back and Forward Button widget

FirefoxManager/widgets/showBackForwardButton

in Web Browser Connection Manager. If set to active, the

widget is visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

 

ConnectionType 87

Registry key

Description

root/ConnectionType/firefox/gui/

Controls the state of the Show Home Button widget in Web

FirefoxManager/widgets/showHomeButton

Browser Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Show Search Bar widget in Web Browser

FirefoxManager/widgets/showSearchBar

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Show Tabs Bar widget in Web Browser

FirefoxManager/widgets/showTabsBar

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Show Task Bar widget in Web Browser

FirefoxManager/widgets/showTaskBar

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Show URL Bar and Refresh Button

FirefoxManager/widgets/

widget in Web Browser Connection Manager. If set to active,

showUrlBarRefreshButton

the widget is visible in the UI and the user can interact with it. If

set to inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Enable full screen widget in Web

FirefoxManager/widgets/startMode

Browser Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/firefox/gui/

Controls the state of the Wait for network before connecting

FirefoxManager/widgets/waitForNetwork

widget in Web Browser Connection Manager. If set to active,

the widget is visible in the UI and the user can interact with it. If

set to inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

 

freerdp

 

Registry key

Description

root/ConnectionType/freerdp/authorizations/

If set to 1, an end user has permission to add a new connection of

user/add

this type using Connection Manager. This key has no effect on

Smart Zero.

root/ConnectionType/freerdp/connections/

Specifies extra arguments for the xfreerdp client. Run

<UUID>/ExtraArgs

xfreerdp –help from an X terminal to see all available

arguments.

root/ConnectionType/freerdp/connections/

If enabled, the user, domain, and password combination for the

<UUID>/SingleSignOn

RDP connection is saved to unlock the screen saver.

root/ConnectionType/freerdp/connections/

Sets the hostname or IP address to connect to. The port number

<UUID>/address

can be appended on the end after a colon character. For example:

servername:3389

88 Appendix D Registry keys

Registry key

Description

root/ConnectionType/freerdp/connections/

Sets the command to execute after the connection has been

<UUID>/afterStoppedCommand

stopped.

root/ConnectionType/freerdp/connections/

Specifies an alternate shell or application to run.

<UUID>/application

root/ConnectionType/freerdp/connections/

<UUID>/attachToConsole

root/ConnectionType/freerdp/connections/

Sets the average milliseconds of offset between the audio stream

<UUID>/audioLatency

and the display of corresponding video frames after decoding.

root/ConnectionType/freerdp/connections/

If set to 1, an end user has permission to modify the connection

<UUID>/authorizations/user/edit

settings for this connection.

root/ConnectionType/freerdp/connections/

If set to 1, an end user has permission to execute this connection.

<UUID>/authorizations/user/execution

root/ConnectionType/freerdp/connections/

If set to 1, the connection will be restarted when it is closed or

<UUID>/autoReconnect

disconnected.

root/ConnectionType/freerdp/connections/

Sets the amount of time in seconds to wait before reconnecting

<UUID>/autoReconnectDelay

the session. The default of 0 will cause the connection to

reconnect immediately. This setting only takes effect when

autoReconnect is set to 1.

root/ConnectionType/freerdp/connections/

If set to a value of 1–5, the connection will be started

<UUID>/autostart

automatically after the system boots, with the value of 1 having

the highest priority.

root/ConnectionType/freerdp/connections/

If set to a value greater than 0, the value represents an

<UUID>/bandwidthLimitation

approximate bandwidth limitation for downloading and uploading

in kilobytes per second. If set to 0 (the default), there is no

limitation.

root/ConnectionType/freerdp/connections/

Sets the command to execute before the connection starts.

<UUID>/beforeStartingCommand

root/ConnectionType/freerdp/connections/

If set to 1, clipboard functionality is enabled between different

<UUID>/clipboardExtension

RDP sessions and between RDP sessions and the local system.

root/ConnectionType/freerdp/connections/

If set to 1, compression of RDP data sent between the client and

<UUID>/compression

the server is enabled.

root/ConnectionType/freerdp/connections/

Specifies the credential type between sso (single sign-on),

<UUID>/credentialsType

startup (credentials are requested at startup), password

(preconfigured user/domain/password), or smartcard

(preconfigured smart card).

root/ConnectionType/freerdp/connections/

This registry key is either used internally or reserved for future

<UUID>/dependConnectionId

use. The value should not be changed.

root/ConnectionType/freerdp/connections/

Specifies the startup directory where an alternate shell

<UUID>/directory

application is executed.

root/ConnectionType/freerdp/connections/

If set to 1, multimedia redirection is disabled if a valid RemoteFX

<UUID>/disableMMRwithRFX

session is established.

root/ConnectionType/freerdp/connections/

Sets the default domain to supply to the remote host during login.

<UUID>/domain

If a domain is not specified, the default domain for the remote

host will be used.

root/ConnectionType/freerdp/connections/

If set to 1, the Multimedia Redirection add-on is enabled, causing

<UUID>/enableMMR

supported codecs played through Windows Media Player to be

redirected to the client.

 

ConnectionType 89

Registry key

Description

root/ConnectionType/freerdp/connections/

Sets the name of an extra environment variable for use with the

<UUID>/extraEnvValues/<UUID>/key

connection.

root/ConnectionType/freerdp/connections/

Sets the value of an extra environment variable for use with the

<UUID>/extraEnvValues/<UUID>/value

connection.

root/ConnectionType/freerdp/connections/

Sets the fallback connection via its UUID.

<UUID>/fallBackConnection

root/ConnectionType/freerdp/connections/

Sets the number of video frames the server can push without

<UUID>/frameAcknowledgeCount

waiting for acknowledgement from the client. Lower numbers

result in a more responsive desktop but lower frame rate. If set to

0, frame acknowledgement is not used in the client-server

interactions.

root/ConnectionType/freerdp/connections/

Sets the RD Gateway server name or address.

<UUID>/gatewayAddress

root/ConnectionType/freerdp/connections/

Specifies the credential type between whether credentials are to

<UUID>/gatewayCredentialsType

be supplied by sso (single sign-on), startup (credentials are

requested at startup), or password (preconfigured user/domain/

password).

root/ConnectionType/freerdp/connections/

Sets the default domain to supply to the RD Gateway during login.

<UUID>/gatewayDomain

Usually, this setting is used with kiosk-style applications where a

generic user name is used to login. If

gatewayUsesSameCredentials is to 1, this value is

disabled.

root/ConnectionType/freerdp/connections/

If set to 1, RD Gateway is expected to be used.

<UUID>/gatewayEnabled

root/ConnectionType/freerdp/connections/

Sets the default password to supply to the RD Gateway during

<UUID>/gatewayPassword

login. This value is usually encrypted. Usually, this setting is used

with kiosk-style applications where a generic user name is used to

login. If gatewayUsesSameCredentials is to 1, this value is

disabled.

root/ConnectionType/freerdp/connections/

Sets the port number to use when contacting the RDP server. This

<UUID>/gatewayPort

value can be left empty. The most common value is 443.

root/ConnectionType/freerdp/connections/

Sets the default user name to supply to the RD Gateway during

<UUID>/gatewayUser

login. Usually, this setting is used with kiosk-style applications

where a generic user name is used to login. If

gatewayUsesSameCredentials is to 1, this value is

disabled.

root/ConnectionType/freerdp/connections/

If set to 1, the same credentials that are used to connect to the

<UUID>/gatewayUsesSameCredentials

final server are used to connect to the RD Gateway.

root/ConnectionType/freerdp/connections/

If set to 1, the desktop icon for this connection is enabled. This

<UUID>/hasDesktopIcon

key has no effect on Smart Zero.

root/ConnectionType/freerdp/connections/

If set to hostname, the system hostname is sent to the remote

<UUID>/hostnameType

host. This is typically used to identify the thin client associated

with a particular RDP session. The sent hostname can be

overridden using sendHostname in the connection-specific

settings. If set to mac, the MAC address of the first available

network adapter is sent instead of the hostname.

root/ConnectionType/freerdp/connections/

Sets the x,y coordinates of a pinned desktop icon. If not specified,

<UUID>/iconPosition

the icon floats.

 

90 Appendix D Registry keys

Registry key

Description

root/ConnectionType/freerdp/connections/

Sets the connection name that is displayed in the UI. On Smart

<UUID>/label

Zero, this will typically be set to Default Connection and

does not display in the UI.

root/ConnectionType/freerdp/connections/

This value is the load balancing cookie sent for brokering

<UUID>/loadBalanceInfo

purposes to the server upon connection and corresponds to the

loadbalanceinfo field in the .rdp file. By default, the value is

empty.

root/ConnectionType/freerdp/connections/

If set to 1, the local non-USB storage partitions are redirected to

<UUID>/localPartitionRedirection

the remote host via the Storage extension. If set to 0, the

extension is disabled for non-USB storage partitions that are not

used by HP ThinPro.

root/ConnectionType/freerdp/connections/

If set to 1, the Domain field is shown in the login dialog for the

<UUID>/loginfields/domain

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

root/ConnectionType/freerdp/connections/

If set to 1, the Password field is shown in the login dialog for the

<UUID>/loginfields/password

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

root/ConnectionType/freerdp/connections/

If set to 1, the Remember me check box is shown in the login

<UUID>/loginfields/rememberme

dialog for the connection. If set to 2, the check box is shown but

disabled. If set to 0, the check box is hidden.

root/ConnectionType/freerdp/connections/

If set to 1, the Server box is shown in the login dialog for the

<UUID>/loginfields/server

connection. If set to 2, the box is shown but disabled. If set to 0,

the box is hidden. If set to 3, the system settings are used.

root/ConnectionType/freerdp/connections/

If set to 1, the Show password check box is shown in the login

<UUID>/loginfields/showpassword

dialog for the connection. If set to 2, the check box is shown but

disabled. If set to 0, the check box is hidden.

root/ConnectionType/freerdp/connections/

If set to 1, the Smart card login check box is shown in the login

<UUID>/loginfields/smartcard

dialog for the connection. If set to 2, the check box is shown but

disabled. If set to 0, the check box is hidden. This check box might

not appear if no smart card is detected, even if this option is

enabled.

root/ConnectionType/freerdp/connections/

If set to 1, the User Name field is shown in the login dialog for the

<UUID>/loginfields/username

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

root/ConnectionType/freerdp/connections/

If set to 0, mouse motion events are not sent to the server. This

<UUID>/mouseMotionEvents

can prevent some user feedback such as tooltips from functioning

properly.

root/ConnectionType/freerdp/connections/

If set to 0, off-screen bitmaps are disabled. This can increase

<UUID>/offScreenBitmaps

performance slightly but will cause blocks of the screen to update

asynchronously, causing screen transitions to update non-

uniformly.

root/ConnectionType/freerdp/connections/

Sets the default password to supply to the remote host during

<UUID>/password

login. This value will be encrypted. Generally, this setting is used

for kiosk-style applications where a generic password is used for

login.

root/ConnectionType/freerdp/connections/

If set to 1, desktop composition (such as translucent borders) is

<UUID>/perfFlagDesktopComposition

allowed if supported by the server. Turning off desktop

composition can improve performance for low-bandwidth

connections. Generally, this only affects RemoteFX. If set to 2, the

value is selected based on the thin client performance.

 

ConnectionType 91

Registry key

Description

root/ConnectionType/freerdp/connections/

If set to 1, font smoothing is allowed if supported by the server

<UUID>/perfFlagFontSmoothing

and enabled. Turning off font smoothing can improve

performance on low-bandwidth connections. If set to 2, the value

is selected based on the thin client performance.

root/ConnectionType/freerdp/connections/

If set to 1, cursor blinking is disabled, which can improve

<UUID>/perfFlagNoCursorSettings

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/freerdp/connections/

If set to 1, mouse cursor shadows are disabled, which can improve

<UUID>/perfFlagNoCursorShadow

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/freerdp/connections/

If set to 1, menu animations are disabled, which can improve

<UUID>/perfFlagNoMenuAnimations

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/freerdp/connections/

If set to 1, user interface themes are disabled, which can improve

<UUID>/perfFlagNoTheming

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/freerdp/connections/

If set to 1, the desktop wallpaper is disabled, which can improve

<UUID>/perfFlagNoWallpaper

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/freerdp/connections/

If set to 1, full-content window dragging is disabled, which can

<UUID>/perfFlagNoWindowDrag

improve performance on low-bandwidth RDP connections. The

window outline is used instead. If set to 2, the value is selected

based on the thin client performance.

root/ConnectionType/freerdp/connections/

If set to 1, all serial and parallel ports are redirected to the remote

<UUID>/portMapping

host via the Ports extension. If set to 0, the extension is

disabled.

root/ConnectionType/freerdp/connections/

If set to 1, all printers defined locally via CUPS are redirected to

<UUID>/printerMapping

the remote host via the Printers extension. If set to 0, the

extension is disabled. If set to 2, the USB printers are redirected

as configured in USB Manager.

root/ConnectionType/freerdp/connections/

Sets the number of minutes there can be no RemoteApp and

<UUID>/rdWebFeed/autoDisconnectTimeout

Desktop resource running before the connection ends

automatically. A countdown counter is displayed during the last

20 seconds providing the user an opportunity to disarm the timer.

If set to 0 (the default), the timer is disabled.

root/ConnectionType/freerdp/connections/

If set to 1, and if only a single published resource (RemoteApp

<UUID>/rdWebFeed/autoStartSingleResource

program or virtual desktop) is returned by the server, that

resource will be started automatically.

root/ConnectionType/freerdp/connections/

Specifies the alias of a resource for the resource filter. RemoteApp

<UUID>/rdWebFeed/filter/<UUID>/alias

and Desktop resources with a matching alias will be available to

users.

root/ConnectionType/freerdp/connections/

Specifies the name of a resource for the resource filter.

<UUID>/rdWebFeed/filter/<UUID>/name

RemoteApp and Desktop resources with a matching name will be

available to users.

root/ConnectionType/freerdp/connections/

If set to 0, the resource selection window is closed automatically

<UUID>/rdWebFeed/keepResourcesWindowOpened

after a resource has started. If set to 1, the resource selection

window is kept open after resources have started. This allows a

user to start several resources before closing the resource

selection window.

 

92 Appendix D Registry keys

Registry key

Description

root/ConnectionType/freerdp/connections/

Specifies a comma-separated list of SHA1 thumbprints of the

<UUID>/rdWebFeed/

trusted resource publishers. Note that a certificate that matches

trustedPublisherSha1Thumbprints

one of these thumbprints is not verified. Import the publisher’s

root CA for better security. Also see the registry key

verifyPublisherSignature and Certificate Manager in

Control Panel.

root/ConnectionType/freerdp/connections/

If set to 1, the publisher’s signature is verified when available in

<UUID>/rdWebFeed/verifyPublisherSignature

published .rdp files. Only resources with a valid signature from a

trusted publisher can be run. If set to 0, no verification of the

signature is done. Also see the registry key

trustedPublisherSha1Thumbprints.

root/ConnectionType/freerdp/connections/

If set to 1, non-RemoteFX graphics performance is increased at

<UUID>/rdp6Buffering

the cost of less frequent screen updates.

root/ConnectionType/freerdp/connections/

If set to 1, RDP 8 codecs are used if available. This setting should

<UUID>/rdp8Codecs

be disabled only in the case of a defect specific to RDP 8 codecs.

Disabling this setting might also disable more advanced codecs.

root/ConnectionType/freerdp/connections/

If set to 1, standard RDP encryption is used to encrypt all data

<UUID>/rdpEncryption

between the client and the server.

root/ConnectionType/freerdp/connections/

If set to 1, RDP 8 H.264 codecs are used if available. This setting

<UUID>/rdpH264Codec

has known visual errors, particularly in multi-monitor

configurations, and should be considered experimental and

unsupported. Enabling this setting simply advises the server that

the thin client supports H.264 for desktop display. The server

must also support H.264, and the server makes the final decision

on what codecs are used. This setting affects only the desktop

codecs. It does not affect multimedia redirection codecs.

root/ConnectionType/freerdp/connections/

If set to 1, RDP 8 progressive codecs are used if available. This

<UUID>/rdpProgressiveCodec

setting should be disabled only in the case of a defect specific to

RDP 8 progressive codecs. Disabling this setting might also

disable more advanced codecs.

root/ConnectionType/freerdp/connections/

For redirection, the RDP client is given several destination

<UUID>/redirectPreference

possibilities. It normally tries them in the following order: FQDN,

Primary IP, IP List, NetBIOS. If FQDN is not desired, one of the

alternatives can be tried first by setting this registry key. If the

specified method does not work, the RDP client falls back to the

original order. A setting of auto forces the original order.

root/ConnectionType/freerdp/connections/

Specifies the name of an available application to run in Remote

<UUID>/remoteApp

Application Integrated Locally (RAIL) mode.

root/ConnectionType/freerdp/connections/

If set to Remote Computer, a direct RDP connection to a

<UUID>/remoteDesktopService

remote computer is done. If set to RD Web Access, a

connection to an RD Web Access service is done first to retrieve a

feed of the published RemoteApp resources.

root/ConnectionType/freerdp/connections/

If set to 1, RemoteFX in the style of RDP 7.1 is used if available.

<UUID>/remoteFx

This setting is deprecated and might disappear in a future release

of HP ThinPro. This setting should be disabled only in the case of a

defect specific to RemoteFX protocol. Disabling this setting might

also disable more advanced codecs.

root/ConnectionType/freerdp/connections/

If set to 1, the Remote Desktop Client refuses to connect to

<UUID>/requireEncryptionOracleRemediation

servers that do not offer suitable protections. This addresses

Microsoft security vulnerability CVE-2018-0886.

 

ConnectionType 93

Registry key

Description

root/ConnectionType/freerdp/connections/

If a preconfigured smart card login is selected, this gives an

<UUID>/scCertificate

identifier corresponding to the certificate on that smart card to be

used for authentication.

root/ConnectionType/freerdp/connections/

If a preconfigured smart card login is selected, this gives the PIN

<UUID>/scPin

or password for that smart card.

root/ConnectionType/freerdp/connections/

If set to 1, all local smart card readers are redirected to the

<UUID>/scRedirection

remote host but are not used for the Network Level

Authentication (NLA) of the RDP session.

NOTE: If credentialsType is set to smartcard or

smartcard is set to 1, scRedirection is ignored, depending on

the HP ThinPro version. In this configuration, the smart card

readers are always redirected.

root/ConnectionType/freerdp/connections/

If set to 1, window decorations are disabled. This can be desirable

<UUID>/seamlessWindow

in a multi-monitor configuration to allow the connection to be set

to the size of the primary monitor.

root/ConnectionType/freerdp/connections/

Sets the certificate security level. If set to 0, all connections are

<UUID>/securityLevel

allowed. If set to 1, remembered hosts are selected and a warning

dialog is shown if verification is not passed. If set to 2,

remembered hosts are not selected and a warning dialog is shown

if verification is not passed. If set to 3, all insecure connections

are refused.

root/ConnectionType/freerdp/connections/

Sets the thin client hostname that is sent to the remote host. If

<UUID>/sendHostname

left blank, the system hostname is sent. The registry key root/

ConnectionType/freerdp/general/sendHostname

must be set to hostname for this key to be used.

root/ConnectionType/freerdp/connections/

This is a diagnostic function. If set to 1, when the session starts, a

<UUID>/showConnectionGraph

separate program will be started to graph the connection’s health.

root/ConnectionType/freerdp/connections/

If set to 1, when the session starts, a separate window displays

<UUID>/showRDPDashboard

RDP performance and status.

root/ConnectionType/freerdp/connections/

If set to 1, local smartcard authentication to the remote host is

<UUID>/smartcard

allowed. Currently, this will disable Network Level Authentication

(NLA).

root/ConnectionType/freerdp/connections/

If set to 1, the playback and recording devices are redirected to

<UUID>/sound

the remote host via the Audio extension. If set to 0, the

extension is disabled. If set to 2, the USB audio devices are

redirected as configured in USB Manager. Generally, HP

recommends setting this value to 1 so that high-level audio

redirection is used. This will improve audio quality and ensure

that client audio redirected via other extensions (such as

Multimedia Redirection) matches local audio settings.

root/ConnectionType/freerdp/connections/

If set to the default focus and the connection is already started,

<UUID>/startMode

the connection will be given focus. Otherwise, an error will be

returned stating that the connection is already started.

root/ConnectionType/freerdp/connections/

Sets the number of milliseconds to wait after losing the

<UUID>/timeoutError

connection before giving up on reconnecting with the server. If set

to 0, reconnection is attempted forever.

root/ConnectionType/freerdp/connections/

Sets the number of milliseconds to wait after losing the

<UUID>/timeoutRecovery

connection for networking to recover without trying a forced

reconnect.

 

94 Appendix D Registry keys

Registry key

Description

root/ConnectionType/freerdp/connections/

Sets the number of milliseconds to wait after losing the

<UUID>/timeoutWarning

connection before warning the user that the connection has been

lost.

root/ConnectionType/freerdp/connections/

If set to 1, when an end-to-end connection drop is detected, a

<UUID>/timeoutWarningDialog

dialog is displayed and the screen will turn grayscale. Otherwise,

messages are written to the connection log and the session

freezes.

root/ConnectionType/freerdp/connections/

If set to 1, end-to-end connection health checks are done.

<UUID>/timeoutsEnabled

root/ConnectionType/freerdp/connections/

Sets the version of Transport Layer Security to be used during the

<UUID>/tlsVersion

early stages of negotiation with the RDP server. Either set this to

match the version of TLS used by your RDP server, or try setting it

to auto.

NOTE: There are some server-side defects in some unpatched

RDP servers that can cause the auto setting to fail, so it is not the

default setting.

root/ConnectionType/freerdp/connections/

If set to 0, redirection is disabled for all other USB devices except

<UUID>/usbMiscRedirection

those handled by sound, printerMapping, portMapping,

usbStorageRedirection, and

localPartitionRedirection. If set to 2, all other USB

devices are redirected to the remote host as configured in USB

Manager.

root/ConnectionType/freerdp/connections/

If set to 1, USB storage devices are redirected to the remote host

<UUID>/usbStorageRedirection

via the Storage extension. If set to 0, the extension is disabled.

If set to 2, USB storage devices are redirected as configured in USB

Manager.

root/ConnectionType/freerdp/connections/

Sets the default user name to supply to the remote host during

<UUID>/username

login. Generally, this setting is used for kiosk-style applications

where a generic user name is used for login.

root/ConnectionType/freerdp/connections/

If set to 1, the connection will not be launched until networking is

<UUID>/waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

root/ConnectionType/freerdp/connections/

If set to Remote Application, RDP will run in Remote

<UUID>/windowMode

Application Integrated Locally (RAIL) mode. This requires that the

RemoteApp server allows the desired application to run as a

remote application. The application will be displayed in a separate

window within the desktop environment, making it look like the

application is part of the local system. Also see the remoteApp

registry key. If set to Alternate Shell, a non-standard shell

is invoked. Also see the application and directory registry

keys.

root/ConnectionType/freerdp/connections/

<UUID>/windowSizeHeight

root/ConnectionType/freerdp/connections/

<UUID>/windowSizePercentage

root/ConnectionType/freerdp/connections/

<UUID>/windowSizeWidth

root/ConnectionType/freerdp/connections/

<UUID>/windowType

 

ConnectionType 95

Registry key

Description

root/ConnectionType/freerdp/connections/

This is a diagnostic function. If set to 1, X11 operations are

<UUID>/x11Capture

captured for later playback.

root/ConnectionType/freerdp/connections/

This is a diagnostic function. The value sets the directory for X11

<UUID>/x11CaptureDir

capture files.

root/ConnectionType/freerdp/connections/

This is a diagnostic function. If set to 1, the X11 logfile is more

<UUID>/x11LogAutoflush

frequently flushed to disk.

root/ConnectionType/freerdp/connections/

This is a diagnostic function. The value sets the path to the X11

<UUID>/x11Logfile

logfile.

root/ConnectionType/freerdp/connections/

This is a diagnostic function. If set to 1, X11 operations are

<UUID>/x11Logging

logged.

root/ConnectionType/freerdp/connections/

This is a diagnostic function. If set to 1, X11 operations are not

<UUID>/x11Synchronous

buffered.

root/ConnectionType/freerdp/connections/

Sets an XKB layout ID for bypassing the system keyboard. To see

<UUID>/xkbLayoutId

the list of available IDs, enter the following command in an X

terminal: xfreerdp –kbd-list.

root/ConnectionType/freerdp/coreSettings/

Specifies if this connection type is USB-relevant. If it is, it might

USBrelevant

have a USB plugin for redirecting USB devices.

root/ConnectionType/freerdp/coreSettings/

Sets the internal application name to use for this connection type.

appName

This key should not need to be modified.

root/ConnectionType/freerdp/coreSettings/

Sets the internal application class name to use for this connection

className

type. This key should not need to be modified.

root/ConnectionType/freerdp/coreSettings/

If set to 1, the operating system does not generate a dialog

disableLinkDropWarning

indicating that networking is down because the connection

protocol handles such situations.

root/ConnectionType/freerdp/coreSettings/

Sets the internal application name to use when Connection

editor

Manager is launched for this connection type. This key should not

need to be modified.

root/ConnectionType/freerdp/coreSettings/icon

Specifies the icon from the icon theme set to use for this

connection.

root/ConnectionType/freerdp/coreSettings/

Sets the path to the 16 × 16 pixel icon for this application.

icon16Path

root/ConnectionType/freerdp/coreSettings/

Sets the path to the 32 × 32 pixel icon for this application.

icon32Path

root/ConnectionType/freerdp/coreSettings/

Sets the path to the 48 × 48 pixel icon for this application.

icon48Path

root/ConnectionType/freerdp/coreSettings/

Reserved for future use.

iconActive

root/ConnectionType/freerdp/coreSettings/

Sets the number of seconds to wait for an initial response from

initialConnectionTimeout

the RDP server before giving up.

root/ConnectionType/freerdp/coreSettings/

Sets the name to display for this connection type in the UI.

label

root/ConnectionType/freerdp/coreSettings/

Sets the priority of this connection type when it is displayed in

priorityInConnectionLists

Connection Manager and the Configuration Wizard that displays

during initial setup. A higher value will move the connection type

towards the top of the list. If set to 0, the connection type is

hidden from Configuration Wizard and is shown last in Connection

 

96 Appendix D Registry keys

Registry key

Description

Manager. Connections types with the same priority are listed in

alphabetical order.

root/ConnectionType/freerdp/coreSettings/

Sets the behavior that should occur when connection-mgr

stopProcess

stop is called on this connection. By default this is close, which

will send a standard kill signal to the process. When set to kill,

the process specified by appName will be forcefully killed. When

set to custom, a custom execution script specified by

wrapperScript will be executed with the argument stop to

terminate the process gracefully.

root/ConnectionType/freerdp/coreSettings/tier

Specifies the relative importance of this connection type and the

order in which it is listed in the Create menu.

root/ConnectionType/freerdp/coreSettings/

If set to 1, the connection is monitored under the name specified

watchPid

by appName. This key should not need to be modified.

root/ConnectionType/freerdp/coreSettings/

Sets the script or binary to execute when launching this

wrapperScript

connection type. This is the primary script handling all connection

settings and command line arguments for the connection. This

key should not need to be modified.

root/ConnectionType/freerdp/coreSettings/

Lets Connection Manager know what type of parameters to pass

wrapperScriptGeneration

to the wrapper script.

root/ConnectionType/freerdp/general/

If autoReconnect is enabled, this key sets the number of

autoReconnectDialogTimeout

seconds before timing out any error dialogs for the connection. If

set to 0, the dialogs wait indefinitely for user interaction.

root/ConnectionType/freerdp/general/

When a remote login fails due to bad credentials, the user is

disablePasswordChange

presented with a button that brings up a dialog for updating their

password. If this key is set is 1, that button and dialog are not

displayed.

root/ConnectionType/freerdp/general/

Sets the default audio backend for high-level audio redirection

preferredAudio

(both in and out).

root/ConnectionType/freerdp/general/

Sets the pattern used to build the RD Web Access URL. The host of

rdWebFeedUrlPattern

the URL, e.g. myserver.com, is replaced by the value of the

connection’s Address field. This pattern is not used when the

address is already a URL.

root/ConnectionType/freerdp/general/

This setting ensures a better compatibility with the expected

serialPortsDriver

underlying Windows driver SerCx2.sys, SerCx.sys, or Serial.sys.

root/ConnectionType/freerdp/general/

If set to 1, errors for unsupported features will be ignored.

serialPortsPermissive

 

ssh

 

Registry key

Description

root/ConnectionType/ssh/authorizations/

If set to 1, an end user has permission to add a new connection of

user/add

this type using Connection Manager. This key has no effect on

Smart Zero.

root/ConnectionType/ssh/authorizations/user/

If set to 1, an end user has permission to modify the general

general

settings for this connection type using Connection Manager. This

key has no effect on Smart Zero.

ConnectionType 97

Registry key

Description

root/ConnectionType/ssh/connections/<UUID>/

Sets the hostname or IP address to connect to.

address

root/ConnectionType/ssh/connections/<UUID>/

Sets the command to execute after the connection has been

afterStartedCommand

started.

root/ConnectionType/ssh/connections/<UUID>/

Sets the command to execute after the connection has been

afterStoppedCommand

stopped.

root/ConnectionType/ssh/connections/<UUID>/

Specifies the application to run.

application

root/ConnectionType/ssh/connections/<UUID>/

If set to 1, an end user has permission to modify the connection

authorizations/user/edit

settings for this connection.

root/ConnectionType/ssh/connections/<UUID>/

If set to 1, an end user has permission to execute this connection.

authorizations/user/execution

root/ConnectionType/ssh/connections/<UUID>/

If set to 1, the connection will be restarted when it is closed or

autoReconnect

disconnected.

root/ConnectionType/ssh/connections/<UUID>/

Sets the amount of time in seconds to wait before reconnecting

autoReconnectDelay

the session. The default of 0 will cause the connection to

reconnect immediately. This setting only takes effect when

autoReconnect is set to 1.

root/ConnectionType/ssh/connections/<UUID>/

If set to a value of 1–5, the connection will be started

autostart

automatically after the system boots, with the value of 1 having

the highest priority.

root/ConnectionType/ssh/connections/<UUID>/

Sets the background color for the connection.

backgroundColor

root/ConnectionType/ssh/connections/<UUID>/

Sets the command to execute before the connection starts.

beforeStartingCommand

root/ConnectionType/ssh/connections/<UUID>/

Enables compression for an SSH connection.

compression

root/ConnectionType/ssh/connections/<UUID>/

This registry key is either used internally or reserved for future

connectionEndAction

use. The value should not be changed.

root/ConnectionType/ssh/connections/<UUID>/

This registry key is either used internally or reserved for future

coord

use. The value should not be changed.

root/ConnectionType/ssh/connections/<UUID>/

This registry key is either used internally or reserved for future

dependConnectionId

use. The value should not be changed.

root/ConnectionType/ssh/connections/<UUID>/

Sets the name of an extra environment variable for use with the

extraEnvValues/<UUID>/key

connection.

root/ConnectionType/ssh/connections/<UUID>/

Sets the value of an extra environment variable for use with the

extraEnvValues/<UUID>/value

connection.

root/ConnectionType/ssh/connections/<UUID>/

Sets the fallback connection via its UUID.

fallBackConnection

root/ConnectionType/ssh/connections/<UUID>/

Sets the font size for the connection.

font

root/ConnectionType/ssh/connections/<UUID>/

Sets the foreground color for the connection.

foregroundColor

root/ConnectionType/ssh/connections/<UUID>/

If set to 1, the Fork into background option is enabled for the

fork

connection.

 

98 Appendix D Registry keys

Registry key

Description

root/ConnectionType/ssh/connections/<UUID>/

If set to 1, the desktop icon for this connection is enabled. This

hasDesktopIcon

key has no effect on Smart Zero.

root/ConnectionType/ssh/connections/<UUID>/

Sets the x,y coordinates of a pinned desktop icon. If not specified,

iconPosition

the icon floats.

root/ConnectionType/ssh/connections/<UUID>/

This registry key is either used internally or reserved for future

isInMenu

use. The value should not be changed.

root/ConnectionType/ssh/connections/<UUID>/

Sets the connection name that is displayed in the UI. On Smart

label

Zero, this will typically be set to Default Connection and

does not display in the UI.

root/ConnectionType/ssh/connections/<UUID>/

If set to 1, the Server box is shown in the login dialog for the

loginfields/server

connection. If set to 2, the box is shown but disabled. If set to 0,

the box is hidden. If set to 3, the system settings are used.

root/ConnectionType/ssh/connections/<UUID>/

If set to 1, the User Name box is shown in the login dialog for the

loginfields/username

connection. If set to 2, the box is shown but disabled. If set to 0,

the box is hidden. If set to 3, the system settings are used.

root/ConnectionType/ssh/connections/<UUID>/

Sets the port number to use when contacting the SSH server. The

port

default is 22.

root/ConnectionType/ssh/connections/<UUID>/

If set to the default focus and the connection is already started,

startMode

the connection will be given focus. Otherwise, an error will be

returned stating that the connection is already started.

root/ConnectionType/ssh/connections/

If set to 1, the Force TTY allocation option is enabled for the

<UUID>/tty

connection.

root/ConnectionType/ssh/connections/<UUID>/

Sets the default user name to supply to the remote host during

username

login. Generally, this setting is used for kiosk-style applications

where a generic user name is used for login.

root/ConnectionType/ssh/connections/<UUID>/

If set to 1, the connection will not be launched until networking is

waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

root/ConnectionType/ssh/connections/

If set to 1, the X11 connection forwarding option is enabled for

<UUID>/x11

the connection.

root/ConnectionType/ssh/coreSettings/

Specifies if this connection type is USB-relevant. If it is, it might

USBrelevant

have a USB plugin for redirecting USB devices.

root/ConnectionType/ssh/coreSettings/appName

Sets the internal application name to use for this connection type.

This key should not need to be modified.

root/ConnectionType/ssh/coreSettings/

Sets the internal application class name to use for this connection

className

type. This key should not need to be modified.

root/ConnectionType/ssh/coreSettings/editor

Sets the internal application name to use when Connection

Manager is launched for this connection type. This key should not

need to be modified.

root/ConnectionType/ssh/coreSettings/icon

Specifies the icon from the icon theme set to use for this

connection.

root/ConnectionType/ssh/coreSettings/

Sets the path to the 16 × 16 pixel icon for this application.

icon16Path

root/ConnectionType/ssh/coreSettings/

Sets the path to the 32 × 32 pixel icon for this application.

icon32Path

 

ConnectionType 99

Registry key

Description

root/ConnectionType/ssh/coreSettings/

Sets the path to the 48 × 48 pixel icon for this application.

icon48Path

root/ConnectionType/ssh/coreSettings/

Reserved for future use.

iconActive

root/ConnectionType/ssh/coreSettings/label

Sets the name to display for this connection type in the UI.

root/ConnectionType/ssh/coreSettings/

Sets the priority of this connection type when it is displayed in

priorityInConnectionLists

Connection Manager and the Configuration Wizard that displays

during initial setup. A higher value will move the connection type

towards the top of the list. If set to 0, the connection type is

hidden from Configuration Wizard and is shown last in Connection

Manager. Connections types with the same priority are listed in

alphabetical order.

root/ConnectionType/ssh/coreSettings/

Sets whether a server name or address is unused, optional,

serverRequired

or required for this connection type.

root/ConnectionType/ssh/coreSettings/

Sets the behavior that should occur when connection-mgr

stopProcess

stop is called on this connection. By default this is close, which

will send a standard kill signal to the process. When set to kill,

the process specified by appName will be forcefully killed. When

set to custom, a custom execution script specified by

wrapperScript will be executed with the argument stop to

terminate the process gracefully.

root/ConnectionType/ssh/coreSettings/tier

Specifies the relative importance of this connection type and the

order in which it is listed in the Create menu.

root/ConnectionType/ssh/coreSettings/watchPid

If set to 1, the connection is monitored under the name specified

by appName. This key should not need to be modified.

root/ConnectionType/ssh/coreSettings/

Sets the script or binary to execute when launching this

wrapperScript

connection type. This is the primary script handling all connection

settings and command line arguments for the connection. This

key should not need to be modified.

root/ConnectionType/ssh/gui/SshManager/name

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/ConnectionType/ssh/gui/SshManager/status

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/ConnectionType/ssh/gui/SshManager/title

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Address widget in Secure Shell

widgets/address

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Run application widget in Secure Shell

widgets/application

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Auto reconnect widget in Secure Shell

widgets/autoReconnect

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

 

100 Appendix D Registry keys

Registry key

Description

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Auto start priority widget in Secure

widgets/autostart

Shell Connection Manager. If set to active, the widget is visible

in the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Background color widget in Secure Shell

widgets/backgroundColor

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Compression widget in Secure Shell

widgets/compression

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Fallback Connection widget in Secure

widgets/fallBackConnection

Shell Connection Manager. If set to active, the widget is visible

in the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Font widget in Secure Shell Connection

widgets/font

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Foreground color widget in Secure Shell

widgets/foregroundColor

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Fork into background widget in Secure

widgets/fork

Shell Connection Manager. If set to active, the widget is visible

in the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Show icon on desktop widget in Secure

widgets/hasDesktopIcon

Shell Connection Manager. If set to active, the widget is visible

in the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

This registry key is either used internally or reserved for future

widgets/isInMenu

use. The value should not be changed.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Name widget in Secure Shell Connection

widgets/label

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Port widget in Secure Shell Connection

widgets/port

Manager. If set to active, the widget is visible in the UI and the

 

ConnectionType 101

Registry key

Description

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Force TTY allocation widget in Secure

widgets/tty

Shell Connection Manager. If set to active, the widget is visible

in the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the User name widget in Secure Shell

widgets/username

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the Wait for network before connecting

widgets/waitForNetwork

widget in Secure Shell Connection Manager. If set to active, the

widget is visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/ssh/gui/SshManager/

Controls the state of the X11 connection forwarding widget in

widgets/x11

Secure Shell Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

 

telnet

 

Registry key

Description

root/ConnectionType/telnet/authorizations/

If set to 1, an end user has permission to add a new connection of

user/add

this type using Connection Manager. This key has no effect on

Smart Zero.

root/ConnectionType/telnet/authorizations/

If set to 1, an end user has permission to modify the general

user/general

settings for this connection type using Connection Manager. This

key has no effect on Smart Zero.

root/ConnectionType/telnet/connections/

Sets the hostname or IP address to connect to.

<UUID>/address

root/ConnectionType/telnet/connections/

Sets the command to execute after the connection has been

<UUID>/afterStartedCommand

started.

root/ConnectionType/telnet/connections/

Sets the command to execute after the connection has been

<UUID>/afterStoppedCommand

stopped.

root/ConnectionType/telnet/connections/

If set to 1, an end user has permission to modify the connection

<UUID>/authorizations/user/edit

settings for this connection.

root/ConnectionType/telnet/connections/

If set to 1, an end user has permission to execute this connection.

<UUID>/authorizations/user/execution

root/ConnectionType/telnet/connections/

If set to 1, the connection will be restarted when it is closed or

<UUID>/autoReconnect

disconnected.

root/ConnectionType/telnet/connections/

If set to a value of 1–5, the connection will be started

<UUID>/autostart

automatically after the system boots, with the value of 1 having

the highest priority.

102 Appendix D Registry keys

Registry key

Description

root/ConnectionType/telnet/connections/

Sets the background color for the connection.

<UUID>/backgroundColor

root/ConnectionType/telnet/connections/

Sets the command to execute before the connection starts.

<UUID>/beforeStartingCommand

root/ConnectionType/telnet/connections/

This registry key is either used internally or reserved for future

<UUID>/connectionEndAction

use. The value should not be changed.

root/ConnectionType/telnet/connections/

This registry key is either used internally or reserved for future

<UUID>/coord

use. The value should not be changed.

root/ConnectionType/telnet/connections/

This registry key is either used internally or reserved for future

<UUID>/dependConnectionId

use. The value should not be changed.

root/ConnectionType/telnet/connections/

Sets the name of an extra environment variable for use with the

<UUID>/extraEnvValues/<UUID>/key

connection.

root/ConnectionType/telnet/connections/

Sets the value of an extra environment variable for use with the

<UUID>/extraEnvValues/<UUID>/value

connection.

root/ConnectionType/telnet/connections/

Sets the fallback connection via its UUID.

<UUID>/fallBackConnection

root/ConnectionType/telnet/connections/

Sets the font size for the connection.

<UUID>/font

root/ConnectionType/telnet/connections/

Sets the foreground color for the connection.

<UUID>/foregroundColor

root/ConnectionType/telnet/connections/

If set to 1, the desktop icon for this connection is enabled. This

<UUID>/hasDesktopIcon

key has no effect on Smart Zero.

root/ConnectionType/telnet/connections/

Sets the x,y coordinates of a pinned desktop icon. If not specified,

<UUID>/iconPosition

the icon floats.

root/ConnectionType/telnet/connections/

Sets the connection name that is displayed in the UI. On Smart

<UUID>/label

Zero, this will typically be set to Default Connection and

does not display in the UI.

root/ConnectionType/telnet/connections/

Sets the locale of the connection.

<UUID>/locale

root/ConnectionType/telnet/connections/

If set to 1, the Server box is shown in the login dialog for the

<UUID>/loginfields/server

connection. If set to 2, the box is shown but disabled. If set to 0,

the box is hidden. If set to 3, the system settings are used.

root/ConnectionType/telnet/connections/

Sets the port number to use when contacting the server. The

<UUID>/port

default is 23.

root/ConnectionType/telnet/connections/

If set to the default focus and the connection is already started,

<UUID>/startMode

the connection will be given focus. Otherwise, an error will be

returned stating that the connection is already started.

root/ConnectionType/telnet/connections/

If set to 1, the connection will not be launched until networking is

<UUID>/waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

root/ConnectionType/telnet/coreSettings/

Specifies if this connection type is USB-relevant. If it is, it might

USBrelevant

have a USB plugin for redirecting USB devices.

root/ConnectionType/telnet/coreSettings/

Sets the internal application name to use for this connection type.

appName

This key should not need to be modified.

 

ConnectionType 103

Registry key

Description

root/ConnectionType/telnet/coreSettings/

Sets the internal application class name to use for this connection

className

type. This key should not need to be modified.

root/ConnectionType/telnet/coreSettings/

Sets the internal application name to use when Connection

editor

Manager is launched for this connection type. This key should not

need to be modified.

root/ConnectionType/telnet/coreSettings/

Sets the internal application name to use when the General

generalSettingsEditor

Settings Manager is launched for this connection type. This key

should not need to be modified.

root/ConnectionType/telnet/coreSettings/icon

Specifies the icon from the icon theme set to use for this

connection.

root/ConnectionType/telnet/coreSettings/

Sets the path to the 16 × 16 pixel icon for this application.

icon16Path

root/ConnectionType/telnet/coreSettings/

Sets the path to the 32 × 32 pixel icon for this application.

icon32Path

root/ConnectionType/telnet/coreSettings/

Sets the path to the 48 × 48 pixel icon for this application.

icon48Path

root/ConnectionType/telnet/coreSettings/

Reserved for future use.

iconActive

root/ConnectionType/telnet/coreSettings/label

Sets the name to display for this connection type in the UI.

root/ConnectionType/telnet/coreSettings/

Sets the priority of this connection type when it is displayed in

priorityInConnectionLists

Connection Manager and the Configuration Wizard that displays

during initial setup. A higher value will move the connection type

towards the top of the list. If set to 0, the connection type is

hidden from Configuration Wizard and is shown last in Connection

Manager. Connections types with the same priority are listed in

alphabetical order.

root/ConnectionType/telnet/coreSettings/

Sets whether a server name or address is unused, optional,

serverRequired

or required for this connection type.

root/ConnectionType/telnet/coreSettings/

Sets the behavior that should occur when connection-mgr

stopProcess

stop is called on this connection. By default this is close, which

will send a standard kill signal to the process. When set to kill,

the process specified by appName will be forcefully killed. When

set to custom, a custom execution script specified by

wrapperScript will be executed with the argument stop to

terminate the process gracefully.

root/ConnectionType/telnet/coreSettings/tier

Specifies the relative importance of this connection type and the

order in which it is listed in the Create menu.

root/ConnectionType/telnet/coreSettings/

Sets the script or binary to execute when launching this

wrapperScript

connection type. This is the primary script handling all connection

settings and command line arguments for the connection. This

key should not need to be modified.

root/ConnectionType/telnet/gui/TelnetManager/

This registry key is either used internally or reserved for future

name

use. The value should not be changed.

root/ConnectionType/telnet/gui/TelnetManager/

This registry key is either used internally or reserved for future

status

use. The value should not be changed.

root/ConnectionType/telnet/gui/TelnetManager/

This registry key is either used internally or reserved for future

title

use. The value should not be changed.

 

104 Appendix D Registry keys

Registry key

Description

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Address widget in Telnet Connection

widgets/address

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Auto reconnect widget in Telnet

widgets/autoReconnect

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Auto start priority widget in Telnet

widgets/autostart

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Background color widget in Telnet

widgets/backgroundColor

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Fallback Connection widget in Telnet

widgets/fallBackConnection

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Foreground color widget in Telnet

widgets/foregroundColor

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Show icon on desktop widget in Telnet

widgets/hasDesktopIcon

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Name widget in Telnet Connection

widgets/label

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Port widget in Telnet Connection

widgets/port

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/telnet/gui/TelnetManager/

Controls the state of the Wait for network before connecting

widgets/waitForNetwork

widget in Telnet Connection Manager. If set to active, the

widget is visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

 

ConnectionType 105

view

 

Registry key

Description

root/ConnectionType/view/authorizations/

If set to 1, an end user has permission to add a new connection of

user/add

this type using Connection Manager. This key has no effect on

Smart Zero.

root/ConnectionType/view/authorizations/user/

If set to 1, an end user has permission to enter command-line

commandLineBox

arguments in VMware Horizon View Connection Manager.

root/ConnectionType/view/authorizations/user/

If set to 1, an end user has permission to modify the general

general

settings for this connection type using Connection Manager. This

key has no effect on Smart Zero.

root/ConnectionType/view/connections/<UUID>/

Specifies extra arguments for the VMware Horizon View client.

ExtraArgs

Run view_client –help or vmware-view –help from

an X terminal to see all available arguments.

root/ConnectionType/view/connections/<UUID>/

SingleSignOn

root/ConnectionType/view/connections/<UUID>/

Sets the command to execute after the connection has been

afterStartedCommand

started.

root/ConnectionType/view/connections/<UUID>/

Sets the command to execute after the connection has been

afterStoppedCommand

stopped.

root/ConnectionType/view/connections/<UUID>/

If set to 1, allows VMware Horizon View connections to enable the

allowBlacklistedDrivers

H.264 feature with AMD open-source graphic drivers. If set to 0,

VMware Horizon View connections disable hardware acceleration

with blacklisted drivers (such as AMDGPU and Radeon).

root/ConnectionType/view/connections/<UUID>/

If set to 1, all applications for this connection will be displayed in

appInMenu

the taskbar menu.

root/ConnectionType/view/connections/<UUID>/

If set to 1, all applications for this connection will be displayed on

appOnDesktop

the desktop.

root/ConnectionType/view/connections/<UUID>/

Sets the size in which the VMware Horizon View client will launch

applicationSize

applications.

root/ConnectionType/view/connections/<UUID>/

attachToConsole

root/ConnectionType/view/connections/<UUID>/

If set to 1, an end user has permission to modify the connection

authorizations/user/edit

settings for this connection.

root/ConnectionType/view/connections/<UUID>/

If set to 1, an end user has permission to execute this connection.

authorizations/user/execution

root/ConnectionType/view/connections/<UUID>/

autoHideMenuBar

root/ConnectionType/view/connections/<UUID>/

If set to 1, the connection will be restarted when it is closed or

autoReconnect

disconnected.

root/ConnectionType/view/connections/<UUID>/

Sets the amount of time in seconds to wait before reconnecting

autoReconnectDelay

the session. The default of 0 will cause the connection to

reconnect immediately. This setting only takes effect when

autoReconnect is set to 1.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the VMware Horizon View client will attempt to log in

automaticLogin

automatically if all fields are provided. If set to 0, users have to

select Connect manually in the VMware Horizon View client, log in,

and select a desktop.

106 Appendix D Registry keys

Registry key

Description

root/ConnectionType/view/connections/<UUID>/

If set to a value of 1–5, the connection will be started

autostart

automatically after the system boots, with the value of 1 having

the highest priority.

root/ConnectionType/view/connections/<UUID>/

Reserved for future use.

autostartDelay

root/ConnectionType/view/connections/<UUID>/

Sets the command to execute before the connection starts.

beforeStartingCommand

root/ConnectionType/view/connections/<UUID>/

If set to 1, the connection is ended after the first desktop is

closeAfterDisconnect

closed. If set to 0, the VMware Horizon View client returns to the

desktop selection screen. This is enabled by default to prevent

users from accidentally leaving the connection at the desktop

selection screen after logging off.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the VMware connection will be disconnected if it is

closeAfterRoaming

roamed to another place..

root/ConnectionType/view/connections/<UUID>/

This registry key is either used internally or reserved for future

coord

use. The value should not be changed.

root/ConnectionType/view/connections/<UUID>/

Specifies the credential type between anonymous

credentialsType

(unauthenticated access), sso (single sign-on), startup

(credentials are requested at startup), password (preconfigured

user/domain/password), or smartcard (preconfigured smart

card).

root/ConnectionType/view/connections/<UUID>/

This registry key is either used internally or reserved for future

dependConnectionId

use. The value should not be changed.

root/ConnectionType/view/connections/<UUID>/

If specified, the named desktop will launch automatically upon

desktop

login. By default, if there is only one desktop available, it will

launch automatically without needing to be specified.

root/ConnectionType/view/connections/<UUID>/

Sets the size in which the VMware Horizon View client will launch

desktopSize

the desktop.

root/ConnectionType/view/connections/<UUID>/

directory

root/ConnectionType/view/connections/<UUID>/

If set to 1, window size settings for maximized applications are

disableMaximizedApp

disabled.

root/ConnectionType/view/connections/<UUID>/

Sets the domain to provide to View Connection Server. If no

domain

domain is specified, the default domain for the server is used.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Client Drive Redirection add-on is enabled.

enableCDR

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Multimedia Redirection add-on is enabled via the

enableMMR

Blast/PCoIP protocol, causing supported codecs played through

Windows Media Player to be redirected to the client. This greatly

improves full-screen and high-definition video playback for

codecs such as WMV9, VC1, and MPEG4. Video is rendered locally

using the CPU power.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the VMware Horizon Virtualization Pack for Skype

enableMediaProvider

Business component is enabled. This component enables Linux

users to redirect Skype for Business calls with the VMware

Horizon View Client.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the VMware Horizon View client starts applications in

enableSeamlessWindow

seamless window mode.

 

ConnectionType 107

Registry key

Description

root/ConnectionType/view/connections/<UUID>/

enableSingleMode

root/ConnectionType/view/connections/<UUID>/

Sets the name of an extra environment variable for use with the

extraEnvValues/<UUID>/key

connection.

root/ConnectionType/view/connections/<UUID>/

Sets the value of an extra environment variable for use with the

extraEnvValues/<UUID>/value

connection.

root/ConnectionType/view/connections/<UUID>/

Sets the fallback connection via its UUID.

fallBackConnection

root/ConnectionType/view/connections/<UUID>/

If set to 1, the VMware Horizon View client launches in full screen

fullscreen

mode when started.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the desktop icon for this connection is enabled. This

hasDesktopIcon

key has no effect on Smart Zero.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the top menu bar within the desktop is hidden. This bar

hideMenuBar

is used to manage remote devices and start other desktops.

root/ConnectionType/view/connections/<UUID>/

Sets the x,y coordinates of a pinned desktop icon. If not specified,

iconPosition

the icon floats.

root/ConnectionType/view/connections/<UUID>/

This registry key is either used internally or reserved for future

isInMenu

use. The value should not be changed.

root/ConnectionType/view/connections/<UUID>/

Sets the connection name that is displayed in the UI. On Smart

label

Zero, this will typically be set to Default Connection and

does not display in the UI.

root/ConnectionType/view/connections/<UUID>/

If set to 1, end users are prevented from changing the server

lockServer

address.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Domain field is shown in the login dialog for the

loginfields/domain

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Password field is shown in the login dialog for the

loginfields/password

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Remember me check box is shown in the login

loginfields/rememberme

dialog for the connection. If set to 2, the check box is shown but

disabled. If set to 0, the check box is hidden.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Server box is shown in the login dialog for the

loginfields/server

connection. If set to 2, the box is shown but disabled. If set to 0,

the box is hidden. If set to 3, the system settings are used.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Show password check box is shown in the login

loginfields/showpassword

dialog for the connection. If set to 2, the check box is shown but

disabled. If set to 0, the check box is hidden.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Smart card login check box is shown in the login

loginfields/smartcard

dialog for the connection. If set to 2, the check box is shown but

disabled. If set to 0, the check box is hidden. This check box might

not appear if no smart card is detected, even if this option is

enabled.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the User Name field is shown in the login dialog for the

loginfields/username

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

 

108 Appendix D Registry keys

Registry key

Description

root/ConnectionType/view/connections/<UUID>/

Allows the selection of the network conditions for the best

networkCondition

experience.

root/ConnectionType/view/connections/<UUID>/

Sets the default password to supply to the remote host during

password

login. This value will be encrypted. Generally, this setting is used

for kiosk-style applications where a generic password is used for

login.

root/ConnectionType/view/connections/<UUID>/

Sets the preferred protocol.

preferredProtocol

root/ConnectionType/view/connections/<UUID>/

If set to 1, all printers defined locally via CUPS are redirected to

printerMapping

the remote host via ThinPrint. If set to 0, the printer mapping is

disabled. If set to 2, the USB printers are redirected as configured

in USB Manager.

root/ConnectionType/view/connections/<UUID>/

saveCredentials

root/ConnectionType/view/connections/<UUID>/

sendCtrlAltDelToVM

root/ConnectionType/view/connections/<UUID>/

Sets the address of the remote host to connect to. This is typically

server

a URL such as http://server.domain.com.

root/ConnectionType/view/connections/<UUID>/

sessionEndAction

root/ConnectionType/view/connections/<UUID>/

singleDesktop

root/ConnectionType/view/connections/<UUID>/

If set to 1, locally-attached smart cards are forwarded to the

smartcard

remote host, allowing them to be used by applications on the

remote host. This only enables smart card login for the remote

host, not for View Connection Server.

root/ConnectionType/view/connections/<UUID>/

If set to the default focus and the connection is already started,

startMode

the connection will be given focus. Otherwise, an error will be

returned stating that the connection is already started.

root/ConnectionType/view/connections/<UUID>/

usbAutoConnectAtStartUp

root/ConnectionType/view/connections/<UUID>/

usbAutoConnectOnInsert

root/ConnectionType/view/connections/<UUID>/

If set to 1, the HP scripts do not create a new /etc/vmware/

useCurrentViewConfig

config file, and the VMware Horizon View client uses the

current /etc/vmware/config file.

root/ConnectionType/view/connections/<UUID>/

Sets the default user name to supply to the remote host during

username

login. Generally, this setting is used for kiosk-style applications

where a generic user name is used for login.

 

root/ConnectionType/view/connections/<UUID>/ viewSecurityLevel

If set to Refuse insecure connections, the VMware

Horizon View client will not allow a user to connect to View Connection Server if the server’s SSL certificate is invalid. If set to Warn, the VMware Horizon View client will display a warning if the server’s certificate is not able to be verified, and if the certificate is self-signed or expired, the user still will not be allowed to connect. If set to Allow all connections, the server certificate will not be verified and connections to any server will be allowed.

 

ConnectionType 109

Registry key

Description

root/ConnectionType/view/connections/<UUID>/

If set to 1, the connection will not be launched until networking is

waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

root/ConnectionType/view/connections/<UUID>/

xfreerdpOptions/attachToConsole

root/ConnectionType/view/connections/<UUID>/

Sets the average milliseconds of offset between the audio stream

xfreerdpOptions/audioLatency

and the display of corresponding video frames after decoding.

root/ConnectionType/view/connections/<UUID>/

If set to 1, clipboard functionality is enabled between different

xfreerdpOptions/clipboardExtension

RDP sessions and between RDP sessions and the local system.

root/ConnectionType/view/connections/<UUID>/

This setting is deprecated. It is used to reduce the color depth of

xfreerdpOptions/colorDepth

the connection below that of the native desktop resolution.

Frequently, this has been used to reduce network bandwidth.

Reducing color depth to a level not supported by the video driver

can cause screen corruption or launch failures.

root/ConnectionType/view/connections/<UUID>/

If set to 1, compression of RDP data sent between the client and

xfreerdpOptions/compression

the server is enabled.

root/ConnectionType/view/connections/<UUID>/

If set to 1, multimedia redirection is disabled if a valid RemoteFX

xfreerdpOptions/disableMMRwithRFX

session is established.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the Multimedia Redirection add-on is enabled, causing

xfreerdpOptions/enableMMR

supported codecs played through Windows Media Player to be

redirected to the client.

root/ConnectionType/view/connections/<UUID>/

Sets the number of video frames the server can push without

xfreerdpOptions/frameAcknowledgeCount

waiting for acknowledgement from the client. Lower numbers

result in a more responsive desktop but lower frame rate. If set to

0, frame acknowledgement is not used in the client-server

interactions.

root/ConnectionType/view/connections/<UUID>/

If set to hostname, the system hostname is sent to the remote

xfreerdpOptions/general/sendHostname

host. This is typically used to identify the thin client associated

with a particular RDP session. The sent hostname can be

overridden using sendHostname in the connection-specific

settings. If set to mac, the MAC address of the first available

network adapter is sent instead of the hostname.

root/ConnectionType/view/connections/<UUID>/

If set to hostname, the system hostname is sent to the remote

xfreerdpOptions/hostnameType

host. This is typically used to identify the thin client associated

with a particular RDP session. The sent hostname can be

overriden using sendHostname in the connection-specific

settings. If set to mac, the MAC address of the first available

network adapter is sent instead of the hostname.

root/ConnectionType/view/connections/<UUID>/

This value is the load balancing cookie sent for brokering

xfreerdpOptions/loadBalanceInfo

purposes to the server upon connection and corresponds to the

loadbalanceinfo field in the .rdp file. By default, the value is

empty.

root/ConnectionType/view/connections/<UUID>/

If set to 0, mouse motion events are not sent to the server. This

xfreerdpOptions/mouseMotionEvents

can prevent some user feedback such as tooltips from functioning

properly.

root/ConnectionType/view/connections/<UUID>/

If set to 0, off-screen bitmaps are disabled. This can increase

xfreerdpOptions/offScreenBitmaps

performance slightly but will cause blocks of the screen to update

asynchronously, causing screen transitions to update non-

uniformly.

 

110 Appendix D Registry keys

Registry key

Description

root/ConnectionType/view/connections/<UUID>/

If set to 1, desktop composition (such as translucent borders) is

xfreerdpOptions/perfFlagDesktopComposition

allowed if supported by the server. Turning off desktop

composition can improve performance for low-bandwidth

connections. Generally, this only affects RemoteFX. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/view/connections/<UUID>/

If set to 1, font smoothing is allowed if supported by the server

xfreerdpOptions/perfFlagFontSmoothing

and enabled. Turning off font smoothing can improve

performance on low-bandwidth connections. If set to 2, the value

is selected based on the thin client performance.

root/ConnectionType/view/connections/<UUID>/

If set to 1, cursor blinking is disabled, which can improve

xfreerdpOptions/perfFlagNoCursorSettings

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/view/connections/<UUID>/

If set to 1, mouse cursor shadows are disabled, which can improve

xfreerdpOptions/perfFlagNoCursorShadow

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/view/connections/<UUID>/

If set to 1, menu animations are disabled, which can improve

xfreerdpOptions/perfFlagNoMenuAnimations

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/view/connections/<UUID>/

If set to 1, user interface themes are disabled, which can improve

xfreerdpOptions/perfFlagNoTheming

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the desktop wallpaper is disabled, which can improve

xfreerdpOptions/perfFlagNoWallpaper

performance on low-bandwidth RDP connections. If set to 2, the

value is selected based on the thin client performance.

root/ConnectionType/view/connections/<UUID>/

If set to 1, full-content window dragging is disabled, which can

xfreerdpOptions/perfFlagNoWindowDrag

improve performance on low-bandwidth RDP connections. The

window outline is used instead. If set to 2, the value is selected

based on the thin client performance.

root/ConnectionType/view/connections/<UUID>/

If set to 1, the following serial and parallel ports are redirected to

xfreerdpOptions/portMapping

the remote host: ttyS0, ttyS1, ttyS2, ttyS3, ttyUSB0, lp0.

root/ConnectionType/view/connections/<UUID>/

If set to 1, all printers defined locally via CUPS are redirected to

xfreerdpOptions/printerMapping

the remote host.

root/ConnectionType/freerdp/connections/

If set to 1, non-RemoteFX graphics performance is increased at

<UUID>/rdp6Buffering

the cost of less frequent screen updates.

root/ConnectionType/freerdp/connections/

If set to 1, RDP 8 codecs are used if available. This setting should

<UUID>/rdp8Codecs

be disabled only in the case of a defect specific to RDP 8 codecs.

Disabling this setting might also disable more advanced codecs.

root/ConnectionType/view/connections/<UUID>/

If set to 1, standard RDP encryption is used to encrypt all data

xfreerdpOptions/rdpEncryption

between the client and the server.

root/ConnectionType/freerdp/connections/

If set to 1, RDP 8 H.264 codecs are used if available. This setting

<UUID>/rdpH264Codec

has known visual errors, particularly in multi-monitor

configurations, and should be considered experimental and

unsupported. Enabling this setting simply advises the server that

the thin client supports H.264 for desktop display. The server

must also support H.264, and the server makes the final decision

on what codecs are used. This setting affects only the desktop

codecs. It does not affect multimedia redirection codecs.

root/ConnectionType/freerdp/connections/

If set to 1, RDP 8 progressive codecs are used if available. This

<UUID>/rdpProgressiveCodec

setting should be disabled only in the case of a defect specific to

RDP 8 progressive codecs. Disabling this setting might also

disable more advanced codecs.

 

ConnectionType 111

Registry key

Description

root/ConnectionType/freerdp/connections/

For redirection, the RDP client is given several destination

<UUID>/redirectPreference

possibilities. It normally tries them in the following order: FQDN,

Primary IP, IP List, NetBIOS. If FQDN is not desired, one of the

alternatives can be tried first by setting this registry key. If the

specified method does not work, the RDP client falls back to the

original order. A setting of auto forces the original order.

root/ConnectionType/view/connections/<UUID>/

If set to 1, RemoteFX is used if available.

xfreerdpOptions/remoteFx

root/ConnectionType/view/connections/<UUID>/

Sets the thin client hostname that is sent to the remote host. If

xfreerdpOptions/sendHostname

left blank, the system hostname is sent. The registry key root/

ConnectionType/view/connections/<UUID>/

xfreerdpOptions/general/sendHostname must be set

to hostname for this key to be used.

root/ConnectionType/view/connections/<UUID>/

If set to Bring to this computer, sound is redirected from

xfreerdpOptions/sound

the remote host to the client using a standard virtual channel. If

set to Leave at remote computer, sound is left at the

remote host. This can be useful when using a redirected USB

audio device. If set to any other value, audio is disabled. Generally,

HP recommends setting this value to Bring to this

computer and not redirecting USB playback devices to the

remote host. This will improve audio quality and ensure that

client audio redirected via other virtual channels (such as

Multimedia Redirection) matches local audio settings.

root/ConnectionType/view/connections/<UUID>/

Sets the number of milliseconds to wait after losing the

xfreerdpOptions/timeoutError

connection before giving up on reconnecting with the server. If set

to 0, reconnection is attempted forever.

root/ConnectionType/view/connections/<UUID>/

Sets the number of milliseconds to wait after losing the

xfreerdpOptions/timeoutRecovery

connection for networking to recover without trying a forced

reconnect.

root/ConnectionType/view/connections/<UUID>/

Sets the number of milliseconds to wait after losing the

xfreerdpOptions/timeoutWarning

connection before warning the user that the connection has been

lost.

root/ConnectionType/view/connections/<UUID>/

If set to 1, when an end-to-end connection drop is detected, a

xfreerdpOptions/timeoutWarningDialog

dialog is displayed and the screen will turn grayscale. Otherwise,

messages are written to the connection log and the session

freezes.

root/ConnectionType/view/connections/<UUID>/

If set to 1, end-to-end connection health checks are done.

xfreerdpOptions/timeoutsEnabled

root/ConnectionType/view/connections/<UUID>/

Sets the version of Transport Layer Security to be used during the

xfreerdpOptions/tlsVersion

early stages of negotiation with the RDP server. Either set this to

match the version of TLS used by your RDP server, or try setting it

to auto.

NOTE: There are some server-side defects in some unpatched

RDP servers that can cause the auto setting to fail, so it is not the

default setting.

root/ConnectionType/view/connections/<UUID>/

Sets an XKB layout ID for bypassing the system keyboard. To see

xfreerdpOptions/xkbLayoutId

the list of available IDs, enter the following command in an X

terminal: xfreerdp –kbd-list.

root/ConnectionType/view/coreSettings/

Indicates if this connection type is USB-relevant. If it is, it might

USBrelevant

have a USB plugin for redirecting USB devices.

 

112 Appendix D Registry keys

Registry key

Description

root/ConnectionType/view/coreSettings/appName

Sets the internal application name to use for this connection type.

This key should not need to be modified.

root/ConnectionType/view/coreSettings/

Sets the internal application class name to use for this connection

className

type. This key should not need to be modified.

root/ConnectionType/view/coreSettings/editor

Sets the internal application name to use when Connection

Manager is launched for this connection type. This key should not

need to be modified.

root/ConnectionType/view/coreSettings/icon

Specifies the icon from the icon theme set to use for this

connection.

root/ConnectionType/view/coreSettings/

Sets the path to the 16 × 16 pixel icon for this application.

icon16Path

root/ConnectionType/view/coreSettings/

Sets the path to the 32 × 32 pixel icon for this application.

icon32Path

root/ConnectionType/view/coreSettings/

Sets the path to the 48 × 48 pixel icon for this application.

icon48Path

root/ConnectionType/view/coreSettings/

Reserved for future use.

iconActive

root/ConnectionType/view/coreSettings/label

Sets the name to display for this connection type in the UI.

root/ConnectionType/view/coreSettings/

Sets the priority of this connection type when it is displayed in

priorityInConnectionLists

Connection Manager and the Configuration Wizard that displays

during initial setup. A higher value will move the connection type

towards the top of the list. If set to 0, the connection type is

hidden from Configuration Wizard and is shown last in Connection

Manager. Connections types with the same priority are listed in

alphabetical order.

root/ConnectionType/view/coreSettings/

Sets whether a server name or address is unused, optional,

serverRequired

or required for this connection type.

root/ConnectionType/view/coreSettings/

Sets the behavior that should occur when connection-mgr

stopProcess

stop is called on this connection. By default this is close, which

will send a standard kill signal to the process. When set to kill,

the process specified by appName will be forcefully killed. When

set to custom, a custom execution script specified by

wrapperScript will be executed with the argument stop to

terminate the process gracefully.

root/ConnectionType/view/coreSettings/tier

Specifies the relative importance of this connection type and the

order in which it is listed in the Create menu.

root/ConnectionType/view/coreSettings/

If set to 1, the connection is monitored under the name specified

watchPid

by appName. This key should not need to be modified.

root/ConnectionType/view/coreSettings/

Sets the script or binary to execute when launching this

wrapperScript

connection type. This is the primary script handling all connection

settings and command line arguments for the connection. This

key should not need to be modified.

root/ConnectionType/view/coreSettings/

Lets Connection Manager know what type of parameters to pass

wrapperScriptGeneration

to the wrapper script.

root/ConnectionType/view/general/

enableComPortRedirection

 

ConnectionType 113

Registry key

Description

root/ConnectionType/view/general/rdpOptions

Options specified here will be forwarded directly to the RDP client

if RDP is used as the display protocol for the VMware Horizon View

connection. To see a full list of options, enter the following

command in an X terminal: rdesktop –help.

root/ConnectionType/view/gui/viewManager/name

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/ConnectionType/view/gui/viewManager/

This registry key is either used internally or reserved for future

status

use. The value should not be changed.

root/ConnectionType/view/gui/viewManager/

This registry key is either used internally or reserved for future

title

use. The value should not be changed.

root/ConnectionType/view/gui/viewManager/

Controls the state of the Auto start priority widget in VMware

widgets/autostart

Horizon View Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/view/gui/viewManager/

Controls the state of the Fallback Connection widget in VMware

widgets/fallBackConnection

Horizon View Connection Manager. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/view/gui/viewManager/

Controls the state of the Name widget in VMware Horizon View

widgets/label

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

 

xdmcp

 

Registry key

Description

root/ConnectionType/xdmcp/authorizations/

If set to 1, an end user has permission to add a new connection of

user/add

this type using Connection Manager. This key has no effect on

Smart Zero.

root/ConnectionType/xdmcp/authorizations/

If set to 1, an end user has permission to modify the general

user/general

settings for this connection type using Connection Manager. This

key has no effect on Smart Zero.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the hostname or IP address to connect to.

address

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the command to execute after the connection has been

afterStartedCommand

started.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the command to execute after the connection has been

afterStoppedCommand

stopped.

root/ConnectionType/xdmcp/connections/<UUID>/

If set to 1, an end user has permission to modify the connection

authorizations/user/edit

settings for this connection.

root/ConnectionType/xdmcp/connections/<UUID>/

If set to 1, an end user has permission to execute this connection.

authorizations/user/execution

root/ConnectionType/xdmcp/connections/<UUID>/

If set to 1, the connection will be restarted when it is closed or

autoReconnect

disconnected.

114 Appendix D Registry keys

Registry key

Description

root/ConnectionType/xdmcp/connections/<UUID>/

If set to a value of 1–5, the connection will be started

autostart

automatically after the system boots, with the value of 1 having

the highest priority.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the command to execute before the connection starts.

beforeStartingCommand

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the color depth of the display for the connection.

color

root/ConnectionType/xdmcp/connections/<UUID>/

This registry key is either used internally or reserved for future

connectionEndAction

use. The value should not be changed.

root/ConnectionType/xdmcp/connections/<UUID>/

This registry key is either used internally or reserved for future

coord

use. The value should not be changed.

root/ConnectionType/xdmcp/connections/<UUID>/

This registry key is either used internally or reserved for future

dependConnectionId

use. The value should not be changed.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the name of an extra environment variable for use with the

extraEnvValues/<UUID>/key

connection.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the value of an extra environment variable for use with the

extraEnvValues/<UUID>/value

connection.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the fallback connection via its UUID.

fallBackConnection

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the address of the font server to use. The registry key

fontServer

useFontServer must also be set to 1.

root/ConnectionType/xdmcp/connections/<UUID>/

If set to 1, the desktop icon for this connection is enabled. This

hasDesktopIcon

key has no effect on Smart Zero.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the x,y coordinates of a pinned desktop icon. If not specified,

iconPosition

the icon floats.

root/ConnectionType/xdmcp/connections/<UUID>/

This registry key is either used internally or reserved for future

isInMenu

use. The value should not be changed.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the connection name that is displayed in the UI. On Smart

label

Zero, this will typically be set to Default Connection and

does not display in the UI.

root/ConnectionType/xdmcp/connections/<UUID>/

If set to 1, the Server box is shown in the login dialog for the

loginfields/server

connection. If set to 2, the box is shown but disabled. If set to 0,

the box is hidden. If set to 3, the system settings are used.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the refresh rate of the display for the connection.

refreshRate

root/ConnectionType/xdmcp/connections/<UUID>/

If set to the default focus and the connection is already started,

startMode

the connection will be given focus. Otherwise, an error will be

returned stating that the connection is already started.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the XDMCP connection type. If set to chooser, all available

type

hosts are listed and the user can select which one to connect to. If

set to query, an XDMCP request is sent to the specified host

directly. If set to broadcast, all available hosts are listed and

the first one is connected to automatically.

root/ConnectionType/xdmcp/connections/<UUID>/

If set to 1, the font server is enabled. If set to 0, the local font is

useFontServer

used.

 

ConnectionType 115

Registry key

Description

root/ConnectionType/xdmcp/connections/<UUID>/

If set to 1, the connection will not be launched until networking is

waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

root/ConnectionType/xdmcp/connections/<UUID>/

Sets the window size of the connection.

windowSize

root/ConnectionType/xdmcp/coreSettings/

Specifies if this connection type is USB-relevant. If it is, it might

USBrelevant

have a USB plugin for redirecting USB devices.

root/ConnectionType/xdmcp/coreSettings/

Sets the internal application name to use for this connection type.

appName

This key should not need to be modified.

root/ConnectionType/xdmcp/coreSettings/audio

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/ConnectionType/xdmcp/coreSettings/

Sets the internal application class name to use for this connection

className

type. This key should not need to be modified.

root/ConnectionType/xdmcp/coreSettings/

This registry key is either used internally or reserved for future

desktopButton

use. The value should not be changed.

root/ConnectionType/xdmcp/coreSettings/editor

Sets the internal application name to use when Connection

Manager is launched for this connection type. This key should not

need to be modified.

root/ConnectionType/xdmcp/coreSettings/

This registry key is either used internally or reserved for future

generalSettingsEditor

use. The value should not be changed.

root/ConnectionType/xdmcp/coreSettings/icon

Specifies the icon from the icon theme set to use for this

connection.

root/ConnectionType/xdmcp/coreSettings/

Sets the path to the 16 × 16 pixel icon for this application.

icon16Path

root/ConnectionType/xdmcp/coreSettings/

Sets the path to the 32 × 32 pixel icon for this application.

icon32Path

root/ConnectionType/xdmcp/coreSettings/

Sets the path to the 48 × 48 pixel icon for this application.

icon48Path

root/ConnectionType/xdmcp/coreSettings/

Reserved for future use.

iconActive

root/ConnectionType/xdmcp/coreSettings/label

Sets the name to display for this connection type in the UI.

root/ConnectionType/xdmcp/coreSettings/

Sets the priority of this connection type when it is displayed in

priorityInConnectionLists

Connection Manager and the Configuration Wizard that displays

during initial setup. A higher value will move the connection type

towards the top of the list. If set to 0, the connection type is

hidden from Configuration Wizard and is shown last in Connection

Manager. Connections types with the same priority are listed in

alphabetical order.

root/ConnectionType/xdmcp/coreSettings/

Sets whether a server name or address is unused, optional,

serverRequired

or required for this connection type.

root/ConnectionType/xdmcp/coreSettings/

Sets the behavior that should occur when connection-mgr

stopProcess

stop is called on this connection. By default this is close, which

will send a standard kill signal to the process. When set to kill,

the process specified by appName will be forcefully killed. When

set to custom, a custom execution script specified by

wrapperScript will be executed with the argument stop to

terminate the process gracefully.

 

116 Appendix D Registry keys

Registry key

Description

root/ConnectionType/xdmcp/coreSettings/tier

Specifies the relative importance of this connection type and the

order in which it is listed in the Create menu.

root/ConnectionType/xdmcp/coreSettings/

If set to 1, the connection is monitored under the name specified

watchPid

by appName. This key should not need to be modified.

root/ConnectionType/xdmcp/coreSettings/

Sets the script or binary to execute when launching this

wrapperScript

connection type. This is the primary script handling all connection

settings and command line arguments for the connection. This

key should not need to be modified.

root/ConnectionType/xdmcp/gui/XdmcpManager/

This registry key is either used internally or reserved for future

name

use. The value should not be changed.

root/ConnectionType/xdmcp/gui/XdmcpManager/

This registry key is either used internally or reserved for future

status

use. The value should not be changed.

root/ConnectionType/xdmcp/gui/XdmcpManager/

This registry key is either used internally or reserved for future

title

use. The value should not be changed.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Address widget in XDMCP Connection

widgets/address

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Auto reconnect widget in XDMCP

widgets/autoReconnect

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Auto start priority widget in XDMCP

widgets/autostart

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xdmcp/gui/XdmcpManager/

This registry key is either used internally or reserved for future

widgets/color

use. The value should not be changed.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Font server widget in XDMCP Connection

widgets/fontServer

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Show icon on desktop widget in XDMCP

widgets/hasDesktopIcon

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xdmcp/gui/XdmcpManager/

This registry key is either used internally or reserved for future

widgets/isInMenu

use. The value should not be changed.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Name widget in XDMCP Connection

widgets/label

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

 

ConnectionType 117

Registry key

Description

root/ConnectionType/xdmcp/gui/XdmcpManager/

This registry key is either used internally or reserved for future

widgets/refreshRate

use. The value should not be changed.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Type widget in XDMCP Connection

widgets/type

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Use font server widget in XDMCP

widgets/useFontServer

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xdmcp/gui/XdmcpManager/

Controls the state of the Wait for network before connecting

widgets/waitForNetwork

widget in XDMCP Connection Manager. If set to active, the

widget is visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/ConnectionType/xdmcp/gui/XdmcpManager/

This registry key is either used internally or reserved for future

widgets/windowSize

use. The value should not be changed.

 

xen

 

Registry key

Description

root/ConnectionType/xen/authorizations/

If set to 1, an end user has permission to add a new connection of

user/add

this type using Connection Manager. This key has no effect on

Smart Zero.

root/ConnectionType/xen/authorizations/user/

If set to 1, an end user has permission to modify the general

general

settings for this connection type using Connection Manager. This

key has no effect on Smart Zero.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the connection shares credentials with the screen

SingleSignOn

saver.

root/ConnectionType/xen/connections/<UUID>/

Sets the address of the remote host to connect to. This is typically

address

a URL such as http://server.domain.com.

root/ConnectionType/xen/connections/<UUID>/

Sets the command to execute after the connection has been

afterStartedCommand

started.

root/ConnectionType/xen/connections/<UUID>/

Sets the command to execute after the connection has been

afterStoppedCommand

stopped.

root/ConnectionType/xen/connections/<UUID>/

allowSaveConnInfo

root/ConnectionType/xen/connections/<UUID>/

If set to 1, all applications for the connection are displayed in the

appInMenu

taskbar menu.

root/ConnectionType/xen/connections/<UUID>/

If set to 1 and appOnDesktop is enabled, all applications for the

appInWindowOrOnDesktop

connection are displayed in a broker window. If set to 0, the

applications for the connection are displayed directly on the

desktop.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, all applications for the connection will be displayed on

appOnDashboard

the taskbar.

118 Appendix D Registry keys

Registry key

Description

root/ConnectionType/xen/connections/<UUID>/

If set to 1, all applications for the connection will be displayed on

appOnDesktop

the desktop.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, an end user has permission to modify the connection

authorizations/user/edit

settings for this connection.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, an end user has permission to execute this connection.

authorizations/user/execution

root/ConnectionType/xen/connections/<UUID>/

If set to 1, and if only a single published application or desktop is

autoLaunchSingleApp

returned by the Citrix server, that resource will be launched

automatically.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the connection will be restarted when it is closed or

autoReconnect

disconnected.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the system will attempt to reconnect any active or

autoReconnectAppsOnLogin

disconnected Citrix sessions upon initial login.

root/ConnectionType/xen/connections/<UUID>/

Sets the amount of time in seconds to wait before reconnecting

autoReconnectDelay

the session. The default of 0 will cause the connection to

reconnect immediately. This setting only takes effect when

autoReconnect is set to 1.

root/ConnectionType/xen/connections/<UUID>/

Controls the amount of time in seconds before the resources are

autoRefreshInterval

cleared and refreshed again from the server. Set to -1 to disable.

It is normally not required to frequently refresh the resources

from the server.

root/ConnectionType/xen/connections/<UUID>/

If set to 1 and if autoStartResource is empty, the first

autoStartDesktop

desktop to become available when the connection is started will

be launched automatically.

root/ConnectionType/xen/connections/<UUID>/

Sets the name of the desktop or application to start automatically

autoStartResource

when the connection is launched.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the connection tries to launch autoStartDesktop

autoStartWithGuessing

or autoStartResource first. If the connection cannot launch

either successfully, it tries to launch another resource by

guessing.

root/ConnectionType/xen/connections/<UUID>/

If set to a value of 1–5, the connection will be started

autostart

automatically after the system boots, with the value of 1 having

the highest priority.

root/ConnectionType/xen/connections/<UUID>/

Reserved for future use.

autostartDelay

root/ConnectionType/xen/connections/<UUID>/

Sets the command to execute before the connection starts.

beforeStartingCommand

root/ConnectionType/xen/connections/<UUID>/

Sets the Citrix connection mode for the connection.

connectionMode

root/ConnectionType/xen/connections/<UUID>/

Defines the action to be done when the connection is ended from

connectionStopAction

Connection Manager. The available options are disconnect and

logoff.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, after resetting the password, the connection continues

continueWithNewPassword

to launch with the new password. If set to 0, after resetting the

password, the current connection closes.

root/ConnectionType/xen/connections/<UUID>/

This registry key is either used internally or reserved for future

coord

use. The value should not be changed.

 

ConnectionType 119

Registry key

Description

root/ConnectionType/xen/connections/<UUID</

Specifies the credential type between anonymous

credentialsType

(unauthenticated access), sso (single sign-on), startup

(credentials are requested at startup), password (preconfigured

user/domain/password), or smartcard (preconfigured smart

card).

root/ConnectionType/xen/connections/<UUID>/

This registry key is either used internally or reserved for future

dependConnectionId

use. The value should not be changed.

root/ConnectionType/xen/connections/<UUID>/

Sets the domain to provide to the XenDesktop server. If no

domain

domain is specified, the default domain for the server is used.

root/ConnectionType/xen/connections/<UUID>/

CAUTION: This functionality is unsupported.

enableRSAToken

If set to 1, the user will be prompted before connecting for a

security token value to use when authenticating with NetScaler

Gateway.

root/ConnectionType/xen/connections/<UUID>/

Sets the name of an extra environment variable for use with the

extraEnvValues/<UUID>/key

connection.

root/ConnectionType/xen/connections/<UUID>/

Sets the value of an extra environment variable for use with the

extraEnvValues/<UUID>/value

connection.

root/ConnectionType/xen/connections/<UUID>/

Sets the fallback connection via its UUID.

fallBackConnection

root/ConnectionType/xen/connections/<UUID>/

folder

root/ConnectionType/xen/connections/<UUID>/

If set to 1, only HTTPS connections are allowed.

forceHttps

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the Citrix client launches in full screen mode when

fullscreen

started.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the desktop icon for this connection is enabled. This

hasDesktopIcon

key has no effect on Smart Zero.

root/ConnectionType/xen/connections/<UUID>/

Sets the x,y coordinates of a pinned desktop icon. If not specified,

iconPosition

the icon floats.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, certificate checks are ignored for the connection.

ignoreCertCheck

root/ConnectionType/xen/connections/<UUID>/

Sets the connection name that is displayed in the UI. On Smart

label

Zero, this will typically be set to Default Connection and

does not display in the UI.

root/ConnectionType/xen/connections/<UUID>/

logOnMethod

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the Domain field is shown in the login dialog for the

loginfields/domain

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the Password field is shown in the login dialog for the

loginfields/password

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the Remember me check box is shown in the login

loginfields/rememberme

dialog for the connection. If set to 2, the check box is shown but

disabled. If set to 0, the check box is hidden.

 

120 Appendix D Registry keys

Registry key

Description

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the Server box is shown in the login dialog for the

loginfields/server

connection. If set to 2, the box is shown but disabled. If set to 0,

the box is hidden. If set to 3, the system settings are used.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the Show password button is shown in the login dialog

loginfields/showpassword

for the connection. If set to 2, the button is shown but disabled. If

set to 0, the button is hidden.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the Smart card login check box is shown in the login

loginfields/smartcard

dialog for the connection. If set to 2, the check box is shown but

disabled. If set to 0, the check box is hidden. This check box might

not appear if no smart card is detected, even if this option is

enabled.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the User Name field is shown in the login dialog for the

loginfields/username

connection. If set to 2, the field is shown but disabled. If set to 0,

the field is hidden.

root/ConnectionType/xen/connections/<UUID>/

Sets the default password to supply to the remote host during

password

login. This value will be encrypted. Generally, this setting is used

for kiosk-style applications where a generic password is used for

login.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, a connection only lists the resources without launching

resListRequest

them or downloading icons.

root/ConnectionType/xen/connections/<UUID>/

This is an internal value. If set to ToBeAsked, the script prompts

saveNewUrl

the user. If set to Auto, the script does not prompt the user, and

whether the URL is saved depends on the case. If set to Yes, the

user asked to save the new URL. If set to No, the user asked to not

save the new URL.

root/ConnectionType/xen/connections/<UUID>/

savePassword

root/ConnectionType/xen/connections/<UUID>/

Specifies the security module to use for a smart card connection.

smartCardModuleKey

root/ConnectionType/xen/connections/<UUID>/

If set to the default focus and the connection is already started,

startMode

the connection will be given focus. Otherwise, an error will be

returned stating that the connection is already started.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, only subscribed resources for the connection are

subscribedOnly

displayed.

root/ConnectionType/xen/connections/<UUID>/

Sets the action to perform when a smart card is unplugged during

unplugSmartCardAction

a connection. disconnect will disconnect the current session.

close will close all the opened resources. noaction will do

nothing.

root/ConnectionType/xen/connections/<UUID>/

useCurrentCitrixConfig

root/ConnectionType/xen/connections/<UUID>/

Sets the default user name to supply to the remote host during

username

login. Generally, this setting is used for kiosk-style applications

where a generic user name is used for login.

root/ConnectionType/xen/connections/<UUID>/

If set to 1, the connection will not be launched until networking is

waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

root/ConnectionType/xen/coreSettings/

Specifies if this connection type is USB-relevant. If it is, it might

USBrelevant

have a USB plugin for redirecting USB devices.

 

ConnectionType 121

Registry key

Description

root/ConnectionType/xen/coreSettings/appName

Sets the internal application name to use for this connection type.

This key should not need to be modified.

root/ConnectionType/xen/coreSettings/

This setting applies to Citrix servers with multiple published

autoLogoutDelayAfterLaunch

resources. If less than 0, no auto-logout is performed. Otherwise,

this setting dictates the number of seconds between the closing

of the last Xen published resource and when the user is logged

out automatically and returned to the initial login screen. Citrix

process delays might extend the auto-logout time.

root/ConnectionType/xen/coreSettings/

This setting applies to Citrix servers with multiple published

autoLogoutDelayBeforeLaunch

resources. If less than 0, no auto-logout is performed. Otherwise,

this setting dictates the number of seconds allowed to pass while

no applications are launched before the user is logged out

automatically and returned to the initial login screen. Citrix

process delays might extend the auto-logout time.

root/ConnectionType/xen/coreSettings/

Sets the internal application class name to use for this connection

className

type. This key should not need to be modified.

root/ConnectionType/xen/coreSettings/

Sets the Citrix connection utility for the connection.

connectionUtil

root/ConnectionType/xen/coreSettings/

Specifies whether the Connection Manager caches the credentials

credsCache

for further use.

root/ConnectionType/xen/coreSettings/editor

Sets the internal application name to use when Connection

Manager is launched for this connection type. This key should not

need to be modified.

root/ConnectionType/xen/coreSettings/

Sets the internal application name to use when the General

generalSettingsEditor

Settings Manager is launched for this connection type. This key

should not need to be modified.

root/ConnectionType/xen/coreSettings/icon

Specifies the icon from the icon theme set to use for this

connection.

root/ConnectionType/xen/coreSettings/

Sets the path to the 16 × 16 pixel icon for this application.

icon16Path

root/ConnectionType/xen/coreSettings/

Sets the path to the 32 × 32 pixel icon for this application.

icon32Path

root/ConnectionType/xen/coreSettings/

Sets the path to the 48 × 48 pixel icon for this application.

icon48Path

root/ConnectionType/xen/coreSettings/

Reserved for future use.

iconActive

root/ConnectionType/xen/coreSettings/label

Sets the name to display for this connection type in the UI.

root/ConnectionType/xen/coreSettings/

Sets the priority of this connection type when it is displayed in

priorityInConnectionLists

Connection Manager and the Configuration Wizard that displays

during initial setup. A higher value will move the connection type

towards the top of the list. If set to 0, the connection type is

hidden from Configuration Wizard and is shown last in Connection

Manager. Connections types with the same priority are listed in

alphabetical order.

root/ConnectionType/xen/coreSettings/

This setting applies when a virtual machine is restarting and is not

retryTimeout

yet available to launch as a Citrix resource. If set to a negative

number, reconnection is not attempted. Otherwise, it gives the

time (in seconds) that HP ThinPro attempts to reconnect to the

virtual machine.

 

122 Appendix D Registry keys

Registry key

Description

root/ConnectionType/xen/coreSettings/

Sets whether a server name or address is unused, optional,

serverRequired

or required for this connection type.

root/ConnectionType/xen/coreSettings/

Sets the behavior that should occur when connection-mgr

stopProcess

stop is called on this connection. By default this is close, which

will send a standard kill signal to the process. When set to kill,

the process specified by appName will be forcefully killed. When

set to custom, a custom execution script specified by

wrapperScript will be executed with the argument stop to

terminate the process gracefully.

root/ConnectionType/xen/coreSettings/tier

Specifies the relative importance of this connection type and the

order in which it is listed in the Create menu.

root/ConnectionType/xen/coreSettings/watchPid

If set to 1, the connection is monitored under the name specified

by appName. This key should not need to be modified.

root/ConnectionType/xen/coreSettings/

Sets the script or binary to execute when launching this

wrapperScript

connection type. This is the primary script handling all connection

settings and command line arguments for the connection. This

key should not need to be modified.

root/ConnectionType/xen/coreSettings/

Lets Connection Manager know what type of parameters to pass

wrapperScriptGeneration

to the wrapper script.

root/ConnectionType/xen/general/CGPAddress

Specifies the CGP address using the syntax hostname:port.

Optionally, instead of specifying the hostname, you can type an

asterisk (*). This will use the value from the connection’s

address registry key as the host. For example: *:2598

The port value is optional. If you do not specify a port value, the

default of 2598 is used. If a connection on port 2598 fails, the thin

client tries to establish a connection on port 1494.

root/ConnectionType/xen/general/TWIMode

Controls seamless mode for published applications. This setting

directly maps to the Citrix .ini file setting TWIMode.

root/ConnectionType/xen/general/

This setting directly maps to the Citrix .ini file setting

TWIModeResizeType

TWIMoveResizeType.

root/ConnectionType/xen/general/

If set to 1, a user can read the mapped drive.

allowReadOnA … allowReadOnZ

root/ConnectionType/xen/general/

If set to 1, a user can write to the mapped drive.

allowWriteOnA … allowWriteOnZ

root/ConnectionType/xen/general/async

If set to 1, asynchronous polling is enabled. This setting directly

maps to the Citrix .ini file setting CommPollSize.

root/ConnectionType/xen/general/autoReconnect

If set to 1, automatic session reconnection is enabled. This is not

the same as the connection-specific auto-reconnect. This occurs

internally within the Citrix client without restarting the

connection. This setting directly maps to the Citrix .ini file setting

TransportReconnectEnabled.

root/ConnectionType/xen/general/

Sets the minimum size for bitmap caching. This setting directly

bitmapCacheSize

maps to the Citrix .ini file setting

PersistentCacheMinBitmap.

root/ConnectionType/xen/general/bottomMonitor

Sets the screen area of the bottom monitor to show the virtual

desktop. If set to 0, the monitor is not used to show the virtual

desktop.

 

ConnectionType 123

Registry key

Description

root/ConnectionType/xen/general/colorDepth

Forces a specific color depth for all connections. This is usually

done only in specialized environments where the automatic depth

selection fails or in very slow networks to reduce congestion.

root/ConnectionType/xen/general/colorMapping

If set to Shared – Approximate Colors, approximate

colors from the default colormap are used. If set to Private –

Exact Colors, precise colors are used. This setting directly

maps to the Citrix .ini file setting ApproximateColors.

root/ConnectionType/xen/general/

If set to 1, links from web content are sent from the server to the

contentRedirection

client so that the client can try to open them locally.

root/ConnectionType/xen/general/debugLogLevel

If set to 0, no debug log is created. If set to 3, an error level log is

created. If set to 4, a warning level log is created. If set to 7, all

debug level logs are created.

root/ConnectionType/xen/general/

Controls the protocol used to locate the host for the connection. If

defaultBrowserProtocol

not specified, the default value from the [WFClient] section of

wfclient.ini is used. This setting directly maps to the Citrix .ini file

setting BrowserProtocol.

root/ConnectionType/xen/general/

Sets the local filesystem directory to map to the remote host.

drivePathMappedOnA … drivePathMappedOnZ

Typically this is set to /media to allow all connected USB drives

to be mapped to the remote host via a single drive letter.

root/ConnectionType/xen/general/

If set to 1, Windows alert sounds are enabled. This setting

enableAlertSound

indirectly maps to the Citrix .ini file setting DisableSound.

root/ConnectionType/xen/general/

If set to 1, clipboard redirection is enabled.

enableClipboard

root/ConnectionType/xen/general/

If set to 1, enables Citrix Desktop Viewer in the session user

enableConnectionBar

interface. By default, this setting is set to 0 (disabled) on the

client side because this value is set on the client by the ICA file for

a desktop session.

root/ConnectionType/xen/general/

If set to 1, colored cursors are enabled. Setting this to 0 might fix

enableCursorColors

graphical cursor corruption in some cases.

root/ConnectionType/xen/general/

If set to 1, data compression is enabled. This setting directly maps

enableDataCompression

to the Citrix .ini file setting Compress.

root/ConnectionType/xen/general/

If set to 1, mapping and redirection for USB storage devices is

enableDriveMapAndRedirect

enabled.

root/ConnectionType/xen/general/

If set to 1, directories on the local filesystem can be forwarded to

enableDriveMapping

the remote host via a virtual drive. Typically /media is mapped

to Z to allow USB drives to be forwarded to the remote host. If

USB redirection is enabled, this setting should be disabled to

prevent storage conflicts. To be properly mapped to the remote

host in this fashion, the USB device must use one of the following

filesystems: FAT32, NTFS, ext2, ext3.

root/ConnectionType/xen/general/

If set to 1, USB storage devices will be dynamically mapped on the

enableDynamicDriveMapping

Citrix server. If set to 0, dynamic mapping of USB storage devices

is disabled.

root/ConnectionType/xen/general/

If set to 1, H.264 compression is enabled. The H.264 codec

enableH264Compression

provides better performance of rich and professional graphics

applications on WAN networks than the JPEG codec.

root/ConnectionType/xen/general/

NOTE: This feature is supported for the 32-bit version of HP

enableHDXFlashRedirection

ThinPro only.

 

124 Appendix D Registry keys

Registry key

Description

Controls the behavior of HDX Flash Redirection. If set to Always,

HDX Flash Redirection is used if possible, and the user is not

prompted. If set to Ask, the user is prompted. If set to Never,

the feature is disabled.

root/ConnectionType/xen/general/

NOTE: This feature is supported for the 32-bit version of HP

enableHDXFlashServerContentFetch

ThinPro only.

Controls the behavior of HDX Flash Server-Side Content Fetching.

If disabled, the client will fetch for content.

root/ConnectionType/xen/general/

If set to 1, HDX MediaStream is enabled. If set to 0, media files will

enableHDXMediaStream

still play via standard streaming, but the quality might not be as

high.

root/ConnectionType/xen/general/enableHWH264

If set to 1, and if enableH264Compression is also set to 1,

hardware compression for H.264 is enabled. If set to 0, H.264

compression will be handled by software.

root/ConnectionType/xen/general/

If set to 1, a local filesystem directory can be mapped to this drive

enableMapOnA … enableMapOnZ

on the remote host. The corresponding drivePathMappedOn

registry key must be set to a valid local directory for drive

mapping to work properly.

root/ConnectionType/xen/general/

If set to 1, multimedia is enabled. HDX Lync might have a conflict

enableMultiMedia

when this setting is enabled. This setting maps directly to the

multimedia in the virtual channels section of the Citrix .ini file

settings. Enable this setting when HDX MediaStream is enabled.

root/ConnectionType/xen/general/

If set to 1, the server can use the X PixMap format for off-

enableOffScreenSurface

screen drawing. This reduces bandwidth in 15-bit and 24-bit color

modes at the expense of X server memory and processor time.

This setting directly maps to the Citrix .ini file setting

EnableOSS.

root/ConnectionType/xen/general/

enableRC4128SHA

root/ConnectionType/xen/general/enableRC4MD5

root/ConnectionType/xen/general/

If set to 1, Citrix Session Reliability is enabled. Session Reliability

enableSessionReliability

changes the way sessions are resumed after losing a network

connection. See Citrix documentation for more information on

Session Reliability.

root/ConnectionType/xen/general/

If set to 1, small non-H.264 rectangle updates are enabled for H.

enableSmallFrames

264. enableTextTracking must also be enabled for this to

have an effect.

root/ConnectionType/xen/general/

If set to 1, smart card login is enabled.

enableSmartCard

root/ConnectionType/xen/general/enableTLSRSA

root/ConnectionType/xen/general/

If set to 1, optimized lossless text overlays are enabled for H.264.

enableTextTracking

root/ConnectionType/xen/general/

If set to 1, USB storage devices will be redirected.

enableUSBRedirection

root/ConnectionType/xen/general/

Sets the level of encryption. Encryption protocols for all levels are

encryptionLevel

defined in the [EncryptionLevelSession] section of

module.ini. This setting directly maps to the Citrix .ini file setting

[EncryptionLevelSession].

 

ConnectionType 125

Registry key

Description

root/ConnectionType/xen/general/

Sets the font smoothing type.

fontSmoothingType

root/ConnectionType/xen/general/

Sets the hot key to forward to the remote session when the key or

hotKey<1thru15>Char

key combination set in the corresponding hotKeyShift is

pressed.

root/ConnectionType/xen/general/

Sets the key or key combination used to activate the hot key set in

hotKey<1thru15>Shift

the corresponding hotKeyChar.

root/ConnectionType/xen/general/

httpAddresses/<UUID>/address

root/ConnectionType/xen/general/

Sets the keyboard key for disabling the transparent keyboard

keyPassthroughEscapeChar

mode. This setting directly maps to the Citrix .ini file setting

KeyPassthroughEscapeChar.

root/ConnectionType/xen/general/

Sets the keyboard key combination for disabling the transparent

keyPassthroughEscapeShift

keyboard mode. This setting directly maps to the Citrix .ini file

setting KeyPassthroughEscapeShift.

root/ConnectionType/xen/general/

Specifies a keyboard mapping file for a Citrix session. By default,

keyboardMappingFile

the startup script selects a keyboard mapping file based on the

keyboard layout.

root/ConnectionType/xen/general/

Sets the number of mapped serial ports. If set to 0, serial port

lastComPortNum

mapping is disabled.

root/ConnectionType/xen/general/leftMonitor

Sets the screen area of the left monitor to show the virtual

desktop. If set to 0, the monitor is not used to show the virtual

desktop.

root/ConnectionType/xen/general/localTextEcho

Controls keyboard latency reduction. This setting indirectly maps

to the Citrix .ini file setting ZLKeyboardMode.

root/ConnectionType/xen/general/

If set to Off, network connectivity is not monitored. If set to

monitorNetwork

Local network link status only, only the local

network link status is monitored. If set to Server online

status, both the local network link status and server

connectivity are monitored.

root/ConnectionType/xen/general/

Controls mouse latency reduction. This setting indirectly maps to

mouseClickFeedback

the Citrix .ini file setting ZLMouseMode.

root/ConnectionType/xen/general/

If set to 1, middle mouse button paste emulation for Windows

mouseMiddleButtonPaste

sessions is enabled. This setting directly maps to the Citrix .ini file

setting MouseSendsControlV.

root/ConnectionType/xen/general/noInfoBox

If set to 1, the client manager (wfcmgr) will not display when a

client session terminates. This setting directly maps to the

Citrix .ini file setting PopupOnExit.

root/ConnectionType/xen/general/

If set to 0, printer mapping is disabled. If set to 1, printers defined

printerAutoCreation

locally will be mapped to the connection. If set to 2, USB printers

are redirected as configured in USB Manager.

root/ConnectionType/xen/general/proxyAddress

Sets the proxy address to use if a manual proxy setting is selected

via proxyType.

root/ConnectionType/xen/general/proxyPassword

Sets the proxy password to use if a manual proxy setting is

selected via proxyType. This password will be encrypted using

rc4 encryption.

 

126 Appendix D Registry keys

Registry key

Description

root/ConnectionType/xen/general/proxyPort

Sets the proxy port to use if a manual proxy setting is selected via

proxyType.

root/ConnectionType/xen/general/proxyType

Sets the type of proxy to use for XenDesktop connections. The

value Use Browser settings is only supported if a local

browser is installed.

root/ConnectionType/xen/general/proxyUser

Sets the proxy username to use if a manual proxy setting is

selected via proxyType.

root/ConnectionType/xen/general/rightMonitor

Sets the screen area of the right monitor to show the virtual

desktop. If set to 0, the monitor is not used to show the virtual

desktop.

root/ConnectionType/xen/general/saveLogs

If set to 1, detailed log information is saved after the session

ends. This log information will be saved to the following

directory: /tmp/debug/citrix/<date>/

root/ConnectionType/xen/general/selfservice/

If set to 1, session-sharing requests are sent to other Citrix

disableConfigMgr

sessions on the same X display. This setting directly maps to the

Citrix .ini file setting EnableSessionSharingClient.

root/ConnectionType/xen/general/selfservice/

disableConnectionCenter

root/ConnectionType/xen/general/selfservice/

enableKioskMode

root/ConnectionType/xen/general/selfservice/

sharedUserMode

root/ConnectionType/xen/general/selfservice/

showTaskBarInKioskMode

root/ConnectionType/xen/general/

serverCheckTimeout

root/ConnectionType/xen/general/

Specifies the session reliability timeout in seconds. This

sessionReliabilityTTL

configures the Session Reliability Time To Live (TTL).

root/ConnectionType/xen/general/

If set to 1, the virtual desktop will be shown on all monitors.

showOnAllMonitors

root/ConnectionType/xen/general/

Specifies the path to the CoolKey PKCS #11 smart card

smartCardModuleMap/CoolKeyPK11

security module.

root/ConnectionType/xen/general/

Specifies the path to the Gemalto .NET smart card security

smartCardModuleMap/GemaltoDotNet

module.

root/ConnectionType/xen/general/sound

Sets the sound quality. This setting indirectly maps to the

Citrix .ini file setting AudioBandwidthLimit.

root/ConnectionType/xen/general/speedScreen

root/ConnectionType/xen/general/tcpAccel

 

root/ConnectionType/xen/general/tcpAddresses/

<UUID>/address

 

root/ConnectionType/xen/general/topMonitor

Sets the screen area of the top monitor to show the virtual

desktop. If set to 0, the monitor is not used to show the virtual

desktop.

root/ConnectionType/xen/general/

Controls how certain Windows key combinations handled. If set to

transparentKeyPassthrough

Translated, the key combinations apply to the local desktop. If

ConnectionType 127

Registry key

Description

set to Direct in full screen desktops only, the key

combinations apply to the remote session only when it is in full

screen mode. If set to Direct, the key combinations always

apply to the remote session as long as the window has focus. This

setting indirectly maps to the Citrix .ini file setting

TransparentKeyPassthrough.

root/ConnectionType/xen/general/

Sets the transport protocol. If set to On (default), the connection

transportProtocol

uses UDP and does not fall back on TCP if there is a failure. If set

to Off, the connection uses TCP. If set to Preferred, the

connection tries to use UDP first and falls back on TCP if there is a

failure.

root/ConnectionType/xen/general/

Controls the number of screen areas that will be tracked in

twRedundantImageItems

ThinWire to prevent redundant drawing of bitmap images. An

adequate value for 1024 × 768 sessions is 300.

root/ConnectionType/xen/general/

If set to 1, an alternate address is used for firewall connections.

useAlternateAddress

This setting directly maps to the Citrix .ini file setting

UseAlternateAddress.

root/ConnectionType/xen/general/

If set to 1, the persistent disk cache is enabled. The persistent

useBitmapCache

disk cache stores commonly-used graphical objects such as

bitmaps on the hard disk of the thin client. Using the persistent

disk cache increases performance across low-bandwidth

connections but reduces the amount of available disk space on

the thin client. For thin clients on high-speed LANs, usage of the

persistent disk cache is not necessary. This setting directly maps

to the Citrix .ini file setting PersistentCacheEnabled.

root/ConnectionType/xen/general/useEUKS

Controls the use of Extended Unicode Keyboard Support (EUKS)

on Windows servers. If set to 0, EUKS is not used. If set to 1, EUKS

is used as a fallback. If set to 2, EUKS is used whenever possible.

root/ConnectionType/xen/general/useLocalIM

If this setting is enabled, the local X input method is used to

interpret keyboard input. This is supported for European

languages only. This setting directly maps to the Citrix .ini file

setting useLocalIME.

root/ConnectionType/xen/general/userAgent

The string from this key will be presented by the Citrix client and

will be helpful for administrators to know where the connection

request is from.

root/ConnectionType/xen/general/

If set to 1, the connection will not be launched until networking is

waitForNetwork

available. This ensures that, on a slow network, the connection

does not launch before networking is available, which could cause

a failure.

root/ConnectionType/xen/general/

Controls the HDXWebCamFramesPerSec variable in the

webcamFramesPerSec

All_Regions.ini file.

root/ConnectionType/xen/general/webcamHeight

Controls the HDXWebCamHeight variable in the

All_Regions.ini file.

root/ConnectionType/xen/general/webcamQuality

Controls the HDXWebCamQuality variable in the

All_Regions.ini file. Valid input ranges from 1 to 63.

root/ConnectionType/xen/general/webcamSupport

If set to 0, the webcam and webcam audio are disabled. If set to 1,

the webcam and webcam audio are enabled, with compression. If

set to 2, USB redirection of the webcam and webcam audio is

enabled.

 

128 Appendix D Registry keys

Registry key

Description

root/ConnectionType/xen/general/webcamWidth

Controls the HDXWebCamWidth variable in the

All_Regions.ini file.

root/ConnectionType/xen/general/windowHeight

Sets the height of the window in pixels if windowSize is set to

Fixed Size.

root/ConnectionType/xen/general/windowPercent

Sets the size of the window as a percentage if windowSize is

set to Percentage of Screen Size.

root/ConnectionType/xen/general/windowSize

If set to Default, the server-side settings are used. If set to

Full Screen, the window is maximized without borders on all

available screens. If set to Fixed Size, the windowWidth

and windowHeight registry keys can be used to specify the size

of the window in pixels. If set to Percentage of Screen

Size, the windowPercent key can be used to specify the size

of the window as a percentage. For Percentage of Screen

Size to take effect, enableForceDirectConnect must be

set to 1 and TWIMode must be set to 0. This setting only works

with XenApp and only if the server allows direct connections. This

setting does not work with XenDesktop.

root/ConnectionType/xen/general/windowWidth

Sets the width of the window in pixels if windowSize is set to

Fixed Size.

root/ConnectionType/xen/gui/XenDesktopPanel/

If set to 1, the Xen Desktop panel and its taskbar are disabled.

disabled

This is usually used when autoStartResource or

autoStartDesktop is enabled.

root/ConnectionType/xen/gui/XenManager/name

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/ConnectionType/xen/gui/XenManager/status

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/ConnectionType/xen/gui/XenManager/title

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Service URL widget in Citrix Connection

widgets/address

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Show applications on taskbar widget in

widgets/appInMenu

Citrix Connection Manager. If set to active, the widget is visible

in the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Show applications on desktop widget in

widgets/appOnDesktop

Citrix Connection Manager. If set to active, the widget is visible

in the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Auto reconnect widget in Citrix

widgets/autoReconnect

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

 

ConnectionType 129

Registry key

Description

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Auto Start Desktop widget in Citrix

widgets/autoStartDesktop

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Auto Start Resource widget in Citrix

widgets/autoStartResource

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Auto start priority widget in Citrix

widgets/autostart

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Domain widget in Citrix Connection

widgets/domain

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Fallback Connection widget in Citrix

widgets/fallBackConnection

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xen/gui/XenManager/

widgets/folder

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Show icon on desktop widget in Citrix

widgets/hasDesktopIcon

Connection Manager. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Name widget in Citrix Connection

widgets/label

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Password widget in Citrix Connection

widgets/password

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Username widget in Citrix Connection

widgets/username

Manager. If set to active, the widget is visible in the UI and the

user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/ConnectionType/xen/gui/XenManager/

Controls the state of the Wait for network before connecting

widgets/waitForNetwork

widget in Citrix Connection Manager. If set to active, the widget

is visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

 

130 Appendix D Registry keys

Registry key

Description

root/ConnectionType/xen/gui/fbpanel/autohide

If set to true, the taskbar auto-hides.

root/ConnectionType/xen/gui/fbpanel/edge

Sets the default position of the taskbar when more than one

published desktop or application is available.

root/ConnectionType/xen/gui/fbpanel/hidden

If set to 1, the taskbar is completely hidden, but only if

autoStartResource or autoStartDesktop is enabled.

 

DHCP

This folder exists to support temporary registry keys that are added when the system acquires a DHCP lease.

No modification is necessary.

Dashboard

 

NOTE: The dashboard is the same thing as the taskbar.

 

Registry key

Description

root/Dashboard/GUI/Clock

If set to 1, the clock is shown on the taskbar.

root/Dashboard/GUI/DomainUser

If set to 1, the domain-user icon is shown on the taskbar if the

system is in domain-login mode.

root/Dashboard/GUI/PowerButton

If set to 1, the power button is shown on the taskbar.

root/Dashboard/GUI/Search

If set to 1, the Search button is shown on the taskbar.

root/Dashboard/GUI/SystemTray

If set to 1, the system tray is shown on the taskbar.

root/Dashboard/GUI/TaskBar

If set to 1, the application area is shown on the taskbar.

root/Dashboard/General/AutoHide

If set to 1, the taskbar auto-hides.

root/Dashboard/General/EnterLeaveTimeout

Sets the amount of time in milliseconds before the taskbar will

hide or show when AutoHide is enabled.

root/Dashboard/General/IconSize

Sets the size of the icons on the taskbar.

If set to -1, the size of the icon is based on the width of the

taskbar.

root/Dashboard/General/Length

Sets the length of the taskbar.

root/Dashboard/General/LengthToScreenSide

If set to 1, the length of taskbar is fixed and equal to the length of

the side of the screen to which it is anchored.

root/Dashboard/General/PanelDockSide

Sets the side of the screen to which the taskbar is docked.

root/Dashboard/General/SlidingTimeout

Sets the amount of time in milliseconds that it takes for the

taskbar to hide or show when AutoHide is enabled.

root/Dashboard/General/Width

Sets the width of the taskbar.

If set to -1, the width is scaled based on the height of the primary

monitor.

DHCP 131

Imprivata

 

Registry key

Description

root/Imprivata/ImprivataServer

Specifies the URL of the Imprivata server.

root/Imprivata/USBr/Devices

Lists some USB devices with a predefined redirection rule specific

to the remote connections launched using the Imprivata

environment. For each USB device, the redirection rule is given by

the setting: forcedState. Requires OneSign ProveID Embedded 6.2

with the ability to use the vendor scripts set.

root/Imprivata/USBr/Devices/1162:2200/

If set to 0, will not redirect.

forcedState

root/Imprivata/USBr/Devices/1162:2200/info

root/Imprivata/USBr/Devices/147e:2016/

If set to 0, will not redirect.

forcedState

root/Imprivata/USBr/Devices/147e:2016/info

root/Imprivata/enableImprivata

If set to 1, the Imprivata ProveID Embedded setting is enabled. By

default, this key is set to 0.

InputMethod

 

Registry key

Description

root/InputMethod/enablelbus

Network

 

Registry key

Description

root/Network/ActiveDirectory/Domain

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/Network/ActiveDirectory/DynamicDNS

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/Network/ActiveDirectory/Enabled

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/Network/ActiveDirectory/Method

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/Network/ActiveDirectory/Password

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/Network/ActiveDirectory/Username

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/Network/DNSServers

Additional DNS servers for domain name resolution can be

specified here. The specified servers will be used in addition to

any servers retrieved via DHCP. Up to three IPv4 or IPv6 addresses

can be specified, separated by commas.

132 Appendix D Registry keys

Registry key

Description

root/Network/DefaultHostnamePattern

Sets the default hostname pattern to use when generating a new

hostname. This is used if the Hostname registry key and /etc/

hostname are both empty. The hostname pattern uses % as a

delimiter. In the example HPTC%MAC:1-6%, HPTC would be the

prefix, and the first six characters of the thin client MAC address

would follow. So if the MAC address of the thin client is

11:22:33:44:55:66, the generated hostname would be

HPTC112233. If the pattern is TC%MAC%, the generated

hostname would be TC112233445566. If the pattern is HP

%MAC:7%, the generated hostname would be HP1122334.

root/Network/EncryptWpaConfig

If set to 1, the password is encrypted.

root/Network/FtpProxy

Sets the FTP proxy address. HP recommends using the following

format for this value because the http prefix is better supported:

http://ProxyServer:Port

root/Network/Hostname

Sets the hostname of the thin client.

root/Network/HttpProxy

Sets the HTTP proxy address. HP recommends using the following

format: http://ProxyServer:Port

root/Network/HttpsProxy

Sets the HTTPS proxy address. HP recommends using the

following format for this value because the http prefix is better

supported: http://ProxyServer:Port

root/Network/IPSec/IPSecRules/<UUID>/DstAddr

Sets the destination address for the IPSec rule.

root/Network/IPSec/IPSecRules/<UUID>/

Sets the authentication method for the IPSec rule. PSK is for

MMAuthMethod

using a pre-shared key, and Certificate is for using

certificate files.

root/Network/IPSec/IPSecRules/<UUID>/

If the authentication method is Certificate, the CA certificate

MMAuthMethodCACert

file path is saved in this registry key.

root/Network/IPSec/IPSecRules/<UUID>/

If the authentication method is Certificate, the client

MMAuthMethodClientCert

certificate file path is saved in this registry key.

root/Network/IPSec/IPSecRules/<UUID>/

If the authentication method is PSK, the pre-shared key value is

MMAuthMethodPresharedKey

saved in this registry key.

root/Network/IPSec/IPSecRules/<UUID>/

If the authentication method is Certificate, the private key

MMAuthMethodPrivateKey

file path that corresponds with the client certificate is saved in

this registry key.

root/Network/IPSec/IPSecRules/<UUID>/

Sets the phase 1 Diffie-Hellman group.

MMDHGroup

root/Network/IPSec/IPSecRules/<UUID>/

Sets the phase 1 encryption algorithm.

MMEncryptionAlg

root/Network/IPSec/IPSecRules/<UUID>/

Sets the phase 1 integrity algorithm.

MMIntegrityAlg

root/Network/IPSec/IPSecRules/<UUID>/

Sets the phase 1 lifetime.

MMLifetimeMinutes

root/Network/IPSec/IPSecRules/<UUID>/

Enables phase 2 AH.

QMAHEnable

root/Network/IPSec/IPSecRules/<UUID>/

Sets the phase 2 AH integrity algorithm.

QMAHIntegrityAlg

 

Network 133

Registry key

Description

root/Network/IPSec/IPSecRules/<UUID>/

Enables phase 2 ESP.

QMESPEnable

root/Network/IPSec/IPSecRules/<UUID>/

Sets the phase 2 ESP encryption algorithm.

QMESPEncryptionAlg

root/Network/IPSec/IPSecRules/<UUID>/

Sets the phase 2 ESP integrity algorithm.

QMESPIntegrityAlg

root/Network/IPSec/IPSecRules/<UUID>/

Sets the phase 2 lifetime.

QMLifetimeSeconds

root/Network/IPSec/IPSecRules/<UUID>/

Sets the description for the IPSec rule.

RuleDescription

root/Network/IPSec/IPSecRules/<UUID>/

If set to 1, the rule is enabled.

RuleEnable

root/Network/IPSec/IPSecRules/<UUID>/RuleName

Sets the name for the IPSec rule.

root/Network/IPSec/IPSecRules/<UUID>/SrcAddr

Sets the source address for the IPSec rule.

root/Network/IPSec/IPSecRules/<UUID>/

Sets the tunnel destination address for the IPSec rule.

TunnelDstAddr

root/Network/IPSec/IPSecRules/<UUID>/

Enables tunnel mode for the IPSec rule.

TunnelEnable

root/Network/IPSec/IPSecRules/<UUID>/

Sets the tunnel source address for the IPSec rule.

TunnelSrcAddr

root/Network/KeepPreviousDNS

If set to 1, previously-configured DNS servers and search domains

not generated by the Network Manager will be kept in resolv.conf.

If set to 0, resolv.conf will be overwritten completely.

root/Network/SearchDomains

Additional search domains for FQDN resolution can be specified

here. The specified domains will be appended to any incomplete

server definitions in an attempt to generate an FQDN that can be

resolved via DNS. For example, a search domain of

mydomain.com will allow the server definition myserver to

resolve properly to myserver.mydomain.com, even if the

DNS server does not have myserver in its name resolution

tables. Up to five additional search domains can be specified.

root/Network/VPN/AutoStart

If set to 1, VPN starts automatically when the system starts up.

root/Network/VPN/PPTP/Domain

Sets the PPTP domain.

root/Network/VPN/PPTP/Gateway

Sets the PPTP gateway.

root/Network/VPN/PPTP/Password

Sets the PPTP user password.

root/Network/VPN/PPTP/Username

Sets the PPTP username.

root/Network/VPN/Type

Sets the VPN type.

root/Network/VPN/VPNC/DPDEndianess

Sets the endianness of the DPD sequence number (see rfc3706).

0: big endian; 1: little endian. Try toggling this if the session

aborts intermittently for no apparent reason.

root/Network/VPN/VPNC/DPDInterval

Sets the DPD interval (see rfc3706) in seconds.

root/Network/VPN/VPNC/DebugLevel

Sets the debug level to either 0, 1, 2, 3, or 99. This generates a lot

of logs. Enable this only when you need to troubleshoot a VPN

issue.

 

134 Appendix D Registry keys

Registry key

Description

root/Network/VPN/VPNC/Domain

Sets the VPNC domain.

root/Network/VPN/VPNC/Gateway

Sets the VPNC gateway.

root/Network/VPN/VPNC/Group

Sets the VPNC group.

root/Network/VPN/VPNC/GroupPassword

Sets the VPNC group password.

root/Network/VPN/VPNC/IKEDHGroup

Sets the VPNC IKE Diffie-Hellman group.

root/Network/VPN/VPNC/LocalUDPPort

Sets the local UDP port to use for VPNC. If set to 0, a random port

will be used. This setting is valid only when the NAT traversal

mode (NATTMode) is cisco-udp.

root/Network/VPN/VPNC/NATTMode

Sets the VPNC NAT traversal mode.

root/Network/VPN/VPNC/Password

Sets the VPNC user password.

root/Network/VPN/VPNC/PerfectForwardSecrecy

Sets the VPNC Diffie-Hellman group to use for Perfect Forward

Secrecy (PFS).

root/Network/VPN/VPNC/Security

Sets the VPNC security level.

root/Network/VPN/VPNC/Username

Sets the VPNC username.

root/Network/VisibleInSystray

If set to 1, the network icon is visible in the system tray.

root/Network/Wired/DefaultGateway

Sets the default gateway the device will use to communicate with

the Internet. Typically this is the IP address of the router. This

setting takes effect only when Method is set to Static.

root/Network/Wired/EnableDefGatewayAsDNS

If set to 1, the default gateway will also be the name server.

root/Network/Wired/EthernetSpeed

Sets the link speed of the primary Ethernet network interface.

Automatic allows the fastest available link speed to be used,

which is usually 1 Gbps or 100 Mbps/Full depending on the switch.

The link speed can also be forced to a single speed (100 Mbps or

10 Mbps) and duplex mode (Full or Half) to support switches and

hubs that do not perform appropriate auto-negotiation.

root/Network/Wired/IPAddress

Sets the IPv4 address of the thin client. This setting will only take

effect when Method is set to Static.

root/Network/Wired/IPv6Enable

If set to 1, IPv6 is enabled.

root/Network/Wired/Interface

Sets the default Ethernet interface or NIC.

root/Network/Wired/MTU

Sets the MTU. It does not matter if the IP address is static or

DHCP-acquired.

root/Network/Wired/Method

If set to Automatic, the thin client will use DHCP to attempt to

retrieve network settings. If set to Static, the values of the

IPAddress, SubnetMask, and DefaultGateway registry

keys are used. HP does not recommend using Static in a

generic client profile because it will cause all thin clients to

receive the same IP address.

root/Network/Wired/Profiles/<UUID>/

If set to 1, automatic connection to the network is enabled.

AutoConnect

root/Network/Wired/Profiles/<UUID>/

Sets the link speed of the primary Ethernet network interface.

EthernetSpeed

Automatic allows the fastest available link speed to be used,

which is usually 1 Gbps or 100 Mbps/full depending on the switch.

The link speed can be forced to a combination of a single speed

 

Network 135

Registry key

Description

(100 Mbps or 10 Mbps) and duplex mode (Full or Half) to

support switches and hubs that do not perform auto-negotiation.

root/Network/Wired/Profiles/<UUID>/IPv4/

Sets the IPv4 address of the client. This setting takes effect only if

Address

Method is set to Static.

root/Network/Wired/Profiles/<UUID>/IPv4/

Sets the default gateway that the device uses to communicate

DefaultGateway

with the Internet. Typically, this is the IP address of the router.

This setting takes effect only if Method is set to Static.

root/Network/Wired/Profiles/<UUID>/IPv4/

If set to 1, IPv4 is enabled for this profile.

Enabled

root/Network/Wired/Profiles/<UUID>/IPv4/

If set to Automatic, the client uses DHCP to attempt to retrieve

Method

network settings. If set to Static, the values of the Address,

SubnetMask, and DefaultGateway registry keys are used.

HP does not recommend using Static in a generic client profile,

because all clients would use the same IP address.

root/Network/Wired/Profiles/<UUID>/IPv4/

Sets the subnet mask of the device, such as 255.255.255.0 (for a

SubnetMask

standard class C subnet). This setting takes effect only if Method

is set to Static.

root/Network/Wired/Profiles/<UUID>/IPv6/

Sets the IPv6 address of the client. This setting takes effect only if

Address

Method is set to Static.

root/Network/Wired/Profiles/<UUID>/IPv6/

Sets the default gateway that the device uses to communicate

DefaultGateway

with the Internet. Typically, this is the IP address of the router.

This setting takes effect only if Method is set to Static.

root/Network/Wired/Profiles/<UUID>/IPv6/

If set to 1, IPv6 is enabled for this profile.

Enabled

root/Network/Wired/Profiles/<UUID>/IPv6/

If set to Automatic, the client uses DHCP to attempt to retrieve

Method

network settings. If set to Static, the values of the Address,

SubnetMask, and DefaultGateway registry keys are used.

HP does not recommend using Static in a generic client profile,

because all clients would use the same IP address.If set to

Automatic, the client uses DHCP to attempt to retrieve network

settings. If set to Static, the values of the Address,

SubnetMask, and DefaultGateway registry keys are used.

HP does not recommend using Static in a generic client profile,

because all clients would use the same IP address.

root/Network/Wired/Profiles/<UUID>/IPv6/

Sets the subnet mask of the device, which is usually the IPv6

SubnetMask

prefix length. This setting takes effect only if Method is set to

Static.

root/Network/Wired/Profiles/<UUID>/MTU

Sets the MTU. It does not matter if the IP address is static or

acquired by DHCP.

root/Network/Wired/Profiles/<UUID>/Priority

Reserved for wired network.

root/Network/Wired/Profiles/<UUID>/Security/

Sets the anonymous identity for PEAP authentication.

EAPPEAP/AnonyIdentity

root/Network/Wired/Profiles/<UUID>/EAPPEAP/

Sets the path to the CA certificate file for PEAP authentication.

CACert

root/Network/Wired/Profiles/<UUID>/Security/

Sets the PEAP inner authentication protocol.

EAPPEAP/InnerAuth

 

136 Appendix D Registry keys

Registry key

Description

root/Network/Wired/Profiles/<UUID>/Security/

Sets the PEAP version.

EAPPEAP/PEAPVer

root/Network/Wired/Profiles/<UUID>/Security/

Sets the password for PEAP authentication.

EAPPEAP/Password

root/Network/Wired/Profiles/<UUID>/Security/

Sets the username for PEAP authentication.

EAPPEAP/Username

root/Network/Wired/Profiles/<UUID>/Security/

Sets the path to the CA certificate file for TLS authentication.

EAPTLS/CACert

root/Network/Wired/Profiles/<UUID>/Security/

Sets the identity for TLS authentication.

EAPTLS/Identity

root/Network/Wired/Profiles/<UUID>/EAPTLS/

Sets the path to a private key file for TLS authentication.

PrivateKey

root/Network/Wired/Profiles/<UUID>/Security/

Sets the password to a private key file for TLS authentication.

EAPTLS/PrivateKeyPassword

root/Network/Wired/Profiles/<UUID>/EAPTLS/

Sets the path to a user certificate file for TLS authentication.

UserCert

root/Network/Wired/Profiles/<UUID>/Security/

Sets the anonymous identity for TTLS authentication.

EAPTTLS/AnonyIdentity

root/Network/Wired/Profiles/<UUID>/Security/

Sets the path to a CA certificate file for TTLS authentication.

EAPTTLS/CACert

root/Network/Wired/Profiles/<UUID>/Security/

Sets the TTLS inner authentication protocol.

EAPTTLS/InnerAuth

root/Network/Wired/Profiles/<UUID>/Security/

Sets the password for TTLS authentication.

EAPTTLS/Password

root/Network/Wired/Profiles/<UUID>/Security/

Sets the username for TTLS authentication.

EAPTTLS/Username

root/Network/Wired/Profiles/<UUID>/Security/

Sets the wired authentication type.

Type

root/Network/Wired/Profiles/<UUID>/

Sets the wired interface for the profile.

WiredInterface

root/Network/Wired/Security/CACert

Sets the path to CA certificate file.

root/Network/Wired/Security/EnableMachineAuth

If set to 1, machine authentication for PEAP is enabled.

root/Network/Wired/Security/Identity

Sets the identity or anonymous identity.

root/Network/Wired/Security/InnerAuth

Sets the PEAP inner authentication protocol.

root/Network/Wired/Security/InnerAuthTTLS

Sets the TTLS inner authentication protocol.

root/Network/Wired/Security/MachineAuthName

Stores the machine account name when machine authentication is

enabled.

root/Network/Wired/Security/

Stores the machine account password when machine

MachineAuthPassword

authentication is enabled.

root/Network/Wired/Security/PEAPVersion

Sets the PEAP version.

root/Network/Wired/Security/Password

Sets the password.

 

Network 137

Registry key

Description

root/Network/Wired/Security/PrivateKey

Sets the path to a private key file. This is only used for TLS

authentication.

root/Network/Wired/Security/Type

Sets the 802.1x authentication type.

root/Network/Wired/Security/UserCert

Sets the path to a user certificate file. This is only used for TLS

authentication.

root/Network/Wired/Security/Username

Sets the username.

root/Network/Wired/SubnetMask

Sets the subnet mask of the device, such as 255.255.255.0 (for a

standard class C subnet). This setting will only take effect when

Method is set to Static.

root/Network/Wired/UseWiredProfiles

If set to 1, the wired connection is configured in profile mode,

which can connect to multiple wired networks. If set to 0, it can

connect to only one wired network.

root/Network/WiredWirelessSwitch

If set to 0, a wired network and a wireless network can be

connected simultaneously. If set to 1, the wired network takes

priority over the wireless network; that is, if the wired network

cannot connect, a configured wireless network is used.

root/Network/Wireless/DefaultGateway

Sets the default gateway the device will use to communicate with

the Internet. Typically this is the IP address of the router. This

setting will only take effect when Method is set to Static.

root/Network/Wireless/EnableDefGatewayAsDNS

If set to 1, the default gateway will also be the name server.

root/Network/Wireless/EnableWireless

If set to 1, wireless functionality is enabled. If set to 0, wireless

functionality Is disabled.

root/Network/Wireless/IPAddress

Sets the IPv4 address of the thin client. This setting will only take

effect when Method is set to Static.

root/Network/Wireless/IPv6Enable

If set to 1, IPv6 is enabled.

root/Network/Wireless/Interface

Sets the default wireless interface or wireless network adapter.

root/Network/Wireless/Method

If set to Automatic, the thin client will use DHCP to attempt to

retrieve network settings. If set to Static, the values of the

IPAddress, SubnetMask, and DefaultGateway registry

keys are used. HP does not recommend using Static in a

generic client profile because it will cause all thin clients to

receive the same IP address.

root/Network/Wireless/PowerEnable

If set to 1, power management of the wireless network card is

enabled.

root/Network/Wireless/Profiles/<UUID>/

If set to 1, automatic connection to the SSID is enabled.

AutoConnect

root/Network/Wireless/Profiles/<UUID>/IPv4/

Sets the IPv4 address of the client. This setting takes effect only if

Address

Method is set to Static.

root/Network/Wireless/Profiles/<UUID>/IPv4/

Sets the default gateway the device uses to communicate with

DefaultGateway

the Internet. Typically, this Is the IP address of the router. This

setting takes effect only if Method is set to Static.

root/Network/Wireless/Profiles/<UUID>/IPv4/

If set to 1, IPv4 is enabled for this profile.

Enabled

root/Network/Wireless/Profiles/<UUID>/IPv4/

If set to Automatic, the client uses DHCP to retrieve network

Method

settings. If set to Static, the values of the Address,

SubnetMask, and DefaultGateway registry keys are used.

 

138 Appendix D Registry keys

Registry key

Description

HP does not recommend using Static in a generic client profile,

because all clients using that profile would use the same IP

address.

root/Network/Wireless/Profiles/<UUID>/IPv4/

Sets the subnet mask of the device, such as 255.255.255.0 (for a

SubnetMask

standard class C subnet). This setting takes effect only if Method

is set to Static.

root/Network/Wireless/Profiles/<UUID>/IPv6/

Sets the IPv6 address of the client. This setting takes effect only if

Address

Method is set to Static.

root/Network/Wireless/Profiles/<UUID>/IPv6/

Sets the default gateway the device uses to communicate with

DefaultGateway

the Internet. Typically, this Is the IP address of the router. This

setting takes effect only if Method is set to Static.

root/Network/Wireless/Profiles/<UUID>/IPv6/

If set to 1, IPv6 is enabled for this profile.

Enabled

root/Network/Wireless/Profiles/<UUID>/IPv6/

If set to Automatic, the client uses DHCP to attempt to retrieve

Method

network settings. If set to Static, the values of the Address,

SubnetMask, and DefaultGateway registry keys are used.

HP does not recommend using Static in a generic client profile,

because all clients would use the same IP address.

root/Network/Wireless/Profiles/<UUID>/IPv6/

Sets the subnet mask of the device, which is usually the IPv6

SubnetMask

prefix length. This setting takes effect only if Method is set to

Static.

root/Network/Wireless/Profiles/<UUID>/

If set to 1, power management of the wireless network card is

PowerEnable

enabled.

root/Network/Wireless/Profiles/<UUID>/

Defines the priority of the network. For a wireless network, a

Priority

larger number means a higher priority. High priority is preferred

for a wireless network connection.

root/Network/Wireless/Profiles/<UUID>/SSID

Sets the wireless access point to use via SSID.

root/Network/Wireless/Profiles/<UUID>/

Specifies whether the SSID of the wireless access point is hidden.

SSIDHidden

root/Network/Wireless/Profiles/<UUID>/

Sets the anonymous identity for EAP-FAST authentication.

Security/EAPFAST/AnonyIdentity

root/Network/Wireless/Profiles/<UUID>/

Sets the provisioning option for EAP-FAST authentication.

Security/EAPFAST/FastProvision

root/Network/Wireless/Profiles/<UUID>/

Sets the path to the PAC file for EAP-FAST authentication.

Security/EAPFAST/PACFile

root/Network/Wireless/Profiles/<UUID>/

Sets the password for EAP-FAST authentication.

Security/EAPFAST/Password

root/Network/Wireless/Profiles/<UUID>/

Sets the username for EAP-FAST authentication.

Security/EAPFAST/Username

root/Network/Wireless/Profiles/<UUID>/

Sets the anonymous identity for EAP PEAP authentication.

Security/EAPPEAP/AnonyIdentity

root/Network/Wireless/Profiles/<UUID>/

Sets the path to the CA certificate file for EAP PEAP

Security/EAPPEAP/CACert

authentication.

root/Network/Wireless/Profiles/<UUID>/

Sets the PEAP inner authentication protocol.

Security/EAPPEAP/InnerAuth

 

Network 139

Registry key

Description

root/Network/Wireless/Profiles/<UUID>/

Sets the PEAP version.

Security/EAPPEAP/PEAPVer

root/Network/Wireless/Profiles/<UUID>/

Sets the password for EAP PEAP authentication.

Security/EAPPEAP/Password

root/Network/Wireless/Profiles/<UUID>/

Sets the username for EAP PEAP authentication.

Security/EAPPEAP/Username

root/Network/Wireless/Profiles/<UUID>/

Sets the path to the CA certificate file for TLS authentication.

Security/EAPTLS/CACert

root/Network/Wireless/Profiles/<UUID>/

Sets the identity for TLS authentication.

Security/EAPTLS/Identity

root/Network/Wireless/Profiles/<UUID>/

Sets the path to a private key file for TLS authentication.

Security/EAPTLS/PrivateKey

root/Network/Wireless/Profiles/<UUID>/

Sets the password to a private key file for TLS authentication.

Security/EAPTLS/PrivateKeyPassword

root/Network/Wireless/Profiles/<UUID>/

Sets the path to a user certificate file for TLS authentication.

Security/EAPTLS/UserCert

root/Network/Wireless/Profiles/<UUID>/

Sets the anonymous identity for TTLS authentication.

Security/EAPTTLS/AnonyIdentity

root/Network/Wireless/Profiles/<UUID>/

Sets the path to a CA certificate file for TTLS authentication.

Security/EAPTTLS/CACert

root/Network/Wireless/Profiles/<UUID>/

Sets the TTLS inner authentication protocol.

Security/EAPTTLS/InnerAuth

root/Network/Wireless/Profiles/<UUID>/

Sets the password for TTLS authentication.

Security/EAPTTLS/Password

root/Network/Wireless/Profiles/<UUID>/

Sets the username for TTLS authentication.

Security/EAPTTLS/Username

root/Network/Wireless/Profiles/<UUID>/

Security/PSK/HexdecimalMode

root/Network/Wireless/Profiles/<UUID>/

Sets the password for PSK authentication.

Security/PSK/PreSharedKey

root/Network/Wireless/Profiles/<UUID>/

Sets the wireless authentication type.

Security/Type

root/Network/Wireless/Profiles/<UUID>/

Sets the WEP authentication type.

Security/WEP/AuthType

root/Network/Wireless/Profiles/<UUID>/

Sets the WEP password.

Security/WEP/Key

root/Network/Wireless/Profiles/<UUID>/

Sets the WEP password index.

Security/WEP/KeyIndex

root/Network/Wireless/Profiles/<UUID>/

Specifies the frequency range selection. Select Auto to scan all

Security/WirelessBand

wireless channels; select 2.4GHz to scan only 2.4 GHz channels;

select 5GHz to scan only 5 GHz channels.

root/Network/Wireless/Profiles/<UUID>/

Sets the wireless interface for the profile.

Security/WirelessInterface

root/Network/Wireless/Roaming/

If set to 1, wireless roaming options are configurable.

enableRoamingOptions

 

140 Appendix D Registry keys

Registry key

Description

root/Network/Wireless/Roaming/

Specifies how often, in seconds, to scan for an access point with a

longScanInterval

stronger signal when the signal strength is above the roaming

threshold. The default is 60.

root/Network/Wireless/Roaming/roamingNap

Specifies how often, in seconds, the connection sleeps when the

wpa_applicant status changes. This helps reduce spurious Wi-Fi

events from breaking live connections when roaming occurs.

root/Network/Wireless/Roaming/

Sets the minimum signal strength, in dBm, allowed before

roamingThreshold

attempting to roam to a stronger access point. Note that this

value is negative.

root/Network/Wireless/Roaming/scanInterval

Sets how often, in seconds, to scan for a stronger access point

when the signal strength is below the roaming threshold.

root/Network/Wireless/SSID

Sets the wireless access point to use via its SSID.

root/Network/Wireless/SSIDHidden

Specifies if the SSID of the wireless access point is hidden.

root/Network/Wireless/SSIDWhiteList

Specifies a whitelist for wireless access points. If this registry

key’s value is not empty, only the SSIDs specified in the value will

be shown in the wireless access point scan results. Use a

semicolon to separate the SSIDs.

root/Network/Wireless/Security/CACert

Sets the path to CA certificate file.

root/Network/Wireless/Security/EAPFASTPAC

Sets the path to the PAC file for EAP-FAST authentication.

root/Network/Wireless/Security/

Sets the provisioning option for EAP-FAST authentication.

EAPFASTProvision

root/Network/Wireless/Security/Identity

Sets the identity or anonymous identity.

root/Network/Wireless/Security/InnerAuth

Sets the PEAP inner authentication protocol.

root/Network/Wireless/Security/InnerAuthTTLS

Sets the TTLS inner authentication protocol.

root/Network/Wireless/Security/PEAPVersion

Sets the PEAP version.

root/Network/Wireless/Security/Password

Sets the password.

root/Network/Wireless/Security/PrivateKey

Sets the path to a private key file. This is only used for TLS

authentication.

root/Network/Wireless/Security/Type

Sets the wireless authentication type.

root/Network/Wireless/Security/UserCert

Sets the path to a user certificate file. This is only used for TLS

authentication.

root/Network/Wireless/Security/Username

Sets the username.

root/Network/Wireless/Security/WEPAuth

Sets the WEP authentication type.

root/Network/Wireless/Security/WEPIndex

Sets the WEP password index.

root/Network/Wireless/SubnetMask

Sets the subnet mask of the device, such as 255.255.255.0 (for a

standard class C subnet). This setting will only take effect when

Method is set to Static.

root/Network/Wireless/UseWirelessProfiles

If set to 1, the wireless connection is configured in profile mode,

which can connect to multiple wireless networks. This is useful for

mobile computing. If set to 0, only one configured wireless

network can be connected.

 

Network 141

Registry key

Description

root/Network/Wireless/WirelessBand

Specifies the frequency range selection. Select Auto to scan all

wireless channels; select 2.4GHz to scan only 2.4 GHz channels;

select 5GHz to scan only 5 GHz channels.

root/Network/Wireless/WpaDriver

Specifies the driver used by wpa_supplicant (wext by default).

nl80211 is the only other driver that is currently supported.

root/Network/Wireless/bcmwlCountryOverride

Overrides the country value from the BIOS in case the BIOS does

not have the necessary value. The bcmwl driver accepts the

wl_country option, which is retrieved from BIOS values on an as-

needed basis (only Indonesia is supported currently). A system

restart is required for any changes to take effect.

root/Network/Wireless/

If set to 1, user accounts cannot create wireless profiles from the

disableUserCreateWirelessProfile

wireless system tray.

root/Network/Wireless/

If set to 1, the wireless menu of the wireless system tray icon is

disableUserWirelessProfileTrayMenu

disabled for the user account.

root/Network/Wireless/

If set to 1, the wireless menu of the wireless system tray icon is

disableWirelessProfileTrayMenu

disabled.

root/Network/Wireless/

If set to 1, if a user tries to connect to a wireless AP and fails, the

tryAutoWirelessIfUserFailed

wireless module tries to connect wirelessly using all available

profiles. If set to 0, if a user tries to connect to a wireless AP and

fails, the wireless status is set to disconnected. This is a fallback

function.

root/Network/disableLeftClickMenu

If set to 1, the left-click menu for the network system tray icon is

disabled.

root/Network/disableRightClickMenu

If set to 1, the right-click menu for the network system tray icon is

disabled.

root/Network/enableVPNMenu

If set to 1, the left-click VPN menu accessible from the network

taskbar icon is enabled.

root/Network/userLock

If set to 1, and if the network settings have been modified by the

user, the network settings are preserved when importing a client

profile.

root/Network/userLockEngaged

This registry key is set to 1 automatically after the network

settings have been modified by the user. You normally do not

need to modify this setting.

 

Power

 

Registry key

Description

root/Power/applet/VisibleInSystray

If set to 1, the battery icon is displayed in the system tray.

root/Power/buttons/logout/authorized

If set to 1, the logout function is available.

root/Power/buttons/power/authorized

If set to 1, the power function is available.

root/Power/buttons/poweroff/authorized

If set to 1, the poweroff function is available.

root/Power/buttons/reboot/authorized

If set to 1, the reboot function is available.

root/Power/buttons/sleep/authorized

If set to 1, the Sleep function is available.

142 Appendix D Registry keys

Registry key

Description

root/Power/currentPowerPlan

This registry key selects which power plan is used. This is

automatically set to default.

root/Power/default/AC/brightness

Sets the default brightness percentage level for when the mobile

thin client is plugged in.

root/Power/default/AC/cpuMode

Sets the CPU mode for a power plan while the computer is

connected to AC power. By default, it is set to performance.

root/Power/default/AC/lidAction

Sets the action that occurs when the computer lid is closed while

the computer is connected to AC power. By default, it is set to

Sleep.

root/Power/default/AC/powerButtonAction

Sets the action that occurs when the power button is pressed

while the computer is connected to AC power. By default, it is set

to shutdown.

root/Power/default/AC/sleep

Sets the value (in minutes) that the computer waits before it

enters the Sleep state while the computer is connected to AC

power. By default, it is set to 30. If set to 0, the computer never

enters the Sleep state.

root/Power/default/AC/standby

Sets the value (in minutes) that the computer waits before the

display turns off while the computer is connected to AC power. By

default, it is set to 15. If set to 0, the computer never enters

standby mode.

root/Power/default/AC/timeoutDim

This key is currently not in use.

root/Power/default/battery/brightness

Sets the default brightness percentage level for when the mobile

thin client is not plugged in.

root/Power/default/battery/cpuMode

Sets the CPU mode for a power plan while the computer is not

connected to AC power. By default, it is set to ondemand.

root/Power/default/battery/critical/

Sets the action to perform when the battery is at the critical

criticalBatteryAction

charge level, defined by criticalBatteryLevel.

root/Power/default/battery/critical/

Sets the percentage threshold for when the battery is considered

criticalBatteryLevel

to be at a critical level of power.

root/Power/default/battery/lidAction

Sets the action that occurs when the computer lid is closed while

the computer is not connected to AC power. By default, it is set to

Sleep.

root/Power/default/battery/low/brightness

Sets the default brightness percentage level for when the battery

is running low on power.

root/Power/default/battery/low/cpuMode

Sets the CPU mode (performance or on demand).

root/Power/default/battery/low/

Sets the percentage of battery power left for when the battery is

lowBatteryLevel

considered to be at a low level of power.

root/Power/default/battery/low/sleep

Sets the value (in minutes) that the computer waits before it

enters the Sleep state while the computer is not connected to AC

power. By default, it is set to 30. If set to 0, the computer never

enters the Sleep state.

root/Power/default/battery/low/standby

Sets the value (in minutes) that the computer waits before the

display turns off while the computer is not connected to AC power.

By default, it is set to 15. If set to 0, the computer never enters

standby mode.

root/Power/default/battery/low/timeoutDim

This key is currently not in use.

 

Power 143

Registry key

Description

root/Power/default/battery/powerButtonAction

Specifies what to do when power button is pressed.

root/Power/default/battery/sleep

Sets how many minutes to wait before entering Sleep. 0 = never.

root/Power/default/battery/standby

Sets how many minutes to wait before turning off the display. 0 =

never.

root/Power/default/battery/timeoutDim

This key is currently not in use.

 

ScepMgr

 

Registry key

Description

root/ScepMgr/General/AutoRenew/Enabled

If set to 1, certificates will be renewed automatically before they

expire.

root/ScepMgr/General/AutoRenew/TimeFrame

Sets the number of days before a certificate’s expiration date that

the SCEP Manager will try to renew the certificate automatically.

root/ScepMgr/IdentifyingInfo/CommonName

Sets the common name to use for SCEP identifying information,

such as your name or the Fully-Qualified Domain Name (FQDN) of

the device. The FQDN is used by default if this value is left empty.

root/ScepMgr/IdentifyingInfo/CountryName

Sets the country or region to use for SCEP identifying information.

root/ScepMgr/IdentifyingInfo/EmailAddress

Sets the email address to use for SCEP identifying information.

root/ScepMgr/IdentifyingInfo/LocalityName

Sets the locality name to use for SCEP identifying information,

such as a city name.

root/ScepMgr/IdentifyingInfo/OrganizationName

Sets the organization name to use for SCEP identifying

information, such as a company name or government

organization name.

root/ScepMgr/IdentifyingInfo/

Sets the organizational unit name to use for SCEP identifying

OrganizationUnitName

information, such as a department name or section name.

root/ScepMgr/IdentifyingInfo/StateName

Sets the state or province to use for SCEP identifying information.

root/ScepMgr/ScepEnroll/ScepServers/<UUID>/

The registry key is used only to inform other applications that a

CertFileChanged

certificate file has changed. This should not need to be modified.

root/ScepMgr/ScepEnroll/ScepServers/<UUID>/

This registry key is used for https only. If set to 1, the SCEP client

DontVerifyPeer

does not verify the server certificate. This key is set to 0 by

default.

root/ScepMgr/ScepEnroll/ScepServers/<UUID>/

Sets the key size to use for the generated key pair.

KeySize

root/ScepMgr/ScepEnroll/ScepServers/<UUID>/

Sets the SCEP server name.

ServerName

root/ScepMgr/ScepEnroll/ScepServers/<UUID>/

Sets the SCEP server URL, which is necessary for the SCEP client

ServerUrl

to enroll a certificate.

root/ScepMgr/ScepEnroll/ScepServers/<UUID>/

Contains the status code of the SCEP enrollment. This value is

Status/Code

read-only.

root/ScepMgr/ScepEnroll/ScepServers/<UUID>/

Contains detailed information about the SCEP enrollment. This

Status/Detail

value is read-only.

144 Appendix D Registry keys

Search

 

Registry key

Description

root/Search/Category/Miscellaneons/

CheckForUpdate

root/Search/Category/Miscellaneons/Logout

root/Search/Category/Miscellaneons/Reboot

root/Search/Category/Miscellaneons/ShutDown

root/Search/Category/Miscellaneons/Sleep

root/Search/Category/Miscellaneons/

SwitchToAdmin

root/Search/Category/Regeditor/byDir

root/Search/Category/Regeditor/byKey

root/Search/Category/Regeditor/byValue

root/Search/Category/Regeditor/byWhole

Serial

 

Registry key

Description

root/Serial/<UUID>/baud

Sets the speed of the serial device.

root/Serial/<UUID>/dataBits

Sets how many bits are in each character.

root/Serial/<UUID>/device

Specifies the serial device attached to the system.

root/Serial/<UUID>/flow

Sets the flow control of the serial device, which is used to

communicate stops and starts of the serial communication.

root/Serial/<UUID>/name

Specifies the Windows device port for communicating with the

serial device.

root/Serial/<UUID>/parity

Sets the parity bit of the serial device. The parity bit is used for

error detection. If set to none, there is no parity detection.

SystemInfo

 

Registry key

Description

root/SystemInfo/Pages/General

If set to 0, the General tab of the System Information window is

hidden from end users.

root/SystemInfo/Pages/License

If set to 0, the Software License tab of the System Information

window is hidden from end users.

root/SystemInfo/Pages/NetTools

If set to 0, the Net Tools tab of the System Information window is

hidden from end users.

root/SystemInfo/Pages/Network

If set to 0, the Network tab of the System Information window is

hidden from end users.

Search 145

Registry key

Description

root/SystemInfo/Pages/SoftwareInformationTab/

If set to 0, the Service Packs tab in the Software Information

ServicePacks

section of the System Information window is hidden from end

users.

root/SystemInfo/Pages/SoftwareInformationTab/

If set to 0, the Software Information tab of the System

SoftwareInformation

Information window is hidden from end users.

root/SystemInfo/Pages/SoftwareInformationTab/

If set to 0, the Software Installed tab in the Software

SoftwareInstalled

Information section of the System Information window is hidden

from end users.

root/SystemInfo/Pages/SystemLogs

If set to 0, the System Logs tab of the System Information

window is hidden from end users.

root/SystemInfo/authorized

If set to 0, the System Information button on the taskbar is

disabled for end users.

 

TaskMgr

 

Registry key

Description

root/TaskMgr/General/AlwaysOnTop

If set to 1, the Task Manager window is always on top.

USB

 

Registry key

Description

root/USB/Classes/(Defined at Interface

Sets the USB class ID number.

level)/ClassID

root/USB/Classes/(Defined at Interface

Sets the USB class name.

level)/DisplayName

root/USB/Classes/(Defined at Interface

Sets whether the class is mapped to the remote host.

level)/State

root/USB/Classes/(Defined at Interface

Sets whether the class is shown in the UI, not shown in the UI, or

level)/Visible

disabled.

root/USB/Devices/<UUID>/DisplayName

Sets the name to show in USB Manager. If not supplied, USB

Manager will attempt to generate an appropriate name using

device information.

root/USB/Devices/<UUID>/ProductID

Sets the product ID of the device.

root/USB/Devices/<UUID>/State

Sets whether this device is mapped to the remote host as follows:

0 = Do Not Redirect; 1 = Use Defaults; 2 = Redirect.

root/USB/Devices/<UUID>/VendorID

Sets the vendor ID of the device.

root/USB/root/autoSwitchProtocol

If set to 1, the remote USB protocol will switch automatically

based on which protocol is chosen.

root/USB/root/mass-storage/allowed

If set to 1, mass storage devices will be mounted automatically

when the protocol is local.

root/USB/root/mass-storage/read-only

If set to 1, when mass storage devices are mounted automatically,

they will be mounted as read-only.

146 Appendix D Registry keys

Registry key

Description

root/USB/root/protocol

Sets which protocol owns remote USB. Valid values depend on

which protocols are installed on the system but can include

local, xen, freerdp, and view.

root/USB/root/showClasses

If set to 1, the Classes section is shown in the USB Manager.

 

auto-update

 

Registry key

Description

root/auto-update/DNSAliasDir

Sets the default root directory for DNS alias mode on the server

hosting HP Smart Client Services.

root/auto-update/LockScreenTimeout

Specifies the timeout (in minutes) after which the screen will

unlock during an automatic update. If set to 0, the screen will be

unlocked throughout the entire automatic update until the update

is complete.

root/auto-update/ManualUpdate

If set to 1, the DHCP tag, DNS alias, and broadcast update

methods for Automatic Update are disabled. When performing a

manual update, the password, path, protocol, user, and

ServerURL registry keys must be set to ensure the update

server is known.

root/auto-update/ScheduledScan/Enabled

If set to 1, the thin client performs periodic scans of the

Automatic Update server to check for updates. If set to 0, the thin

client will only check for updates at system startup.

root/auto-update/ScheduledScan/Interval

Sets the amount of time to wait between scheduled update scans.

This should be specified in the HH:MM format. Intervals longer

than 24 hours can be specified. For example, to have the scans

occur every 48 hours, set this to 48:00.

root/auto-update/ScheduledScan/Period

Thin clients will randomly activate their scheduled scan

throughout the defined period. Using a long period avoids cases

where all thin clients update at exactly the same, which could

cause network congestion. The period should be specified in the

HH:MM format. For example, to spread thin client updates over a

2.5-hour period, set this to 02:30.

root/auto-update/ScheduledScan/StartTime

Sets the start time of the first scheduled update scan period in the

format HH:MM, using the 24-hour time format. For example, 4:35

p.m. would be 16:35.

root/auto-update/ServerURL

Sets the IP address or domain name of the update server used

when ManualUpdate is enabled.

root/auto-update/VisibleInSystray

If set to 1, the Automatic Update system tray icon is enabled.

root/auto-update/checkCertSig

If set to 1, the certificate signature is verified.

root/auto-update/checkCustomSig

If set to 1, the custom packages signature is verified.

root/auto-update/checkImgSig

Reserved for future use.

root/auto-update/checkPackageSig

If set to 1, the packages signature is verified.

root/auto-update/checkProfileSig

If set to 1, the profiles signature is verified.

root/auto-update/enableLockScreen

If set to 1, the screen locks while an automatic update is in

progress.

auto-update 147

Registry key

Description

root/auto-update/enableOnBootup

If set to 1, Automatic Update is enabled at system startup.

root/auto-update/enableSystrayLeftClickMenu

If set to 1, the left-click menu for the Automatic Update system

tray icon is enabled.

root/auto-update/enableSystrayRightClickMenu

If set to 1, the right-click menu for the Automatic Update system

tray icon is enabled.

root/auto-update/gui/auto-update/ManualUpdate

Controls the state of the Enable manual configuration widget in

the Automatic Update tool. If set to active, the widget is visible

in the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/auto-update/gui/auto-update/ServerURL

Controls the state of the Server widget in the Automatic Update

tool. If set to active, the widget is visible in the UI and the user

can interact with it. If set to inactive, the widget is hidden. If

set to read-only, the widget is visible in the read-only state.

root/auto-update/gui/auto-update/

Controls the state of the Enable Lock Screen when Automatic

enableLockScreen

Update widget in the Automatic Update tool. If set to active,

the widget is visible in the UI and the user can interact with it. If

set to inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/auto-update/gui/auto-update/

Controls the state of the Enable Automatic Update on system

enableOnBootup

startup widget in the Automatic Update tool. If set to active,

the widget is visible in the UI and the user can interact with it. If

set to inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/auto-update/gui/auto-update/password

Controls the state of the Password widget in the Automatic

Update tool. If set to active, the widget is visible in the UI and

the user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/auto-update/gui/auto-update/protocol

Controls the state of the Protocol widget in the Automatic Update

tool. If set to active, the widget is visible in the UI and the user

can interact with it. If set to inactive, the widget is hidden. If

set to read-only, the widget is visible in the read-only state.

root/auto-update/gui/auto-update/tag

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/auto-update/gui/auto-update/user

Controls the state of the User name widget in the Automatic

Update tool. If set to active, the widget is visible in the UI and

the user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/auto-update/password

Sets the password used when ManualUpdate is enabled. This is

only used when protocol is set to ftp. This value will be

encrypted.

root/auto-update/path

Sets the relative path from the default server URL for when

ManualUpdate is enabled. Typically, this is empty or set to

auto-update.

root/auto-update/preserveConfig

If set to 1, the current thin client configuration settings will be

preserved when an image update occurs via Automatic Update.

root/auto-update/protocol

Sets the protocol used when ManualUpdate is enabled.

 

148 Appendix D Registry keys

Registry key

Description

root/auto-update/tag

This registry key is obsolete. It previously set the tag number

used for DHCP (137). This is now detected via the tag name

auto-update.

root/auto-update/user

Sets the username used when ManualUpdate is enabled. This

is only used when ‘protocol’ is set to ‘ftp’.

 

background

 

Registry key

Description

root/background/bginfo/alignment

Sets the Background Sysinfo text alignment.

root/background/bginfo/enabled

If set to 1, system information is displayed on the desktop

background (Background Sysinfo).

root/background/bginfo/horizontalLocation

Sets the Background Sysinfo location on the X-axis in a

percentage.

root/background/bginfo/interval

Sets the Background Sysinfo text refresh interval in seconds.

root/background/bginfo/preset

Sets the Background Sysinfo preset file to use. If set to none,

you can customize the settings in Background Manager.

root/background/bginfo/shadowColor

Sets the Background Sysinfo shadow color.

root/background/bginfo/shadowOffset

Sets the Background Sysinfo shadow offset. If set to 0, the

shadow is disabled.

root/background/bginfo/text

Sets the Background Sysinfo text. For more information, see the

HP ThinPro white paper Login Screen Customization (available in

English only).

root/background/bginfo/textColor

Sets the Background Sysinfo text color.

root/background/bginfo/textSize

Sets the Background Sysinfo text size.

root/background/bginfo/verticalLocation

Sets the Background Sysinfo location on the Y-axis in a

percentage.

root/background/desktop/color

Specifies the solid color, the background color if any is visible

behind the image, or the top color in a gradient.

root/background/desktop/color2

If theme is set to gradient, this key stores the bottom color in

the gradient.

root/background/desktop/imagePath

If theme is set to either none or image, this key stores the

desktop background image path used by the user-defined theme.

root/background/desktop/lastBrowseDir

If theme is set to none, this key stores the last used directory.

root/background/desktop/style

If theme is set to none, this key stores how the background

image is placed on the desktop (such as center, tile,

stretch, fit, and fill).

root/background/desktop/theme

Specifies the system theme setting. This value is set via the

Background Manager tool in Control Panel. The valid values

depend on the themes that exist on the system. This can be set to

none or image to let the user define a background image, to

auto to have the system automatically set the appropriate

background 149

Registry key

Description

protocol’s theme for Smart Zero, or to default to use the

default theme for ThinPro, or one of several predefined themes.

root/background/desktop/updateInterval

Sets the background refresh interval in seconds.

 

boot

 

Registry key

Description

root/boot/enablePlymouth

root/boot/extraCmdline

config-wizard

 

Registry key

Description

root/config-wizard/configWizardOptions

Specifies, in a space-separated list, which configuration wizard

options are displayed. By default, all options (language,

keyboard, network, datetime, end) are listed.

root/config-wizard/disableAllChecksAtStartup

If set to 1, all checks at startup are disabled. If set to 0, you can

enable/disable each type of check individually with the registry

keys enableConnectionCheck, enableNetworkCheck,

and enableUpdateCheck.

root/config-wizard/enableConfigWizard

If set to 1, the configuration wizard at system startup is enabled.

root/config-wizard/enableConnectionCheck

If set to 1, the connection check at system startup is enabled.

root/config-wizard/enableNetworkCheck

If set to 1, the network check at system startup is enabled.

root/config-wizard/showNetworkSettingsButton

If set to 1, the network settings button is shown in the network

check window.

desktop

 

Registry key

Description

root/desktop/preferences/arrangeBy

Specifies whether to arrange icons by name or type.

root/desktop/preferences/fontFamily

Specifies the font used for desktop icons.

root/desktop/preferences/gridSize

Specifies, in pixels, the desktop icon grid size. If set to a value less

than 64, the size is computed as a proportion of the monitor size.

root/desktop/preferences/iconGlowColor

Specifies the color that glows behind the desktop icon when a

pointer hovers over it. Valid strings are in the style

QColor::setNamedColor(). If not set, the system chooses

a color that contrasts with the background.

root/desktop/preferences/iconPercent

Specifies the percentage of the grid size to use for the icon. If the

value is greater than 0, it is calculated as a proportion of the grid

size.

150 Appendix D Registry keys

Registry key

Description

root/desktop/preferences/iconShadowColor

Specifies the shadow color behind the desktop icon and text. Valid

strings are in the style QColor::setNamedColor(). If not

set, the system chooses a color that contrasts with the

background.

root/desktop/preferences/menu/arrange/

Specifies whether users can use the arrange function on the

authorized

desktop.

root/desktop/preferences/menu/create/

Specifies whether users can create connections from the right-

authorized

click menu on the desktop.

root/desktop/preferences/menu/drag/authorized

Specifies whether users can drag and drop icons on the desktop.

root/desktop/preferences/menu/lockScreen/

Specifies whether users can lock the screen from the right-click

authorized

menu on the desktop.

root/desktop/preferences/menu/logout/

Specifies whether users can log out from the right-click menu on

authorized

the desktop.

root/desktop/preferences/menu/modeSwitch/

Specifies whether users can switch to administrator mode from

authorized

the right-click menu on the desktop.

root/desktop/preferences/menu/power/

Specifies whether users can access the power submenu from the

authorized

right-click menu on the desktop.

root/desktop/preferences/menu/poweroff/

Specifies whether users can turn off the system from the right-

authorized

click menu on the desktop.

root/desktop/preferences/menu/reboot/

Specifies whether users can restart the system from the right-

authorized

click menu on the desktop.

root/desktop/preferences/menu/sleep/

Specifies whether users can put the system into the Sleep state

authorized

from the right-click menu on the desktop.

root/desktop/preferences/menuTextSize

Specifies the height of the desktop menu text in pixels. If

nonpositive, the height is calculated as a proportion of the

monitor size.

root/desktop/preferences/screenMargin

Specifies the margin between the screen edges and icons.

root/desktop/preferences/textBold

Specifies whether to bold the text.

root/desktop/preferences/textColor

Specifies the text color for the desktop icons. Valid strings are in

the style QColor::setNamedColor(). If not set, the system

chooses a color that contrasts with the background.

root/desktop/preferences/textShadowColor

Specifies the shadow color behind desktop icons and text. Valid

strings are in the style QColor::setNamedColor(). If not

set, the system chooses a color that contrasts with the text color.

root/desktop/preferences/textSize

Specifies the height of the desktop icon text in pixels. If

nonpositive, the height is calculated as a proportion of the

monitor size.

root/desktop/shortcuts/<action>/command

Sets the command that is run by the shortcut.

root/desktop/shortcuts/<action>/enabled

If set to 1, the shortcut is enabled.

root/desktop/shortcuts/<action>/shortcut

Sets the shortcut name.

root/desktop/shortcuts/<action>/shortcutsMode

Sets the shortcut mode.

 

desktop 151

domain

 

Registry key

Description

root/domain/OU

Specifies the organizational unit associated with the thin client’s

domain membership.

root/domain/allowSmartcard

This key is currently unused.

root/domain/cacheDomainLogin

If enabled, a hash of domain login credentials is saved to disk so

that subsequent logins can occur even if the Active Directory

server is inaccessible.

root/domain/ddns

If enabled, the thin client attempts to update the DNS server with

its hostname and IP address during each DHCP renewal.

root/domain/domain

Specifies the domain to which this thin client is joined or to which

this thin client is authenticating against.

root/domain/domainAdminGroup

If enableDomainAdmin is enabled, members of this AD group

can switch the thin client to administrator mode.

root/domain/domainControllers

Specifies a comma-separated list of domain controllers to use

with this domain. If left blank (recommended), automatic lookup

of domain controllers is performed using DNS instead.

root/domain/domainJoined

Indicates if the thin client has been formally added to the domain.

root/domain/domainUsersGroup

If enableDomainUsers is enabled, domain logins are limited

to direct members of this group. Nested groups are not supported

for this feature.

root/domain/enableDomainAdmin

If set to 1, members of the group listed in domainAdminGroup

can switch the thin client to administrator mode. If set to 0, the

local root account must be used to perform local administrative

tasks.

root/domain/enableDomainUsers

If set to 1, domain logins are limited to members of the group

listed in domainUserGroup. If set to 0, any valid domain

credential is permitted to log in to the thin client.

root/domain/enablePasswordChange

If set to 1, the user can change their domain password directly

from the thin client.

root/domain/enableSSO

If enabled, encrypted current credentials are cached in memory

and they can be reused when starting remote connections.

root/domain/loginAtStart

If set to 1, and if the thin client has been added to a domain, a

login screen is displayed when the thin client starts up. Otherwise,

the legacy ThinPro shared desktop is displayed at startup.

root/domain/retainUserRegistry

If set to 1, any custom setting changes made by the user are

retained between login sessions.

root/domain/workgroup

Specifies the workgroup or “short domain” associated with the

thin client’s domain membership. This is also referred to as the

NetBIOS domain name during creation of the Active Directory

domain. This value is usually auto-detected during domain

authentication by looking up the value from a domain controller.

152 Appendix D Registry keys

entries

 

Registry key

Description

root/entries/<UUID>/command

root/entries/<UUID>/folder

root/entries/<UUID>/icon

root/entries/<UUID>/label

root/entries/<UUID>/metaInfo

root/entries/<UUID>/onDesktop

root/entries/<UUID>/onMenu

firewall

 

Registry key

Description

root/firewall/direct/pptp-rule

root/firewall/icmp-blocks

root/firewall/interfaces

root/firewall/masquerade

root/firewall/ports

root/firewall/services/<service>/checked

root/firewall/services/<service>/description

root/firewall/services/<service>/

destinations/ipv4

root/firewall/services/<service>/

destinations/ipv6

root/firewall/services/<service>/modules

root/firewall/services/<service>/port-

protocols

root/firewall/services/<service>/short

root/firewall/sources

root/firewall/startAtBoot

hwh264

 

Registry key

Description

root/hwh264/force2x4k

HP does not recommend changing the value of this key.

entries 153

Registry key

Description

In some Citrix H264 desktop configurations, large desktop

streams with dual monitors cause a flickering effect. H264 is

usually disabled for large streams due to this issue.

 

keyboard

 

Registry key

Description

root/keyboard/DrawLocaleLetter

If set to 1, the keyboard system tray icon will draw the language

locale string instead of using static images.

root/keyboard/SystrayMenu/keyboardLayout

If set to 1, the right-click menu on the keyboard system tray icon

offers an option to open the Keyboard Layout tool in Control

Panel.

root/keyboard/SystrayMenu/languages

If set to 1, the right-click menu on the keyboard system tray icon

offers an option to open the Language tool in Control Panel.

root/keyboard/SystrayMenu/virtualKeyboard

If set to 1, the right-click menu on the keyboard system tray icon

offers an option to open the virtual keyboard.

root/keyboard/VisibleInSystray

If set to 1, the keyboard system tray icon is displayed and

indicates the current keyboard layout.

root/keyboard/XkbLayout

This is an internal key used to map to an XKB keyboard layout.

This key should not need to be modified.

root/keyboard/XkbModel

This is an internal key used to map to an XKB keyboard model.

This key should not need to be modified.

root/keyboard/XkbOptions

This is an internal key used to map to XKB keyboard options. This

key should not need to be modified.

root/keyboard/XkbVariant

This is an internal key used to map to an XKB keyboard variant.

This key should not need to be modified.

root/keyboard/enable2

If set to 1, the secondary keyboard layout can be switched to via

the keyboard shortcut defined by switch.

root/keyboard/layout

Sets the primary keyboard layout.

root/keyboard/layout2

Sets the secondary keyboard layout.

root/keyboard/model

Sets the primary keyboard model.

root/keyboard/model2

Sets the secondary keyboard model.

root/keyboard/numlock

If set to 1, the Num Lock function is enabled at system startup.

This registry key is intentionally ignored on mobile thin clients.

root/keyboard/switch

Sets the keyboard shortcut for switching between the first and

second keyboard layout (enable2 must also be set to 1). Valid

values are as follows: grp:ctrl_shift_toggle,

grp:ctrl_alt_toggle, grp:alt_shift_toggle.

root/keyboard/variant

Sets the primary keyboard variant.

root/keyboard/variant2

Sets the secondary keyboard variant.

154 Appendix D Registry keys

license

 

Registry key

Description

root/license/courtesyNotificationEnable

If set to 1, systray notifications are enabled as license expiration

approaches.

root/license/courtesyNotificationInterval

If positive, number of hours between courtesy notifications.

root/license/courtesyNotificationStart

If positive, courtesy notifications start this many days before

expiration.

root/license/courtesyNotificationText

If not blank, this text is used in courtesy notifications. %1 is

replaced with the number of days left before expiration; %2 is

replaced with the expiration date.

root/license/watermark

This value is ready-only.

logging

 

Registry key

Description

root/logging/general/debugLevel

Sets the debug level. This value will be leveraged by other

modules to generate the corresponding logs.

root/logging/general/showDebugLevelBox

If set to 1, the Debug level option on the System Logs tab of the

System Information window will be available to end users. If set

to 0, the option is available to administrators only.

login

 

Registry key

Description

root/login/buttons/configure/authorized

If set to 1, the Configuration button is available at the login

screen.

root/login/buttons/info/authorized

If set to 1, the System Information button is available at the login

screen.

root/login/buttons/keyboard/authorized

If set to 1, keyboard layout settings can be configured at the login

screen.

root/login/buttons/locale/authorized

If set to 1, language settings can be configured at the login

screen.

root/login/buttons/mouse/authorized

If set to 1, mouse settings can be configured at the login screen.

root/login/buttons/onscreenKeyboard/

If set to 1, the onscreen keyboard is available at the login screen.

authorized

root/login/buttons/power/authorized

If set to 1, the power button is available at the login screen.

root/login/buttons/poweroff/authorized

If set to 1, the shut down function is available at the login screen.

root/login/buttons/reboot/authorized

If set to 1, the restart function is available at the login screen.

root/login/buttons/show/authorized

If set to 1, the button drawer containing additional options is

available at the login screen.

license 155

Registry key

Description

root/login/buttons/sleep/authorized

If set to 1, the Sleep function is available at the login screen.

root/login/buttons/touchscreen/authorized

If set to 1, touch screen settings can be configured at the login

screen. The registry key root/touchscreen/enabled must

also be enabled.

root/login/rememberedDomain

root/login/rememberedUser

 

mouse

 

Registry key

Description

root/mouse/MouseHandedness

If set to 0, the mouse is right-handed. If set to 1, the mouse is

left-handed.

root/mouse/MouseSpeed

Sets the acceleration of the mouse pointer. Typically, a value from

0 to 25 is in the usable range. A value of 0 completely disables

acceleration, causing the mouse to move at a constant slow, but

measurable pace.

root/mouse/MouseThreshold

Sets the number of pixels before mouse acceleration is enabled. A

value of 0 sets the acceleration to a natural curve that gradually

scales acceleration, allowing for both precise and quick

movements.

root/mouse/disableTrackpadWhileTyping

If set to 1, the trackpad will temporarily be disabled while typing.

If set to 0, the trackpad will not be temporarily disabled while

typing.

root/mouse/enableNaturalScrolling

If set to 1 (default), Natural Scrolling is enabled on the trackpad. If

set to 0, Natural Scrolling is disabled on the trackpad.

root/mouse/enableTrackpad

If set to 1, the trackpad is enabled. If set to 0, the trackpad is

disabled.

root/mouse/enableTrackpadTapping

If set to 0 (default), the tap-to-click behavior of the trackpad is

disabled. If set to 1, tap-to-click behavior is enabled.

root/mouse/enableTwoFingerScrolling

If set to 1 (default), two finger scrolling is enabled on the

trackpad. If set to 0, two finger scrolling is disabled on the

trackpad.

root/mouse/gui

restore-points

 

Registry key

Description

root/restore-points/factory

Specifies which snapshot to use for a factory reset.

156 Appendix D Registry keys

screensaver

 

Registry key

Description

root/screensaver/SlideShowAllMonitors

If set to 1, the screen saver slide show will be shown on all

monitors. If set to 0, the slide show will be shown on the primary

monitor only.

root/screensaver/SlideShowInterval

Sets the interval in seconds for switching images in the screen

saver slide show.

root/screensaver/SlideShowPath

Specifies the directory that contains the images for the screen

saver slide show.

root/screensaver/buttons/configure/authorized

If set to 1, the Configuration button is available while the screen is

locked.

root/screensaver/buttons/info/authorized

If set to 1, the System Information button is available while the

screen is locked.

root/screensaver/buttons/keyboard/authorized

If set to 1, keyboard layout settings can be configured while the

screen is locked.

root/screensaver/buttons/locale/authorized

If set to 1, language settings can be configured while the screen is

locked.

root/screensaver/buttons/mouse/authorized

If set to 1, mouse settings can be configured while the screen is

locked.

root/screensaver/buttons/onscreenKeyboard/

If set to 1, the onscreen keyboard is available while the screen is

authorized

locked.

root/screensaver/buttons/power/authorized

If set to 1, the power button is available while the screen is locked.

root/screensaver/buttons/poweroff/authorized

If set to 1, the shut down function is available while the screen is

locked.

root/screensaver/buttons/reboot/authorized

If set to 1, the restart function is available while the screen is

locked.

root/screensaver/buttons/show/authorized

If set to 1, the button drawer containing additional options is

available while the screen is locked.

root/screensaver/buttons/sleep/authorized

If set to 1, the Sleep function is available while the screen is

locked.

root/screensaver/buttons/touchscreen/

If set to 1, touch screen settings can be configured while the

authorized

screen is locked. The registry key root/touchscreen/

enabled must also be enabled.

root/screensaver/enableCustomLogo

If set to 1, the custom image defined in logoPath is used for the

screen saver.

root/screensaver/enableDPMS

If set to 0, monitor power management is disabled. This causes

the monitor to always stay on unless turned off manually.

root/screensaver/enableScreensaver

If set to 1, the screen saver is enabled.

root/screensaver/enableSleep

If set to 1, Sleep is enabled.

root/screensaver/lockScreen

If set to 1 and you are logged into administrator mode, a

password is required to return to the desktop from the screen

saver.

root/screensaver/lockScreenDomain

If set to 1 and the system is in domain mode, a password is

required to return to the desktop from the screen saver.

screensaver 157

Registry key

Description

root/screensaver/lockScreenUser

If set to 1 and you are not logged in as an administrator and the

system is not in domain mode, a password is required to return to

the desktop from the screen saver.

root/screensaver/logoPath

Sets the path to a custom image to use for the screen saver.

root/screensaver/mode

Sets the rendering mode for the screen saver image (such as

Center, Tile, Expand, and Stretch). If set to Default, the

image is displayed without any processing. If set to SlideShow,

the screen saver will cycle through images in the directory

specified by SlideShowPath.

root/screensaver/off

Sets the timeout delay in minutes before the monitor turns off.

root/screensaver/origImageCopyPath

This is the path where the custom image is saved when mode is

set to Default.

root/screensaver/solidColor

If useSolidColor is on and enableCustomLogo is off, this

solid color is used for the screen saver.

root/screensaver/standby

Sets the timeout delay in minutes before the monitor goes into

standby mode.

root/screensaver/suspend

Sets the timeout delay in minutes before the monitor goes into

suspend mode.

root/screensaver/timeoutScreensaver

Sets the timeout delay in minutes before the screen saver starts.

root/screensaver/timeoutSleep

Sets the timeout delay in minutes before the thin client goes into

the Sleep state.

root/screensaver/useSolidColor

If set to 1 and enableCustomLogo is off, the value of the

solidColor key is used by the screen saver.

 

security

 

Registry key

Description

root/security/SecurityFeaturs/

Controls whether mitigations for Speculative Store Bypass

SpeculativeStoreBypassControl

(CVE-2018-3639) are enabled. By default, these mitigations are

not enabled. To enable them, set the key value to on.

For any change to this key to take effect, reboot the computer.

root/security/authenticationFailDelay

Sets the approximate time, in milliseconds, to delay after a failed

login attempt. The actual time will vary plus or minus 25% of this

value. For example, use a value of 3000 to obtain a delay of

approximately 3 seconds.

root/security/domainEntryMode

If set to 1, the domain is expected to be entered in a separate text

field labeled Domain. if set to 0, the domain is expected to be

entered as part of the User field.

root/security/enableLockOverride

If set to 1, administrators can override the screen lock of a local

desktop.

root/security/enableSecretPeek

If set to 1, password and PIN dialogs will have a button that, while

selected, will show the entered password/PIN in clear text.

root/security/encryption/identity/

Sets the algorithm for symmetric encryption of a secret. All

encryptedSecretCipher

algorithms use an appropriate amount of random salt, which is

158 Appendix D Registry keys

Registry key

Description

regenerated each time the secret is stored. The encryption key is

different on each thin client, and encryption and decryption are

available only to authorized programs. The supported cipher list

includes most OpenSSL ciphers and ChaCha20–Poly1305.

root/security/encryption/identity/

Sets the number of seconds since the last successful login that a

encryptedSecretTTL

stored encrypted secret will be considered valid. If set to a

negative number, encrypted secrets will not time out.

root/security/encryption/identity/

Specifies the number of seconds that a stored, non-SSO encrypted

encryptedSecretTTLnonSSO

secret is considered valid. If set to a nonpositive number,

encrypted secrets do not time out.

root/security/encryption/identity/

Sets the algorithm for creating a hash of a secret. Key Derivation

secretHashAlgorithm

Functions (KDFs) such as scrypt or argon2 are better than

straightforward hashes because it is not quick to compute a

rainbow dictionary using a KDF. All algorithms use an appropriate

amount of random salt, which is regenerated each time the secret

is hashed. The supported list includes scrypt, Argon2, SHA-256,

and SHA-512 (though the latter two are not KDFs).

root/security/encryption/identity/

Sets the number of seconds since the last successful login that a

secretHashTTL

stored hashes of secrets will be considered valid. If set to a

negative number, hashes of secrets will not time out.

root/security/mustLogin

If set to 1, all users are forced to log in before accessing the

desktop.

 

shutdown

 

Registry key

Description

root/shutdown/enableAutomaticShutdownTimeout

If set to 1, a progress bar is shown in the shutdown/restart/logout

confirmation dialog box. If the question is not answered in time,

automatically shutdown/restart/logout.

root/shutdown/timeOfAutomaticShutdownTimeout

Sets the wait time for automatic shutdown timeout.

sshd

 

Registry key

Description

root/sshd/disableWeakCipher

If set to 1, disable the CBC mode cipher and other known weak

ciphers, such as 3DES, arcfour, etc.

root/sshd/disableWeakHmac

If set to 1, disable 96 bit hmac and any sha1–based and md5–

based hmac.

root/sshd/disableWeakKex

If set to 1, disable key exchange algorithms that have DH with

SHA1.

root/sshd/enabled

If set to 1, the SSH daemon is enabled and the thin client can be

accessed via SSH.

root/sshd/userAccess

If set to 1, end users can connect to the thin client via SSH.

shutdown 159

time

 

Registry key

Description

root/time/NTPServers

Specifies NTP servers to use via a comma-separated list. Private

NTP servers or large virtual NTP clusters such as

pool.ntp.org are the best choices to minimize server load.

Clear this value to return to using DHCP servers (tag 42) instead of

a fixed list.

root/time/dateFormatLong

An optional way to override the long date format used in various

ThinPro tools. For formatting, do a web search for

QDate::toString. If left blank, a locale-specific string is

usually used.

root/time/dateFormatShort

An optional way to override the short date format used in various

ThinPro tools. For formatting, do a web search for

QDate::toString. If left blank, a locale-specific string is

usually used.

root/time/dateTimeFormatLong

An optional way to override the long date&time format used in

various ThinPro tools. For formatting, do a web search for

QDate::toString. If left blank, a locale-specific string is

usually used.

root/time/dateTimeFormatShort

An optional way to override the short date&time format used in

various ThinPro tools. For formatting, do a web search for

QDate::toString. If left blank, a locale-specific string is

usually used.

root/time/hideCountries

A semicolon-separated list of countries that you want hidden in

the time zone selection GUI.

root/time/hideMap

If set to 1, the map is not drawn. This might be preferable in

instances where boundaries are in dispute.

root/time/hideWinZones

A semicolon-separated list of Windows-format time zones, such

as “(UTC+2:00) Tripoli,” that you want hidden in the time zone

selection GUI.

root/time/hideZones

A semicolon-separated list of Linux-format time zones, such as

“America/Denver”, that you want hidden in the time zone

selection GUI.

root/time/timeFormatLong

An optional way to override the long time format used in various

ThinPro tools. For formatting, do a web search for

QDate::toString. If left blank, a locale-specific string is

usually used.

root/time/timeFormatShort

An optional way to override the short time format used in various

ThinPro tools. For formatting, do a web search for

QDate::toString. If left blank, a locale-specific string is

usually used.

root/time/timezone

Sets the time zone. Time zones should be specified as defined by

Linux Timezone in the Date and Time tool in Control Panel, and

they should be in the following format:

<region>/<subregion>

root/time/use24HourFormat

If set to -1, the system chooses the format automatically

according to the locale. If set to 0, the a.m./p.m. format is used. If

set to 1, the 24-hour format is used.

160 Appendix D Registry keys

Registry key

Description

root/time/useADDNSTimeServers

If set to 1, the thin client will attempt to set the time zone via the

Active Directory domain controllers auto-discovered on the local

network. It does this via the following DNS query for SRV records:

_ldap._tcp.dc._msdcs.domain.

root/time/useDHCPTimezone

If set to 1, the thin client will attempt to set the time zone via

DHCP. To properly set the time zone via this registry key, ensure

that the DHCP server for the thin client forwards the tcode DHCP

tag (which is usually tag 101, although 100 and 2 can work also).

root/time/useNTPServers

If set to 1, the use of NTP time servers to synchronize the thin

client clock is enabled. If this is enabled, ensure that an NTP

server is specified via DHCP or via NTPServers.

 

touchscreen

 

Registry key

Description

root/touchscreen/beep

Defines whether the thin client beeps when the touch screen is

used.

root/touchscreen/calibrated

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/touchscreen/enabled

If set to 1, touch input is enabled.

root/touchscreen/maxx

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/touchscreen/maxy

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/touchscreen/minx

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/touchscreen/miny

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/touchscreen/port

Specifies the port that is connected to the touch screen.

root/touchscreen/swapx

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/touchscreen/swapy

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/touchscreen/type

Specifies the controller type of the touch screen.

translation

 

Registry key

Description

root/translation/coreSettings/localeMapping/

These are internal keys used to provide the text string next to the

<LanguageCode>

appropriate language on the language selector. These keys

should not need to be modified.

root/translation/coreSettings/localeSettings

Sets the locale for the thin client. This locale will also be

forwarded to the remote connection. Valid locales are en_US

touchscreen 161

Registry key

Description

(English), de_DE (German), es_ES (Spanish), fr_FR (French),

ru_RU (Russian), ja_JP (Japanese), ko_KR (Korean), zh_CN

(Simplified Chinese), and zh_TW (Traditional Chinese).

root/translation/gui/LocaleManager/name

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/translation/gui/LocaleManager/status

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/translation/gui/LocaleManager/title

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/translation/gui/LocaleManager/widgets/

Controls the state of the locale setting widget in the Language

localeSettings

tool. If set to active, the widget is visible in the UI and the user

can interact with it. If set to inactive, the widget is hidden. If

set to read-only, the widget is visible in the read-only state.

 

usb-update

 

Registry key

Description

root/usb-update/authentication

If set to 1, an administrator password is required to do USB

updates.

root/usb-update/enable

If set to 1, USB update auto-detection is enabled.

root/usb-update/height

Sets the height of the USB Update window in pixels.

root/usb-update/searchMaxDepth

Sets the depth of subdirectories to be searched for updates.

Setting a high search depth can cause delays on USB flash drives

that have thousands of directories.

root/usb-update/width

The width of the USB Update window in pixels.

users

 

Registry key

Description

root/users/root/enablePassword

If enabled, logins to the local root administrator account are

enabled. If disabled, only Active Directory administrators can

change the thin client to administrator mode.

root/users/root/password

Sets the administrator password. If empty, administrator mode is

locked.

root/users/root/timeout

Specifies the idle timeout (in minutes) after which administrator

mode will be terminated. If set to 0 or negative, administrator

mode will never be automatically terminated.

root/users/user/SSO

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/users/user/WOL

If set to 1, Wake On LAN (WOL) is enabled.

root/users/user/XHostCheck

If set to 1, only the systems listed under root/users/user/

xhosts are allowed to remotely control the thin client.

162 Appendix D Registry keys

Registry key

Description

root/users/user/apps/hptc-ad-change-password/

If set to 1, the Change Domain Password Control Panel item is

authorized

accessible by end users.

root/users/user/apps/hptc-ad-mgr/authorized

If set to 1, the Active Directory Control Panel item is accessible by

end users.

root/users/user/apps/hptc-agent-mgr/

If set to 1, the HPDM Agent Control Panel item is accessible by

authorized

end users.

root/users/user/apps/hptc-auto-update/

If set to 1, the Automatic Update Control Panel item is accessible

authorized

by end users.

root/users/user/apps/hptc-background-mgr/

If set to 1, the Background Manager Control Panel item is

authorized

accessible by end users.

root/users/user/apps/hptc-cert-mgr/authorized

If set to 1, the Certificate Manager Control Panel item is

accessible by end users.

root/users/user/apps/hptc-compatibility/

If set to 1, the Compatibility Check Control Panel item is

authorized

accessible by end users.

root/users/user/apps/hptc-component-mgr/

If set to 1, the Component Manager Control Panel item is

authorized

accessible by end users.

root/users/user/apps/hptc-config-wizard/

If set to 1, the Initial Setup Wizard Start menu item is accessible

authorized

by end users.

root/users/user/apps/hptc-connection-wizard/

If set to 1, Create a Connection is accessible by end users.

authorized

root/users/user/apps/hptc-control-panel/

If set to 1, Control Panel is accessible by end users.

authorized

root/users/user/apps/hptc-date-mgr/authorized

If set to 1, the Date and Time Control Panel item is accessible by

end users.

root/users/user/apps/hptc-dhcp-mgr/authorized

If set to 1, the DHCP Options Control Panel item is accessible by

end users.

root/users/user/apps/hptc-display-prefs/

If set to 1, the Display Control Panel item is accessible by end

authorized

users.

root/users/user/apps/hptc-easy-update/

If set to 1, the Easy Update Control Panel item is accessible by

authorized

end users.

root/users/user/apps/hptc-factory-reset/

If set to 1, the Factory Reset Control Panel item is accessible by

authorized

end users.

root/users/user/apps/hptc-firewalld-mgr/

If set to 1, the Firewall Manager Control Panel item is accessible

authorized

by end users.

root/users/user/apps/hptc-i18n-mgr/authorized

If set to 1, the Language Control Panel item is accessible by end

users.

root/users/user/apps/hptc-ibus-mgr/authorized

If set to 1, the Ibus Input Method Control Panel item is accessible

by end users.

root/users/user/apps/hptc-imprivata-mgr/

If set to 1, the Imprivata Setup Control Panel item is accessible by

authorized

end users.

root/users/user/apps/hptc-keyboard-layout/

If set to 1, the Keyboard Layout Control Panel item is accessible

authorized

by end users.

root/users/user/apps/hptc-kiosk/authorized

If set to 1, Connection Manager is accessible by end users.

root/users/user/apps/hptc-licenses/authorized

If set to 1, HP License Agreement is accessible by end users.

 

users 163

Registry key

Description

root/users/user/apps/hptc-mixer/authorized

If set to 1, the Sound Control Panel item is accessible by end

users.

root/users/user/apps/hptc-mouse/authorized

If set to 1, the Mouse Control Panel item is accessible by end

users.

root/users/user/apps/hptc-network-mgr/

If set to 1, the Network Manager Control Panel item is accessible

authorized

by end users.

root/users/user/apps/hptc-power-mgr/

If set to 1, the Power Manager Control Panel item is accessible by

authorized

end users.

root/users/user/apps/hptc-printer-mgr/

If set to 1, the Printers Control Panel item is accessible by end

authorized

users.

root/users/user/apps/hptc-regeditor/

If set to 1, Registry Editor is accessible by end users.

authorized

root/users/user/apps/hptc-restore/authorized

If set to 1, the Snapshots Control Panel item is accessible by end

users.

root/users/user/apps/hptc-scep-mgr/authorized

If set to 1, the SCEP Manager Control Panel item is accessible by

end users.

root/users/user/apps/hptc-security/authorized

If set to 1, the Security Control Panel item is accessible by end

users.

root/users/user/apps/hptc-serial-mgr/

If set to 1, the Serial Manager Control Panel item is accessible by

authorized

end users.

root/users/user/apps/hptc-shortcut-mgr/

If set to 1, the Keyboard Shortcuts Control Panel item is

authorized

accessible by end users.

root/users/user/apps/hptc-snipping-tool/

If set to 1, the Snipping Tool Start menu item is accessible by end

authorized

users.

root/users/user/apps/hptc-sshd-mgr/authorized

If set to 1, the SSHD Manager Control Panel item is accessible by

end users.

root/users/user/apps/hptc-switch-admin/

If set to 1, Switch to Administrator/User is accessible by end

authorized

users.

root/users/user/apps/hptc-sysinfo/authorized

If set to 1, System Information is accessible by end users.

root/users/user/apps/hptc-task-mgr/authorized

If set to 1, the Task Manager Start menu item is accessible by end

users.

root/users/user/apps/hptc-text-editor/

If set to 1, the Text Editor Start menu item is accessible by end

authorized

users.

root/users/user/apps/hptc-thinstate/

If set to 1, theThinState Control Panel item is accessible by end

authorized

users.

root/users/user/apps/hptc-touchscreen/

If set to 1, the Touch Screen Control Panel item is accessible by

authorized

end users.

root/users/user/apps/hptc-update/authorized

If set to 1, Check for Updates is accessible by end users.

root/users/user/apps/hptc-usb-mgr/authorized

If set to 1, the USB Manager Control Panel item is accessible by

end users.

root/users/user/apps/hptc-user-rights/

If set to 1, the Customization Center Control Panel item is

authorized

accessible by end users.

root/users/user/apps/hptc-vncshadow/

If set to 1, the VNC Shadow Control Panel item is accessible by

authorized

end users.

 

164 Appendix D Registry keys

Registry key

Description

root/users/user/apps/hptc-wlsstat/authorized

If set to 1, Wireless Statistics is accessible by end users.

root/users/user/apps/hptc-xen-general-mgr/

If set to 1, the Citrix general settings are accessible by end users.

authorized

root/users/user/apps/hptc-xterm/authorized

If set to 1, X Terminal is accessible by end users.

CAUTION: Enabling X terminal access is a security risk and is not

recommended in a production environment. The X terminal

should only be enabled for use in debugging a protected, non-

production environment.

root/users/user/desktopScaling

Specifies the percentage to increase or decrease the size of

desktop elements. If set to 100 (default), standard scaling is used.

If set to 50, half the size of standard scaling is used. If set to 200,

double the size of standard scaling is used.

root/users/user/enablePassword

If enabled, logins to the local shared account user are enabled.

root/users/user/hideDesktopPanel

If set to 1, desktop panels such as the taskbar are not started or

shown in the desktop.

root/users/user/kioskMode

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/users/user/launchConnectionManager

If set to 1, Connection Manager launches at system startup.

root/users/user/rightclick

If set to 1, the right-click menu for the desktop is enabled.

root/users/user/ssoconnectiontype

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/users/user/switchAdmin

If set to 1, switching to administrator mode is enabled.

root/users/user/theme

Reserved for future use.

root/users/user/xhosts/<UUID>/xhost

Specifies the IP address or hostname of a system that will be

allowed to remotely control the thin client when XHostCheck is

enabled.

 

vncserver

 

Registry key

Description

root/vncserver/coreSettings/enableVncShadow

If set to 1, the VNC shadowing server for the thin client is enabled.

root/vncserver/coreSettings/

Sets the notification message that is shown to the user when

userNotificationMessage

someone is attempting to connect to the thin client using VNC.

root/vncserver/coreSettings/

If set to 1, only a localhost or loopback address is allowed for VNC

vncAllowLoopbackOnly

connections.

root/vncserver/coreSettings/

If set to 1, Num Lock is on by default. If set to 0, Num Lock is off by

vncDefaultNumLockStatus

default.

root/vncserver/coreSettings/

If set to 1, a timeout is applied to the notification dialog that is

vncNotifyShowTimeout

shown to the user when someone is attempting to connect to the

thin client using VNC.

root/vncserver/coreSettings/vncNotifyTimeout

Sets the timeout in seconds for the notification dialog that is

shown to the user when someone is attempting to connect to the

thin client using VNC.

vncserver 165

Registry key

Description

root/vncserver/coreSettings/vncNotifyUser

If set to 1, a notification is shown to the user when someone is

attempting to connect to the thin client using VNC.

root/vncserver/coreSettings/vncPassword

Sets the password for VNC shadowing. The key

vncUsePassword must also be enabled.

root/vncserver/coreSettings/vncReadOnly

If set to 1, VNC shadowing will operate in view-only mode.

root/vncserver/coreSettings/

If set to 1, VNC requests are refused automatically if the user does

vncRefuseInDefault

not interact with the notification dialog before the timeout.

root/vncserver/coreSettings/vncStopButton

If set to 1, an always-on-top button is shown on the left corner of

the screen. Selecting that button disconnects the VNC session.

root/vncserver/coreSettings/

If set to 1, VNC settings take effect immediately after being

vncTakeEffectRightNow

modified.

root/vncserver/coreSettings/vncUseHTTP

If set to 1, HTTP port 5800 is open for VNC connections.

root/vncserver/coreSettings/vncUsePassword

If set to 1, the password specified in vncPassword is required

for VNC shadowing.

root/vncserver/coreSettings/vncUseSSL

If set to 1, SSL is used for VNC connections.

root/vncserver/gui/VNCShadowManager/name

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/vncserver/gui/VNCShadowManager/status

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/vncserver/gui/VNCShadowManager/title

This registry key is either used internally or reserved for future

use. The value should not be changed.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the Enable VNC Shadow widget in the VNC

enableVncShadow

Shadow tool. If set to active, the widget is visible in the UI and

the user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the User Notification Message widget in the

userNotificationMessage

VNC Shadow tool. If set to active, the widget is visible in the UI

and the user can interact with it. If set to inactive, the widget

is hidden. If set to read-only, the widget is visible in the read-

only state.

root/vncserver/gui/vncAllowLoopbackOnly

Controls the state of the Allow Loopback Connections Only

widget in the VNC Shadow utility. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the VNC Show Timeout for Notification

vncNotifyShowTimeout

widget in the VNC Shadow tool. If set to active, the widget is

visible in the UI and the user can interact with it. If set to

inactive, the widget is hidden. If set to read-only, the

widget is visible in the read-only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the numerical widget in the VNC Shadow

vncNotifyTimeout

tool. If set to active, the widget is visible in the UI and the user

can interact with it. If set to inactive, the widget is hidden. If

set to read-only, the widget is visible in the read-only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the VNC Notify User to Allow Refuse widget

vncNotifyUser

in the VNC Shadow tool. If set to active, the widget is visible in

 

166 Appendix D Registry keys

Registry key

Description

the UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the Set Password widget in the VNC Shadow

vncPassword

tool. If set to active, the widget is visible in the UI and the user

can interact with it. If set to inactive, the widget is hidden. If

set to read-only, the widget is visible in the read-only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the VNC Read Only widget in the VNC

vncReadOnly

Shadow tool. If set to active, the widget is visible in the UI and

the user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the Refuse connections in default widget in

vncRefuseInDefault

the VNC Shadow tool. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/vncserver/gui/vncStopButton

Controls the state of the VNC Stop Shadow button widget in the

VNC Shadow utility. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the Re-set VNC server right now widget in

vncTakeEffectRightNow

the VNC Shadow tool. If set to active, the widget is visible in the

UI and the user can interact with it. If set to inactive, the

widget is hidden. If set to read-only, the widget is visible in the

read-only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the VNC Use HTTP Port 5800 widget in the

vncUseHTTP

VNC Shadow tool. If set to active, the widget is visible in the UI

and the user can interact with it. If set to inactive, the widget

is hidden. If set to read-only, the widget is visible in the read-

only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the VNC Use Password widget in the VNC

vncUsePassword

Shadow tool. If set to active, the widget is visible in the UI and

the user can interact with it. If set to inactive, the widget is

hidden. If set to read-only, the widget is visible in the read-

only state.

root/vncserver/gui/VNCShadowManager/widgets/

Controls the state of the VNC Use SSL widget in the VNC Shadow

vncUseSSL

tool. If set to active, the widget is visible in the UI and the user

can interact with it. If set to inactive, the widget is hidden. If

set to read-only, the widget is visible in the read-only state.

 

zero-login

 

Registry key

Description

root/zero-login/buttons/configure/authorized

If set to 1, the Configure button is available in the login or Smart

Zero credentials dialog box.

root/zero-login/buttons/info/authorized

If set to 1, the System Information button is available in the login

or Smart Zero credentials dialog box.

zero-login 167

Registry key

Description

root/zero-login/buttons/keyboard/authorized

If set to 1, the Keyboard Layout selection is available in the login

or Smart Zero credentials dialog box.

root/zero-login/buttons/locale/authorized

If set to 1, the Locale selection is available in the login or Smart

Zero credentials dialog box.

root/zero-login/buttons/mouse/authorized

If set to 1, the Mouse selection is available in the login or Smart

Zero credentials dialog box.

root/zero-login/buttons/onscreenKeyboard/

If set to 1, the on-screen keyboard option is available in the login

authorized

or Smart Zero credentials dialog box.

root/zero-login/buttons/power/authorized

If set to 1, the Power button is available in the login or Smart Zero

credentials dialog box.

root/zero-login/buttons/poweroff/authorized

If set to 1, the Poweroff option is available in the login or Smart

Zero credentials dialog box.

root/zero-login/buttons/reboot/authorized

If set to 1, the Reboot option is available in the login or Smart

Zero credentials dialog box.

root/zero-login/buttons/show/authorized

If set to 1, buttons are displayed in the login or Smart Zero

credentials dialog box.

root/zero-login/buttons/sleep/authorized

If set to 1, the Sleep option is available in the login or Smart Zero

credentials dialog box.

root/zero-login/buttons/touchscreen/

If set to 1, the Touchscreen selection is available in the login or

authorized

Smart Zero credentials dialog box.

NOTE: The root/touchscreen/enabled key must also be

set.

 

168 Appendix D Registry keys

Index

A

Active Directory

53

add-ons

1

administrator mode

3

audio redirection

RDP

26

VMware Horizon View

32

B

Background Manager

61

C

Certificate Manager

53

certificates

installing

53

VMware Horizon View

33

Citrix

HP True Graphics

38

settings

13

settings, general

15

client profile

adding files

69

adding symbolic link

70

certificates

69

customization

68

loading

68

registry settings

69

saving

70

Component Manager

50

connections

advanced settings

10

configuration

9

hiding

61

Control Panel

Active Directory

53

Background Manager

61

Component Manager

50

Customization Center

61

Date and Time

45

DHCP Option Manager

49

Display

60

Easy Update

53

Factory Reset

45

Keyboard Shortcuts

59

Language

61

lbus

59

Mouse

59

Network

45

overview

45

Power Manager

45

SCEP Manager

51

Security 51

Serial Manager

60

Snapshots

45

Snipping Tool

43

Sound

60

SSHD Manager

54

Task Manager

43

Text Editor

43

ThinState. See HP ThinState

Touch Screen

59

utilities, hiding

61

VNC Shadow

58

Wireless Statistics

43

X Terminal

43

custom connections

37

D

date and time settings

45

device redirection

RDP

25

VMware Horizon View

32

DHCP options

49

display management

60

display profiles

60

E

Easy Update

53

F

factory reset

45

finding more information

1

 

G

getting started 1

GUI

Connection Manager (ThinPro only) 10

desktop 7

overview

7

taskbar

8

H

HP Device Manager. See HPDM Agent

See also remote management

service

HP Smart Client Services

installing 64

overview 64

Profile Editor. See Profile Editor

supported operating systems 64

See also remote management

service

HP True Graphics 38

HPDM Agent 54

I

image updates 1 imaging. See HP ThinState

K

keyboard shortcuts 59 kiosk mode 11

L

language settings 61

lbus 59

M

mass storage redirection RDP 25

MMR. See multimedia redirection mouse settings 59 multimedia redirection

RDP 24

N

network settings

accessing 45

DNS 48

IPSec 49

VPN 49

wired 46

wireless 46

Index 169

O

OS configuration, choosing

2

P

parallel printer configuration

71

passwords, change

51

power management settings

45

Power Manager

45

printer configuration

71

printer redirection

RDP

26

printers

60

Profile Editor

68

R

RDP

audio redirection

26

device redirection

25

mass storage redirection

25

multi-monitor sessions

24

multimedia redirection

24

printer redirection 26

RemoteFX

24

settings, per-connection

19

smart card redirection

27

USB redirection

25

registry keys

79

remote management service,

choosing

3

RemoteFX

24

S

SCEP Manager

51, 53

screen saver settings

45

Secure Shell

36

security settings

51

Serial Manager

60

serial printer configuration

71

Sleep state

45

smart card redirection

RDP

27

VMware Horizon View

32

Smart Zero. See OS configuration

snapshots 45

Snipping Tool

43

sound settings

60

SSHD Manager

54

system diagnostics 73

T

Task Manager 43

Telnet

37

X

text editor

43

X Terminal 43

thin clients

XDMCP 35

updating. See updating thin

clients

ThinPro. See OS configuration

ThinState. See HP ThinState

touch screen settings

59

troubleshooting

73

network connectivity

73

using system diagnostics

73

U

updating thin clients

broadcast update

66

DHCP tagging update

66

DNS alias update

67

manual update

67

USB redirection

RDP

25

USB Manager

60

VMware Horizon View

32

user mode

3

V

VMware Horizon View

audio redirection

32

certificates

33

changing protocols

33

device redirection

32

keyboard shortcuts

31

multi-monitor sessions

31

settings, per-connection

27

smart card redirection

32

USB redirection

32

webcam redirection 33

VNC Shadowing

58

W

Web Browser

settings, per-connection

35

webcam redirection

VMware Horizon View

33

websites

Citrix support

1

HP support

1

Microsoft support

1

VMware support

1

wireless statistics

43

170 Index

Leave a Reply 0

Your email address will not be published. Required fields are marked *


This site uses Akismet to reduce spam. Learn how your comment data is processed.