wlx.ini and $MAC.ini File Parameters Only

wlx.ini and $MAC.ini File s Only This chapter provides the supported parameters that you can use in a wlx.ini file and in a $MAC.ini file. Caution s in the following sections can only be used in a wlx.ini file or $MAC.ini file; they cannot be used in a {username}.ini file. Important The underlined value for a parameter is the default value. Some parameters also have options shown within brackets [ ]. If an option has an underlined value (default), that option and default value will automatically be used with the parameter (options without underlined values can also be used if you want to, but are not automatically used with the parameter). In addition, when using parameters and options, you can leave the default value or change it to another value shown. For example, in the following case where: X={yes, no} [Option1={0, 1}] [Option2={1, 2, 3, 4}] If you use X, then Option1 and its default value 0 will automatically be used as Option1 has an underlined value (default of 0). You can still use Option2 if you want to, however, Option2 is not automatically used with the parameter as Option2 does not have a default (underlined) value. To increase usability (such as relation to thin client dialog box equivalents), the supported parameters are separated into the following categories: wlx.ini and $MAC.ini File General Settings, page 2 wlx.ini and $MAC.ini File Peripheral Settings, page 10 Desktop Keyboard Shortcuts, page 11 wlx.ini and $MAC.ini File Connection Settings, page 13 wlx.ini and $MAC.ini File Custom GNOME Settings, page 18 1

wlx.ini and $MAC.ini File General Settings wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File General Settings The following table describes the parameters that you can use to configure general settings. Default values are underlined. You can use the parameters in a wlx.ini file or a $MAC.ini file. Table 1: General Settings: wlx.ini and $MAC.ini Files ActiveDirectoryServer=<Active Directory Server IP> AudioMute={no, yes} AudioVolume=<value of 0 to 100> ChangeAdminPassword=<base-64 encoded password> ChangeGuestPassword=<base-64 encoded password> ChangeRootPassword=<base-64 encoded password> ChangeThinUserPassword=<base-64 encoded password> Cisco.Config.DisableDualVLAN={no yes} ActiveDirectoryServer Active Directory Server IP for Domain Login to the client. For example: ActiveDirectoryServer=10.150.124.150 Specifies whether to mute the audio. Specifies the volume level. Values of 0 to 100 provide more exact volume level. Specifies the new password for the user with administrative privileges. You can use any third-party base-64 encoder/decoder. Specifies the new password for the guest user. You can use any third-party base-64 encoder/decoder. Specifies the new password for the root user. You can use any third-party base-64 encoder/decoder. Specifies the new password for the thin user. You can use any third-party base-64 encoder/decoder. By default, Cisco VXME operates in Dual VLAN mode (for more information, see the Deployment Guide for Cisco Virtualization Experience Media Engine). If you do not plan to use Dual VLAN configuration, use this parameter to disable Dual VLAN detection and enable faster startup for the Cisco VXC 6215. Valid values are: Yes If Cisco.Config.DisableDualVLAN=yes, Cisco VXME skips Dual VLAN detection and starts in single VLAN mode. No If Cisco.Config.DisableDualVLAN=no or has any other value (including invalid values), or the parameter is not present, the client applies the default behavior (Cisco VXME attempts to detect and configure the Dual VLAN at startup). DefaultUser=<username> Specifies the default sign-on user. See also AutoLogin. 2

wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File General Settings Disablemenubar={no, yes} DisableReadyMode={no, yes} Yes/no option to disable top full screen drop-down menu bar. Default is yes. Specifies whether to disable the ready mode. When a device is shut down and ready mode is enabled, the device logs out of the session, places the power button LED in a state of off, and then goes into Suspend mode. If a user presses the power button again, the device wakes up immediately for the user to log in. The ready mode functionality can be enabled using DisableReadyMode=no. Example: DisableReadyMode=no will enable ReadyMode functionality. DisableReadyMode=yes will disable ReadyMode functionality. 3

wlx.ini and $MAC.ini File General Settings wlx.ini and $MAC.ini File s Only Enable802={no, yes} Authentication={MD5, TLS, FAST, TunnledTLS, PEAP} [Username=<username>] [Password=<password>] [PromptPassword={no, yes}] [Identity=<username>] [InnerAuthentication={GTC, MSCHAPv2, PAP, CHAP, MD5}] [UserCertificate=<certificate name>] [CACertificate=<certificate name>] [PrivateKey=<certificate name>] [PrivateKeyPassword=<password>] [PACProvisioning={Anonymous, Authenticated, Both}] [PACFile=<filename>] [PeapVersion={Auto,0,1}] Important: Put the parameters on the same line. This is the generic syntax of INI parameter for 802.1x settings for a Wired connection. usage will be based on the use case and EAP method chosen. For example: If you use Active Directory login to the thin client, user credentials are not required in the ini. Enable802 Default value is no. Yes/no to enable or disable 802.1x settings for Auto Eth0 Wired connection. Yes Enables 802.1x settings for Wired network. No Disables 802.1x settings for Wired network. Authentication The authentication method (EAP method) to be chosen for 802.1x. Username Username used for inner authentication. Example: In an Active Directory environment this is the Active Directory username used for MSCHAPv2 exchange. Password The inner authentication MSCHAP password. In an Active Directory environment this is the Active Directory user password used for MSCHAPv2 exchange. PromptPassword Default value is no. Yes/no option to prompt or not prompt for a password every time for 802.1x authentication when the network comes up. Default value is "no". Identity The identity/username you chose while creating the client/user certificate. Used for TLS authentication. InnerAuthentication The second EAP type inside the PEAP or TLS tunnel. Used only in case of PEAP and Tunneled TLS authentications. UserCertificate The client/user certificate name. Used for TLS authentication. CACertificate Root CA certificate name for authentication. PrivateKey Client/user private key certificate. Used for TLS authentication. PrivateKeyPassword The password given during the creation of a user/client certificate. This should be a base64 encoded password. PeapVersion Default value is Auto. PEAP protocol version. PACProvisioning Automatic PAC Provisioning for FAST authentication. PACFile PAC File for FAST authentication. Example: Below is an example ini for 802.1x PEAP MSCHAPv2 authentication in the case of a domain user login to a thin client. Enable802=yes Authentication=PEAP InnerAuthentication=MSCHAPv2 PeapVersion=Auto PromptPassword=no CACertificate=scep 4

wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File General Settings EnableGKey={yes, no} Fullscreenmode={no, yes} IdleAction.Enable={no, yes} [IdleAction.TimeOut=<value of 0 to 1440>] [IdleAction.Action=<Any valid Command>] ImportCerts={no, yes} [Certs=<list of certificate names>] InstallAddons=<name of add-on> OR NewAddons= <name of add-on> Default is yes. Yes/no option to enable G key reset. G key reset is supported for Privilege=High. Yes/no option to enable full screen mode (when selected it will disable the Desktopsize option). Configures the action of the device for an idle state. If IdleAction.Enable=yes and the device is idle for the IdleAction.Timeout (in minutes from 0 to 1440), then the device executes the command that is specified in the IdleAction.Action parameter. By default, IdleAction.Enable=no. Example: IdleAction.Enable=yes IdleAction.TimeOut=30 IdleAction.Action=/sbin/reboot Indicates whether to import certificates from the server. Certs is a list of certificate names (the names must be separated by a semicolon). Example: ImportCerts=yes Certificates must be placed in the /wlx/certs directory. Certs=Cert1.cer;Cert2.crt;Cert3.pem;Cert4.der The certificates must be.crt,.pem, or any valid certificate type. Specifies add-ons to install. Use comma-separated add-on names. You can use InstallAddons= or NewAddons= for the parameter name (the names are interchangeable). 5

wlx.ini and $MAC.ini File General Settings wlx.ini and $MAC.ini File s Only MgmtDiscoveryMethod={SRV, CNAME, HOSTNAME, UI, DHCP, STATIC, DEFAULT} Default is the following order SRV, CNAME, HOSTNAME, UI, DHCP (if any of the methods specified in the INI file fails). Specifies the automatic discovery methods you want to use for the automatic discovery of a thin client after failure of thin client discovery. Use any or all of the following: SRV - DNS SRV Record (Dynamic Discovery) Allows devices to use the DNS SRV record lookup method to discover a Cisco VXC Manager Server. CName - DNS Alias Allows devices to use the DNS Alias method to discover a Cisco VXC Manager Server. Hostname - DNS Name Record (Dynamic Discovery) Allows devices to use the DNS Hostname lookup method to discover a Cisco VXC Manager Server. UI - Allows devices to use the UI entries to discover a Cisco VXC Manager Server. DHCP Option Tags - (Dynamic Discovery) Allows devices to use DHCP option tags to discover a Cisco VXC Manager Server. Static - Allows devices to use a static location to discover a Cisco VXC Manager Server. When the Static option is used, the MgmtDiscoveryMethod parameter should be used with a valid Fully Qualified Domain Name or IP Address. Default - The Default method to discover a Cisco VXC Manager Server is used when none is specified or if any of the methods mentioned in this section fails; then the default method is used which is the following dicovery order {SRV, CNAME, HOSTNAME, UI, DHCP}. PowerButtonAction={interactive, reboot, restart, halt, shutdown, sleep, logoutandsleep, none, nothing} RemoveAddons=<name of add-on> RootPath=<root path> Default is interactive. Specifies the action the thin client takes when the power button is pressed. interactive-presents an option window to the user reboot or restart-reboots the device halt or shutdown-shuts down the device sleep-puts the device into sleep mode logoutandsleep-logs out the device and puts the device into sleep mode none or nothing-no action (does nothing) Specifies add-ons to uninstall. Use comma-separated add-on names. The thin client uses this root path to access files on the central file server (not applicable with Cisco VXC Manager). The directory name /wlx is appended to the root path entry before use. 6

wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File General Settings ScepClientCertSettings=CertName=<Name of Certificate file> URL=<SCEP server URL> [ChallengePassword=<Password>] CADN=<CA Distinguished Name> [AutoEnroll={yes, no}] CertName Name of certificate to be enrolled using SCEP URL SCEP server URL ChallengePassword Certificate Enrollment Challenge Password CADN CA Distinguished Name. AutoEnroll Yes/No parameter to enable or disable certificate automatic enrollment. For example: ScepClientCertSettings =CertName=ScepCertOne URL=http://192.168.0.10/certssrv/mscep.dll ChallengePassword=C35F78367BA20216 CADN=scepca-root-ca 7

wlx.ini and $MAC.ini File General Settings wlx.ini and $MAC.ini File s Only ScreenSaver=<value of 0 to 180> [LockTerminal={no, yes}] [SoftSaver={no, yes}] [LogoutButton={no, yes}] [Type={1, 2, name[,name...]}] [CycleDelay=<value of 0 to 180>] [Image=<filename>] [Layout={none, centered, wallpaper, scaled, stretched}] Default is 5 (minutes). Specifies to put the thin client in a screensaver state when the time limit for inactivity in minutes (delay before starting) is reached. 0 turns off the screensaver. Put the parameters on the same line. For example: ScreenSaver=5 LockTerminal=yes SoftSaver=yes Type=coral,drift,hypertorus,interaggregate,pipes CycleDelay=5 LockTerminal-Specifies whether to lock the client when the screen saver is activated. no-disabled yes-puts the thin client in a LOCK state when the screen saver is activated. The user is prompted with an unlock dialog box to enter the sign-on password to unlock the thin client. SoftSaver-Specifies whether the thin client runs a soft saver. Soft savers are available only when the optional SCREENSAVER-THEMES add-on is installed. no-displays a blank screen yes-runs a graphical display LogoutButton-Displays a Logout button in the unlock dialog box if LockTerminal=yes Type-Specifies which display programs should run if SoftSaver=yes Names are preferred over the legacy numbers. 1=fadeplot; 2=rocks CycleDelay-When more than one Type name is specified, CycleDelay specifies how many minutes each Type name should run. Image-Specifies the filename to use for the screen saver (this option is ignored in cases of backward compatibility). Layout-Specifies the layout to use for the screen saver (this option is ignored in cases of backward compatibility). For a complete list of screensaver names, install the SCREENSAVER-THEMES add-on and then search in /usr/share/applications/screensavers. The filenames, without the.desktop suffix, are the available screensaver names. The Name entry in each.desktop file provides the value that is displayed in the Screensaver configuration GUI application; and the Comment entry provides a brief description. 8

wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File General Settings SecureMode={neverconnect, warnbefore, donotverify} TerminalName=<name of thin client> TimeFormat={"12-hour format", "24-hour format"} TimeServer=<host address>[;<host address>] TimeZone=<zone value> [ManualOverride={no, yes}] Update.Mode={Both, Image, Addons, None} Update.Preserve_changes={no, yes} Default is warnbefore. Specifies how to control connection security mode preferences. Value and : neverconnect - Never connect to untrusted servers warnbefore - Warn before connecting to untrusted servers. donotverify - Do not verify server identity certificates. Specifies the name of the thin client comprising a 15-character string. Specifies the time format to use (how the clock on the desktop panel is displayed). By default, the local format is used. Specifies the SNTP time servers to use for time retrieval. You can designate one or two (as shown in the parameter example) Network Time Protocol servers (separated by a semicolon). The client synchronizes the time of day to the servers at boot time, and keeps the time in sync with the servers during operation. Specifies the time zone if the zone is unspecified on the thin client or is used with ManualOverride. ManualOverride specifies whether to override the thin client System Preference Menu setting with this TimeZone setting. For the complete list of TimeZone values, see Timezone Values. Specifies the update mode for image upgrades. Value and Both-Updates image and add-ons Image-Updates image only Addons-Updates add-ons only None-Does not upgrade Specifies whether to preserve changes while upgrading. With update.preserve_changes=no, the thin client does not locally cache configuration settings during an image upgrade. Instead, the thin client erases all existing configurations and applies only the configuration specified in the INI that you use with the upgrade. With update.preserve_changes=yes, the thin client preserves and applies the previous device image configuration settings during the image upgrade. 9

wlx.ini and $MAC.ini File Peripheral Settings wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File Peripheral Settings The following table contains parameters used for configuring peripheral settings such as keyboard, monitor, mouse, printer, and so on (underlined values are defaults). Table 2: Peripheral Settings: wlx.ini and $MAC.ini Files CursorHideDelay=<value of 1 to 60> ForwardPrinters={yes, no} MicMute={no, yes} MicVolume=<value of 0 to 100> NoGrabKeyboard={no, yes} VMWareViewExcludeUSBID={vid<hex number>pid<hex number>,...} Specifies the amount of time to wait before the cursor is hidden (the cursor is hidden after the specified number of seconds). After you move or click the mouse or press any keyboard key, the cursor reappears. Default is yes Specifies whether to forward all available printers for use in the RDP session. This parameter is supported with any direct RDP connection (not supported through VMware View broker). By default, ForwardPrinters is set to yes. For example: ForwardPrinters=yes Specifies whether to mute the microphone volume. Default is 50. Specifies the microphone volume level. Configures keyboard event grabbing in any direct RDP connection session (not supported through VMware View broker). By default, NoGrabKeyboard is set to no. For example: NoGrabKeyboard=yes For VMware View Only Specifies USB devices that are excluded from the VMWare View session in a comma-separated list of vendor IDs and product IDs. For example: VMWareViewExcludeUSBID=vid148fpid2770,vid0x13d3pid3273 This example excludes two USB devices. that there is no space between vid and pid and each device is separated with a comma 10

wlx.ini and $MAC.ini File s Only Desktop Keyboard Shortcuts VMWareViewExcludeUSBFamily={<USB device family>,...} VMWareViewIncludeUSBID={vid<h ex number>pid<hex number>,...} VMWareViewIncludeUSBFamily={< USB device family>,...} For VMware View Only Specifies USB device families that are excluded from the VMWare View session in a comma-separated list. For example: VMWareViewExcludeUSBFamily=bluetooth For VMware View Only Specifies USB devices that are included in the VMWare View session in a comma-separated list of vendor IDs and product IDs. For example: VMWareViewIncludeUSBID=vid148fpid2770,vid0x13d3pid3273 This example includes two USB devices. that there is no space between vid and pid and each device is separated with a comma. For VMware View Only Specifies USB device families that are included in the VMWare View session in a comma-separated list. For example: VMWareViewIncludeUSBFamily=bluetooth Desktop Keyboard Shortcuts Depending on the type of application window you are using (full screen, standard, or seamless), you can use shortcut keys to manage windows. You can disable some of these shortcuts by including the INI parameters listed below in your INI file. By default, every shortcut listed is enabled. (Possible values for each parameter are yes or no.) The keyboard shortcuts listed below are applicable only in the SUSE Linux desktop. The disable INI parameters listed are provided so that you can disable the shortcuts in the SUSE Linux desktop, so that they do not conflict with shortcuts entered in the HVD. Table 3: Desktop Keyboard Shortcuts Press Alt+F4 Ctrl+F4 Alt+F10 Action Close window Close browser window Maximize window INI parameter to disable shortcut Cisco.DisableKeyBinding.Close=yes Cisco.DisableKeyBinding.Close=yes Not applicable 11

Desktop Keyboard Shortcuts wlx.ini and $MAC.ini File s Only Press Alt+F9 Alt+Ctrl+DownArrow Alt Alt+Esc Alt+Shift+Esc Alt+F7 and press an arrow key Alt+F8 and press an arrow key Alt+F5 Ctrl+F2 Alt+DownArrow Alt+Ctrl+Shift+DownArrow Alt+Ctrl+Delete Alt+F1 Ctrl+Esc Windows Key Alt+Space (you can also right-click the window title bar or border, or click the window icon) Action Minimize window Minimize or maximize all windows Mouse modifier (used by default as a mouse modifier) Move focus to next window Move focus to previous window Move window with arrow keys Resize the window Restore maximized window to previous size Switch keyboard focus back to thin client (used by Citrix Linux receiver to bring keyboard focus back to thin client locally) Switch windows using a dialog box Switch panel focus Show Logout option Show Computer Menu window Show Windows start menu Show main panel list when keyboard focus is shifted to the thin client Show window menu INI parameter to disable shortcut Cisco.DisableKeyBinding.Minimize=Yes Cisco.DisableKeyBinding.ShowDesktop=yes Cisco.DisableKeyBinding.MouseButtonModifier=yes Not applicable Not applicable Not applicable Not applicable Not applicable Not applicable Cisco.DisableKeyBinding.SwitchWindows=yes Not applicable Cisco.DisableKeyBinding.RunCommand1=yes Cisco.DisableKeyBinding.PanelMainMenu=yes Cisco.DisableKeyBinding.PanelMainMenu=yes Cisco.DisableKeyBinding.PanelMainMenuList=yes Cisco.DisableKeyBinding.WindowMenu=yes Tip The shortcut keys Alt+DownArrow (allows you to switch windows using a dialog box) and Alt+Ctrl+DownArrow (minimizes or maximizes all windows) are useful for navigating multiple remote sessions without having to log out. 12

wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File Connection Settings wlx.ini and $MAC.ini File Connection Settings The following table describes the parameters that you can use to configure connection settings. Default values are underlined. Table 4: Connection Settings: wlx.ini and $MAC.ini Files AddtoEtcHosts="ip1 FQDN1 aliases1;ip2 FQDN2 aliases2;..." Adds entries to the /hosts file, where aliases are an optional space-separated list of hostnames. 13

wlx.ini and $MAC.ini File Connection Settings wlx.ini and $MAC.ini File s Only AutoLogin={no, yes} [CountDown=<value in seconds>] Yes/no option to automatically log the user in as DefaultUser if no login occurs before the CountDown interval. This is for use at kiosks and other environments where the user logs in without human intervention. Autologin can be canceled by pressing the ESC button. The first time a device reads Autologin, it may stay at the login screen for a few seconds before taking effect. Once doing so, it will automatically log in and all future reboots will autologin with the defined delay. Changing from AutoLogin=yes to AutoLogin=no may require 2 reboots to take effect in some cases. No password is required for automatic login even if the user normally needs a password. SignOn=no and AutoLogin=yes are alternative parameters/ways to provide similar functionality. Caution SignOn=no and AutoLogin=yes should not be used together. In general, use AutoLogin; SignOn=no is being deprecated. AutoLogin=yes logs in as the default user; which may be set via the DefaultUser ini-file parameter; the privilege level is that user's normal privilege level; determined in the same manner as if they had logged in manually. ADVANCED NOTE: Any valid user may be specified; but note that PNA and Active Domain users will not obtain a password first; which may prevent them from accessing the Published Apps or Domain services. If there is no DefaultUser specified in the registry, it will use Guest. that for both SignOn=no and AutoLogin with a short delay, it is quite likely that the login process will proceed before the network is up and the wlx.ini file has been read. This means that changes to the wlx.ini login parameters will not take effect until a logout or reboot. also that changes to the System/DefaultUser or System/PrivLevel registry keys do not automatically adjust the login parameters; that is normally done only after fetching and parsing a wlx.ini file when a network interface comes up. If you need to change the parameters outside that sequence; use the /sbin/configuregdm script to modify the system's login configuration. The wlx.ini will be fetched and processed every time the network comes up; so if the network goes down and is restored during a session, it may affect existing settings (although the login-related settings will not be apparent until the current user logs out). Also note that neither mechanism actually authenticates the user they just verify that the user exists. But both methods, and normal manual login, will fetch and process a $USER.ini file, if one exists, independent of what, if any, authentication mechanism was used. 14

wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File Connection Settings AutoSignoff={no, yes} Disableconnectonce={no, yes} DisableDomain={no, yes} DisableVNC={no, yes} DomainList=<list of Windows domain names> EnableApplianceMode={no, yes} [XenDesktopURL=<URL of Xendesktop>] EnableBanner={no, yes} [BannerMsg=<text description>] EnableSSH={no, yes} Specifies whether to automatically log the user off when all connections are closed. Yes/no option to disable the listing of View desktops after session logout (when an error occurs). Specifies whether to disable the display of a Domain field. The default value depends on the value of the DomainList option. When the DomainList is empty, DisableDomain defaults to yes (the display of a Domain field does not display); otherwise, it defaults to no (the display of a Domain field does display). Default is yes. Specifies whether to disable an installed VNC Server Add-on. Specifies a list of domain names that appear in the login dialog box as options to help users select the domain to use to log in to PNAgent/PNLite servers. After you specify the list, it is saved in nonvolatile memory. Be sure to enclose the domain list in quotation marks if you include spaces. For example: DomainList="North_America, SQA, test-domain" Cisco VXC 6215 devices can be converted to Desktop Appliance mode by enabling the EnableApplianceMode parameter. When enabled, upon system boot the thin client will connect to the XenDesktop server and prompt for XenDesktop login credentials to access the desktop. By default EnableApplianceMode=No. XenDesktopURL specifies the virtual desktop to use when EnableApplianceMode is enabled. For example:- EnableApplianceMode=Yes XenDesktopURL=http://192.168.0.2 EnableBanner Provides a banner description. BannerMsg The text must be enclosed in double quotation marks if it contains spaces or punctuation characters. Yes/no option to enable SSH. 15

wlx.ini and $MAC.ini File Connection Settings wlx.ini and $MAC.ini File s Only EthernetSpeed=[Auto, 100M-F, 100M-H, 10M-F, 10M-H] FileServer=<protocol://><host address> ICAAllowUSB=vid=<hexnumber><space>pid=<hexnumber>,... Default is Auto. Specifies the NIC speed: Auto Auto-negotiates speed with the peer (default). 100M-F is 100 Mb/s Full Duplex. 100M-H is 100 Mb/s Half Duplex. 10M-F is 10 Mb/s Full Duplex. 10M-H is 10 Mb/s Half Duplex. Gigabit Ethernet (1000 Mb/s) is available on hardware that supports it using the Auto value. Specifies a file server from which the device can access files using the specified protocol. If no protocol is specified, FTP is assumed (for example, 192.168.0.1 is understood as ftp://192.168.0.1). Specifies the USB devices that are included for the ICA session (comma separated IDs of USB devices that are included for the ICA session). Important You can use vendor IDs and product IDs together (as shown); or also use only the vendor IDs (that is, not use the product IDs) if you want to include the same vendor ID group of devices regardless of their product ID. The format must be the following: ICAAllowUSB=vid=<hexnumber><space>pid=<hexnumber>,... or ICAAllowUSB=vid=<hexnumber>,... For example: ICAAllowUSB=vid=1234 pid=5678,vid=1234 pid=9876 This example includes two USB devices. that there is a space between vid and pid and each device is separated with a comma. or ICAAllowUSB=vid=1234, vid=5678 This example includes all USB devices that have the same vendor ID regardless of their product ID. Do not use both ICADenyUSB and ICAAllowUSB in the same INI file. By default, all USB devices are allowed. ICAAllowUSB results in a denial of all other devices other than those specified by ICAAllowUSB. ICADenyUSB only denies the specified devices, but allows others. 16

wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File Connection Settings ICADenyUSB=vid=<hexnumber><space>pid=<hexnumber>,... PermitSSHRootLogin={no, yes} RapportSecurePort=<port> RapportServer=<host address>[:port] Specifies the USB devices that are excluded from ICA session (comma separated IDs of USB devices that are excluded from the ICA session). Important You can use vendor IDs and product IDs together (as shown); or also use only the vendor IDs (that is, not use the product IDs) if you want to exclude the same vendor ID group of devices regardless of their product ID. The format must be the following: ICADenyUSB=vid=<hexnumber><space>pid=<hexnumber>,... or ICADenyUSB=vid=<hexnumber>,... For example: ICADenyUSB=vid=1234 pid=5678,vid=1234 pid=9876 This example excludes two USB devices. that there is a space between vid and pid and each device is separated with a comma. or ICADenyUSB=vid=1234, vid=5678 This example excludes all USB devices that have the specified VIDs. Do not use both ICADenyUSB and ICAAllowUSB in the same INI file. By default, all USB devices are allowed. ICAAllowUSB results in a denial of all other devices other than those specified by ICAAllowUSB. ICADenyUSB only denies the specified devices, but allows others. Specifies whether to enable login through SSH as the Linux superuser (root). Default port number is 443. Designates the HTTP(S) secure port used for the Cisco VXC Manager agent. Example: RapportServer=192.168.0.2:80 RapportSecurePort=443 Default port number is 80. Specifies the Cisco VXC Manager Server and optional port to connect to. This can either be a DNS name or IP address, optionally followed by a ":" and a port number. 17

wlx.ini and $MAC.ini File Custom GNOME Settings wlx.ini and $MAC.ini File s Only Seamless={no, yes} VNCAuthTypes={none, vnc} VNCPasswd= {<base-64 encoded password>} VNCPrompt={yes, no} XFontServers=<host address>:<port>[;<host address>:<port>...] Specifies whether to set the default resolution for ICA-published applications to seamless. Set VNCAuthTypes=vnc to enforce the use of a password for remote VNC connection (use the VNCPasswd parameter to specify the password used). If VNCAuthTypes=none, no password is required for the VNC connection. If the VNC-Server Add-on is installed, specifies the password to be entered for the remote VNC connection. Important If no VNCPasswd is specified, the default password is password. Default is yes. Specifies whether to prompt the user before shadowing starts, in which case the user can select to decline or accept VNC shadowing. VNCPrompt=yes means the user is always prompted before shadowing starts. VNCPrompt=no means the user cannot decline or accept shadowing. Specifies the font server for X11 applications. When the font server address is set by the GUI, the GUI has priority, and the parameters from the INI file are ignored. wlx.ini and $MAC.ini File Custom GNOME Settings The following table describes the parameters that you can use to configure Custom GNOME settings. Default values are underlined. You can use the parameters in a wlx.ini file or a $MAC.ini file. 18

wlx.ini and $MAC.ini File s Only wlx.ini and $MAC.ini File Custom GNOME Settings Table 5: Custom GNOME Settings: wlx.ini and $MAC.ini Files Option Applets.Disable.<Privilege Level>=<Name of applets separated by ; > Disables a specified set of applets in the Control Center or Application Browser based on user privilege levels. Values for privilege level are: HighPrivilege Where HighPrivilege is equivalent to the privilege level of a default admin user. LowPrivilege Where LowPrivilege is equivalent to the privilege level of a default thinuser user. Applet names must be separated by a semicolon (;) and Applet names must be the same as the file name of the desktop files from /usr/share/applications/ without the desktop extension. Important Example: The applet file names are case sensitive. Applets.Disable.LowPrivilege=dmlangsel;display-properties; gnome-appearance-properties;devicesettings_wyse-settings; gnome-screenshot;vino-preferences; Applets.Disable.HighPrivilege=dmlangsel;display-properties; gnome-appearance-properties;devicesettings_wyse-settings; gnome-screenshot;vino-preferences; Applets.Enable.<Privilege Level>=<Name of applets separated by ;> Enables a specified set of applets in the Control Center or Application Browser based on user privilege levels. Values for privilege level are: HighPrivilege Where HighPrivilege is equivalent to the privilege level of a default admin user. LowPrivilege Where LowPrivilege is equivalent to the privilege level of a default thinuser user. Applet names must be separated by a semicolon (;) and Applet names must be the same as the file name of the desktop files from /usr/share/applications/ without the desktop extension. Important Example: The applet file names are case sensitive. Applets.Enable.LowPrivilege=display-properties;keyboard 19

wlx.ini and $MAC.ini File Custom GNOME Settings wlx.ini and $MAC.ini File s Only Option NotificationArea.Disable.<Privilege Level>={no, yes} Yes/no option to disable the notification area from the task bar. Values for privilege level are: HighPrivilege Where HighPrivilege is equivalent to the privilege level of a default admin user. LowPrivilege Where LowPrivilege is equivalent to the privilege level of a default thinuser user. Example: NotificationArea.Disable.HighPrivilege=yes TaskBarClockButton.Disable.<Privilege Level>={no, yes} Yes/no option to disable the Clock button from the task bar. Values for privilege level are: HighPrivilege Where HighPrivilege is equivalent to the privilege level of a default admin user. LowPrivilege Where LowPrivilege is equivalent to the privilege level of a default thinuser user. Example: TaskBarClockButton.Disable.LowPrivilege=yes TaskBarDisplaySettingsButton.Disable.<Privilege Level>={no, yes} Yes/no option to disable the Configure Display Settings button from the task bar. Values for privilege level are: HighPrivilege Where HighPrivilege is equivalent to the privilege level of a default admin user. LowPrivilege Where LowPrivilege is equivalent to the privilege level of a default thinuser user. Example: TaskBarDisplaySettingsButton.Disable.HighPrivilege=Yes XFontServers=<host address>:<port>[;<host address>:<port>...] Specifies the font server for X11 applications. When the font server address is set by the GUI, the GUI has priority, and the parameters from the.ini file are ignored. 20